Using modern Nginx redirect to stdout / stderr #170

Workflow file for this run

.github/workflows/rhel_registry_description.yml at cab549e

	name: Red Hat Catalog Description

	on:
	push:
	branches:
	- '[0-9]+.[0-9]+'
	paths:
	- 'Dockerfiles/*/rhel/README.html'
	- 'Dockerfiles/*/README.md'
	- 'Dockerfiles/*/rhel/README.md'
	- '.github/workflows/rhel_registry_description.yml'
	- '.github/scripts/rhel_description.py'
	- '.github/scripts/requirements-rhel-description.txt'
	workflow_dispatch:

	concurrency:
	group: rhel-description-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	env:
	DOCKERFILES_DIRECTORY: "./Dockerfiles"
	API_URL: "https://catalog.redhat.com/api/containers/v1/projects/certification/id/"
	MATRIX_FILE: "build.json"
	PYTHON_REQUIREMENTS_FILE: ".github/scripts/requirements-rhel-description.txt"

	defaults:
	run:
	shell: bash

	permissions:
	contents: read

	jobs:
	init:
	name: Initialize workflow
	runs-on: ubuntu-latest
	permissions:
	contents: read
	outputs:
	components: ${{ steps.components.outputs.list }}
	zabbix_release: ${{ steps.branch_info.outputs.zabbix_release }}

	steps:
	- name: Block egress traffic
	uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
	with:
	disable-sudo: true
	egress-policy: block
	allowed-endpoints: >
	github.com:443
	api.github.com:443

	- name: Checkout repository metadata
	uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	fetch-depth: 1
	sparse-checkout: ${{ env.MATRIX_FILE }}

	- name: Check ${{ env.MATRIX_FILE }} file
	env:
	MATRIX_FILE: ${{ env.MATRIX_FILE }}
	run: \|
	set -Eeuo pipefail

	if [[ ! -f "$MATRIX_FILE" ]]; then
	echo "::error::File $MATRIX_FILE is missing"
	exit 1
	fi

	- name: Get branch info
	id: branch_info
	env:
	GITHUB_REF_NAME: ${{ github.ref_name }}
	run: \|
	set -Eeuo pipefail

	echo "::group::Branch metadata"
	echo "zabbix_release=${GITHUB_REF_NAME//.}"
	echo "::endgroup::"

	echo "zabbix_release=${GITHUB_REF_NAME//.}" >> "$GITHUB_OUTPUT"

	- name: Prepare Zabbix component list
	id: components
	env:
	MATRIX_FILE: ${{ env.MATRIX_FILE }}
	run: \|
	set -Eeuo pipefail

	component_list="$(jq -rc '.components \| map_values(select(.rhel == true)) \| keys' "$MATRIX_FILE")"

	if [[ -z "$component_list" \|\| "$component_list" == "[]" ]]; then
	echo "::warning::No RHEL-enabled components found in $MATRIX_FILE"
	fi

	echo "::group::Zabbix Component List"
	echo "$component_list"
	echo "::endgroup::"

	echo "list=$component_list" >> "$GITHUB_OUTPUT"

	update-description:
	name: Update description (${{ matrix.component }})
	runs-on: ubuntu-latest
	needs: init
	permissions:
	contents: read
	strategy:
	fail-fast: false
	matrix:
	component: ${{ fromJson(needs.init.outputs.components) }}

	steps:
	- name: Block egress traffic
	uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
	with:
	disable-sudo: true
	egress-policy: block
	allowed-endpoints: >
	github.com:443
	api.github.com:443
	pypi.org:443
	files.pythonhosted.org:443
	catalog.redhat.com:443

	- name: Checkout repository
	uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	fetch-depth: 1

	- name: Format matrix variables
	id: var_format
	env:
	MATRIX_BUILD: ${{ matrix.component }}
	run: \|
	set -Eeuo pipefail

	MATRIX_BUILD="${MATRIX_BUILD^^}"
	MATRIX_BUILD="${MATRIX_BUILD//-/_}"

	echo "::group::Result"
	echo "matrix_build=${MATRIX_BUILD}"
	echo "::endgroup::"

	echo "matrix_build=${MATRIX_BUILD}" >> "$GITHUB_OUTPUT"

	- name: Check Python requirements file
	env:
	PYTHON_REQUIREMENTS_FILE: ${{ env.PYTHON_REQUIREMENTS_FILE }}
	run: \|
	set -Eeuo pipefail

	if [[ ! -f "$PYTHON_REQUIREMENTS_FILE" ]]; then
	echo "::error::File $PYTHON_REQUIREMENTS_FILE is missing"
	exit 1
	fi

	- name: Setup Python 3.12
	uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
	with:
	python-version: '3.12'
	cache: 'pip'
	cache-dependency-path: ${{ env.PYTHON_REQUIREMENTS_FILE }}

	- name: Install Python packages
	env:
	PYTHON_REQUIREMENTS_FILE: ${{ env.PYTHON_REQUIREMENTS_FILE }}
	run: \|
	set -Eeuo pipefail

	python -m pip install --require-hashes --only-binary=:all: -r "$PYTHON_REQUIREMENTS_FILE"

	- name: Check description source
	env:
	DESCRIPTION_FILE: ${{ format('{0}/{1}/rhel/README', env.DOCKERFILES_DIRECTORY, matrix.component) }}
	run: \|
	set -Eeuo pipefail

	if [[ ! -f "${DESCRIPTION_FILE}.html" && ! -f "${DESCRIPTION_FILE}.md" ]]; then
	echo "::error::No description file found: ${DESCRIPTION_FILE}.html or ${DESCRIPTION_FILE}.md"
	exit 1
	fi

	- name: Update Red Hat project description
	env:
	DESCRIPTION_FILE: ${{ format('{0}/{1}/rhel/README', env.DOCKERFILES_DIRECTORY, matrix.component) }}
	PROJECT_ID: ${{ secrets[format('RHEL_{0}_{1}_PROJECT', needs.init.outputs.zabbix_release, steps.var_format.outputs.matrix_build)] }}
	PYXIS_API_TOKEN: ${{ secrets.REDHAT_API_TOKEN }}
	API_URL: ${{ env.API_URL }}
	run: \|
	set -Eeuo pipefail
	python ./.github/scripts/rhel_description.py

	- name: Print Red Hat Catalog URL
	env:
	COMPONENT: ${{ matrix.component }}
	MATRIX_FILE: ${{ env.MATRIX_FILE }}
	run: \|
	set -Eeuo pipefail

	PROJECT_ID="$(jq -r ".components.\"$COMPONENT\".rhel_project" "$MATRIX_FILE")"

	echo "::group::URL"
	echo "https://catalog.redhat.com/software/containers/${PROJECT_ID}"
	echo "::endgroup::"

Navigation Menu

Uh oh!

Using modern Nginx redirect to stdout / stderr #170

Workflow file

Using modern Nginx redirect to stdout / stderr #170

Uh oh!

Workflow file for this run