main.yml

name: CI

on:
  push:
    branches:
      - develop
  pull_request:
    branches:
      - develop
    types:
      - opened
      - reopened
      - synchronize
      - labeled
  workflow_dispatch:

env:
  TEST_CLUSTER_NAME: activiti
  CHART_DIR: "charts/activiti-cloud-full-example"

jobs:

  check-ext-build:
    name: Check dependabot/external build
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: Activiti/Activiti/.github/actions/check-ext-build@8.0.0-alpha.10

  pre-commit:
    needs: check-ext-build
    runs-on: ubuntu-latest
    steps:
      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-helm-docs@v3.2.1
      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-kubepug@v3.2.1
      - uses: bridgecrewio/checkov-action@v12.1839.0
        with:
          framework: kubernetes
      - uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@v3.2.1

  build:
    runs-on: ubuntu-latest
    needs: pre-commit
    steps:
      - uses: actions/checkout@v4

      - name: Build
        uses: Alfresco/alfresco-build-tools/.github/actions/helm-build-chart@v3.2.1
        with:
          chart-dir: ${{ env.CHART_DIR }}

      - uses: Alfresco/alfresco-build-tools/.github/actions/resolve-preview-name@v3.2.1
        id: resolve-preview

      - name: Execute helm dry run
        uses: Alfresco/alfresco-build-tools/.github/actions/helm-integration-tests@v3.2.1
        with:
          chart-dir: ${{ env.CHART_DIR }}
          test-rancher-url: ${{ secrets.RANCHER2_URL }}
          test-rancher-access-key: ${{ secrets.RANCHER2_ACCESS_KEY }}
          test-rancher-secret-key: ${{ secrets.RANCHER2_SECRET_KEY }}
          test-cluster-name: ${{ env.TEST_CLUSTER_NAME }}
          test-namespace: ${{ steps.resolve-preview.outputs.preview-name }}

  parse-next-release:
    runs-on: ubuntu-latest
    needs: build
    if: github.event_name == 'push'
    outputs:
      next-release: ${{ steps.parse-next-release.outputs.next-release }}
    steps:
      - uses: actions/checkout@v4
      - name: Parse next release
        id: parse-next-release
        uses: Alfresco/alfresco-build-tools/.github/actions/helm-parse-next-release@v3.2.1
        with:
          chart-dir: ${{ env.CHART_DIR }}

  publish:
    needs: parse-next-release
    if: github.event_name == 'push'
    uses: Alfresco/alfresco-build-tools/.github/workflows/helm-publish-new-package-version.yml@v3.2.1
    with:
      next-version: ${{ needs.parse-next-release.outputs.next-release }}
      chart-dir: charts/activiti-cloud-full-example
      helm-charts-repo: Activiti/activiti-cloud-helm-charts
      helm-charts-repo-branch: gh-pages
    secrets: inherit

  promote:
    if: github.event_name == 'push'
    needs:
      - publish
    runs-on: ubuntu-latest
    env:
      VERSION: ${{ needs.publish.outputs.version }}
      DEVELOPMENT_BRANCH: ${{ github.ref_name }}
    steps:
      - uses: actions/checkout@v4
      - run: echo ACTIVITI_CLOUD_APPLICATION_VERSION=`yq .runtime-bundle.image.tag charts/activiti-cloud-full-example/values.yaml` >> $GITHUB_ENV
      - uses: Alfresco/alfresco-build-tools/.github/actions/jx-updatebot-pr@v3.2.1
        env:
          GH_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
        with:
          version: ${{ env.VERSION }}
          auto-merge: 'true'
          labels: ${{ env.DEVELOPMENT_BRANCH }}
          base-branch-name: ${{ env.DEVELOPMENT_BRANCH }}
          git-username: ${{ secrets.BOT_GITHUB_USERNAME }}
          git-token: ${{ secrets.BOT_GITHUB_TOKEN }}
          git-author-name: ${{ secrets.BOT_GITHUB_USERNAME }}

  notify:
    runs-on: ubuntu-latest
    needs:
      - build
      - publish
      - promote
    if: always() && failure() && github.event_name == 'push'
    steps:
      - name: Slack Notification
        uses: Alfresco/alfresco-build-tools/.github/actions/send-slack-notification@v3.2.1
        with:
          channel-id: 'eng-hxp-studio-activiti-gh-notifs'
          token: ${{ secrets.SLACK_NOTIFICATION_BOT_TOKEN }}