main.yml

name: CI

on:
  push:
    tags:
      - "v*.*.*"
      - "!v0.1.*"

jobs:
  base:
    runs-on: ubuntu-latest

    outputs:
      go_version: ${{ steps.get_versions.outputs.go_version }}
      build_version: ${{ steps.get_versions.outputs.build_version }}
      chart_version: ${{ steps.get_versions.outputs.chart_version }}
      go_updated: ${{ steps.file_updates.outputs.go }}
      yaml_updated: ${{ steps.file_updates.outputs.yaml }}

    steps:
      - name: Check out repo
        uses: actions/checkout@v2
        with:
          fetch-depth: 0

      - name: Get versions
        id: get_versions
        run: |
          echo ::set-output name=go_version::$(go mod edit -json | grep -Po '"Go":\s+"([0-9.]+)"' | sed -E 's/.+"([0-9.]+)"/\1/')
          echo ::set-output name=build_version::${GITHUB_REF#refs/tags/v}
          echo ::set-output name=chart_version::${GITHUB_REF#refs/tags/}

      - name: Get last release
        id: last_release
        shell: bash
        run: |
          tag=$(gh release list | sed -n '1 p' | awk '{print $(NF -1);}')
          sha=$(git show-ref --tags | grep $tag | awk '{print $1;}')
          echo ::set-output name=sha::$sha
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Check updated files
        id: file_updates
        uses: dorny/paths-filter@v2
        with:
          base: ${{ steps.last_release.outputs.sha }}
          filters: |
            go:
              - '*.go'
              - 'go.*'
            yaml:
              - 'deploy/cert-manager-webhook-gandi/*.yaml'
              - 'deploy/cert-manager-webhook-gandi/templates/*.yaml'

  build:
    needs: base
    if: ${{ needs.base.outputs.go_updated == 'true' }}
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    outputs:
      tag_commit: ${{ steps.update_image.outputs.commit }}

    steps:
      - name: Check out repo
        uses: actions/checkout@v2

      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          registry: quay.io
          username: ${{ secrets.QUAY_USERNAME }}
          password: ${{ secrets.QUAY_PASSWORD }}

      - name: Set up Docker buildx
        uses: docker/setup-buildx-action@v1

      - name: Cache Docker layers
        uses: actions/cache@v2
        with:
          path: /tmp/.buildx-cache
          key: ${{ runner.os }}-buildx-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-buildx-

      - name: Build and push
        uses: docker/build-push-action@v5
        with:
          context: .
          platforms: linux/amd64,linux/arm64
          target: image
          push: true
          build-args: GO_VERSION=${{ needs.base.outputs.go_version }}
          tags: quay.io/molnett/cert-manager-webhook-gandi:latest,quay.io/molnett/cert-manager-webhook-gandi:${{ needs.base.outputs.build_version }}
          cache-from: type=local,src=/tmp/.buildx-cache
          cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max

      # Temp fix
      # https://github.com/docker/build-push-action/issues/252
      # https://github.com/moby/buildkit/issues/1896
      - name: Move cache
        run: |
          rm -rf /tmp/.buildx-cache
          mv /tmp/.buildx-cache-new /tmp/.buildx-cache

      - name: Update Helm image tag
        id: update_image
        uses: fjogeleit/yaml-update-action@master
        with:
          valueFile: "deploy/cert-manager-webhook-gandi/values.yaml"
          propertyPath: "image.tag"
          value: ${{ needs.base.outputs.build_version }}
          message: "Update image tag to ${{ needs.base.outputs.build_version }}"
          token: ${{ secrets.GITHUB_TOKEN }}
          branch: main

  release:
    needs:
      - base
      - build

    if: |
      needs.base.result == 'success' && (needs.build.result == 'success' || needs.base.outputs.yaml_updated == 'true')

    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    steps:
      - name: Retrieve commit ref
        id: commit_ref
        run: |
          if [[ '${{ needs.build.outputs.tag_commit }}' = '' ]]; then
            sha=${{ github.sha }}
          else
            sha=${{ needs.build.outputs.tag_commit }}
          fi

          echo ::set-output name=sha::$sha

      - name: Check out repo
        uses: actions/checkout@v2
        with:
          fetch-depth: 0
          ref: ${{ steps.commit_ref.outputs.sha }}

      - name: Configure Git
        run: |
          git config user.name github-actions
          git config user.email github-actions@github.com

      - name: Update Helm chart version
        uses: fjogeleit/yaml-update-action@master
        with:
          valueFile: "deploy/cert-manager-webhook-gandi/Chart.yaml"
          propertyPath: "version"
          value: ${{ needs.base.outputs.chart_version }}
          message: "Update chart version to ${{ needs.base.outputs.chart_version }}"
          token: ${{ secrets.GITHUB_TOKEN }}
          updateFile: true
          branch: main

      - name: Install Helm
        uses: azure/setup-helm@v1
        with:
          version: v3.4.0

      - name: Run chart-releaser
        uses: helm/chart-releaser-action@v1.2.1
        with:
          charts_dir: deploy
        env:
          CR_RELEASE_NAME_TEMPLATE: "{{ .Version }}"
          CR_TOKEN: ${{ secrets.GITHUB_TOKEN }}