Code Health Check #609
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Code Health Check | |
| on: | |
| schedule: | |
| - cron: "0 6 * * *" | |
| defaults: | |
| run: | |
| shell: bash | |
| jobs: | |
| checks: | |
| name: Code Health Checks | |
| runs-on: ubuntu-latest | |
| outputs: | |
| ACTION_RESULT: ${{ steps.results.outputs.ACTION_RESULT }} | |
| CI_ICON: ${{ steps.results.outputs.CI_ICON }} | |
| CI_SUMMARY: ${{ steps.results.outputs.CI_SUMMARY }} | |
| CODEBASE_ICON: ${{ steps.results.outputs.CODEBASE_ICON }} | |
| CODEBASE_SUMMARY: ${{ steps.results.outputs.CODEBASE_SUMMARY }} | |
| steps: | |
| - name: Checkout Policy Framework | |
| uses: actions/checkout@v4 | |
| - name: CI Check | |
| continue-on-error: true | |
| env: | |
| GITHUB_USER: ${{ secrets.WORKFLOW_USER }} | |
| GITHUB_TOKEN: ${{ secrets.WORKFLOW_TOKEN }} | |
| SKIP_CLEANUP: "true" | |
| run: | | |
| EXIT_CODE=0 | |
| ./build/periodic.sh || EXIT_CODE=$? | |
| echo "CI_EXIT_CODE=${EXIT_CODE}" >> ${GITHUB_ENV} | |
| exit ${EXIT_CODE} | |
| - name: Codebase Check | |
| continue-on-error: true | |
| env: | |
| SKIP_CLONING: "true" | |
| run: | | |
| EXIT_CODE=0 | |
| [[ -d "./stolostron/" ]] && ./build/codebase-check.sh || EXIT_CODE=$? | |
| echo "CODEBASE_EXIT_CODE=${EXIT_CODE}" >> ${GITHUB_ENV} | |
| exit ${EXIT_CODE} | |
| - name: Post results to action summary | |
| id: results | |
| if: ${{ always() }} | |
| run: | | |
| SUCCESS_ICON="white_check_mark" | |
| WARNING_ICON="warning" | |
| FAILURE_ICON="no_entry" | |
| echo "ACTION_RESULT=$([[ "${{ env.CI_EXIT_CODE }}" == 0 ]] && [[ "${{ env.CODEBASE_EXIT_CODE }}" == 0 ]] && echo 0 || echo 1)" >> ${GITHUB_OUTPUT} | |
| if [[ -f summary-ci-errors.log ]]; then | |
| echo "CI_SUMMARY=\n\`\`\`\n$(awk '{printf "%s\\n", $0}' summary-ci-errors.log | sed 's/"/\\"/g')\`\`\`" >> ${GITHUB_OUTPUT} | |
| fi | |
| if [[ -f summary-codebase-errors.log ]]; then | |
| echo "CODEBASE_SUMMARY=\n\`\`\`\n$(awk '{printf "%s\\n", $0}' summary-codebase-errors.log | sed 's/"/\\"/g')\`\`\`" >> ${GITHUB_OUTPUT} | |
| fi | |
| CI_ICON=${SUCCESS_ICON} | |
| if [[ "${{ env.CI_EXIT_CODE }}" == 1 ]]; then | |
| CI_ICON=${FAILURE_ICON} | |
| fi | |
| echo "CI_ICON=${CI_ICON}" >> ${GITHUB_OUTPUT} | |
| echo "## :${CI_ICON}: CI Check" >> ${GITHUB_STEP_SUMMARY} | |
| echo "" >> ${GITHUB_STEP_SUMMARY} | |
| if [[ -f ci-errors.log ]]; then | |
| echo "<details><summary>See more</summary>" >> ${GITHUB_STEP_SUMMARY} | |
| echo "" >> ${GITHUB_STEP_SUMMARY} | |
| echo '```' >> ${GITHUB_STEP_SUMMARY} | |
| cat ci-errors.log >> ${GITHUB_STEP_SUMMARY} | |
| echo '```' >> ${GITHUB_STEP_SUMMARY} | |
| echo "" >> ${GITHUB_STEP_SUMMARY} | |
| echo "</details>" >> ${GITHUB_STEP_SUMMARY} | |
| fi | |
| echo "" >> ${GITHUB_STEP_SUMMARY} | |
| CODEBASE_ICON=${SUCCESS_ICON} | |
| if [[ "${{ env.CODEBASE_EXIT_CODE }}" == 1 ]]; then | |
| CODEBASE_ICON=${WARNING_ICON} | |
| elif [[ "${{ env.CODEBASE_EXIT_CODE }}" == 2 ]]; then | |
| CODEBASE_ICON=${FAILURE_ICON} | |
| fi | |
| echo "CODEBASE_ICON=${CODEBASE_ICON}" >> ${GITHUB_OUTPUT} | |
| echo "## :${CODEBASE_ICON}: Codebase Check" >> ${GITHUB_STEP_SUMMARY} | |
| echo "" >> ${GITHUB_STEP_SUMMARY} | |
| if [[ -f codebase-errors.log ]]; then | |
| echo "<details><summary>See more</summary>" >> ${GITHUB_STEP_SUMMARY} | |
| echo "" >> ${GITHUB_STEP_SUMMARY} | |
| echo '```' >> ${GITHUB_STEP_SUMMARY} | |
| cat codebase-errors.log >> ${GITHUB_STEP_SUMMARY} | |
| echo '```' >> ${GITHUB_STEP_SUMMARY} | |
| echo "" >> ${GITHUB_STEP_SUMMARY} | |
| echo "</details>" >> ${GITHUB_STEP_SUMMARY} | |
| fi | |
| clusteradm: | |
| name: Deploy framework with clusteradm | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Install clusteradm | |
| run: | | |
| go install open-cluster-management.io/clusteradm/cmd/clusteradm@main || | |
| { | |
| echo "error: installing latest commit on main failed. Falling back to latest tag."; | |
| go install open-cluster-management.io/clusteradm/cmd/clusteradm@latest; | |
| } | |
| - name: Bootstrap clusters with OCM | |
| # Source: https://github.com/open-cluster-management-io/ocm/blob/main/solutions/setup-dev-environment/local-up.sh | |
| run: | | |
| export PATH=${PATH}:$(go env GOPATH)/bin | |
| hub="hub" c1="cluster1" c2="cluster2" | |
| echo "::group::Initialize the OCM Hub cluster" | |
| kind create cluster --name "${hub}" | |
| clusteradm init --wait | |
| joincmd=$(clusteradm get token | grep clusteradm) | |
| echo "::endgroup::" | |
| for idx in {1..2}; do | |
| echo "::group::Create Managed cluster cluster${idx}" | |
| kind create cluster --name "cluster${idx}" | |
| echo "Join cluster${idx} to Hub cluster" | |
| $(echo ${joincmd} --force-internal-endpoint-lookup --wait --context kind-cluster${idx} | sed "s/<cluster_name>/cluster${idx}/g") | |
| echo "Accept join of cluster${idx}" | |
| clusteradm accept --context kind-${hub} --clusters cluster${idx} | |
| echo "::endgroup::" | |
| done | |
| kubectl config use-context kind-hub | |
| echo "Wait for ManagedClusters to be available:" | |
| kubectl wait managedclusters --all --for condition=ManagedClusterConditionAvailable=True || | |
| kubectl get managedclusters --context kind-${hub} | |
| kubectl get managedclusters --context kind-${hub} | |
| - name: Install and enable the framework | |
| run: | | |
| export PATH=${PATH}:$(go env GOPATH)/bin | |
| kubectl config use-context kind-hub | |
| clusteradm install hub-addon --names governance-policy-framework --bundle-version latest | |
| clusteradm addon enable --names governance-policy-framework,config-policy-controller --clusters cluster1,cluster2 | |
| for idx in {1..5}; do | |
| echo "::group::Wait for ManagedClusterAddons to be available (${idx}/5)" | |
| kubectl get managedclusteraddons --all-namespaces | |
| kubectl wait managedclusteraddons --all-namespaces --all --for condition=Available=True && | |
| { echo "::endgroup::"; break; } || | |
| { [[ ${idx} == 5 ]] && exit 1; } | |
| done | |
| echo "List pods in all namespaces:" | |
| kubectl get pods --all-namespaces | |
| slack: | |
| name: Post result to Slack | |
| needs: [checks, clusteradm] | |
| runs-on: ubuntu-latest | |
| if: ${{ always() }} | |
| steps: | |
| - name: Send result to Slack | |
| uses: slackapi/[email protected] | |
| env: | |
| OCM_RESULT: | |
| ${{ contains(needs.clusteradm.result, 'failure') && 'no_entry' || | |
| contains(needs.cluster.result, 'cancelled') && 'warning' || 'white_check_mark' }} | |
| with: | |
| webhook: ${{ secrets.CODE_HEALTH_SLACK_WEBHOOK }} | |
| webhook-type: incoming-webhook | |
| payload: | | |
| { | |
| "blocks": [ | |
| { | |
| "type": "section", | |
| "text": { | |
| "type": "mrkdwn", | |
| "text": "Codebase health check ${{ needs.checks.outputs.ACTION_RESULT == 0 && env.OCM_RESULT == 'white_check_mark' && 'succeeded' || 'failed' }}: <${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}#artifacts|View workflow run>\n:${{ env.OCM_RESULT }}: OCM deployment\n:${{ needs.checks.outputs.CI_ICON }}: CI check${{ needs.checks.outputs.CI_SUMMARY }}\n:${{ needs.checks.outputs.CODEBASE_ICON }}: Codebase check${{ needs.checks.outputs.CODEBASE_SUMMARY }}" | |
| } | |
| } | |
| ] | |
| } |