build-integration.yml

name: build-integration

env:
  GO_VERSION: '1.17.3'

on:
  pull_request:
    types: [ opened, reopened, synchronize ]

  push:
    branches:
      - master

concurrency:
  # running pipeline per workflow per PR
  group: ${{ github.head_ref || github.run_id }}-${{ github.workflow }}
  # Running a new pipeline will cancel any running pipelines that belong to the above group
  cancel-in-progress: true

jobs:
  unit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3.1.0
      - uses: actions/setup-go@v3
        with:
          go-version: ${{ env.GO_VERSION }}
      - run: make test

  rubocop:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3.1.0
      - uses: ruby/setup-ruby@v1
        with:
          bundler-cache: true # runs 'bundle install' and caches installed gems automatically
      - run: bundle exec rubocop

  check-deps-tidy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3.1.0
      - uses: actions/setup-go@v3
        with:
          go-version: ${{ env.GO_VERSION }}
      - run: go mod tidy
      - run: |
          if ! git diff --exit-code -- go.mod go.sum; then
            echo "Modules not tidy; please run 'go mod tidy'";
          fi;

  check-deps-updated:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3.1.0
      - uses: actions/setup-go@v3
        with:
          go-version: ${{ env.GO_VERSION }}
      - run: go mod download
      - run: env GOPROXY=off go build -mod=readonly ./...

  integration:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3.1.0
      - uses: actions/setup-go@v3
        with:
          go-version: ${{ env.GO_VERSION }}
      - name: Build linux binary
        run: make build-production
      - uses: ruby/setup-ruby@v1
        with:
          bundler-cache: true # runs 'bundle install' and caches installed gems automatically
      - name: Run integration tests
        run: make test-integration

  need-release:
    runs-on: ubuntu-latest
    needs:
      - integration
    # If we are on main, check if we need to release
    if: ${{ contains('refs/heads/main', github.ref) }}
    outputs:
      release: ${{ steps.get_version.outputs.release }}
      version: ${{ steps.get_version.outputs.version }}
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      # Check our DRAUPNIR_VERSION file against that in git, to see if we need to release
      - name: Get version
        id: get_version
        run: |
          CURRENT_VERSION="v$(cat DRAUPNIR_VERSION)"
          echo "version=$CURRENT_VERSION" >> $GITHUB_OUTPUT
          if [[ $(git tag -l "${CURRENT_VERSION}") == "${CURRENT_VERSION}" ]]; then
            echo "Version ${CURRENT_VERSION} is already released"
            echo "release=false" >> $GITHUB_OUTPUT
          else
            echo "Version ${CURRENT_VERSION} can be released"
            echo "release=true" >> $GITHUB_OUTPUT
          fi

  # expose env vars to release job
  release-vars:
    needs: need-release
    runs-on: ubuntu-latest
    # Only run if we will need to release
    if: ${{ needs.need-release.outputs.release == 'true' }}
    outputs:
      go_version: ${{ env.GO_VERSION }}
    steps:
      - run: echo "Exposing env vars"

  release:
    needs:
      - need-release
      - release-vars
    # Only release if we need to
    if: ${{ needs.need-release.outputs.release == 'true' }}
    uses: gocardless/github-actions/.github/workflows/go-gorelease.yml@master
    with:
      release_notes: $(git log --pretty=oneline --abbrev-commit --no-decorate --no-color "$(git describe --tags --abbrev=0)..HEAD" -- pkg cmd vendor internal | tee -a /tmp/release-notes)
      repository: ${{ github.repository }}
      go_version: ${{ needs.release-vars.outputs.go_version }}
    secrets:
      goreleaser_pat: ${{ secrets.GOCARDLESS_CI_ROBOT_TOKEN }}
      service_account: ${{ secrets.GCR_PUSHER_SERVICE_ACCOUNT }}
      workload_identity_provider: ${{ secrets.KEYLESS_PROVIDER_NAME }}