chore: Renovate process Gateway API CRDs #359
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: CI | |
on: [push] | |
jobs: | |
scan: | |
runs-on: ubuntu-latest | |
permissions: | |
contents: read | |
security-events: write | |
steps: | |
- uses: actions/[email protected] | |
- uses: securego/[email protected] | |
with: | |
args: "-no-fail -fmt sarif -out results.sarif ./..." | |
- uses: github/codeql-action/[email protected] | |
with: | |
sarif_file: results.sarif | |
test: | |
runs-on: ubuntu-latest | |
permissions: | |
contents: read | |
checks: write | |
steps: | |
- uses: actions/[email protected] | |
- uses: actions/[email protected] | |
with: | |
go-version: stable | |
- run: make lint test | |
e2e: | |
runs-on: ubuntu-latest | |
permissions: | |
contents: read | |
checks: write | |
packages: write | |
steps: | |
- uses: actions/[email protected] | |
- uses: actions/[email protected] | |
with: | |
go-version: stable | |
- name: Create kind cluster | |
uses: helm/[email protected] | |
with: | |
cluster_name: kind | |
- run: make test-e2e | |
continue-on-error: true | |
env: | |
CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} | |
CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }} | |
- name: Get manager logs | |
run: kubectl logs -n cloudflare-gateway deployment/cloudflare-controller-manager | |
- name: Upload conformance report | |
uses: actions/[email protected] | |
with: | |
name: conformance-report | |
path: '*-report.yaml' | |
- uses: docker/[email protected] | |
with: | |
registry: ghcr.io | |
username: ${{ github.actor }} | |
password: ${{ github.token }} | |
- run: make docker-push IMG=ghcr.io/pl4nty/cloudflare-kubernetes-gateway:$(git describe --tag --always --match 'v[0-9]*') | |
release-please: | |
if: github.ref == 'refs/heads/main' | |
runs-on: ubuntu-latest | |
permissions: | |
contents: write | |
pull-requests: write | |
outputs: | |
releases_created: ${{ steps.release.outputs.releases_created }} | |
steps: | |
- uses: googleapis/[email protected] | |
id: release | |
release: | |
needs: | |
- release-please | |
if: ${{ needs.release-please.outputs.releases_created == 'true' || startsWith(github.ref, 'refs/tags/') }} | |
runs-on: ubuntu-latest | |
permissions: | |
contents: write | |
packages: write | |
steps: | |
- uses: actions/[email protected] | |
with: | |
fetch-depth: 0 | |
- run: git fetch --force --tags | |
- uses: docker/[email protected] | |
with: | |
registry: ghcr.io | |
username: ${{ github.actor }} | |
password: ${{ github.token }} | |
- uses: actions/[email protected] | |
with: | |
go-version: stable | |
- uses: goreleaser/[email protected] | |
with: | |
args: release --clean | |
env: | |
GITHUB_TOKEN: ${{ github.token }} |