Merge pull request #1016 from terrateamio/1015-add-oth-functionality #422
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: release | |
| on: | |
| push: | |
| branches: | |
| - main | |
| paths-ignore: | |
| - 'docs/**' | |
| - 'rfds/**' | |
| workflow_dispatch: | |
| inputs: | |
| environment: | |
| description: 'Select the deployment environment' | |
| required: true | |
| type: choice | |
| options: | |
| - production | |
| - staging | |
| jobs: | |
| set-version-tag: | |
| runs-on: ubuntu-22.04 | |
| environment: ${{ github.event.inputs.environment || 'production' }} | |
| outputs: | |
| version_tag: ${{ steps.set-version-tag.outputs.version_tag }} | |
| env: | |
| GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }} | |
| GITHUB_REPOSITORY: ${{ github.repository }} | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Set version tag | |
| id: set-version-tag | |
| run: | | |
| VERSION_TAG=$(./scripts/version_tag) | |
| echo "VERSION_TAG=${VERSION_TAG}" >> "${GITHUB_ENV}" | |
| echo "version_tag=${VERSION_TAG}" >> "${GITHUB_OUTPUT}" | |
| - name: Create tag | |
| run: | | |
| ./scripts/create_tag | |
| build-amd64: | |
| needs: set-version-tag | |
| runs-on: ubuntu-22.04 | |
| environment: ${{ github.event.inputs.environment || 'production' }} | |
| strategy: | |
| matrix: | |
| target: [code-indexer, terrat-ee, terrat-oss, ttm] | |
| env: | |
| VERSION_TAG: ${{ needs.set-version-tag.outputs.version_tag }} | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| TERRAT_UI_ANALYTICS: ${{ github.event.inputs.environment == 'production' && vars.TERRATEAM_POSTHOG_TOKEN || 'false' }} | |
| TERRATEAM_ENVIRONMENT: ${{ github.event.inputs.environment || 'production' }} | |
| MATRIX_TARGET: ${{ matrix.target }} | |
| permissions: | |
| contents: write | |
| packages: write | |
| id-token: write | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-tags: true | |
| - name: Log in to GitHub Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Set base image | |
| run: | | |
| ./scripts/base_image >> $GITHUB_ENV | |
| - name: Build and push ${{ matrix.target }} (amd64) | |
| uses: docker/build-push-action@v6 | |
| with: | |
| context: . | |
| file: docker/terrat/Dockerfile | |
| push: true | |
| target: ${{ matrix.target }} | |
| build-args: | | |
| BASE_IMAGE=${{ env.BASE_IMAGE }} | |
| tags: ghcr.io/${{ github.repository_owner }}/${{ matrix.target }}:${{ env.VERSION_TAG }}-amd64 | |
| - name: Extract ttm binary (amd64) | |
| if: matrix.target == 'ttm' | |
| run: | | |
| docker create --name ttm-extract ghcr.io/${{ github.repository_owner }}/ttm:${{ env.VERSION_TAG }}-amd64 | |
| docker cp ttm-extract:/usr/local/bin/ttm ./ttm-linux-amd64 | |
| docker rm ttm-extract | |
| chmod +x ./ttm-linux-amd64 | |
| - name: Upload ttm binary (amd64) | |
| if: matrix.target == 'ttm' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: ttm-linux-amd64 | |
| path: ttm-linux-amd64 | |
| retention-days: 7 | |
| build-arm64: | |
| needs: set-version-tag | |
| runs-on: ubuntu-22.04-arm64 | |
| environment: ${{ github.event.inputs.environment || 'production' }} | |
| strategy: | |
| matrix: | |
| target: [code-indexer, terrat-ee, terrat-oss, ttm] | |
| env: | |
| VERSION_TAG: ${{ needs.set-version-tag.outputs.version_tag }} | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| TERRATEAM_UI_ANALYTICS: ${{ github.event.inputs.environment == 'production' && vars.TERRATEAM_POSTHOG_TOKEN || 'false' }} | |
| TERRATEAM_ENVIRONMENT: ${{ github.event.inputs.environment || 'production' }} | |
| MATRIX_TARGET: ${{ matrix.target }} | |
| permissions: | |
| contents: write | |
| packages: write | |
| id-token: write | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-tags: true | |
| - name: Log in to GitHub Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Set base image | |
| run: | | |
| ./scripts/base_image >> $GITHUB_ENV | |
| - name: Build and push ${{ matrix.target }} (arm64) | |
| uses: docker/build-push-action@v6 | |
| with: | |
| context: . | |
| file: docker/terrat/Dockerfile | |
| push: true | |
| target: ${{ matrix.target }} | |
| build-args: | | |
| BASE_IMAGE=${{ env.BASE_IMAGE }} | |
| tags: ghcr.io/${{ github.repository_owner }}/${{ matrix.target }}:${{ env.VERSION_TAG }}-arm64 | |
| - name: Extract ttm binary (arm64) | |
| if: matrix.target == 'ttm' | |
| run: | | |
| docker create --name ttm-extract ghcr.io/${{ github.repository_owner }}/ttm:${{ env.VERSION_TAG }}-arm64 | |
| docker cp ttm-extract:/usr/local/bin/ttm ./ttm-linux-arm64 | |
| docker rm ttm-extract | |
| chmod +x ./ttm-linux-arm64 | |
| - name: Upload ttm binary (arm64) | |
| if: matrix.target == 'ttm' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: ttm-linux-arm64 | |
| path: ttm-linux-arm64 | |
| retention-days: 7 | |
| create-multi-arch-manifest: | |
| needs: [set-version-tag, build-amd64, build-arm64] | |
| runs-on: ubuntu-22.04 | |
| outputs: | |
| is_latest_version_tag: ${{ steps.is-latest-version-tag.outputs.is_latest_version_tag }} | |
| env: | |
| VERSION_TAG: ${{ needs.set-version-tag.outputs.version_tag }} | |
| GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }} | |
| GITHUB_REF: ${{ github.ref }} | |
| TERRATEAM_ENVIRONMENT: ${{ github.event.inputs.environment || 'production' }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Log in to GitHub Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Set is latest version tag | |
| id: is-latest-version-tag | |
| run: | | |
| is_latest_version_tag="$(./scripts/is_latest_version_tag)" | |
| echo "IS_LATEST_VERSION_TAG=${is_latest_version_tag}" >> "${GITHUB_ENV}" | |
| echo "is_latest_version_tag=${is_latest_version_tag}" >> "${GITHUB_OUTPUT}" | |
| - name: Create and push multi-arch manifest | |
| run: | | |
| ./scripts/create_manifest code-indexer terrat-ee terrat-oss ttm | |
| release-notify: | |
| needs: [set-version-tag, create-multi-arch-manifest] | |
| runs-on: ubuntu-22.04 | |
| environment: ${{ github.event.inputs.environment || 'production' }} | |
| env: | |
| VERSION_TAG: ${{ needs.set-version-tag.outputs.version_tag }} | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} | |
| TERRATEAM_ENVIRONMENT: ${{ github.event.inputs.environment || 'production' }} | |
| GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }} | |
| GITHUB_REPOSITORY: ${{ github.repository }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-tags: true | |
| - name: Download ttm binary (amd64) | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: ttm-linux-amd64 | |
| path: ./binaries | |
| - name: Download ttm binary (arm64) | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: ttm-linux-arm64 | |
| path: ./binaries | |
| - name: Create release | |
| run: | | |
| ./scripts/create_release | |
| - name: Upload ttm binaries to release | |
| run: | | |
| ./scripts/upload_release_assets ./binaries/ttm-linux-* | |
| - name: Notify Slack | |
| run: | | |
| ./scripts/notify_slack | |
| deploy: | |
| needs: [set-version-tag, release-notify, create-multi-arch-manifest] | |
| if: ${{ needs.create-multi-arch-manifest.outputs.is_latest_version_tag == 'true' }} | |
| uses: ./.github/workflows/deploy.yml | |
| with: | |
| environment: ${{ github.event.inputs.environment || 'production' }} | |
| VERSION_TAG: ${{ needs.set-version-tag.outputs.version_tag }} | |
| secrets: inherit |