.prow.yaml

presubmits:
  - name: pre-commit
    decorate: true
    skip_report: false
    always_run: true
    context: op1st/prow/pre-commit
    spec:
      containers:
        - image: quay.io/thoth-station/pre-commit:v0.17.0
          command:
            - "prow-job-precommit"
  - name: peribolos
    decorate: true
    run_if_changed: config.yaml
    skip_report: false
    context: op1st/prow/peribolos
    spec:
      containers:
        - image: gcr.io/k8s-prow/peribolos:latest
          command:
            - /bin/sh
          args:
            - -c
            - |
              set -ex
              /ko-app/peribolos --config-path config.yaml --github-token-path /etc/github/oauth \
                --min-admins=2 \
                --maximum-removal-delta=0.15 \
                --require-self=true \
                --fix-org \
                --fix-org-members \
                --fix-repos \
                --fix-teams \
                --fix-team-members \
                --fix-team-repos \
                --allow-repo-archival \
          volumeMounts:
            - name: github-oauth
              mountPath: /etc/github
      volumes:
        - name: github-oauth
          secret:
            secretName: github-oauth
  - name: labels
    decorate: true
    run_if_changed: labels.yaml
    skip_report: false
    context: op1st/prow/labels
    spec:
      containers:
        - image: gcr.io/k8s-prow/label_sync:latest
          command:
            - /bin/sh
          args:
            - -c
            - |
              set -ex
              /ko-app/label_sync \
              --config=labels.yaml \
              --orgs=b4mad \
              --skip b4mad/pre-commit-kustomize \
              --token=/etc/github/oauth
          volumeMounts:
            - name: github-oauth
              mountPath: /etc/github
      volumes:
        - name: github-oauth
          secret:
            secretName: github-oauth

postsubmits:
  - name: b4mad-peribolos
    decorate: true
    run_if_changed: ^config\.yaml$
    skip_report: false
    context: op1st/prow/peribolos
    branches:
      - ^main$
    spec:
      containers:
        - image: gcr.io/k8s-prow/peribolos:latest
          command:
            - /bin/sh
          args:
            - -c
            - |
              set -ex
              /ko-app/peribolos --config-path config.yaml --github-token-path /etc/github/oauth \
                --min-admins=2 \
                --maximum-removal-delta=0.15 \
                --require-self=true \
                --fix-org \
                --fix-org-members \
                --fix-repos \
                --fix-teams \
                --fix-team-members \
                --fix-team-repos \
                --allow-repo-archival \
                --confirm
          volumeMounts:
            - name: github-oauth
              mountPath: /etc/github
      volumes:
        - name: github-oauth
          secret:
            secretName: github-oauth

  - name: b4mad-labels
    decorate: true
    run_if_changed: ^(config|labels)\.yaml$
    skip_report: false
    context: op1st/prow/labels
    branches:
      - ^main$
    spec:
      containers:
        - image: gcr.io/k8s-prow/label_sync:latest
          args:
            - -c
            - |
              set -ex
              /ko-app/label_sync \
              --config=labels.yaml \
              --orgs=b4mad \
              --skip b4mad/pre-commit-kustomize \
              --github-endpoint=http://ghproxy \
              --github-endpoint=https://api.github.com \
              --github-app-id=$(GITHUB_APP_ID) \
              --github-app-private-key-path=/etc/github/cert \
              --confirm
          env:
            - name: GITHUB_APP_ID
              valueFrom:
                secretKeyRef:
                  name: github-token
                  key: appid
          volumeMounts:
            - name: github-token
              mountPath: /etc/github
      volumes:
        - name: github-token
          secret:
            secretName: github-token