[WIP] Remove the copy-cert init containers #35
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This Workflow automatically merges pull requests, submitted by certain users | |
| # if they pass certain criteria. | |
| name: Automerge version bumps | |
| on: | |
| pull_request: | |
| branches: [ master ] | |
| paths: | |
| # Trigger the workflow only for certain files. First we need to exclude all | |
| # files, then add the files we care about. | |
| - "!**" | |
| - "cockroachdb/Chart.yaml" | |
| - "cockroachdb/README.md" | |
| - "cockroachdb/values.yaml" | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| jobs: | |
| automerge: | |
| runs-on: ubuntu-latest | |
| if: ${{ github.actor == 'cockroach-teamcity' }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| # Fetch all branches so it is possible to checkout the default branch files. | |
| fetch-depth: 0 | |
| # The next steps tries to reproduce the steps taken to generate the | |
| # files. We restore the changed files to their original state on the | |
| # default branch, run the commands to regenerate the change, and verify | |
| # the result matches the PR contents (git diff does not show any changes). | |
| - name: Check for downgrades and regenerate the patch | |
| run: | | |
| set -euxo pipefail | |
| version="$(cat cockroachdb/Chart.yaml | yq -r '.version')" | |
| appVersion="$(cat cockroachdb/Chart.yaml | yq -r '.appVersion')" | |
| git checkout origin/master -- cockroachdb/Chart.yaml cockroachdb/README.md cockroachdb/values.yaml | |
| git restore --staged cockroachdb/Chart.yaml cockroachdb/README.md cockroachdb/values.yaml | |
| master_version="$(cat cockroachdb/Chart.yaml | yq -r '.version')" | |
| master_appVersion="$(cat cockroachdb/Chart.yaml | yq -r '.appVersion')" | |
| latest_version="$(echo -e "$version\n$master_version" | sort --version-sort -r | head -n1)" | |
| latest_appVersion="$(echo -e "$appVersion\n$master_appVersion" | sort --version-sort -r | head -n1)" | |
| if [[ $latest_version != $version ]]; then | |
| echo "Downgrades are not permitteed in automatic mode, $version < $latest_version" | |
| exit 1 | |
| fi | |
| if [[ $latest_appVersion != $appVersion ]]; then | |
| echo "Downgrades are not permitteed in automatic mode, $appVersion < $latest_appVersion" | |
| exit 1 | |
| fi | |
| bazel build //build | |
| $(bazel info bazel-bin)/build/build_/build bump "$appVersion" | |
| - name: Confirm expected patch | |
| run: git diff --exit-code | |
| - name: Approve PR | |
| run: gh pr review --approve "${{github.event.pull_request.html_url}}" | |
| env: | |
| GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} | |
| - name: Enable auto-merge | |
| run: gh pr merge --auto --merge "${{github.event.pull_request.html_url}}" | |
| env: | |
| GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} |