test-tasks.yaml

name: ci

on:
  pull_request:
    branches: [ main ]
  push:
    branches: [ main ]
  schedule:
    - cron: '0 0 * * *'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:

  list-apko-images:
    runs-on: ubuntu-latest
    outputs:
      images: ${{ steps.output-images.outputs.images }}
    steps:
      - uses: actions/checkout@v4
      - name: list images
        id: output-images
        run: |
          cd images/apko
          echo "images=$(ls *.yaml | sed -e 's/\.yaml$//' | jq -R -s -c 'split("\n")[:-1]')" >> $GITHUB_OUTPUT

  build-apko-images:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    needs: list-apko-images
    strategy:
      matrix:
        image: ${{fromJSON(needs.list-apko-images.outputs.images)}}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 2
      - name: Log in to the Container registry
        if: github.event_name != 'pull_request'
        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Build apko image ${{ matrix.image }}
        if: github.event_name == 'pull_request'
        uses: distroless/actions/apko-build@main
        with:
          config: images/apko/${{ matrix.image }}.yaml
          tag: ghcr.io/${{ github.repository }}/${{ matrix.image }}:latest
      - name: Build and publish apko image ${{ matrix.image }}
        if: github.event_name != 'pull_request'
        uses: distroless/actions/apko-publish@main
        with:
          config: images/apko/${{ matrix.image }}.yaml
          tag: ghcr.io/${{ github.repository }}/${{ matrix.image }}:latest

  list-images:
    runs-on: ubuntu-latest
    outputs:
      images: ${{ steps.output-images.outputs.images }}
    steps:
      - uses: actions/checkout@v4
      - name: list images
        id: output-images
        run: |
          echo "images=$(ls images | grep -v apko | jq -R -s -c 'split("\n")[:-1]')" >> $GITHUB_OUTPUT
          

  build-images:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    needs: list-images
    strategy:
      matrix:
        image: ${{fromJSON(needs.list-images.outputs.images)}}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 2
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@v44
        with:
          files: |
            images/${{ matrix.image }}/**
      - name: changed files
        if: steps.changed-files.outputs.any_changed == 'true'
        run: |
          echo ${{ steps.changed-files.outputs.any_changed }}
          echo "List all the files that have changed: ${{ steps.changed-files-specific.outputs.all_changed_files }}"
      - name: Log in to the Container registry
        if: steps.changed-files.outputs.any_changed == 'true' || github.event_name != 'pull_request'
        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Extract metadata (tags, labels) for Docker
        if: steps.changed-files.outputs.any_changed == 'true' || github.event_name != 'pull_request'
        id: meta
        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
        with:
          images: ghcr.io/${{ github.repository }}/${{ matrix.image }}
      - name: Build and push Docker image
        if: steps.changed-files.outputs.any_changed == 'true' || github.event_name != 'pull_request'
        uses: docker//build-push-action@v5
        with:
          context: images/${{ matrix.image }}
          platforms: linux/amd64,linux/s390x,linux/ppc64le
          push: ${{ github.event_name != 'pull_request' }}
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}

  test:
    strategy:
      fail-fast: false # Keep running if one leg fails.
      matrix:
        pipeline-version:
        - v0.50.5
        - v0.53.3
        - latest
    runs-on: ubuntu-latest
    needs:
      - build-images
      - build-apko-images
    permissions:
      contents: read
      packages: write
    steps:
    - uses: actions/checkout@v4
    # instantiate a KinD (Kubernetes in Docker) cluster, installs `kubectl` and configures the
    # `kubeconfig` to reach the local cluster
    - uses: helm/kind-action@v1.9.0
      with:
        cluster_name: kind
        wait: 120s
    # installs Tekton Pipelines and `tkn` command line, including a local Container-Registry with
    # settings to reach it during testing
    - uses: openshift-pipelines/setup-tektoncd@v1
      with:
        pipeline_version: ${{ matrix.pipeline-version }}

    - name: run-tests
      run: |
        set -Eeuo pipefail
        exitCode=0
        # go-crane-image
        kubectl create -f ./go-crane-image/go-crane-image.yaml
        kubectl create -f ./go-crane-image/tests/run.yaml

        tkn pipelinerun logs -f go-crane-image-test-run
        tkn pipelinerun describe go-crane-image-test-run

        kubectl get pipelinerun go-crane-image-test-run
        status=$(kubectl get pipelinerun go-crane-image-test-run -o json | jq -r '.status.conditions[] | select(.type == "Succeeded") | .status')
        if [[ "${status}" != "True" ]]; then
         echo "go-crane-image test failed"
         kubectl get pipelinerun/go-crane-image-test-run -o yaml
         exitCode=1
        fi

        # go-ko-image
        kubectl create -f ./go-ko-image/go-ko-image.yaml
        kubectl create -f ./go-ko-image/tests/run.yaml

        tkn pipelinerun logs -f go-ko-image-test-run
        tkn pipelinerun describe go-ko-image-test-run

        kubectl get pipelinerun go-ko-image-test-run
        status=$(kubectl get pipelinerun go-ko-image-test-run -o json | jq -r '.status.conditions[] | select(.type == "Succeeded") | .status')
        if [[ "${status}" != "True" ]]; then
         echo "go-ko-image test failed"
         kubectl get pipelinerun/go-ko-image-test-run -o yaml
         exitCode=1
        fi

        exit $exitCode