assert.Equals -> assert.InDelta for more floats #33
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # | |
| # Copyright 2021 The Dapr Authors | |
| # Licensed under the Apache License, Version 2.0 (the "License"); | |
| # you may not use this file except in compliance with the License. | |
| # You may obtain a copy of the License at | |
| # http://www.apache.org/licenses/LICENSE-2.0 | |
| # Unless required by applicable law or agreed to in writing, software | |
| # distributed under the License is distributed on an "AS IS" BASIS, | |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
| # See the License for the specific language governing permissions and | |
| # limitations under the License. | |
| # | |
| name: dapr | |
| on: | |
| workflow_dispatch: | |
| schedule: | |
| - cron: "00 22 * * *" | |
| push: | |
| branches: | |
| - main | |
| - master | |
| - release-* | |
| - feature/* | |
| tags: | |
| - v* | |
| pull_request: | |
| branches: | |
| - main | |
| - master | |
| - release-* | |
| - feature/* | |
| permissions: {} | |
| jobs: | |
| lint: | |
| name: static checks | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| target_os: ["linux"] | |
| target_arch: ["amd64"] | |
| env: | |
| GOLANGCILINT_VER: "v1.61.0" | |
| PROTOC_VERSION: "25.4" | |
| GOOS: "${{ matrix.target_os }}" | |
| GOARCH: "${{ matrix.target_arch }}" | |
| GOPROXY: "https://proxy.golang.org" | |
| steps: | |
| - name: Check out code into the Go module directory | |
| uses: actions/checkout@v4 | |
| - name: Set up Go | |
| id: setup-go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: "go.mod" | |
| - name: Initialize CodeQL | |
| if: github.event_name == 'pull_request' | |
| uses: github/codeql-action/[email protected] | |
| with: | |
| languages: go | |
| queries: security-and-quality | |
| ram: 4096 | |
| - name: Check white space in .md files | |
| if: github.event_name == 'pull_request' | |
| run: | | |
| TRAILING_WHITESPACE=0 | |
| # only check changed docs in pr | |
| for file in $(git diff --cached --name-only --diff-filter=ACRMTU $GITHUB_BASE_REF | grep "\.md"); do | |
| if grep -r '[[:blank:]]$' "$1" > /dev/null; then | |
| echo "trailing whitespace: ${1}" >&2 | |
| ERRORS=yes | |
| ((TRAILING_WHITESPACE=TRAILING_WHITESPACE+1)) | |
| fi | |
| done | |
| if [[ -n "$ERRORS" ]]; then | |
| echo >&2 | |
| echo "ERRORS found" >&2 | |
| echo "${TRAILING_WHITESPACE} files with trailing whitespace" >&2 | |
| echo >&2 | |
| exit 1 | |
| fi | |
| - name: Check for disallowed changes in go.mod | |
| run: node ./.github/scripts/check_go_mod.mjs | |
| - name: golangci-lint | |
| uses: golangci/[email protected] | |
| with: | |
| version: ${{ env.GOLANGCILINT_VER }} | |
| skip-cache: true | |
| args: --build-tags allcomponents --timeout=10m | |
| - name: Run go mod tidy check diff | |
| run: make modtidy check-diff | |
| - name: Check for retracted dependencies | |
| run: | | |
| if [[ $(go list -mod=mod -f '{{if .Retracted}}{{.}}{{end}}' -u -m all) ]]; then | |
| exit 1 | |
| else | |
| exit 0 | |
| fi | |
| - name: Run gen-proto check diff | |
| run: | | |
| wget https://github.com/protocolbuffers/protobuf/releases/download/v${{ env.PROTOC_VERSION }}/protoc-${{ env.PROTOC_VERSION }}-linux-x86_64.zip | |
| unzip protoc-${{ env.PROTOC_VERSION }}-linux-x86_64.zip -d protoc | |
| sudo cp -r protoc/include/google/ /usr/local/include/ | |
| sudo chmod -R 755 /usr/local/include/google | |
| sudo cp protoc/bin/protoc /usr/local/bin/ | |
| sudo chmod +x /usr/local/bin/protoc | |
| rm -r protoc protoc-${{ env.PROTOC_VERSION }}-linux-x86_64.zip | |
| make init-proto | |
| make gen-proto check-proto-diff | |
| - name: Perform CodeQL Analysis | |
| if: github.event_name == 'pull_request' | |
| uses: github/codeql-action/[email protected] | |
| with: | |
| ram: 4096 | |
| depcheck: | |
| name: "Dependency Review" | |
| if: github.event_name == 'pull_request' | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Check out code into the Go module directory | |
| uses: actions/checkout@v4 | |
| - name: Dependency review | |
| uses: actions/dependency-review-action@v4 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: "go.mod" | |
| - name: Install govulncheck | |
| run: go install golang.org/x/vuln/cmd/govulncheck@latest | |
| - name: Run govulncheck | |
| run: govulncheck -C '.' -format text --tags=uint,allcomponents,integration ./... | |
| shell: bash | |
| unit-tests: | |
| name: Unit tests | |
| needs: lint | |
| runs-on: "${{ matrix.os }}" | |
| permissions: | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - os: ubuntu-latest | |
| target_os: linux | |
| target_arch: amd64 | |
| - os: windows-2022 | |
| target_os: windows | |
| target_arch: amd64 | |
| windows_version: ltsc2022 | |
| - os: macOS-latest | |
| target_os: darwin | |
| target_arch: amd64 | |
| env: | |
| GOOS: "${{ matrix.target_os }}" | |
| GOARCH: "${{ matrix.target_arch }}" | |
| GOPROXY: "https://proxy.golang.org" | |
| ARCHIVE_OUTDIR: "dist/archives" | |
| TEST_OUTPUT_FILE_PREFIX: "test_report" | |
| steps: | |
| - name: Check out code into the Go module directory | |
| uses: actions/checkout@v4 | |
| - name: Set up Go | |
| id: setup-go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: "go.mod" | |
| - name: Run make test | |
| env: | |
| COVERAGE_OPTS: "-coverprofile=coverage.txt -covermode=atomic" | |
| run: make test | |
| - name: Codecov | |
| uses: codecov/codecov-action@v1 | |
| - name: Upload test results | |
| if: always() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: ${{ matrix.target_os }}_${{ matrix.target_arch }}_test_unit.json | |
| path: ${{ env.TEST_OUTPUT_FILE_PREFIX }}_unit.json | |
| integration-tests: | |
| name: Integration tests | |
| needs: lint | |
| runs-on: "${{ matrix.os }}" | |
| permissions: | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - os: ubuntu-latest | |
| target_os: linux | |
| target_arch: amd64 | |
| - os: windows-2022 | |
| target_os: windows | |
| target_arch: amd64 | |
| windows_version: ltsc2022 | |
| - os: macOS-latest | |
| target_os: darwin | |
| target_arch: amd64 | |
| env: | |
| GOOS: "${{ matrix.target_os }}" | |
| GOARCH: "${{ matrix.target_arch }}" | |
| GOPROXY: "https://proxy.golang.org" | |
| TEST_OUTPUT_FILE_PREFIX: "test_report" | |
| steps: | |
| - name: Check localhost DNS resolution | |
| run: | | |
| python3 -c 'import socket;print("localhost resolves to:",list(info[4][0] for info in socket.getaddrinfo("localhost", None)))' | |
| - name: Check out code into the Go module directory | |
| uses: actions/checkout@v4 | |
| - name: Set up Go | |
| id: setup-go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: "go.mod" | |
| - name: Override DAPR_HOST_IP for MacOS | |
| if: matrix.target_os == 'darwin' | |
| run: | | |
| echo "DAPR_HOST_IP=127.0.0.1" >>${GITHUB_ENV} | |
| - name: Run make test-integration-parallel | |
| run: make test-integration-parallel | |
| build: | |
| name: "Build artifacts on ${{ matrix.job_name }} - ${{ matrix.sidecar_flavor }}" | |
| runs-on: "${{ matrix.os }}" | |
| permissions: | |
| contents: read | |
| needs: [unit-tests, integration-tests] | |
| env: | |
| GOOS: "${{ matrix.target_os }}" | |
| GOARCH: "${{ matrix.target_arch }}" | |
| GOPROXY: "https://proxy.golang.org" | |
| ARCHIVE_OUTDIR: "dist/archives" | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - os: ubuntu-latest | |
| target_os: linux | |
| target_arch: amd64 | |
| job_name: "Linux/amd64" | |
| sidecar_flavor: "allcomponents" | |
| - os: ubuntu-latest | |
| target_os: linux | |
| target_arch: amd64 | |
| job_name: "Linux/amd64" | |
| sidecar_flavor: "stablecomponents" | |
| - os: ubuntu-latest | |
| target_os: linux | |
| target_arch: arm64 | |
| job_name: "Linux/arm64" | |
| sidecar_flavor: "allcomponents" | |
| - os: ubuntu-latest | |
| target_os: linux | |
| target_arch: arm64 | |
| job_name: "Linux/arm64" | |
| sidecar_flavor: "stablecomponents" | |
| - os: ubuntu-latest | |
| target_os: linux | |
| target_arch: arm | |
| job_name: "Linux/arm" | |
| sidecar_flavor: "allcomponents" | |
| - os: ubuntu-latest | |
| target_os: linux | |
| target_arch: arm | |
| job_name: "Linux/arm" | |
| sidecar_flavor: "stablecomponents" | |
| - os: windows-2019 | |
| target_os: windows | |
| target_arch: amd64 | |
| windows_version: "1809" | |
| job_name: "Windows 1809" | |
| sidecar_flavor: "allcomponents" | |
| - os: windows-2022 | |
| target_os: windows | |
| target_arch: amd64 | |
| windows_version: ltsc2022 | |
| job_name: "Windows LTSC 2022" | |
| sidecar_flavor: "allcomponents" | |
| - os: macOS-latest | |
| target_os: darwin | |
| target_arch: amd64 | |
| job_name: "macOS/Intel" | |
| sidecar_flavor: "allcomponents" | |
| - os: macOS-latest | |
| target_os: darwin | |
| target_arch: arm64 | |
| job_name: "macOS/Apple Silicon" | |
| sidecar_flavor: "allcomponents" | |
| steps: | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v3 | |
| if: matrix.target_os == 'linux' && github.event_name != 'pull_request' | |
| with: | |
| image: tonistiigi/binfmt:latest | |
| platforms: arm64 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| if: matrix.target_os == 'linux' && github.event_name != 'pull_request' | |
| with: | |
| version: v0.10.1 # Don't use latest since it broke our workflow once | |
| - name: Check out code into the Go module directory | |
| uses: actions/checkout@v4 | |
| - name: Set up Go | |
| id: setup-go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: "go.mod" | |
| - name: Parse release version and set REL_VERSION and LATEST_RELEASE | |
| run: python ./.github/scripts/get_release_version.py ${{ github.event_name }} | |
| - name: Updates version for sidecar flavor | |
| if: matrix.sidecar_flavor != 'allcomponents' | |
| run: | | |
| echo "REL_VERSION=${REL_VERSION}-${{matrix.sidecar_flavor}}" >>${GITHUB_ENV} | |
| # Only sidecar is built | |
| echo "BINARIES=daprd" >>${GITHUB_ENV} | |
| shell: bash | |
| - name: Set REPO_OWNER | |
| if: matrix.target_os != 'darwin' | |
| run: | | |
| REPO_OWNER=${{ github.repository_owner }} | |
| # Lowercase the value | |
| echo "REPO_OWNER=${REPO_OWNER,,}" >>${GITHUB_ENV} | |
| shell: bash | |
| - name: Run make release to build and archive binaries | |
| env: | |
| GOOS: ${{ matrix.target_os }} | |
| GOARCH: ${{ matrix.target_arch }} | |
| ARCHIVE_OUT_DIR: ${{ env.ARCHIVE_OUTDIR }} | |
| if: matrix.sidecar_flavor == 'allcomponents' | |
| run: | | |
| mkdir -p "${ARCHIVE_OUT_DIR}" | |
| make release | |
| shell: bash | |
| - name: Run make release to build and archive binaries for flavor | |
| env: | |
| GOOS: ${{ matrix.target_os }} | |
| GOARCH: ${{ matrix.target_arch }} | |
| ARCHIVE_OUT_DIR: ${{ env.ARCHIVE_OUTDIR }} | |
| DAPR_SIDECAR_FLAVOR: "${{ matrix.sidecar_flavor }}" | |
| if: matrix.sidecar_flavor != 'allcomponents' | |
| run: | | |
| mkdir -p "${ARCHIVE_OUT_DIR}" | |
| make release-flavor | |
| shell: bash | |
| - name: upload artifacts | |
| uses: actions/upload-artifact@v4 | |
| # Avoid publishing duplicate Windows artifacts, which will cause an error | |
| if: matrix.windows_version != '1809' | |
| with: | |
| name: dapr_${{ matrix.target_os }}_${{ matrix.target_arch }}_${{ matrix.sidecar_flavor }} | |
| path: ${{ env.ARCHIVE_OUTDIR }} | |
| compression-level: 0 # Content is already compressed | |
| - name: upload artifacts - grafana dashboards | |
| if: matrix.target_arch == 'amd64' && matrix.target_os == 'linux' && matrix.sidecar_flavor == 'allcomponents' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: dapr_grafana_dashboards | |
| path: ./grafana/*.json | |
| - name: Docker Hub Login | |
| if: matrix.target_os != 'darwin' && github.event_name != 'pull_request' && env.DOCKER_REGISTRY_ID != '' | |
| uses: docker/login-action@v3 | |
| env: | |
| DOCKER_REGISTRY_ID: ${{ secrets.DOCKER_REGISTRY_ID }} | |
| with: | |
| username: ${{ secrets.DOCKER_REGISTRY_ID }} | |
| password: ${{ secrets.DOCKER_REGISTRY_PASS }} | |
| - name: GitHub Container Registry login | |
| if: matrix.target_os != 'darwin' && github.event_name != 'pull_request' | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build and push Docker images to Docker Hub | |
| if: matrix.target_os != 'darwin' && github.event_name != 'pull_request' && env.DOCKER_REGISTRY_ID != '' | |
| env: | |
| DOCKER_REGISTRY_ID: ${{ secrets.DOCKER_REGISTRY_ID }} | |
| DAPR_REGISTRY: ${{ secrets.DOCKER_REGISTRY }} | |
| TARGET_OS: ${{ matrix.target_os }} | |
| TARGET_ARCH: ${{ matrix.target_arch }} | |
| WINDOWS_VERSION: ${{ matrix.windows_version }} | |
| run: | | |
| echo "Build Docker images and push to Docker Hub..." | |
| DAPR_TAG=${{ env.REL_VERSION }} make docker-push | |
| # Mariner images are built only on linux/amd64 and linux/arm64 | |
| if [ "$TARGET_OS" = "linux" ] && [ "$TARGET_ARCH" != "arm" ]; then | |
| DOCKERFILE=Dockerfile-mariner DAPR_TAG="${{ env.REL_VERSION }}-mariner" make docker-push | |
| fi | |
| shell: bash | |
| - name: Build and push Docker images to GHCR | |
| if: matrix.target_os != 'darwin' && github.event_name != 'pull_request' | |
| env: | |
| DAPR_REGISTRY: ghcr.io/${{ env.REPO_OWNER }} | |
| TARGET_OS: ${{ matrix.target_os }} | |
| TARGET_ARCH: ${{ matrix.target_arch }} | |
| WINDOWS_VERSION: ${{ matrix.windows_version }} | |
| run: | | |
| echo "Build Docker images and push to GHCR..." | |
| DAPR_TAG=${{ env.REL_VERSION }} make docker-push | |
| # Mariner images are built only on linux/amd64 and linux/arm64 | |
| if [ "$TARGET_OS" = "linux" ] && [ "$TARGET_ARCH" != "arm" ]; then | |
| DOCKERFILE=Dockerfile-mariner DAPR_TAG="${{ env.REL_VERSION }}-mariner" make docker-push | |
| fi | |
| shell: bash | |
| publish: | |
| name: Publish binaries | |
| needs: build | |
| if: github.event_name != 'pull_request' | |
| env: | |
| ARTIFACT_DIR: ./release | |
| DOCKER_REGISTRY: ${{ secrets.DOCKER_REGISTRY }} | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Check out code into the Go module directory | |
| uses: actions/checkout@v4 | |
| - name: Parse release version and set REL_VERSION and LATEST_RELEASE | |
| run: python ./.github/scripts/get_release_version.py ${{ github.event_name }} | |
| - name: Set REPO_OWNER | |
| if: matrix.target_os != 'darwin' | |
| shell: bash | |
| run: | | |
| REPO_OWNER=${{ github.repository_owner }} | |
| # Lowercase the value | |
| echo "REPO_OWNER=${REPO_OWNER,,}" >>${GITHUB_ENV} | |
| - name: "download artifact: dapr_linux_amd64_allcomponents" | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: dapr_linux_amd64_allcomponents | |
| path: ${{ env.ARTIFACT_DIR }} | |
| - name: "download artifact: dapr_linux_amd64_stablecomponents" | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: dapr_linux_amd64_stablecomponents | |
| path: ${{ env.ARTIFACT_DIR }} | |
| - name: "download artifact: dapr_linux_arm_allcomponents" | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: dapr_linux_arm_allcomponents | |
| path: ${{ env.ARTIFACT_DIR }} | |
| - name: "download artifact: dapr_linux_arm_stablecomponents" | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: dapr_linux_arm_stablecomponents | |
| path: ${{ env.ARTIFACT_DIR }} | |
| - name: "download artifact: dapr_linux_arm64_allcomponents" | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: dapr_linux_arm64_allcomponents | |
| path: ${{ env.ARTIFACT_DIR }} | |
| - name: "download artifact: dapr_linux_arm64_stablecomponents" | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: dapr_linux_arm64_stablecomponents | |
| path: ${{ env.ARTIFACT_DIR }} | |
| - name: "download artifact: dapr_windows_amd64_allcomponents" | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: dapr_windows_amd64_allcomponents | |
| path: ${{ env.ARTIFACT_DIR }} | |
| - name: "download artifact: dapr_darwin_amd64_allcomponents" | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: dapr_darwin_amd64_allcomponents | |
| path: ${{ env.ARTIFACT_DIR }} | |
| - name: "download artifact: dapr_darwin_arm64_allcomponents" | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: dapr_darwin_arm64_allcomponents | |
| path: ${{ env.ARTIFACT_DIR }} | |
| - name: "download artifact: dapr_grafana_dashboards" | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: dapr_grafana_dashboards | |
| path: ${{ env.ARTIFACT_DIR }} | |
| - name: generate checksum files | |
| run: cd ${ARTIFACT_DIR} && for i in *; do sha256sum -b $i > "$i.sha256"; done && cd - | |
| - name: lists artifacts | |
| run: ls -l ${{ env.ARTIFACT_DIR }} | |
| - name: publish binaries to github | |
| if: startswith(github.ref, 'refs/tags/v') | |
| run: | | |
| echo "installing github-release-cli..." | |
| sudo npm install --silent --no-progress -g [email protected] | |
| if [ "$LATEST_RELEASE" = "true" ]; then | |
| export RELEASE_BODY=`cat ./docs/release_notes/v${REL_VERSION}.md` | |
| else | |
| export RELEASE_BODY="This is the release candidate ${REL_VERSION}" | |
| fi | |
| # Get the list of files | |
| RELEASE_ARTIFACT=(${ARTIFACT_DIR}/*) | |
| # Parse repository to get owner and repo names | |
| OWNER_NAME="${GITHUB_REPOSITORY%%/*}" | |
| REPO_NAME="${GITHUB_REPOSITORY#*/}" | |
| export GITHUB_TOKEN=${{ secrets.DAPR_BOT_TOKEN }} | |
| echo "Uploading Dapr Runtime Binaries to GitHub Release" | |
| github-release upload \ | |
| --owner $OWNER_NAME \ | |
| --repo $REPO_NAME \ | |
| --tag "v${REL_VERSION}" \ | |
| --release-name "Dapr Runtime v${REL_VERSION}" \ | |
| --body "${RELEASE_BODY}" \ | |
| --prerelease true \ | |
| ${RELEASE_ARTIFACT[*]} | |
| shell: bash | |
| docker-publish: | |
| name: Publish docker images | |
| needs: build | |
| if: github.event_name != 'pull_request' | |
| env: | |
| DOCKER_REGISTRY: ${{ secrets.DOCKER_REGISTRY }} | |
| LATEST_TAG: latest | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| sidecar_flavor: ["allcomponents", "stablecomponents"] | |
| steps: | |
| - name: Check out code into the Go module directory | |
| uses: actions/checkout@v4 | |
| - name: Parse release version and set REL_VERSION and LATEST_RELEASE | |
| run: python ./.github/scripts/get_release_version.py ${{ github.event_name }} | |
| - name: Updates version for sidecar flavor | |
| if: matrix.sidecar_flavor != 'allcomponents' | |
| run: | | |
| echo "REL_VERSION=${REL_VERSION}-${{matrix.sidecar_flavor}}" >>${GITHUB_ENV} | |
| echo "LATEST_TAG=latest-${{matrix.sidecar_flavor}}" >>${GITHUB_ENV} | |
| # We are doing image flavors only for Linux. | |
| echo "DOCKER_MULTI_ARCH=linux-amd64 linux-arm64 linux-arm" >>${GITHUB_ENV} | |
| # Only sidecar is built | |
| echo "BINARIES=daprd" >>${GITHUB_ENV} | |
| shell: bash | |
| - name: Set REPO_OWNER | |
| shell: bash | |
| run: | | |
| REPO_OWNER=${{ github.repository_owner }} | |
| # Lowercase the value | |
| echo "REPO_OWNER=${REPO_OWNER,,}" >>${GITHUB_ENV} | |
| - name: Docker Hub Login | |
| uses: docker/login-action@v3 | |
| if: env.DOCKER_REGISTRY != '' | |
| with: | |
| username: ${{ secrets.DOCKER_REGISTRY_ID }} | |
| password: ${{ secrets.DOCKER_REGISTRY_PASS }} | |
| - name: GitHub Container Registry login | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build and push Docker multiarch manifest to Docker Hub | |
| if: env.DOCKER_REGISTRY_ID != '' | |
| env: | |
| DOCKER_REGISTRY_ID: ${{ secrets.DOCKER_REGISTRY_ID }} | |
| DAPR_REGISTRY: ${{ secrets.DOCKER_REGISTRY }} | |
| run: | | |
| echo "Build Docker multiarch manifest and push to Docker" | |
| DAPR_TAG="${{ env.REL_VERSION }}" make docker-publish | |
| # Publish the `-mariner` tag | |
| # Mariner images are built only on linux/amd64 and linux/arm64 | |
| # Also, these use the "latest-mariner" tag if it's the latest | |
| DOCKER_MULTI_ARCH="linux-amd64 linux-arm64" \ | |
| DAPR_TAG="${{ env.REL_VERSION }}-mariner" \ | |
| LATEST_TAG=${{ env.LATEST_TAG }}-mariner \ | |
| make docker-publish | |
| shell: bash | |
| - name: Build and push Docker multiarch Windows manifest to Docker Hub | |
| if: env.DOCKER_REGISTRY_ID != '' && matrix.sidecar_flavor == 'allcomponents' | |
| env: | |
| DOCKER_REGISTRY_ID: ${{ secrets.DOCKER_REGISTRY_ID }} | |
| DAPR_REGISTRY: ${{ secrets.DOCKER_REGISTRY }} | |
| run: | | |
| # Publish the `-windows-amd64` manifest. | |
| # Note, the "latest" tag from the previous step already contains | |
| # the windows images, so we don't need to publish the "latest-windows-amd64" tag. | |
| DOCKER_MULTI_ARCH="windows-1809-amd64 windows-ltsc2022-amd64" \ | |
| DAPR_TAG="${{ env.REL_VERSION }}-windows-amd64" \ | |
| LATEST_RELEASE=false \ | |
| MANIFEST_TAG="${{ env.REL_VERSION }}" \ | |
| make docker-publish | |
| shell: bash | |
| - name: Build and push Docker multiarch manifest to GHCR | |
| env: | |
| DAPR_REGISTRY: ghcr.io/${{ env.REPO_OWNER }} | |
| run: | | |
| echo "Build Docker multiarch manifest and push to GHCR" | |
| DAPR_TAG="${{ env.REL_VERSION }}" make docker-publish | |
| # Publish the `-mariner` tag | |
| # Mariner images are built only on linux/amd64 and linux/arm64 | |
| # Also, these use the "latest-mariner" tag if it's the latest | |
| DOCKER_MULTI_ARCH="linux-amd64 linux-arm64" \ | |
| DAPR_TAG="${{ env.REL_VERSION }}-mariner" \ | |
| LATEST_TAG=${{ env.LATEST_TAG }}-mariner \ | |
| make docker-publish | |
| - name: Build and push Docker multiarch Windows manifest to GHCR | |
| if: matrix.sidecar_flavor == 'allcomponents' | |
| env: | |
| DAPR_REGISTRY: ghcr.io/${{ env.REPO_OWNER }} | |
| run: | | |
| # Publish the `-windows-amd64` manifest. | |
| # Note, the "latest" tag from the previous step already contains | |
| # the windows images, so we don't need to publish the "latest-windows-amd64" tag. | |
| DOCKER_MULTI_ARCH="windows-1809-amd64 windows-ltsc2022-amd64" \ | |
| DAPR_TAG="${{ env.REL_VERSION }}-windows-amd64" \ | |
| LATEST_RELEASE=false \ | |
| MANIFEST_TAG="${{ env.REL_VERSION }}" \ | |
| make docker-publish | |
| shell: bash | |
| helm: | |
| name: Package Helm Chart | |
| needs: [publish, docker-publish] | |
| if: github.event_name != 'pull_request' | |
| env: | |
| ARTIFACT_DIR: ./release | |
| HELM_PACKAGE_DIR: helm | |
| DAPR_VERSION_ARTIFACT: dapr_version | |
| DOCKER_REGISTRY: ${{ secrets.DOCKER_REGISTRY }} | |
| HELMVER: v3.13.2 | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Set up Helm ${{ env.HELMVER }} | |
| uses: azure/setup-helm@v3 | |
| with: | |
| version: ${{ env.HELMVER }} | |
| - name: Check out code into the Go module directory | |
| uses: actions/checkout@v4 | |
| - name: Parse release version and set REL_VERSION and LATEST_RELEASE | |
| run: python ./.github/scripts/get_release_version.py ${{ github.event_name }} | |
| - name: Set REPO_OWNER | |
| shell: bash | |
| run: | | |
| REPO_OWNER=${{ github.repository_owner }} | |
| # Lowercase the value | |
| echo "REPO_OWNER=${REPO_OWNER,,}" >>${GITHUB_ENV} | |
| - name: Update Helm chart files for release version ${{ env.REL_VERSION }} | |
| run: bash ./.github/scripts/set_helm_dapr_version.sh | |
| - name: Generate Helm chart manifest | |
| if: env.DOCKER_REGISTRY != '' | |
| env: | |
| DAPR_REGISTRY: ${{ env.DOCKER_REGISTRY }} | |
| DAPR_TAG: ${{ env.REL_VERSION }} | |
| run: | | |
| make manifest-gen | |
| shell: bash | |
| - name: Move Helm chart manifest to artifact | |
| if: env.DOCKER_REGISTRY != '' | |
| run: | | |
| mkdir -p ${{ env.ARTIFACT_DIR }} | |
| mv ./dist/install/dapr.yaml ${{ env.ARTIFACT_DIR }}/dapr-operator.yaml | |
| - name: Save release version | |
| run: | | |
| mkdir -p ${{ env.ARTIFACT_DIR }}/${{ env.HELM_PACKAGE_DIR }} | |
| echo ${REL_VERSION} > ${{ env.ARTIFACT_DIR }}/${{ env.HELM_PACKAGE_DIR }}/${{ env.DAPR_VERSION_ARTIFACT }} | |
| - name: Package Helm chart | |
| if: ${{ env.LATEST_RELEASE }} == "true" && env.DOCKER_REGISTRY != '' | |
| env: | |
| HELM_CHARTS_DIR: charts/dapr | |
| run: | | |
| mkdir -p ${{ env.ARTIFACT_DIR }}/${{ env.HELM_PACKAGE_DIR }} | |
| helm package ${{ env.HELM_CHARTS_DIR }} --destination ${{ env.ARTIFACT_DIR }}/${{ env.HELM_PACKAGE_DIR }} | |
| - name: Upload Helm charts package to artifacts | |
| if: ${{ env.LATEST_RELEASE }} == "true" && env.DOCKER_REGISTRY != '' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: dapr_helm_charts_package | |
| path: ${{ env.ARTIFACT_DIR }}/${{ env.HELM_PACKAGE_DIR }} | |
| # This job downloads the helm charts package artifact uploaded by the publish job, | |
| # checks out the helm charts git hub pages repo and commits the latest version of | |
| # helm charts package. | |
| # This does not run on forks | |
| helmpublish: | |
| name: Publish helm charts to Helm github pages repo | |
| needs: helm | |
| if: startswith(github.ref, 'refs/tags/v') && github.repository_owner == 'dapr' | |
| env: | |
| ARTIFACT_DIR: ./release | |
| DAPR_VERSION_ARTIFACT: dapr_version | |
| HELM_PACKAGE_DIR: helm | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Create Helm charts directory | |
| run: | | |
| mkdir -p ${{ env.ARTIFACT_DIR }}/${{ env.HELM_PACKAGE_DIR }} | |
| - name: download artifacts - dapr_helm_charts_package | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: dapr_helm_charts_package | |
| path: ${{ env.ARTIFACT_DIR }}/${{ env.HELM_PACKAGE_DIR }} | |
| - name: Checkout Helm Charts Repo | |
| uses: actions/checkout@v4 | |
| env: | |
| DAPR_HELM_REPO: dapr/helm-charts | |
| DAPR_HELM_REPO_CODE_PATH: helm-charts | |
| with: | |
| repository: ${{ env.DAPR_HELM_REPO }} | |
| ref: refs/heads/master | |
| token: ${{ secrets.DAPR_BOT_TOKEN }} | |
| path: ${{ env.DAPR_HELM_REPO_CODE_PATH }} | |
| - name: Upload helm charts to Helm Repo | |
| env: | |
| DAPR_HELM_REPO_CODE_PATH: helm-charts | |
| DAPR_HELM_REPO: https://dapr.github.io/helm-charts/ | |
| run: | | |
| daprVersion=`cat ${{ env.ARTIFACT_DIR }}/${{ env.HELM_PACKAGE_DIR }}/${{ env.DAPR_VERSION_ARTIFACT }}` | |
| cd ${{ env.ARTIFACT_DIR }}/${{ env.HELM_PACKAGE_DIR }} | |
| cp -r `ls -A | grep -v ${{ env.DAPR_VERSION_ARTIFACT }}` $GITHUB_WORKSPACE/${{ env.DAPR_HELM_REPO_CODE_PATH }} | |
| cd $GITHUB_WORKSPACE/${{ env.DAPR_HELM_REPO_CODE_PATH }} | |
| helm repo index --url ${{ env.DAPR_HELM_REPO }} --merge index.yaml . | |
| git config --global user.email "[email protected]" | |
| git config --global user.name "dapr-bot" | |
| git add --all | |
| # Check if the dapr-${daprVersion}.tgz file is modified. | |
| if git diff --name-only --staged | grep -q ${daprVersion}; then | |
| # If it is, we update the Helm chart, since this is an intentional update. | |
| git commit -m "Release - $daprVersion" | |
| git push | |
| else | |
| # If not, this update was accidentally triggered by tagging a release before updating the Helm chart. | |
| echo "::error::There is no change for ${daprVersion} Helm chart. Did you forget to update the chart version before tagging?" | |
| exit -1 | |
| fi | |
| update-longhauls: | |
| name: Update the dapr version in long haul tests | |
| needs: helmpublish | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| if: startswith(github.ref, 'refs/tags/v') && github.repository_owner == 'dapr' | |
| env: | |
| LONG_HAUL_REPO: test-infra | |
| steps: | |
| - name: Get Token | |
| id: get_workflow_token | |
| uses: actions/create-github-app-token@v1 | |
| with: | |
| app-id: ${{ secrets.APPLICATION_ID }} | |
| private-key: ${{ secrets.APPLICATION_PRIVATE_KEY }} | |
| repositories: ${{ env.LONG_HAUL_REPO }} | |
| - name: Check out code into the Go module directory | |
| uses: actions/checkout@v4 | |
| with: | |
| path: dapr | |
| - name: Checkout the longhaul tests repo | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: dapr/${{ env.LONG_HAUL_REPO }} | |
| token: ${{ steps.get_workflow_token.outputs.token }} | |
| path: ${{ env.LONG_HAUL_REPO }} | |
| - name: Install Python Dependencies | |
| run: | | |
| pip install packaging | |
| - name: Parse release version and set REL_VERSION and LATEST_RELEASE | |
| run: python dapr/.github/scripts/get_release_version.py ${{ github.event_name }} | |
| - name: Compare versions and determine if update of long haul tests is required | |
| id: compare_versions | |
| run: | | |
| EXISTING_VERSION=$(cat "${{ env.LONG_HAUL_REPO }}/config/dapr_runtime.version") | |
| echo "Existing version in long haul tests: $EXISTING_VERSION" | |
| echo "New version: ${{ env.REL_VERSION }}" | |
| python dapr/.github/scripts/compare_versions.py "${{ env.REL_VERSION }}" "$EXISTING_VERSION" | |
| - name: Update dapr runtime version in the long haul tests repo | |
| if: env.VERSION_UPDATE_REQUIRED == 'true' | |
| run: | | |
| echo "${REL_VERSION}" > ${{ env.LONG_HAUL_REPO }}/config/dapr_runtime.version | |
| - name: Commit and Push Changes to repoB | |
| if: env.VERSION_UPDATE_REQUIRED == 'true' | |
| run: | | |
| cd ${{ env.LONG_HAUL_REPO }} | |
| git config --global user.name "github-actions" | |
| git config --global user.email "[email protected]" | |
| git add config/dapr_runtime.version | |
| git commit -m "Updates dapr runtime version to ${REL_VERSION}" | |
| git push |