publish-recipes.yaml

# ------------------------------------------------------------
# Copyright 2023 The Radius Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#    
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# ------------------------------------------------------------

name: Publish Recipes

on:
  pull_request:
    branches:
      - main
  push:
    branches:
      - main
    tags:
      - v*

concurrency:
  group: publish-${{ github.event.pull_request.number || github.sha }}
  cancel-in-progress: true

jobs:
  publish-dev:
    name: Publish Recipes to Dev ACR
    runs-on: ubuntu-latest
    if: github.event_name == 'pull_request' && github.event.action != 'closed'
    env:
      ACR_HOST: radiusdev.azurecr.io
    steps:
    - name: Check out repo
      uses: actions/checkout@v3
    - name: az CLI login
      run: |
        az login --service-principal \
          --username ${{ secrets.AZURE_SP_TESTS_APPID }} \
          --password ${{ secrets.AZURE_SP_TESTS_PASSWORD }} \
          --tenant ${{ secrets.AZURE_SP_TESTS_TENANTID }}
    - name: Parse release version and set environment variables
      run: python ./.github/scripts/get_release_version.py
    - name: Download rad-bicep
      run: |
        ./.github/scripts/curl-with-retries.sh https://get.radapp.dev/tools/bicep-extensibility/${{ env.REL_CHANNEL }}/linux-x64/rad-bicep --output rad-bicep
        chmod +x rad-bicep
        ./rad-bicep --version
    - name: Publish Recipes to Dev ACRs
      # Uses REL_VERSION as the recipe version so PR builds result in a `pr-<pr number>` tag
      run: ./.github/scripts/publish-recipes.sh . radiusdev.azurecr.io ${{ env.REL_VERSION }}

  delete-dev:
    name: Delete Dev ACR Images
    runs-on: ubuntu-latest
    needs: publish-dev
    if: github.event_name == 'pull_request' && github.event.action == 'closed'
    env:
      ACR_HOST: radiusdev.azurecr.io
    steps:
    - name: Check out repo
      uses: actions/checkout@v3
    - name: az CLI login
      run: |
        az login --service-principal \
          --username ${{ secrets.AZURE_SP_TESTS_APPID }} \
          --password ${{ secrets.AZURE_SP_TESTS_PASSWORD }} \
          --tenant ${{ secrets.AZURE_SP_TESTS_TENANTID }}
    - name: Parse release version and set environment variables
      run: python ./.github/scripts/get_release_version.py
    - name: Delete Dev ACR Images
      run: ./.github/scripts/delete-recipes.sh radiusdev.azurecr.io ${{ env.REL_VERSION }}

  # This is where we can add integration tests in the future

  publish-public:
    name: Publish Recipes to Public ACR
    runs-on: ubuntu-latest
    if: github.event_name != 'pull_request'
    environment: 
      name: Public
    env:
      ACR_HOST: radius.azurecr.io
    steps:
    - name: Check out repo
      uses: actions/checkout@v3
    - name: az CLI login
      run: |
        az login --service-principal \
          --username ${{ secrets.AZURE_SP_TESTS_APPID }} \
          --password ${{ secrets.AZURE_SP_TESTS_PASSWORD }} \
          --tenant ${{ secrets.AZURE_SP_TESTS_TENANTID }}
    - name: Parse release version and set environment variables
      run: python ./.github/scripts/get_release_version.py
    - name: Download rad-bicep
      run: |
        ./.github/scripts/curl-with-retries.sh https://get.radapp.dev/tools/bicep-extensibility/edge/linux-x64/rad-bicep --output rad-bicep
        chmod +x rad-bicep
        ./rad-bicep --version
    - name: Publish Recipes to Prod ACR
      run: | 
        ./.github/scripts/publish-recipes.sh . radius.azurecr.io ${{ env.REL_CHANNEL }}
        if [ "${{ env.REL_TAG }}" != "${{ env.REL_CHANNEL }}" ]; then
          ./.github/scripts/publish-recipes.sh . radius.azurecr.io ${{ env.REL_TAG }}
        fi