MON-154331 Sync release Collect 24.04 (#1961) #565
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: gorgone | |
concurrency: | |
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} | |
cancel-in-progress: true | |
on: | |
workflow_dispatch: | |
pull_request: | |
types: | |
- opened | |
- synchronize | |
- reopened | |
- ready_for_review | |
paths: | |
- "gorgone/**" | |
- "!gorgone/tests/**" | |
- "!gorgone/veracode.json" | |
- "!gorgone/.veracode-exclusions" | |
push: | |
branches: | |
- develop | |
- dev-[2-9][0-9].[0-9][0-9].x | |
- master | |
- "[2-9][0-9].[0-9][0-9].x" | |
paths: | |
- "gorgone/**" | |
- "!gorgone/tests/**" | |
- "!gorgone/veracode.json" | |
- "!gorgone/.veracode-exclusions" | |
env: | |
base_directory: gorgone | |
jobs: | |
get-environment: | |
uses: ./.github/workflows/get-environment.yml | |
with: | |
version_file: gorgone/.version | |
veracode-analysis: | |
needs: [get-environment] | |
if: ${{ needs.get-environment.outputs.is_targeting_feature_branch != 'true' && github.event.pull_request.draft != 'true' }} | |
uses: ./.github/workflows/veracode-analysis.yml | |
with: | |
module_directory: gorgone | |
module_name: centreon-gorgone | |
major_version: ${{ needs.get-environment.outputs.major_version }} | |
minor_version: ${{ needs.get-environment.outputs.minor_version }} | |
img_version: ${{ needs.get-environment.outputs.img_version }} | |
secrets: | |
veracode_api_id: ${{ secrets.VERACODE_API_ID_GORG }} | |
veracode_api_key: ${{ secrets.VERACODE_API_KEY_GORG }} | |
veracode_srcclr_token: ${{ secrets.VERACODE_SRCCLR_TOKEN }} | |
docker_registry_id: ${{ secrets.HARBOR_CENTREON_PULL_USERNAME }} | |
docker_registry_passwd: ${{ secrets.HARBOR_CENTREON_PULL_TOKEN }} | |
package: | |
needs: [get-environment] | |
if: ${{ needs.get-environment.outputs.stability != 'stable' }} | |
strategy: | |
fail-fast: false | |
matrix: | |
distrib: [el8, el9, bullseye, bookworm, jammy] | |
include: | |
- package_extension: rpm | |
image: packaging-nfpm-alma8 | |
distrib: el8 | |
- package_extension: rpm | |
image: packaging-nfpm-alma9 | |
distrib: el9 | |
- package_extension: deb | |
image: packaging-nfpm-bullseye | |
distrib: bullseye | |
- package_extension: deb | |
image: packaging-nfpm-bookworm | |
distrib: bookworm | |
- package_extension: deb | |
image: packaging-nfpm-jammy | |
distrib: jammy | |
runs-on: ubuntu-24.04 | |
container: | |
image: ${{ vars.DOCKER_INTERNAL_REGISTRY_URL }}/${{ matrix.image }}:${{ needs.get-environment.outputs.major_version }} | |
credentials: | |
username: ${{ secrets.HARBOR_CENTREON_PULL_USERNAME }} | |
password: ${{ secrets.HARBOR_CENTREON_PULL_TOKEN }} | |
name: package ${{ matrix.distrib }} | |
steps: | |
- name: Checkout sources | |
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
- name: Set package version and paths according to distrib | |
run: | | |
if [[ "${{ matrix.package_extension }}" == "deb" ]]; then | |
PERL_VENDORLIB="/usr/share/perl5" | |
else | |
PERL_VENDORLIB="/usr/share/perl5/vendor_perl" | |
fi | |
echo "PERL_VENDORLIB=$PERL_VENDORLIB" >> $GITHUB_ENV | |
shell: bash | |
- name: Generate selinux binaries | |
if: ${{ matrix.package_extension == 'rpm' }} | |
run: | | |
cd gorgone/selinux | |
sed -i "s/@VERSION@/${{ needs.get-environment.outputs.major_version }}.${{ needs.get-environment.outputs.minor_version }}/g" centreon-gorgoned.te | |
make -f /usr/share/selinux/devel/Makefile | |
shell: bash | |
- name: Remove selinux packaging files on debian | |
if: ${{ matrix.package_extension == 'deb' }} | |
run: rm -f gorgone/packaging/*-selinux.yaml | |
shell: bash | |
- name: Package | |
uses: ./.github/actions/package | |
with: | |
nfpm_file_pattern: "gorgone/packaging/*.yaml" | |
distrib: ${{ matrix.distrib }} | |
package_extension: ${{ matrix.package_extension }} | |
major_version: ${{ needs.get-environment.outputs.major_version }} | |
minor_version: ${{ needs.get-environment.outputs.minor_version }} | |
release: ${{ needs.get-environment.outputs.release }} | |
arch: all | |
commit_hash: ${{ github.sha }} | |
cache_key: ${{ github.sha }}-${{ github.run_id }}-${{ matrix.package_extension }}-${{ matrix.distrib }} | |
rpm_gpg_key: ${{ secrets.RPM_GPG_SIGNING_KEY }} | |
rpm_gpg_signing_key_id: ${{ secrets.RPM_GPG_SIGNING_KEY_ID }} | |
rpm_gpg_signing_passphrase: ${{ secrets.RPM_GPG_SIGNING_PASSPHRASE }} | |
stability: ${{ needs.get-environment.outputs.stability }} | |
deliver-sources: | |
runs-on: [self-hosted, common] | |
needs: [get-environment, package] | |
if: ${{ contains(fromJson('["stable"]'), needs.get-environment.outputs.stability) && github.event_name != 'workflow_dispatch' }} | |
steps: | |
- name: Checkout sources | |
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
- name: Deliver sources | |
uses: ./.github/actions/release-sources | |
with: | |
bucket_directory: centreon-gorgone | |
module_directory: gorgone | |
module_name: centreon-gorgone | |
major_version: ${{ needs.get-environment.outputs.major_version }} | |
minor_version: ${{ needs.get-environment.outputs.minor_version }} | |
token_download_centreon_com: ${{ secrets.TOKEN_DOWNLOAD_CENTREON_COM }} | |
deliver-rpm: | |
runs-on: [self-hosted, common] | |
needs: [get-environment, package] | |
if: ${{ contains(fromJson('["testing", "unstable"]'), needs.get-environment.outputs.stability) }} | |
strategy: | |
matrix: | |
distrib: [el8, el9] | |
steps: | |
- name: Checkout sources | |
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
- name: Delivery | |
uses: ./.github/actions/rpm-delivery | |
with: | |
module_name: gorgone | |
distrib: ${{ matrix.distrib }} | |
version: ${{ needs.get-environment.outputs.major_version }} | |
artifactory_token: ${{ secrets.ARTIFACTORY_ACCESS_TOKEN }} | |
cache_key: ${{ github.sha }}-${{ github.run_id }}-rpm-${{ matrix.distrib }} | |
stability: ${{ needs.get-environment.outputs.stability }} | |
release_type: ${{ needs.get-environment.outputs.release_type }} | |
is_cloud: ${{ needs.get-environment.outputs.is_cloud }} | |
deliver-deb: | |
runs-on: [self-hosted, common] | |
needs: [get-environment, package] | |
if: ${{ contains(fromJson('["testing", "unstable"]'), needs.get-environment.outputs.stability) }} | |
strategy: | |
matrix: | |
distrib: [bullseye, bookworm, jammy] | |
steps: | |
- name: Checkout sources | |
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
- name: Delivery | |
uses: ./.github/actions/deb-delivery | |
with: | |
module_name: gorgone | |
distrib: ${{ matrix.distrib }} | |
version: ${{ needs.get-environment.outputs.major_version }} | |
artifactory_token: ${{ secrets.ARTIFACTORY_ACCESS_TOKEN }} | |
cache_key: ${{ github.sha }}-${{ github.run_id }}-deb-${{ matrix.distrib }} | |
stability: ${{ needs.get-environment.outputs.stability }} | |
release_type: ${{ needs.get-environment.outputs.release_type }} | |
is_cloud: ${{ needs.get-environment.outputs.is_cloud }} | |
promote: | |
needs: [get-environment, deliver-rpm, deliver-deb] | |
if: | | |
(contains(fromJson('["stable", "testing"]'), needs.get-environment.outputs.stability) && github.event_name != 'workflow_dispatch') && | |
! cancelled() && | |
! contains(needs.*.result, 'failure') && | |
! contains(needs.*.result, 'cancelled') | |
runs-on: [self-hosted, common] | |
strategy: | |
matrix: | |
distrib: [el8, el9, bullseye, bookworm, jammy] | |
steps: | |
- name: Checkout sources | |
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
- name: Promote ${{ matrix.distrib }} to stable | |
uses: ./.github/actions/promote-to-stable | |
with: | |
artifactory_token: ${{ secrets.ARTIFACTORY_ACCESS_TOKEN }} | |
module_name: gorgone | |
distrib: ${{ matrix.distrib }} | |
major_version: ${{ needs.get-environment.outputs.major_version }} | |
stability: ${{ needs.get-environment.outputs.stability }} | |
github_ref_name: ${{ github.ref_name }} | |
release_type: ${{ needs.get-environment.outputs.release_type }} | |
is_cloud: ${{ needs.get-environment.outputs.is_cloud }} |