-
Notifications
You must be signed in to change notification settings - Fork 337
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
ci(github): update workflows to use ubuntu-24.04 runners (#12251)
GitHub is upgrading the `ubuntu-latest` runners to `ubuntu-24.04`. We need to make sure our CI still works as expected. I also suggest pinning the runner image version instead of using `ubuntu-latest`. <!-- > Changelog: skip --> <!-- Uncomment the above section to explicitly set a [`> Changelog:` entry here](https://github.com/kumahq/kuma/blob/master/CONTRIBUTING.md#submitting-a-patch)? --> Signed-off-by: Bart Smykla <[email protected]>
- Loading branch information
1 parent
805f737
commit 0a8683e
Showing
16 changed files
with
188 additions
and
17 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,82 @@ | ||
| name: Check CI stability for PRs with "ci/verify-stability" or "ci/verify-stability-merge-master" label | ||
|
|
||
| on: | ||
| schedule: | ||
| # Monday to Friday: Every 2 hours from 7 PM to 7 AM CEST | ||
| - cron: "0 17 * * 1-5" | ||
| - cron: "0 19 * * 1-5" | ||
| - cron: "0 21 * * 1-5" | ||
| - cron: "0 23 * * 1-5" | ||
| - cron: "0 1 * * 2-6" | ||
| - cron: "0 3 * * 2-6" | ||
| - cron: "0 5 * * 2-6" | ||
| # Saturday and Sunday: Every 2 hours all day | ||
| - cron: "0 */2 * * 6,0" | ||
| workflow_dispatch: # Allows manual trigger from GitHub Actions UI | ||
| env: | ||
| GH_USER: "github-actions[bot]" | ||
| GH_EMAIL: "<41898282+github-actions[bot]@users.noreply.github.com>" | ||
| jobs: | ||
| trigger-ci: | ||
| runs-on: ubuntu-24.04 | ||
| steps: | ||
| - name: Generate GitHub app token | ||
| id: github-app-token | ||
| uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0 | ||
| with: | ||
| app-id: ${{ secrets.APP_ID }} | ||
| private-key: ${{ secrets.APP_PRIVATE_KEY }} | ||
| - name: Checkout repository | ||
| uses: actions/checkout@v3 | ||
| with: | ||
| fetch-depth: 0 | ||
| token: ${{ steps.github-app-token.outputs.token }} | ||
| - name: Get open pull requests and save to file | ||
| run: | | ||
| gh pr list --json number,labels > open_prs.json | ||
| env: | ||
| GITHUB_TOKEN: ${{ steps.github-app-token.outputs.token }} | ||
| - name: Process PRs | ||
| id: process_prs | ||
| run: | | ||
| cat open_prs.json | ||
| pr_numbers_with_verify_stability=$(jq -r -c '.[] | select(.labels[]?.name == "ci/verify-stability") | .number' open_prs.json | tr '\n' ' ') | ||
| pr_numbers_with_verify_stability_merge_master=$(jq -r '.[] | select(.labels[]?.name == "ci/verify-stability-merge-master") | .number' open_prs.json | tr '\n' ' ') | ||
| echo "PRs with 'ci/verify-stability' label: $pr_numbers_with_verify_stability" | ||
| echo "PRs with 'ci/verify-stability-merge-master' label: $pr_numbers_with_verify_stability_merge_master" | ||
| echo "pr_numbers_with_verify_stability=$pr_numbers_with_verify_stability" >> $GITHUB_OUTPUT | ||
| echo "pr_numbers_with_verify_stability_merge_master=$pr_numbers_with_verify_stability_merge_master" >> $GITHUB_OUTPUT | ||
| env: | ||
| GITHUB_TOKEN: ${{ steps.github-app-token.outputs.token }} | ||
| - name: Merge master branch (if applicable) and push a single commit | ||
| if: steps.process_prs.outputs.pr_numbers_with_verify_stability != '' | ||
| run: | | ||
| eval "pr_numbers=(${{ steps.process_prs.outputs.pr_numbers_with_verify_stability }})" | ||
| for pr_number in $pr_numbers; do | ||
| current_datetime=$(date +"%Y-%m-%d %H:%M:%S") | ||
| echo "Processing PR #$pr_number" | ||
| # Fetch PR details to get the base branch (original branch name) | ||
| pr_branch=$(gh pr view $pr_number --json headRefName --jq '.headRefName') | ||
| echo "The original branch for PR #$pr_number is $pr_branch" | ||
| git fetch origin pull/$pr_number/head:$pr_branch | ||
| git checkout $pr_branch | ||
| git config user.name "${GH_USER}" | ||
| git config user.email "${GH_EMAIL}" | ||
| # Check if the PR needs to merge with master | ||
| if echo "${{ steps.process_prs.outputs.pr_numbers_with_verify_stability_merge_master }}" | grep -wq "$pr_number"; then | ||
| echo "Merging master into PR #$pr_number" | ||
| git fetch origin master | ||
| git merge origin/master --no-ff --no-commit | ||
| git commit --allow-empty -m "Merge master into PR #$pr_number" | ||
| fi | ||
| # Commit an empty commit to trigger the CI | ||
| echo "Pushing empty commit to trigger CI for PR #$pr_number on $current_datetime" | ||
| git commit --allow-empty -m "Trigger CI for PR #$pr_number on $current_datetime" | ||
| git push origin $pr_branch | ||
| done | ||
| env: | ||
| GITHUB_TOKEN: ${{ steps.github-app-token.outputs.token }} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,70 @@ | ||
| name: "Merge release to master" | ||
|
|
||
| concurrency: | ||
| group: ${{ github.workflow }}-${{ github.ref }} | ||
| cancel-in-progress: false | ||
| on: | ||
| push: | ||
| branches: ["release-*"] | ||
| workflow_dispatch: {} | ||
| permissions: | ||
| contents: read | ||
| jobs: | ||
| release: | ||
| runs-on: ubuntu-24.04 | ||
| steps: | ||
| - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 | ||
| with: | ||
| ref: "master" | ||
| fetch-depth: 0 | ||
| - uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0 | ||
| with: | ||
| go-version-file: go.mod | ||
| - run: | | ||
| make dev/tools | ||
| - run: | | ||
| git config --global user.email "110050114+kumahq[bot]@users.noreply.github.com" | ||
| git config --global user.name "kumahq[bot]" | ||
| - id: latest-branch | ||
| run: | | ||
| echo "branch=$(make dev/print-latest-release-branch)" >> $GITHUB_OUTPUT | ||
| - run: | | ||
| if [[ "refs/heads/${{ steps.latest-branch.outputs.branch }}" == "${{ github.ref }}" ]]; then | ||
| make dev/merge-release | ||
| fi | ||
| - id: commit-changes | ||
| run: | | ||
| git status | ||
| # "git merge HEAD" is the way to check if merge is in progress | ||
| if git merge HEAD &> /dev/null; then | ||
| echo "skipping commit" | ||
| echo "changes=skipped" >> $GITHUB_OUTPUT | ||
| else | ||
| echo "commit changes" | ||
| git commit -s -m "chore(merge): ${{ steps.latest-branch.outputs.branch }} branch to master" | ||
| echo "changes=committed" >> $GITHUB_OUTPUT | ||
| fi | ||
| - name: Generate GitHub app token | ||
| id: github-app-token | ||
| uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0 | ||
| with: | ||
| app-id: ${{ secrets.APP_ID }} | ||
| private-key: ${{ secrets.APP_PRIVATE_KEY }} | ||
| - name: "Create Pull Request" | ||
| uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5 | ||
| if: steps.commit-changes.outputs.changes == 'committed' | ||
| with: | ||
| commit-message: "chore(merge): ${{ steps.latest-branch.outputs.branch }} branch to master" | ||
| signoff: true | ||
| branch: chore/merge-release-to-master | ||
| base: master | ||
| delete-branch: true | ||
| title: "chore(merge): ${{ steps.latest-branch.outputs.branch }} branch to master" | ||
| draft: false | ||
| token: ${{ steps.github-app-token.outputs.token }} | ||
| committer: kumahq[bot] <110050114+kumahq[bot]@users.noreply.github.com> | ||
| author: kumahq[bot] <110050114+kumahq[bot]@users.noreply.github.com> | ||
| body: | | ||
| **Do NOT squash on merging.** Allow merge commit first in the [repository settings](https://github.com/${{ github.repository }}/settings). | ||
| Generated by [action](https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters