219 lines
9.6 KiB
YAML
219 lines
9.6 KiB
YAML
name: Frontend Release (reusable)
|
|
|
|
# Pipeline di release per frontend Angular containerizzati con nginx.
|
|
# Speculare a maven-release.yml ma per il mondo FE:
|
|
# - versionamento su package.json (source of truth), flusso -SNAPSHOT come maven
|
|
# - UNA sola immagine env-agnostic (i puntamenti per-ambiente vivono nelle
|
|
# env var del docker-compose, applicate a runtime da nginx via envsubst)
|
|
# - push su registry artifacts.biters.it:8443/biters/<name>:<versione>
|
|
# - tag + release Gitea, bump SNAPSHOT, rebase develop, update compose repos
|
|
#
|
|
# Requisiti runner: deve avere Docker (buildx) disponibile + jq/curl/git.
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
compose-repos:
|
|
description: "Repo docker-compose da aggiornare, separati da virgola (es. Biters/bitwork). Vuoto = skip."
|
|
required: false
|
|
type: string
|
|
default: ""
|
|
docker-registry:
|
|
description: "Registry Docker."
|
|
required: false
|
|
type: string
|
|
default: "artifacts.biters.it:8443"
|
|
build-config:
|
|
description: "Configurazione Angular da buildare (deve essere env-agnostic)."
|
|
required: false
|
|
type: string
|
|
default: "prod"
|
|
|
|
jobs:
|
|
release:
|
|
runs-on: ubuntu-latest
|
|
env:
|
|
MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
|
|
MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
|
|
GITEA_TOKEN: ${{ secrets.REPO_ACCESS_TOKEN }}
|
|
REGISTRY: ${{ inputs.docker-registry }}
|
|
BUILD_CONFIG: ${{ inputs.build-config }}
|
|
steps:
|
|
# ── Bootstrap ──────────────────────────────────────────────
|
|
- uses: actions/checkout@v6
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Verifica tooling e configurazione
|
|
run: |
|
|
missing=0
|
|
for v in MAVEN_USERNAME MAVEN_PASSWORD GITEA_TOKEN; do
|
|
eval "val=\${$v}"
|
|
if [ -z "$val" ]; then echo "MANCANTE: $v"; missing=1; else echo "OK: $v"; fi
|
|
done
|
|
[ "$missing" -eq 0 ] || { echo "Imposta le Secrets mancanti a livello org."; exit 1; }
|
|
|
|
# Tool richiesti sul runner
|
|
command -v docker >/dev/null 2>&1 || { echo "ERRORE: docker non disponibile sul runner."; exit 1; }
|
|
command -v jq >/dev/null 2>&1 || { echo "ERRORE: jq non disponibile sul runner."; exit 1; }
|
|
docker buildx version >/dev/null 2>&1 || { echo "ERRORE: docker buildx non disponibile."; exit 1; }
|
|
|
|
- name: Configura git
|
|
run: |
|
|
git config user.name "CI Release Bot"
|
|
git config user.email "ci@biters.it"
|
|
git remote set-url origin "https://biters.gitea:${GITEA_TOKEN}@git.biters.it/${{ github.repository }}.git"
|
|
|
|
# ── Versione ───────────────────────────────────────────────
|
|
- name: Promuovi a release (rimuovi -SNAPSHOT)
|
|
id: version
|
|
run: |
|
|
CURRENT=$(jq -r '.version' package.json)
|
|
RELEASE_VERSION="${CURRENT%-SNAPSHOT}"
|
|
PROJECT_NAME=$(jq -r '.name' package.json)
|
|
|
|
# Scrive la versione di release nel package.json
|
|
jq --arg v "$RELEASE_VERSION" '.version=$v' package.json > package.json.tmp
|
|
mv package.json.tmp package.json
|
|
|
|
MAJOR=$(echo "$RELEASE_VERSION" | cut -d. -f1)
|
|
MINOR=$(echo "$RELEASE_VERSION" | cut -d. -f2)
|
|
PATCH=$(echo "$RELEASE_VERSION" | cut -d. -f3)
|
|
NEXT_VERSION="$MAJOR.$MINOR.$((PATCH + 1))-SNAPSHOT"
|
|
|
|
echo "RELEASE_VERSION=$RELEASE_VERSION" >> "$GITHUB_OUTPUT"
|
|
echo "PROJECT_NAME=$PROJECT_NAME" >> "$GITHUB_OUTPUT"
|
|
echo "NEXT_VERSION=$NEXT_VERSION" >> "$GITHUB_OUTPUT"
|
|
|
|
echo "── Riepilogo ──"
|
|
echo " project : $PROJECT_NAME"
|
|
echo " release : $RELEASE_VERSION"
|
|
echo " next : $NEXT_VERSION"
|
|
|
|
# ── Check registry ─────────────────────────────────────────
|
|
- name: Verifica che il tag immagine non esista già
|
|
run: |
|
|
VERSION="${{ steps.version.outputs.RELEASE_VERSION }}"
|
|
NAME="${{ steps.version.outputs.PROJECT_NAME }}"
|
|
|
|
HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" \
|
|
-u "$MAVEN_USERNAME:$MAVEN_PASSWORD" \
|
|
-H "Accept: application/vnd.docker.distribution.manifest.v2+json" \
|
|
"https://${REGISTRY}/v2/biters/${NAME}/manifests/${VERSION}")
|
|
|
|
if [ "$HTTP_CODE" = "200" ]; then
|
|
echo "ERRORE: l'immagine biters/${NAME}:${VERSION} esiste già sul registry!"
|
|
exit 1
|
|
fi
|
|
echo "OK: tag ${VERSION} non presente (HTTP $HTTP_CODE)"
|
|
|
|
# ── Build & Push ───────────────────────────────────────────
|
|
- name: Docker login
|
|
run: echo "$MAVEN_PASSWORD" | docker login "$REGISTRY" -u "$MAVEN_USERNAME" --password-stdin
|
|
|
|
- name: Build + Push immagine
|
|
run: |
|
|
VERSION="${{ steps.version.outputs.RELEASE_VERSION }}"
|
|
NAME="${{ steps.version.outputs.PROJECT_NAME }}"
|
|
IMAGE="${REGISTRY}/biters/${NAME}:${VERSION}"
|
|
|
|
docker buildx build \
|
|
--build-arg VERSION="${VERSION}" \
|
|
--build-arg BUILD_CONFIG="${BUILD_CONFIG}" \
|
|
-t "${IMAGE}" \
|
|
--push \
|
|
.
|
|
echo "Immagine pubblicata: ${IMAGE}"
|
|
|
|
# ── Tag & Bump ─────────────────────────────────────────────
|
|
- name: Commit release e tag
|
|
run: |
|
|
VERSION="${{ steps.version.outputs.RELEASE_VERSION }}"
|
|
git add package.json
|
|
git commit -m "release: ${VERSION} [skip ci]"
|
|
git tag -a "${VERSION}" -m "Release ${VERSION}"
|
|
|
|
- name: Avanza a prossima versione SNAPSHOT
|
|
run: |
|
|
NEXT="${{ steps.version.outputs.NEXT_VERSION }}"
|
|
jq --arg v "$NEXT" '.version=$v' package.json > package.json.tmp
|
|
mv package.json.tmp package.json
|
|
git add package.json
|
|
git commit -m "chore: avanza versione a ${NEXT} [skip ci]"
|
|
|
|
- name: Push release + tag + versione successiva
|
|
run: |
|
|
VERSION="${{ steps.version.outputs.RELEASE_VERSION }}"
|
|
git push origin HEAD "${VERSION}"
|
|
|
|
# ── Gitea Release ──────────────────────────────────────────
|
|
- name: Crea release su Gitea
|
|
run: |
|
|
VERSION="${{ steps.version.outputs.RELEASE_VERSION }}"
|
|
NAME="${{ steps.version.outputs.PROJECT_NAME }}"
|
|
DOCKER_IMAGE="${REGISTRY}/biters/${NAME}:${VERSION}"
|
|
|
|
BODY="## Artifacts
|
|
|
|
- **Docker**: \`${DOCKER_IMAGE}\`"
|
|
|
|
curl -s -X POST \
|
|
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
"https://git.biters.it/api/v1/repos/${{ github.repository }}/releases" \
|
|
-d "$(jq -n \
|
|
--arg tag "$VERSION" \
|
|
--arg name "v${VERSION}" \
|
|
--arg body "$BODY" \
|
|
'{tag_name: $tag, name: $name, body: $body, draft: false, prerelease: false}')"
|
|
|
|
# ── Rebase develop ─────────────────────────────────────────
|
|
- name: Rebase develop su ${{ github.ref_name }}
|
|
run: |
|
|
if git ls-remote --exit-code --heads origin develop >/dev/null 2>&1; then
|
|
git fetch origin develop
|
|
git checkout develop
|
|
git rebase origin/${{ github.ref_name }}
|
|
git push origin develop --force-with-lease
|
|
else
|
|
echo "Branch develop assente: skip rebase."
|
|
fi
|
|
|
|
# ── Aggiorna docker-compose (opzionale, multi-repo) ────────
|
|
- name: Aggiorna docker-compose nei repo compose
|
|
if: ${{ inputs.compose-repos != '' }}
|
|
run: |
|
|
VERSION="${{ steps.version.outputs.RELEASE_VERSION }}"
|
|
PROJECT_NAME="${{ steps.version.outputs.PROJECT_NAME }}"
|
|
ESCAPED_REGISTRY=$(echo "$REGISTRY" | sed 's/\./\\./g')
|
|
|
|
echo "${{ inputs.compose-repos }}" | tr ',' '\n' | while IFS= read -r COMPOSE_REPO; do
|
|
COMPOSE_REPO=$(echo "$COMPOSE_REPO" | xargs)
|
|
[ -z "$COMPOSE_REPO" ] && continue
|
|
REPO_DIR="/tmp/compose-$(echo "$COMPOSE_REPO" | tr '/' '-')"
|
|
|
|
echo ""
|
|
echo "════════════════════════════════════════"
|
|
echo " Repo: ${COMPOSE_REPO}"
|
|
echo "════════════════════════════════════════"
|
|
|
|
git clone "https://biters.gitea:${GITEA_TOKEN}@git.biters.it/${COMPOSE_REPO}.git" "$REPO_DIR"
|
|
cd "$REPO_DIR"
|
|
git config user.name "CI Release Bot"
|
|
git config user.email "ci@biters.it"
|
|
|
|
find . -name 'docker-compose*.yml' -exec \
|
|
sed -i "s|\(${ESCAPED_REGISTRY}/biters/${PROJECT_NAME}:\)[^ \"']*|\1${VERSION}|g" {} +
|
|
|
|
if git diff --quiet; then
|
|
echo " Nessuna modifica necessaria"
|
|
else
|
|
git add -A
|
|
git commit -m "chore(${PROJECT_NAME}): aggiorna immagine a ${VERSION}"
|
|
git push origin HEAD
|
|
echo " Docker-compose aggiornati a ${VERSION}"
|
|
fi
|
|
|
|
cd "$GITHUB_WORKSPACE"
|
|
done
|