argo-cd/.github/workflows/init-release.yaml
Justin Marquis 17b81807b6
chore: generate attestations during a release (#12484)
* chore: generate attestations during a release

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

enable attestation for dockerhub

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

release assests no longer compressed

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

renamed attestion for cli

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

updated docs to reflect non compressed cli binaries

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

use quay username for provenance generator

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

add check for TARGET_VERSION

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

fixed typo

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

updated go to 1.19

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

update cosign and slsa-github-generators

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

update docs for cosignv2.0.0

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

remove docker registry from release

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

* negate tags for v2.4,v2.5,v2.6 for release

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

* bug fix for release notes

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

---------

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>
Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>
Co-authored-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>
2023-03-16 19:35:25 +00:00

70 lines
2.4 KiB
YAML

name: Init ArgoCD Release
on:
workflow_dispatch:
inputs:
TARGET_BRANCH:
description: 'TARGET_BRANCH to checkout (e.g. release-2.5)'
required: true
type: string
TARGET_VERSION:
description: 'TARGET_VERSION to build manifests (e.g. 2.5.0-rc1) Note: the `v` prefix is not used'
required: true
type: string
permissions: {}
jobs:
prepare-release:
permissions:
contents: write # for peter-evans/create-pull-request to create branch
pull-requests: write # for peter-evans/create-pull-request to create a PR
name: Automatically generate version and manifests on ${{ inputs.TARGET_BRANCH }}
runs-on: ubuntu-22.04
steps:
- name: Checkout code
uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b # v3.2.0
with:
fetch-depth: 0
token: ${{ secrets.GITHUB_TOKEN }}
ref: ${{ inputs.TARGET_BRANCH }}
- name: Check if TARGET_VERSION is well formed.
run: |
set -xue
# Target version must not contain 'v' prefix
if echo "${{ inputs.TARGET_VERSION }}" | grep -e '^v'; then
echo "::error::Target version '${{ TARGET_VERSION }}' should not begin with a 'v' prefix, refusing to continue." >&2
exit 1
fi
- name: Create VERSION information
run: |
set -ue
echo "Bumping version from $(cat VERSION) to ${{ inputs.TARGET_VERSION }}"
echo "${{ inputs.TARGET_VERSION }}" > VERSION
# We install kustomize in the dist directory
- name: Add dist to PATH
run: |
echo "/home/runner/work/argo-cd/argo-cd/dist" >> $GITHUB_PATH
- name: Generate new set of manifests
run: |
set -ue
make install-codegen-tools-local
make manifests-local VERSION=${{ inputs.TARGET_VERSION }}
git diff
- name: Create pull request
uses: peter-evans/create-pull-request@2b011faafdcbc9ceb11414d64d0573f37c774b04 # v4.2.3
with:
commit-message: "Bump version to ${{ inputs.TARGET_VERSION }}"
title: "Bump version to ${{ inputs.TARGET_VERSION }} on ${{ inputs.TARGET_BRANCH }} branch"
body: Updating VERSION and manifests to ${{ inputs.TARGET_VERSION }}
branch: update-version
branch-suffix: random
signoff: true
labels: release