fix(deps): update k8s.io/kube-openapi digest to be32def #290
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - release-* | |
| pull_request: {} | |
| workflow_dispatch: | |
| inputs: | |
| version: | |
| description: Package version (e.g. v0.1.0) | |
| required: false | |
| permissions: | |
| contents: read | |
| env: | |
| # Common versions | |
| GO_VERSION: '1.26.0' | |
| GOLANGCI_VERSION: 'v2.11.4' | |
| DOCKER_BUILDX_VERSION: 'v0.23.0' | |
| # These environment variables are important to the Crossplane CLI install.sh | |
| # script. They determine what version it installs. | |
| XP_CHANNEL: master # TODO(negz): Pin to stable once v1.14 is released. | |
| XP_VERSION: current # TODO(negz): Pin to a version once v1.14 is released. | |
| # This CI job will automatically push new builds to xpkg.upbound.io if the | |
| # XPKG_ACCESS_ID and XPKG_TOKEN secrets are set in the GitHub respository (or | |
| # organization) settings. Create a token at https://accounts.upbound.io. | |
| XPKG_ACCESS_ID: ${{ secrets.XPKG_ACCESS_ID }} | |
| # The package to push, without a version tag. The default matches GitHub. For | |
| # example xpkg.upbound.io/crossplane/function-template-go. | |
| XPKG: xpkg.upbound.io/${{ github.repository}} | |
| CROSSPLANE_REGORG: ghcr.io/${{ github.repository}} # xpkg.crossplane.io/crossplane-contrib | |
| # The package version to push. The default is 0.0.0-gitsha. | |
| XPKG_VERSION: ${{ inputs.version }} | |
| jobs: | |
| lint: | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| - name: Setup Go | |
| uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| cache: false # The golangci-lint action does its own caching. | |
| - name: Lint | |
| uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9 | |
| with: | |
| version: ${{ env.GOLANGCI_VERSION }} | |
| check-diff: | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| - name: Setup Go | |
| uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Check go mod tidy | |
| run: go mod tidy && git diff --exit-code go.mod go.sum | |
| - name: Generate | |
| run: go generate ./... | |
| - name: Check Diff | |
| run: | | |
| DIFF=$(git diff --stat) | |
| if [ -n "$DIFF" ]; then | |
| echo "::error::Generated files are not up to date. Please run 'go generate ./...' and commit the result." | |
| echo "" | |
| git diff | |
| exit 1 | |
| fi | |
| unit-test: | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| - name: Setup Go | |
| uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Run Unit Tests | |
| run: go test -v -cover ./... | |
| # We want to build most packages for the amd64 and arm64 architectures. To | |
| # speed this up we build single-platform packages in parallel. We then upload | |
| # those packages to GitHub as a build artifact. The push job downloads those | |
| # artifacts and pushes them as a single multi-platform package. | |
| build: | |
| runs-on: ubuntu-24.04 | |
| strategy: | |
| fail-fast: true | |
| matrix: | |
| arch: | |
| - amd64 | |
| - arm64 | |
| steps: | |
| - name: Setup QEMU | |
| uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4 | |
| with: | |
| platforms: all | |
| - name: Setup Docker Buildx | |
| uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 | |
| with: | |
| version: ${{ env.DOCKER_BUILDX_VERSION }} | |
| install: true | |
| - name: Checkout | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| # We ask Docker to use GitHub Action's native caching support to speed up | |
| # the build, per https://docs.docker.com/build/cache/backends/gha/. | |
| - name: Build Runtime | |
| id: image | |
| uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 | |
| with: | |
| context: . | |
| platforms: linux/${{ matrix.arch }} | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| target: image | |
| build-args: | |
| GO_VERSION=${{ env.GO_VERSION }} | |
| outputs: type=docker,dest=runtime-${{ matrix.arch }}.tar | |
| - name: Setup the Crossplane CLI | |
| run: "curl -sL https://raw.githubusercontent.com/crossplane/crossplane/master/install.sh | sh" | |
| - name: Build Package | |
| run: ./crossplane xpkg build --package-file=${{ matrix.arch }}.xpkg --package-root=package/ --embed-runtime-image-tarball=runtime-${{ matrix.arch }}.tar | |
| - name: Upload Single-Platform Package | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 | |
| with: | |
| name: package-${{ matrix.arch }} | |
| path: "*.xpkg" | |
| if-no-files-found: error | |
| retention-days: 1 | |
| # This job downloads the single-platform packages built by the build job, and | |
| # pushes them as a multi-platform package. We only push the package it the | |
| # XPKG_ACCESS_ID and XPKG_TOKEN secrets were provided. | |
| push: | |
| permissions: | |
| contents: read | |
| packages: write # for pushing to ghcr.io | |
| if: ${{ github.event_name != 'pull_request' }} | |
| runs-on: ubuntu-24.04 | |
| needs: | |
| - build | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| - name: Download Single-Platform Packages | |
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 | |
| with: | |
| path: . | |
| merge-multiple: true | |
| pattern: "!*.dockerbuild" # This gets uploaded by docker/build-push-action but must be skipped: https://github.com/actions/toolkit/pull/1874 | |
| - name: Setup the Crossplane CLI | |
| run: "curl -sL https://raw.githubusercontent.com/crossplane/crossplane/master/install.sh | sh" | |
| - name: Login to Upbound | |
| uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4 | |
| if: env.XPKG_ACCESS_ID != '' | |
| with: | |
| registry: xpkg.upbound.io | |
| username: ${{ secrets.XPKG_ACCESS_ID }} | |
| password: ${{ secrets.XPKG_TOKEN }} | |
| # If a version wasn't explicitly passed as a workflow_dispatch input we | |
| # default to version v0.0.0-<git-commit-date>-<git-short-sha>, for example | |
| # v0.0.0-20231101115142-1091066df799. This is a simple implementation of | |
| # Go's pseudo-versions: https://go.dev/ref/mod#pseudo-versions. | |
| - name: Set Default Multi-Platform Package Version | |
| if: env.XPKG_VERSION == '' | |
| run: echo "XPKG_VERSION=v0.0.0-$(date -d@$(git show -s --format=%ct) +%Y%m%d%H%M%S)-$(git rev-parse --short=12 HEAD)" >> $GITHUB_ENV | |
| - name: Push Multi-Platform Package to Upbound | |
| if: env.XPKG_ACCESS_ID != '' | |
| run: "./crossplane --verbose xpkg push --package-files $(echo *.xpkg|tr ' ' ,) ${{ env.XPKG }}:${{ env.XPKG_VERSION }}" | |
| - name: Login to GHCR | |
| uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Push Multi-Platform Package to GHCR | |
| if: env.XPKG_ACCESS_ID != '' | |
| run: "./crossplane --verbose xpkg push --package-files $(echo *.xpkg|tr ' ' ,) ${{ env.CROSSPLANE_REGORG }}:${{ env.XPKG_VERSION }}" |