2022-07-01 23:08:19 -05:00
|
|
|
name: Release
|
2022-06-23 06:17:02 -05:00
|
|
|
|
|
|
|
on:
|
2022-11-16 05:49:21 -05:00
|
|
|
workflow_dispatch:
|
2023-03-12 08:32:13 -05:00
|
|
|
inputs:
|
|
|
|
target:
|
|
|
|
description: 'The release target of Logto'
|
|
|
|
required: true
|
|
|
|
default: dev
|
|
|
|
type: choice
|
|
|
|
options:
|
|
|
|
- prod
|
|
|
|
- dev
|
|
|
|
|
2022-06-23 06:17:02 -05:00
|
|
|
push:
|
2022-09-05 04:49:11 -05:00
|
|
|
branches:
|
2022-07-01 05:47:14 -05:00
|
|
|
- master
|
|
|
|
tags:
|
|
|
|
- v*.*.*
|
2022-06-23 06:17:02 -05:00
|
|
|
|
|
|
|
concurrency:
|
2023-03-19 07:26:26 -05:00
|
|
|
group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.ref }}
|
2022-06-23 06:17:02 -05:00
|
|
|
|
|
|
|
jobs:
|
2023-03-12 08:32:13 -05:00
|
|
|
dockerize-core:
|
2022-10-13 09:08:59 -05:00
|
|
|
environment: ${{ startsWith(github.ref, 'refs/tags/') && 'release' || '' }}
|
2023-03-15 09:13:50 -05:00
|
|
|
# Use normal machine for OSS release since we'll build on Depot
|
2023-03-20 10:57:04 -05:00
|
|
|
runs-on: ${{ (inputs.target || 'dev') == 'dev' && 'ubuntu-latest' || 'ubuntu-latest-4-cores' }}
|
2023-02-15 04:47:11 -05:00
|
|
|
permissions:
|
|
|
|
contents: read
|
|
|
|
id-token: write
|
2022-06-23 06:17:02 -05:00
|
|
|
|
|
|
|
steps:
|
|
|
|
- uses: actions/checkout@v3
|
2022-07-01 23:08:19 -05:00
|
|
|
with:
|
|
|
|
fetch-depth: 0
|
2022-06-23 06:17:02 -05:00
|
|
|
|
2022-07-01 05:47:14 -05:00
|
|
|
- name: Docker meta
|
|
|
|
id: meta
|
|
|
|
uses: docker/metadata-action@v4
|
|
|
|
with:
|
|
|
|
images: |
|
2022-08-11 07:58:53 -05:00
|
|
|
ghcr.io/logto-io/logto
|
|
|
|
svhd/logto
|
2022-07-03 02:52:05 -05:00
|
|
|
# https://github.com/docker/metadata-action#typesemver
|
2022-07-01 05:47:14 -05:00
|
|
|
tags: |
|
|
|
|
type=semver,pattern={{version}}
|
|
|
|
type=semver,pattern={{major}}.{{minor}}
|
|
|
|
type=semver,pattern={{major}}
|
2023-03-17 13:11:28 -05:00
|
|
|
type=sha
|
2022-07-01 23:08:19 -05:00
|
|
|
type=edge
|
2022-07-01 05:47:14 -05:00
|
|
|
|
2022-08-11 07:58:53 -05:00
|
|
|
- name: Login to DockerHub
|
|
|
|
uses: docker/login-action@v2
|
|
|
|
with:
|
|
|
|
username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
|
|
password: ${{ secrets.DOCKERHUB_TOKEN }}
|
2022-06-23 06:17:02 -05:00
|
|
|
|
2022-06-24 02:39:17 -05:00
|
|
|
- name: Login to GitHub Container Registry
|
|
|
|
uses: docker/login-action@v2
|
|
|
|
with:
|
|
|
|
registry: ghcr.io
|
|
|
|
username: silverhand-bot
|
|
|
|
password: ${{ secrets.BOT_PAT }}
|
2023-02-15 06:04:36 -05:00
|
|
|
|
|
|
|
- name: Setup Docker Buildx
|
|
|
|
if: ${{ !startsWith(github.ref, 'refs/tags/') }}
|
|
|
|
uses: docker/setup-buildx-action@v2
|
|
|
|
|
|
|
|
- name: Build and push
|
|
|
|
if: ${{ !startsWith(github.ref, 'refs/tags/') }}
|
|
|
|
uses: docker/build-push-action@v4
|
|
|
|
with:
|
|
|
|
context: .
|
|
|
|
push: true
|
|
|
|
tags: ${{ steps.meta.outputs.tags }}
|
|
|
|
labels: ${{ steps.meta.outputs.labels }}
|
2023-03-15 04:41:18 -05:00
|
|
|
build-args: |
|
2023-03-15 04:58:07 -05:00
|
|
|
additional_connector_args=--cloud
|
2022-06-24 02:39:17 -05:00
|
|
|
|
2023-02-15 04:02:59 -05:00
|
|
|
- name: Setup Depot
|
2023-02-15 06:04:36 -05:00
|
|
|
if: ${{ startsWith(github.ref, 'refs/tags/') }}
|
2023-02-15 04:02:59 -05:00
|
|
|
uses: depot/setup-action@v1
|
|
|
|
|
2023-02-15 06:04:36 -05:00
|
|
|
- name: Build and push
|
|
|
|
if: ${{ startsWith(github.ref, 'refs/tags/') }}
|
2023-02-15 04:02:59 -05:00
|
|
|
uses: depot/build-push-action@v1
|
2022-06-23 06:17:02 -05:00
|
|
|
with:
|
2023-02-15 04:02:59 -05:00
|
|
|
platforms: linux/amd64, linux/arm64
|
|
|
|
project: g902cp6dvv
|
2022-06-23 06:17:02 -05:00
|
|
|
context: .
|
2022-06-24 02:39:17 -05:00
|
|
|
push: true
|
2022-07-01 05:47:14 -05:00
|
|
|
tags: ${{ steps.meta.outputs.tags }}
|
|
|
|
labels: ${{ steps.meta.outputs.labels }}
|
2022-07-02 04:00:14 -05:00
|
|
|
|
2023-03-12 08:32:13 -05:00
|
|
|
dockerize-cloud:
|
2023-03-15 09:13:50 -05:00
|
|
|
# Use normal machine for OSS release since we'll build on Depot
|
2023-03-20 22:28:39 -05:00
|
|
|
runs-on: ${{ (inputs.target || 'dev') == 'dev' && 'ubuntu-latest' || 'ubuntu-latest-4-cores' }}
|
2023-03-12 08:32:13 -05:00
|
|
|
|
|
|
|
steps:
|
|
|
|
- uses: actions/checkout@v3
|
|
|
|
with:
|
|
|
|
fetch-depth: 0
|
|
|
|
|
|
|
|
- name: Docker meta
|
|
|
|
id: meta
|
|
|
|
uses: docker/metadata-action@v4
|
|
|
|
with:
|
|
|
|
images: |
|
|
|
|
ghcr.io/logto-io/cloud
|
|
|
|
# https://github.com/docker/metadata-action
|
|
|
|
tags: |
|
2023-03-17 13:11:28 -05:00
|
|
|
type=sha
|
2023-03-12 08:32:13 -05:00
|
|
|
type=edge
|
|
|
|
|
|
|
|
- name: Login to GitHub Container Registry
|
|
|
|
uses: docker/login-action@v2
|
|
|
|
with:
|
|
|
|
registry: ghcr.io
|
|
|
|
username: silverhand-bot
|
|
|
|
password: ${{ secrets.BOT_PAT }}
|
|
|
|
|
|
|
|
- name: Setup Docker Buildx
|
|
|
|
uses: docker/setup-buildx-action@v2
|
|
|
|
|
|
|
|
- name: Build and push
|
|
|
|
uses: docker/build-push-action@v4
|
|
|
|
with:
|
|
|
|
file: Dockerfile.cloud
|
|
|
|
context: .
|
|
|
|
push: true
|
|
|
|
tags: ${{ steps.meta.outputs.tags }}
|
|
|
|
labels: ${{ steps.meta.outputs.labels }}
|
|
|
|
build-args: |
|
2023-03-20 04:43:30 -05:00
|
|
|
applicationinsights_connection_string=${{ (inputs.target || 'dev') == 'dev' && secrets.APPLICATIONINSIGHTS_CONNECTION_STRING || secrets.APPLICATIONINSIGHTS_CONNECTION_STRING_PROD }}
|
2023-03-12 08:32:13 -05:00
|
|
|
|
2023-03-27 23:00:28 -05:00
|
|
|
deploy:
|
|
|
|
strategy:
|
|
|
|
fail-fast: false
|
|
|
|
matrix:
|
|
|
|
include:
|
|
|
|
- target: core
|
|
|
|
image: logto
|
|
|
|
- target: cloud
|
|
|
|
image: cloud
|
|
|
|
|
2022-10-01 09:44:29 -05:00
|
|
|
runs-on: ubuntu-latest
|
2023-03-27 23:00:28 -05:00
|
|
|
needs: [dockerize-core, dockerize-cloud]
|
|
|
|
environment: ${{ inputs.target || 'dev' }}-${{ matrix.target }}-staging
|
2022-10-01 10:41:14 -05:00
|
|
|
if: ${{ !startsWith(github.ref, 'refs/tags/') }}
|
2022-10-01 09:44:29 -05:00
|
|
|
|
|
|
|
steps:
|
2023-01-09 02:28:42 -05:00
|
|
|
- uses: actions/checkout@v3
|
|
|
|
|
2023-03-17 13:45:32 -05:00
|
|
|
- name: Set short sha
|
|
|
|
id: sha
|
|
|
|
run: echo "short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
|
|
|
|
|
2023-01-09 02:28:42 -05:00
|
|
|
- name: Setup Node and pnpm
|
2023-03-27 23:00:28 -05:00
|
|
|
if: ${{ (inputs.target || 'dev') == 'dev' && matrix.target == 'core' }}
|
2023-01-09 02:28:42 -05:00
|
|
|
uses: silverhand-io/actions-node-pnpm-run-steps@v2
|
|
|
|
|
2023-03-12 08:32:13 -05:00
|
|
|
- name: Deploy database alteration
|
2023-03-27 23:00:28 -05:00
|
|
|
if: ${{ (inputs.target || 'dev') == 'dev' && matrix.target == 'core' }}
|
2023-01-09 02:28:42 -05:00
|
|
|
run: |
|
|
|
|
pnpm prepack
|
|
|
|
pnpm cli db alt deploy next
|
|
|
|
env:
|
2023-03-12 08:32:13 -05:00
|
|
|
DB_URL: ${{ secrets.DB_URL }}
|
2023-01-09 02:28:42 -05:00
|
|
|
|
2023-03-27 23:00:28 -05:00
|
|
|
- name: Login to GitHub Container Registry
|
|
|
|
uses: docker/login-action@v2
|
|
|
|
with:
|
|
|
|
registry: ghcr.io
|
|
|
|
username: silverhand-bot
|
|
|
|
password: ${{ secrets.BOT_PAT }}
|
|
|
|
|
2022-10-01 09:44:29 -05:00
|
|
|
- name: Login via Azure CLI
|
|
|
|
uses: azure/login@v1
|
|
|
|
with:
|
|
|
|
creds: ${{ secrets.AZURE_CREDENTIALS }}
|
|
|
|
|
2023-03-27 23:00:28 -05:00
|
|
|
- name: Deploy ${{ matrix.target }} to containerapp
|
2023-03-12 08:32:13 -05:00
|
|
|
uses: azure/webapps-deploy@v2
|
|
|
|
with:
|
2023-03-23 03:26:06 -05:00
|
|
|
app-name: ${{ vars.APP_NAME }}
|
2023-03-19 01:24:41 -05:00
|
|
|
slot-name: staging
|
2023-03-27 23:00:28 -05:00
|
|
|
images: ghcr.io/logto-io/${{ matrix.image }}:sha-${{ steps.sha.outputs.short }}
|
2023-03-12 08:32:13 -05:00
|
|
|
|
2023-03-27 23:00:28 -05:00
|
|
|
swap-staging-prod:
|
|
|
|
strategy:
|
|
|
|
fail-fast: false
|
|
|
|
matrix:
|
|
|
|
target: [core, cloud]
|
2023-03-19 02:12:54 -05:00
|
|
|
|
|
|
|
runs-on: ubuntu-latest
|
2023-03-27 23:00:28 -05:00
|
|
|
needs: deploy
|
|
|
|
environment: ${{ inputs.target || 'dev' }}-${{ matrix.target }}
|
|
|
|
|
2023-03-19 02:12:54 -05:00
|
|
|
steps:
|
|
|
|
- name: Login via Azure CLI
|
|
|
|
uses: azure/login@v1
|
|
|
|
with:
|
|
|
|
creds: ${{ secrets.AZURE_CREDENTIALS }}
|
|
|
|
|
2023-03-27 23:00:28 -05:00
|
|
|
- name: Swap ${{ matrix.target }} to production
|
2023-03-19 01:24:41 -05:00
|
|
|
# See https://learn.microsoft.com/en-us/cli/azure/webapp/deployment/slot?view=azure-cli-latest#az-webapp-deployment-slot-swap
|
2023-03-23 03:26:06 -05:00
|
|
|
run: az webapp deployment slot swap -g ${{ vars.RESOURCE_GROUP }} -n ${{ vars.APP_NAME }} --slot staging
|
2023-03-19 01:24:41 -05:00
|
|
|
|
2022-12-29 01:52:43 -05:00
|
|
|
# Publish packages and create git tags if needed
|
|
|
|
publish-and-tag:
|
2022-10-21 00:59:08 -05:00
|
|
|
runs-on: ubuntu-latest
|
2022-11-14 23:53:28 -05:00
|
|
|
env:
|
2022-12-29 01:52:43 -05:00
|
|
|
NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTOMATION_TOKEN }}
|
2022-11-14 23:53:28 -05:00
|
|
|
|
2022-10-21 00:59:08 -05:00
|
|
|
if: ${{ !startsWith(github.ref, 'refs/tags/') }}
|
|
|
|
|
2022-12-29 01:52:43 -05:00
|
|
|
steps:
|
2022-12-29 02:25:12 -05:00
|
|
|
- uses: actions/checkout@v3
|
|
|
|
with:
|
|
|
|
# Set Git operations with the bot PAT since we have tag protection rule
|
|
|
|
token: ${{ secrets.BOT_PAT }}
|
2022-12-30 01:20:42 -05:00
|
|
|
fetch-depth: 0
|
2022-12-29 02:25:12 -05:00
|
|
|
|
2022-10-21 00:59:08 -05:00
|
|
|
- name: Setup Node and pnpm
|
|
|
|
uses: silverhand-io/actions-node-pnpm-run-steps@v2
|
|
|
|
|
|
|
|
- name: Import GPG key
|
|
|
|
uses: crazy-max/ghaction-import-gpg@v5
|
|
|
|
with:
|
|
|
|
gpg_private_key: ${{ secrets.BOT_GPG_KEY }}
|
|
|
|
passphrase: ${{ secrets.BOT_GPG_PASSPHRASE }}
|
|
|
|
git_user_signingkey: true
|
|
|
|
git_commit_gpgsign: true
|
|
|
|
git_tag_gpgsign: true
|
|
|
|
|
2022-12-29 02:25:12 -05:00
|
|
|
- name: Configure Git user
|
|
|
|
run: |
|
|
|
|
git config --global user.email bot@silverhand.io
|
|
|
|
git config --global user.name silverhand-bot
|
|
|
|
|
2022-12-29 01:52:43 -05:00
|
|
|
- name: Publish
|
2022-12-29 21:46:28 -05:00
|
|
|
run: node .scripts/publish.js
|
2022-10-01 09:44:29 -05:00
|
|
|
|
2022-07-01 23:08:19 -05:00
|
|
|
create-github-release:
|
2022-10-12 22:32:48 -05:00
|
|
|
environment: release
|
2022-07-01 23:08:19 -05:00
|
|
|
runs-on: ubuntu-latest
|
|
|
|
if: startsWith(github.ref, 'refs/tags/')
|
|
|
|
|
|
|
|
steps:
|
|
|
|
- uses: actions/checkout@v3
|
|
|
|
with:
|
|
|
|
fetch-depth: 0
|
|
|
|
|
2022-07-01 23:40:22 -05:00
|
|
|
- name: Setup Node and pnpm
|
2022-10-16 23:07:50 -05:00
|
|
|
uses: silverhand-io/actions-node-pnpm-run-steps@v2
|
2022-07-01 23:40:22 -05:00
|
|
|
|
2022-09-05 04:49:11 -05:00
|
|
|
- name: Build
|
2022-10-17 06:37:59 -05:00
|
|
|
run: pnpm -r build
|
2022-09-05 04:49:11 -05:00
|
|
|
|
2022-07-01 23:08:19 -05:00
|
|
|
- name: Package
|
2022-11-11 07:17:50 -05:00
|
|
|
run: ./.scripts/package.sh
|
2022-07-01 23:08:19 -05:00
|
|
|
|
|
|
|
- name: Release
|
|
|
|
uses: softprops/action-gh-release@v1
|
|
|
|
with:
|
2022-07-02 04:00:14 -05:00
|
|
|
token: ${{ secrets.BOT_PAT }}
|
2023-02-25 10:15:42 -05:00
|
|
|
body: ''
|
2022-07-01 23:08:19 -05:00
|
|
|
files: /tmp/logto.tar.gz
|
2023-02-25 10:15:42 -05:00
|
|
|
append_body: true
|