release.yml

name: release

on:
  push:
    tags: ['v0*']
    # We need to do an API code review before we allow v1.
    # Our command and package are not yet stable.

permissions:
  contents: write

jobs:
  release_kiln:
    name: "Release Kiln"
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          token: ${{ secrets.RELEEN_GITHUB_TOKEN }}

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version-file: go.mod

      - name: Build
        run: go build ./...
        
      - name: Setup SSH
        uses: webfactory/ssh-agent@v0.7.0
        with:
          ssh-private-key: ${{ secrets.RELENG_CI_BOT_KEY }}

      - name: Unit Test
        env:
          RELEEN_GITHUB_TOKEN: ${{ secrets.RELEEN_GITHUB_TOKEN }}
        run: |
          export GITHUB_TOKEN="${RELEEN_GITHUB_TOKEN}"
          go test --covermode=atomic --coverprofile=kiln-${{github.sha}}-unit-test-code-coverage.out ./...

      - name: Archive Unit Test Code Coverage Output
        uses: actions/upload-artifact@v3
        with:
          name: Unit Test Code Coverage Output
          path: kiln-${{github.sha}}-unit-test-code-coverage.out

      - name: Acceptance Tests
        env:
          CGO_ENABLED: '0'
          RELEEN_GITHUB_TOKEN: ${{ secrets.RELEEN_GITHUB_TOKEN }}
        run: |
          set -euo pipefail
          export GITHUB_TOKEN="${RELEEN_GITHUB_TOKEN}"

          set -x
          go test -v --timeout 24h --tags acceptance github.com/pivotal-cf/kiln/internal/acceptance/workflows
          
          git reset --hard HEAD

      - name: Login to Docker Hub
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Login to GCR
        uses: docker/login-action@v2
        with:
          registry: gcr.io
          username: _json_key
          password: ${{ secrets.TAS_PPE_GCR_SERVICE_JSON_KEY }}

      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@v2
        with:
          distribution: goreleaser
          version: latest
          args: release --clean
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}