Automate release (#461)

Author: Trojan295

.github/workflows/branch-build.yaml

@@ -17,17 +17,14 @@ on:
       - "!**.md"
     branches:
       - "main"
-      - "release-0.2"
-      - "release-0.3"
-      - "release-0.4"
+      - "release-*"
 
 jobs:
   entry-tests:
     name: Lint and test code
     runs-on: ubuntu-latest
     permissions:
       contents: read
-
     steps:
       - name: Checkout code
         uses: actions/checkout@v2
@@ -56,7 +53,6 @@ jobs:
       matrix-infra: ${{ steps.set-matrix-infra.outputs.matrix }}
     permissions:
       contents: read
-
     steps:
       - name: Checkout code
         uses: actions/checkout@v2
@@ -80,7 +76,6 @@ jobs:
     permissions:
       contents: read
       packages: write
-
     steps:
       - name: Checkout code
         uses: actions/checkout@v2
@@ -101,7 +96,6 @@ jobs:
     permissions:
       contents: read
       packages: write
-
     steps:
       - name: Checkout code
         uses: actions/checkout@v2
@@ -123,7 +117,6 @@ jobs:
     permissions:
       contents: read
       packages: write
-
     steps:
       - name: Checkout code
         uses: actions/checkout@v2
@@ -141,7 +134,6 @@ jobs:
     if: github.ref == 'refs/heads/main'
     permissions:
       contents: read
-
     steps:
       - name: Checkout code
         uses: actions/checkout@v2
@@ -164,7 +156,6 @@ jobs:
     permissions:
       contents: read
       packages: write
-
     steps:
       - name: Checkout
         uses: actions/checkout@v2
@@ -207,7 +198,6 @@ jobs:
     needs: [ entry-tests, build-app, build-tests ]
     permissions:
       contents: read
-
     steps:
       - name: Checkout code
         uses: actions/checkout@v2
@@ -248,7 +238,6 @@ jobs:
     if: github.ref == 'refs/heads/main'
     permissions:
       contents: read
-
     env:
       CAPACT_CREDENTIALS_STORE_FILE_PASSPHRASE: "no-pass"
       CAPACT_CREDENTIALS_STORE_BACKEND: "file"
@@ -287,13 +276,11 @@ jobs:
             --namespace 'capact-system' \
             --phase 'SUCCEEDED'
 
-
   slackNotification:
     name: Slack Notification
     runs-on: ubuntu-latest
     needs: [ update-cluster ]
     if: always()
-
     steps:
       - name: Slack Notification
         if: ${{ always() && needs.update-cluster.result != 'success' }}

.github/workflows/make-release.yaml

@@ -0,0 +1,66 @@
+name: Make release
+
+# Required secrets:
+# GCS_CREDS - Credentials to Google Cloud Storage for binary and chart releases
+# GH_PAT - GitHub username with personal access token with permissions to make commits to repository, must be in format "<username>:<PAT>"
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: Version in SemVer (e.g. '0.5.0')
+        required: true
+
+jobs:
+  make-release:
+    name: Make release
+    runs-on: ubuntu-latest
+    environment: Release
+    permissions:
+      contents: write
+      packages: write
+      pull-requests: read
+      issues: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v2
+        with:
+          persist-credentials: false
+      - name: Setup Git credentials
+        # Replacing the GH Action token with PAT is required to trigger the branch-build workflow on a commit:
+        # https://docs.github.com/en/actions/reference/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token
+        run: |
+          git remote remove origin
+          git remote add origin https://${{secrets.GH_PAT}}@github.com/${{github.repository}}.git
+          git config --global user.email "[email protected]"
+          git config --global user.name "Capact Bot"
+      - name: Setup environment
+        run: |
+          . ./hack/ci/setup-env.sh
+      - name: Set up Go
+        uses: actions/setup-go@v2
+        with:
+          go-version: ${{env.GO_VERSION}}
+      - name: Set up GoReleaser
+        run: go install github.com/goreleaser/[email protected]
+      - name: Set up GCS
+        uses: google-github-actions/setup-gcloud@master
+        with:
+          service_account_key: ${{ secrets.GCS_CREDS }}
+          export_default_credentials: true
+      - name: Log into registry
+        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
+      - name: Push release commits and tag
+        env:
+          RELEASE_VERSION: "${{ github.event.inputs.version }}"
+        run: ./hack/make-release.sh
+      - name: Run GoReleaser
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: make release-binaries
+      - name: Generate release notes
+        run: |
+          npm install -g github-release-notes
+          gren release -d -T "${{ secrets.GITHUB_TOKEN }}" --tags "v${{ github.event.inputs.version }}" --override
+      - name: Release Helm charts
+        run: make release-charts

.goreleaser.yml

@@ -19,6 +19,10 @@ builds:
       - linux
       - windows
       - darwin
+    goarch: &build-arch
+      - "386"
+      - amd64
+      - arm64
     hooks: &build-hooks
       # Install upx first, https://github.com/upx/upx/releases
       post: upx -9 "{{ .Path }}"
@@ -32,6 +36,7 @@ builds:
   - id: populator
     env: *build-env
     goos: *build-goos
+    goarch: *build-arch
     hooks: *build-hooks
     main: ./cmd/populator
     binary: 'populator-{{ .Os }}-{{ .Arch }}'
@@ -73,6 +78,6 @@ blobs:
     folder: '{{ .Tag }}'
 
 release:
-  # You can disable this pipe in order to not upload any artifacts.
-  # Defaults to false.
-  disable: true
+  github:
+    owner: capactio
+    name: capact

.grenrc.yaml

@@ -0,0 +1,8 @@
+dataSource: prs
+groupBy:
+  "🚨 Breaking": [breaking]
+  "🔧 Bug Fixes": [bug]
+  "🚀 Enhancements": [enhancement]
+template:
+  issue: "- {{name}} [{{text}}]({{url}}) ([@{{user_login}}]({{user_url}}))"
+  group: "\n### {{heading}}\n"

hack/make-release.sh

@@ -0,0 +1,71 @@
+#!/bin/bash
+
+set -e
+
+CURRENT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
+REPO_ROOT_DIR=$(cd "${CURRENT_DIR}/.." && pwd)
+readonly CURRENT_DIR
+readonly REPO_ROOT_DIR
+
+
+release::update_helm_charts_version() {
+  local -r release_version="$1"
+  local -r deploy_dir="${REPO_ROOT_DIR}/deploy/kubernetes/charts"
+
+  for d in "${deploy_dir}"/*/ ; do
+    sed -i.bak "s/^version: .*/version: ${release_version}/g" "${d}/Chart.yaml"
+  done
+}
+
+release::make_prepare_release_commit() {
+  local -r version="$1"
+  local -r branch="$2"
+
+  git add .
+  git commit -m "Prepare ${version} release"
+  git push origin "${branch}"
+}
+
+release::set_capact_images_in_charts() {
+  local -r image_tag="$1"
+  sed -E -i.bak "s/overrideTag: \".+\"/overrideTag: \"${image_tag}\"/g" "${REPO_ROOT_DIR}/deploy/kubernetes/charts/capact/values.yaml"
+}
+
+release::set_hub_manifest_source_branch() {
+  local -r branch="$1"
+  sed -E -i.bak "s/branch: .+/branch: ${branch}/g" "${REPO_ROOT_DIR}/deploy/kubernetes/charts/capact/charts/hub-public/values.yaml"
+}
+
+release::make_release_commit() {
+  local -r version="$1"
+  local -r release_branch="$2"
+  local -r tag="v${version}"
+
+  git add .
+  git commit -m "Set fixed Capact image tag and Populator source branch"
+  git tag "${tag}"
+  git push origin "${release_branch}"
+  git push origin "${tag}"
+}
+
+# required inputs:
+# RELEASE_VERSION - new version in SemVer format: x.y.z
+[ -z "${RELEASE_VERSION}" ] && echo "Need to set RELEASE_VERSION" && exit 1;
+
+SOURCE_BRANCH="$(git rev-parse --abbrev-ref HEAD)"
+RELEASE_VERSION_MAJOR_MINOR="$(echo "${RELEASE_VERSION}" | sed -E 's/([0-9]+\.[0-9])\.[0-9]/\1/g')"
+RELEASE_BRANCH="release-${RELEASE_VERSION_MAJOR_MINOR}"
+
+main() {
+  release::update_helm_charts_version "${RELEASE_VERSION}"
+  release::make_prepare_release_commit "${RELEASE_VERSION}" "${SOURCE_BRANCH}"
+
+  local -r capact_image_tag=$(git rev-parse --short HEAD | sed 's/.$//')
+  git checkout -B "${RELEASE_BRANCH}"
+
+  release::set_capact_images_in_charts "${capact_image_tag}"
+  release::set_hub_manifest_source_branch "${RELEASE_BRANCH}"
+  release::make_release_commit "${RELEASE_VERSION}" "${RELEASE_BRANCH}"
+}
+
+main