forked from IQSS/dataverse
-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'develop' into 4499-version-doi
- Loading branch information
Showing
232 changed files
with
18,285 additions
and
1,978 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,96 @@ | ||
| --- | ||
| name: Preview Application Container Image | ||
|
|
||
| on: | ||
| # We only run the push commands if we are asked to by an issue comment with the correct command. | ||
| # This workflow is always taken from the default branch and runs in repo context with access to secrets. | ||
| repository_dispatch: | ||
| types: [ push-image-command ] | ||
|
|
||
| env: | ||
| IMAGE_TAG: unstable | ||
| BASE_IMAGE_TAG: unstable | ||
| PLATFORMS: "linux/amd64,linux/arm64" | ||
|
|
||
| jobs: | ||
| deploy: | ||
| name: "Package & Push" | ||
| runs-on: ubuntu-latest | ||
| # Only run in upstream repo - avoid unnecessary runs in forks | ||
| if: ${{ github.repository_owner == 'IQSS' }} | ||
| steps: | ||
| # Checkout the pull request code as when merged | ||
| - uses: actions/checkout@v3 | ||
| with: | ||
| ref: 'refs/pull/${{ github.event.client_payload.pull_request.number }}/merge' | ||
| - uses: actions/setup-java@v3 | ||
| with: | ||
| java-version: "11" | ||
| distribution: 'adopt' | ||
| - uses: actions/cache@v3 | ||
| with: | ||
| path: ~/.m2 | ||
| key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }} | ||
| restore-keys: ${{ runner.os }}-m2 | ||
|
|
||
| # Note: Accessing, pushing tags etc. to GHCR will only succeed in upstream because secrets. | ||
| - name: Login to Github Container Registry | ||
| uses: docker/login-action@v2 | ||
| with: | ||
| registry: ghcr.io | ||
| username: ${{ secrets.GHCR_USERNAME }} | ||
| password: ${{ secrets.GHCR_TOKEN }} | ||
|
|
||
| - name: Set up QEMU for multi-arch builds | ||
| uses: docker/setup-qemu-action@v2 | ||
|
|
||
| # Get the image tag from either the command or default to branch name (Not used for now) | ||
| #- name: Get the target tag name | ||
| # id: vars | ||
| # run: | | ||
| # tag=${{ github.event.client_payload.slash_command.args.named.tag }} | ||
| # if [[ -z "$tag" ]]; then tag=$(echo "${{ github.event.client_payload.pull_request.head.ref }}" | tr '\\/_:&+,;#*' '-'); fi | ||
| # echo "IMAGE_TAG=$tag" >> $GITHUB_ENV | ||
|
|
||
| # Set image tag to branch name of the PR | ||
| - name: Set image tag to branch name | ||
| run: | | ||
| echo "IMAGE_TAG=$(echo "${{ github.event.client_payload.pull_request.head.ref }}" | tr '\\/_:&+,;#*' '-')" >> $GITHUB_ENV | ||
| # Necessary to split as otherwise the submodules are not available (deploy skips install) | ||
| - name: Build app and configbaker container image with local architecture and submodules (profile will skip tests) | ||
| run: > | ||
| mvn -B -f modules/dataverse-parent | ||
| -P ct -pl edu.harvard.iq:dataverse -am | ||
| install | ||
| - name: Deploy multi-arch application and configbaker container image | ||
| run: > | ||
| mvn | ||
| -Dapp.image.tag=${{ env.IMAGE_TAG }} -Dbase.image.tag=${{ env.BASE_IMAGE_TAG }} | ||
| -Ddocker.registry=ghcr.io -Ddocker.platforms=${{ env.PLATFORMS }} | ||
| -Pct deploy | ||
| - uses: marocchino/sticky-pull-request-comment@v2 | ||
| with: | ||
| header: registry-push | ||
| hide_and_recreate: true | ||
| hide_classify: "OUTDATED" | ||
| number: ${{ github.event.client_payload.pull_request.number }} | ||
| message: | | ||
| :package: Pushed preview images as | ||
| ``` | ||
| ghcr.io/gdcc/dataverse:${{ env.IMAGE_TAG }} | ||
| ``` | ||
| ``` | ||
| ghcr.io/gdcc/configbaker:${{ env.IMAGE_TAG }} | ||
| ``` | ||
| :ship: [See on GHCR](https://github.com/orgs/gdcc/packages/container). Use by referencing with full name as printed above, mind the registry name. | ||
| # Leave a note when things have gone sideways | ||
| - uses: peter-evans/create-or-update-comment@v3 | ||
| if: ${{ failure() }} | ||
| with: | ||
| issue-number: ${{ github.event.client_payload.pull_request.number }} | ||
| body: > | ||
| :package: Could not push preview images :disappointed:. | ||
| See [log](https://github.com/IQSS/dataverse/actions/runs/${{ github.run_id }}) for details. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| name: PR Comment Commands | ||
| on: | ||
| issue_comment: | ||
| types: [created] | ||
| jobs: | ||
| dispatch: | ||
| # Avoid being triggered by forks in upstream | ||
| if: ${{ github.repository_owner == 'IQSS' }} | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Dispatch | ||
| uses: peter-evans/slash-command-dispatch@v3 | ||
| with: | ||
| # This token belongs to @dataversebot and has sufficient scope. | ||
| token: ${{ secrets.GHCR_TOKEN }} | ||
| commands: | | ||
| push-image | ||
| repository: IQSS/dataverse | ||
| # Commenter must have at least write permission to repo to trigger dispatch | ||
| permission: write |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,24 +1,47 @@ | ||
| name: "Shellcheck" | ||
| on: | ||
| push: | ||
| branches: | ||
| - develop | ||
| paths: | ||
| - conf/solr/** | ||
| - modules/container-base/** | ||
| - conf/solr/**/.sh | ||
| - modules/container-base/**/*.sh | ||
| - modules/container-configbaker/**/*.sh | ||
| pull_request: | ||
| branches: | ||
| - develop | ||
| paths: | ||
| - conf/solr/** | ||
| - modules/container-base/** | ||
| - conf/solr/**/*.sh | ||
| - modules/container-base/**/*.sh | ||
| - modules/container-configbaker/**/*.sh | ||
| jobs: | ||
| shellcheck: | ||
| name: Shellcheck | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| pull-requests: write | ||
| steps: | ||
| - uses: actions/checkout@v2 | ||
| - uses: actions/checkout@v3 | ||
| - name: shellcheck | ||
| uses: reviewdog/action-shellcheck@v1 | ||
| with: | ||
| github_token: ${{ secrets.github_token }} | ||
| reporter: github-pr-review # Change reporter. | ||
| fail_on_error: true | ||
| # Container base image uses dumb-init shebang, so nail to using bash | ||
| shellcheck_flags: "--shell=bash --external-sources" | ||
| shellcheck_flags: "--shell=bash --external-sources" | ||
| # Exclude old scripts | ||
| exclude: | | ||
| */.git/* | ||
| conf/docker-aio/* | ||
| doc/* | ||
| downloads/* | ||
| scripts/database/* | ||
| scripts/globalid/* | ||
| scripts/icons/* | ||
| scripts/installer/* | ||
| scripts/issues/* | ||
| scripts/r/* | ||
| scripts/tests/* | ||
| scripts/vagrant/* | ||
| tests/* |
Oops, something went wrong.