317 lines
11 KiB
YAML
317 lines
11 KiB
YAML
---
|
|
# dance-lessons-coach Unified CI/CD Workflow
|
|
# Single, optimized workflow that replaces all previous workflows
|
|
# Fast execution with minimal repetition and maximum artifact sharing
|
|
|
|
name: CI/CD Pipeline
|
|
|
|
on:
|
|
workflow_dispatch: {}
|
|
push:
|
|
branches:
|
|
- main
|
|
- 'ci/**'
|
|
- 'feature/**'
|
|
- 'fix/**'
|
|
- 'refactor/**'
|
|
paths-ignore:
|
|
- 'README.md'
|
|
- 'doc/**'
|
|
- 'adr/**'
|
|
- '.gitea/**'
|
|
- 'documentation/**'
|
|
- '*.md'
|
|
- '.vibe/**'
|
|
- 'features/**'
|
|
pull_request:
|
|
branches:
|
|
- main
|
|
types: [opened, synchronize, reopened, labeled]
|
|
# Only run PR CI if the commit doesn't already have passing branch CI
|
|
if: |
|
|
github.event_name == 'pull_request' &&
|
|
(github.event.action == 'opened' ||
|
|
github.event.action == 'synchronize' ||
|
|
github.event.action == 'reopened')
|
|
paths-ignore:
|
|
- 'README.md'
|
|
- 'doc/**'
|
|
- 'adr/**'
|
|
- '.gitea/**'
|
|
- 'documentation/**'
|
|
- '*.md'
|
|
- '.vibe/**'
|
|
- 'features/**'
|
|
|
|
# cancel any previously-started runs of this workflow on the same branch
|
|
concurrency:
|
|
group: ${{ github.ref }}-${{ github.workflow }}
|
|
cancel-in-progress: true
|
|
|
|
# Arcodange-specific environment variables
|
|
env:
|
|
GITEA_INTERNAL: "https://gitea.arcodange.lab/"
|
|
GITEA_EXTERNAL: "https://gitea.arcodange.fr/"
|
|
GITEA_ORG: "arcodange"
|
|
GITEA_REPO: "dance-lessons-coach"
|
|
CI_REGISTRY: "gitea.arcodange.lab"
|
|
|
|
jobs:
|
|
build-cache:
|
|
name: Build Docker Cache
|
|
runs-on: ubuntu-latest-ca
|
|
if: "!contains(github.event.head_commit.message, '[skip ci]') && github.actor != 'ci-bot'"
|
|
outputs:
|
|
deps_hash: ${{ steps.calculate_hash.outputs.deps_hash }}
|
|
cache_hit: ${{ steps.check_cache.outputs.cache_hit }}
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Calculate dependency hash
|
|
id: calculate_hash
|
|
run: |
|
|
# Calculate hash of go.mod + go.sum (inline, no script needed)
|
|
DEPS_HASH=$(sha256sum go.mod go.sum | sha256sum | cut -d' ' -f1 | head -c 12)
|
|
echo "Dependency hash: $DEPS_HASH"
|
|
echo "deps_hash=$DEPS_HASH" >> $GITHUB_OUTPUT
|
|
|
|
- name: Check for existing cache
|
|
id: check_cache
|
|
run: |
|
|
# Check if image exists in registry
|
|
IMAGE_NAME="${{ env.CI_REGISTRY }}/${{ env.GITEA_ORG }}/${{ env.GITEA_REPO }}-build-cache:${{ steps.calculate_hash.outputs.deps_hash }}"
|
|
|
|
# Try to pull the image to see if it exists
|
|
if docker pull "$IMAGE_NAME" >/dev/null 2>&1; then
|
|
echo "✅ Cache hit - using existing build cache"
|
|
echo "cache_hit=true" >> $GITHUB_OUTPUT
|
|
else
|
|
echo "⚠️ Cache miss - will build new cache image"
|
|
echo "cache_hit=false" >> $GITHUB_OUTPUT
|
|
fi
|
|
|
|
- name: Login to Gitea Container Registry
|
|
if: steps.check_cache.outputs.cache_hit == 'false'
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ${{ env.CI_REGISTRY }}
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.PACKAGES_TOKEN }}
|
|
|
|
|
|
|
|
- name: Build and push Docker cache image
|
|
if: steps.check_cache.outputs.cache_hit == 'false'
|
|
run: |
|
|
IMAGE_NAME="${{ env.CI_REGISTRY }}/${{ env.GITEA_ORG }}/${{ env.GITEA_REPO }}-build-cache:${{ steps.calculate_hash.outputs.deps_hash }}"
|
|
echo "Building cache image: $IMAGE_NAME"
|
|
|
|
# Build the image using traditional docker build
|
|
docker build \
|
|
--file docker/Dockerfile.build \
|
|
--tag "$IMAGE_NAME" \
|
|
.
|
|
|
|
# Push the image
|
|
docker push "$IMAGE_NAME"
|
|
|
|
echo "✅ Build cache image pushed successfully"
|
|
|
|
ci-pipeline:
|
|
name: CI Pipeline
|
|
needs: build-cache
|
|
runs-on: ubuntu-latest-ca
|
|
if: "!contains(github.event.head_commit.message, '[skip ci]') && github.actor != 'ci-bot'"
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
# - name: Install Docker Compose
|
|
# run: sudo apt-get update && sudo apt-get install -y docker-compose-plugin
|
|
|
|
- name: Start PostgreSQL with Docker Compose
|
|
run: docker compose -f docker-compose.yml up -d postgres
|
|
|
|
- name: Wait for PostgreSQL to be ready
|
|
run: |
|
|
echo "Waiting for PostgreSQL to be ready..."
|
|
for i in {1..30}; do
|
|
if docker exec dance-lessons-coach-postgres pg_isready -U postgres; then
|
|
echo "✅ PostgreSQL is ready!"
|
|
break
|
|
fi
|
|
echo "Waiting for PostgreSQL... ($i/30)"
|
|
sleep 2
|
|
done
|
|
|
|
# Verify PostgreSQL is accessible
|
|
if ! docker exec dance-lessons-coach-postgres pg_isready -U postgres; then
|
|
echo "❌ PostgreSQL failed to start"
|
|
exit 1
|
|
fi
|
|
|
|
- name: Set up build environment
|
|
run: |
|
|
IMAGE_NAME="${{ env.CI_REGISTRY }}/${{ env.GITEA_ORG }}/${{ env.GITEA_REPO }}-build-cache:${{ needs.build-cache.outputs.deps_hash }}"
|
|
echo "Build cache image: $IMAGE_NAME"
|
|
echo "CACHE_IMAGE=$IMAGE_NAME" >> $GITHUB_ENV
|
|
echo "DEPS_HASH=${{ needs.build-cache.outputs.deps_hash }}" >> $GITHUB_ENV
|
|
|
|
# Cache is guaranteed to be available since build-cache job succeeded
|
|
echo "✅ Using Docker build cache (guaranteed by build-cache job)"
|
|
echo "CACHE_AVAILABLE=true" >> $GITHUB_ENV
|
|
|
|
- name: Start build cache container with Docker Compose
|
|
run: |
|
|
echo "Starting build cache container..."
|
|
export DEPS_HASH="${{ needs.build-cache.outputs.deps_hash }}"
|
|
docker compose -f docker-compose.build.yml up -d build-cache
|
|
|
|
- name: Generate Swagger Docs using Docker Compose
|
|
run: docker compose -f docker-compose.build.yml exec -w /workspace/pkg/server build-cache sh -c "go generate"
|
|
|
|
- name: Build all packages using Docker Compose
|
|
run: docker compose -f docker-compose.build.yml exec -w /workspace build-cache sh -c "go build ./..."
|
|
|
|
|
|
- name: Wait for PostgreSQL to be ready
|
|
run: |
|
|
echo "Waiting for PostgreSQL to be ready..."
|
|
for i in {1..30}; do
|
|
if pg_isready -h localhost -p 5432 -U postgres -d dance_lessons_coach_bdd_test; then
|
|
echo "✅ PostgreSQL is ready!"
|
|
break
|
|
fi
|
|
echo "Waiting for PostgreSQL... ($i/30)"
|
|
sleep 2
|
|
done
|
|
|
|
# Verify PostgreSQL is accessible
|
|
if ! pg_isready -h localhost -p 5432 -U postgres -d dance_lessons_coach_bdd_test; then
|
|
echo "❌ PostgreSQL failed to start"
|
|
exit 1
|
|
fi
|
|
|
|
- name: Run tests with coverage using Docker Compose
|
|
run: |
|
|
echo "Running in Docker Compose container with PostgreSQL..."
|
|
docker compose -f docker-compose.build.yml exec \
|
|
-e PGHOST=dance-lessons-coach-postgres \
|
|
-e PGPORT=5432 \
|
|
-e PGUSER=postgres \
|
|
-e PGPASSWORD=postgres \
|
|
-e PGDATABASE=dance_lessons_coach_bdd_test \
|
|
-w /workspace \
|
|
build-cache \
|
|
sh -c "go test ./... -coverprofile=coverage.out -v && go tool cover -func=coverage.out > coverage.txt"
|
|
|
|
# Extract coverage percentage
|
|
COVERAGE=$(grep "total:" coverage.txt | grep -oP '\d+\.\d+' | head -1)
|
|
echo "Coverage: ${COVERAGE}%"
|
|
|
|
# Update coverage badge using script
|
|
export PACKAGES_TOKEN="${{ secrets.PACKAGES_TOKEN }}"
|
|
export GITHUB_REF_NAME="${{ github.ref_name }}"
|
|
./scripts/ci-update-coverage-badge.sh "$COVERAGE"
|
|
|
|
- name: Run go fmt
|
|
run: go fmt ./...
|
|
|
|
- name: Run swag fmt
|
|
run: swag fmt
|
|
|
|
- name: Build binaries
|
|
run: docker compose -f docker-compose.build.yml exec -w /workspace build-cache sh -c "./scripts/build.sh"
|
|
|
|
# NOTE: Artifact upload disabled - actions/upload-artifact@v4 not available on Gitea
|
|
# TODO: Replace with Gitea-specific upload action when available
|
|
# - name: Upload Swagger documentation
|
|
# uses: actions/upload-artifact@v4
|
|
# with:
|
|
# name: swagger-docs
|
|
# path: pkg/server/docs/swagger.json
|
|
# retention-days: 1
|
|
|
|
# Docker build and push (main branch only)
|
|
- name: Login to Gitea Container Registry
|
|
if: github.ref == 'refs/heads/main'
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ${{ env.CI_REGISTRY }}
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.PACKAGES_TOKEN }}
|
|
|
|
- name: Build and push Docker image
|
|
if: github.ref == 'refs/heads/main'
|
|
run: |
|
|
source VERSION
|
|
IMAGE_VERSION="$MAJOR.$MINOR.$PATCH${PRERELEASE:+-$PRERELEASE}"
|
|
|
|
# Generate Dockerfile.prod with correct dependency hash
|
|
DEPS_HASH="${{ needs.build-cache.outputs.deps_hash }}"
|
|
echo "Using dependency hash: $DEPS_HASH"
|
|
|
|
# Create Dockerfile.prod with the correct cache image tag
|
|
cat > docker/Dockerfile.prod << EOF
|
|
# dance-lessons-coach Production Docker Image
|
|
# Generated by CI/CD pipeline with dependency hash: $DEPS_HASH
|
|
|
|
# Use the build cache image as base
|
|
FROM gitea.arcodange.lab/arcodange/dance-lessons-coach-build-cache:$DEPS_HASH AS builder
|
|
|
|
# Final minimal image
|
|
FROM alpine:3.18
|
|
|
|
WORKDIR /app
|
|
|
|
# Install minimal dependencies
|
|
RUN apk add --no-cache ca-certificates tzdata
|
|
|
|
# Copy binary from builder
|
|
COPY --from=builder /workspace/dance-lessons-coach /app/dance-lessons-coach
|
|
|
|
# Copy configuration
|
|
COPY config.yaml /app/config.yaml
|
|
|
|
# Set permissions
|
|
RUN chmod +x /app/dance-lessons-coach
|
|
|
|
# Set timezone
|
|
ENV TZ=UTC
|
|
|
|
# Expose port
|
|
EXPOSE 8080
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=3s \
|
|
CMD wget -q --spider http://localhost:8080/api/health || exit 1
|
|
|
|
# Entry point
|
|
ENTRYPOINT ["/app/dance-lessons-coach"]
|
|
EOF
|
|
|
|
TAGS="$IMAGE_VERSION latest ${{ github.sha }}"
|
|
echo "Building Docker image with tags: $TAGS"
|
|
|
|
# Build the production image
|
|
docker build -t dance-lessons-coach -f docker/Dockerfile.prod .
|
|
|
|
for TAG in $TAGS; do
|
|
IMAGE_NAME="${{ env.CI_REGISTRY }}/${{ env.GITEA_ORG }}/${{ env.GITEA_REPO }}:$TAG"
|
|
echo "Tagging and pushing: $IMAGE_NAME"
|
|
docker tag dance-lessons-coach "$IMAGE_NAME"
|
|
docker push "$IMAGE_NAME"
|
|
done
|
|
|
|
- name: Show published images
|
|
if: github.ref == 'refs/heads/main'
|
|
run: |
|
|
source VERSION
|
|
IMAGE_VERSION="$MAJOR.$MINOR.$PATCH${PRERELEASE:+-$PRERELEASE}"
|
|
echo "📦 Published Docker images:"
|
|
echo " - ${{ env.CI_REGISTRY }}/${{ env.GITEA_ORG }}/${{ env.GITEA_REPO }}:$IMAGE_VERSION"
|
|
echo " - ${{ env.CI_REGISTRY }}/${{ env.GITEA_ORG }}/${{ env.GITEA_REPO }}:latest"
|
|
echo " - ${{ env.CI_REGISTRY }}/${{ env.GITEA_ORG }}/${{ env.GITEA_REPO }}:${{ github.sha }}"
|