-
Notifications
You must be signed in to change notification settings - Fork 92
117 lines (103 loc) · 3.62 KB
/
on-main-or-release-branch-commit.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
---
name: Main or release branch commit
on:
push:
branches:
- main
- 'release-*'
jobs:
check-vars-and-secrets:
name: Check vars and secrets
uses: ./.github/workflows/_check-vars-and-secrets.yml
secrets: inherit
build-chain-bootstrapper:
needs: [check-vars-and-secrets]
name: Build chain-bootstrapper
uses: ./.github/workflows/_build-chain-bootstrapper.yml
with:
ref: ${{ github.ref }}
production: true
push-chain-bootstrapper-image-to-ecr:
name: Push chain-bootstrapper docker image to ECR
needs: [build-chain-bootstrapper]
uses: ./.github/workflows/_push-node-image-to-ecr.yml
secrets: inherit
with:
binary-artifact-name: chain-bootstrapper-release
docker-image-name: chain-bootstrapper
binary-name: chain-bootstrapper
docker-file-path: ./bin/chain-bootstrapper/Dockerfile
build-and-push-cliain:
needs: [check-vars-and-secrets]
name: Build and push cliain
uses: ./.github/workflows/_build-and-push-cliain.yml
secrets: inherit
with:
check-only: false
build-aleph-e2e-client-image:
needs: [check-vars-and-secrets]
name: Build aleph-e2e-client image
uses: ./.github/workflows/_build-aleph-e2e-client-image.yml
with:
ref: ${{ github.ref }}
push: true
secrets: inherit
build-production-node-and-runtime:
needs: [check-vars-and-secrets]
name: Build production node and runtime
uses: ./.github/workflows/_build-production-node-and-runtime.yml
with:
ref: ${{ github.ref }}
check-runtime-determinism:
needs: [build-production-node-and-runtime]
uses: ./.github/workflows/_check-runtime-determimism.yml
store-production-node-and-runtime-in-mainnet-s3:
name: Store production node and runtime in Mainnet bucket
runs-on: ubuntu-20.04
needs: [build-production-node-and-runtime]
steps:
- name: Checkout aleph-node source code
uses: actions/checkout@v4
- name: Store production node and runtime
uses: ./.github/actions/store-node-and-runtime
with:
profile: production
aws-access-key-id: ${{ secrets.AWS_MAINNET_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_MAINNET_SECRET_ACCESS_KEY }}
aws-bucket: ${{ secrets.CI_MAINNET_S3BUCKET_NAME }}
push-production-node-image-to-ecr:
name: Push production node docker image to ECR
needs: [build-production-node-and-runtime]
uses: ./.github/workflows/_push-node-image-to-ecr.yml
secrets: inherit
with:
binary-artifact-name: aleph-production-node
docker-image-name: aleph-node
binary-name: aleph-node
docker-file-path: ./docker/Dockerfile
send-slack-notification-release:
name: Send Slack notification about workflow status
runs-on: ubuntu-20.04
if: always() && startsWith(github.ref_name, 'release-')
needs: [push-production-node-image-to-ecr]
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Send Slack message
uses: Cardinal-Cryptography/github-actions/slack-notification@v6
with:
notify-on: "always"
env:
SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK_DEV_ONDUTY }}
send-slack-notification-main:
name: Send Slack notification about workflow status
runs-on: ubuntu-20.04
if: always() && github.ref_name == 'main'
needs: [push-production-node-image-to-ecr]
steps:
- name: Send Slack message
uses: Cardinal-Cryptography/github-actions/slack-notification@v6
with:
notify-on: "failure"
env:
SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK_DEV_ONDUTY }}