coturn/.github/workflows/dev.yml at dev · wireapp/coturn · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
name: Dev

on:
  push:
    branches: [dev]
  workflow_dispatch:

concurrency:
  group: dev-${{ github.ref }}
  cancel-in-progress: false

permissions: {}

jobs:
  dev-build:
    name: Dev build
    runs-on: ubuntu-26.04
    timeout-minutes: 60
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          fetch-depth: 0
          persist-credentials: false

      - name: Compute the version
        id: version
        uses: wireapp/wire-rm-actions/version@813f008b900b1ad3284502f97cac343d80b1836b # v0.1.0

      - name: Build the image locally
        run: docker build --file docker/Dockerfile --tag coturn:test .

      - name: Test the image
        env:
          IMAGE: coturn:test
        run: .github/scripts/test-image.sh

      - name: Login to quay.io with the OIDC token of the job
        id: quay
        uses: wireapp/wire-rm-actions/quay-login@813f008b900b1ad3284502f97cac343d80b1836b # v0.1.0
        with:
          robot: wire+gha_coturn

      - name: Build and push the image
        id: image
        uses: wireapp/wire-rm-actions/build-image@813f008b900b1ad3284502f97cac343d80b1836b # v0.1.0
        with:
          dockerfile: docker/Dockerfile
          image: quay.io/wire/coturn
          version: ${{ steps.version.outputs.version }}
          provenance: 'false'
          sbom: 'false'
          expires-after: 90d
          labels: |
            org.opencontainers.image.title=coturn
            org.opencontainers.image.description=Wire's coturn, a STUN and TURN server

      - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
        with:
          version: v3.19.0

      - uses: oras-project/setup-oras@5e2f2482b30b0cb3e14e67f89a80c88c659a7c63 # v2.0.3

      - name: Package the chart
        id: package
        env:
          VERSION: ${{ steps.version.outputs.version }}
          OUT_DIR: ${{ runner.temp }}/chart
        run: .github/scripts/package-chart.sh

      - name: Publish the chart to oci://quay.io/wire/charts/dev/coturn
        id: chart
        uses: wireapp/wire-rm-actions/publish-chart@813f008b900b1ad3284502f97cac343d80b1836b # v0.1.0
        with:
          chart-path: ${{ steps.package.outputs.dir }}
          version: ${{ steps.version.outputs.version }}
          channel: dev
          expires-after: 90d
          username: ${{ steps.quay.outputs.username }}
          password: ${{ steps.quay.outputs.token }}

      - name: Write the dev release manifest
        id: manifest
        continue-on-error: true
        uses: wireapp/wire-rm-actions/release-manifest@813f008b900b1ad3284502f97cac343d80b1836b # v0.1.0
        with:
          mode: write
          manifest: ${{ runner.temp }}/release-manifest.json
          component: coturn
          release-type: dev
          version: ${{ steps.version.outputs.version }}
          source-repository: ${{ github.server_url }}/${{ github.repository }}
          source-ref: ${{ github.ref_name }}
          source-commit: ${{ github.sha }}
          image-repository: quay.io/wire/coturn
          image-digest: ${{ steps.image.outputs.digest }}
          chart-repository: ${{ steps.chart.outputs.repository }}
          chart-digest: ${{ steps.chart.outputs.digest }}
          expires-after: 90d

      - name: Declare the dev build to the release managers
        if: github.ref == 'refs/heads/dev'
        uses: wireapp/wire-rm-actions/notify-rm@813f008b900b1ad3284502f97cac343d80b1836b # v0.1.0
        with:
          rm-staging-url: ${{ vars.RM_STAGING_URL }}
          rm-staging-audience: wire-release-manager-staging
          rm-prod-url: ${{ vars.RM_PROD_URL }}
          rm-prod-audience: wire-release-manager-prod
          component: coturn
          version: ${{ steps.version.outputs.version }}
          kind: ${{ steps.version.outputs.kind }}
          repository: ${{ steps.chart.outputs.repository }}
          digest: ${{ steps.chart.outputs.digest }}
          release-manifest-file: ${{ steps.manifest.outcome == 'success' && steps.manifest.outputs.manifest || '' }}