|
@@ -1,192 +0,0 @@
|
|
|
-name: CI
|
|
|
-
|
|
|
-on:
|
|
|
- push:
|
|
|
- schedule:
|
|
|
- - cron: '0 10 * * *' # Once per day at 10am UTC
|
|
|
- workflow_dispatch: # Manual trigger
|
|
|
-
|
|
|
-env:
|
|
|
- SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
|
|
|
- GRADLE_ENTERPRISE_CACHE_USER: ${{ secrets.GRADLE_ENTERPRISE_CACHE_USER }}
|
|
|
- GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
|
|
|
- GRADLE_ENTERPRISE_SECRET_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_SECRET_ACCESS_KEY }}
|
|
|
- COMMIT_OWNER: ${{ github.event.pusher.name }}
|
|
|
- COMMIT_SHA: ${{ github.sha }}
|
|
|
- ARTIFACTORY_USERNAME: ${{ secrets.ARTIFACTORY_USERNAME }}
|
|
|
- ARTIFACTORY_PASSWORD: ${{ secrets.ARTIFACTORY_PASSWORD }}
|
|
|
- RUN_JOBS: ${{ github.repository == 'spring-projects/spring-security' }}
|
|
|
-
|
|
|
-jobs:
|
|
|
- prerequisites:
|
|
|
- name: Pre-requisites for building
|
|
|
- runs-on: ubuntu-latest
|
|
|
- outputs:
|
|
|
- runjobs: ${{ steps.continue.outputs.runjobs }}
|
|
|
- steps:
|
|
|
- - id: continue
|
|
|
- name: Determine if should continue
|
|
|
- if: env.RUN_JOBS == 'true'
|
|
|
- run: echo "::set-output name=runjobs::true"
|
|
|
- build_jdk_8:
|
|
|
- name: Build JDK 8
|
|
|
- needs: [prerequisites]
|
|
|
- runs-on: ubuntu-latest
|
|
|
- if: needs.prerequisites.outputs.runjobs
|
|
|
- steps:
|
|
|
- - uses: actions/checkout@v2
|
|
|
- - name: Set up JDK 8
|
|
|
- uses: actions/setup-java@v1
|
|
|
- with:
|
|
|
- java-version: '8'
|
|
|
- - name: Setup gradle user name
|
|
|
- run: |
|
|
|
- mkdir -p ~/.gradle
|
|
|
- echo 'systemProp.user.name=spring-builds+github' >> ~/.gradle/gradle.properties
|
|
|
- - name: Cache Gradle packages
|
|
|
- uses: actions/cache@v2
|
|
|
- with:
|
|
|
- path: ~/.gradle/caches
|
|
|
- key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }}
|
|
|
- - name: Build with Gradle
|
|
|
- env:
|
|
|
- GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GRADLE_ENTERPRISE_CACHE_USER }}
|
|
|
- GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
|
|
|
- GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_SECRET_ACCESS_KEY }}
|
|
|
- run: ./gradlew clean build --continue -PartifactoryUsername="$ARTIFACTORY_USERNAME" -PartifactoryPassword="$ARTIFACTORY_PASSWORD"
|
|
|
- test_jdk_11:
|
|
|
- name: Test JDK 11
|
|
|
- needs: [prerequisites]
|
|
|
- runs-on: ubuntu-latest
|
|
|
- if: needs.prerequisites.outputs.runjobs
|
|
|
- steps:
|
|
|
- - uses: actions/checkout@v2
|
|
|
- - name: Set up JDK 11
|
|
|
- uses: actions/setup-java@v1
|
|
|
- with:
|
|
|
- java-version: '11'
|
|
|
- - name: Setup gradle user name
|
|
|
- run: |
|
|
|
- mkdir -p ~/.gradle
|
|
|
- echo 'systemProp.user.name=spring-builds+github' >> ~/.gradle/gradle.properties
|
|
|
- - name: Cache Gradle packages
|
|
|
- uses: actions/cache@v2
|
|
|
- with:
|
|
|
- path: ~/.gradle/caches
|
|
|
- key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }}
|
|
|
- - name: Build with Gradle
|
|
|
- env:
|
|
|
- GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GRADLE_ENTERPRISE_CACHE_USER }}
|
|
|
- GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
|
|
|
- GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_SECRET_ACCESS_KEY }}
|
|
|
- run: ./gradlew clean test --continue -PartifactoryUsername="$ARTIFACTORY_USERNAME" -PartifactoryPassword="$ARTIFACTORY_PASSWORD"
|
|
|
- snapshot_tests:
|
|
|
- name: Test against snapshots
|
|
|
- needs: [prerequisites]
|
|
|
- runs-on: ubuntu-latest
|
|
|
- if: needs.prerequisites.outputs.runjobs
|
|
|
- steps:
|
|
|
- - uses: actions/checkout@v2
|
|
|
- - name: Set up JDK
|
|
|
- uses: actions/setup-java@v1
|
|
|
- with:
|
|
|
- java-version: '11'
|
|
|
- - name: Setup gradle user name
|
|
|
- run: |
|
|
|
- mkdir -p ~/.gradle
|
|
|
- echo 'systemProp.user.name=spring-builds+github' >> ~/.gradle/gradle.properties
|
|
|
- - name: Snapshot Tests
|
|
|
- run: |
|
|
|
- export GRADLE_ENTERPRISE_CACHE_USERNAME="$GRADLE_ENTERPRISE_CACHE_USER"
|
|
|
- export GRADLE_ENTERPRISE_CACHE_PASSWORD="$GRADLE_ENTERPRISE_CACHE_PASSWORD"
|
|
|
- export GRADLE_ENTERPRISE_ACCESS_KEY="$GRADLE_ENTERPRISE_SECRET_ACCESS_KEY"
|
|
|
- ./gradlew test --refresh-dependencies -PartifactoryUsername="$ARTIFACTORY_USERNAME" -PartifactoryPassword="$ARTIFACTORY_PASSWORD" -PforceMavenRepositories=snapshot -PspringVersion='5.2.+' -PreactorVersion=Dysprosium-BUILD-SNAPSHOT -PspringDataVersion=Lovelace-BUILD-SNAPSHOT -PlocksDisabled --stacktrace
|
|
|
- deploy_artifacts:
|
|
|
- name: Deploy Artifacts
|
|
|
- needs: [test_jdk_11, build_jdk_8, snapshot_tests]
|
|
|
- runs-on: ubuntu-latest
|
|
|
- steps:
|
|
|
- - uses: actions/checkout@v2
|
|
|
- - name: Set up JDK
|
|
|
- uses: actions/setup-java@v1
|
|
|
- with:
|
|
|
- java-version: '11'
|
|
|
- - name: Setup gradle user name
|
|
|
- run: |
|
|
|
- mkdir -p ~/.gradle
|
|
|
- echo 'systemProp.user.name=spring-builds+github' >> ~/.gradle/gradle.properties
|
|
|
- - name: Deploy artifacts
|
|
|
- run: |
|
|
|
- export GRADLE_ENTERPRISE_CACHE_USERNAME="$GRADLE_ENTERPRISE_CACHE_USER"
|
|
|
- export GRADLE_ENTERPRISE_CACHE_PASSWORD="$GRADLE_ENTERPRISE_CACHE_PASSWORD"
|
|
|
- export GRADLE_ENTERPRISE_ACCESS_KEY="$GRADLE_ENTERPRISE_SECRET_ACCESS_KEY"
|
|
|
- ./gradlew deployArtifacts -PossrhTokenUsername="$OSSRH_TOKEN_USERNAME" -PossrhTokenPassword="$OSSRH_TOKEN_PASSWORD" -PartifactoryUsername="$ARTIFACTORY_USERNAME" -PartifactoryPassword="$ARTIFACTORY_PASSWORD" --stacktrace --no-parallel
|
|
|
- ./gradlew finalizeDeployArtifacts -PossrhTokenUsername="$OSSRH_TOKEN_USERNAME" -PossrhTokenPassword="$OSSRH_TOKEN_PASSWORD" -PartifactoryUsername="$ARTIFACTORY_USERNAME" -PartifactoryPassword="$ARTIFACTORY_PASSWORD" --stacktrace --no-parallel
|
|
|
- env:
|
|
|
- ORG_GRADLE_PROJECT_signingKey: ${{ secrets.GPG_PRIVATE_KEY }}
|
|
|
- ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.GPG_PASSPHRASE }}
|
|
|
- OSSRH_TOKEN_USERNAME: ${{ secrets.OSSRH_S01_TOKEN_USERNAME }}
|
|
|
- OSSRH_TOKEN_PASSWORD: ${{ secrets.OSSRH_S01_TOKEN_PASSWORD }}
|
|
|
- ARTIFACTORY_USERNAME: ${{ secrets.ARTIFACTORY_USERNAME }}
|
|
|
- ARTIFACTORY_PASSWORD: ${{ secrets.ARTIFACTORY_PASSWORD }}
|
|
|
- deploy_docs:
|
|
|
- name: Deploy Docs
|
|
|
- needs: [test_jdk_11, build_jdk_8, snapshot_tests]
|
|
|
- runs-on: ubuntu-latest
|
|
|
- steps:
|
|
|
- - uses: actions/checkout@v2
|
|
|
- - name: Set up JDK
|
|
|
- uses: actions/setup-java@v1
|
|
|
- with:
|
|
|
- java-version: '11'
|
|
|
- - name: Setup gradle user name
|
|
|
- run: |
|
|
|
- mkdir -p ~/.gradle
|
|
|
- echo 'systemProp.user.name=spring-builds+github' >> ~/.gradle/gradle.properties
|
|
|
- - name: Deploy Docs
|
|
|
- run: |
|
|
|
- export GRADLE_ENTERPRISE_CACHE_USERNAME="$GRADLE_ENTERPRISE_CACHE_USER"
|
|
|
- export GRADLE_ENTERPRISE_CACHE_PASSWORD="$GRADLE_ENTERPRISE_CACHE_PASSWORD"
|
|
|
- export GRADLE_ENTERPRISE_ACCESS_KEY="$GRADLE_ENTERPRISE_SECRET_ACCESS_KEY"
|
|
|
- ./gradlew deployDocs -PdeployDocsSshKey="$DOCS_SSH_KEY" -PdeployDocsSshUsername="$DOCS_USERNAME" -PdeployDocsHost="$DOCS_HOST" --stacktrace
|
|
|
- env:
|
|
|
- DOCS_USERNAME: ${{ secrets.DOCS_USERNAME }}
|
|
|
- DOCS_SSH_KEY: ${{ secrets.DOCS_SSH_KEY }}
|
|
|
- DOCS_HOST: ${{ secrets.DOCS_HOST }}
|
|
|
- deploy_schema:
|
|
|
- name: Deploy Schema
|
|
|
- needs: [test_jdk_11, build_jdk_8, snapshot_tests]
|
|
|
- runs-on: ubuntu-latest
|
|
|
- steps:
|
|
|
- - uses: actions/checkout@v2
|
|
|
- - name: Set up JDK
|
|
|
- uses: actions/setup-java@v1
|
|
|
- with:
|
|
|
- java-version: '11'
|
|
|
- - name: Setup gradle user name
|
|
|
- run: |
|
|
|
- mkdir -p ~/.gradle
|
|
|
- echo 'systemProp.user.name=spring-builds+github' >> ~/.gradle/gradle.properties
|
|
|
- - name: Deploy Schema
|
|
|
- run: |
|
|
|
- export GRADLE_ENTERPRISE_CACHE_USERNAME="$GRADLE_ENTERPRISE_CACHE_USER"
|
|
|
- export GRADLE_ENTERPRISE_CACHE_PASSWORD="$GRADLE_ENTERPRISE_CACHE_PASSWORD"
|
|
|
- export GRADLE_ENTERPRISE_ACCESS_KEY="$GRADLE_ENTERPRISE_SECRET_ACCESS_KEY"
|
|
|
- ./gradlew deploySchema -PdeployDocsSshKey="$DOCS_SSH_KEY" -PdeployDocsSshUsername="$DOCS_USERNAME" -PdeployDocsHost="$DOCS_HOST" --stacktrace --info
|
|
|
- env:
|
|
|
- DOCS_USERNAME: ${{ secrets.DOCS_USERNAME }}
|
|
|
- DOCS_SSH_KEY: ${{ secrets.DOCS_SSH_KEY }}
|
|
|
- DOCS_HOST: ${{ secrets.DOCS_HOST }}
|
|
|
- notify_result:
|
|
|
- name: Check for failures
|
|
|
- needs: [test_jdk_11, build_jdk_8, snapshot_tests, deploy_artifacts, deploy_docs, deploy_schema]
|
|
|
- if: failure()
|
|
|
- runs-on: ubuntu-latest
|
|
|
- steps:
|
|
|
- - name: Send Slack message
|
|
|
- uses: Gamesight/slack-workflow-status@v1.0.1
|
|
|
- with:
|
|
|
- repo_token: ${{ secrets.GITHUB_TOKEN }}
|
|
|
- slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
|
|
|
- channel: '#spring-security-ci'
|
|
|
- name: 'CI Notifier'
|