continuous-integration-workflow.yml 8.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210
  1. name: CI
  2. on:
  3. push:
  4. schedule:
  5. - cron: '0 10 * * *' # Once per day at 10am UTC
  6. workflow_dispatch: # Manual trigger
  7. env:
  8. SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
  9. GRADLE_ENTERPRISE_CACHE_USER: ${{ secrets.GRADLE_ENTERPRISE_CACHE_USER }}
  10. GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
  11. GRADLE_ENTERPRISE_SECRET_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_SECRET_ACCESS_KEY }}
  12. COMMIT_OWNER: ${{ github.event.pusher.name }}
  13. COMMIT_SHA: ${{ github.sha }}
  14. ARTIFACTORY_USERNAME: ${{ secrets.ARTIFACTORY_USERNAME }}
  15. ARTIFACTORY_PASSWORD: ${{ secrets.ARTIFACTORY_PASSWORD }}
  16. RUN_JOBS: ${{ github.repository == 'spring-projects/spring-security' }}
  17. jobs:
  18. prerequisites:
  19. name: Pre-requisites for building
  20. runs-on: ubuntu-latest
  21. outputs:
  22. runjobs: ${{ steps.continue.outputs.runjobs }}
  23. steps:
  24. - id: continue
  25. name: Determine if should continue
  26. if: env.RUN_JOBS == 'true'
  27. run: echo "::set-output name=runjobs::true"
  28. build_jdk_11:
  29. name: Build JDK 11
  30. needs: [prerequisites]
  31. strategy:
  32. matrix:
  33. os: [ubuntu-latest, windows-latest]
  34. runs-on: ${{ matrix.os }}
  35. if: needs.prerequisites.outputs.runjobs
  36. steps:
  37. - uses: actions/checkout@v2
  38. - name: Set up JDK 11
  39. uses: actions/setup-java@v1
  40. with:
  41. java-version: '11'
  42. - name: Setup gradle user name
  43. run: |
  44. mkdir -p ~/.gradle
  45. echo 'systemProp.user.name=spring-builds' >> ~/.gradle/gradle.properties
  46. - name: Cache Gradle packages
  47. uses: actions/cache@v2
  48. with:
  49. path: ~/.gradle/caches
  50. key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }}
  51. - name: Build with Gradle
  52. env:
  53. GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GRADLE_ENTERPRISE_CACHE_USER }}
  54. GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
  55. GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_SECRET_ACCESS_KEY }}
  56. run: ./gradlew clean build --continue -PartifactoryUsername="$ARTIFACTORY_USERNAME" -PartifactoryPassword="$ARTIFACTORY_PASSWORD"
  57. snapshot_tests:
  58. name: Test against snapshots
  59. needs: [prerequisites]
  60. runs-on: ubuntu-latest
  61. if: needs.prerequisites.outputs.runjobs
  62. steps:
  63. - uses: actions/checkout@v2
  64. - name: Set up JDK
  65. uses: actions/setup-java@v1
  66. with:
  67. java-version: '11'
  68. - name: Setup gradle user name
  69. run: |
  70. mkdir -p ~/.gradle
  71. echo 'systemProp.user.name=spring-builds' >> ~/.gradle/gradle.properties
  72. - name: Snapshot Tests
  73. run: |
  74. export GRADLE_ENTERPRISE_CACHE_USERNAME="$GRADLE_ENTERPRISE_CACHE_USER"
  75. export GRADLE_ENTERPRISE_CACHE_PASSWORD="$GRADLE_ENTERPRISE_CACHE_PASSWORD"
  76. export GRADLE_ENTERPRISE_ACCESS_KEY="$GRADLE_ENTERPRISE_SECRET_ACCESS_KEY"
  77. ./gradlew test --refresh-dependencies -PartifactoryUsername="$ARTIFACTORY_USERNAME" -PartifactoryPassword="$ARTIFACTORY_PASSWORD" -PforceMavenRepositories=snapshot -PspringVersion='5.+' -PreactorVersion='20+' -PspringDataVersion='Neumann-BUILD-SNAPSHOT' -PrsocketVersion=1.1.0-SNAPSHOT -PspringBootVersion=2.4.0-SNAPSHOT -PlocksDisabled --stacktrace
  78. check_samples:
  79. name: Check Samples project
  80. needs: [prerequisites]
  81. runs-on: ubuntu-latest
  82. if: needs.prerequisites.outputs.runjobs
  83. steps:
  84. - uses: actions/checkout@v2
  85. - name: Set up JDK
  86. uses: actions/setup-java@v1
  87. with:
  88. java-version: '11'
  89. - name: Setup gradle user name
  90. run: |
  91. mkdir -p ~/.gradle
  92. echo 'systemProp.user.name=spring-builds' >> ~/.gradle/gradle.properties
  93. - name: Check samples project
  94. run: |
  95. export GRADLE_ENTERPRISE_CACHE_USERNAME="$GRADLE_ENTERPRISE_CACHE_USER"
  96. export GRADLE_ENTERPRISE_CACHE_PASSWORD="$GRADLE_ENTERPRISE_CACHE_PASSWORD"
  97. export GRADLE_ENTERPRISE_ACCESS_KEY="$GRADLE_ENTERPRISE_SECRET_ACCESS_KEY"
  98. ./gradlew checkSamples --stacktrace
  99. check_tangles:
  100. name: Check for Package Tangles
  101. needs: [ prerequisites ]
  102. runs-on: ubuntu-latest
  103. if: needs.prerequisites.outputs.runjobs
  104. steps:
  105. - uses: actions/checkout@v2
  106. - name: Set up JDK
  107. uses: actions/setup-java@v1
  108. with:
  109. java-version: '11'
  110. - name: Setup gradle user name
  111. run: |
  112. mkdir -p ~/.gradle
  113. echo 'systemProp.user.name=spring-builds' >> ~/.gradle/gradle.properties
  114. - name: Check for package tangles
  115. run: |
  116. export GRADLE_ENTERPRISE_CACHE_USERNAME="$GRADLE_ENTERPRISE_CACHE_USER"
  117. export GRADLE_ENTERPRISE_CACHE_PASSWORD="$GRADLE_ENTERPRISE_CACHE_PASSWORD"
  118. export GRADLE_ENTERPRISE_ACCESS_KEY="$GRADLE_ENTERPRISE_SECRET_ACCESS_KEY"
  119. ./gradlew check s101 --stacktrace
  120. deploy_artifacts:
  121. name: Deploy Artifacts
  122. needs: [build_jdk_11, snapshot_tests, check_samples, check_tangles]
  123. runs-on: ubuntu-latest
  124. steps:
  125. - uses: actions/checkout@v2
  126. - name: Set up JDK
  127. uses: actions/setup-java@v1
  128. with:
  129. java-version: '11'
  130. - name: Setup gradle user name
  131. run: |
  132. mkdir -p ~/.gradle
  133. echo 'systemProp.user.name=spring-builds' >> ~/.gradle/gradle.properties
  134. - name: Deploy artifacts
  135. run: |
  136. export GRADLE_ENTERPRISE_CACHE_USERNAME="$GRADLE_ENTERPRISE_CACHE_USER"
  137. export GRADLE_ENTERPRISE_CACHE_PASSWORD="$GRADLE_ENTERPRISE_CACHE_PASSWORD"
  138. export GRADLE_ENTERPRISE_ACCESS_KEY="$GRADLE_ENTERPRISE_SECRET_ACCESS_KEY"
  139. ./gradlew publishArtifacts finalizeDeployArtifacts -PossrhUsername="$OSSRH_TOKEN_USERNAME" -PossrhPassword="$OSSRH_TOKEN_PASSWORD" -PartifactoryUsername="$ARTIFACTORY_USERNAME" -PartifactoryPassword="$ARTIFACTORY_PASSWORD" --stacktrace
  140. env:
  141. ORG_GRADLE_PROJECT_signingKey: ${{ secrets.GPG_PRIVATE_KEY }}
  142. ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.GPG_PASSPHRASE }}
  143. OSSRH_TOKEN_USERNAME: ${{ secrets.OSSRH_S01_TOKEN_USERNAME }}
  144. OSSRH_TOKEN_PASSWORD: ${{ secrets.OSSRH_S01_TOKEN_PASSWORD }}
  145. ARTIFACTORY_USERNAME: ${{ secrets.ARTIFACTORY_USERNAME }}
  146. ARTIFACTORY_PASSWORD: ${{ secrets.ARTIFACTORY_PASSWORD }}
  147. deploy_docs:
  148. name: Deploy Docs
  149. needs: [build_jdk_11, snapshot_tests, check_samples, check_tangles]
  150. runs-on: ubuntu-latest
  151. steps:
  152. - uses: actions/checkout@v2
  153. - name: Set up JDK
  154. uses: actions/setup-java@v1
  155. with:
  156. java-version: '11'
  157. - name: Setup gradle user name
  158. run: |
  159. mkdir -p ~/.gradle
  160. echo 'systemProp.user.name=spring-builds' >> ~/.gradle/gradle.properties
  161. - name: Deploy Docs
  162. run: |
  163. export GRADLE_ENTERPRISE_CACHE_USERNAME="$GRADLE_ENTERPRISE_CACHE_USER"
  164. export GRADLE_ENTERPRISE_CACHE_PASSWORD="$GRADLE_ENTERPRISE_CACHE_PASSWORD"
  165. export GRADLE_ENTERPRISE_ACCESS_KEY="$GRADLE_ENTERPRISE_SECRET_ACCESS_KEY"
  166. ./gradlew deployDocs -PdeployDocsSshKey="$DOCS_SSH_KEY" -PdeployDocsSshUsername="$DOCS_USERNAME" -PdeployDocsHost="$DOCS_HOST" --stacktrace
  167. env:
  168. DOCS_USERNAME: ${{ secrets.DOCS_USERNAME }}
  169. DOCS_SSH_KEY: ${{ secrets.DOCS_SSH_KEY }}
  170. DOCS_HOST: ${{ secrets.DOCS_HOST }}
  171. deploy_schema:
  172. name: Deploy Schema
  173. needs: [build_jdk_11, snapshot_tests, check_samples, check_tangles]
  174. runs-on: ubuntu-latest
  175. steps:
  176. - uses: actions/checkout@v2
  177. - name: Set up JDK
  178. uses: actions/setup-java@v1
  179. with:
  180. java-version: '11'
  181. - name: Setup gradle user name
  182. run: |
  183. mkdir -p ~/.gradle
  184. echo 'systemProp.user.name=spring-builds' >> ~/.gradle/gradle.properties
  185. - name: Deploy Schema
  186. run: |
  187. export GRADLE_ENTERPRISE_CACHE_USERNAME="$GRADLE_ENTERPRISE_CACHE_USER"
  188. export GRADLE_ENTERPRISE_CACHE_PASSWORD="$GRADLE_ENTERPRISE_CACHE_PASSWORD"
  189. export GRADLE_ENTERPRISE_ACCESS_KEY="$GRADLE_ENTERPRISE_SECRET_ACCESS_KEY"
  190. ./gradlew deploySchema -PdeployDocsSshKey="$DOCS_SSH_KEY" -PdeployDocsSshUsername="$DOCS_USERNAME" -PdeployDocsHost="$DOCS_HOST" --stacktrace --info
  191. env:
  192. DOCS_USERNAME: ${{ secrets.DOCS_USERNAME }}
  193. DOCS_SSH_KEY: ${{ secrets.DOCS_SSH_KEY }}
  194. DOCS_HOST: ${{ secrets.DOCS_HOST }}
  195. notify_result:
  196. name: Check for failures
  197. needs: [build_jdk_11, snapshot_tests, check_samples, check_tangles, deploy_artifacts, deploy_docs, deploy_schema]
  198. if: failure()
  199. runs-on: ubuntu-latest
  200. steps:
  201. - name: Send Slack message
  202. uses: Gamesight/slack-workflow-status@v1.0.1
  203. with:
  204. repo_token: ${{ secrets.GITHUB_TOKEN }}
  205. slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
  206. channel: '#spring-security-ci'
  207. name: 'CI Notifier'