Set CODEOWNERS #69
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright 2024 New Relic, Inc. | |
| # | |
| # Licensed under the Apache License, Version 2.0 (the "License"); | |
| # you may not use this file except in compliance with the License. | |
| # You may obtain a copy of the License at | |
| # | |
| # http://www.apache.org/licenses/LICENSE-2.0 | |
| # | |
| # Unless required by applicable law or agreed to in writing, software | |
| # distributed under the License is distributed on an "AS IS" BASIS, | |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
| # See the License for the specific language governing permissions and | |
| # limitations under the License. | |
| --- | |
| name: Java Agent CI | |
| on: | |
| workflow_dispatch: # run test job only | |
| pull_request: # run check modified files / test jobs | |
| release: # run check modified files / test / publish jobs | |
| types: | |
| - published | |
| # only allow one instance of this workflow to be running per PR or branch, cancels any that are already running | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| env: | |
| K8S_OPERATOR_IMAGE_TAG: edge | |
| permissions: | |
| contents: read | |
| jobs: | |
| check-modified-files: | |
| name: Check whether any Java-related files were modified, skip the test job if not | |
| uses: ./.github/workflows/check-modified-files.yml | |
| secrets: inherit | |
| permissions: | |
| contents: read | |
| with: | |
| agent-language: java | |
| test: | |
| name: Run Java init container tests | |
| runs-on: ubuntu-latest | |
| needs: check-modified-files | |
| # run only if files were modified or the workflow was manually invoked | |
| if: needs.check-modified-files.outputs.files-changed == 'true' || github.event_name == 'workflow_dispatch' | |
| steps: | |
| # For some reason, Harden Runner causes setup-minikube to not work correctly | |
| # - name: Harden Runner | |
| # uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 | |
| # with: | |
| # #disable-sudo: true | |
| # egress-policy: audit | |
| - name: Checkout code | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # 4.1.1 | |
| with: | |
| persist-credentials: false | |
| fetch-depth: 0 | |
| - name: Set up Docker Buildx | |
| id: buildx | |
| uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # 3.3.0 | |
| - name: Start minikube | |
| uses: medyagh/setup-minikube@317d92317e473a10540357f1f4b2878b80ee7b95 # 0.0.16 | |
| - name: Deploy cert-manager to minikube | |
| run: | | |
| helm repo add jetstack https://charts.jetstack.io --force-update | |
| helm install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --version v1.14.5 --set installCRDs=true | |
| echo "waiting for cert-manager pods to be ready..." | |
| sleep 5 | |
| kubectl wait --for=condition=Ready -n cert-manager --all pods --timeout=60s | |
| - name: Deploy New Relic k8s-agents-operator to minikube | |
| run: | | |
| helm repo add k8s-agents-operator https://newrelic.github.io/k8s-agents-operator | |
| helm upgrade --install k8s-agents-operator k8s-agents-operator/k8s-agents-operator \ | |
| --namespace=default \ | |
| --set=licenseKey=${{ secrets.NEW_RELIC_LICENSE_KEY }} \ | |
| --set=controllerManager.manager.image.tag=${{ env.K8S_OPERATOR_IMAGE_TAG }} | |
| sleep 5 | |
| kubectl wait --for=condition=Ready -n default --all pods --timeout=60s | |
| - name: Build init container for e2e test | |
| # When the init container image is built without specifying the agent version via a build arg, the current agent version published to download.newrelic.com will be used. | |
| run: | | |
| minikube image build -t e2e/newrelic-java-init:e2e src/java/ | |
| - name: Build test app container | |
| run: | | |
| minikube image build -t e2e/test-app-java:e2e tests/java/ | |
| - name: Run e2e-test | |
| uses: newrelic/newrelic-integration-e2e-action@a97ced80a4841c8c6261d1f9dca6706b1d89acb1 # 1.11.0 | |
| with: | |
| retry_seconds: 60 | |
| retry_attempts: 5 | |
| agent_enabled: false | |
| spec_path: tests/java/test-specs.yml | |
| account_id: ${{ secrets.NEW_RELIC_ACCOUNT_ID }} | |
| api_key: ${{ secrets.NEW_RELIC_API_KEY }} | |
| license_key: ${{ secrets.NEW_RELIC_LICENSE_KEY }} | |
| # set the region to Staging if using a staging license key. Also set NEW_RELIC_HOST in tests/chart/templates/deployment.yaml | |
| #region: Staging | |
| publish: | |
| runs-on: ubuntu-latest | |
| needs: test | |
| # only publish on a java release | |
| if: (github.event_name == 'release' && endsWith(github.ref, '_java')) | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 | |
| with: | |
| disable-sudo: true | |
| egress-policy: audit | |
| - name: Extract Agent Version from release tag | |
| id: version | |
| run: | | |
| agent_version=${{ github.ref_name }} # Use tag name | |
| agent_version=${agent_version##v} # Remove v prefix | |
| agent_version=${agent_version%%_java} # Remove language suffix | |
| echo "agent_version=${agent_version}" | tee -a "$GITHUB_OUTPUT" | |
| - name: Checkout code | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # 4.1.1 | |
| with: | |
| persist-credentials: false | |
| fetch-depth: 0 | |
| - name: Set up Docker Buildx | |
| id: buildx | |
| uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # 3.3.0 | |
| - name: Generate Docker metadata (tags and labels) | |
| id: meta | |
| uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # 5.5.1 | |
| with: | |
| images: newrelic/newrelic-java-init | |
| tags: | | |
| type=raw,value=${{ steps.version.outputs.agent_version }} | |
| type=raw,value=latest | |
| - name: Login to Docker Hub Container Registry | |
| uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # 3.1.0 | |
| with: | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.DOCKER_TOKEN }} | |
| - name: Build and publish Java Agent init container image | |
| uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # 5.3.0 | |
| with: | |
| push: true | |
| context: src/java/ | |
| platforms: linux/amd64,linux/arm64 | |
| tags: ${{ steps.meta.outputs.tags }} | |
| labels: ${{ steps.meta.outputs.labels }} |