release-images.yaml

name: Release Images
on:
  workflow_dispatch:
    inputs:
      tag:
        description: 'Release tag name'
        required: true
  release:
    types: [released, prereleased]


env:
  # The values are extracted from the github.event context,
  # which is only available when the workflow gets triggered by a release event.
  RELEASE_VERSION: ${{ github.event.release.name }}
  BRANCH: ${{ github.event.release.target_commitish }}


jobs:
  release-images:
    if: github.repository_owner == 'Apicurio' && (github.event_name == 'workflow_dispatch' || startsWith(github.event.release.tag_name, '3.'))
    runs-on: ubuntu-22.04
    timeout-minutes: 120
    env:
      RELEASE_TYPE: release
    steps:
      - name: View Disk Usage
        run: df -h

      # https://github.com/marketplace/actions/free-disk-space-ubuntu
      - name: Free Disk Space (Ubuntu)
        uses: jlumbroso/free-disk-space@76866dbe54312617f00798d1762df7f43def6e5c
        with:
          android: true
          dotnet: true
          haskell: true
          swap-storage: true
          large-packages: false
          # this might remove tools that are actually needed, but frees about 6 GB
          tool-cache: false

      - name: View Disk Usage
        run: df -h

        # Open-Source Machine emulator that allows you to emulate multiple CPU architectures on your machine
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v1
        
        # Docker CLI plugin for extended build capabilities with BuildKit
      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v1
        
      - name: Inspect builder
        run: |
          echo "Name:      ${{ steps.buildx.outputs.name }}"
          echo "Endpoint:  ${{ steps.buildx.outputs.endpoint }}"
          echo "Status:    ${{ steps.buildx.outputs.status }}"
          echo "Flags:     ${{ steps.buildx.outputs.flags }}"
          echo "Platforms: ${{ steps.buildx.outputs.platforms }}"

      - name: Fetch Release Details
        if: github.event_name == 'workflow_dispatch'
        run: |
          touch release.json && curl https://api.github.com/repos/${GITHUB_REPOSITORY}/releases/tags/${{ github.event.inputs.tag }} > release.json
          echo "RELEASE_VERSION=$(cat release.json | jq -r '.name')" >> $GITHUB_ENV
          echo "BRANCH=$(cat release.json | jq -r '.target_commitish')" >> $GITHUB_ENV

      - name: Determine Release Type
        if: "contains(env.RELEASE_VERSION, 'RC')"
        run: |
          echo "This is a pre-release. Setting 'RELEASE_TYPE' to 'pre-release'"
          echo "RELEASE_TYPE=pre-release" >> $GITHUB_ENV

      - name: Download Source Code
        run: git clone --branch $RELEASE_VERSION --single-branch ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git registry
        
      # We have faced issues in the past where a github release was created from a wrong commit
      # This step will ensure that the release was created from the right commit  
      - name: Verify Project Version
        run: |
          cd registry
          PROJECT_VERSION=$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)
          if [[ $PROJECT_VERSION != $RELEASE_VERSION ]]
          then
              echo "ERROR: Project Version '${PROJECT_VERSION}' does not match with Released Version '${RELEASE_VERSION}'"
              exit 1	  
          fi

      - name: Set up JDK 17
        uses: actions/setup-java@v3
        with:
          java-version: '17'
          distribution: 'temurin'

      - name: Set up Node.js
        uses: actions/setup-node@v1
        with:
          node-version: 18

      - name: Build Registry
        run: |
          cd registry
          ./mvnw clean package -am --no-transfer-progress -Pprod -DskipTests=true -DskipCommitIdPlugin=false -Dmaven.wagon.httpconnectionManager.maxTotal=30 -Dmaven.wagon.http.retryHandler.count=5

      - name: Build Registry UI
        working-directory: registry/ui
        run: |
          npm install
          npm run lint
          npm run build
          npm run package

      - name: Login to DockerHub Registry
        run: echo ${{ secrets.DOCKERHUB_PASSWORD }} | docker login -u ${{ secrets.DOCKERHUB_USERNAME }} --password-stdin

      - name: Login to Quay.io Registry
        run: docker login -u "${{ secrets.QUAY_USERNAME }}" -p "${{ secrets.QUAY_PASSWORD }}" quay.io

      # Do this first in case something goes wrong.
      # TODO: Push to DockerHub
      - name: Build and Push Operator Image
        working-directory: registry/operator
        run: |
          make config-show
          make ADDITIONAL_IMAGE_TAG=latest image-build image-push          

      - name: Build and Push Multi-arch Application Images
        run: |
          cd registry
          docker buildx build --push -f ./distro/docker/target/docker/Dockerfile.jvm \
              -t docker.io/apicurio/apicurio-registry:latest \
              -t docker.io/apicurio/apicurio-registry:latest-release \
              -t docker.io/apicurio/apicurio-registry:$RELEASE_VERSION \
              -t quay.io/apicurio/apicurio-registry:latest \
              -t quay.io/apicurio/apicurio-registry:latest-release \
              -t quay.io/apicurio/apicurio-registry:$RELEASE_VERSION \
              --platform linux/amd64,linux/arm64,linux/s390x,linux/ppc64le ./distro/docker/target/docker

      - name: Build and Push Multi-arch UI Images
        run: |
          cd registry/ui
          docker buildx build --push -f ./Dockerfile \
              -t docker.io/apicurio/apicurio-registry-ui:latest \
              -t docker.io/apicurio/apicurio-registry-ui:latest-release \
              -t docker.io/apicurio/apicurio-registry-ui:$RELEASE_VERSION \
              -t quay.io/apicurio/apicurio-registry-ui:latest \
              -t quay.io/apicurio/apicurio-registry-ui:latest-release \
              -t quay.io/apicurio/apicurio-registry-ui:$RELEASE_VERSION \
              --platform linux/amd64,linux/arm64,linux/s390x,linux/ppc64le .

      - name: Build Native executables
        env:
          SKIP_TESTS: "true"
        run: |
          cd registry
          ./mvnw package --no-transfer-progress -Pnative -Dquarkus.native.container-build=true -Pprod -DskipTests=true

      - name: Build and Push Native image for testing
        run: |
          cd registry
          docker build --push -f ./distro/docker/target/docker/Dockerfile.native \
              -t docker.io/apicurio/apicurio-registry-native:latest \
              -t docker.io/apicurio/apicurio-registry-native:latest-release \
              -t docker.io/apicurio/apicurio-registry-native:$RELEASE_VERSION \
              -t quay.io/apicurio/apicurio-registry-native:latest \
              -t quay.io/apicurio/apicurio-registry-native:latest-release \
              -t quay.io/apicurio/apicurio-registry-native:$RELEASE_VERSION \
            app/

      - name: Slack Notification (Always)
        if: always()
        run: |
          MESSAGE="'${{ github.workflow }}/${{ github.job }}' job completed with status: ${{ job.status }}"
          REPO="${{ github.repository }}"
          LINK="https://github.com/$REPO/actions/runs/${{ github.run_id }}"
          PAYLOAD="{\"workflow\": \"${{ github.workflow }}\", \"status\": \"${{ job.status }}\", \"message\": \"$MESSAGE\", \"link\": \"$LINK\", \"repository\": \"$REPO\"}"
          curl -X POST -H "Content-Type: application/json" -d "$PAYLOAD" ${{ secrets.SLACK_NOTIFICATION_WEBHOOK }}

      - name: Slack Notification (Error)
        if: failure()
        run: |
          MESSAGE="'${{ github.workflow }}/${{ github.job }}' job FAILED!"
          REPO="${{ github.repository }}"
          LINK="https://github.com/$REPO/actions/runs/${{ github.run_id }}"
          PAYLOAD="{\"workflow\": \"${{ github.workflow }}\", \"status\": \"${{ job.status }}\", \"message\": \"$MESSAGE\", \"link\": \"$LINK\", \"repository\": \"$REPO\"}"
          curl -X POST -H "Content-Type: application/json" -d "$PAYLOAD" ${{ secrets.SLACK_ERROR_WEBHOOK }}