-
Notifications
You must be signed in to change notification settings - Fork 1
Develop #36
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: develop
Are you sure you want to change the base?
Develop #36
Changes from all commits
16a4162
711b65c
9f7506b
e9ebe20
0afeb12
f6562e0
0539665
b3103df
23c9b12
f733f8f
3e139ec
7f1773c
9dfbe98
441ad18
7b117d2
2057e6b
2c372f0
f8be561
25e9706
ab09641
1b5710c
1c82743
699dc22
4853569
33ef3d3
d32f15c
250c86b
901b43e
776394f
ad1adbc
8504697
44493d7
43ff38b
96d84bf
709b47a
a8aac27
c8a8ac3
c93b2d0
78449a0
eaa8646
ed7f1cd
207513d
c44fd73
111dd5c
c62b78f
fe5b937
613ef94
3a69e63
ca8d00e
9dfc463
1af5199
e0b5121
5215801
3464ad2
7fa6604
e5ea9bc
2f5987d
eac0cb8
e9622c3
7307f81
b0d17f3
b52fcf4
0b43628
ea69ec3
ea2d626
2694d0e
1715bf9
087746e
5b35933
5a89550
1957e5b
7160cad
0a5859a
bd109b9
4539964
14df6a1
fc9405e
f2fa0ae
4d7e6e5
146fc83
2708b4d
6697a5b
8a46116
511afa4
add3025
b690b19
20c0061
9fb87fa
eb8ad7f
8c5667b
dee008a
dd558aa
3812149
c788ef4
7b7cbf7
e33cfda
1203a49
480a420
34bfa24
cbce1d7
603e75e
4671a4d
35a5bec
7eaa1c7
b232c06
9d5ec38
4db1af4
72798a1
c8b4d2a
87deee9
81b0d62
943b806
e1319af
28639b6
f044e71
604c61e
b044572
41ee61a
a864833
6ffc886
d77b2b9
dc001ef
fcf5487
a4646fe
d35d303
b16b27f
059c4d6
8c7196a
0d0ba94
042be1d
dcd71d6
1ef9f0b
2217bf1
448843d
625021e
dfd8315
2987c54
8b6c979
b65bf45
41abcad
600fb1c
f2cdd5d
55800f9
ae2c0d9
f70b2b7
b43cdc0
76027f1
dfd835c
584059b
f59235b
2eafb1b
488223f
db1e77a
500840f
0c2ab7f
e99de23
7e905b3
aae4cc1
ca90bb1
53dc953
7dc62bd
9303546
2c3a88d
ea659b5
775cd81
3e9037b
68278f3
3010473
c4b5033
c35a94b
174a62a
9e4e95d
eac954c
1be0ba9
53bb27e
5a8a8ae
284914f
9c1d99f
0bdaf38
5fbe488
2dc359f
edcdac0
b5ddb19
baf4965
c7d7256
11f5ae1
3ace9df
4caa262
9ae5344
b1511cb
e123c18
152bea1
89bc2de
84f1790
13a859b
fdfe42f
3cebb33
2c168cd
14f6699
0e68847
0b6238c
7b0e39d
f5211f5
b76e182
ff1bb50
156056d
e9e37f4
c988ec7
11b8502
1e67229
cdc6642
88737fe
792a7f6
e753b52
02b6938
9bb9100
6c17b2a
1121e39
6178a12
a6d0add
7570b8b
5d6a94a
114ffc1
a04cc40
a8edfe2
c0fee8b
879cf17
e3e659f
20bd8ac
3ee7259
840bc34
eb44077
b60f260
25a77d0
de949c9
c89e6d9
c661bce
e277a87
756b78b
4f17576
afc2891
c66af5a
9430b0a
23ed6b4
083f2e7
49cf0b1
725f80a
1f96b09
7a0fb34
cef2d47
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,63 @@ | ||
| name: Validate / Publish helm charts | ||
|
|
||
| on: | ||
| release: | ||
| types: [published] | ||
| pull_request: | ||
| types: [opened, reopened, synchronize] | ||
| paths: | ||
| - 'helm/**' | ||
| workflow_dispatch: | ||
| inputs: | ||
| IGNORE_CHARTS: | ||
| description: 'Provide list of charts to be ignored separated by pipe(|)' | ||
| required: false | ||
| default: '' | ||
| type: string | ||
| CHART_PUBLISH: | ||
| description: 'Chart publishing to gh-pages branch' | ||
| required: false | ||
| default: 'NO' | ||
| type: string | ||
| options: | ||
| - YES | ||
| - NO | ||
| INCLUDE_ALL_CHARTS: | ||
| description: 'Include all charts for Linting/Publishing (YES/NO)' | ||
| required: false | ||
| default: 'NO' | ||
| type: string | ||
| options: | ||
| - YES | ||
| - NO | ||
| push: | ||
| branches: | ||
| - '!release-branch' | ||
| - master | ||
| - 1.* | ||
| - 0.* | ||
| - develop | ||
| - MOSIP* | ||
| - release* | ||
| - INJI* | ||
| paths: | ||
| - 'helm/**' | ||
|
|
||
| jobs: | ||
| chart-lint-publish: | ||
| uses: mosip/kattu/.github/workflows/chart-lint-publish.yml@master | ||
| with: | ||
| CHARTS_DIR: ./helm | ||
| CHARTS_URL: https://inji.github.io/helm | ||
| REPOSITORY: helm | ||
| BRANCH: gh-pages | ||
| INCLUDE_ALL_CHARTS: "${{ inputs.INCLUDE_ALL_CHARTS || 'NO' }}" | ||
| IGNORE_CHARTS: "${{ inputs.IGNORE_CHARTS ||'reporting|reporting-init|activemq-artemis' }}" | ||
| CHART_PUBLISH: "${{ inputs.CHART_PUBLISH || 'YES' }}" | ||
| LINTING_CHART_SCHEMA_YAML_URL: "https://raw.githubusercontent.com/mosip/kattu/master/.github/helm-lint-configs/chart-schema.yaml" | ||
| LINTING_LINTCONF_YAML_URL: "https://raw.githubusercontent.com/mosip/kattu/master/.github/helm-lint-configs/lintconf.yaml" | ||
| LINTING_CHART_TESTING_CONFIG_YAML_URL: "https://raw.githubusercontent.com/mosip/kattu/master/.github/helm-lint-configs/chart-testing-config.yaml" | ||
| LINTING_HEALTH_CHECK_SCHEMA_YAML_URL: "https://raw.githubusercontent.com/mosip/kattu/master/.github/helm-lint-configs/health-check-schema.yaml" | ||
| secrets: | ||
| TOKEN: ${{ secrets.ACTION_PAT }} | ||
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }} | ||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,17 @@ | ||
| name: 'Delete old artifacts' | ||
| on: | ||
| schedule: | ||
| - cron: '0 * * * *' # Every hour | ||
| workflow_dispatch: | ||
| inputs: | ||
| message: | ||
| description: 'Message for manually triggering' | ||
| required: false | ||
| default: 'Triggered for Updates' | ||
| type: string | ||
| jobs: | ||
| delete-artifacts: | ||
| uses: mosip/kattu/.github/workflows/clear-artifacts.yml@master | ||
| secrets: | ||
| ACCESS_TOKEN: ${{ secrets.access_token }} | ||
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }} | ||
|
Comment on lines
+14
to
+17
Check warningCode scanning / CodeQL Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
|
||
This file was deleted.
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,191 @@ | ||
| name: Maven Package upon a push | ||
|
|
||
| on: | ||
| release: | ||
| types: [published] | ||
| pull_request: | ||
| types: [opened, reopened, synchronize] | ||
| workflow_dispatch: | ||
| inputs: | ||
| message: | ||
| description: 'Message for manually triggering' | ||
| required: false | ||
| default: 'Triggered for Updates' | ||
| type: string | ||
| push: | ||
| branches: | ||
| - '!release-branch' | ||
| - release* | ||
| - master | ||
| - 1.* | ||
| - develop* | ||
| - MOSIP* | ||
| - qa-develop | ||
| - inji*-* | ||
|
|
||
| jobs: | ||
| build-mimoto: | ||
| uses: mosip/kattu/.github/workflows/maven-build.yml@master-java21 | ||
| with: | ||
| SERVICE_LOCATION: ./ | ||
| BUILD_ARTIFACT: mimoto | ||
| secrets: | ||
| OSSRH_USER: ${{ secrets.OSSRH_USER }} | ||
| OSSRH_SECRET: ${{ secrets.OSSRH_SECRET }} | ||
| OSSRH_TOKEN: ${{ secrets.OSSRH_TOKEN }} | ||
| GPG_SECRET: ${{ secrets.GPG_SECRET }} | ||
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }} | ||
|
|
||
| ## Recreate zips to provide support for docker unzip operation | ||
| recreate-zips: | ||
|
Comment on lines
+28
to
+40
Check warningCode scanning / CodeQL Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
|
||
| needs: build-mimoto | ||
| runs-on: ubuntu-latest | ||
| env: | ||
| BUILD_ARTIFACT: mimoto | ||
| NEW_BUILD_ARTIFACT: mimoto-recreated | ||
| SERVICE_LOCATION: mimoto | ||
| steps: | ||
| - uses: actions/checkout@v3 | ||
| - uses: actions/download-artifact@v4 | ||
| if: ${{ ( env.BUILD_ARTIFACT != 'false' ) }} | ||
| with: | ||
| name: ${{ env.BUILD_ARTIFACT }} | ||
| path: ../ | ||
| - name: recreate zip | ||
| run: | | ||
| cd ../ | ||
|
|
||
| echo "LS ./" | ||
| ls . | ||
| echo "unzip command" | ||
| unzip -uj "${{ env.BUILD_ARTIFACT }}.zip" "target/*" -d "${{ env.SERVICE_LOCATION }}/target/" | ||
|
|
||
| echo "find command" | ||
| cd ${{ env.SERVICE_LOCATION }} | ||
| find ../${{ env.SERVICE_LOCATION }} -path '*/target/*' -name '*.jar' -type f -executable -exec zip ${{ env.NEW_BUILD_ARTIFACT }}.zip {} + | ||
|
|
||
| - name: Upload the springboot jars | ||
| if: ${{ !contains(github.ref, 'master') }} | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: ${{ env.NEW_BUILD_ARTIFACT }} | ||
| path: ${{ env.NEW_BUILD_ARTIFACT }}.zip | ||
|
|
||
| sonar_analysis: | ||
|
Comment on lines
+41
to
+74
Check warningCode scanning / CodeQL Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}
|
||
| needs: build-mimoto | ||
| if: "${{ github.event_name != 'pull_request' }}" | ||
| uses: mosip/kattu/.github/workflows/maven-sonar-analysis.yml@dsd9685 | ||
| with: | ||
| SERVICE_LOCATION: ./ | ||
| secrets: | ||
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | ||
| ORG_KEY: ${{ secrets.ORG_KEY }} | ||
| OSSRH_USER: ${{ secrets.OSSRH_USER }} | ||
| OSSRH_SECRET: ${{ secrets.OSSRH_SECRET }} | ||
| OSSRH_TOKEN: ${{ secrets.OSSRH_TOKEN }} | ||
| GPG_SECRET: ${{ secrets.GPG_SECRET }} | ||
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }} | ||
|
|
||
| build-dockers: | ||
|
Comment on lines
+75
to
+89
Check warningCode scanning / CodeQL Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
|
||
| needs: recreate-zips | ||
| strategy: | ||
| matrix: | ||
| include: | ||
| - SERVICE_LOCATION: '../mimoto' | ||
| SERVICE_NAME: 'mimoto' | ||
| BUILD_ARTIFACT: 'mimoto-recreated' | ||
| SQUASH_LAYERS: '8' | ||
| fail-fast: false | ||
| uses: mosip/kattu/.github/workflows/docker-build.yml@master-java21 | ||
| name: ${{ matrix.SERVICE_NAME }} | ||
| with: | ||
| SERVICE_LOCATION: ${{ matrix.SERVICE_LOCATION }} | ||
| SERVICE_NAME: ${{ matrix.SERVICE_NAME }} | ||
| BUILD_ARTIFACT: ${{ matrix.BUILD_ARTIFACT }} | ||
| SQUASH_LAYERS: ${{ matrix.SQUASH_LAYERS }} | ||
| secrets: | ||
| DEV_NAMESPACE_DOCKER_HUB: ${{ secrets.DEV_NAMESPACE_DOCKER_HUB }} | ||
| ACTOR_DOCKER_HUB: ${{ secrets.ACTOR_DOCKER_HUB }} | ||
| RELEASE_DOCKER_HUB: ${{ secrets.RELEASE_DOCKER_HUB }} | ||
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }} | ||
|
|
||
| build-maven-apitest-mimoto: | ||
|
Comment on lines
+90
to
+112
Check warningCode scanning / CodeQL Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
|
||
| uses: mosip/kattu/.github/workflows/maven-build.yml@master-java21 | ||
| with: | ||
| SERVICE_LOCATION: ./api-test | ||
| BUILD_ARTIFACT: apitest-mimoto | ||
| secrets: | ||
| OSSRH_USER: ${{ secrets.OSSRH_USER }} | ||
| OSSRH_SECRET: ${{ secrets.OSSRH_SECRET }} | ||
| OSSRH_TOKEN: ${{ secrets.OSSRH_TOKEN }} | ||
| GPG_SECRET: ${{ secrets.GPG_SECRET }} | ||
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }} | ||
|
|
||
| build-apitest-mimoto-local: | ||
|
Comment on lines
+113
to
+124
Check warningCode scanning / CodeQL Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
|
||
| needs: build-maven-apitest-mimoto | ||
| runs-on: ubuntu-latest | ||
| env: | ||
| NAMESPACE: ${{ secrets.dev_namespace_docker_hub }} | ||
| SERVICE_NAME: apitest-mimoto | ||
| SERVICE_LOCATION: api-test | ||
| BUILD_ARTIFACT: apitest-mimoto-local | ||
| steps: | ||
| - uses: actions/checkout@v3 | ||
| - name: Set up JDK 21 | ||
| uses: actions/setup-java@v3 | ||
| with: | ||
| distribution: 'temurin' | ||
| java-version: '21' | ||
| server-id: ossrh # Value of the distributionManagement/repository/id field of the pom.xml | ||
| settings-path: ${{ github.workspace }} # location for the settings.xml file | ||
| - name: Setup the settings file for ossrh server | ||
| run: echo "<settings> <servers> <server> <id>ossrh</id> <username>${{secrets.ossrh_user}}</username> <password>${{secrets.ossrh_secret}}</password> </server> </servers> <profiles> <profile> <id>ossrh</id> <activation> <activeByDefault>true</activeByDefault> </activation> <properties> <gpg.executable>gpg2</gpg.executable> <gpg.passphrase>${{secrets.gpg_secret}}</gpg.passphrase> </properties> </profile> <profile> <id>allow-snapshots</id> <activation><activeByDefault>true</activeByDefault></activation> <repositories> <repository> <id>snapshots-repo</id> <url>https://oss.sonatype.org/content/repositories/snapshots</url> <releases><enabled>false</enabled></releases> <snapshots><enabled>true</enabled></snapshots> </repository> <repository> <id>releases-repo</id> <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url> <releases><enabled>true</enabled></releases> <snapshots><enabled>false</enabled></snapshots> </repository> </repositories> </profile> <profile> <id>sonar</id> <properties> <sonar.sources>.</sonar.sources> <sonar.host.url>https://sonarcloud.io</sonar.host.url> </properties> <activation> <activeByDefault>false</activeByDefault> </activation> </profile> </profiles> </settings>" > $GITHUB_WORKSPACE/settings.xml | ||
| - name: Build Automationtests with Maven | ||
| run: | | ||
| cd ${{ env.SERVICE_LOCATION}} | ||
| mvn clean package -s $GITHUB_WORKSPACE/settings.xml | ||
| - name: Copy configuration files to target directory. | ||
| run: | | ||
| cp -r ${{ env.SERVICE_LOCATION}}/target/classes/config ${{ env.SERVICE_LOCATION}}/target/config | ||
| cp -r ${{ env.SERVICE_LOCATION}}/testNgXmlFiles ${{ env.SERVICE_LOCATION}}/target/testNgXmlFiles | ||
| - name: Ready the springboot artifacts | ||
| if: ${{ !contains(github.ref, 'master') }} | ||
| run: | | ||
| ## FIND JARS & COPY ONLY EXECUTABLE JARs STORED UNDER TARGET DIRECTORY | ||
| find ${{ env.SERVICE_LOCATION }} -path '*/target/*' -exec zip ${{ env.BUILD_ARTIFACT }}.zip {} + | ||
| - name: Upload the springboot jars | ||
| if: ${{ !contains(github.ref, 'master') }} | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: ${{ env.BUILD_ARTIFACT }} | ||
| path: ${{ env.BUILD_ARTIFACT }}.zip | ||
| - uses: 8398a7/action-slack@v3 | ||
| with: | ||
| status: ${{ job.status }} | ||
| fields: repo,message,author,commit,workflow,job # selectable (default: repo,message) | ||
| env: | ||
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} # required | ||
| if: failure() # Pick up events even if the job fails or is canceled. | ||
|
|
||
| build-dockers_apitest_mimoto: | ||
|
Comment on lines
+125
to
+170
Check warningCode scanning / CodeQL Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}
|
||
| needs: build-apitest-mimoto-local | ||
| strategy: | ||
| matrix: | ||
| include: | ||
| - SERVICE_LOCATION: 'api-test' | ||
| SERVICE_NAME: 'apitest-mimoto' | ||
| BUILD_ARTIFACT: 'apitest-mimoto-local' | ||
| ONLY_DOCKER: true | ||
| fail-fast: false | ||
| name: ${{ matrix.SERVICE_NAME }} | ||
| uses: mosip/kattu/.github/workflows/docker-build.yml@master-java21 | ||
| with: | ||
| SERVICE_LOCATION: ${{ matrix.SERVICE_LOCATION }} | ||
| SERVICE_NAME: ${{ matrix.SERVICE_NAME }} | ||
| BUILD_ARTIFACT: ${{ matrix.BUILD_ARTIFACT }} | ||
| ONLY_DOCKER: ${{ matrix.ONLY_DOCKER }} | ||
| secrets: | ||
| DEV_NAMESPACE_DOCKER_HUB: ${{ secrets.DEV_NAMESPACE_DOCKER_HUB }} | ||
| ACTOR_DOCKER_HUB: ${{ secrets.ACTOR_DOCKER_HUB }} | ||
| RELEASE_DOCKER_HUB: ${{ secrets.RELEASE_DOCKER_HUB }} | ||
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_INJI_TEAM }} | ||
|
Comment on lines
+171
to
+191
Check warningCode scanning / CodeQL Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
|
||
Check warning
Code scanning / CodeQL
Workflow does not contain permissions