create-release.yaml

name: create release

on:
  pull_request:
    types: [opened, edited, synchronize, reopened, ready_for_review]
  workflow_dispatch:
    inputs:
      name:
        description: 'Release name ( e.g. "2.1.3" )'
        default: ''
        required: true
      latest_release:
        description: 'Latest release'
        type: boolean
        default: false

permissions: # used by build images steps
  id-token: write # This is required for requesting the JWT token
  contents: write # This is required for actions/checkout and builds

jobs:
  verify-head-status:
    name: Verify HEAD
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Verify github actions
        run: ./.github/scripts/verify-actions-status.sh ${{ github.ref_name }}

  #  upgrade-images:
  #    name: Upgrade main images
  #    needs: verify-head-status
  #    runs-on: ubuntu-latest
  #
  #    steps:
  #      - name: Checkout code
  #        uses: actions/checkout@v4
  #        with:
  #          token: ${{ secrets.BOT_TOKEN }}
  #          fetch-depth: 0

  #      - name: Bump values.yaml
  #        run: |
  #          ./hack/replace_serverless_chart_images.sh all .
  #        env:
  #          IMG_DIRECTORY: "prod"
  #          IMG_VERSION: ${{ github.event.inputs.name }}
  #          PROJECT_ROOT: "."
  #
  #      - name: Bump sec-scanners-config.yaml based on values.yaml
  #        run: ./.github/scripts/upgrade-sec-scanners-config.sh
  #        env:
  #          IMG_VERSION: ${{ github.event.inputs.name }}
  #
  #      - name: Commit&Push
  #        run: |
  #          git config --local user.email "team-otters@sap.com"
  #          git config --local user.name "ottersbot"
  #
  #          git add .
  #          git commit --allow-empty -m "upgrade dependencies"
  #          git push origin ${{ github.ref_name }}

  create-tag:
    name: Create tag
    needs: upgrade-images
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          ref: ${{ github.ref_name }} # Checkout to latest branch changes

      - name: Create tag
        run: |
          git tag ${{ github.event.inputs.name }}
          git push origin ${{ github.event.inputs.name }}

  builds:
    needs: create-tag
    uses: ./.github/workflows/kyma-dashboard-dev-build.yml #TODO: Why it's only for dev?, it should be configurable.
    with:
      tag: '${{ github.event.inputs.name }}'

  create-draft:
    name: Create draft release
    needs: builds
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          ref: ${{ github.ref_name }} # checkout to latest branch changes ( by default this action checkouts to the SHA that triggers action )

      - uses: ./.github/actions/setup-go

      - name: Create draft release
        id: create-draft
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          RELEASE_ID=$(./.github/scripts/create_draft_release.sh ${{ github.event.inputs.name }})
          echo "release_id=$RELEASE_ID" >> $GITHUB_OUTPUT

      - name: Create release assets #TODO: Probably here we should generate busola chart
        id: create-assets
        env:
          IMG: 'europe-docker.pkg.dev/kyma-project/prod/serverless-operator:${{ github.event.inputs.name }}'
          PULL_BASE_REF: ${{ github.event.inputs.name }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./.github/scripts/release_assets.sh

    outputs:
      release_id: ${{ steps.create-draft.outputs.release_id }}

  # TODO: Probably run integration tests??
  #  integrations:
  #    needs: create-draft
  #    secrets: inherit
  #    uses: ./.github/workflows/_integration-tests.yaml
  #    with:
  #      image: europe-docker.pkg.dev/kyma-project/prod/serverless-operator:${{ github.event.inputs.name }}

  publish-release:
    name: Publish release
    needs: [integrations, create-draft]
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          ref: ${{ github.event.inputs.name }} # checkout to latest branch changes ( by default this action checkouts to the SHA that triggers action )

      - name: Publish release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./.github/scripts/publish_release.sh ${{ needs.create-draft.outputs.release_id }} ${{ github.event.inputs.latest_release }}