Bump cloud.google.com/go/kms from 1.12.1 to 1.15.1 #33
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: PR Build | |
on: | |
pull_request: {} | |
workflow_dispatch: {} | |
env: | |
GO_VERSION: 1.20.5 | |
permissions: | |
contents: read | |
jobs: | |
cache-deps: | |
name: cache-deps (linux) | |
runs-on: ubuntu-20.04 | |
timeout-minutes: 30 | |
permissions: | |
contents: read | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
- name: Setup go | |
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Setup dep cache | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: ~/go/pkg/mod | |
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
- name: Pull go deps | |
run: go mod download | |
lint: | |
name: lint (linux) | |
runs-on: ubuntu-20.04 | |
needs: cache-deps | |
timeout-minutes: 30 | |
permissions: | |
contents: read | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
- name: Setup go | |
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Load cached deps | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: ~/go/pkg/mod | |
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
- name: Setup build tool cache | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: .build | |
key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
- name: Lint | |
run: make lint | |
- name: Tidy check | |
run: make tidy-check | |
- name: Generate check | |
run: make generate-check | |
- name: Shell check | |
run: shellcheck .github/workflows/scripts/*.sh | |
unit-test: | |
strategy: | |
matrix: | |
OS: [ubuntu-20.04, macos-latest] | |
runs-on: ${{ matrix.OS }} | |
needs: cache-deps | |
timeout-minutes: 30 | |
permissions: | |
contents: read | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
- name: Setup go | |
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Load cached deps | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: ~/go/pkg/mod | |
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
- name: Run unit tests | |
run: ./.github/workflows/scripts/run_unit_tests.sh | |
unit-test-race-detector: | |
name: unit-test (linux with race detection) | |
runs-on: ubuntu-20.04 | |
needs: cache-deps | |
timeout-minutes: 30 | |
permissions: | |
contents: read | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
- name: Setup go | |
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Load cached deps | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: ~/go/pkg/mod | |
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
- name: Run unit tests | |
run: ./.github/workflows/scripts/run_unit_tests_under_race_detector.sh | |
artifacts: | |
name: artifacts (linux) | |
runs-on: ubuntu-20.04 | |
needs: [cache-deps] | |
timeout-minutes: 30 | |
permissions: | |
contents: read | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
- name: Setup go | |
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Load cached deps | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: ~/go/pkg/mod | |
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
- name: Load cached build tools | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: .build | |
key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
- name: Build artifacts | |
run: ./.github/workflows/scripts/build_artifacts.sh ${{ runner.os }} | |
- name: Archive artifacts | |
uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3 | |
with: | |
name: binaries | |
path: ./artifacts/ | |
images: | |
name: images (linux) | |
runs-on: ubuntu-20.04 | |
needs: [cache-deps] | |
timeout-minutes: 30 | |
permissions: | |
contents: read | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
- name: Setup go | |
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Load cached deps | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: ~/go/pkg/mod | |
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
- name: Load cached build tools | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: .build | |
key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
- name: Set up QEMU | |
uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # v2.2.0 | |
- name: Set up Docker Buildx | |
uses: docker/setup-buildx-action@16c0bc4a6e6ada2cfd8afd41d22d95379cf7c32a # v2.8.0 | |
- name: Build images | |
run: make images-no-load | |
- name: Export images | |
run: tar -czvf images.tar.gz *-image.tar | |
- name: Archive images | |
uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3 | |
with: | |
name: images | |
path: images.tar.gz | |
images-windows: | |
name: images (windows) | |
runs-on: windows-2022 | |
needs: artifact-windows | |
timeout-minutes: 45 | |
permissions: | |
contents: read | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
- name: Download artifacts | |
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 | |
with: | |
name: bin-windows | |
path: ./bin/ | |
- name: Build images | |
run: make images-windows | |
- name: Export images | |
run: | | |
docker save spire-server-windows:latest-local spire-agent-windows:latest-local oidc-discovery-provider-windows:latest-local -o images-windows.tar | |
gzip images-windows.tar | |
- name: Archive images | |
uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3 | |
with: | |
name: images-windows | |
path: images-windows.tar.gz | |
integration: | |
name: integration (linux) | |
runs-on: ubuntu-20.04 | |
needs: [cache-deps, images] | |
timeout-minutes: 45 | |
permissions: | |
contents: read | |
strategy: | |
fail-fast: false | |
matrix: | |
num_runners: [5] | |
runner_id: [1, 2, 3, 4, 5] | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
with: | |
# The "upgrade" integration test needs the history to ensure | |
# that the version number in the source code has been bumped as | |
# expected. This action does not fetch tags unless we supply a | |
# fetch depth of zero. | |
fetch-depth: 0 | |
- name: Setup go | |
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Install regctl | |
uses: regclient/actions/regctl-installer@b6614f5f56245066b533343a85f4109bdc38c8cc # main | |
- name: Load cached deps | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: ~/go/pkg/mod | |
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
- name: Load cached build tools | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: .build | |
key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
- name: Download archived images | |
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 | |
with: | |
name: images | |
path: . | |
- name: Load archived images | |
run: | | |
tar xvf images.tar.gz | |
make load-images | |
- name: Run integration tests | |
env: | |
NUM_RUNNERS: ${{ matrix.num_runners }} | |
THIS_RUNNER: ${{ matrix.runner_id }} | |
TERM: dumb | |
CICD_TARGET_BRANCH: ${{ github.event.pull_request.base.ref }} | |
run: ./.github/workflows/scripts/split.sh | xargs ./test/integration/test.sh | |
integration-windows: | |
name: integration (windows) | |
runs-on: windows-2022 | |
needs: images-windows | |
timeout-minutes: 45 | |
permissions: | |
contents: read | |
defaults: | |
run: | |
shell: msys2 {0} | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
- name: Setup go | |
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Load cached deps | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: ~/go/pkg/mod | |
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
- name: Load cached build tools | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: .build | |
key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
- name: Install msys2 | |
uses: msys2/setup-msys2@d40200dc2db4c351366b048a9565ad82919e1c24 # v2 | |
with: | |
msystem: MINGW64 | |
update: true | |
path-type: inherit | |
install: >- | |
git base-devel mingw-w64-x86_64-toolchain unzip | |
- name: Download archived images | |
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 | |
with: | |
name: images-windows | |
path: . | |
- name: Load archived images | |
run: docker load -i images-windows.tar.gz | |
- name: Run integration tests | |
# Run all tests for now | |
run: make integration-windows | |
cache-deps-windows: | |
name: cache-deps (windows) | |
runs-on: windows-2022 | |
timeout-minutes: 45 | |
permissions: | |
contents: read | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
- name: Setup go | |
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Setup dep cache | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: ~/go/pkg/mod | |
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
- name: Pull go deps | |
run: go mod download | |
lint-windows: | |
name: lint (windows) | |
runs-on: windows-2022 | |
needs: cache-deps-windows | |
timeout-minutes: 45 | |
permissions: | |
contents: read | |
defaults: | |
run: | |
shell: msys2 {0} | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
- name: Setup go | |
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Load cached deps | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: ~/go/pkg/mod | |
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
- name: Setup build tool cache | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: .build | |
key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
- name: Install msys2 | |
uses: msys2/setup-msys2@d40200dc2db4c351366b048a9565ad82919e1c24 # v2 | |
with: | |
msystem: MINGW64 | |
update: true | |
install: >- | |
git base-devel mingw-w64-x86_64-toolchain unzip | |
- name: Lint | |
run: make lint-code | |
- name: Tidy check | |
run: make tidy-check | |
- name: Generate check | |
run: make generate-check | |
unit-test-windows: | |
name: unit-test (windows) | |
runs-on: windows-2022 | |
needs: cache-deps-windows | |
timeout-minutes: 45 | |
permissions: | |
contents: read | |
defaults: | |
run: | |
shell: msys2 {0} | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
- name: Setup go | |
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Load cached deps | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: ~/go/pkg/mod | |
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
- name: Install msys2 | |
uses: msys2/setup-msys2@d40200dc2db4c351366b048a9565ad82919e1c24 # v2 | |
with: | |
msystem: MINGW64 | |
update: true | |
install: >- | |
git base-devel mingw-w64-x86_64-toolchain unzip | |
- name: Run unit tests | |
run: ./.github/workflows/scripts/run_unit_tests.sh | |
artifact-windows: | |
name: artifact (windows) | |
runs-on: windows-2022 | |
needs: cache-deps-windows | |
timeout-minutes: 45 | |
permissions: | |
contents: read | |
defaults: | |
run: | |
shell: msys2 {0} | |
steps: | |
- name: Checkout | |
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
- name: Setup go | |
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Load cached deps | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: ~/go/pkg/mod | |
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
- name: Load cached build tools | |
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
with: | |
path: .build | |
key: ${{ runner.os }}-tools-${{ hashFiles('.go-version','Makefile') }} | |
- name: Install msys2 | |
uses: msys2/setup-msys2@d40200dc2db4c351366b048a9565ad82919e1c24 # v2 | |
with: | |
msystem: MINGW64 | |
update: true | |
install: >- | |
git base-devel mingw-w64-x86_64-toolchain zip unzip | |
- name: Build artifacts | |
run: ./.github/workflows/scripts/build_artifacts.sh ${{ runner.os }} | |
- name: Archive binaries | |
uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3 | |
with: | |
name: bin-windows | |
path: ./bin/ | |
- name: Archive artifacts | |
uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3 | |
with: | |
name: binaries | |
path: ./artifacts/ | |
success: | |
runs-on: ubuntu-20.04 | |
needs: [lint, unit-test, unit-test-race-detector, artifacts, integration, lint-windows, unit-test-windows, artifact-windows, integration-windows] | |
timeout-minutes: 30 | |
permissions: | |
contents: read | |
steps: | |
- name: Declare victory! | |
run: echo "# Successful" >> $GITHUB_STEP_SUMMARY |