work_proposal.yaml

---
name: Work proposal

on:
  merge_group:
    branches:
      - main
  pull_request:
    types: [opened, reopened]
    branches:
      - main
  workflow_dispatch:

env:
  IMAGE_NAME: stack/gear

jobs:
  up-to-images:
    name: Up to images (${{ matrix.env.dev }})
    timeout-minutes: 10
    permissions:
      checks: write
      packages: write
    strategy:
      fail-fast: false
      matrix:
        env:
          - dev: godel
          - dev: turing
          - dev: church
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4.1.1
      - name: Run setup-gear
        uses: ./.github/actions/setup-gear
        with:
          devenv: ${{ matrix.env.dev }}
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: Run ansible-playbook images.yaml
        id: images
        run: >-
          docker run --rm
          --volume $(pwd):$(pwd)
          --volume ~/.m2:/root/.m2
          --volume /var/run/docker.sock:/var/run/docker.sock
          --volume ~/.docker/config.json:/root/.docker/config.json:ro
          --env GITHUB_ACTOR=${{ github.actor }}
          --env GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
          --workdir $(pwd)/baker/ansible
          ${{ env.IMAGE_NAME }}:${{ matrix.env.dev }}
          ansible-playbook images.yaml -v
          -e devenv=${{ matrix.env.dev }}
          -e repo_mode=rw
      - uses: mikepenz/action-junit-report@v4.1.0
        if: ${{ !cancelled() && (steps.images.outcome == 'success' || steps.images.outcome == 'failure') }}
        with:
          check_name: Unit test report (${{ matrix.env.dev }})
          report_paths: "**/target/surefire-reports/TEST-*.xml"
          require_tests: "${{ steps.images.outcome == 'failure' }}"
          fail_on_failure: false
          job_summary: false
      - uses: mikepenz/action-junit-report@v4.1.0
        if: ${{ !cancelled() && (steps.images.outcome == 'success' || steps.images.outcome == 'failure') }}
        with:
          check_name: Integration test report (${{ matrix.env.dev }})
          report_paths: "**/target/failsafe-reports/TEST-*.xml"
          require_tests: "${{ steps.images.outcome == 'failure' }}"
          fail_on_failure: false
          job_summary: false

  stack-building:
    name: Stack building (${{ matrix.env.dev }}, ${{ matrix.env.ops }})
    timeout-minutes: 5
    needs: [up-to-images]
    strategy:
      fail-fast: false
      matrix:
        purpose: [func]
        env:
          - dev: godel
            ops: marx
          - dev: turing
            ops: durkheim
          - dev: turing
            ops: veblen
          - dev: church
            ops: commons
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4.1.1
      - name: Run setup-gear
        uses: ./.github/actions/setup-gear
        with:
          devenv: ${{ matrix.env.dev }}
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: Run ansible-playbook stacks.yaml -t build
        run: >-
          docker run --rm
          --volume $(pwd):$(pwd)
          --volume /var/run/docker.sock:/var/run/docker.sock
          --workdir $(pwd)/baker/ansible
          ${{ env.IMAGE_NAME }}:${{ matrix.env.dev }}
          ansible-playbook stacks.yaml -t build
          -e devenv=${{ matrix.env.dev }}
          -e purpose=${{ matrix.purpose }}
          -e opsenv=${{ matrix.env.ops }}
      - uses: actions/upload-artifact@v4.3.1
        with:
          name: product-${{ matrix.purpose }}-${{ matrix.env.ops }}
          path: stack/product/target/image-context
          if-no-files-found: ignore

  stack-checking:
    name: Stack checking (${{ matrix.shard }}, ${{ matrix.purpose }}, ${{ matrix.env.ops }})
    timeout-minutes: 15
    needs: [stack-building]
    strategy:
      fail-fast: false
      matrix:
        purpose: [func]
        shard: [0, 1]
        env:
          - dev: godel
            ops: marx
          - dev: turing
            ops: durkheim
          - dev: turing
            ops: veblen
          - dev: church
            ops: commons
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4.1.1
      - name: Run setup-gear
        uses: ./.github/actions/setup-gear
        with:
          devenv: ${{ matrix.env.dev }}
          token: ${{ secrets.GITHUB_TOKEN }}
      - uses: actions/download-artifact@v4.1.2
        continue-on-error: true  # it's ok because stack building can be skipped
        with:
          name: product-${{ matrix.purpose }}-${{ matrix.env.ops }}
          path: stack/product/target/image-context
      - name: Run ansible-playbook stacks.yaml -t check
        run: >-
          docker run --rm
          --network gear
          --volume $(pwd):$(pwd)
          --volume ~/.m2:/root/.m2
          --volume /var/run/docker.sock:/var/run/docker.sock
          --workdir $(pwd)/baker/ansible
          ${{ env.IMAGE_NAME }}:${{ matrix.env.dev }}
          ansible-playbook stacks.yaml -t check
          -e devenv=${{ matrix.env.dev }}
          -e purpose=${{ matrix.purpose }}
          -e opsenv=${{ matrix.env.ops }}
          -e reminder=${{ matrix.shard }}
          -e modulus=2
      - uses: actions/upload-artifact@v4.3.1
        if: ${{ !cancelled() }}
        with:
          name: e2e-test-report-${{ matrix.shard }}-${{ matrix.purpose }}-${{ matrix.env.ops }}
          path: test/e2e/target/surefire-reports/*.xml
          if-no-files-found: ignore

  stack-publishing:
    name: Stack publishing (${{ matrix.purpose }}, ${{ matrix.env.ops }})
    timeout-minutes: 10
    needs: [stack-checking]
    strategy:
      fail-fast: false
      matrix:
        purpose: [func]
        env:
          - dev: godel
            ops: marx
          - dev: turing
            ops: durkheim
          - dev: turing
            ops: veblen
          - dev: church
            ops: commons
    runs-on: ubuntu-latest
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4.1.1
      - name: Run setup-gear
        uses: ./.github/actions/setup-gear
        with:
          devenv: ${{ matrix.env.dev }}
          token: ${{ secrets.GITHUB_TOKEN }}
      - uses: actions/download-artifact@v4.1.2
        continue-on-error: true  # it's ok because stack building can be skipped
        with:
          name: product-${{ matrix.purpose }}-${{ matrix.env.ops }}
          path: stack/product/target/image-context
      - name: Run ansible-playbook stacks.yaml -t publish
        run: >-
          docker run --rm
          --volume $(pwd):$(pwd)
          --volume /var/run/docker.sock:/var/run/docker.sock
          --volume ~/.docker/config.json:/root/.docker/config.json:ro
          --workdir $(pwd)/baker/ansible
          ${{ env.IMAGE_NAME }}:${{ matrix.env.dev }}
          ansible-playbook stacks.yaml -t publish -v
          -e devenv=${{ matrix.env.dev }}
          -e purpose=${{ matrix.purpose }}
          -e opsenv=${{ matrix.env.ops }}
          -e repo_mode=rw

  stack-reporting:
    name: Stack reporting
    timeout-minutes: 5
    needs: [stack-checking]
    if: ${{ !cancelled() && (contains(needs.*.result, 'success') || contains(needs.*.result, 'failure')) }}
    runs-on: ubuntu-latest
    permissions:
      checks: write
    steps:
      - uses: actions/download-artifact@v4.1.2
        with:
          path: artifacts
      - uses: mikepenz/action-junit-report@v4.1.0
        with:
          check_name: E2E test report
          report_paths: "artifacts/e2e-test-report-*/**/TEST-*.xml"
          fail_on_failure: false
          job_summary: false

  everything-is-fine:
    name: Everything is fine
    needs: [stack-publishing, stack-reporting]
    runs-on: ubuntu-latest
    timeout-minutes: 5
    if: ${{ always() }}
    steps:
      - if: ${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'skipped') || contains(needs.*.result, 'cancelled') }}
        run: |
          echo "::error::Something went wrong"
          exit 1