dns-updater/.woodpecker/release.yaml

when:
  - event: tag

steps:
  - name: test
    image: golang:1.25
    commands:
      - go test -race ./...
    backend_options:
      kubernetes:
        serviceAccountName: default
        resources:
          requests:
            memory: 512Mi
            cpu: 1
          limits:
            memory: 2Gi
            cpu: 2

  # Build the release binary (into dist/, consumed by the RPM step) plus the
  # linux binaries attached to the Gitea release.
  - name: build
    image: git.unkin.net/unkin/almalinux9-gobuilder:20260606
    commands:
      - make build VERSION=${CI_COMMIT_TAG}
      - |
        for arch in amd64 arm64; do
          GOOS=linux GOARCH="$arch" CGO_ENABLED=0 \
            go build -ldflags="-s -w -X main.version=${CI_COMMIT_TAG}" \
            -o "dns-updater-linux-$arch" ./cmd/dns-updater
        done
    depends_on: [test]
    backend_options:
      kubernetes:
        serviceAccountName: default
        resources:
          requests:
            memory: 512Mi
            cpu: 1
          limits:
            memory: 2Gi
            cpu: 2

  # Package the built binary into an RPM.
  - name: package
    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
    commands:
      - ./scripts/build-rpm.sh ${CI_COMMIT_TAG}
    depends_on: [build]
    backend_options:
      kubernetes:
        serviceAccountName: default
        resources:
          requests:
            memory: 512Mi
            cpu: 1
          limits:
            memory: 2Gi
            cpu: 2

  # Publish the RPM to the artifactapi local rpm repo (a real yum repo;
  # repodata regenerates automatically).
  - name: upload-rpm
    image: git.unkin.net/unkin/almalinux9-base:20260606
    commands:
      - |
        HOST="https://artifactapi.k8s.syd1.au.unkin.net"
        REPO="rpm-internal"
        for rpm in dist/*.rpm; do
          FILE=$$(basename "$$rpm")
          code=$$(curl -s -o /dev/null -w '%{http_code}' "$$HOST/api/v2/remotes/$$REPO/files/Packages/$$FILE" || true)
          if [ "$$code" = "200" ]; then
            echo "$$FILE already exists in $$REPO (HTTP $$code); skipping upload"
            continue
          fi
          echo "Uploading $$FILE to $$REPO (existence probe returned $$code)"
          curl -f -X PUT \
            "$$HOST/api/v2/remotes/$$REPO/files/$$FILE" \
            -H "Content-Type: application/x-rpm" \
            --data-binary @"$$rpm"
        done
    depends_on: [package]
    backend_options:
      kubernetes:
        serviceAccountName: default
        resources:
          requests:
            memory: 128Mi
            cpu: 100m
          limits:
            memory: 512Mi
            cpu: 500m

  # Cut a Gitea release with the linux binaries attached.
  - name: release
    image: git.unkin.net/unkin/almalinux9-base:20260606
    environment:
      RELEASER_TOKEN:
        from_secret: RELEASER_TOKEN
    commands:
      - |
        curl --output /usr/local/bin/tea https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/gitea-dl/tea/0.12.0/tea-0.12.0-linux-amd64 && chmod +x /usr/local/bin/tea
        tea logins add --name gitea --url https://git.unkin.net --token "$${RELEASER_TOKEN}" --no-version-check
        PREV_TAG=$(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo "")
        if [ -n "$PREV_TAG" ]; then
          NOTES=$(git log "${PREV_TAG}..${CI_COMMIT_TAG}" --pretty=format:"- %s")
        else
          NOTES=$(git log --pretty=format:"- %s")
        fi
        tea releases create --tag "${CI_COMMIT_TAG}" --title "${CI_COMMIT_TAG}" --note "${NOTES}" --login gitea --repo "${CI_REPO}"
        tea releases assets create "${CI_COMMIT_TAG}" \
          dns-updater-linux-amd64 \
          dns-updater-linux-arm64 \
          --login gitea --repo "${CI_REPO}"
    depends_on: [upload-rpm]
    backend_options:
      kubernetes:
        serviceAccountName: default
        resources:
          requests:
            memory: 128Mi
            cpu: 100m
          limits:
            memory: 512Mi
            cpu: 500m