tomswall/.woodpecker/release.yaml

when:
  - event: tag
    ref: refs/tags/v*

steps:
  - name: test
    image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/gobuilder:0.1.2-alma9
    commands:
      - go test ./...
    environment:
      GOCACHE_S3_BUCKET: gocache
      GOCACHE_S3_REGION: us-east-1
      GOCACHE_S3_ENDPOINT_URL: https://s3.ceph.unkin.net
      GOCACHE_S3_PATH_STYLE: "true"
      GOCACHE_KEY_PREFIX: ci-tomswall
      GOCACHE_METRICS: "true"
      GOCACHEPROG: go-cache-plugin --cache-dir=/tmp/gocache
      AWS_ACCESS_KEY_ID:
        from_secret: GOCACHE_AWS_ACCESS_KEY_ID
      AWS_SECRET_ACCESS_KEY:
        from_secret: GOCACHE_AWS_SECRET_ACCESS_KEY
    backend_options:
      kubernetes:
        serviceAccountName: default
        resources:
          requests:
            memory: 512Mi
            cpu: 1
          limits:
            memory: 2Gi
            cpu: 2

  - name: build
    image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/gobuilder:0.1.2-alma9
    commands:
      - make dist-build VERSION=${CI_COMMIT_TAG}
    depends_on: [test]
    environment:
      GOCACHE_S3_BUCKET: gocache
      GOCACHE_S3_REGION: us-east-1
      GOCACHE_S3_ENDPOINT_URL: https://s3.ceph.unkin.net
      GOCACHE_S3_PATH_STYLE: "true"
      GOCACHE_KEY_PREFIX: ci-tomswall
      GOCACHE_METRICS: "true"
      GOCACHEPROG: go-cache-plugin --cache-dir=/tmp/gocache
      AWS_ACCESS_KEY_ID:
        from_secret: GOCACHE_AWS_ACCESS_KEY_ID
      AWS_SECRET_ACCESS_KEY:
        from_secret: GOCACHE_AWS_SECRET_ACCESS_KEY
    backend_options:
      kubernetes:
        serviceAccountName: default
        resources:
          requests:
            memory: 512Mi
            cpu: 1
          limits:
            memory: 2Gi
            cpu: 2

  - name: package
    image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
    commands:
      - ./scripts/build-rpm.sh ${CI_COMMIT_TAG}
    depends_on: [build]
    backend_options:
      kubernetes:
        serviceAccountName: default
        resources:
          requests:
            memory: 512Mi
            cpu: 1
          limits:
            memory: 2Gi
            cpu: 2

  - name: upload-rpm
    image: git.unkin.net/unkin/almalinux9-base:20260606
    commands:
      - |
        HOST="https://artifactapi.k8s.syd1.au.unkin.net"
        REPO="rpm-internal"
        for rpm in dist/*.rpm; do
          FILE=$$(basename "$$rpm")
          code=$$(curl -s -o /dev/null -w '%{http_code}' "$$HOST/api/v2/remotes/$$REPO/files/Packages/$$FILE" || true)
          if [ "$$code" = "200" ]; then
            echo "$$FILE already exists in $$REPO (HTTP $$code); skipping upload"
            continue
          fi
          echo "Uploading $$FILE to $$REPO (existence probe returned $$code)"
          curl -f -X PUT \
            "$$HOST/api/v2/remotes/$$REPO/files/$$FILE" \
            -H "Content-Type: application/x-rpm" \
            --data-binary @"$$rpm"
        done
    depends_on: [package]
    backend_options:
      kubernetes:
        serviceAccountName: default
        resources:
          requests:
            memory: 128Mi
            cpu: 100m
          limits:
            memory: 512Mi
            cpu: 500m

  - name: release
    image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/tea:0.1.0
    environment:
      RELEASER_TOKEN:
        from_secret: RELEASER_TOKEN
    commands:
      - |
        tea logins add --name gitea --url https://git.unkin.net --token "$${RELEASER_TOKEN}" --no-version-check
        CUR_SHA=$$(git rev-list -n1 "${CI_COMMIT_TAG}")
        PREV_TAG=""
        for t in $$(git tag --sort=-v:refname); do
          [ "$$t" = "${CI_COMMIT_TAG}" ] && continue
          [ "$$(git rev-list -n1 "$$t")" = "$$CUR_SHA" ] && continue
          if git merge-base --is-ancestor "$$t" "${CI_COMMIT_TAG}" 2>/dev/null; then
            PREV_TAG="$$t"; break
          fi
        done
        if [ -n "$$PREV_TAG" ]; then
          NOTES=$$(git log "$${PREV_TAG}..${CI_COMMIT_TAG}" --pretty=format:"- %s")
        else
          NOTES=$$(git log --pretty=format:"- %s")
        fi
        tea releases create --tag "${CI_COMMIT_TAG}" --title "${CI_COMMIT_TAG}" --note "$${NOTES}" --login gitea --repo "${CI_REPO}"
        cp dist/tomswall tomswall-linux-amd64
        ASSETS="tomswall-linux-amd64"
        RPM=$$(ls dist/*.rpm 2>/dev/null | head -1)
        [ -n "$$RPM" ] && ASSETS="$$ASSETS $$RPM"
        sha256sum $$ASSETS > sha256sums.txt
        tea releases assets create "${CI_COMMIT_TAG}" $$ASSETS sha256sums.txt \
          --login gitea --repo "${CI_REPO}"
    depends_on: [upload-rpm]
    backend_options:
      kubernetes:
        serviceAccountName: default
        resources:
          requests:
            memory: 128Mi
            cpu: 100m
          limits:
            memory: 512Mi
            cpu: 500m