stable-cicd.yaml

# 🏃‍♀️ Continuous Integration and Delivery: Stable
# ===============================================
#
# Note: for this workflow to succeed, the following secrets must be installed
# in the repository:
#
# ``ADMIN_GITHUB_TOKEN``
#     A personal access token of a user with collaborator or better access to
#     the project repository. You can generate this by visiting GitHub →
#     Settings → Developer settings → Personal access tokens → Generate new
#     token. Give the token scopes on ``repo``, ``write:packages``,
#     ``delete:packages``, ``workflow``, and ``read:gpg_key``.
# ``PYPI_USERNAME``
#     Username for pypi.org.
# ``PYPI_PASSWORD``
#     Password for ``PYPI_USERNAME``.
#


---

name: 😌 Stable integration & delivery


# Driving Event
# -------------
#
# What event starts this workflow: a push of a stable tag. Note: according to
# https://git.io/JTLTf we have been doing our tag matching wrong. It's not
# regexp, it's not glob…it's more like…glob++ 😮

on:
    push:
        tags:
            - 'release/*'
concurrency: roundup


# What to Do
# ----------
#
# Round up, yee-haw!

jobs:
    stable-assembly:
        name: 🐴 Stable Assembly
        runs-on: ubuntu-latest
        steps:
            -
                name: 💳 Checkout
                uses: actions/checkout@v3
                with:
                    lfs: true
                    token: ${{secrets.ADMIN_GITHUB_TOKEN}}
                    fetch-depth: 0
            -
                name: 💵 Python Cache
                uses: actions/cache@v3
                with:
                    path: ~/.cache/pip
                    # The "key" used to indicate a set of cached files is the operating system runner
                    # plus "py" for Python-specific builds, plus a hash of the wheels, plus "pds" because
                    # we pds-prefix everything with "pds" in PDS! 😅
                    key: pds-${{runner.os}}-py-${{hashFiles('**/*.whl')}}
                    # To restore a set of files, we only need to match a prefix of the saved key.
                    restore-keys: pds-${{runner.os}}-py-
            -
                name: 🔧 Update default configuration
                run: |
                    import sys
                    import os
                    print("Running python version {}".format(sys.version))
                    conf_file = "pds_doi_service.ini"
                    print("Create config file for unit test {}".format(conf_file))
                    with open(conf_file, "w") as f:
                        f.write("[OSTI]\n")
                        f.write("user = {}\n".format("${{secrets.osti_login}}"))
                        f.write("password = {}\n".format("${{secrets.osti_password}}"))
                shell: python
            -
                name: 🤠 Roundup
                uses: NASA-PDS/roundup-action@stable
                with:
                    assembly: stable
                env:
                    pypi_username: ${{secrets.PYPI_USERNAME}}
                    pypi_password: ${{secrets.PYPI_PASSWORD}}
                    ADMIN_GITHUB_TOKEN: ${{secrets.ADMIN_GITHUB_TOKEN}}
                    DATACITE_USER: ${{secrets.DATACITE_USER}}
                    DATACITE_PASSWORD: ${{secrets.DATACITE_PASSWORD}}

...
# -*- mode: yaml; indent: 4; fill-column: 120; coding: utf-8 -*-