pr-release.yaml

name: Release Charts from PR

on: [pull_request]

jobs:
  release:
    runs-on: ubuntu-latest
    steps:
      - name: Set up GCS Google Service Account
        run: echo '${{ secrets.GCS_SA }}' > service_account.json

      - name: Lock
        uses: databiosphere/github-actions/actions/locker@locker-0.8.0
        with:
          operation: lock
          lock_name: terra-helm-release
          bucket: broad-dsp-locker-action
          lock_timeout_ms: '120000'

      - name: Checkout
        uses: actions/checkout@v2
        with:
          ref: ${{ github.event.pull_request.head.ref }}
          persist-credentials: false
          fetch-depth: '0'

      - name: Configure Git
        run: |
          git config user.name "broadbot"
          git config user.email "broadbot@broadinstitute.org"

      - name: Set up Helm Publish SA
        run: echo '${{ secrets.HELM_GCP_PUBLISH_KEY }}' > helm_service_account.json

      - name: Run chart-releaser
        uses: docker://us-central1-docker.pkg.dev/dsp-artifact-registry/github-actions-public/chart-releaser:latest
        env:
          GITHUB_TOKEN: "${{ secrets.CR_TOKEN }}"
          GCS_PUBLISHING_ENABLED: true
          GCS_SA_KEY_FILE: "./helm_service_account.json"

      - name: Set up GCS Google Service Account
        if: ${{ always() }}
        run: echo '${{ secrets.GCS_SA }}' > service_account.json

      - name: Unlock
        uses: databiosphere/github-actions/actions/locker@locker-0.8.0
        if: ${{ always() }}
        with:
          operation: unlock
          lock_name: terra-helm-release
          bucket: broad-dsp-locker-action