--- name: Release on: workflow_dispatch: inputs: {} jobs: setup: name: Setup runs-on: ubuntu-20.04 outputs: release_version: ${{ steps.version.outputs.package }} steps: - name: Branch check run: | if [[ "$GITHUB_REF" != "refs/heads/release" ]]; then echo "===================================" echo "[!] Can only release from the 'release' branch" echo "===================================" exit 1 fi - name: Checkout repo uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f with: ref: release - name: Check Release Version id: version run: | version=$( grep -o ".*" Directory.Build.props | grep -o "[0-9]*\.[0-9]*\.[0-9]*") previous_release_tag_version=$( curl -sL https://api.github.com/repos/$GITHUB_REPOSITORY/releases/latest | jq -r ".tag_name" ) if [ "v$version" == "$previous_release_tag_version" ]; then echo "[!] Already released v$version. Please bump version to continue" exit 1 fi echo "::set-output name=package::$version" deploy: name: Deploy runs-on: ubuntu-20.04 needs: - setup strategy: fail-fast: false matrix: include: - name: Api - name: Admin - name: Billing - name: Events - name: Sso - name: Identity steps: - name: Setup id: setup run: | NAME_LOWER=$(echo "${{ matrix.name }}" | awk '{print tolower($0)}') echo "Matrix name: ${{ matrix.name }}" echo "NAME_LOWER: $NAME_LOWER" echo "::set-output name=name_lower::$NAME_LOWER" - name: Download latest Release ${{ matrix.name }} asset uses: bitwarden/gh-actions/download-artifacts@23433be15ed6fd046ce12b6889c5184a8d9c8783 with: workflow: build.yml workflow_conclusion: success branch: release artifacts: ${{ matrix.name }}.zip - name: Login to Azure uses: Azure/login@77f1b2e3fb80c0e8645114159d17008b8a2e475a with: creds: ${{ secrets.AZURE_PROD_KV_CREDENTIALS }} - name: Retrieve secrets id: retrieve-secrets env: VAULT_NAME: "bitwarden-prod-kv" run: | webapp_name=$( az keyvault secret show --vault-name $VAULT_NAME \ --name appservices-${{ steps.setup.outputs.name_lower }}-webapp-name \ --query value --output tsv ) publish_profile=$( az keyvault secret show --vault-name $VAULT_NAME \ --name appservices-${{ steps.setup.outputs.name_lower }}-webapp-publish-profile \ --query value --output tsv ) echo "::add-mask::$webapp_name" echo "::set-output name=webapp-name::$webapp_name" echo "::add-mask::$publish_profile" echo "::set-output name=publish-profile::$publish_profile" - name: Deploy App uses: azure/webapps-deploy@798e43877120eda6a2a690a4f212c545e586ae31 with: app-name: ${{ steps.retrieve-secrets.outputs.webapp-name }} publish-profile: ${{ steps.retrieve-secrets.outputs.publish-profile }} package: ./${{ matrix.name }}.zip slot-name: "staging" release-docker: name: Build Docker images runs-on: ubuntu-20.04 needs: setup env: _RELEASE_VERSION: ${{ needs.setup.outputs.release_version }} strategy: fail-fast: false matrix: include: - service_name: Admin - service_name: Api - service_name: Attachments - service_name: Events - service_name: Icons - service_name: Identity - service_name: K8S-Proxy - service_name: MsSql - service_name: Nginx - service_name: Notifications - service_name: Server - service_name: Setup - service_name: Sso steps: - name: Print environment run: | whoami docker --version echo "GitHub ref: $GITHUB_REF" echo "GitHub event: $GITHUB_EVENT" - name: Setup DCT id: setup-dct uses: bitwarden/gh-actions/setup-docker-trust@a8c384a05a974c05c48374c818b004be221d43ff with: azure-creds: ${{ secrets.AZURE_PROD_KV_CREDENTIALS }} azure-keyvault-name: "bitwarden-prod-kv" - name: Checkout repo uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f - name: Setup service name id: setup run: | SERVICE_NAME=$(echo "${{ matrix.service_name }}" | awk '{print tolower($0)}') echo "Matrix name: ${{ matrix.service_name }}" echo "SERVICE_NAME: $SERVICE_NAME" echo "::set-output name=service_name::$SERVICE_NAME" - name: Pull latest selfhost Release image run: docker pull bitwarden/${{ steps.setup.outputs.service_name }}:latest - name: Tag version run: | docker tag bitwarden/${{ steps.setup.outputs.service_name }}:latest bitwarden/${{ steps.setup.outputs.service_name }}:$_RELEASE_VERSION - name: List Docker images run: docker images - name: Push latest image run: | docker push bitwarden/${{ steps.setup.outputs.service_name }}:$_RELEASE_VERSION env: DOCKER_CONTENT_TRUST: 1 DOCKER_CONTENT_TRUST_REPOSITORY_PASSPHRASE: ${{ steps.setup-dct.outputs.dct-delegate-repo-passphrase }} - name: Log out of Docker run: docker logout release: name: Create GitHub Release runs-on: ubuntu-20.04 needs: - setup - deploy steps: - name: Download latest Release docker-stub uses: bitwarden/gh-actions/download-artifacts@23433be15ed6fd046ce12b6889c5184a8d9c8783 with: workflow: build.yml workflow_conclusion: success branch: release artifacts: "docker-stub.zip, swagger.json" - name: Create release uses: ncipollo/release-action@95215a3cb6e6a1908b3c44e00b4fdb15548b1e09 with: artifacts: 'docker-stub.zip, swagger.json' commit: ${{ github.sha }} tag: "v${{ needs.setup.outputs.release_version }}" name: "Version ${{ needs.setup.outputs.release_version }}" body: "" token: ${{ secrets.GITHUB_TOKEN }} draft: true