feat: implement quality-gate and publish-artifact pipelines

- Rename build-feature.yml → quality-gate.yml (merge-portti) - Create build_publish-artifact.yml: check → qg → build → push → tag - Add minimal Dockerfile for dogfood container build - Simplify quality-gate.yml cucumber job (remove prepare step, TOOL_OK) - Standardize test scripts in package.json for Docker-based local + CI runs - Update ci.yml: main branch uses build_publish-artifact.yml - Update docs/workflows.md: feature section rewritten with provider model - Add .gitignore entries for coverage/ and reports/
2026-06-14 05:43:15 +03:00
parent 1128545d6b
commit 23874f59b6
7 changed files with 389 additions and 141 deletions
@@ -0,0 +1,124 @@
+name: Build & Publish Artifact
+on:
+  workflow_call:
+    inputs:
+      env_json:
+        required: true
+        type: string
+      bats-image:
+        required: true
+        type: string
+      cucumber-node-image:
+        required: true
+        type: string
+    secrets:
+      GITEA_TOKEN:
+        required: true
+      GIT_PAGES_PUBLISH_TOKEN:
+        required: true
+
+env:
+  GITEA_API_URL: ${{ fromJson(inputs.env_json).GITEA_API_URL }}
+  GIT_PAGES_URL: ${{ fromJson(inputs.env_json).GIT_PAGES_URL }}
+  GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+  GIT_PAGES_PUBLISH_TOKEN: ${{ secrets.GIT_PAGES_PUBLISH_TOKEN }}
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    outputs:
+      artifact_exists: ${{ steps.check.outputs.artifact_exists }}
+      version: ${{ steps.check.outputs.version }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check existing artifact
+        id: check
+        run: |
+          VERSION=$(jq -r '.version' package.json)
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+          TAG=$(curl -s "$GITEA_API_URL/api/v1/repos/$GITHUB_REPOSITORY/tags" | \
+            jq -r '.[] | select(.commit.sha == "'"$GITHUB_SHA"'") | .name' | head -1)
+          if [ -n "$TAG" ]; then
+            echo "artifact_exists=true" >> "$GITHUB_OUTPUT"
+            echo "Commit already tagged as $TAG, skipping build"
+          else
+            echo "artifact_exists=false" >> "$GITHUB_OUTPUT"
+          fi
+
+  quality-gate:
+    needs: [check]
+    if: needs.check.outputs.artifact_exists == 'false'
+    uses: niko/gitea-ci-library/.gitea/workflows/quality-gate.yml@feture/docker-kyky
+    secrets: inherit
+    with:
+      env_json: ${{ inputs.env_json }}
+      bats-image: ${{ inputs.bats-image }}
+      cucumber-node-image: ${{ inputs.cucumber-node-image }}
+
+  build:
+    needs: [check, quality-gate]
+    if: needs.check.outputs.artifact_exists == 'false'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Build container
+        run: |
+          docker build -t "minimal:${{ needs.check.outputs.version }}" .
+          mkdir -p /tmp/image
+          docker save "minimal:${{ needs.check.outputs.version }}" -o /tmp/image/artifact.tar
+
+      - name: Save Docker image for next job
+        uses: actions/upload-artifact@v4
+        with:
+          name: docker-image
+          path: /tmp/image/artifact.tar
+
+  push:
+    needs: [check, build]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Load saved Docker image
+        uses: actions/download-artifact@v4
+        with:
+          name: docker-image
+          path: /tmp/image
+
+      - name: Push to Gitea Packages
+        run: |
+          VERSION="${{ needs.check.outputs.version }}"
+          docker load -i /tmp/image/artifact.tar
+          REGISTRY=$(echo "$GITEA_API_URL" | sed 's|https://||')
+          IMAGE="$REGISTRY/niko/gitea-ci-library/minimal:$VERSION"
+          docker tag "minimal:$VERSION" "$IMAGE"
+          docker login "$REGISTRY" -u niko -p "$GITEA_TOKEN"
+          docker push "$IMAGE"
+          docker logout "$REGISTRY"
+
+  tag-commit:
+    needs: [check, push]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Create git tag
+        run: |
+          VERSION="${{ needs.check.outputs.version }}"
+          HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" -X POST \
+            "$GITEA_API_URL/api/v1/repos/$GITHUB_REPOSITORY/tags" \
+            -H "Authorization: token $GITEA_TOKEN" \
+            -H "Content-Type: application/json" \
+            -d "{
+              \"tag_name\": \"$VERSION\",
+              \"message\": \"Build #$GITHUB_RUN_NUMBER\",
+              \"target\": \"$GITHUB_SHA\"
+            }")
+
+          if [ "$HTTP_CODE" = "201" ]; then
+            echo "Tag $VERSION created"
+          elif [ "$HTTP_CODE" = "409" ]; then
+            echo "Tag $VERSION already exists (parallel build won), skipping"
+          else
+            echo "Failed to create tag: HTTP $HTTP_CODE"
+            exit 1
+          fi
@@ -23,7 +23,7 @@ jobs:
  main:
    if: github.ref == 'refs/heads/main'
    needs: [load-config]
-    uses: niko/gitea-ci-library/.gitea/workflows/quality-gate.yml@main
+    uses: niko/gitea-ci-library/.gitea/workflows/build_publish-artifact.yml@feture/docker-kyky
    secrets: inherit
    with:
      env_json: ${{ needs.load-config.outputs.env_json }}
@@ -49,20 +49,22 @@ jobs:
        id: bats-tests
        shell: bash
        run: |
-          docker volume create bats-workspace
-          tar c . | docker run --rm -i -v bats-workspace:/data alpine tar x -C /data
          mkdir -p "reports/${GITHUB_SHA:0:8}/bats"
+          docker volume create bats-cov
          set +e
          docker run --rm \
-            -v bats-workspace:/data \
+            -v "$(pwd):/repo:ro" \
+            -v bats-cov:/coverage \
+            -v "$(pwd)/reports/${GITHUB_SHA:0:8}/bats:/reports" \
+            -w /repo \
+            -e COVERAGE_DIR=/coverage \
            --entrypoint bash ${{ inputs.bats-image }} \
-            -c 'apk add -q lsof python3 jq curl ruby && cd /data && \
+            -c 'apk add -q lsof python3 jq curl ruby && \
                gem install bashcov -v 3.3.0 2>&1 | tail -1 && \
-                bashcov -- bats tests/' \
-            > "reports/${GITHUB_SHA:0:8}/bats/results.txt" 2>&1
+                bashcov -- bats tests/ | tee /reports/results.txt'
          BATS_EXIT=$?
-          bash .ci/.gitea/scripts/bats-coverage.sh bats-workspace "reports/${GITHUB_SHA:0:8}/bats"
-          docker volume rm bats-workspace > /dev/null 2>&1
+          bash .ci/.gitea/scripts/bats-coverage.sh bats-cov "reports/${GITHUB_SHA:0:8}/bats"
+          docker volume rm bats-cov > /dev/null 2>&1
          bash .ci/.gitea/scripts/bats-report.sh "reports/${GITHUB_SHA:0:8}/bats"
          echo "BATS_EXIT=${BATS_EXIT}" >> "${GITHUB_ENV}"
          exit ${BATS_EXIT}
@@ -91,27 +93,12 @@ jobs:
          repository: niko/gitea-ci-library
          path: .ci

-      - name: Prepare cucumber
-        id: prepare-cucumber
-        shell: bash
-        run: |
-          apt-get update -qq && apt-get install -y -qq --no-install-recommends lsof jq
-          if npm install @cucumber/cucumber > /dev/null 2>&1 && \
-             npx --package @cucumber/cucumber cucumber-js --dry-run tests/features/ > /dev/null 2>&1; then
-            echo "TOOL_OK=true" >> "${GITHUB_ENV}"
-          else
-            echo "TOOL_OK=false" >> "${GITHUB_ENV}"
-          fi
-
      - name: Run cucumber tests
-        if: always()
        id: cucumber-tests
        shell: bash
        run: |
-          if [ "${TOOL_OK}" != "true" ]; then
-            echo "CUCUMBER_EXIT=1" >> "${GITHUB_ENV}"
-            exit 0
-          fi
+          apt-get update -qq && apt-get install -y -qq --no-install-recommends lsof jq
+          npm install @cucumber/cucumber > /dev/null 2>&1
          mkdir -p "reports/${GITHUB_SHA:0:8}/cucumber"
          set +e
          npx cucumber-js \
@@ -123,17 +110,12 @@ jobs:

      - name: Publish cucumber reports
        if: always()
-        run: |
-          if [ "${TOOL_OK}" = "true" ]; then
-            bash .ci/scripts/publish-git-pages.sh cucumber
-          fi
+        run: bash .ci/scripts/publish-git-pages.sh cucumber

      - name: Set cucumber commit status
        if: always()
        run: |
-          if [ "${TOOL_OK}" != "true" ]; then
-            bash .ci/scripts/report-status.sh failure "Cucumber tool unavailable" ci-cucumber
-          elif [ "${CUCUMBER_EXIT}" = "0" ]; then
+          if [ "${CUCUMBER_EXIT}" = "0" ]; then
            bash .ci/scripts/report-status.sh success "Cucumber tests passed" ci-cucumber cucumber
          else
            bash .ci/scripts/report-status.sh failure "Cucumber tests FAILED" ci-cucumber cucumber