shared-workflows/.github/workflows/pull-request-dashboard-deploy-webhook.yml at main · open-telemetry/shared-workflows · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
name: Deploy pull request dashboard webhook

on:
  push:
    branches:
      - main
    paths:
      - .github/scripts/pull-request-dashboard/netlify.toml
      - .github/scripts/pull-request-dashboard/netlify/**
      - .github/scripts/pull-request-dashboard/package-lock.json
      - .github/scripts/pull-request-dashboard/package.json
      - .github/scripts/pull-request-dashboard/public/**
      - .github/scripts/pull-request-dashboard/repositories.json
      - .github/scripts/pull-request-dashboard/set_netlify_dispatcher_env.sh
      - .github/workflows/pull-request-dashboard-deploy-webhook.yml
  workflow_dispatch:
    inputs:
      execution_mode:
        description: Bridge mode override. Empty uses the repository execution-mode variable.
        required: false
        type: string

permissions:
  contents: read

concurrency:
  group: pull-request-dashboard-deploy-webhook
  cancel-in-progress: false

jobs:
  deploy:
    if: github.repository == 'open-telemetry/shared-workflows'
    runs-on: ubuntu-latest
    environment: protected
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 24
          package-manager-cache: false

      - name: Configure Netlify dispatcher environment
        working-directory: .github/scripts/pull-request-dashboard
        env:
          NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
          NETLIFY_SITE_ID: ${{ vars.NETLIFY_PR_DASHBOARD_PROJECT_ID }}
          OTELBOT_SHARED_WORKFLOWS_CLIENT_ID: ${{ vars.OTELBOT_SHARED_WORKFLOWS_CLIENT_ID }}
          OTELBOT_SHARED_WORKFLOWS_PRIVATE_KEY: ${{ secrets.OTELBOT_SHARED_WORKFLOWS_PRIVATE_KEY }}
          EXECUTION_MODE: ${{ inputs.execution_mode || vars.PR_DASHBOARD_EXECUTION_MODE }}
        run: |
          set -euo pipefail
          [[ "$EXECUTION_MODE" =~ ^(paused|owned)$ ]] || { echo "bad execution mode: expected paused or owned"; exit 1; }
          echo "Deploying pull request dashboard execution mode: $EXECUTION_MODE"
          dispatcher_private_key_base64=$(printf '%s' "$OTELBOT_SHARED_WORKFLOWS_PRIVATE_KEY" | base64 -w0)
          echo "::add-mask::$dispatcher_private_key_base64"
          bash ./set_netlify_dispatcher_env.sh OTELBOT_SHARED_WORKFLOWS_CLIENT_ID "$OTELBOT_SHARED_WORKFLOWS_CLIENT_ID"
          bash ./set_netlify_dispatcher_env.sh OTELBOT_SHARED_WORKFLOWS_PRIVATE_KEY_BASE64 "$dispatcher_private_key_base64" --secret
          bash ./set_netlify_dispatcher_env.sh PR_DASHBOARD_EXECUTION_MODE "$EXECUTION_MODE"

      - name: Install function dependencies
        working-directory: .github/scripts/pull-request-dashboard
        # The functions import @netlify/blobs and jose, which the Netlify
        # bundler resolves from node_modules while packaging the deploy.
        run: npm ci

      - name: Deploy Netlify function
        working-directory: .github/scripts/pull-request-dashboard
        env:
          NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
          NETLIFY_SITE_ID: ${{ vars.NETLIFY_PR_DASHBOARD_PROJECT_ID }}
        run: |
          set -euo pipefail
          mkdir -p public
          npx --yes netlify-cli@26.0.2 deploy \
            --prod \
            --dir public \
            --site "$NETLIFY_SITE_ID" \
            --auth "$NETLIFY_AUTH_TOKEN" \
            --message "${GITHUB_REPOSITORY}@${GITHUB_SHA}"