mirror of
https://github.com/seaweedfs/seaweedfs.git
synced 2026-10-24 06:50:40 +02:00
* ci: cancel superseded workflow runs on PR pushes
PR-triggered workflows without a concurrency group keep running (and
holding runner slots) after a force-push or quick follow-up commit
supersedes them. Add the same group/cancel-in-progress block the go
workflow already uses, keyed on head_ref, to the remaining PR workflows.
Generated with [Devin](https://devin.ai)
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
* ci: key concurrency groups on PR number or ref, not head_ref
github.head_ref is empty on tag pushes and manual runs (every run then
shares one group and cancels the last) and collides across forks when
two PRs share a branch name. pull_request.number is unique per PR;
github.ref covers push/tag/dispatch. Applied to all workflows using the
pattern, including pre-existing ones.
Generated with [Devin](https://devin.ai)
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
* ci: restrict cancel-in-progress to PR and branch-push runs
* ci: serialize container_latest manual runs by destination tag
Two workflow_dispatch runs sharing an image_tag could otherwise build
concurrently: their per-arch images publish to the same platform tags,
so one run's create-manifest job can combine platforms from different
source refs. Group dispatch runs by the destination tag (with
cancel-in-progress already disabled for non-PR/non-branch events) so
same-tag publishes queue instead of interleaving.
* ci: serialize manual publish runs by destination tag in remaining container workflows
* ci: group foundationdb release dispatch runs by release tag
A manual run now shares the tag-push concurrency group for the same
release, so a re-publish of a tag queues behind (or ahead of) the push
run instead of racing it on the same image tag.
Generated with [Devin](https://devin.ai)
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
* ci: serialize foundationdb_version dispatch runs by destination tag
Two manual runs resolving to the same docker tag now share a concurrency
group (explicit image_tag, else the computed
foundationdb_<fdb>_seaweedfs_<ref> default), so they queue instead of
racing pushes to the same tag.
Generated with [Devin](https://devin.ai)
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
* ci: drop unsupported toLower() from foundationdb_version concurrency group
* ci: key rocksdb_version dispatch group on its published tag
* ci: queue publish runs via turnstyle instead of cancel-free shared groups
* Revert "ci: queue publish runs via turnstyle instead of cancel-free shared groups"
This reverts commit 039148f8d5.
* ci: queue same-tag publish runs instead of replacing the pending one
Dispatch/tag-only workflows can never cancel in progress, so opt their
concurrency groups into queue: max — up to 100 same-tag publishes wait
in line rather than each new dispatch cancelling the pending one.
---------
Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
85 lines
2.3 KiB
YAML
85 lines
2.3 KiB
YAML
name: "terraform: validate and test modules"
|
|
|
|
on:
|
|
push:
|
|
branches: [ master ]
|
|
paths: ['terraform/**', '.github/workflows/terraform_ci.yml']
|
|
pull_request:
|
|
branches: [ master ]
|
|
paths: ['terraform/**', '.github/workflows/terraform_ci.yml']
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.event.pull_request.number || (github.event_name == 'push' && github.ref) || github.run_id }}
|
|
cancel-in-progress: ${{ github.event_name == 'pull_request' || (github.event_name == 'push' && !startsWith(github.ref, 'refs/tags/')) }}
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
validate:
|
|
name: fmt, validate, plan-level tests
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v7
|
|
|
|
- name: Set up OpenTofu
|
|
uses: opentofu/setup-opentofu@v2
|
|
with:
|
|
tofu_version: 1.12.1
|
|
|
|
- name: fmt check
|
|
working-directory: terraform
|
|
run: tofu fmt -recursive -check -diff
|
|
|
|
- name: validate core
|
|
working-directory: terraform/modules/core
|
|
run: |
|
|
tofu init -backend=false -input=false
|
|
tofu validate
|
|
|
|
- name: validate security
|
|
working-directory: terraform/modules/security
|
|
run: |
|
|
tofu init -backend=false -input=false
|
|
tofu validate
|
|
|
|
- name: plan-level tests (core)
|
|
working-directory: terraform/modules/core
|
|
run: tofu test
|
|
|
|
- name: validate examples
|
|
run: |
|
|
set -e
|
|
for ex in terraform/examples/*/; do
|
|
echo "== validate $ex =="
|
|
tofu -chdir="$ex" init -backend=false -input=false
|
|
tofu -chdir="$ex" validate
|
|
done
|
|
|
|
smoke:
|
|
name: local cluster smoke test (real weed)
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v7
|
|
|
|
- name: Set up Go
|
|
uses: actions/setup-go@v7
|
|
with:
|
|
go-version-file: go.mod
|
|
|
|
- name: Build weed
|
|
run: go build -o "$RUNNER_TEMP/weed" ./weed
|
|
|
|
- name: Set up OpenTofu
|
|
uses: opentofu/setup-opentofu@v2
|
|
with:
|
|
tofu_version: 1.12.1
|
|
|
|
- name: Run local cluster harness
|
|
working-directory: terraform/test/local
|
|
run: WEED="$RUNNER_TEMP/weed" ./run_local_cluster.sh
|
|
|
|
- name: Run local mTLS cluster harness
|
|
working-directory: terraform/test/local-secure
|
|
run: WEED="$RUNNER_TEMP/weed" ./run_local_secure.sh
|