Merge pull request #2731 from DataDog/aleksandr-gringauz/RUM-10224/github-app-migration-for-pat-synthetics

RUM-10224: Introduce check release pipeline

Author: aleksandr-gringauz

.gitlab-ci.yml

@@ -224,3 +224,21 @@ tasks.register("printSdkDebugRuntimeClasspath") {
         File("sdk_classpath").writeText(result.joinToString(File.pathSeparator) { it.absolutePath })
     }
 }
+
+tasks.register("listAllPublishedArtifactIds") {
+    doLast {
+        val artifactIds = rootProject.subprojects.flatMap { subproject ->
+            val publishing = subproject.extensions.findByType<PublishingExtension>()
+            publishing?.publications?.mapNotNull { publication ->
+                if (publication is MavenPublication) {
+                    publication.artifactId
+                } else {
+                    null
+                }
+            }.orEmpty()
+        }
+        artifactIds.forEach {
+            println(it)
+        }
+    }
+}

build.gradle.kts

@@ -0,0 +1,24 @@
+include:
+  - "ci/pipelines/common-snippets.yml"
+  - 'https://gitlab-templates.ddbuild.io/slack-notifier/v1/template.yml'
+
+stages:
+  - check-release
+  - notify
+
+check-release:is-published:
+  tags: [ "arch:amd64" ]
+  image: $CI_IMAGE_DOCKER
+  stage: check-release
+  script:
+    - !reference [ .common-snippets, set-github-installation-token ]
+    - bash ./ci/scripts/check_latest_release_is_published.sh
+
+notify:report-failure-to-slack:
+  extends: .slack-notifier-base
+  stage: notify
+  when: on_failure
+  script:
+    - BUILD_URL="$CI_PROJECT_URL/pipelines/$CI_PIPELINE_ID"
+    - 'MESSAGE_TEXT=":status_alert: Some release artifacts were not published to maven. $BUILD_URL"'
+    - postmessage "#mobile-sdk-ops" "$MESSAGE_TEXT"

Dockerfile.gitlab renamed to ci/Dockerfile.gitlab

@@ -0,0 +1,5 @@
+.common-snippets:
+  set-github-installation-token:
+    - export GITHUB_APP_CLIENT_ID=$(aws ssm get-parameter --region us-east-1 --name ci.dd-sdk-android.gh_app_client_id --with-decryption --query "Parameter.Value" --out text)
+    - export GITHUB_APP_INSTALLATION_ID=$(aws ssm get-parameter --region us-east-1 --name ci.dd-sdk-android.gh_app_installation_id --with-decryption --query "Parameter.Value" --out text)
+    - export GITHUB_TOKEN=$(aws ssm get-parameter --region us-east-1 --name ci.dd-sdk-android.gh_app_private_key --with-decryption --query "Parameter.Value" --out text | bash ./ci/scripts/create_github_installation_token.sh "$GITHUB_APP_CLIENT_ID" "$GITHUB_APP_INSTALLATION_ID")

ci/pipelines/check-release-pipeline.yml

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+#
+# Unless explicitly stated otherwise all files in this repository are licensed under the Apache License Version 2.0.
+# This product includes software developed at Datadog (https://www.datadoghq.com/).
+# Copyright 2016-Present Datadog, Inc.
+#
+
+set -o pipefail
+
+tag_name=$(curl -s -H "Authorization: Bearer $GITHUB_TOKEN" \
+     -H "Accept: application/vnd.github+json" \
+     https://api.github.com/repos/DataDog/dd-sdk-android/releases/latest | jq -r .tag_name)
+
+for artifactId in $(./gradlew -q listAllPublishedArtifactIds); do
+  status_code=$(curl -s -o /dev/null -w "%{http_code}" "https://repo1.maven.org/maven2/com/datadoghq/$artifactId/$tag_name/$artifactId-$tag_name.aar")
+
+  if [ $status_code -eq 200 ]; then
+    echo "Release $tag_name exists for $artifactId"
+  else
+    echo "Release $tag_name doesn't exist for $artifactId"
+    # TODO remove this check when
+    # https://github.com/DataDog/dd-sdk-android/commit/ccd79322895a6ba135e2b73b32005fb4aeb5c31c
+    # is released
+    if [ $artifactId != "dd-sdk-android-benchmark-internal" ]; then
+      exit 1
+    fi
+  fi
+done