ci: automation of releases

Author: fredleger

.github/release-drafter.yml

@@ -0,0 +1,27 @@
+template: |
+  # What's Changed
+  $CHANGES
+  **Full Changelog**: https://github.com/$OWNER/$REPOSITORY/compare/$PREVIOUS_TAG...$RESOLVED_VERSION
+name-template: "Version $RESOLVED_VERSION"
+tag-template: "$RESOLVED_VERSION"
+
+version-resolver:
+  major:
+    labels:
+      - "release-major"
+  minor:
+    labels:
+      - "release-minor"
+  patch:
+    labels:
+      - "release-patch"
+  default: patch
+
+autolabeler:
+  - label: "release-major"
+    title:
+      - "/^BREAKING CHANGE:/"
+  - label: "release-minor"
+    title:
+      - "/^feat:/"
+      - "/^feat\\(.+\\):/"

.github/workflows/__shared-ci.yml

@@ -6,7 +6,7 @@ on:
 jobs:
 
   golangci-lint:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -23,7 +23,7 @@ jobs:
     strategy:
       matrix:
         go-version: ['1.21']
-        platform: [ubuntu-latest]
+        platform: [self-hosted]
     runs-on: ${{ matrix.platform }}
     steps:
       - name: Checkout code
@@ -37,7 +37,7 @@ jobs:
         run: go test ./... -v -covermode=count
 
   go-coverage:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -61,7 +61,7 @@ jobs:
           allow-empty: true
 
   ct-lint:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
 
       - name: Checkout

.github/workflows/main-ci.yml

@@ -2,9 +2,27 @@ name: Main - Continuous Integration
 
 on:
   push:
-    branches: [main]
+    branches:
+      - main
+
+permissions:
+  contents: read
 
 jobs:
+
+  update_release_draft:
+    permissions:
+      contents: write
+      pull-requests: write
+    runs-on: self-hosted
+    steps:
+      - uses: release-drafter/release-drafter@v6
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          publish: true
+          disable-autolabeler: true
+
   ci:
     name: Continuous Integration
-    uses: ./.github/workflows/__shared-ci.yml
+    uses: ./.github/workflows/__shared-ci.yml

.github/workflows/pull-request-ci.yml

@@ -5,6 +5,20 @@ on:
     branches: [main]
 
 jobs:
+
+  pull-request-labeler:
+    runs-on: self-hosted
+    permissions:
+      contents: write
+      pull-requests: write
+
+    steps:
+      - uses: release-drafter/release-drafter@v6
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          disable-releaser: true
+
   ci:
     name: Continuous Integration
-    uses: ./.github/workflows/__shared-ci.yml
+    uses: ./.github/workflows/__shared-ci.yml

.github/workflows/release.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   check-branches:
     name: Check branches
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - name: Check branch
         run: |
@@ -27,7 +27,7 @@ jobs:
   skaffold-build:
     name: 👷‍♂️ Run skaffold build
     needs: ci
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       # Login to docker hub
       - name: 🔒 Login to hub
@@ -67,7 +67,7 @@ jobs:
   helm-push:
     name: 👷‍♂️ Run helm push
     needs: ci
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       # Get a local copy of the code
       - uses: actions/checkout@v4
@@ -107,7 +107,7 @@ jobs:
     needs:
     - skaffold-build
     - helm-push
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - uses: tibdex/github-app-token@v2
         id: generate-token