canvas-android/.github/workflows/deploy-teacher.yml at master · instructure/canvas-android · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
name: Deploy Teacher

on:
  push:
    tags:
      - 'teacher-*'

concurrency:
  group: deploy-teacher
  cancel-in-progress: false

jobs:
  build-and-deploy:
    name: build-and-deploy
    runs-on: ubuntu-latest
    timeout-minutes: 60
    steps:
      - name: Generate GitHub App token
        id: app-token
        uses: actions/create-github-app-token@v1
        with:
          app-id: ${{ secrets.GH_APP_ID }}
          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
          owner: ${{ github.repository_owner }}
          repositories: canvas-android,android-vault

      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          submodules: 'recursive'
          token: ${{ steps.app-token.outputs.token }}

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v4
        with:
          gradle-version: wrapper
          java-version: '17'

      - name: Decode release keystore
        env:
          KEYSTORE_B64: ${{ secrets.ANDROID_RELEASE_KEYSTORE_B64 }}
        run: |
          echo "$KEYSTORE_B64" | base64 --decode > release.jks
          chmod 600 release.jks

      - name: Build production release
        run: |
          ./gradle/gradlew -p apps \
            :teacher:assembleProdRelease \
            :teacher:bundleProdRelease \
            --stacktrace \
            --build-cache \
            --parallel \
            --max-workers=4 \
            --no-daemon \
            -Dorg.gradle.jvmargs="-Xmx6g -XX:+HeapDumpOnOutOfMemoryError" \
            -Dkotlin.compiler.execution.strategy=in-process \
            -Pandroid.injected.signing.store.file=$(pwd)/release.jks \
            -Pandroid.injected.signing.store.password="${KEYSTORE_PASSWORD}" \
            -Pandroid.injected.signing.key.alias="${KEYSTORE_KEY_ALIAS}" \
            -Pandroid.injected.signing.key.password="${KEYSTORE_KEY_PASSWORD}"
        env:
          GRADLE_OPTS: "-Djava.net.preferIPv4Stack=true"
          KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
          KEYSTORE_KEY_ALIAS: ${{ secrets.ANDROID_KEYSTORE_ALIAS }}
          KEYSTORE_KEY_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PRIVATE_KEY_PASSWORD }}

      - name: Extract update priority
        id: priority
        run: |
          UPDATE_PRIORITY=$(grep 'updatePriority' apps/teacher/build.gradle | head -1 | awk '{print $NF}')
          echo "value=${UPDATE_PRIORITY}" >> "$GITHUB_OUTPUT"

      - name: Upload to Google Play
        uses: r0adkll/upload-google-play@v1
        with:
          serviceAccountJsonPlainText: ${{ secrets.GPLAY_SERVICE_ACCOUNT_KEY }}
          packageName: com.instructure.teacher
          releaseFiles: apps/teacher/build/outputs/bundle/prodRelease/teacher-prod-release.aab
          track: internal
          inAppUpdatePriority: ${{ steps.priority.outputs.value }}
          status: completed

      - name: Cleanup sensitive files
        if: always()
        run: rm -f release.jks