refactor(ci): Build openapi before proposing PR (#462)

Approach of downloading the github pages artifact for proposing a PR to
the OSC leads to the delay of 1 change (only after next PR is merged the
changes are proposed to the osc with the name of the last PR). This
is caused by the fact that it takes some seconds for openapi to be
published and so the propagate job mostly uses the outdated one.

Author: gtema

.github/workflows/ci.yml

@@ -50,13 +50,13 @@ jobs:
       - name: Rust Cache
         uses: swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
 
-      - name: Run tests
+      - name: Run tests (unit)
         run: cargo nextest run
 
       - name: Run tests (sqlite)
         run: cargo nextest run --test integration
 
-      - name: Run tests for mysql
+      - name: Run tests (mysql)
         run: cargo nextest run --test integration --profile mysql --no-capture
 
       - name: Run tests for postgres

.github/workflows/committed.yml

@@ -116,3 +116,21 @@ jobs:
 
       - name: Test OPA policies
         run: opa fmt policy --check-result
+
+  committed:
+    name: Lint Commits
+    runs-on: ubuntu-latest
+    steps:
+
+    - name: Harden Runner
+      uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
+      with:
+        egress-policy: audit
+
+    - name: Checkout Actions Repository
+      uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      with:
+        fetch-depth: 0
+
+    - name: Lint Commits
+      uses: crate-ci/committed@15229711f8f597474c0b636f327cde5969f9a529 # v1.1.7

.github/workflows/linters.yml

@@ -22,6 +22,11 @@ jobs:
         with:
           fetch-depth: 0  # get all commits
 
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@6d653acede28d24f02e3cd41383119e8b1b35921 # stable
+        with:
+          toolchain: stable
+
       - name: Get the codegenerator
         run: git clone https://opendev.org/openstack/codegenerator
 
@@ -33,8 +38,8 @@ jobs:
       - name: Prepare the work dir
         run: mkdir -p codegenerator/wrk/openapi_specs/identity
 
-      - name: Get the fresh openapi for the codegenerator
-        run: curl https://openstack-experimental.github.io/keystone/openapi.yaml -o codegenerator/wrk/openapi_specs/identity/keystone_rust.yaml
+      - name: Generate OpenAPI
+        run: cargo run --bin keystone -- --dump-openapi yaml > codegenerator/wrk/openapi_specs/identity/keystone_rust.yaml
 
       - name: Install the codegenerator
         working-directory: codegenerator