feat: prepare release pipeline (#1)

Author: StarpTech

.github/workflows/images-tags.yaml

@@ -25,6 +25,12 @@ jobs:
           - container_name: studio
             dockerfile: studio/Dockerfile
             context_path: .
+          - container_name: keycloak
+            dockerfile: keycloak/Dockerfile
+            context_path: keycloak
+          - container_name: otelcollector
+            dockerfile: otelcollector/Dockerfile
+            context_path: otelcollector
 
     runs-on: ubuntu-latest
     permissions:
@@ -35,7 +41,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v3
 
-      - name: Log in to the Container registry
+      - name: Log in to Github Container registry
         uses: docker/login-action@v2
         with:
           registry: ${{ env.REGISTRY }}
@@ -46,11 +52,16 @@ jobs:
         id: meta
         uses: docker/metadata-action@v4
         with:
-          images: ${{ env.REGISTRY }}/${{ github.repository }}/${{ matrix.container_name }}
+          images: |
+            ${{ env.REGISTRY }}/${{ github.repository }}/${{ matrix.container_name }}
           tags: |
             type=ref,event=branch
             type=ref,event=pr
-            type=sha,format=long,prefix=sha256-
+            type=sha
+            # set latest tag for default branch
+            type=raw,value=latest,enable={{is_default_branch}}
+            # use custom value instead of git tag
+            type=match,pattern=[a-zA-Z-_]+@(.*),group=1
 
       - name: Install Docker Buildx
         uses: docker/setup-buildx-action@v2
@@ -63,3 +74,5 @@ jobs:
           context: ${{ matrix.context_path }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ github.repository }}/${{ matrix.container_name }}:buildcache
+          cache-to: type=registry,ref=${{ env.REGISTRY }}/${{ github.repository }}/${{ matrix.container_name }}:buildcache,mode=max

.github/workflows/images.yaml

@@ -0,0 +1,48 @@
+name: NPM Packages Release
+
+on:
+  workflow_dispatch:
+
+concurrency:
+  group: ${{github.workflow}}-${{github.head_ref}}
+  cancel-in-progress: false
+
+env:
+  CI: true
+
+jobs:
+  stable-version:
+    # https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions
+    permissions:
+      id-token: write
+    timeout-minutes: 20
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.GH_TOKEN_WORKFLOW_PUBLISH }}
+      - uses: ./.github/actions/node
+        with:
+          working-directory: ${{ env.WORKING_DIRECTORY }}
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - run: npm config set //registry.npmjs.org/:_authToken $NPM_TOKEN
+        shell: bash
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Install
+        run: pnpm install
+
+      - name: Build
+        run: pnpm build
+
+      - name: Publish packages & Create Github Releases
+        run: |
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "github-actions[bot]"
+          pnpm release
+        env:
+          GH_TOKEN: ${{ secrets.GH_TOKEN_WORKFLOW_PUBLISH }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/packages-release.yaml

@@ -2,3 +2,4 @@ strict-peer-dependencies=false # If this is enabled, commands will fail if there
 fetch-retries="10"
 ignore-workspace-root-check=true
 dedupe-peer-dependents=false
+provenance=true

.npmrc

@@ -6,6 +6,7 @@ setup-tools:
 	go install github.com/bufbuild/connect-go/cmd/protoc-gen-connect-go@latest
 	go install google.golang.org/protobuf/cmd/protoc-gen-go@latest
 	go install github.com/yannh/kubeconform/cmd/kubeconform@latest
+	go install github.com/maykonlf/semver-cli/cmd/semver@latest
 
 prerequisites: setup-tools
 	go version
@@ -88,11 +89,11 @@ docker-push-local:
 	docker compose --file docker-compose.cosmo.yml push
 
 docker-build-minikube: docker-build-local
-	minikube image load us-docker.pkg.dev/wg-cosmo/cloud/studio:latest & \
-	minikube image load us-docker.pkg.dev/wg-cosmo/cloud/controlplane:latest & \
-	minikube image load us-docker.pkg.dev/wg-cosmo/cosmo/otelcollector:latest & \
-	minikube image load us-docker.pkg.dev/wg-cosmo/cloud/router:latest & \
-	minikube image load us-docker.pkg.dev/wg-cosmo/cosmo/otelcollector:latest
+	minikube image load ghcr.io/wundergraph/cosmo/studio:latest & \
+	minikube image load ghcr.io/wundergraph/cosmo/controlplane:latest & \
+	minikube image load ghcr.io/wundergraph/cosmo/otelcollector:latest & \
+	minikube image load ghcr.io/wundergraph/cosmo/router:latest & \
+	minikube image load ghcr.io/wundergraph/cosmo/keycloak:latest
 	minikube cache reload
 
 new-ch-migration:
@@ -111,4 +112,4 @@ migrate-ch-dump:
 	dbmate -d "./controlplane/clickhouse/migrations" -s "./controlplane/db/schema.sql" -e CLICKHOUSE_DSN dump
 
 build-kc-theme:
-	(cd keycloak/theme && npm i && ./build.sh)
+	(cd keycloak/theme && npm i && ./build.sh)

Makefile

@@ -68,7 +68,6 @@ _Clean up all containers and volumes by running `make full-demo-down`._
 - [NodeJS 18+](https://nodejs.org/en/download/)
 - [PNPM 8+](https://pnpm.io/installation)
 - [Go 1.20+](https://golang.org/doc/install)
-- [Java 17 SDK](https://www.oracle.com/java/technologies/downloads/#java17)
 
 Bootstrapping your development environment is easy. Just run the following commands in order:
 

README.md

@@ -1,6 +1,6 @@
 {
   "name": "wgc",
-  "version": "0.0.1",
+  "version": "0.0.0",
   "description": "The official CLI tool to manage the GraphQL Federation Platform Cosmo",
   "type": "module",
   "main": "dist/index.js",

cli/package.json

@@ -12,8 +12,6 @@
   "scripts": {
     "dev": "tsc --watch",
     "build": "del dist && tsc",
-    "prepublish": "pnpm run build && pnpm run test",
-    "release": "pnpm publish --access restricted --tag latest",
     "test": "vitest test"
   },
   "main": "./dist/index.js",

composition/package.json

@@ -1,8 +1,8 @@
 {
-  "name": "cosmo-controlplane",
+  "name": "controlplane",
+  "version": "0.0.0",
   "private": true,
-  "version": "0.1.0",
-  "description": "",
+  "description": "WunderGraph Cosmo Controlplane",
   "type": "module",
   "main": "dist/index.js",
   "author": {

controlplane/package.json

@@ -2,7 +2,7 @@ import { randomUUID } from 'node:crypto';
 import postgres from 'postgres';
 import nuid from 'nuid';
 import { drizzle } from 'drizzle-orm/postgres-js';
-import { ExpiresAt } from 'node_modules/@wundergraph/cosmo-connect/dist/platform/v1/platform_pb.js';
+import { ExpiresAt } from '@wundergraph/cosmo-connect/dist/platform/v1/platform_pb';
 import { Label, UserAuthContext } from '../types/index.js';
 import * as schema from '../db/schema.js';
 import { Authenticator } from './services/Authentication.js';