mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 05:52:51 +00:00
# Which Problems Are Solved - The previous monorepo in monorepo structure for the login app and its related packages was fragmented, complicated and buggy. - The process for building and testing the login container was inconsistent between local development and CI. - Lack of clear documentation as well as easy and reliable ways for non-frontend developers to reproduce and fix failing PR checks locally. # How the Problems Are Solved - Consolidated the login app and its related npm packages by moving the main package to `apps/login/apps/login` and merging `apps/login/packages/integration` and `apps/login/packages/acceptance` into the main `apps/login` package. - Migrated from Docker Compose-based test setups to dev container-based setups, adding support for multiple dev container configurations: - `.devcontainer/base` - `.devcontainer/turbo-lint-unit` - `.devcontainer/turbo-lint-unit-debug` - `.devcontainer/login-integration` - `.devcontainer/login-integration-debug` - Added npm scripts to run the new dev container setups, enabling exact reproduction of GitHub PR checks locally, and updated the pipeline to use these containers. - Cleaned up Dockerfiles and docker-bake.hcl files to only build the production image for the login app. - Cleaned up compose files to focus on dev environments in dev containers. - Updated `CONTRIBUTING.md` with guidance on running and debugging PR checks locally using the new dev container approach. - Introduced separate Dockerfiles for the login app to distinguish between using published client packages and building clients from local protos. - Ensured the login container is always built in the pipeline for use in integration and acceptance tests. - Updated Makefile and GitHub Actions workflows to use `--frozen-lockfile` for installing pnpm packages, ensuring reproducible installs. - Disabled GitHub release creation by the changeset action. - Refactored the `/build` directory structure for clarity and maintainability. - Added a `clean` command to `docks/package.json`. - Experimentally added `knip` to the `zitadel-client` package for improved linting of dependencies and exports. # Additional Changes - Fixed Makefile commands for consistency and reliability. - Improved the structure and clarity of the `/build` directory to support seamless integration of the login build. - Enhanced documentation and developer experience for running and debugging CI checks locally. # Additional Context - See updated `CONTRIBUTING.md` for new local development and debugging instructions. - These changes are a prerequisite for further improvements to the CI pipeline and local development workflow. - Closes #10276
144 lines
3.7 KiB
YAML
144 lines
3.7 KiB
YAML
name: ZITADEL CI/CD
|
|
|
|
on:
|
|
push:
|
|
tags-ignore:
|
|
- "*"
|
|
branches:
|
|
- "main"
|
|
pull_request:
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: write
|
|
packages: write
|
|
issues: write
|
|
pull-requests: write
|
|
actions: write
|
|
|
|
jobs:
|
|
core:
|
|
uses: ./.github/workflows/core.yml
|
|
with:
|
|
node_version: "20"
|
|
buf_version: "latest"
|
|
|
|
console:
|
|
uses: ./.github/workflows/console.yml
|
|
with:
|
|
node_version: "20"
|
|
buf_version: "latest"
|
|
|
|
docs:
|
|
uses: ./.github/workflows/docs.yml
|
|
with:
|
|
node_version: "20"
|
|
buf_version: "latest"
|
|
|
|
version:
|
|
uses: ./.github/workflows/version.yml
|
|
with:
|
|
semantic_version: "23.0.7"
|
|
dry_run: true
|
|
|
|
compile:
|
|
needs: [core, console, version]
|
|
uses: ./.github/workflows/compile.yml
|
|
with:
|
|
core_cache_key: ${{ needs.core.outputs.cache_key }}
|
|
console_cache_key: ${{ needs.console.outputs.cache_key }}
|
|
core_cache_path: ${{ needs.core.outputs.cache_path }}
|
|
console_cache_path: ${{ needs.console.outputs.cache_path }}
|
|
version: ${{ needs.version.outputs.version }}
|
|
node_version: "20"
|
|
secrets:
|
|
DEPOT_TOKEN: ${{ secrets.DEPOT_TOKEN }}
|
|
|
|
core-unit-test:
|
|
needs: core
|
|
uses: ./.github/workflows/core-unit-test.yml
|
|
with:
|
|
core_cache_key: ${{ needs.core.outputs.cache_key }}
|
|
core_cache_path: ${{ needs.core.outputs.cache_path }}
|
|
secrets:
|
|
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
|
|
|
|
core-integration-test:
|
|
needs: core
|
|
uses: ./.github/workflows/core-integration-test.yml
|
|
with:
|
|
core_cache_key: ${{ needs.core.outputs.cache_key }}
|
|
core_cache_path: ${{ needs.core.outputs.cache_path }}
|
|
secrets:
|
|
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
|
|
|
|
lint:
|
|
needs: [core, console]
|
|
uses: ./.github/workflows/lint.yml
|
|
with:
|
|
node_version: "18"
|
|
buf_version: "latest"
|
|
go_lint_version: "v1.64.8"
|
|
core_cache_key: ${{ needs.core.outputs.cache_key }}
|
|
core_cache_path: ${{ needs.core.outputs.cache_path }}
|
|
|
|
container:
|
|
needs: [compile]
|
|
uses: ./.github/workflows/container.yml
|
|
secrets: inherit
|
|
permissions:
|
|
packages: write
|
|
if: ${{ github.event_name == 'workflow_dispatch' }}
|
|
with:
|
|
build_image_name: "ghcr.io/zitadel/zitadel-build"
|
|
|
|
login-container:
|
|
uses: ./.github/workflows/login-container.yml
|
|
permissions:
|
|
packages: write
|
|
id-token: write
|
|
with:
|
|
login_build_image_name: "ghcr.io/zitadel/zitadel-login-build"
|
|
node_version: "20"
|
|
secrets:
|
|
DEPOT_TOKEN: ${{ secrets.DEPOT_TOKEN }}
|
|
|
|
e2e:
|
|
uses: ./.github/workflows/e2e.yml
|
|
needs: [compile]
|
|
|
|
release:
|
|
uses: ./.github/workflows/release.yml
|
|
permissions:
|
|
packages: write
|
|
contents: write
|
|
issues: write
|
|
pull-requests: write
|
|
needs:
|
|
[
|
|
version,
|
|
core-unit-test,
|
|
core-integration-test,
|
|
lint,
|
|
container,
|
|
login-container,
|
|
e2e,
|
|
]
|
|
if: ${{ github.event_name == 'workflow_dispatch' }}
|
|
secrets:
|
|
GCR_JSON_KEY_BASE64: ${{ secrets.GCR_JSON_KEY_BASE64 }}
|
|
APP_ID: ${{ secrets.APP_ID }}
|
|
APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
|
|
with:
|
|
build_image_name: ${{ needs.container.outputs.build_image }}
|
|
semantic_version: "23.0.7"
|
|
image_name: "ghcr.io/zitadel/zitadel"
|
|
google_image_name: "europe-docker.pkg.dev/zitadel-common/zitadel-repo/zitadel"
|
|
build_image_name_login: ${{ needs.login-container.outputs.login_build_image }}
|
|
image_name_login: "ghcr.io/zitadel/zitadel-login"
|
|
google_image_name_login: "europe-docker.pkg.dev/zitadel-common/zitadel-repo/zitadel-login"
|