verify-pr.yaml

name: Verify PR

# Controls when the action will run. Triggers the workflow on push or pull request
# events but only for the main branch
on:
  pull_request:
    branches: [ master ]

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
  verify:
    if: ${{ !contains( github.event.pull_request.labels.*.name, 'skip ci' ) }}
    runs-on: ubuntu-latest
    container: quay.io/ibmgaragecloud/cli-tools:v0.15

    strategy:
      matrix:
        platform:
          - ibm_ocp48
        stage:
          - stages-ocp4
          - stages
      fail-fast: false
      max-parallel: 1

    env:
      HOME: /home/devops

    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      - name: Checkout
        uses: actions/checkout@v1

      - name: Verify deploy of ${{ matrix.stage }} on ${{ matrix.platform }}
        uses: cloud-native-toolkit/action-module-verify-deploy@main
        with:
          clusterId: ${{ matrix.platform }}
          validateDeployScript: .github/scripts/validate-deploy.sh
          testStagesDir: ./terraform/${{ matrix.stage }}
        env:
          TF_VAR_ibmcloud_api_key: ${{ secrets.IBMCLOUD_API_KEY }}
          TF_VAR_login_password: ${{ secrets.IBMCLOUD_API_KEY }}
          TF_VAR_registry_password: ${{ secrets.IBMCLOUD_API_KEY }}
          IBMCLOUD_API_KEY: ${{ secrets.IBMCLOUD_API_KEY }}

      - name: Verify destroy of ${{ matrix.stage }} on ${{ matrix.platform }}
        uses: cloud-native-toolkit/action-module-verify-destroy@main
        if: ${{ always() }}
        with:
          clusterId: ${{ matrix.platform }}
          testStagesDir: ./terraform/${{ matrix.stage }}
        env:
          TF_VAR_ibmcloud_api_key: ${{ secrets.IBMCLOUD_API_KEY }}
          TF_VAR_login_password: ${{ secrets.IBMCLOUD_API_KEY }}
          TF_VAR_registry_password: ${{ secrets.IBMCLOUD_API_KEY }}
          IBMCLOUD_API_KEY: ${{ secrets.IBMCLOUD_API_KEY }}

  label:
    # The type of runner that the job will run on
    needs: verify
    runs-on: ubuntu-latest

    steps:
      - uses: actions/labeler@main
        with:
          repo-token: "${{ secrets.TOKEN }}"