Use CopyBara for repo mirroring in the CLI (#282)

* move from mirror.yaml to copybara for mirroring between OSS and internal repo

* Use --force for the inital instead of --init-history

* Use last rev for the inital sync

GitOrigin-RevId: 4fa678afe4522b80035634cdb91086a7da73698f

Author: mosslilley

.github/workflows/copybara-pr.yaml

@@ -0,0 +1,66 @@
+name: copybara-pr
+
+on:
+  pull_request:
+    branches: [main]
+
+jobs:
+  copy:
+    if: ${{ github.repository == 'render-oss/cli' }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - uses: actions/setup-java@v5
+        with:
+          distribution: oracle
+          java-version: 21
+      - name: Generate an app token for render-oss
+        id: generate-token-oss
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ vars.APP_ID }}
+          private-key: ${{ secrets.APP_KEY }}
+          owner: render-oss
+          repositories: cli
+      - name: Generate an app token for renderinc
+        id: generate-token-renderinc
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ vars.APP_ID }}
+          private-key: ${{ secrets.APP_KEY }}
+          owner: renderinc
+          repositories: cli
+      - name: Get GitHub App User ID
+        id: get-user-id
+        env:
+          GH_TOKEN: ${{ steps.generate-token-renderinc.outputs.token }}
+          APP_SLUG: ${{ steps.generate-token-renderinc.outputs.app-slug }}
+        run: echo "user-id=$(gh api "/users/$APP_SLUG[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
+      - name: Set up credentials
+        env:
+          RENDERINC_TOKEN: ${{ steps.generate-token-renderinc.outputs.token }}
+          RENDER_OSS_TOKEN: ${{ steps.generate-token-oss.outputs.token }}
+          APP_SLUG: ${{ steps.generate-token-oss.outputs.app-slug }}
+          USER_ID: ${{ steps.get-user-id.outputs.user-id }}
+        run: |
+          echo "https://$USER:$RENDERINC_TOKEN@api.github.com" > ~/.git-credentials
+          echo "https://$USER:$RENDERINC_TOKEN@github.com" >> ~/.git-credentials
+          git config --global user.name "$APP_SLUG[bot]"
+          git config --global user.email "$USER_ID+$APP_SLUG[bot]@users.noreply.github.com"
+          git config --global url."https://$USER:${RENDERINC_TOKEN}@github.com/renderinc".insteadOf "git@github.com:renderinc"
+          git config --global url."https://$USER:${RENDERINC_TOKEN}@github.com/renderinc".insteadOf "https://github.com/renderinc"
+          git config --global url."https://$USER:${RENDER_OSS_TOKEN}@github.com/render-oss".insteadOf "git@github.com:render-oss"
+          git config --global url."https://$USER:${RENDER_OSS_TOKEN}@github.com/render-oss".insteadOf "https://github.com/render-oss"
+      - name: Set up copybara
+        run: |
+          wget https://github.com/google/copybara/releases/download/v20251215/copybara_deploy.jar
+          java -jar copybara_deploy.jar version
+          java -jar copybara_deploy.jar validate copy.bara.sky
+      - name: Run workflow
+        env:
+          RENDERINC_TOKEN: ${{ steps.generate-token-renderinc.outputs.token }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+        run: |
+          java -jar copybara_deploy.jar copy.bara.sky pr $PR_NUMBER \
+            --git-destination-url "https://$USER:$RENDERINC_TOKEN@github.com/renderinc/cli.git"

.github/workflows/mirror.yaml

@@ -0,0 +1,71 @@
+SOT_REPO = "https://github.com/renderinc/cli.git"
+SOT_BRANCH = "main"
+DESTINATION_REPO = "https://github.com/render-oss/cli.git"
+DESTINATION_BRANCH = "main"
+
+DESTINATION_FILES = [
+  ".github/**",
+  "bin/**",
+  "cmd/**",
+  "e2e/**",
+  "pkg/**",
+  ".gitignore",
+  ".golangci.yml",
+  ".goreleaser.yml",
+  "AGENTS.md",
+  "LICENSE",
+  "README.md",
+  "SECURITY.md",
+  "go.mod",
+  "go.sum",
+  "main.go",
+  "copy.bara.sky",
+  "prek.toml",
+]
+
+DESTINATION_FILES_EXCLUDE = [
+  ".github/workflows/copybara-push.yaml",
+]
+
+DEFAULT_COMITTER = "Render Engineering <dev-public@render.com>"
+
+# Push workflow
+core.workflow(
+    name = "push",
+    origin = git.github_origin(
+        url = SOT_REPO,
+        ref = SOT_BRANCH,
+    ),
+    destination = git.github_destination(
+        url = DESTINATION_REPO,
+        push = DESTINATION_BRANCH,
+    ),
+    origin_files = glob(DESTINATION_FILES, exclude = DESTINATION_FILES_EXCLUDE),
+    authoring = authoring.pass_thru(default = DEFAULT_COMITTER),
+    mode = "ITERATIVE",
+    transformations = [
+        metadata.restore_author("ORIGINAL_AUTHOR", search_all_changes = True),
+    ],
+)
+
+# Pull Request workflow
+core.workflow(
+    name = "pr",
+    origin = git.github_pr_origin(
+        url = DESTINATION_REPO,
+        branch = DESTINATION_BRANCH,
+    ),
+    destination = git.github_pr_destination(
+        url = SOT_REPO,
+        destination_ref = SOT_BRANCH,
+    ),
+    destination_files = glob(DESTINATION_FILES, exclude = DESTINATION_FILES_EXCLUDE),
+    origin_files = glob(["**"]),
+    authoring = authoring.pass_thru(default = DEFAULT_COMITTER),
+    mode = "CHANGE_REQUEST",
+    set_rev_id = False,
+    transformations = [
+        metadata.save_author("ORIGINAL_AUTHOR"),
+        metadata.expose_label("GITHUB_PR_NUMBER", new_name = "Closes", separator = DESTINATION_REPO.replace("https://github.com/", " ").replace(".git", "#")),
+    ],
+)