ci: Add new workflow for releasing turtles providers chart

.github/scripts/release-against-prime-charts.sh

@@ -0,0 +1,160 @@
+#!/usr/bin/env bash
+#
+# Bumps Turtles providers version in a locally checked out rancher/prime-charts repository
+#
+# Usage:
+#   ./release-against-prime-charts.sh <path to prime-charts repo> <path to turtles repo> <prev turtles providers release> <new turtles providers release> [bump major]
+#
+# Example:
+# ./release-against-prime-charts.sh "${GITHUB_WORKSPACE}/prime-charts" "${GITHUB_WORKSPACE}/turtles" "v0.27.0-rc.0" "v0.27.0" false
+
+CHARTS_DIR=$1
+TURTLES_DIR=$2
+PREV_TURTLES_PROVIDERS_VERSION="$3"   # e.g. 0.23.0-rc.0
+NEW_TURTLES_PROVIDERS_VERSION="$4"    # e.g. 0.23.0
+BUMP_MAJOR="${5:-false}"   # default false if not given
+
+usage() {
+    cat <<EOF
+Usage:
+  $0 <path to prime-charts repo> <path to turtles repo> <prev turtles providers release> <new turtles providers release> [bump_major]
+
+Arguments:
+  <path to prime-charts repo>       Path to locally checked out prime-charts repo
+  <path to turtles repo>            Path to locally checked out turtles repo
+                                    (checked out at the ref being released; its HEAD commit is recorded)
+  <prev turtles providers release>  Previous rancher-turtles-providers version (e.g. v0.20.0-rc.0)
+  <new turtles providers release>   New rancher-turtles-providers version (e.g. v0.20.0, v0.20.1-rc.1, v0.21.0-rc.0)
+  <bump_major>            Optional. Must be "true" if introducing a new turtles minor version.
+                          Example: v0.20.0 → v0.21.0-rc.0 requires bump_major=true.
+
+Examples:
+  RC to RC:        $0 ./prime-charts ./turtles v0.26.0-rc.0 v0.26.0-rc.1
+  RC to stable:    $0 ./prime-charts ./turtles v0.26.0-rc.1 v0.26.0
+  stable to RC:    $0 ./prime-charts ./turtles v0.26.0 v0.26.1-rc.0
+  new minor RC:    $0 ./prime-charts ./turtles v0.26.0 v0.27.0-rc.0 true   # bump chart major
+EOF
+}
+
+# Bumps the patch version of a semver version string
+# e.g. 1.2.3 -> 1.2.4
+# e.g. 1.2.3-rc.4 -> 1.2.4
+bump_patch() {
+    version=$1
+    major=$(echo "$version" | cut -d. -f1)
+    minor=$(echo "$version" | cut -d. -f2)
+    patch=$(echo "$version" | cut -d. -f3)
+    new_patch=$((patch + 1))
+    echo "${major}.${minor}.${new_patch}"
+}
+
+# Bumps the major version of a semver version string and resets minor and patch to 0
+# e.g. 1.2.3 -> 2.0.0
+# e.g. 1.2.3-rc.4 -> 2.0.0
+bump_major() {
+    version=$1
+    major=$(echo "$version" | cut -d. -f1)
+    new_major=$((major + 1))
+    echo "${new_major}.0.0"
+}
+
+# Validates that the version is in the format v<major>.<minor>.<patch> or v<major>.<minor>.<patch>-rc.<number>
+validate_version_format() {
+    version=$1
+    if ! echo "$version" | grep -qE '^v[0-9]+\.[0-9]+\.[0-9]+(-rc\.[0-9]+)?$'; then
+        echo "Error: Version $version must be in the format v<major>.<minor>.<patch> or v<major>.<minor>.<patch>-rc.<number>"
+        exit 1
+    fi
+}
+
+if [ -z "$CHARTS_DIR" ] || [ -z "$TURTLES_DIR" ] || [ -z "$PREV_TURTLES_PROVIDERS_VERSION" ] || [ -z "$NEW_TURTLES_PROVIDERS_VERSION" ]; then
+    usage
+    exit 1
+fi
+
+validate_version_format "$PREV_TURTLES_PROVIDERS_VERSION"
+validate_version_format "$NEW_TURTLES_PROVIDERS_VERSION"
+
+if echo "$PREV_TURTLES_PROVIDERS_VERSION" | grep -q '\-rc'; then
+    is_prev_rc=true
+else
+    is_prev_rc=false
+fi
+
+if [ "$PREV_TURTLES_PROVIDERS_VERSION" = "$NEW_TURTLES_PROVIDERS_VERSION" ]; then
+    echo "Previous and new rancher turtles providers version are the same: $NEW_TURTLES_PROVIDERS_VERSION, but must be different"
+    exit 1
+fi
+
+# Remove the prefix v because the chart version doesn't contain it
+PREV_TURTLES_PROVIDERS_VERSION_SHORT=$(echo "$PREV_TURTLES_PROVIDERS_VERSION" | sed 's|^v||')  # e.g. 0.23.0-rc.0
+NEW_TURTLES_PROVIDERS_VERSION_SHORT=$(echo "$NEW_TURTLES_PROVIDERS_VERSION" | sed 's|^v||')  # e.g. 0.23.0
+
+# Extract base versions without -rc suffix
+prev_base=$(echo "$PREV_TURTLES_PROVIDERS_VERSION_SHORT" | sed 's/-rc.*//')
+new_base=$(echo "$NEW_TURTLES_PROVIDERS_VERSION_SHORT" | sed 's/-rc.*//')
+
+prev_minor=$(echo "$prev_base" | cut -d. -f2)
+new_minor=$(echo "$new_base" | cut -d. -f2)
+
+is_new_minor=false
+if [ "$new_minor" -gt "$prev_minor" ]; then
+    is_new_minor=true
+fi
+
+set -eux
+
+cd "${CHARTS_DIR}"
+
+# Get the chart version (eg: 110.0.0)
+if ! PREV_CHART_VERSION=$(yq '.version' ./packages/rancher-turtles-providers/package.yaml) || [ -z "$PREV_CHART_VERSION" ]  || [ "$PREV_CHART_VERSION" = "null" ]; then
+    echo "Unable to get chart version from ./packages/rancher-turtles-providers/package.yaml. The content of the file is:"
+    cat ./packages/rancher-turtles-providers/package.yaml
+    exit 1
+fi
+
+# Determine new chart version
+if [ "$is_new_minor" = "true" ]; then
+    if [ "$BUMP_MAJOR" != "true" ]; then
+        echo "Error: Detected new minor bump ($PREV_TURTLES_PROVIDERS_VERSION to $NEW_TURTLES_PROVIDERS_VERSION), but bump_major flag was not set."
+        exit 1
+    fi
+    echo "Bumping chart major: $PREV_CHART_VERSION to $(bump_major "$PREV_CHART_VERSION")"
+    NEW_CHART_VERSION=$(bump_major "$PREV_CHART_VERSION")
+    COMMIT_MSG="Bump rancher-turtles-providers to $NEW_TURTLES_PROVIDERS_VERSION (chart version major bump)"
+elif [ "$is_prev_rc" = "false" ]; then
+    echo "Bumping chart patch: $PREV_CHART_VERSION to $(bump_patch "$PREV_CHART_VERSION")"
+    NEW_CHART_VERSION=$(bump_patch "$PREV_CHART_VERSION")
+    COMMIT_MSG="Bump rancher-turtles-providers to $NEW_TURTLES_PROVIDERS_VERSION (chart version patch bump)"
+else
+    echo "Keeping chart version unchanged: $PREV_CHART_VERSION"
+    NEW_CHART_VERSION=$PREV_CHART_VERSION
+    COMMIT_MSG="Bump rancher-turtles-providers to $NEW_TURTLES_PROVIDERS_VERSION (no chart version bump)"
+fi
+
+# Determine the commit SHA for the release branch
+if ! COMMIT_SHA=$(git -C "${TURTLES_DIR}" rev-parse HEAD); then
+    echo "Unable to get commit SHA for release branch"
+    exit 1
+fi
+
+yq --inplace ".commit = \"$COMMIT_SHA\"" ./packages/rancher-turtles-providers/package.yaml
+yq --inplace ".version = \"$NEW_CHART_VERSION\"" ./packages/rancher-turtles-providers/package.yaml
+
+git add packages/rancher-turtles-providers
+git commit -m "$COMMIT_MSG"
+
+# Fully regenerate chart artifacts
+make pull-scripts
+PACKAGE=rancher-turtles-providers make prepare
+PACKAGE=rancher-turtles-providers make patch
+PACKAGE=rancher-turtles-providers make clean
+PACKAGE=rancher-turtles-providers make charts
+git add .
+git commit -m "PACKAGE=rancher-turtles-providers make prepare/patch/clean/charts"
+
+# Prepends to list
+yq --inplace ".rancher-turtles-providers = [\"${NEW_CHART_VERSION}+up${NEW_TURTLES_PROVIDERS_VERSION_SHORT}\"] + .rancher-turtles-providers" release.yaml
+
+git add release.yaml
+git commit -m "Add rancher-turtles-providers ${NEW_CHART_VERSION}+up${NEW_TURTLES_PROVIDERS_VERSION_SHORT} to release.yaml"

.github/workflows/release-against-prime-charts.yml

@@ -0,0 +1,118 @@
+name: Release Turtles Providers against rancher/prime-charts
+on:
+  workflow_dispatch:
+    inputs:
+      charts_ref:
+        description: "Submit PR against the following rancher/prime-charts branch (e.g. dev-v2.14). Use 'auto' to derive from the current turtles branch."
+        required: true
+        default: "auto"
+      prev_turtles_providers:
+        description: "Previous Turtles Providers version (e.g. v0.26.0-rc.0)"
+        required: true
+        default: ""
+      new_turtles_providers:
+        description: "New Turtles Providers version (e.g. v0.26.0)"
+        required: true
+        default: ""
+      bump_major:
+        description: "Set 'true' to bump chart major version when the Turtles Providers minor version increases (e.g., v0.25.0 → v0.26.0-rc.0). Default: false"
+        required: false
+        default: "false"
+        type: choice
+        options:
+          - "true"
+          - "false"
+
+env:
+  TURTLES_REF: "${{ github.ref_name }}"
+  PREV_TURTLES_PROVIDERS: ${{ github.event.inputs.prev_turtles_providers }}
+  NEW_TURTLES_PROVIDERS: ${{ github.event.inputs.new_turtles_providers }}
+
+jobs:
+  create-rancher-prime-charts-pr:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      # Required for vault
+      id-token: write
+    steps:
+      - name: Resolve charts_ref
+        run: |
+          INPUT="${{ github.event.inputs.charts_ref }}"
+          if [ "${INPUT}" != "auto" ]; then
+            echo "CHARTS_REF=${INPUT}" >> $GITHUB_ENV
+          else
+            TURTLES_BRANCH="${{ github.ref_name }}"
+            if [[ "$TURTLES_BRANCH" =~ ^release/v0\.([0-9]+)$ ]]; then
+              TURTLES_MINOR="${BASH_REMATCH[1]}"
+              RANCHER_MINOR=$(( TURTLES_MINOR - 12 ))
+              echo "CHARTS_REF=dev-v2.${RANCHER_MINOR}" >> $GITHUB_ENV
+              echo "Derived charts_ref: dev-v2.${RANCHER_MINOR} from ${TURTLES_BRANCH}"
+            else
+              echo "ERROR: Cannot derive charts_ref from branch '${TURTLES_BRANCH}'. Please trigger again with an explicit charts_ref value."
+              exit 1
+            fi
+          fi
+
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          ref: "${{ env.TURTLES_REF }}"
+          path: turtles
+
+      # - uses: rancher-eio/read-vault-secrets@0da85151ad1f19ed7986c41587e45aac1ace74b6 # v3
+      #   with:
+      #     secrets: |
+      #       secret/data/github/repo/${{ github.repository }}/github/app-credentials appId | APPID;
+      #       secret/data/github/repo/${{ github.repository }}/github/app-credentials privateKey | PRIVATEKEY
+
+      # - uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2
+      #   id: app-token
+      #   with:
+      #     app-id: ${{ env.APPID }}
+      #     private-key: ${{ env.PRIVATEKEY }}
+      #     owner: ${{ github.repository_owner }}
+      #     repositories: |
+      #       prime-charts
+
+      - name: Checkout rancher/prime-charts repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          repository: ${{ github.repository_owner }}/prime-charts
+          ref: "${{ env.CHARTS_REF }}"
+          token: ${{ steps.app-token.outputs.token }}
+          path: prime-charts
+          # Allow making git push request later on
+          persist-credentials: true
+
+      - name: Configure the committer
+        run: |
+          cd prime-charts
+          user_id=$(gh api "/users/$APP_USER" --jq .id)
+          git config --global user.name "$APP_USER"
+          git config --global user.email "${user_id}+${APP_USER}@users.noreply.github.com"
+        env:
+          GH_TOKEN: "${{ env.GH_TOKEN }}"
+          APP_USER: "${{ github.actor }}"
+
+      - name: Run release script
+        run: |
+          cd prime-charts
+          BRANCH="bump-turtles-providers-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
+          echo "BRANCH=${BRANCH}" >> $GITHUB_ENV
+          git checkout -b "$BRANCH" "$CHARTS_REF"
+          ../turtles/.github/scripts/release-against-prime-charts.sh . ../turtles "$PREV_TURTLES_PROVIDERS" "$NEW_TURTLES_PROVIDERS" ${{ github.event.inputs.bump_major }}
+
+      - name: Push and create pull request
+        env:
+          GH_TOKEN: "${{ env.GH_TOKEN }}"
+        run: |
+          cd prime-charts
+          git push origin "$BRANCH"
+          body=$(../turtles/.github/scripts/release-message.sh "$PREV_TURTLES_PROVIDERS" "$NEW_TURTLES_PROVIDERS")
+
+          gh pr create \
+            --title "[$CHARTS_REF] Bump rancher-turtles-providers to $NEW_TURTLES_PROVIDERS" \
+            --body "$body" \
+            --repo ${{ github.repository_owner }}/prime-charts \
+            --head "${{ github.repository_owner }}:$BRANCH" \
+            --base "$CHARTS_REF"