Upgrade terraform-provider-azuread to v2.50.0 (#1065) #83
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # WARNING: This file is autogenerated - changes will be overwritten if not made via https://github.com/pulumi/ci-mgmt | |
| env: | |
| PROVIDER: azuread | |
| ARM_CLIENT_ID: d3b6ec3a-36fe-46c9-b3d9-5856a2e0e73c | |
| ARM_CLIENT_SECRET: ${{ secrets.ARM_CLIENT_SECRET_CI }} | |
| ARM_ENVIRONMENT: public | |
| ARM_SUBSCRIPTION_ID: 0282681f-7a9e-424b-80b2-96babd57a8a1 | |
| ARM_TENANT_ID: 9605c22c-e585-4ea3-9b83-e90339719f8a | |
| DOTNETVERSION: | | |
| 6.0.x | |
| 3.1.301 | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| GOVERSION: 1.21.x | |
| GRADLEVERSION: "7.6" | |
| JAVAVERSION: "11" | |
| NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} | |
| NODEVERSION: 20.x | |
| NPM_TOKEN: ${{ secrets.NPM_TOKEN }} | |
| NUGET_PUBLISH_KEY: ${{ secrets.NUGET_PUBLISH_KEY }} | |
| PUBLISH_REPO_PASSWORD: ${{ secrets.OSSRH_PASSWORD }} | |
| PUBLISH_REPO_USERNAME: ${{ secrets.OSSRH_USERNAME }} | |
| PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }} | |
| PULUMI_API: https://api.pulumi-staging.io | |
| PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/.. | |
| PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget | |
| PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }} | |
| PYPI_USERNAME: __token__ | |
| PYTHONVERSION: 3.11.8 | |
| RUN_OIDC_TESTS: ${{ github.event_name == 'pull_request' && 'true' || '' }} | |
| SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }} | |
| SIGNING_KEY_ID: ${{ secrets.JAVA_SIGNING_KEY_ID }} | |
| SIGNING_PASSWORD: ${{ secrets.JAVA_SIGNING_PASSWORD }} | |
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} | |
| TF_APPEND_USER_AGENT: pulumi | |
| TRAVIS_OS_NAME: linux | |
| jobs: | |
| build_sdk: | |
| name: build_sdk | |
| needs: prerequisites | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v4 | |
| - uses: pulumi/provider-version-action@v1 | |
| with: | |
| set-env: 'PROVIDER_VERSION' | |
| - name: Install Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| cache-dependency-path: | | |
| sdk/go.sum | |
| go-version: 1.21.x | |
| - name: Cache examples generation | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| .pulumi/examples-cache | |
| key: ${{ runner.os }}-${{ hashFiles('provider/go.sum') }} | |
| - name: Install pulumictl | |
| uses: jaxxstorm/action-install-gh-release@v1.11.0 | |
| with: | |
| tag: v0.0.46 | |
| repo: pulumi/pulumictl | |
| - name: Install Pulumi CLI | |
| uses: pulumi/actions@v5 | |
| with: | |
| pulumi-version: ^3 | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: ${{ env.NODEVERSION }} | |
| registry-url: https://registry.npmjs.org | |
| - name: Setup DotNet | |
| uses: actions/setup-dotnet@v4 | |
| with: | |
| dotnet-version: ${{ env.DOTNETVERSION }} | |
| - name: Setup Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: ${{ env.PYTHONVERSION }} | |
| - name: Setup Java | |
| uses: actions/setup-java@v4 | |
| with: | |
| cache: gradle | |
| distribution: temurin | |
| java-version: ${{ env.JAVAVERSION }} | |
| - name: Setup Gradle | |
| uses: gradle/gradle-build-action@v3 | |
| with: | |
| gradle-version: ${{ env.GRADLEVERSION }} | |
| - name: Download provider + tfgen binaries | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: ${{ env.PROVIDER }}-provider.tar.gz | |
| path: ${{ github.workspace }}/bin | |
| - name: Untar provider binaries | |
| run: >- | |
| tar -zxf ${{ github.workspace }}/bin/provider.tar.gz -C ${{ | |
| github.workspace}}/bin | |
| find ${{ github.workspace }} -name "pulumi-*-${{ env.PROVIDER }}" -print -exec chmod +x {} \; | |
| - name: Install plugins | |
| run: make install_plugins | |
| - name: Update path | |
| run: echo "${{ github.workspace }}/bin" >> "$GITHUB_PATH" | |
| - name: Build SDK | |
| run: make build_${{ matrix.language }} | |
| - name: Check worktree clean | |
| uses: pulumi/git-status-check-action@v1 | |
| with: | |
| allowed-changes: | | |
| sdk/**/pulumi-plugin.json | |
| sdk/dotnet/Pulumi.*.csproj | |
| sdk/go/*/internal/pulumiUtilities.go | |
| sdk/nodejs/package.json | |
| sdk/python/pyproject.toml | |
| - name: Compress SDK folder | |
| run: tar -zcf sdk/${{ matrix.language }}.tar.gz -C sdk/${{ matrix.language }} . | |
| - name: Upload artifacts | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: ${{ matrix.language }}-sdk.tar.gz | |
| path: ${{ github.workspace}}/sdk/${{ matrix.language }}.tar.gz | |
| retention-days: 30 | |
| - if: failure() && github.event_name == 'push' | |
| name: Notify Slack | |
| uses: 8398a7/action-slack@v3 | |
| with: | |
| author_name: Failure in building ${{ matrix.language }} sdk | |
| fields: repo,commit,author,action | |
| status: ${{ job.status }} | |
| strategy: | |
| fail-fast: true | |
| matrix: | |
| language: | |
| - nodejs | |
| - python | |
| - dotnet | |
| - go | |
| - java | |
| create_docs_build: | |
| name: create_docs_build | |
| needs: tag_sdk | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Install pulumictl | |
| uses: jaxxstorm/action-install-gh-release@v1.11.0 | |
| with: | |
| tag: v0.0.46 | |
| repo: pulumi/pulumictl | |
| - env: | |
| GITHUB_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }} | |
| name: Dispatch Event | |
| run: pulumictl create docs-build pulumi-${{ env.PROVIDER }} | |
| "${GITHUB_REF#refs/tags/}" | |
| lint: | |
| name: lint | |
| uses: ./.github/workflows/lint.yml | |
| secrets: inherit | |
| license_check: | |
| name: License Check | |
| uses: ./.github/workflows/license.yml | |
| secrets: inherit | |
| prerequisites: | |
| name: prerequisites | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v4 | |
| - uses: pulumi/provider-version-action@v1 | |
| with: | |
| set-env: 'PROVIDER_VERSION' | |
| - name: Cache examples generation | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| .pulumi/examples-cache | |
| key: ${{ runner.os }}-${{ hashFiles('provider/go.sum') }} | |
| - name: Prepare upstream code | |
| run: make upstream | |
| - name: Install Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: 1.21.x | |
| cache-dependency-path: | | |
| provider/*.sum | |
| upstream/*.sum | |
| - name: Install pulumictl | |
| uses: jaxxstorm/action-install-gh-release@v1.11.0 | |
| with: | |
| tag: v0.0.46 | |
| repo: pulumi/pulumictl | |
| - name: Install Pulumi CLI | |
| uses: pulumi/actions@v5 | |
| with: | |
| pulumi-version: ^3 | |
| - if: github.event_name == 'pull_request' | |
| name: Install Schema Tools | |
| uses: jaxxstorm/action-install-gh-release@v1.11.0 | |
| with: | |
| repo: pulumi/schema-tools | |
| - name: Build schema generator binary | |
| run: make tfgen_build_only | |
| - name: Install plugins | |
| run: make install_plugins | |
| - name: Generate schema | |
| run: make tfgen_no_deps | |
| - name: Build provider binary | |
| run: make provider_no_deps | |
| - name: Unit-test provider code | |
| run: make test_provider | |
| - if: github.event_name == 'pull_request' | |
| name: Check Schema is Valid | |
| run: | | |
| EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64) | |
| { | |
| echo "SCHEMA_CHANGES<<$EOF"; | |
| schema-tools compare -p ${{ env.PROVIDER }} -o ${{ github.event.repository.default_branch }} -n --local-path=provider/cmd/pulumi-resource-${{ env.PROVIDER }}/schema.json; | |
| echo "$EOF"; | |
| } >> "$GITHUB_ENV" | |
| - if: github.event_name == 'pull_request' && github.actor != 'dependabot[bot]' | |
| name: Comment on PR with Details of Schema Check | |
| uses: thollander/actions-comment-pull-request@v2 | |
| with: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| comment_tag: schemaCheck | |
| message: >+ | |
| ${{ env.SCHEMA_CHANGES }} | |
| Maintainer note: consult the [runbook](https://github.com/pulumi/platform-providers-team/blob/main/playbooks/tf-provider-updating.md) for dealing with any breaking changes. | |
| - name: Tar provider binaries | |
| run: tar -zcf ${{ github.workspace }}/bin/provider.tar.gz -C ${{ | |
| github.workspace }}/bin/ pulumi-resource-${{ env.PROVIDER }} | |
| pulumi-tfgen-${{ env.PROVIDER }} | |
| - name: Upload artifacts | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: ${{ env.PROVIDER }}-provider.tar.gz | |
| path: ${{ github.workspace }}/bin/provider.tar.gz | |
| retention-days: 30 | |
| - if: failure() && github.event_name == 'push' | |
| name: Notify Slack | |
| uses: 8398a7/action-slack@v3 | |
| with: | |
| author_name: Failure in building provider prerequisites | |
| fields: repo,commit,author,action | |
| status: ${{ job.status }} | |
| publish: | |
| name: publish | |
| needs: | |
| - test | |
| - license_check | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Free Disk Space (Ubuntu) | |
| uses: jlumbroso/free-disk-space@v1.3.1 | |
| with: | |
| # this might remove tools that are actually needed, | |
| # if set to "true" but frees about 6 GB | |
| tool-cache: false | |
| swap-storage: false | |
| - name: Checkout Repo | |
| uses: actions/checkout@v4 | |
| - name: Install Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| cache-dependency-path: | | |
| sdk/go.sum | |
| go-version: 1.21.x | |
| - name: Install pulumictl | |
| uses: jaxxstorm/action-install-gh-release@v1.11.0 | |
| with: | |
| tag: v0.0.46 | |
| repo: pulumi/pulumictl | |
| - name: Install Pulumi CLI | |
| uses: pulumi/actions@v5 | |
| with: | |
| pulumi-version: ^3 | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-region: us-east-2 | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| role-duration-seconds: 7200 | |
| role-external-id: upload-pulumi-release | |
| role-session-name: ${{ env.PROVIDER }}@githubActions | |
| role-to-assume: ${{ secrets.AWS_UPLOAD_ROLE_ARN }} | |
| - id: version | |
| uses: pulumi/provider-version-action@v1 | |
| - name: Run GoReleaser | |
| uses: goreleaser/goreleaser-action@v5 | |
| env: | |
| GORELEASER_CURRENT_TAG: v${{ steps.version.outputs.version }} | |
| PROVIDER_VERSION: ${{ steps.version.outputs.version }} | |
| with: | |
| args: -p 3 release --rm-dist --timeout 60m0s | |
| version: latest | |
| - if: failure() && github.event_name == 'push' | |
| name: Notify Slack | |
| uses: 8398a7/action-slack@v3 | |
| with: | |
| author_name: Failure in publishing binaries | |
| fields: repo,commit,author,action | |
| status: ${{ job.status }} | |
| publish_sdk: | |
| name: publish_sdk | |
| needs: publish | |
| runs-on: ubuntu-latest | |
| steps: | |
| - id: version | |
| uses: pulumi/provider-version-action@v1 | |
| - name: Publish SDKs | |
| uses: pulumi/pulumi-package-publisher@v0.0.15 | |
| with: | |
| sdk: all | |
| version: ${{ steps.version.outputs.version }} | |
| - env: | |
| SLACK_CHANNEL: provider-upgrade-publish-status | |
| SLACK_COLOR: "#FF0000" | |
| SLACK_ICON_EMOJI: ":taco:" | |
| SLACK_MESSAGE: "Publish failed :x:" | |
| SLACK_TITLE: ${{ github.event.repository.name }} upgrade result | |
| SLACK_USERNAME: provider-bot | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK_URL }} | |
| if: failure() | |
| name: Send Publish Failure To Slack | |
| uses: rtCamp/action-slack-notify@v2 | |
| tag_sdk: | |
| name: tag_sdk | |
| needs: publish_sdk | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v4 | |
| - name: Install pulumictl | |
| uses: jaxxstorm/action-install-gh-release@v1.11.0 | |
| with: | |
| tag: v0.0.46 | |
| repo: pulumi/pulumictl | |
| - id: version | |
| uses: pulumi/provider-version-action@v1 | |
| - name: Download Go SDK | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: go-sdk.tar.gz | |
| path: ${{ github.workspace }}/sdk/ | |
| - name: Uncompress Go SDK | |
| run: tar -zxf ${{ github.workspace }}/sdk/go.tar.gz -C | |
| ${{ github.workspace }}/sdk/go | |
| shell: bash | |
| - uses: pulumi/publish-go-sdk-action@v1 | |
| with: | |
| repository: ${{ github.repository }} | |
| base-ref: ${{ github.sha }} | |
| source: sdk | |
| path: sdk | |
| version: ${{ steps.version.outputs.version }} | |
| additive: false | |
| # Avoid including other language SDKs & artifacts in the commit | |
| files: | | |
| go.* | |
| go/** | |
| !*.tar.gz | |
| clean_up_release_labels: | |
| name: Clean up release labels | |
| needs: create_docs_build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v4 | |
| - name: Clean up release labels | |
| uses: pulumi/action-release-by-pr-label@main | |
| with: | |
| command: "clean-up-release-labels" | |
| repo: ${{ github.repository }} | |
| commit: ${{ github.sha }} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| test: | |
| name: test | |
| needs: build_sdk | |
| permissions: | |
| contents: read | |
| id-token: write | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v4 | |
| - uses: pulumi/provider-version-action@v1 | |
| with: | |
| set-env: 'PROVIDER_VERSION' | |
| - name: Install Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| cache-dependency-path: | | |
| sdk/go.sum | |
| go-version: 1.21.x | |
| - name: Install pulumictl | |
| uses: jaxxstorm/action-install-gh-release@v1.11.0 | |
| with: | |
| tag: v0.0.46 | |
| repo: pulumi/pulumictl | |
| - name: Install Pulumi CLI | |
| uses: pulumi/actions@v5 | |
| with: | |
| pulumi-version: ^3 | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: ${{ env.NODEVERSION }} | |
| registry-url: https://registry.npmjs.org | |
| - name: Setup DotNet | |
| uses: actions/setup-dotnet@v4 | |
| with: | |
| dotnet-version: ${{ env.DOTNETVERSION }} | |
| - name: Setup Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: ${{ env.PYTHONVERSION }} | |
| - name: Setup Java | |
| uses: actions/setup-java@v4 | |
| with: | |
| cache: gradle | |
| distribution: temurin | |
| java-version: ${{ env.JAVAVERSION }} | |
| - name: Setup Gradle | |
| uses: gradle/gradle-build-action@v3 | |
| with: | |
| gradle-version: ${{ env.GRADLEVERSION }} | |
| - name: Download provider + tfgen binaries | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: ${{ env.PROVIDER }}-provider.tar.gz | |
| path: ${{ github.workspace }}/bin | |
| - name: Untar provider binaries | |
| run: >- | |
| tar -zxf ${{ github.workspace }}/bin/provider.tar.gz -C ${{ | |
| github.workspace}}/bin | |
| find ${{ github.workspace }} -name "pulumi-*-${{ env.PROVIDER }}" -print -exec chmod +x {} \; | |
| - run: dotnet nuget add source ${{ github.workspace }}/nuget | |
| - name: Download SDK | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: ${{ matrix.language }}-sdk.tar.gz | |
| path: ${{ github.workspace}}/sdk/ | |
| - name: Uncompress SDK folder | |
| run: tar -zxf ${{ github.workspace }}/sdk/${{ matrix.language }}.tar.gz -C ${{ | |
| github.workspace }}/sdk/${{ matrix.language }} | |
| - name: Update path | |
| run: echo "${{ github.workspace }}/bin" >> "$GITHUB_PATH" | |
| - name: Install Python deps | |
| run: |- | |
| pip3 install virtualenv==20.0.23 | |
| pip3 install pipenv | |
| - name: Install dependencies | |
| run: make install_${{ matrix.language}}_sdk | |
| - name: Install gotestfmt | |
| uses: GoTestTools/gotestfmt-action@v2 | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| version: v2.5.0 | |
| - name: Run tests | |
| run: cd examples && go test -v -json -count=1 -cover -timeout 2h -tags=${{ | |
| matrix.language }} -parallel 4 . 2>&1 | tee /tmp/gotest.log | gotestfmt | |
| - if: failure() && github.event_name == 'push' | |
| name: Notify Slack | |
| uses: 8398a7/action-slack@v3 | |
| with: | |
| author_name: Failure in running ${{ matrix.language }} tests | |
| fields: repo,commit,author,action | |
| status: ${{ job.status }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| language: | |
| - nodejs | |
| - python | |
| - dotnet | |
| - go | |
| - java | |
| name: release | |
| on: | |
| push: | |
| tags: | |
| - v*.*.* | |
| - "!v*.*.*-**" |