|
| 1 | +name: Build Pull Request Jenkins |
| 2 | + |
| 3 | +on: |
| 4 | + pull_request: |
| 5 | + paths-ignore: |
| 6 | + - '.github/**' |
| 7 | + - 'docs/**' |
| 8 | + - '!.github/workflows/**' |
| 9 | + |
| 10 | +concurrency: |
| 11 | + group: ${{ github.workflow }}-${{ github.event.pull_request.number }} |
| 12 | + cancel-in-progress: true |
| 13 | + |
| 14 | +permissions: |
| 15 | + contents: read |
| 16 | + pull-requests: read |
| 17 | + |
| 18 | +jobs: |
| 19 | + jenkins-ci-docker: |
| 20 | + runs-on: ubuntu-latest |
| 21 | + env: |
| 22 | + JENKINS_URL: ${{ vars.JENKINS_URL || 'https://starjenkins.sdcc.bnl.gov' }} |
| 23 | + JENKINS_JOB: ${{ vars.JENKINS_JOB || 'star-sw-ci-pipeline' }} |
| 24 | + JENKINS_USER: ${{ secrets.JENKINS_USER }} |
| 25 | + JENKINS_TOKEN: ${{ secrets.JENKINS_TOKEN }} |
| 26 | + BRANCH_NAME: ${{ github.event.pull_request.head.ref }} |
| 27 | + GIT_COMMIT: ${{ github.event.pull_request.head.sha }} |
| 28 | + REPO_URL: ${{ github.event.pull_request.head.repo.clone_url }} |
| 29 | + steps: |
| 30 | + - name: Validate Jenkins configuration |
| 31 | + run: | |
| 32 | + set -euo pipefail |
| 33 | + for var in JENKINS_URL JENKINS_JOB JENKINS_USER JENKINS_TOKEN BRANCH_NAME GIT_COMMIT REPO_URL; do |
| 34 | + if [ -z "${!var:-}" ]; then |
| 35 | + echo "::error::Missing required value for ${var}" |
| 36 | + exit 1 |
| 37 | + fi |
| 38 | + done |
| 39 | +
|
| 40 | + - name: Fetch Jenkins crumb |
| 41 | + id: crumb |
| 42 | + run: | |
| 43 | + set -euo pipefail |
| 44 | + curl_auth="${JENKINS_USER}:${JENKINS_TOKEN}" |
| 45 | + crumb="$(curl --silent --show-error --fail --retry 3 --retry-all-errors --user "$curl_auth" \ |
| 46 | + "${JENKINS_URL}/crumbIssuer/api/xml?xpath=concat(//crumbRequestField,%22:%22,//crumb)")" |
| 47 | + echo "::add-mask::$crumb" |
| 48 | + echo "value=$crumb" >> "$GITHUB_OUTPUT" |
| 49 | +
|
| 50 | + - name: Trigger Jenkins docker job |
| 51 | + env: |
| 52 | + JENKINS_CRUMB: ${{ steps.crumb.outputs.value }} |
| 53 | + run: | |
| 54 | + set -euo pipefail |
| 55 | + curl_auth="${JENKINS_USER}:${JENKINS_TOKEN}" |
| 56 | + response_headers="$(mktemp)" |
| 57 | +
|
| 58 | + curl --silent --show-error --fail \ |
| 59 | + --request POST \ |
| 60 | + --retry 3 \ |
| 61 | + --retry-all-errors \ |
| 62 | + --user "$curl_auth" \ |
| 63 | + --header "$JENKINS_CRUMB" \ |
| 64 | + --data-urlencode "BRANCH_NAME=${BRANCH_NAME}" \ |
| 65 | + --data-urlencode "GIT_COMMIT=${GIT_COMMIT}" \ |
| 66 | + --data-urlencode "REPO_URL=${REPO_URL}" \ |
| 67 | + --dump-header "$response_headers" \ |
| 68 | + --output /dev/null \ |
| 69 | + "${JENKINS_URL}/job/${JENKINS_JOB}/buildWithParameters" |
| 70 | +
|
| 71 | + queue_url="$(awk 'BEGIN {IGNORECASE=1} /^Location:/ {print $2}' "$response_headers" | tr -d '\r')" |
| 72 | +
|
| 73 | + echo "Triggered Jenkins job ${JENKINS_JOB} for ${BRANCH_NAME}@${GIT_COMMIT}" |
| 74 | + if [ -n "$queue_url" ]; then |
| 75 | + echo "Queue item: ${queue_url}" |
| 76 | + { |
| 77 | + echo "### Jenkins Triggered" |
| 78 | + echo |
| 79 | + echo "- Job: \`${JENKINS_JOB}\`" |
| 80 | + echo "- Branch: \`${BRANCH_NAME}\`" |
| 81 | + echo "- Commit: \`${GIT_COMMIT}\`" |
| 82 | + echo "- Queue item: ${queue_url}" |
| 83 | + } >> "$GITHUB_STEP_SUMMARY" |
| 84 | + fi |
0 commit comments