ci.yml

name: CI

on:
  pull_request:
    types: [opened, synchronize, reopened]
  push:
    branches:
      - "*"
    tags:
      - "*"

env:
  GOPROXY: https://proxy.golang.org,direct
  GO111MODULE: on
  tf_version: "1.3.0"
  tf_init_cli_options: "-input=false"
  tf_validation_cli_options: ""
  tf_plan_cli_options: "-lock=false -input=false"
  tf_apply_cli_options: "-auto-approve -input=false"

jobs:
  tests:
    env:
      GOPATH: ${{ github.workspace }}
      GOBIN: ${{ github.workspace }}/bin
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ${{ env.GOPATH }}/src/XDPoSChain
    strategy:
      matrix:
        include:
          - name: A-B tests
            script: go run build/ci.go test -coverage $(go list ./... | grep "github.com/XinFinOrg/XDPoSChain/[a-b].*")
          - name: C-[a-m] tests
            script: go run build/ci.go test -coverage $(go list ./... | grep "github.com/XinFinOrg/XDPoSChain/c[a-m].*")
          - name: C-[n-o] tests
            script: go run build/ci.go test -coverage $(go list ./... | grep "github.com/XinFinOrg/XDPoSChain/c[n-o].*")
          - name: C-[p-z] tests
            script: go run build/ci.go test -coverage $(go list ./... | grep "github.com/XinFinOrg/XDPoSChain/c[p-z].*")
          - name: D-I tests
            script: go run build/ci.go test -coverage $(go list ./... | grep "github.com/XinFinOrg/XDPoSChain/[d-i].*")
          - name: J-N tests
            script: go run build/ci.go test -coverage $(go list ./... | grep "github.com/XinFinOrg/XDPoSChain/[j-n].*")
          - name: O-S tests
            script: go run build/ci.go test -coverage $(go list ./... | grep "github.com/XinFinOrg/XDPoSChain/[o-s].*")
          - name: T-Z tests
            script: go run build/ci.go test -coverage $(go list ./... | grep "github.com/XinFinOrg/XDPoSChain/[t-z].*")
    steps:
      - name: Check out code
        uses: actions/checkout@v4
        with:
          path: ${{ env.GOPATH }}/src/XDPoSChain
      # Cache build tools to avoid downloading them each time
      - uses: actions/cache@v4
        with:
          path: ${{ env.GOPATH }}/src/XDPoSChain/build/cache
          key: ${{ runner.os }}-build-tools-cache-${{ hashFiles('**/build/checksums.txt') }}
      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          cache: false
          go-version: "1.25.x"
      - name: Check gofmt
        run: |
          unformatted=$(git ls-files '*.go' | xargs -r gofmt -l)
          if [ -n "$unformatted" ]; then
            echo "Unformatted files:"
            echo "$unformatted"
            exit 1
          fi
          echo "All Go files are properly formatted."
      - name: Check go mod tidy
        run: |
          set -euo pipefail
          go mod tidy -diff 2>&1 | sed '/^go: downloading/d'
          echo "go.mod and go.sum are tidy."
      - name: Validate generated files
        run: |
          go run build/ci.go generate
      - name: Run tests
        run: ${{ matrix.script }}
        env:
          GO111MODULE: auto

  tag_build:
    runs-on: ubuntu-latest
    needs: tests
    if: startsWith(github.ref, 'refs/tags/')
    steps:
      - uses: actions/checkout@v4
      - name: Login to Docker Hub
        run: echo ${{ secrets.DOCKER_PASSWORD }} | docker login -u ${{ secrets.DOCKER_USERNAME }} --password-stdin
      - name: Build Docker image
        run: docker build --build-arg GIT_COMMIT=${GITHUB_SHA} -t xinfinorg/xdposchain:${GITHUB_REF#refs/tags/} -f cicd/Dockerfile .
      - name: Push Docker image
        run: docker push xinfinorg/xdposchain:${GITHUB_REF#refs/tags/}

  devnet_build_push:
    runs-on: ubuntu-latest
    if: github.ref == 'refs/heads/dev-upgrade' && !startsWith(github.ref, 'refs/tags/')
    needs: tests
    outputs:
      output1: ${{ steps.docker.outputs.image_name }}
    steps:
      - uses: actions/checkout@v4
      - name: Login to Docker Hub
        run: echo ${{ secrets.DOCKER_PASSWORD }} | docker login -u ${{ secrets.DOCKER_USERNAME }} --password-stdin
      - name: Build and Push Docker images
        id: docker
        run: |
          git_hash=$(git rev-parse --short "$GITHUB_SHA")
          image_name=xinfinorg/devnet:dev-upgrade-${git_hash}
          docker pull xinfinorg/devnet:latest
          docker tag xinfinorg/devnet:latest xinfinorg/devnet:previous
          docker rmi xinfinorg/devnet:latest
          docker build --build-arg GIT_COMMIT=${GITHUB_SHA} -t xinfinorg/devnet:latest -f cicd/Dockerfile .
          docker tag xinfinorg/devnet:latest $image_name
          docker push $image_name
          docker push xinfinorg/devnet:latest
          docker push xinfinorg/devnet:previous
          echo "image_name=$image_name"
          echo "image_name=$image_name" >> "$GITHUB_OUTPUT"

  k8_update_start_script:
    runs-on: ubuntu-latest
    if: github.ref == 'refs/heads/dev-upgrade' && !startsWith(github.ref, 'refs/tags/')
    steps:
      - name: Set up kubectl
        uses: azure/setup-kubectl@v4
        with:
          version: "v1.19.11"
      - name: Configure kubeconfig
        run: |
          mkdir -p $HOME/.kube
          echo "${{ secrets.KUBE_CONFIG }}" | base64 --decode > $HOME/.kube/config
          chmod 600 $HOME/.kube/config
      - name: Fetch start scripts from XinFin-Node
        run: |
          set -euo pipefail
          curl -fsSL -o start-devnet.sh  https://raw.githubusercontent.com/XinFinOrg/XinFin-Node/devnet/devnet/start-devnet.sh
          curl -fsSL -o start-apothem.sh https://raw.githubusercontent.com/XinFinOrg/XinFin-Node/master/testnet/start-apothem.sh
          curl -fsSL -o start-node.sh    https://raw.githubusercontent.com/XinFinOrg/XinFin-Node/master/mainnet/start-node.sh
      - name: Apply configmaps
        run: |
          set -euo pipefail
          kubectl create configmap start-devnet-sh --from-file=start-devnet.sh --dry-run=client -o yaml | kubectl apply -f -
          kubectl create configmap start-apothem-sh --from-file=start-apothem.sh --dry-run=client -o yaml | kubectl apply -f -
          kubectl create configmap start-node-sh --from-file=start-node.sh --dry-run=client -o yaml | kubectl apply -f -

  devnet_k8_apply:
    runs-on: ubuntu-latest
    if: github.ref == 'refs/heads/dev-upgrade' && !startsWith(github.ref, 'refs/tags/')
    needs: devnet_build_push
    steps:
      - uses: actions/checkout@v4
      - name: Set up kubectl
        uses: azure/setup-kubectl@v4
        with:
          version: "v1.19.11"
      - name: Apply new image version to Kubernetes deployments
        run: |
          mkdir -p $HOME/.kube
          echo "${{ secrets.KUBE_CONFIG }}" | base64 --decode > $HOME/.kube/config
          chmod 600 $HOME/.kube/config
          git_hash=$(git rev-parse --short "$GITHUB_SHA")
          masternodes=$(kubectl get deployment -o json | jq -r '.items[] | select(.metadata.name | test("^masternode[0-9]")) | .metadata.name' | sort)
          rpcs=$(kubectl get deployment -o json| jq -r '.items[] | select(.metadata.name | test("rpc")) | "\(.metadata.name)"')
          echo "Masternodes: $masternodes"
          echo "RPCs: $rpcs"

          export git_hash
          echo "Total masternode deployments: $(echo "$masternodes" | wc -l)"

          echo "$masternodes" | xargs -r -P 32 -I {} bash -c '
            name="$1"
            # # Skip masternode1 through masternode25, update the rest.
            # if [[ $name =~ ^masternode[0-9] ]]; then
            #   num=${name#masternode}
            #   num=${num%%-*}
            #   if [[ $num =~ ^[0-9]+$ ]] && (( num >= 1 && num <= 25 )); then
            #     echo "Skipping deployment: $name"
            #     exit 0
            #   fi
            # fi
            echo "Updating deployment: $name"
            kubectl set image "deployment/$name" "$name=xinfinorg/devnet:dev-upgrade-${git_hash}" || true
          ' _ {}

          echo "$rpcs" | xargs -r -P 32 -I {} bash -c '
            name="$1"
            kubectl set image "deployment/$name" "$name=xinfinorg/devnet:dev-upgrade-${git_hash}" || true
          ' _ {}

  devnet_send_notification:
    runs-on: ubuntu-latest
    needs: devnet_k8_apply
    if: github.ref == 'refs/heads/dev-upgrade' && !startsWith(github.ref, 'refs/tags/')
    steps:
    - uses: actions/checkout@v4
    - name: Send deployment notification
      env:
        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        SLACK_WEBHOOK: ${{ secrets.SLACK_DEPLOYMENT_WEBHOOK_URL }}
        REPO: ${{ github.repository }}
      run: |
        # Extract PR number from merge commit message, e.g. "refactor(core): remove locals #30559 (#2176)"
        # Matches the last (#NNNN) pattern to get your repo's PR, not the upstream reference
        PR_NUMBER=$(git log -1 --format='%s' | grep -oP '\(#\K[0-9]+(?=\))' | tail -1 || true)

        PR_LINE="Commit: <https://github.com/${REPO}/commit/${GITHUB_SHA}|${GITHUB_SHA::7}>"
        if [ -n "$PR_NUMBER" ]; then
          PR_LINE+=$'\nMerged PR: <https://github.com/'"${REPO}"'/pull/'"${PR_NUMBER}"'|#'"${PR_NUMBER}"'>'
        fi

        curl -X POST -H 'Content-type: application/json' \
          --data "$(jq -n \
            --arg pr_line "$PR_LINE" \
            --arg sha "$GITHUB_SHA" \
            '{
              "text": ":rocket: Deployment: devnet",
              "blocks": [
                {
                  "type": "header",
                  "text": {"type": "plain_text", "text": ":rocket: Deployment: devnet"}
                },
                {
                  "type": "section",
                  "text": {"type": "mrkdwn", "text": ("Service: *xdc*\nEnvironment: *devnet*\nVersion: `" + $sha + "`\n" + $pr_line)}
                }
              ]
            }')" \
          "$SLACK_WEBHOOK"