more pkgs: no more package bumping #903
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright (c) 2025, Zededa, Inc. | |
| # SPDX-License-Identifier: Apache-2.0 | |
| --- | |
| name: Rerun CI | |
| on: # yamllint disable-line rule:truthy | |
| issue_comment: | |
| types: [created] | |
| jobs: | |
| rerun-workflows: | |
| if: | | |
| github.event.issue.pull_request && startsWith(github.event.comment.body, '/rerun') | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: write | |
| issues: read | |
| pull-requests: read | |
| contents: read | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Parse CODEOWNERS to get allowed users | |
| run: | | |
| CODEOWNERS=".github/CODEOWNERS" | |
| awk '{for(i=1;i<=NF;i++) if($i ~ /^@/) print substr($i,2)}' "$CODEOWNERS" | sort -u > allowed_users.txt | |
| - name: Check if comment author is allowed | |
| run: | | |
| COMMENT_USER="${{ github.event.comment.user.login }}" | |
| echo "User: $COMMENT_USER" | |
| if ! grep -Fxq "$COMMENT_USER" allowed_users.txt; then | |
| echo "User $COMMENT_USER is not allowed to rerun CI." >&2 | |
| exit 1 | |
| fi | |
| - name: Set run mode (red or yellow) | |
| id: mode | |
| run: | | |
| BODY="${{ github.event.comment.body }}" | |
| if [[ "$BODY" =~ ^/rerun[[:space:]]+yellow ]]; then | |
| echo "mode=yellow" >> $GITHUB_OUTPUT | |
| elif [[ "$BODY" =~ ^/rerun[[:space:]]+red ]]; then | |
| echo "mode=red" >> $GITHUB_OUTPUT | |
| else | |
| echo "Unknown rerun mode" >&2 | |
| exit 1 | |
| fi | |
| - name: Gather PR branch and SHA | |
| id: prinfo | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| PR_NUMBER="${{ github.event.issue.number }}" | |
| REPO="${{ github.repository }}" | |
| BRANCH=$(gh pr view "$PR_NUMBER" --repo "$REPO" --json headRefName -q .headRefName) | |
| SHA=$(gh pr view "$PR_NUMBER" --repo "$REPO" --json headRefOid -q .headRefOid) | |
| echo "branch=$BRANCH" >> $GITHUB_OUTPUT | |
| echo "sha=$SHA" >> $GITHUB_OUTPUT | |
| - name: Find and act on workflow runs for this PR's latest commit | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| BRANCH: ${{ steps.prinfo.outputs.branch }} | |
| SHA: ${{ steps.prinfo.outputs.sha }} | |
| REPO: ${{ github.repository }} | |
| MODE: ${{ steps.mode.outputs.mode }} | |
| run: | | |
| # Get all runs for the branch (could be for old commits, so we'll filter below) | |
| RUNS=$(gh run list --repo "$REPO" --branch "$BRANCH" --json databaseId,status,conclusion,headSha,workflowName,displayTitle,event) | |
| # Find Eden Runner run ID for this commit. We assume the PR already has an Eden Runner run as a status check (added by Eden Trusted WF) | |
| EDEN_RUNNER_RUN=$(gh api "repos/$REPO/commits/$SHA/statuses" | jq -r \ | |
| '.[] | select(.context | contains("Eden Runner")) | .target_url' | \ | |
| grep -oE '/runs/[0-9]+' | awk -F'/' '{print $3}' | head -n 1 ) | |
| # Getting the status of the Eden Runner run if it exists | |
| EDEN_RUNNER_STATUS=$(gh run view "$EDEN_RUNNER_RUN" --repo "$REPO" --json status -q .status 2>/dev/null || echo "not_found") | |
| # Cancel all in-progress runs for this commit if requested | |
| if [[ "$MODE" == "yellow" ]]; then | |
| echo "Cancelling all in-progress or queued runs for commit $SHA on branch $BRANCH..." | |
| echo "$RUNS" | jq -r \ | |
| '.[] | select(.headSha == env.SHA and .status != "completed") | .databaseId' | while read -r run_id; do | |
| [ -z "$run_id" ] && continue | |
| echo "Canceling run $run_id" | |
| gh run cancel "$run_id" --repo "$REPO" | |
| done | |
| # Poll (with short backoff) until all in-progress/queued runs for this commit are done | |
| # Max 15 iterations, summing to 120 seconds | |
| for i in {1..15}; do | |
| sleep $((i)) | |
| RUNS_LEFT=$(gh run list --repo "$REPO" --branch "$BRANCH" --json databaseId,status,headSha | jq \ | |
| '[.[] | select(.headSha == env.SHA and .status != "completed")] | length') | |
| echo "Still running: $RUNS_LEFT" | |
| [ "$RUNS_LEFT" -eq 0 ] && break | |
| done | |
| # Cancel the Eden Runner run if it exists and is in-progress | |
| if [ -n "$EDEN_RUNNER_RUN" ] && [ "$EDEN_RUNNER_STATUS" != "completed" ]; then | |
| echo "Eden Runner run $EDEN_RUNNER_RUN is in-progress, cancelling it..." | |
| gh run cancel "$EDEN_RUNNER_RUN" --repo "$REPO" | |
| else | |
| echo "Eden Runner run $EDEN_RUNNER_RUN is not in-progress or does not exist." | |
| fi | |
| # Wait for the Eden Runner run to be fully cancelled | |
| for i in {1..15}; do | |
| sleep $((i)) | |
| # Check if the Eden Runner run is still in-progress | |
| EDEN_RUNNER_STATUS=$(gh run view "$EDEN_RUNNER_RUN" --repo "$REPO" --json status -q .status 2>/dev/null || echo "not_found") | |
| if [ "$EDEN_RUNNER_STATUS" == "completed" ]; then | |
| echo "Eden Runner run $EDEN_RUNNER_RUN is now completed." | |
| break | |
| elif [ "$EDEN_RUNNER_STATUS" == "not_found" ]; then | |
| echo "Eden Runner run $EDEN_RUNNER_RUN not found, assuming it was cancelled." | |
| break | |
| else | |
| echo "Waiting for Eden Runner run $EDEN_RUNNER_RUN to complete..." | |
| fi | |
| done | |
| # Refresh RUNS after cancellation! | |
| RUNS=$(gh run list --repo "$REPO" --branch "$BRANCH" --json databaseId,status,conclusion,headSha,workflowName,displayTitle,event) | |
| fi | |
| # Now rerun all runs for this commit that are completed and not successful | |
| echo "$RUNS" | jq -r \ | |
| '.[] | select(.headSha == env.SHA and .status == "completed" and (.conclusion != "success" and .conclusion != "skipped")) | .databaseId' \ | |
| | while read -r run_id; do | |
| [ -z "$run_id" ] && continue | |
| echo "Re-running failed/canceled run $run_id" | |
| gh run rerun "$run_id" --repo "$REPO" | |
| done | |
| # Rerun the Eden Runner run if it exists | |
| if [ -n "$EDEN_RUNNER_RUN" ]; then | |
| echo "Re-running Eden Runner run $EDEN_RUNNER_RUN" | |
| gh run rerun "$EDEN_RUNNER_RUN" --repo "$REPO" | |
| else | |
| echo "No Eden Runner run found for commit $SHA" | |
| fi |