diff --git a/.github/workflows/release-build-rc.yml b/.github/workflows/release-build-rc.yml index a645c8d8007e..8e33a83952fe 100644 --- a/.github/workflows/release-build-rc.yml +++ b/.github/workflows/release-build-rc.yml @@ -39,47 +39,47 @@ jobs: RELEASE_TAG=$(validate_stable_tag ${{ inputs.release_tag }}) echo "release_tag=${RELEASE_TAG}" >> $GITHUB_OUTPUT - build-polkadot-binary: - needs: [validate-inputs] - if: ${{ inputs.binary == 'polkadot' || inputs.binary == 'all' }} - uses: "./.github/workflows/release-reusable-rc-buid.yml" - with: - binary: '["polkadot", "polkadot-prepare-worker", "polkadot-execute-worker"]' - package: polkadot - release_tag: ${{ needs.validate-inputs.outputs.release_tag }} - secrets: - PGP_KMS_KEY: ${{ secrets.PGP_KMS_KEY }} - PGP_KMS_HASH: ${{ secrets.PGP_KMS_HASH }} - AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} - AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} - AWS_RELEASE_ACCESS_KEY_ID: ${{ secrets.AWS_RELEASE_ACCESS_KEY_ID }} - AWS_RELEASE_SECRET_ACCESS_KEY: ${{ secrets.AWS_RELEASE_SECRET_ACCESS_KEY }} - permissions: - id-token: write - attestations: write - contents: read - - build-polkadot-parachain-binary: - needs: [validate-inputs] - if: ${{ inputs.binary == 'polkadot-parachain' || inputs.binary == 'all' }} - uses: "./.github/workflows/release-reusable-rc-buid.yml" - with: - binary: '["polkadot-parachain"]' - package: "polkadot-parachain-bin" - release_tag: ${{ needs.validate-inputs.outputs.release_tag }} - secrets: - PGP_KMS_KEY: ${{ secrets.PGP_KMS_KEY }} - PGP_KMS_HASH: ${{ secrets.PGP_KMS_HASH }} - AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} - AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} - AWS_RELEASE_ACCESS_KEY_ID: ${{ secrets.AWS_RELEASE_ACCESS_KEY_ID }} - AWS_RELEASE_SECRET_ACCESS_KEY: ${{ secrets.AWS_RELEASE_SECRET_ACCESS_KEY }} - permissions: - id-token: write - attestations: write - contents: read + # build-polkadot-binary: + # needs: [validate-inputs] + # if: ${{ inputs.binary == 'polkadot' || inputs.binary == 'all' }} + # uses: "./.github/workflows/release-reusable-rc-buid.yml" + # with: + # binary: '["polkadot", "polkadot-prepare-worker", "polkadot-execute-worker"]' + # package: polkadot + # release_tag: ${{ needs.validate-inputs.outputs.release_tag }} + # secrets: + # PGP_KMS_KEY: ${{ secrets.PGP_KMS_KEY }} + # PGP_KMS_HASH: ${{ secrets.PGP_KMS_HASH }} + # AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} + # AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} + # AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} + # AWS_RELEASE_ACCESS_KEY_ID: ${{ secrets.AWS_RELEASE_ACCESS_KEY_ID }} + # AWS_RELEASE_SECRET_ACCESS_KEY: ${{ secrets.AWS_RELEASE_SECRET_ACCESS_KEY }} + # permissions: + # id-token: write + # attestations: write + # contents: read + # + # build-polkadot-parachain-binary: + # needs: [validate-inputs] + # if: ${{ inputs.binary == 'polkadot-parachain' || inputs.binary == 'all' }} + # uses: "./.github/workflows/release-reusable-rc-buid.yml" + # with: + # binary: '["polkadot-parachain"]' + # package: "polkadot-parachain-bin" + # release_tag: ${{ needs.validate-inputs.outputs.release_tag }} + # secrets: + # PGP_KMS_KEY: ${{ secrets.PGP_KMS_KEY }} + # PGP_KMS_HASH: ${{ secrets.PGP_KMS_HASH }} + # AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} + # AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} + # AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} + # AWS_RELEASE_ACCESS_KEY_ID: ${{ secrets.AWS_RELEASE_ACCESS_KEY_ID }} + # AWS_RELEASE_SECRET_ACCESS_KEY: ${{ secrets.AWS_RELEASE_SECRET_ACCESS_KEY }} + # permissions: + # id-token: write + # attestations: write + # contents: read build-polkadot-macos-binary: needs: [validate-inputs] diff --git a/.github/workflows/release-reusable-rc-buid.yml b/.github/workflows/release-reusable-rc-buid.yml index fa94286b299c..d05e0084a71b 100644 --- a/.github/workflows/release-reusable-rc-buid.yml +++ b/.github/workflows/release-reusable-rc-buid.yml @@ -242,64 +242,64 @@ jobs: path: /artifacts/${{ matrix.binaries }} - build-polkadot-deb-package: - if: ${{ inputs.package == 'polkadot' }} - needs: [build-rc] - runs-on: ubuntu-latest - - steps: - - name: Checkout sources - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 - with: - ref: ${{ inputs.release_tag }} - fetch-depth: 0 - - - name: Download artifacts - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 - with: - path: target/production - merge-multiple: true - - - name: Build polkadot deb package - shell: bash - run: | - . "${GITHUB_WORKSPACE}"/.github/scripts/common/lib.sh - VERSION=$(get_polkadot_node_version_from_code) - . "${GITHUB_WORKSPACE}"/.github/scripts/release/build-deb.sh ${{ inputs.package }} ${VERSION} - - - name: Generate artifact attestation - uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3 - with: - subject-path: target/production/*.deb - - - name: Upload ${{inputs.package }} artifacts - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 - with: - name: ${{ inputs.package }} - path: target/production - overwrite: true - - upload-polkadot-artifacts-to-s3: - if: ${{ inputs.package == 'polkadot' }} - needs: [build-polkadot-deb-package] - uses: ./.github/workflows/release-reusable-s3-upload.yml - with: - package: ${{ inputs.package }} - release_tag: ${{ inputs.release_tag }} - secrets: - AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} - AWS_RELEASE_ACCESS_KEY_ID: ${{ secrets.AWS_RELEASE_ACCESS_KEY_ID }} - AWS_RELEASE_SECRET_ACCESS_KEY: ${{ secrets.AWS_RELEASE_SECRET_ACCESS_KEY }} - - - upload-polkadot-parachain-artifacts-to-s3: - if: ${{ inputs.package == 'polkadot-parachain-bin' }} - needs: [build-rc] - uses: ./.github/workflows/release-reusable-s3-upload.yml - with: - package: polkadot-parachain - release_tag: ${{ inputs.release_tag }} - secrets: - AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} - AWS_RELEASE_ACCESS_KEY_ID: ${{ secrets.AWS_RELEASE_ACCESS_KEY_ID }} - AWS_RELEASE_SECRET_ACCESS_KEY: ${{ secrets.AWS_RELEASE_SECRET_ACCESS_KEY }} + # build-polkadot-deb-package: + # if: ${{ inputs.package == 'polkadot' }} + # needs: [build-rc] + # runs-on: ubuntu-latest + # + # steps: + # - name: Checkout sources + # uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + # with: + # ref: ${{ inputs.release_tag }} + # fetch-depth: 0 + # + # - name: Download artifacts + # uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 + # with: + # path: target/production + # merge-multiple: true + # + # - name: Build polkadot deb package + # shell: bash + # run: | + # . "${GITHUB_WORKSPACE}"/.github/scripts/common/lib.sh + # VERSION=$(get_polkadot_node_version_from_code) + # . "${GITHUB_WORKSPACE}"/.github/scripts/release/build-deb.sh ${{ inputs.package }} ${VERSION} + # + # - name: Generate artifact attestation + # uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3 + # with: + # subject-path: target/production/*.deb + # + # - name: Upload ${{inputs.package }} artifacts + # uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + # with: + # name: ${{ inputs.package }} + # path: target/production + # overwrite: true + # + # upload-polkadot-artifacts-to-s3: + # if: ${{ inputs.package == 'polkadot' }} + # needs: [build-polkadot-deb-package] + # uses: ./.github/workflows/release-reusable-s3-upload.yml + # with: + # package: ${{ inputs.package }} + # release_tag: ${{ inputs.release_tag }} + # secrets: + # AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} + # AWS_RELEASE_ACCESS_KEY_ID: ${{ secrets.AWS_RELEASE_ACCESS_KEY_ID }} + # AWS_RELEASE_SECRET_ACCESS_KEY: ${{ secrets.AWS_RELEASE_SECRET_ACCESS_KEY }} + # + # + # upload-polkadot-parachain-artifacts-to-s3: + # if: ${{ inputs.package == 'polkadot-parachain-bin' }} + # needs: [build-rc] + # uses: ./.github/workflows/release-reusable-s3-upload.yml + # with: + # package: polkadot-parachain + # release_tag: ${{ inputs.release_tag }} + # secrets: + # AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} + # AWS_RELEASE_ACCESS_KEY_ID: ${{ secrets.AWS_RELEASE_ACCESS_KEY_ID }} + # AWS_RELEASE_SECRET_ACCESS_KEY: ${{ secrets.AWS_RELEASE_SECRET_ACCESS_KEY }}