diff --git a/.github/actions/ansible.ansible-lint/action.yaml b/.github/actions/ansible.ansible-lint/action.yaml new file mode 100644 index 0000000..7806939 --- /dev/null +++ b/.github/actions/ansible.ansible-lint/action.yaml @@ -0,0 +1,105 @@ +name: Ansible - ansible-lint +description: Lint Ansible playbooks and roles with `ansible-lint`. On failure, the findings are added to the job summary. Requires the `ansible-lint` CLI on the `PATH`. + + +inputs: + target_dir: + required: false + default: ./ + description: "(Optional) The Ansible project directory to lint, where `.ansible-lint` and `ansible.cfg` live. Defaults to `./`." + requirements_file: + required: false + description: "(Optional) The path to a Galaxy requirements file, relative to the repository root (e.g. `ansible/requirements.yaml`). When set, its collections are installed outside the checkout and exposed to `ansible-lint` through `ANSIBLE_COLLECTIONS_PATH`, so they are resolvable but never linted. When omitted, `ansible-lint` installs a `requirements.yml` found in the project directory on its own." + +outputs: + skipped: + value: ${{ steps.target.outputs.skipped }} + description: "`true` when `target_dir` holds no YAML files and `ansible-lint` was not run. Empty otherwise." + # When the collection install fails, `ansible-lint` does not run, so the outputs come from the command that failed. + stdout: + value: ${{ steps.install-collections.outcome == 'failure' && steps.install-collections.outputs.stdout || steps.ansible-lint.outputs.stdout }} + description: "The STDOUT stream of the call to `ansible-lint`, or to `ansible-galaxy collection install` when it failed. Empty when skipped." + stderr: + value: ${{ steps.install-collections.outcome == 'failure' && steps.install-collections.outputs.stderr || steps.ansible-lint.outputs.stderr }} + description: "The STDERR stream of the call to `ansible-lint`, or to `ansible-galaxy collection install` when it failed. Empty when skipped." + exitcode: + value: ${{ steps.install-collections.outcome == 'failure' && steps.install-collections.outputs.exitcode || steps.ansible-lint.outputs.exitcode }} + description: "The exit code of the call to `ansible-lint`, or to `ansible-galaxy collection install` when it failed. Empty when skipped. The action still fails on a non-zero exit code, so use `continue-on-error: true` to inspect it." + + +runs: + using: composite + + steps: + - name: Resolve Target + id: target + shell: bash + env: + TARGET_DIR: ${{ inputs.target_dir }} + REQUIREMENTS_FILE: ${{ inputs.requirements_file }} + run: | + target_dir="${TARGET_DIR%/}" + target_dir="${target_dir:-.}" + echo "target_dir=$target_dir" >> "$GITHUB_OUTPUT" + + # `ansible-lint` exits 0 on a directory without YAML files, which would report a vacuous pass. + if [ -z "$(find "$target_dir" -path '*/.git' -prune -o -type f \( -name '*.yml' -o -name '*.yaml' \) -print -quit)" ]; then + echo "::notice::Skipping ansible-lint: no YAML files in $target_dir." + echo "skipped=true" >> "$GITHUB_OUTPUT" + exit 0 + fi + + # Collections go outside the checkout, so they resolve for linting but are never linted themselves. + if [ -n "$REQUIREMENTS_FILE" ]; then + echo "collections_path=$RUNNER_TEMP/ansible/collections" >> "$GITHUB_OUTPUT" + fi + + ansible-lint --version + + - name: Install Galaxy Collections + id: install-collections + if: steps.target.outputs.skipped != 'true' && inputs.requirements_file != '' + uses: tedilabs/github-actions/.github/actions/shell.run@main + env: + REQUIREMENTS_FILE: ${{ inputs.requirements_file }} + COLLECTIONS_PATH: ${{ steps.target.outputs.collections_path }} + with: + run: | + # Restrict the search path so collections already present elsewhere on the runner are not skipped. + ANSIBLE_COLLECTIONS_PATH="$COLLECTIONS_PATH" \ + ansible-galaxy collection install -r "$REQUIREMENTS_FILE" -p "$COLLECTIONS_PATH" + + - name: Add Failure Details to Job Summary + id: install-collections-summary + if: always() && steps.install-collections.outcome == 'failure' + uses: tedilabs/github-actions/.github/actions/github.step-summary@main + with: + title: "❌ ansible-galaxy collection install · ${{ inputs.requirements_file }}" + file: ${{ steps.install-collections.outputs.log_file }} + lang: text + + - name: Run ansible-lint + id: ansible-lint + if: steps.target.outputs.skipped != 'true' + uses: tedilabs/github-actions/.github/actions/shell.run@main + env: + COLLECTIONS_PATH: ${{ steps.target.outputs.collections_path }} + with: + # Run inside the project so `.ansible-lint`, `ansible.cfg`, and relative `roles_path` resolve against it. + working_directory: ${{ steps.target.outputs.target_dir }} + run: | + if [ -n "$COLLECTIONS_PATH" ]; then + export ANSIBLE_COLLECTIONS_PATH="$COLLECTIONS_PATH" + fi + + # Under GitHub Actions, `ansible-lint` emits workflow annotations on its own. + ansible-lint --nocolor + + - name: Add Failure Details to Job Summary + id: ansible-lint-summary + if: always() && steps.ansible-lint.outcome == 'failure' + uses: tedilabs/github-actions/.github/actions/github.step-summary@main + with: + title: "❌ ansible-lint · ${{ steps.target.outputs.target_dir }}" + file: ${{ steps.ansible-lint.outputs.log_file }} + lang: text diff --git a/.github/actions/packer.fmt/action.yaml b/.github/actions/packer.fmt/action.yaml new file mode 100644 index 0000000..8f12fa7 --- /dev/null +++ b/.github/actions/packer.fmt/action.yaml @@ -0,0 +1,76 @@ +name: Packer - Format +description: Check that Packer HCL templates are formatted with `packer fmt`. On failure, the diff is added to the job summary. Requires the `packer` CLI on the `PATH`. + + +inputs: + target_dir: + required: false + default: ./ + description: "(Optional) The directory to check formatting in. Defaults to `./`." + recursive: + required: false + default: "true" + description: "(Optional) Whether to also check subdirectories. Defaults to `true`." + +outputs: + skipped: + value: ${{ steps.target.outputs.skipped }} + description: "`true` when `target_dir` holds no Packer HCL files and `packer fmt` was not run. Empty otherwise." + stdout: + value: ${{ steps.fmt.outputs.stdout }} + description: "The STDOUT stream of the call to `packer fmt`. Empty when skipped." + stderr: + value: ${{ steps.fmt.outputs.stderr }} + description: "The STDERR stream of the call to `packer fmt`. Empty when skipped." + exitcode: + value: ${{ steps.fmt.outputs.exitcode }} + description: "The exit code of the call to `packer fmt`. Empty when skipped. The action still fails on a non-zero exit code, so use `continue-on-error: true` to inspect it." + + +runs: + using: composite + + steps: + - name: Resolve Target + id: target + shell: bash + env: + TARGET_DIR: ${{ inputs.target_dir }} + RECURSIVE: ${{ inputs.recursive }} + run: | + target_dir="${TARGET_DIR%/}" + target_dir="${target_dir:-.}" + echo "target_dir=$target_dir" >> "$GITHUB_OUTPUT" + + # `packer fmt` exits 0 on a directory without Packer HCL files, which would report a vacuous pass. + depth_args=() + [ "$RECURSIVE" = "true" ] || depth_args=(-maxdepth 1) + if [ -z "$(find "$target_dir" "${depth_args[@]}" -type f \( -name '*.pkr.hcl' -o -name '*.pkrvars.hcl' \) -print -quit)" ]; then + echo "::notice::Skipping packer fmt: no Packer HCL files in $target_dir." + echo "skipped=true" >> "$GITHUB_OUTPUT" + fi + + - name: Check Packer Format + id: fmt + if: steps.target.outputs.skipped != 'true' + uses: tedilabs/github-actions/.github/actions/shell.run@main + env: + TARGET_DIR: ${{ steps.target.outputs.target_dir }} + RECURSIVE: ${{ inputs.recursive }} + with: + run: | + args=(-check -diff) + if [ "$RECURSIVE" = "true" ]; then + args+=(-recursive) + fi + + packer fmt "${args[@]}" "$TARGET_DIR" + + - name: Add Failure Details to Job Summary + id: fmt-summary + if: always() && steps.fmt.outcome == 'failure' + uses: tedilabs/github-actions/.github/actions/github.step-summary@main + with: + title: "❌ packer fmt · ${{ steps.target.outputs.target_dir }}" + file: ${{ steps.fmt.outputs.log_file }} + lang: diff diff --git a/.github/actions/packer.validate/action.yaml b/.github/actions/packer.validate/action.yaml new file mode 100644 index 0000000..d8aced3 --- /dev/null +++ b/.github/actions/packer.validate/action.yaml @@ -0,0 +1,91 @@ +name: Packer - Validate +description: Install the required plugins of a Packer template directory with `packer init` and validate it with `packer validate`. On failure, the output is added to the job summary. Requires the `packer` CLI on the `PATH`. + + +inputs: + target_dir: + required: false + default: ./ + description: "(Optional) The Packer template directory to initialize and validate. Defaults to `./`." + github_token: + required: false + default: ${{ github.token }} + description: "(Optional) The GitHub token used by `packer init` to download plugins from GitHub without hitting the anonymous rate limit, exported as `PACKER_GITHUB_API_TOKEN`. Defaults to the automatically generated `github.token`." + +outputs: + skipped: + value: ${{ steps.target.outputs.skipped }} + description: "`true` when `target_dir` holds no Packer template files and neither `packer init` nor `packer validate` was run. Empty otherwise." + # When `packer init` fails, `packer validate` does not run, so the outputs come from the command that failed. + stdout: + value: ${{ steps.init.outcome == 'failure' && steps.init.outputs.stdout || steps.validate.outputs.stdout }} + description: "The STDOUT stream of the call to `packer validate`, or to `packer init` when it failed. Empty when skipped." + stderr: + value: ${{ steps.init.outcome == 'failure' && steps.init.outputs.stderr || steps.validate.outputs.stderr }} + description: "The STDERR stream of the call to `packer validate`, or to `packer init` when it failed. Empty when skipped." + exitcode: + value: ${{ steps.init.outcome == 'failure' && steps.init.outputs.exitcode || steps.validate.outputs.exitcode }} + description: "The exit code of the call to `packer validate`, or to `packer init` when it failed. Empty when skipped. The action still fails on a non-zero exit code, so use `continue-on-error: true` to inspect it." + + +runs: + using: composite + + steps: + - name: Resolve Target + id: target + shell: bash + env: + TARGET_DIR: ${{ inputs.target_dir }} + run: | + target_dir="${TARGET_DIR%/}" + target_dir="${target_dir:-.}" + echo "target_dir=$target_dir" >> "$GITHUB_OUTPUT" + + # `packer validate` fails on a directory without templates, which would report a failure for an empty target. + if [ -z "$(find "$target_dir" -maxdepth 1 -type f \( -name '*.pkr.hcl' -o -name '*.pkr.json' \) -print -quit)" ]; then + echo "::notice::Skipping packer validate: no Packer template files in $target_dir." + echo "skipped=true" >> "$GITHUB_OUTPUT" + exit 0 + fi + + packer version + + - name: Packer Init + id: init + if: steps.target.outputs.skipped != 'true' + uses: tedilabs/github-actions/.github/actions/shell.run@main + env: + PACKER_GITHUB_API_TOKEN: ${{ inputs.github_token }} + TARGET_DIR: ${{ steps.target.outputs.target_dir }} + with: + run: | + packer init "$TARGET_DIR" + + - name: Add Failure Details to Job Summary + id: init-summary + if: always() && steps.init.outcome == 'failure' + uses: tedilabs/github-actions/.github/actions/github.step-summary@main + with: + title: "❌ packer init · ${{ steps.target.outputs.target_dir }}" + file: ${{ steps.init.outputs.log_file }} + lang: text + + - name: Packer Validate + id: validate + if: steps.target.outputs.skipped != 'true' + uses: tedilabs/github-actions/.github/actions/shell.run@main + env: + TARGET_DIR: ${{ steps.target.outputs.target_dir }} + with: + run: | + packer validate "$TARGET_DIR" + + - name: Add Failure Details to Job Summary + id: validate-summary + if: always() && steps.validate.outcome == 'failure' + uses: tedilabs/github-actions/.github/actions/github.step-summary@main + with: + title: "❌ packer validate · ${{ steps.target.outputs.target_dir }}" + file: ${{ steps.validate.outputs.log_file }} + lang: text diff --git a/.github/workflows/ansible.integration.yaml b/.github/workflows/ansible.integration.yaml new file mode 100644 index 0000000..0c49ed1 --- /dev/null +++ b/.github/workflows/ansible.integration.yaml @@ -0,0 +1,86 @@ +name: Ansible - Integration + + +on: + workflow_call: + inputs: + runs_on: + description: > + JSON-encoded runs-on value. + Examples: + - '"ubuntu-latest"' + - '["self-hosted","linux","x64"]' + required: false + type: string + default: '"ubuntu-latest"' + + target_dir: + type: string + required: false + default: ./ + description: "(Optional) The Ansible project directory to lint, where `.ansible-lint` and `ansible.cfg` live. Defaults to `./`." + requirements_file: + type: string + required: false + description: "(Optional) The path to a Galaxy requirements file, relative to the repository root (e.g. `ansible/requirements.yaml`). When set, its collections are installed so `ansible-lint` can resolve them. When omitted, `ansible-lint` installs a `requirements.yml` found in the project directory on its own." + + python_version: + type: string + required: false + default: latest + description: "(Optional) The version of `python` to install when the repository does not pin one in `mise.toml` or `.tool-versions`. `ansible-lint` is installed into it with `pip`. Defaults to `latest`." + ansible_lint_version: + type: string + required: false + default: latest + description: "(Optional) The version of `ansible-lint` to install with `pip` (e.g. `25.1.3`). Defaults to `latest`." + + +jobs: + lint: + name: Lint (ansible-lint) + runs-on: ${{ fromJson(inputs.runs_on) }} + + steps: + - name: Checkout + id: checkout + uses: actions/checkout@v7 + + # Written to a throwaway global mise config, so the repository's own `mise.toml` / `.tool-versions` + # still take precedence while a self-hosted runner's real global config is left untouched. + - name: Set Default Tool Versions + id: default-tools + env: + PYTHON_VERSION: ${{ inputs.python_version }} + run: | + config_file="$RUNNER_TEMP/mise-defaults.toml" + cat > "$config_file" <> "$GITHUB_ENV" + + - name: Set up tools + id: setup-tools + uses: tedilabs/github-actions/.github/actions/mise.setup-tools@main + + - name: Install ansible-lint + id: install-ansible-lint + env: + ANSIBLE_LINT_VERSION: ${{ inputs.ansible_lint_version }} + run: | + package="ansible-lint" + if [ "$ANSIBLE_LINT_VERSION" != "latest" ]; then + package="ansible-lint==$ANSIBLE_LINT_VERSION" + fi + + python -m pip install --upgrade pip + python -m pip install "$package" + + - name: Lint (ansible-lint) + id: ansible-lint + uses: tedilabs/github-actions/.github/actions/ansible.ansible-lint@main + with: + target_dir: ${{ inputs.target_dir }} + requirements_file: ${{ inputs.requirements_file }} diff --git a/.github/workflows/packer.templates.integration.yaml b/.github/workflows/packer.templates.integration.yaml new file mode 100644 index 0000000..d54ec54 --- /dev/null +++ b/.github/workflows/packer.templates.integration.yaml @@ -0,0 +1,174 @@ +name: Packer Templates - Integration + + +on: + workflow_call: + inputs: + runs_on: + description: > + JSON-encoded runs-on value. + Examples: + - '"ubuntu-latest"' + - '["self-hosted","linux","x64"]' + required: false + type: string + default: '"ubuntu-latest"' + + paths: + type: string + required: false + default: | + builds/** + description: "(Optional) File and directory patterns used to detect changed Packer template directories, one per line. Defaults to `builds/**`." + paths_max_depth: + type: string + required: false + default: "2" + description: "(Optional) The maximum depth of the changed directories to check. For example, `builds/foo/source.pkr.hcl` with a max depth of `2` is checked as `builds/foo`. Defaults to `2`." + + packer_version: + type: string + required: false + default: latest + description: "(Optional) The version of `packer` to install when the repository does not pin one in `mise.toml` or `.tool-versions`. Defaults to `latest`." + aws_region: + type: string + required: false + default: us-east-1 + description: "(Optional) The region exported as `AWS_DEFAULT_REGION` so that Amazon builders without an explicit `region` pass `packer validate` on a runner with no AWS configuration. No credentials are needed. Defaults to `us-east-1`." + + fmt_enabled: + type: boolean + required: false + default: true + description: "(Optional) Whether to check formatting with `packer fmt`. Defaults to `true`." + validate_enabled: + type: boolean + required: false + default: true + description: "(Optional) Whether to run `packer init` and `packer validate`. Defaults to `true`." + + pr_comment_enabled: + type: boolean + required: false + default: true + description: "(Optional) Whether to post the integration report as a single sticky comment on pull requests. Requires the `pull-requests: write` permission on the caller. The report is always written to the job summary. Defaults to `true`." + + +jobs: + changed: + name: Detect Changed Directories + runs-on: ${{ fromJson(inputs.runs_on) }} + + outputs: + has_directories: ${{ steps.changed-dirs.outputs.has_directories }} + directories: ${{ steps.changed-dirs.outputs.directories }} + + steps: + - name: Checkout + id: checkout + uses: actions/checkout@v7 + with: + fetch-depth: 0 + + - name: Get Changed Directories + id: changed-dirs + uses: tedilabs/github-actions/.github/actions/git.changed-dirs@main + with: + paths: ${{ inputs.paths }} + max_depth: ${{ inputs.paths_max_depth }} + + + lint: + name: Lint (${{ matrix.path }}) + needs: + - changed + if: needs.changed.outputs.has_directories == 'true' + runs-on: ${{ fromJson(inputs.runs_on) }} + + strategy: + fail-fast: false + matrix: + path: ${{ fromJson(needs.changed.outputs.directories) }} + + env: + AWS_DEFAULT_REGION: ${{ inputs.aws_region }} + + steps: + - name: Checkout + id: checkout + uses: actions/checkout@v7 + + # Written to a throwaway global mise config, so the repository's own `mise.toml` / `.tool-versions` + # still take precedence while a self-hosted runner's real global config is left untouched. + - name: Set Default Tool Versions + id: default-tools + env: + PACKER_VERSION: ${{ inputs.packer_version }} + run: | + config_file="$RUNNER_TEMP/mise-defaults.toml" + cat > "$config_file" <> "$GITHUB_ENV" + + - name: Set up tools + id: setup-tools + uses: tedilabs/github-actions/.github/actions/mise.setup-tools@main + + - name: Check Format + id: fmt + if: inputs.fmt_enabled + continue-on-error: true + uses: tedilabs/github-actions/.github/actions/packer.fmt@main + with: + target_dir: ${{ matrix.path }} + + - name: Validate + id: validate + if: inputs.validate_enabled + continue-on-error: true + uses: tedilabs/github-actions/.github/actions/packer.validate@main + with: + target_dir: ${{ matrix.path }} + + - name: Collect Results + id: results + if: always() + uses: tedilabs/github-actions/.github/actions/github.matrix-report@main + with: + mode: collect + id: ${{ matrix.path }} + id_label: Directory + artifact_prefix: packer-integration + job_status: ${{ job.status }} + # An empty value keeps a check that is turned off out of the report; a check that ran but had + # nothing to do reports `skipped`. + results: | + { + "fmt": "${{ inputs.fmt_enabled && (steps.fmt.outputs.skipped == 'true' && 'skipped' || steps.fmt.outcome) || '' }}", + "validate": "${{ inputs.validate_enabled && (steps.validate.outputs.skipped == 'true' && 'skipped' || steps.validate.outcome) || '' }}" + } + + + report: + name: Report + needs: + - changed + - lint + if: always() && needs.changed.outputs.has_directories == 'true' + runs-on: ${{ fromJson(inputs.runs_on) }} + + steps: + - name: Publish Report + id: report + uses: tedilabs/github-actions/.github/actions/github.matrix-report@main + with: + mode: publish + id_label: Directory + artifact_prefix: packer-integration + title: Packer Integration + pr_comment_enabled: ${{ inputs.pr_comment_enabled }} + pr_comment_marker: packer-integration diff --git a/.github/workflows/test.packer-ansible-checks.yaml b/.github/workflows/test.packer-ansible-checks.yaml new file mode 100644 index 0000000..c5bc938 --- /dev/null +++ b/.github/workflows/test.packer-ansible-checks.yaml @@ -0,0 +1,139 @@ +name: Test - Packer and Ansible checks + + +on: + pull_request: + branches: + - "**" + + +jobs: + test: + name: Test + runs-on: ubuntu-latest + + steps: + - name: Checkout + id: checkout + uses: actions/checkout@v7 + + - name: Set up tools + id: setup-tools + uses: tedilabs/github-actions/.github/actions/mise.setup-tools@main + with: + mise_toml: | + [tools] + packer = "latest" + python = "3.12" + + - name: Install ansible-lint + id: install-ansible-lint + run: python -m pip install --quiet ansible-lint + + - name: Prepare Fixtures + id: fixtures + run: | + mkdir -p "$RUNNER_TEMP/pk/ok" "$RUNNER_TEMP/pk/bad" "$RUNNER_TEMP/pk/empty" "$RUNNER_TEMP/an/ok" "$RUNNER_TEMP/an/bad" "$RUNNER_TEMP/an/empty" + cat > "$RUNNER_TEMP/pk/ok/build.pkr.hcl" <<'HCL' + source "null" "example" { + communicator = "none" + } + + build { + sources = ["source.null.example"] + } + HCL + printf 'source "null" "example" {\n communicator = "none"\n}\n\nbuild {\n sources = ["source.null.example"]\n}\n' > "$RUNNER_TEMP/pk/bad/build.pkr.hcl" + printf -- '---\n- name: Example\n hosts: localhost\n gather_facts: false\n tasks:\n - name: Say hello\n ansible.builtin.debug:\n msg: hello\n' > "$RUNNER_TEMP/an/ok/playbook.yml" + printf -- '---\n- hosts: localhost\n tasks:\n - debug: msg=hello\n' > "$RUNNER_TEMP/an/bad/playbook.yml" + + - name: packer fmt (formatted) + id: fmt-ok + continue-on-error: true + uses: tedilabs/github-actions/.github/actions/packer.fmt@feat/packer-workflows + with: + target_dir: ${{ runner.temp }}/pk/ok/ + + - name: packer fmt (unformatted) + id: fmt-bad + continue-on-error: true + uses: tedilabs/github-actions/.github/actions/packer.fmt@feat/packer-workflows + with: + target_dir: ${{ runner.temp }}/pk/bad + + - name: packer fmt (empty) + id: fmt-empty + continue-on-error: true + uses: tedilabs/github-actions/.github/actions/packer.fmt@feat/packer-workflows + with: + target_dir: ${{ runner.temp }}/pk/empty + + - name: packer validate (ok) + id: validate-ok + continue-on-error: true + uses: tedilabs/github-actions/.github/actions/packer.validate@feat/packer-workflows + with: + target_dir: ${{ runner.temp }}/pk/ok + + - name: packer validate (empty) + id: validate-empty + continue-on-error: true + uses: tedilabs/github-actions/.github/actions/packer.validate@feat/packer-workflows + with: + target_dir: ${{ runner.temp }}/pk/empty + + - name: ansible-lint (ok) + id: lint-ok + continue-on-error: true + uses: tedilabs/github-actions/.github/actions/ansible.ansible-lint@feat/packer-workflows + with: + target_dir: ${{ runner.temp }}/an/ok/ + + - name: ansible-lint (bad) + id: lint-bad + continue-on-error: true + uses: tedilabs/github-actions/.github/actions/ansible.ansible-lint@feat/packer-workflows + with: + target_dir: ${{ runner.temp }}/an/bad + + - name: ansible-lint (empty) + id: lint-empty + continue-on-error: true + uses: tedilabs/github-actions/.github/actions/ansible.ansible-lint@feat/packer-workflows + with: + target_dir: ${{ runner.temp }}/an/empty + + - name: Assert + id: assert + env: + FMT_OK: ${{ steps.fmt-ok.outcome }}/${{ steps.fmt-ok.outputs.exitcode }}/${{ steps.fmt-ok.outputs.skipped }} + FMT_BAD: ${{ steps.fmt-bad.outcome }}/${{ steps.fmt-bad.outputs.exitcode }}/${{ steps.fmt-bad.outputs.skipped }} + FMT_BAD_STDOUT: ${{ steps.fmt-bad.outputs.stdout }} + FMT_EMPTY: ${{ steps.fmt-empty.outcome }}/${{ steps.fmt-empty.outputs.exitcode }}/${{ steps.fmt-empty.outputs.skipped }} + VALIDATE_OK: ${{ steps.validate-ok.outcome }}/${{ steps.validate-ok.outputs.exitcode }}/${{ steps.validate-ok.outputs.skipped }} + VALIDATE_OK_STDOUT: ${{ steps.validate-ok.outputs.stdout }} + VALIDATE_EMPTY: ${{ steps.validate-empty.outcome }}/${{ steps.validate-empty.outputs.exitcode }}/${{ steps.validate-empty.outputs.skipped }} + LINT_OK: ${{ steps.lint-ok.outcome }}/${{ steps.lint-ok.outputs.exitcode }}/${{ steps.lint-ok.outputs.skipped }} + LINT_BAD: ${{ steps.lint-bad.outcome }}/${{ steps.lint-bad.outputs.exitcode }}/${{ steps.lint-bad.outputs.skipped }} + LINT_BAD_OUTPUT: ${{ steps.lint-bad.outputs.stdout }}${{ steps.lint-bad.outputs.stderr }} + LINT_EMPTY: ${{ steps.lint-empty.outcome }}/${{ steps.lint-empty.outputs.exitcode }}/${{ steps.lint-empty.outputs.skipped }} + run: | + for v in FMT_OK FMT_BAD FMT_EMPTY VALIDATE_OK VALIDATE_EMPTY LINT_OK LINT_BAD LINT_EMPTY; do + printf '%s=<%s>\n' "$v" "${!v}" + done + printf 'FMT_BAD_STDOUT=<%s>\nVALIDATE_OK_STDOUT=<%s>\nLINT_BAD_OUTPUT=<%s>\n' "$FMT_BAD_STDOUT" "$VALIDATE_OK_STDOUT" "$(printf '%s' "$LINT_BAD_OUTPUT" | head -c 400)" + + failed=0 + check() { if [ "$1" = "$2" ]; then echo "PASS $3"; else echo "FAIL $3: got '$1', want '$2'"; failed=1; fi; } + check "$FMT_OK" "success/0/" "packer fmt passes on a formatted template (trailing slash honored)" + check "$FMT_BAD" "failure/3/" "packer fmt fails with exit 3 on an unformatted template" + case "$FMT_BAD_STDOUT" in *communicator*) echo "PASS packer fmt diff is in stdout";; *) echo "FAIL packer fmt diff missing from stdout"; failed=1;; esac + check "$FMT_EMPTY" "success//true" "packer fmt skips an empty directory" + check "$VALIDATE_OK" "success/0/" "packer init and validate pass on a null-builder template" + case "$VALIDATE_OK_STDOUT" in *"configuration is valid"*) echo "PASS packer validate stdout is captured";; *) echo "FAIL packer validate stdout missing"; failed=1;; esac + check "$VALIDATE_EMPTY" "success//true" "packer validate skips an empty directory" + check "$LINT_OK" "success/0/" "ansible-lint passes on a clean playbook (trailing slash honored)" + check "$LINT_BAD" "failure/2/" "ansible-lint fails with exit 2 on a playbook with findings" + case "$LINT_BAD_OUTPUT" in *name*) echo "PASS ansible-lint findings are in the captured output";; *) echo "FAIL ansible-lint findings missing"; failed=1;; esac + check "$LINT_EMPTY" "success//true" "ansible-lint skips a directory without YAML files" + exit "$failed"