prerelease_canaries.yml

name: . 🐤 Canaries

on:
  workflow_dispatch:
    inputs:
      tag:
        description: 'Tag to test'
        required: true
      linux:
        description: '🐧 Should create canaries for Linux?'
        type: boolean
        default: true
        required: false
      macos:
        description: '🍏 Should create canaries for MacOS?'
        type: boolean
        default: true
        required: false
      windows:
        description: '🪟 Should create canaries for Windows?'
        type: boolean
        default: true
        required: false
      prune:
        description: '💥 Should prune previous canaries?'
        type: boolean
        default: true
        required: false
      alerts:
        description: '🚨 Should create alerts?'
        type: boolean
        default: true
        required: false

permissions:
  id-token: write

jobs:
  canaries-windows:
    if: ${{ github.event.inputs.windows == 'true' }}
    uses: ./.github/workflows/component_canaries.yml
    with:
      PLATFORM: "windows"
      TAG: ${{ github.event.inputs.tag }}
    secrets:
      AWS_VPC_SUBNET: ${{secrets.AWS_VPC_SUBNET}}
      CROWDSTRIKE_CLIENT_ID: ${{secrets.CROWDSTRIKE_CLIENT_ID}}
      CROWDSTRIKE_CLIENT_SECRET: ${{secrets.CROWDSTRIKE_CLIENT_SECRET}}
      CROWDSTRIKE_CUSTOMER_ID: ${{secrets.CROWDSTRIKE_CUSTOMER_ID}}

  canaries-linux:
    if: ${{ github.event.inputs.linux == 'true' }}
    uses: ./.github/workflows/component_canaries.yml
    with:
      PLATFORM: "linux"
      TAG: ${{ github.event.inputs.tag }}
    secrets:
      AWS_VPC_SUBNET: ${{secrets.AWS_VPC_SUBNET}}
      CROWDSTRIKE_CLIENT_ID: ${{secrets.CROWDSTRIKE_CLIENT_ID}}
      CROWDSTRIKE_CLIENT_SECRET: ${{secrets.CROWDSTRIKE_CLIENT_SECRET}}
      CROWDSTRIKE_CUSTOMER_ID: ${{secrets.CROWDSTRIKE_CUSTOMER_ID}}

  canaries-macos:
    if: ${{ github.event.inputs.macos == 'true' }}
    uses: ./.github/workflows/component_canaries.yml
    with:
      PLATFORM: "macos"
      TAG: ${{ github.event.inputs.tag }}
    secrets:
      AWS_VPC_SUBNET: ${{secrets.AWS_VPC_SUBNET}}
      CROWDSTRIKE_CLIENT_ID: ${{secrets.CROWDSTRIKE_CLIENT_ID}}
      CROWDSTRIKE_CLIENT_SECRET: ${{secrets.CROWDSTRIKE_CLIENT_SECRET}}
      CROWDSTRIKE_CUSTOMER_ID: ${{secrets.CROWDSTRIKE_CUSTOMER_ID}}

  get_previous_tag:
    runs-on: ubuntu-20.04
    # Map a step output to a job output
    outputs:
      previous_tag: ${{ steps.previous_tag_step.outputs.PREVIOUS_TAG }}
    steps:
      - id: previous_tag_step
        run: .github/workflows/scripts/previous_version.sh ${{ inputs.TAG }} >> "$GITHUB_OUTPUT"

  prune-previous-canaries-linux:
    needs: get_previous_tag
    if: ${{ github.event.inputs.prune == 'true' && github.event.inputs.linux == 'true' }}
    uses: ./.github/workflows/component_canaries_prune.yml
    with:
      PLATFORM: "linux"
      TAG: ${{ needs.get_previous_tag.outputs.previous_tag }}
    secrets:
      AWS_VPC_SUBNET: ${{secrets.AWS_VPC_SUBNET}}

  prune-previous-canaries-windows:
    needs: get_previous_tag
    if: ${{ github.event.inputs.prune == 'true' && github.event.inputs.windows == 'true' }}
    uses: ./.github/workflows/component_canaries_prune.yml
    with:
      PLATFORM: "windows"
      TAG: ${{ needs.get_previous_tag.outputs.previous_tag }}
    secrets:
      AWS_VPC_SUBNET: ${{secrets.AWS_VPC_SUBNET}}

  canary-alerts:
    if: ${{ github.event.inputs.alerts == 'true' }}
    uses: ./.github/workflows/component_canary_alerts.yml
    with:
      TAG: ${{ github.event.inputs.tag }}
    secrets:
      AWS_VPC_SUBNET: ${{secrets.AWS_VPC_SUBNET}}