ipsec: Safely delete Xfrm state #54666
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Go Related Checks | |
| # Any change in triggers needs to be reflected in the concurrency group. | |
| on: | |
| pull_request: {} | |
| push: | |
| branches: | |
| - main | |
| - ft/main/** | |
| # Add this workflow to be triggered by merge queue events | |
| merge_group: | |
| permissions: read-all | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.event.after || github.event.merge_group && github.run_id }} | |
| cancel-in-progress: ${{ !github.event.merge_group }} | |
| jobs: | |
| go-mod: | |
| name: Check Go Modules | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Install Go | |
| uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 | |
| with: | |
| # renovate: datasource=golang-version depName=go | |
| go-version: 1.22.3 | |
| - name: Checkout code | |
| uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 | |
| with: | |
| persist-credentials: false | |
| - name: Check module vendoring | |
| run: | | |
| go mod tidy | |
| go mod vendor | |
| test -z "$(git status --porcelain)" || (echo "please run 'go mod tidy && go mod vendor', and submit your changes"; exit 1) | |
| license-check: | |
| name: Check third party dependencies licenses | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Install Go | |
| uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 | |
| with: | |
| # renovate: datasource=golang-version depName=go | |
| go-version: 1.22.3 | |
| - name: Checkout code | |
| uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 | |
| with: | |
| persist-credentials: false | |
| - name: Check for unauthorized dependencies | |
| run: go run ./tools/licensecheck ./... 2>/dev/null | |
| golangci: | |
| name: Lint Source Code | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Collect Workflow Telemetry | |
| uses: catchpoint/workflow-telemetry-action@94c3c3d9567a0205de6da68a76c428ce4e769af1 # v2.0.0 | |
| with: | |
| comment_on_pr: false | |
| - name: Install Go | |
| uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 | |
| with: | |
| # renovate: datasource=golang-version depName=go | |
| go-version: 1.22.3 | |
| - name: Checkout code | |
| uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 | |
| with: | |
| persist-credentials: false | |
| - name: Run golangci-lint | |
| uses: golangci/golangci-lint-action@38e1018663fa5173f3968ea0777460d3de38f256 # v5.3.0 | |
| with: | |
| # renovate: datasource=docker depName=golangci/golangci-lint | |
| version: v1.57.2 | |
| skip-cache: true | |
| args: "--out-${NO_FUTURE}format colored-line-number --verbose --modules-download-mode=vendor" | |
| precheck: | |
| runs-on: ubuntu-latest | |
| name: Precheck | |
| steps: | |
| - name: Install Go | |
| uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 | |
| with: | |
| # renovate: datasource=golang-version depName=go | |
| go-version: 1.22.3 | |
| - name: Checkout code | |
| uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 | |
| with: | |
| persist-credentials: false | |
| # hard-code the path instead of using ${{ github.repository }} to make sure it works for forked repo as well | |
| path: src/github.com/cilium/cilium | |
| - name: Go code prechecks | |
| run: | | |
| cd src/github.com/cilium/cilium | |
| make precheck | |
| generate-api: | |
| runs-on: ubuntu-latest | |
| name: Generate API | |
| steps: | |
| - name: Install Go | |
| uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 | |
| with: | |
| # renovate: datasource=golang-version depName=go | |
| go-version: 1.22.3 | |
| - name: Checkout code | |
| uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 | |
| with: | |
| persist-credentials: false | |
| # hard-code the path instead of using ${{ github.repository }} to make sure it works for forked repo as well | |
| path: src/github.com/cilium/cilium | |
| - name: Check api generated files | |
| run: | | |
| cd src/github.com/cilium/cilium | |
| contrib/scripts/check-api-code-gen.sh | |
| generate-k8s-api: | |
| runs-on: ubuntu-latest | |
| name: Generate k8s API | |
| steps: | |
| - name: Install Go | |
| uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 | |
| with: | |
| # renovate: datasource=golang-version depName=go | |
| go-version: 1.22.3 | |
| - name: Checkout code | |
| uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 | |
| with: | |
| persist-credentials: false | |
| # hard-code the path instead of using ${{ github.repository }} to make sure it works for forked repo as well | |
| path: src/github.com/cilium/cilium | |
| - name: Check k8s generated files | |
| run: | | |
| # Set GOBIN to ensure 'go install' binaries end up in the same directory | |
| # as the one actions/setup-go adds to PATH, regardless of GOPATH. | |
| export GOBIN="$HOME/go/bin" | |
| cd src/github.com/cilium/cilium | |
| contrib/scripts/check-k8s-code-gen.sh |