services-pr-check.yml

---
  name: ARO HCP Service PR Check
  env:
    DEPLOY_ENV: dev
    SKIP_CONFIRM: true
  on:
    pull_request:
      paths:
        - '.github/workflows/aro-hcp-cd.yml'
        - '.github/workflows/environment-infra-cd.yml'
        - '.github/workflows/services-cd.yml'
        - '.github/workflows/services-ci.yml'
        - 'config/config.yaml'
        - 'dev-infrastructure/**/*.bicep'
        - 'dev-infrastructure/**/*.bicepparam'
        - 'dev-infrastructure/configurations/*'
        - 'frontend/**'
        - 'backend/**'
        - 'cluster-service/**'
        - 'internal/**'
        - 'maestro/**'
        - 'pko/**'
        - 'acm/**'
        - 'hypershiftoperator/**'
        - 'image-sync/**/'
        - 'tooling/image-sync/**'
        - 'tooling/templatize/**'
        - 'config/*'
      types:
        - opened
        - synchronize
        - reopened

  jobs:
    service_cluster_pr_check:
      permissions:
        id-token: 'write'
        contents: 'read'
      runs-on: 'ubuntu-latest'
      steps:
        - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
          with:
            fetch-depth: 1

        - name: "install azure-cli"
          uses: "Azure/ARO-HCP@main"

        - name: 'Az CLI login'
          uses: azure/login@a65d910e8af852a8061c627c456678983e180302 # v2.2.0
          with:
            client-id: ${{ secrets.AZURE_CLIENT_ID }}
            tenant-id: ${{ secrets.AZURE_TENANT_ID }}
            subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

        - uses: azure/setup-kubectl@3e0aec4d80787158d308d7b364cb1b702e7feb7f # v4.0.0

        # Used to deploy Cluster Service
        - name: 'Install oc'
          run: |
            curl -sfLo - https://mirror.openshift.com/pub/openshift-v4/clients/ocp/4.15.9/openshift-client-linux.tar.gz | tar xzf -
            sudo mv oc /usr/local/bin/oc
            chmod +x /usr/local/bin/oc

        # Used to deploy Maestro Server, Frontend
        - uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
          with:
            version: 'v3.13.3'

        - uses: azure/use-kubelogin@76597ae0fcbaace21b05e13a2cbf8daee2c6e820 # v1.2
          with:
            kubelogin-version: 'v0.1.3'

        - name: 'Install helm diff'
          run: |
            helm plugin install https://github.com/databus23/helm-diff

        - name: 'Deploy Frontend'
          env:
            PRINCIPAL_ID: ${{ secrets.GHA_PRINCIPAL_ID }}
          run: |
            make frontend.dry_run

        - name: 'Deploy Backend'
          env:
            PRINCIPAL_ID: ${{ secrets.GHA_PRINCIPAL_ID }}
          run: |
            make backend.dry_run