molecule.yml

---
#
# Ansible managed
#

name: Ansible Molecule

on:
  push:
    branches:
      - master
      - main
      - testing
      - dependabot/**
      - renovate/**
    paths-ignore:
      - '**/README.md'
      - '**/CHANGELOG.md'
    tags_ignore:
      - '*'
  pull_request:
  pull_request_target:
  schedule:
    # - cron: '3 2 2 * *'
    - cron: '3 2 * * *'

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

permissions: write-all

concurrency:
  group: ${{ github.ref }}-${{ github.workflow }}
  cancel-in-progress: true

jobs:
  lint:
    runs-on: ubuntu-20.04
    steps:
      - name: checkout
        uses: actions/checkout@v4
      - name: ansible-lint
        uses: ansible-community/ansible-lint-action@main
  test:
    runs-on: ubuntu-20.04
    strategy:
      fail-fast: false
      matrix:
        config:
          - image: "alpine-openrc"
            tag: "latest"
          - image: "amazonlinux"
            tag: "latest"
          - image: "enterpriselinux"
            tag: "7"
          - image: "enterpriselinux"
            tag: "8"
          - image: "enterpriselinux"
            tag: "latest"
          - image: "debian-systemd"
            tag: "latest"
          - image: "debian-systemd"
            tag: "bullseye"
          - image: "fedora-systemd"
            tag: "38"
          - image: "fedora-systemd"
            tag: "latest"
          - image: "fedora-systemd"
            tag: "rawhide"
          - image: "docker-opensuse-systemd"
            tag: "latest"
          - image: "docker-ubuntu-systemd"
            tag: "latest"
          - image: "docker-ubuntu-systemd"
            tag: "focal"
          - image: "docker-ubuntu-systemd"
            tag: "bionic"
    steps:
      - name: Checkout Role
        uses: actions/checkout@v4
        with:
          path: "${{ github.repository }}"
      - name: Running Molecule Test
        uses: buluma/molecule-action@v24.2.0
        with:
          image: ${{ matrix.config.image }}
          tag: ${{ matrix.config.tag }}

  dependabot:
    needs:
      - lint
      - test
    runs-on: ubuntu-latest
    if: ${{ github.actor == 'dependabot[bot]' || github.actor == 'buluma' && github.event_name == 'pull_request'}}
    steps:
      - uses: "actions/checkout@master"
      - name: Dependabot metadata
        id: metadata
        uses: dependabot/fetch-metadata@v1
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
      - name: Approve a PR
        run: gh pr review --approve "$PR_URL"
        env:
          PR_URL: ${{github.event.pull_request.html_url}}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: "Merge Dependabot PR"
        run: gh pr merge --auto --merge "$PR_URL"
        env:
          PR_URL: ${{github.event.pull_request.html_url}}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}