Taskfile.yml

# yaml-language-server: $schema=https://taskfile.dev/schema.json
version: "3"

set:
  - errexit
  - nounset
  - pipefail

includes:
  e2e:
    taskfile: ./Taskfile.e2e.yml
    dir: .
    flatten: true

vars:
  APP_NAME: apiservice-audit-proxy
  IMAGE_REPOSITORY: '{{.IMAGE_REPOSITORY | default "apiservice-audit-proxy"}}'
  IMAGE_TAG: '{{.IMAGE_TAG | default "dev"}}'
  CHART_DIR: charts/apiservice-audit-proxy
  CHART_VERSION:
    sh: awk '/^version:/ { print $2; exit }' charts/apiservice-audit-proxy/Chart.yaml
  DIST_DIR: dist
  BUILD_STAMPS_DIR: .stamps/build
  RELEASE_NAME: '{{.RELEASE_NAME | default "apiservice-audit-proxy"}}'
  RELEASE_NAMESPACE: '{{.RELEASE_NAMESPACE | default "audit-pass-through-system"}}'

tasks:
  default:
    desc: List available tasks
    cmds:
      - task --list
    silent: true

  help:
    desc: Display this help
    aliases:
      - list
    cmds:
      - task --list
    silent: true

  fmt:
    desc: Format Go code
    cmds:
      - gofmt -w ./cmd ./pkg

  fmt:check:
    desc: Verify Go formatting without modifying files
    cmds:
      - |
        files="$(gofmt -l ./cmd ./pkg)"
        if [ -n "${files}" ]; then
          echo "These files need gofmt:"
          echo "${files}"
          exit 1
        fi

  lint:
    desc: Run golangci-lint
    cmds:
      - golangci-lint run

  lint-fix:
    desc: Run golangci-lint with auto-fix where available
    cmds:
      - golangci-lint run --fix

  test:
    desc: Run unit tests with coverage
    sources:
      - cmd/**/*.go
      - pkg/**/*.go
      - go.mod
      - go.sum
    generates:
      - coverage.out
    cmds:
      - go test ./... -coverprofile=coverage.out

  build:
    desc: Build the server binary
    sources:
      - cmd/**/*.go
      - pkg/**/*.go
      - go.mod
      - go.sum
    generates:
      - bin/{{.APP_NAME}}
    cmds:
      - mkdir -p bin
      - go build -o bin/{{.APP_NAME}} ./cmd/server

  docker-build:
    desc: Build the local container image
    sources:
      - Dockerfile
      - cmd/**/*.go
      - pkg/**/*.go
      - go.mod
      - go.sum
    generates:
      - '{{.BUILD_STAMPS_DIR}}/docker-image.id'
    status:
      - '{{.DOCKER | default "docker"}} image inspect "{{.IMAGE_REPOSITORY}}:{{.IMAGE_TAG}}" >/dev/null 2>&1'
      - test "$(cat "{{.BUILD_STAMPS_DIR}}/docker-image.id" 2>/dev/null)" = "$({{.DOCKER | default "docker"}} image inspect --format='{{"{{"}}.Id{{"}}"}}' "{{.IMAGE_REPOSITORY}}:{{.IMAGE_TAG}}")"
    cmds:
      - '{{.DOCKER | default "docker"}} build -t {{.IMAGE_REPOSITORY}}:{{.IMAGE_TAG}} .'
      - mkdir -p {{.BUILD_STAMPS_DIR}}
      - '{{.DOCKER | default "docker"}} image inspect --format=''{{"{{"}}.Id{{"}}"}}'' "{{.IMAGE_REPOSITORY}}:{{.IMAGE_TAG}}" > {{.BUILD_STAMPS_DIR}}/docker-image.id'

  helm:lint:
    desc: Lint the Helm chart
    cmds:
      - helm lint {{.CHART_DIR}}

  helm:template:
    desc: Render the Helm chart to stdout
    cmds:
      - helm template {{.RELEASE_NAME}} {{.CHART_DIR}} --namespace {{.RELEASE_NAMESPACE}}

  helm:package:
    desc: Package the Helm chart into dist/
    sources:
      - '{{.CHART_DIR}}/**'
    generates:
      - '{{.DIST_DIR}}/apiservice-audit-proxy-{{.CHART_VERSION}}.tgz'
    cmds:
      - mkdir -p {{.DIST_DIR}}
      - helm package {{.CHART_DIR}} --destination {{.DIST_DIR}}

  dist:
    desc: Build release artifacts in dist/
    sources:
      - '{{.CHART_DIR}}/**'
    generates:
      - '{{.DIST_DIR}}/apiservice-audit-proxy-{{.CHART_VERSION}}.tgz'
      - '{{.DIST_DIR}}/checksums.txt'
    cmds:
      - task: helm:package
      - sha256sum {{.DIST_DIR}}/*.tgz > {{.DIST_DIR}}/checksums.txt

  ci:
    desc: Run the local CI-equivalent checks
    deps:
      - fmt:check
      - lint
      - test
      - helm:lint
    cmds:
      - task: build
      - task: dist

  clean-stamps:
    desc: Forget cached Task readiness stamps
    cmds:
      - rm -rf .stamps/

  clean:
    desc: Remove build artifacts, release artifacts, coverage, and local Task caches
    cmds:
      - rm -rf bin/ coverage.out dist/ .task/ .stamps/