.goreleaser.yaml

# GoReleaser for kzero — same flow as pgwd: merge develop → main, tag v0.2.x, push tag (CI runs release).
# Local: make release-check && make release (on main only).
# Snapshot: make snapshot → artifacts under dist/

version: 2

project_name: kzero

before:
  hooks:
    - sh -c 'gzip -c contrib/man/man1/kzero.1 > contrib/man/man1/kzero.1.gz'

builds:
  - id: kzero
    main: ./cmd/kzero
    binary: kzero
    goos:
      - linux
      - darwin
      - windows
      - freebsd
      - openbsd
    goarch:
      - amd64
      - arm64
    ignore:
      - goos: windows
        goarch: arm64
    env:
      - CGO_ENABLED=0
    ldflags:
      - -s
      - -w
      - -X github.com/hrodrig/kzero/internal/cli.Version=v{{ .Version }}
      - -X github.com/hrodrig/kzero/internal/notify.AppVersion=v{{ .Version }}
      - -X github.com/hrodrig/kzero/internal/cli.Commit={{ .ShortCommit }}
      - -X github.com/hrodrig/kzero/internal/cli.BuildDate={{ .Date }}
      - -X github.com/hrodrig/kzero/internal/cli.Branch={{ .Branch }}
  # kubectl-kzero: same main, second basename (groot #64 pattern). kubectl
  # plugin discovery picks kubectl-<name> on PATH for `kubectl kzero …`.
  - id: kubectl-kzero
    main: ./cmd/kzero
    binary: kubectl-kzero
    goos:
      - linux
      - darwin
      - windows
      - freebsd
      - openbsd
    goarch:
      - amd64
      - arm64
    ignore:
      - goos: windows
        goarch: arm64
    env:
      - CGO_ENABLED=0
    ldflags:
      - -s
      - -w
      - -X github.com/hrodrig/kzero/internal/cli.Version=v{{ .Version }}
      - -X github.com/hrodrig/kzero/internal/notify.AppVersion=v{{ .Version }}
      - -X github.com/hrodrig/kzero/internal/cli.Commit={{ .ShortCommit }}
      - -X github.com/hrodrig/kzero/internal/cli.BuildDate={{ .Date }}
      - -X github.com/hrodrig/kzero/internal/cli.Branch={{ .Branch }}

archives:
  - id: default
    ids:
      - kzero
      - kubectl-kzero
    formats: [tar.gz]
    format_overrides:
      - goos: windows
        formats: [zip]
    name_template: "{{ .ProjectName }}_{{ if .IsSnapshot }}v{{ .Version }}{{ else }}{{ .Tag }}{{ end }}_{{ .Os }}_{{ .Arch }}"
    files:
      - src: contrib/man/man1/kzero.1
        dst: share/man/man1/kzero.1
      - src: LICENSE
        dst: share/doc/kzero/LICENSE
      - src: configs/kzero.sample.yml
        dst: share/examples/kzero/kzero.sample.yml

checksum:
  name_template: checksums.txt

# Cosign keyless signing (GitHub Actions OIDC). Requires `id-token: write`
# in release.yml and sigstore/cosign-installer. Signs checksums.txt and
# container images pushed to ghcr.io.
signs:
  - cmd: cosign
    env:
      - COSIGN_EXPERIMENTAL=1
    certificate: "${artifact}.pem"
    args:
      - sign-blob
      - "--output-signature=${signature}"
      - "--output-certificate=${certificate}"
      - "${artifact}"
      - --yes
    artifacts: checksum

# SBOM (Software Bill of Materials) generation via syft.
# One SPDX + one CycloneDX document per release (source tree catalog).
# Container image SBOM attestation deferred (docker driver limit; same as groot).
sboms:
  - id: kzero-sbom-spdx
    artifacts: source
    documents:
      - "kzero_{{ .Version }}_sbom.spdx.json"
    args: ["$artifact", "--output", "spdx-json=$document"]
  - id: kzero-sbom-cdx
    artifacts: source
    documents:
      - "kzero_{{ .Version }}_sbom.cyclonedx.json"
    args: ["$artifact", "--output", "cyclonedx-json=$document"]

# .deb / .rpm for Linux (same pattern as pgwd nfpms).
nfpms:
  - id: default
    package_name: kzero
    ids:
      - kzero
      - kubectl-kzero
    scripts:
      preremove: contrib/deb/prerm.sh
      postremove: contrib/deb/postrm.sh
    file_name_template: "{{ .ProjectName }}_{{ if .IsSnapshot }}v{{ .Version }}{{ else }}{{ .Tag }}{{ end }}_{{ .Os }}_{{ .Arch }}"
    description: Declarative Kubernetes workload shutdown and startup pipelines (also ships the kubectl-kzero plugin)
    vendor: "Hermes Rodríguez"
    maintainer: "Hermes Rodríguez <hrodrig@usb.ve>"
    homepage: https://github.com/hrodrig/kzero
    license: MIT
    formats:
      - deb
      - rpm
    contents:
      - src: contrib/man/man1/kzero.1.gz
        dst: /usr/share/man/man1/
      # Example profile at a fixed path; operators edit after install. config|noreplace on upgrades.
      - src: configs/kzero.sample.yml
        dst: /etc/kzero/kzero.yaml
        type: config|noreplace

snapshot:
  version_template: "{{ .Env.KZERO_SNAPSHOT_VERSION }}"

changelog:
  sort: asc
  filters:
    exclude:
      - "^docs:"
      - "^chore:"
      - "^test:"

release:
  github:
    owner: hrodrig
    name: kzero

# Multi-arch image to ghcr.io (same GITHUB_TOKEN in Actions). Snapshots skip Docker.
# sbom: false — GitHub Actions buildx docker driver lacks attestation support.
dockers_v2:
  - disable: "{{ .IsSnapshot }}"
    sbom: false
    dockerfile: Dockerfile.release
    ids:
      - kzero
    images:
      - ghcr.io/hrodrig/kzero
    tags:
      - "v{{ .Version }}"
      - "{{ if not .IsSnapshot }}latest{{ end }}"
    labels:
      org.opencontainers.image.title: "kzero"
      org.opencontainers.image.description: "Declarative Kubernetes workload shutdown and startup pipelines"
      org.opencontainers.image.source: "https://github.com/hrodrig/kzero"
      org.opencontainers.image.version: "{{ .Version }}"
      org.opencontainers.image.revision: "{{ .FullCommit }}"
      org.opencontainers.image.created: "{{ .Date }}"

# Cosign keyless signing for container manifests built by dockers_v2.
docker_signs:
  - cmd: cosign
    env:
      - COSIGN_EXPERIMENTAL=1
    args:
      - sign
      - "${artifact}@${digest}"
      - --yes

# Homebrew: publish cask to https://github.com/hrodrig/homebrew-kzero (brew install hrodrig/kzero/kzero).
# CI: set repo secret HOMEBREW_TAP_TOKEN (PAT with contents:write on the tap repo; GITHUB_TOKEN cannot push there).
homebrew_casks:
  - name: kzero
    ids:
      - default
    binaries:
      - kzero
      - kubectl-kzero
    directory: Casks
    homepage: "https://github.com/hrodrig/kzero"
    description: "Declarative Kubernetes workload down/up/reset pipelines from YAML (also ships kubectl-kzero)"
    commit_msg_template: "Brew cask update for {{ .ProjectName }} version {{ .Tag }}"
    commit_author:
      name: Hermes Rodríguez
      email: hrodrig@usb.ve
    repository:
      owner: hrodrig
      name: homebrew-kzero
      branch: main
      token: "{{ .Env.HOMEBREW_TAP_TOKEN }}"
    url:
      verified: "github.com/hrodrig/kzero/"
    manpages:
      - share/man/man1/kzero.1
    caveats: |
      Sample configuration is not bundled with the Homebrew cask.
      Generate it with `kzero --print-sample-config > kzero.yaml`.
      kubectl plugin: `kubectl plugin list | grep kzero` after install.
    hooks:
      post:
        install: |
          if OS.mac?
            system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/kzero"]
            system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/kubectl-kzero"]
          end