Initial

.github/actions/publish-docs.sh

@@ -0,0 +1,43 @@
+#!/bin/bash
+
+FROM=build/site
+HOST="$1"
+HOST_PATH="$2"
+SSH_PRIVATE_KEY="$3"
+SSH_KNOWN_HOST="$4"
+CLOUDFLARE_ZONE_ID="$5"
+CLOUDFLARE_CACHE_TOKEN="$6"
+SSH_PRIVATE_KEY_PATH="$HOME/.ssh/${GITHUB_REPOSITORY:-publish-docs}"
+
+if [ "$#" -ne 6 ]; then
+  echo -e "not enough arguments USAGE:\n\n$0 \$HOST \$HOST_PATH \$SSH_PRIVATE_KEY \$SSH_KNOWN_HOST \$CLOUDFLARE_ZONE_ID \$CLOUDFLARE_CACHE_TOKEN\n\n" >&2
+  exit 1
+fi
+
+(
+  set -e
+  set -f
+  install -m 600 -D /dev/null "$SSH_PRIVATE_KEY_PATH"
+  echo "$SSH_PRIVATE_KEY" > "$SSH_PRIVATE_KEY_PATH"
+  echo "$SSH_KNOWN_HOST" > ~/.ssh/known_hosts
+  RSYNC_OPTS='-avz --delete'
+  if [ -f .full-build ]; then
+    unlink .full-build
+    BUILD_REFNAME=
+  fi
+  if [ -n "$BUILD_REFNAME" ]; then
+    RSYNC_OPTS="-c $RSYNC_OPTS$(find $FROM -mindepth 1 -maxdepth 1 \! -name 404.html \! -name '.*' -type f -printf ' --include /%P')"
+    RSYNC_OPTS="$RSYNC_OPTS$(find $FROM -mindepth 1 -maxdepth 1 -type d \! -name _ -printf ' --include /%P --include /%P/**') --exclude **"
+  fi
+  rsync $RSYNC_OPTS -e "ssh -i $SSH_PRIVATE_KEY_PATH" $FROM/ "$HOST:$HOST_PATH"
+  if [ -z "$BUILD_REFNAME" ]; then
+    curl -X POST "https://api.cloudflare.com/client/v4/zones/$CLOUDFLARE_ZONE_ID/purge_cache" \
+      -H "Content-Type:application/json" -H "Authorization: Bearer $CLOUDFLARE_CACHE_TOKEN" \
+      --data '{"files":["https://docs.spring.io/spring-security-kerberos"]}'
+  fi
+)
+exit_code=$?
+
+rm -f "$SSH_PRIVATE_KEY_PATH"
+
+exit $exit_code

.github/workflows/deploy-docs.yml

@@ -0,0 +1,37 @@
+name: Deploy Docs
+run-name: ${{ format('{0} ({1})', github.workflow, github.event.inputs.build-refname || 'all') }}
+on:
+  workflow_dispatch:
+    inputs:
+      build-refname:
+        description: Enter git refname to build (e.g., main).
+        required: false
+  # push:
+  #   branches: docs-build
+# env:
+#   GRADLE_ENTERPRISE_SECRET_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_SECRET_ACCESS_KEY }}
+permissions: read-all
+jobs:
+  build:
+    if: github.repository_owner == 'spring-projects'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 5
+      - name: Set Up Gradle
+        uses: spring-io/spring-gradle-build-action@v2
+        with:
+          java-version: '17'
+          distribution: temurin
+      - name: Set up refname build
+        if: github.event.inputs.build-refname
+        run: |
+          git fetch --depth 1 https://github.com/$GITHUB_REPOSITORY ${{ github.event.inputs.build-refname }}
+          echo BUILD_REFNAME=${{ github.event.inputs.build-refname }} >> $GITHUB_ENV
+          echo BUILD_VERSION=$(git cat-file --textconv FETCH_HEAD:gradle.properties | sed -n '/^version=/ { s/^version=//;p }') >> $GITHUB_ENV
+      - name: Run Antora
+        run: ./gradlew antora --stacktrace
+      - name: Publish Docs
+        run: $GITHUB_WORKSPACE/.github/actions/publish-docs.sh "${{ secrets.DOCS_USERNAME }}@${{ secrets.DOCS_HOST }}" /opt/www/domains/spring.io/docs/htdocs/spring-security-kerberos/reference/ "${{ secrets.DOCS_SSH_KEY }}" "${{ secrets.DOCS_SSH_HOST_KEY }}" "${{ secrets.CLOUDFLARE_ZONE_ID }}" "${{ secrets.CLOUDFLARE_CACHE_TOKEN }}"