From 54d1c5c87f5fd14cb386c6c408d907f121e77806 Mon Sep 17 00:00:00 2001
From: s3krit <pugh@s3kr.it>
Date: Tue, 16 Jun 2020 15:50:50 +0200
Subject: [PATCH] [CI] Add label enforcement (#6365)

* Add label enforcement

* fix .gitlab-ci.yml

* update check_labels.sh
---
 .gitlab-ci.yml                   | 11 ++++++++
 .maintain/gitlab/check_labels.sh | 46 ++++++++++++++++++++++++++++++++
 .maintain/gitlab/lib.sh          |  8 ++++--
 3 files changed, 63 insertions(+), 2 deletions(-)
 create mode 100755 .maintain/gitlab/check_labels.sh

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index bd4fc65e85d61..c4442dece99ad 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -721,3 +721,14 @@ validator 4 4:
   <<:                              *validator-deploy
   script:
     - ./.maintain/flamingfir-deploy.sh flamingfir-validator4
+
+#### stage:                       .post
+
+check-labels:
+  stage:                          .post
+  image:                          paritytech/tools:latest
+  <<:                             *kubernetes-build
+  only:
+    - /^[0-9]+$/
+  script:
+    - ./.maintain/gitlab/check_labels.sh
diff --git a/.maintain/gitlab/check_labels.sh b/.maintain/gitlab/check_labels.sh
new file mode 100755
index 0000000000000..5ab099b38291c
--- /dev/null
+++ b/.maintain/gitlab/check_labels.sh
@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+
+#shellcheck source=lib.sh
+source "$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )/lib.sh"
+
+ensure_labels() {
+  for label in "$@"; do
+    if has_label 'paritytech/substrate' "$CI_COMMIT_BRANCH" "$label"; then
+      return 0
+    fi
+  done
+  return 1
+}
+
+# Must have one of the following labels
+releasenotes_labels=(
+  'B0-silent'
+  'B3-apinoteworthy'
+  'B5-clientnoteworthy'
+  'B7-runtimenoteworthy'
+)
+
+criticality_labels=(
+  'C1-low'
+  'C3-medium'
+  'C7-high'
+  'C9-critical'
+)
+
+echo "[+] Checking release notes (B) labels for $CI_COMMIT_BRANCH"
+if ensure_labels "${releasenotes_labels[@]}";  then
+  echo "[+] Release notes label detected. All is well."
+else
+  echo "[!] Release notes label not detected. Please add one of: ${releasenotes_labels[*]}"
+  exit 1
+fi
+
+echo "[+] Checking release criticality (C) labels for $CI_COMMIT_BRANCH"
+if ensure_labels "${criticality_labels[@]}";  then
+  echo "[+] Release criticality label detected. All is well."
+else
+  echo "[!] Release criticality label not detected. Please add one of: ${criticality_labels[*]}"
+  exit 1
+fi
+
+exit 0
diff --git a/.maintain/gitlab/lib.sh b/.maintain/gitlab/lib.sh
index ecc9a5f54288c..a7a83baaea746 100755
--- a/.maintain/gitlab/lib.sh
+++ b/.maintain/gitlab/lib.sh
@@ -66,8 +66,12 @@ has_label(){
   repo="$1"
   pr_id="$2"
   label="$3"
-  out=$(curl -H "Authorization: token $GITHUB_RELEASE_TOKEN" -s "$api_base/$repo/pulls/$pr_id")
-  [ -n "$(echo "$out" | jq ".labels | .[] | select(.name==\"$label\")")" ]
+  if [ -n "$GITHUB_RELEASE_TOKEN" ]; then
+    out=$(curl -H "Authorization: token $GITHUB_RELEASE_TOKEN" -s "$api_base/$repo/pulls/$pr_id")
+  else
+    out=$(curl -H "Authorization: token $GITHUB_PR_TOKEN" -s "$api_base/$repo/pulls/$pr_id")
+  fi
+  [ -n "$(echo "$out" | tr -d '\r\n' | jq ".labels | .[] | select(.name==\"$label\")")" ]
 }
 
 # Formats a message into a JSON string for posting to Matrix