sync-images-to-aliyun.yml

name: Sync images to Aliyun
on:
  workflow_dispatch:
  schedule:
  - cron: '0 0 * * *'
  push:
    paths:
    - 'example/variables.yaml'
jobs:
  dockerhub-to-aliyun:
    runs-on: ubuntu-20.04
    container: setzero/registry-manager
    env:
      TO_USERNAME: ${{ secrets.TO_USERNAME }}
      TO_PASSWORD: ${{ secrets.TO_PASSWORD }}
    steps:
    - name: Dockerhub to Aliyun
      run: |
        cat << EOF >config.yaml
        registries:
          aliyuncs:
            registry: https://registry.aliyuncs.com
            username: $TO_USERNAME
            password: $TO_PASSWORD
          dockerhub:
            registry: https://registry-1.docker.io
            repositories:
              - calico/typha
              - calico/cni
              - calico/node
              - calico/kube-controllers
              - calico/pod2daemon-flexvol
              - calico/ctl
              - jettech/kube-webhook-certgen
              - kubernetesui/dashboard
              - kubernetesui/metrics-scraper
              - flannel/flannel
              - flannel/flannel-cni-plugin
        sync-policy:
          from: dockerhub
          to: aliyuncs
          dry-run: false
          replace:
            - old: calico/
              new: kubeadm-ha/calico_
            - old: jettech/
              new: kubeadm-ha/jettech_
            - old: kubernetesui/
              new: kubeadm-ha/kubernetesui_
            - old: flannel/
              new: kubeadm-ha/flannel_
          filters:
            - ^[Vv]?\d+\.\d+(\.\d+)?(-\d+)?$
        EOF
        registry-manager sync -c config.yaml

    - name: Dockerhub to Aliyun force
      run: |
        cat << EOF >config.yaml
        registries:
          aliyuncs:
            registry: https://registry.aliyuncs.com
            username: $TO_USERNAME
            password: $TO_PASSWORD
          dockerhub:
            registry: https://registry-1.docker.io
            repositories:
              - library/nginx:1.23-alpine
              - library/haproxy:2.3-alpine
              - library/traefik:v2.10.4
              - openresty/openresty:1.19.3.1-alpine
              - envoyproxy/envoy:v1.16.2
              - osixia/keepalived:2.0.20
        sync-policy:
            from: dockerhub
            to: aliyuncs
            dry-run: false
            force: true
            replace:
              - old: openresty/
                new: kubeadm-ha/openresty_
              - old: envoyproxy/
                new: kubeadm-ha/envoyproxy_
              - old: osixia/
                new: kubeadm-ha/osixia_
              - old: library
                new: kubeadm-ha
            filters:
              - ^[Vv]?\d+\.\d+(\.\d+)?(-\d+)?$
        EOF
        registry-manager sync -c config.yaml

    - name: Delete workflow runs
      uses: GitRML/delete-workflow-runs@main
      with:
        retain_days: 7
        keep_minimum_runs: 3

  quay-to-aliyun:
    runs-on: ubuntu-20.04
    container: setzero/registry-manager
    env:
      TO_USERNAME: ${{ secrets.TO_USERNAME }}
      TO_PASSWORD: ${{ secrets.TO_PASSWORD }}
    steps:
    - name: Quay to Aliyun
      run: |
        cat << EOF >config.yaml
        registries:
          aliyuncs:
            registry: https://registry.aliyuncs.com
            username: ${{ secrets.TO_USERNAME }}
            password: ${{ secrets.TO_PASSWORD }}
          quay:
            registry: https://quay.io
            repositories:
              - jetstack/cert-manager-cainjector
              - jetstack/cert-manager-webhook
              - jetstack/cert-manager-controller
              - jetstack/cert-manager-acmesolver
        sync-policy:
          from: quay
          to: aliyuncs
          dry-run: false
          replace:
            - old: coreos/
              new: kubeadm-ha/coreos_
            - old: jetstack/
              new: kubeadm-ha/jetstack_
          filters:
            - ^[Vv]?\d+\.\d+(\.\d+)?(-\d+)?$
        EOF
        registry-manager sync -c config.yaml

    - name: Delete workflow runs
      uses: GitRML/delete-workflow-runs@main
      with:
        retain_days: 7
        keep_minimum_runs: 3

  gcr-to-aliyun:
    runs-on: ubuntu-20.04
    container: setzero/registry-manager
    env:
      TO_USERNAME: ${{ secrets.TO_USERNAME }}
      TO_PASSWORD: ${{ secrets.TO_PASSWORD }}
    steps:
    - name: Gcr to Aliyun
      run: |
        cat << EOF >config.yaml
        registries:
          aliyuncs:
            registry: https://registry.aliyuncs.com
            username: ${{ secrets.TO_USERNAME }}
            password: ${{ secrets.TO_PASSWORD }}
          gcr:
            registry: https://k8s.gcr.io
            repositories:
              - kube-apiserver
              - kube-controller-manager
              - kube-scheduler
              - kube-proxy
              - pause
              - etcd
              - coredns
              - coredns/coredns
              - ingress-nginx/controller
              - ingress-nginx/kube-webhook-certgen
              - metrics-server/metrics-server
        sync-policy:
          from: gcr
          to: aliyuncs
          dry-run: false
          replace:
            - old: ingress-nginx/
              new: kubeadm-ha/ingress-nginx_
            - old: metrics-server/
              new: kubeadm-ha/metrics-server_
            - old: coredns/
              new: kubeadm-ha/
            - new: kubeadm-ha
          filters:
            - ^[Vv]?\d+\.\d+(\.\d+)?(-\d+)?$
        EOF
        registry-manager sync -c config.yaml

  k8s-to-aliyun2:
    runs-on: ubuntu-20.04
    container: setzero/registry-manager
    env:
      TO_USERNAME: ${{ secrets.TO_USERNAME }}
      TO_PASSWORD: ${{ secrets.TO_PASSWORD }}
    steps:
    - name: k8s to Aliyun
      run: |
        cat << EOF >config.yaml
        registries:
          aliyuncs:
            registry: https://registry.aliyuncs.com
            username: ${{ secrets.TO_USERNAME }}
            password: ${{ secrets.TO_PASSWORD }}
          k8s:
            registry: https://registry.k8s.io
            repositories:
              - ingress-nginx/kube-webhook-certgen
        sync-policy:
          from: k8s
          to: aliyuncs
          dry-run: false
          replace:
            - old: ingress-nginx/
              new: kubeadm-ha/ingress-nginx_
          filters:
            - ^[Vv]
        EOF
        registry-manager sync -c config.yaml

  k8s-to-aliyun:
    runs-on: ubuntu-20.04
    container: setzero/registry-manager
    env:
      TO_USERNAME: ${{ secrets.TO_USERNAME }}
      TO_PASSWORD: ${{ secrets.TO_PASSWORD }}
    steps:
    - name: k8s to Aliyun
      run: |
        cat << EOF >config.yaml
        registries:
          aliyuncs:
            registry: https://registry.aliyuncs.com
            username: ${{ secrets.TO_USERNAME }}
            password: ${{ secrets.TO_PASSWORD }}
          k8s:
            registry: https://registry.k8s.io
            repositories:
              - kube-apiserver
              - kube-controller-manager
              - kube-scheduler
              - kube-proxy
              - pause
              - etcd
              - coredns
              - coredns/coredns
              - ingress-nginx/controller
              - ingress-nginx/kube-webhook-certgen
              - metrics-server/metrics-server
        sync-policy:
          from: k8s
          to: aliyuncs
          dry-run: false
          replace:
            - old: coredns/
              new: kubeadm-ha/
            - old: ingress-nginx/
              new: kubeadm-ha/ingress-nginx_
            - old: metrics-server/
              new: kubeadm-ha/metrics-server_
            - new: kubeadm-ha
          filters:
            - ^[Vv]?\d+\.\d+(\.\d+)?(-\d+)?$
        EOF
        registry-manager sync -c config.yaml