Staging #5343
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Staging | |
| # Controls when the workflow will run | |
| on: | |
| push: | |
| branches: [ master ] | |
| pull_request: | |
| workflow_dispatch: | |
| jobs: | |
| build: | |
| runs-on: ubuntu-22.04 | |
| outputs: | |
| IMAGE_TAG: ${{ steps.docker_tag.outputs.IMAGE_TAG }} | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - uses: actions/setup-java@v2 | |
| with: | |
| distribution: 'adopt' | |
| java-version: '8' | |
| architecture: x64 | |
| - name: Convert github branch name to be compatible with docker tag name convention and generate tag name | |
| id: docker_tag | |
| run: echo "IMAGE_TAG=a-$(echo ${{ github.ref_name }} | sed 's/[^a-zA-Z0-9]/-/g')" >> $GITHUB_OUTPUT | |
| - run: mvn package -Dakto-image-tag=${{ github.event.inputs.Tag }} -Dakto-build-time=$(eval "date +%s") -Dakto-release-version=${{steps.docker_tag.outputs.IMAGE_TAG}} | |
| - name: DockerHub login | |
| env: | |
| DOCKER_USERNAME: ${{secrets.DOCKER_USERNAME}} | |
| DOCKER_PASSWORD: ${{secrets.DOCKER_PASSWORD}} | |
| run: | | |
| docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD | |
| - name: Build, tag, and push the image to DockerHub | |
| id: build-image-dockerhub | |
| env: | |
| ECR_REGISTRY: aktosecurity | |
| ECR_REPOSITORY: akto-api-security | |
| IMAGE_TAG: ${{ steps.docker_tag.outputs.IMAGE_TAG }} | |
| run: | | |
| echo $IMAGE_TAG >> $GITHUB_STEP_SUMMARY | |
| docker buildx create --use | |
| # Build a docker container and push it to DockerHub | |
| cd apps/mini-runtime | |
| docker buildx build --platform linux/arm64/v8,linux/amd64 -t $ECR_REGISTRY/mini-runtime:$IMAGE_TAG . --push | |
| cd ../mini-testing | |
| docker buildx build --platform linux/arm64/v8,linux/amd64 -t $ECR_REGISTRY/mini-testing:$IMAGE_TAG . --push | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@v1 | |
| with: | |
| aws-access-key-id: ${{secrets.AWS_ACCESS_KEY_ID}} | |
| aws-secret-access-key: ${{secrets.AWS_SECRET_ACCESS_KEY}} | |
| aws-region: ap-south-1 | |
| - name: Configure AWS Credentials for ECR | |
| uses: aws-actions/configure-aws-credentials@v1 | |
| with: | |
| aws-access-key-id: ${{secrets.AWS_ACCESS_KEY_ID}} | |
| aws-secret-access-key: ${{secrets.AWS_SECRET_ACCESS_KEY}} | |
| aws-region: us-east-1 | |
| - name: Login to Amazon ECR | |
| id: login-ecr | |
| uses: aws-actions/amazon-ecr-login@v1 | |
| with: | |
| mask-password: 'true' | |
| registry-type: public | |
| - name: Build, tag, and push docker image to Amazon ECR | |
| env: | |
| ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }} | |
| ECR_REPOSITORY: akto-api-security | |
| REGISTRY_ALIAS: p7q3h0z2 | |
| IMAGE_TAG: ${{ steps.docker_tag.outputs.IMAGE_TAG }} | |
| run: | | |
| docker buildx create --use | |
| # Build a docker container and push it to DockerHub | |
| cd apps/mini-runtime | |
| docker buildx build --platform linux/arm64/v8,linux/amd64 -t $ECR_REGISTRY/$REGISTRY_ALIAS/akto-api-security-mini-runtime:$IMAGE_TAG . --push | |
| echo "::set-output name=image::$ECR_REGISTRY/akto-api-security-mini-runtime:$IMAGE_TAG" | |
| cd ../mini-testing | |
| docker buildx build --platform linux/arm64/v8,linux/amd64 -t $ECR_REGISTRY/$REGISTRY_ALIAS/akto-api-security-mini-testing:$IMAGE_TAG . --push | |
| echo "::set-output name=image::$ECR_REGISTRY/akto-api-security-mini-testing:$IMAGE_TAG" | |
| - name: Cache Maven packages | |
| uses: actions/cache@v1 | |
| with: | |
| path: ~/.m2 | |
| key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: ${{ runner.os }}-m2 |