Image Release Build #3
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Image Release Build | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| tag: | |
| description: 'Docker Image Tag' | |
| required: true | |
| default: "es" | |
| permissions: | |
| # To be able to access the repository with `actions/checkout` | |
| contents: read | |
| # Required to generate OIDC tokens for `sigstore/cosign-installer` authentication | |
| id-token: write | |
| jobs: | |
| build-and-push: | |
| environment: release | |
| runs-on: ubuntu-20.04 | |
| strategy: | |
| matrix: | |
| include: | |
| - name: cilium | |
| dockerfile: ./images/cilium/Dockerfile | |
| - name: operator-openstack | |
| dockerfile: ./images/operator/Dockerfile | |
| steps: | |
| - name: Checkout default branch(vpc-cni) to access local actions | |
| uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
| with: | |
| ref: ${{ github.event.repository.default_branch }} | |
| persist-credentials: false | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@4c0219f9ac95b02789c1075625400b2acbff50b1 # v2.9.1 | |
| - name: Login to DockerHub | |
| uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2.2.0 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Getting image tag | |
| id: tag | |
| run: | | |
| echo tag=${GITHUB_REF##*/} >> $GITHUB_OUTPUT | |
| - name: Checkout Source Code | |
| uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
| with: | |
| persist-credentials: false | |
| - name: Release Build ${{ matrix.name }} | |
| uses: docker/build-push-action@2eb1c1961a95fc15694676618e422e8ba1d63825 # v4.1.1 | |
| id: docker_build_release | |
| with: | |
| provenance: false | |
| context: . | |
| file: ${{ matrix.dockerfile }} | |
| push: true | |
| platforms: linux/amd64,linux/arm64 | |
| tags: | | |
| chestack/${{ matrix.name }}:${{ steps.tag.outputs.tag }}-${{ github.event.inputs.tag }} | |
| target: release | |
| build-args: | | |
| OPERATOR_VARIANT=${{ matrix.name }} | |
| - name: Image Release Digest | |
| shell: bash | |
| run: | | |
| mkdir -p image-digest/ | |
| job_name=${{ matrix.name }} | |
| job_name_capital=${job_name^^} | |
| job_name_underscored=${job_name_capital//-/_} | |
| echo "${job_name_underscored}_DIGEST := \"${{ steps.docker_build_release.outputs.digest }}\"" > image-digest/makefile-digest.txt | |
| echo "### ${{ matrix.name }}" > image-digest/${{ matrix.name }}.txt | |
| echo "" >> image-digest/${{ matrix.name }}.txt | |
| echo "\`docker.io/chestack/${{ matrix.name }}:${{ steps.tag.outputs.tag }}@${{ steps.docker_build_release.outputs.digest }}\`" >> image-digest/${{ matrix.name }}.txt | |
| echo "\`docker.io/chestack/${{ matrix.name }}:stable@${{ steps.docker_build_release.outputs.digest }}\`" >> image-digest/${{ matrix.name }}.txt | |
| echo "" >> image-digest/${{ matrix.name }}.txt | |
| # Upload artifact digests | |
| - name: Upload artifact digests | |
| uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2 | |
| with: | |
| name: image-digest ${{ matrix.name }} | |
| path: image-digest | |
| retention-days: 10 | |
| image-digests: | |
| name: Display Digests | |
| runs-on: ubuntu-20.04 | |
| needs: build-and-push | |
| steps: | |
| - name: Getting image tag | |
| id: tag | |
| run: | | |
| echo tag=${GITHUB_REF##*/} >> $GITHUB_OUTPUT | |
| - name: Downloading Image Digests | |
| shell: bash | |
| run: | | |
| mkdir -p image-digest/ | |
| - name: Download digests of all images built | |
| uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 | |
| with: | |
| path: image-digest/ | |
| - name: Image Digests Output | |
| shell: bash | |
| run: | | |
| cd image-digest/ | |
| echo "## Docker Manifests" > ../image-digest-output.txt | |
| echo "" >> ../image-digest-output.txt | |
| find -type f -not -name "makefile-digest.txt" | sort | xargs -d '\n' cat >> ../image-digest-output.txt | |
| - name: Image Makefile Digests | |
| shell: bash | |
| run: | | |
| cd image-digest/ | |
| echo "# File generated by .github/workflows/build-images-releases.yaml; DO NOT EDIT." > ../Makefile.digests | |
| echo "# Copyright "$(date +'%Y')" Authors of Cilium" >> ../Makefile.digests | |
| echo "# SPDX-License-Identifier: Apache-2.0" >> ../Makefile.digests | |
| echo "" >> ../Makefile.digests | |
| find -type f -name "makefile-digest.txt" | sort | xargs -d '\n' awk '{print "export " $0}' >> ../Makefile.digests | |
| # Upload artifact digests | |
| - name: Upload artifact digests | |
| uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2 | |
| with: | |
| name: image-digest-output.txt-${{ steps.tag.outputs.tag }} | |
| path: image-digest-output.txt | |
| retention-days: 10 | |
| # Upload artifact digests | |
| - name: Upload artifact digests | |
| uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2 | |
| with: | |
| name: Makefile.digests-${{ steps.tag.outputs.tag }} | |
| path: Makefile.digests | |
| retention-days: 10 |