ci: check image tag (#869) (#870)

* ci: check image tag * add script Co-authored-by: Denis Mishin <dmishin@pomerium.com>
pomerium · Jan 10, 2024 · d059b2c · d059b2c
1 parent 9177fab
commit d059b2c
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 8 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -18,14 +18,7 @@ jobs:
 
       - name: Check image reference
         # check that docker image reference is the same as the release tag
-        run: |
-          set -e
-          img=$(yq eval '.spec.template.spec.containers[0].image' config/pomerium/deployment/image.yaml)
-          tag=${img#pomerium/ingress-controller:}
-          if [[ "${tag}" != ${{ github.event.release.tag_name }}" ]]; then
-            echo "Image tag mismatch: ${tag} != ${{ github.event.release.tag_name }}"
-            exit 1
-          fi
+        run: ./scripts/check-image-tag.sh ${{ github.event.release.tag_name }}
 
       - name: Docker meta
         id: meta

diff --git a/scripts/check-image-tag.sh b/scripts/check-image-tag.sh
@@ -0,0 +1,15 @@
+# checks that image tag matches the argument
+
+set -e
+want=$1
+if [[ -z "${want}" ]]; then
+    echo "Usage: $0 <tag>"
+    exit 1
+fi
+
+img=$(yq eval '.spec.template.spec.containers[0].image' config/pomerium/deployment/image.yaml)
+tag=${img#pomerium/ingress-controller:}
+if [[ "${tag}" != "${want}" ]]; then
+    echo "Image tag mismatch: ${tag} != ${want}"
+    exit 1
+fi