version: prepare for v0.1.11 release #9
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Image Release Build | |
| on: | |
| push: | |
| tags: | |
| - v[0-9]+.[0-9]+.[0-9]+ | |
| - v[0-9]+.[0-9]+.[0-9]+-rc[0-9]+ | |
| permissions: read-all | |
| jobs: | |
| build-and-push: | |
| if: ${{ github.repository == 'cilium/certgen' }} | |
| environment: release | |
| runs-on: ubuntu-22.04 | |
| strategy: | |
| # matrix for easier code-sharing with workflows from cilium/cilium | |
| matrix: | |
| include: | |
| - name: certgen | |
| dockerfile: ./Dockerfile | |
| steps: | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb | |
| - name: Login to DockerHub | |
| uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 | |
| with: | |
| username: ${{ secrets.DOCKER_HUB_RELEASE_USERNAME }} | |
| password: ${{ secrets.DOCKER_HUB_RELEASE_PASSWORD }} | |
| - name: Login to quay.io | |
| uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 | |
| with: | |
| registry: quay.io | |
| username: ${{ secrets.QUAY_USERNAME_RELEASE_USERNAME }} | |
| password: ${{ secrets.QUAY_PASSWORD_RELEASE_PASSWORD }} | |
| - name: Getting image tag | |
| id: tag | |
| run: | | |
| echo "tag=${GITHUB_REF##*/}" >> $GITHUB_OUTPUT | |
| - name: Checkout Source Code | |
| uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 | |
| with: | |
| persist-credentials: false | |
| - name: Release Build ${{ matrix.name }} | |
| uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 | |
| id: docker_build_release | |
| with: | |
| context: . | |
| file: ${{ matrix.dockerfile }} | |
| push: true | |
| platforms: linux/amd64,linux/arm64 | |
| tags: | | |
| ${{ github.repository_owner }}/${{ matrix.name }}:${{ steps.tag.outputs.tag }} | |
| quay.io/${{ github.repository_owner }}/${{ matrix.name }}:${{ steps.tag.outputs.tag }} | |
| - name: Image Release Digest | |
| shell: bash | |
| run: | | |
| mkdir -p image-digest/ | |
| job_name=${{ matrix.name }} | |
| job_name_capital=${job_name^^} | |
| job_name_underscored=${job_name_capital//-/_} | |
| echo "${job_name_underscored}_DIGEST := \"${{ steps.docker_build_release.outputs.digest }}\"" > image-digest/makefile-digest.txt | |
| echo "### ${{ matrix.name }}" > image-digest/${{ matrix.name }}.txt | |
| echo "" >> image-digest/${{ matrix.name }}.txt | |
| echo "\`docker.io/${{ github.repository_owner }}/${{ matrix.name }}:${{ steps.tag.outputs.tag }}@${{ steps.docker_build_release.outputs.digest }}\`" >> image-digest/${{ matrix.name }}.txt | |
| echo "\`quay.io/${{ github.repository_owner }}/${{ matrix.name }}:${{ steps.tag.outputs.tag }}@${{ steps.docker_build_release.outputs.digest }}\`" >> image-digest/${{ matrix.name }}.txt | |
| echo "" >> image-digest/${{ matrix.name }}.txt | |
| # Upload artifact digests | |
| - name: Upload artifact digests | |
| uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 | |
| with: | |
| name: image-digest ${{ matrix.name }} | |
| path: image-digest | |
| retention-days: 1 | |
| image-digests: | |
| if: ${{ github.repository == 'cilium/certgen' }} | |
| name: Display Digests | |
| runs-on: ubuntu-22.04 | |
| needs: build-and-push | |
| steps: | |
| - name: Getting image tag | |
| id: tag | |
| run: | | |
| echo "tag=${GITHUB_REF##*/}" >> $GITHUB_OUTPUT | |
| - name: Downloading Image Digests | |
| shell: bash | |
| run: | | |
| mkdir -p image-digest/ | |
| - name: Download digests of all images built | |
| uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 | |
| with: | |
| path: image-digest/ | |
| - name: Image Digests Output | |
| shell: bash | |
| run: | | |
| cd image-digest/ | |
| echo "## Docker Manifests" > ../image-digest-output.txt | |
| echo "" >> ../image-digest-output.txt | |
| find -type f -not -name "makefile-digest.txt" | sort | xargs -d '\n' cat >> ../image-digest-output.txt | |
| - name: Image Makefile Digests | |
| shell: bash | |
| run: | | |
| cd image-digest/ | |
| echo "# File generated by .github/workflows/build-images-releases.yaml; DO NOT EDIT." > ../Makefile.digests | |
| echo "# Copyright "$(date +'%Y')" Authors of Cilium" >> ../Makefile.digests | |
| echo "# SPDX-License-Identifier: Apache-2.0" >> ../Makefile.digests | |
| echo "" >> ../Makefile.digests | |
| find -type f -name "makefile-digest.txt" | sort | xargs -d '\n' cat >> ../Makefile.digests | |
| # Upload artifact digests | |
| - name: Upload artifact digests | |
| uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 | |
| with: | |
| name: image-digest-output.txt-${{ steps.tag.outputs.tag }} | |
| path: image-digest-output.txt | |
| retention-days: 1 | |
| # Upload artifact digests | |
| - name: Upload artifact digests | |
| uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 | |
| with: | |
| name: Makefile.digests-${{ steps.tag.outputs.tag }} | |
| path: Makefile.digests | |
| retention-days: 1 |