Compare commits
9 Commits
0e831b0fb5
...
802e6498c8
Author | SHA1 | Date | |
---|---|---|---|
802e6498c8 | |||
5cae75ce26 | |||
1f60d18316 | |||
4116fc71ef | |||
2b75a2f97a | |||
7a979cd1a0 | |||
3e7652eeb2 | |||
14ad5aba68 | |||
0eb6f1d6e7 |
45
.github/workflows/docker-publish.yml
vendored
45
.github/workflows/docker-publish.yml
vendored
@ -16,7 +16,7 @@ on:
|
|||||||
env:
|
env:
|
||||||
# Use docker.io for Docker Hub if empty
|
# Use docker.io for Docker Hub if empty
|
||||||
REGISTRY: ghcr.io
|
REGISTRY: ghcr.io
|
||||||
REGISTRY2: git.suyiiyii.top
|
REGISTRY2: registry.cn-shenzhen.aliyuncs.com
|
||||||
# github.repository as <account>/<repo>
|
# github.repository as <account>/<repo>
|
||||||
IMAGE_NAME: ${{ github.repository }}
|
IMAGE_NAME: ${{ github.repository }}
|
||||||
|
|
||||||
@ -63,6 +63,13 @@ jobs:
|
|||||||
username: ${{ github.actor }}
|
username: ${{ github.actor }}
|
||||||
password: ${{ secrets.GITHUB_TOKEN }}
|
password: ${{ secrets.GITHUB_TOKEN }}
|
||||||
|
|
||||||
|
- name: Get current date and commit ID
|
||||||
|
id: vars
|
||||||
|
run: |
|
||||||
|
echo "DATE=$(date +'%y%m%d')" >> $GITHUB_ENV
|
||||||
|
echo "COMMIT=$(git rev-parse --short HEAD)" >> $GITHUB_ENV
|
||||||
|
|
||||||
|
|
||||||
# Extract metadata (tags, labels) for Docker
|
# Extract metadata (tags, labels) for Docker
|
||||||
# https://github.com/docker/metadata-action
|
# https://github.com/docker/metadata-action
|
||||||
- name: Extract Docker metadata
|
- name: Extract Docker metadata
|
||||||
@ -70,6 +77,7 @@ jobs:
|
|||||||
uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
|
uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
|
||||||
with:
|
with:
|
||||||
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-${{ matrix.service }}
|
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-${{ matrix.service }}
|
||||||
|
tags: ${{ env.DATE }}-${{ env.COMMIT }}
|
||||||
|
|
||||||
# Build and push Docker image with Buildx (don't push on PR)
|
# Build and push Docker image with Buildx (don't push on PR)
|
||||||
# https://github.com/docker/build-push-action
|
# https://github.com/docker/build-push-action
|
||||||
@ -92,8 +100,8 @@ jobs:
|
|||||||
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
|
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
|
||||||
with:
|
with:
|
||||||
registry: ${{ env.REGISTRY2 }}
|
registry: ${{ env.REGISTRY2 }}
|
||||||
username: ${{ github.actor }}
|
username: ${{ secrets.ALI_REG_USERNAME }}
|
||||||
password: ${{ secrets.GITEATOKEN }}
|
password: ${{ secrets.ALI_REG_PASSWORD }}
|
||||||
|
|
||||||
# Extract metadata (tags, labels) for Docker
|
# Extract metadata (tags, labels) for Docker
|
||||||
# https://github.com/docker/metadata-action
|
# https://github.com/docker/metadata-action
|
||||||
@ -102,6 +110,7 @@ jobs:
|
|||||||
uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
|
uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
|
||||||
with:
|
with:
|
||||||
images: ${{ env.REGISTRY2 }}/${{ env.IMAGE_NAME }}-${{ matrix.service }}
|
images: ${{ env.REGISTRY2 }}/${{ env.IMAGE_NAME }}-${{ matrix.service }}
|
||||||
|
tags: ${{ env.DATE }}-${{ env.COMMIT }}
|
||||||
|
|
||||||
# Build and push Docker image with Buildx (don't push on PR)
|
# Build and push Docker image with Buildx (don't push on PR)
|
||||||
# https://github.com/docker/build-push-action
|
# https://github.com/docker/build-push-action
|
||||||
@ -130,3 +139,33 @@ jobs:
|
|||||||
# This step uses the identity token to provision an ephemeral certificate
|
# This step uses the identity token to provision an ephemeral certificate
|
||||||
# against the sigstore community Fulcio instance.
|
# against the sigstore community Fulcio instance.
|
||||||
run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
|
run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
|
||||||
|
outputs:
|
||||||
|
version: ${{ steps.meta.outputs.version }}
|
||||||
|
|
||||||
|
update-manifest:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
needs: [ "build" ]
|
||||||
|
permissions:
|
||||||
|
contents: write
|
||||||
|
steps:
|
||||||
|
- name: Checkout manifest
|
||||||
|
if: github.event_name == 'push'
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
with:
|
||||||
|
ref: manifest
|
||||||
|
token: ${{ secrets.GITHUBTOKEN }}
|
||||||
|
- name: Update manifest
|
||||||
|
if: github.event_name == 'push'
|
||||||
|
uses: mikefarah/yq@master
|
||||||
|
with:
|
||||||
|
cmd: yq eval '.tag = "${{ needs.build.outputs.version }}"' -i values.yaml
|
||||||
|
- name: Git Auto Commit
|
||||||
|
if: github.event_name == 'push'
|
||||||
|
uses: stefanzweifel/git-auto-commit-action@v5.0.1
|
||||||
|
with:
|
||||||
|
commit_message: "Update deployment image tag to ${{ needs.build.outputs.version }}"
|
||||||
|
branch: manifest
|
||||||
|
commit_user_name: "github-actions[bot]"
|
||||||
|
commit_user_email: "github-actions[bot]@users.noreply.github.com"
|
||||||
|
commit_author: "github-actions[bot] <github-actions[bot]@users.noreply.github.com>"
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user