pomerium/.github/workflows/docker-main.yaml
dependabot[bot] d84ce5ca41
chore(deps): bump mikefarah/yq from 4.30.6 to 4.30.8 (#3895)
Bumps [mikefarah/yq](https://github.com/mikefarah/yq) from 4.30.6 to 4.30.8.
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](87cba2ecbe...dd6cf3df14)

---
updated-dependencies:
- dependency-name: mikefarah/yq
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-17 10:13:10 -07:00

98 lines
3.3 KiB
YAML

name: Docker Main
permissions:
contents: read
on:
push:
branches:
- main
jobs:
publish:
runs-on: ubuntu-latest
outputs:
sha-tag: ${{ steps.metadata.outputs.sha-tag }}
image: ${{ steps.metadata.outputs.image }}
steps:
- name: Checkout
uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
with:
fetch-depth: 0
- name: Set up QEMU
uses: docker/setup-qemu-action@e81a89b1732b9c48d79cd809d8d81d79c4647a18
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@8c0edbc76e98fa90f69d9a2c020dcb50019dc325
- name: Login to DockerHub
uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a
with:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: Prepare Image Metadata
id: metadata
run: |
IMAGE=pomerium/pomerium
SHA_TAG=git-${GITHUB_SHA::8}
TAGS=${IMAGE}:main
TAGS=${TAGS},${IMAGE}:master
TAGS=${TAGS},${IMAGE}:${SHA_TAG}
TS=$(date +%Y%m%d%H%M%S)
echo ::set-output name=tags::${TAGS}
echo ::set-output name=timestamp::${TS}
echo ::set-output name=name::pomerium
echo ::set-output name=image::${IMAGE}
echo ::set-output name=sha-tag::${SHA_TAG}
- name: Docker Publish - Main
uses: docker/build-push-action@37abcedcc1da61a57767b7588cb9d03eb57e28b3
with:
context: .
file: ./Dockerfile
push: true
platforms: linux/amd64,linux/arm64
tags: ${{ steps.metadata.outputs.tags }}
labels: |
org.opencontainers.image.created=${{ steps.metadata.outputs.timestamp }}
org.opencontainers.image.name=${{ steps.metadata.outputs.name }}
org.opencontainers.image.revision=${{ github.sha }}
- name: Docker Publish - Debug
uses: docker/build-push-action@37abcedcc1da61a57767b7588cb9d03eb57e28b3
with:
context: .
file: ./Dockerfile.debug
push: true
platforms: linux/amd64,linux/arm64
tags: pomerium/pomerium:debug
labels: |
org.opencontainers.image.created=${{ steps.metadata.outputs.timestamp }}
org.opencontainers.image.name=${{ steps.metadata.outputs.name }}
org.opencontainers.image.revision=${{ github.sha }}
deploy:
runs-on: ubuntu-latest
needs: publish
steps:
- name: Checkout Gitops Repo
uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
with:
repository: pomerium/gitops-argocd
token: ${{ secrets.APPARITOR_GITHUB_TOKEN }}
- name: Bump psql environment
uses: mikefarah/yq@dd6cf3df146f3e2c0f8c765a6ef9e35780ad8cc1
with:
cmd:
yq eval '.pomerium.image.tag = "${{ needs.publish.outputs.sha-tag }}"' -i
projects/pomerium-master-postgres/pomerium/values.yaml
- name: Commit changes
uses: stefanzweifel/git-auto-commit-action@3ea6ae190baf489ba007f7c92608f33ce20ef04a
with:
commit_message: |
Bump test environment pomerium/pomerium
Image tag: ${{ needs.publish.outputs.sha-tag }}
Source Repo: ${{ github.repository }}@${{ github.sha }}