-
Notifications
You must be signed in to change notification settings - Fork 78
119 lines (118 loc) · 4.38 KB
/
_docker-image.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
# !yamlfmt!:ignore
#
# Copyright (C) 2019-2024 vdaas.org vald team <[email protected]>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# You may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
name: "Build docker image"
on:
workflow_call:
inputs:
target:
type: string
description: "Build target. e.g. `agent-ngt`"
required: true
platforms:
type: string
description: "If it is specified, specified platforms will be used."
required: false
default: ""
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref != 'refs/heads/main' && github.ref || github.sha }}-${{ github.event_name }}-${{ inputs.target }}
cancel-in-progress: true
jobs:
dump-contexts-to-log:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: ./.github/actions/dump-context
build:
runs-on: ubuntu-latest
if: >-
${{ (github.event_name == 'pull_request' &&
github.event.pull_request.head.repo.fork == false) ||
(github.event.pull_request.head.repo.fork == true &&
github.event_name == 'pull_request_target' &&
contains(github.event.pull_request.labels.*.name, 'ci/approved')) ||
(github.event_name == 'push' &&
github.ref == 'refs/heads/main') ||
(github.event_name == 'push' &&
startsWith(github.ref, 'refs/heads/release/v')) ||
startsWith(github.ref, 'refs/tags/') ||
(github.event_name == 'schedule')
}}
steps:
- name: Get ref
id: ref
run: |
if [ ${{ github.event.pull_request.head.sha }} != "" ]; then
echo ref=${{ github.event.pull_request.head.sha }} >> $GITHUB_OUTPUT
else
echo ref=${{ github.sha }} >> $GITHUB_OUTPUT
fi
- uses: actions/checkout@v4
with:
ref: ${{ steps.ref.outputs.ref }}
- name: Set Git config
run: |
git config --global --add safe.directory ${GITHUB_WORKSPACE}
- name: Setup QEMU
uses: docker/setup-qemu-action@v3
with:
image: ghcr.io/vdaas/vald/vald-binfmt:nightly
platforms: linux/amd64,linux/arm64
- name: Setup Docker Buildx
id: buildx
uses: docker/setup-buildx-action@v3
with:
version: latest
platforms: linux/amd64,linux/arm64
driver-opts: |
image=ghcr.io/vdaas/vald/vald-buildkit:nightly
network=host
buildkitd-flags: "--debug --oci-worker-gc=false --oci-worker-snapshotter=stargz"
- name: Login to DockerHub
uses: docker/login-action@v3
with:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_PASS }}
- name: Login to GitHub Container Registry
uses: docker/login-action@v3
with:
registry: ghcr.io
# username: ${{ github.actor }}
# password: ${{ secrets.GITHUB_TOKEN }}
username: ${{ secrets.PACKAGE_USER }}
password: ${{ secrets.PACKAGE_TOKEN }}
- name: Build and Publish
id: build_and_publish
uses: ./.github/actions/docker-build
with:
target: ${{ inputs.target }}
platforms: ${{ inputs.platforms }}
builder: ${{ steps.buildx.outputs.name }}
- name: Scan the Docker image
if: startsWith( github.ref, 'refs/tags/')
uses: ./.github/actions/scan-docker-image
with:
image_ref: "${{ steps.build_and_publish.outputs.IMAGE_NAME }}:${{ steps.build_and_publish.outputs.PRIMARY_TAG }}"
slack:
runs-on: ubuntu-latest
needs: [build]
if: github.ref == 'refs/heads/main' || startsWith( github.ref, 'refs/tags/')
steps:
- uses: actions/checkout@v4
- uses: ./.github/actions/notify-slack
with:
author_name: ${{ inputs.target }} image build
slack_notify_webhook_url: ${{ secrets.SLACK_NOTIFY_WEBHOOK_URL }}