Add release workflow (#35)

.dockerignore

@@ -1,3 +1,5 @@
 .kubebuilder
 pomerium-operator
 **/debug.test
+dist/*
+bin/*

.github/workflows/default.yaml

@@ -72,7 +72,7 @@ jobs:
       - name: Docker Build
         run: docker build .
 
-  publish-docker:
+  publish-docker-snapshot:
     if: github.ref == 'refs/heads/master' && github.event_name == 'push'
     runs-on: ubuntu-latest
     needs:
@@ -89,10 +89,10 @@ jobs:
           password: ${{ secrets.DOCKERHUB_TOKEN }}
           repository: pomerium/pomerium-operator
 
-      - name: Docker Publish - Latest
+      - name: Docker Publish - Master
         uses: zenato/docker-action@master
         with:
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
           repository: pomerium/pomerium-operator
-          tag: latest
+          tag: master

.github/workflows/release.yaml

@@ -0,0 +1,66 @@
+name: Release
+on:
+  release:
+    types:
+      - published
+
+jobs:
+  release-binary:
+    runs-on: ubuntu-latest
+    container:
+      image: "golang:1.13"
+    strategy:
+      matrix:
+        os:
+          - darwin
+          - linux
+        arch:
+          - amd64
+    steps:
+      - name: Check out code
+        uses: actions/[email protected]
+
+      - name: Install go-task
+        run: curl -sL https://taskfile.dev/install.sh | sh
+
+      - name: Release
+        run: GOOS=${{ matrix.os }} GOARCH=${{ matrix.arch }} bin/task release
+
+      - name: Upload binaries to release
+        uses: svenstaro/upload-release-action@v1-release
+        with:
+          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          file: dist/*
+          file_glob: true
+          tag: ${{ github.ref }}
+          overwrite: true
+
+  release-docker:
+    needs:
+      - release-binary
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out code
+        uses: actions/[email protected]
+
+      - name: Get tag name
+        id: tagName
+        uses: olegtarasov/get-tag@v1
+
+      - name: Docker Publish - Release
+        uses: zenato/docker-action@master
+        continue-on-error: true
+        with:
+          username: ${{ secrets.DOCKERHUB_USER }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          repository: pomerium/pomerium-operator
+          tag: ${{ steps.tagName.outputs.tag }}
+
+      - name: Docker Publish - Latest
+        if: "!contains(steps.tagName.outputs.tag, 'rc')"
+        uses: zenato/docker-action@master
+        with:
+          username: ${{ secrets.DOCKERHUB_USER }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          repository: pomerium/pomerium-operator
+          tag: latest

.gitignore

@@ -71,3 +71,5 @@ coverage.txt
 /.kubebuilder
 .test*.yaml
 test*.yaml
+/dist/*
+/bin/*

Taskfile.yml

@@ -7,6 +7,7 @@ vars:
     sh: go env GOARCH
   kbversion: 2.2.0
   kbdir: ./.kubebuilder
+  checksum_cmd: "shasum -a 256"
 
 env:
   KUBEBUILDER_ASSETS: "{{.kbdir}}/bin"
@@ -42,6 +43,15 @@ tasks:
       - ./go.mod
       - ./go.sum
 
+  release:
+    desc: Generate release assets
+    vars:
+      BINARY: pomerium-operator-{{.os}}-{{.arch}}
+    cmds:
+      - mkdir -p ./dist
+      - go build -o dist/{{.BINARY}} cmd/pomerium-operator/*.go
+      - cd dist && {{.checksum_cmd}} {{.BINARY}} > {{.BINARY}}.sha256
+
   run:
     desc: Run in debug mode with $ARGS as arguments
     cmds: