build.yaml

# Build and push Docker image to docker hub

name: Build

on:
  push:
    # Sequence of patterns matched against refs/heads
    branches:
      - master
    tags:
      - "*"

jobs:
  build-and-push:
    name: BuildAndPush
    runs-on: ubuntu-latest
    permissions:
      contents: 'read'
      id-token: 'write'

    env:
      IMAGE_NAME: prometheus-sleeker
      GCP_PROJECT_ID: quortex-registry-public

    steps:
      # This step uses Github's checkout-action: https://github.com/actions/checkout
      - name: Check out code
        uses: actions/checkout@v3

      # Deduced the appropriate tag for the image (inspired by the docker action https://github.com/actions-hub/docker)
      - name: Set env
        run: |
          IMAGE_TAG=${TAG} && \
          if [[ -z "${IMAGE_TAG}" ]]; then \
            IMAGE_TAG=${GITHUB_REF#*/}; \
            IMAGE_TAG=${IMAGE_TAG#*/}; \
            IMAGE_TAG=$(echo $IMAGE_TAG | sed -e "s#^v##"); \
            if [[ "$IMAGE_TAG" == "master" || "$IMAGE_TAG" == "main" ]]; then \
              IMAGE_TAG=latest; \
            fi \
          fi && \
          echo "IMAGE_TAG=${IMAGE_TAG}" >> $GITHUB_ENV
      # Setup gcloud CLI
      - uses: google-github-actions/auth@v1
        with:
          token_format: 'access_token'
          workload_identity_provider: ${{ vars.WORKLOAD_IDENTITY_POOL }}
          service_account: ${{ vars.SERVICE_ACCOUNT }}

      # Build docker image
      - name: Build
        run: |-
          docker build -t eu.gcr.io/${{ env.GCP_PROJECT_ID }}/$IMAGE_NAME:$IMAGE_TAG .
      # Configure docker to use the gcloud command-line tool as a credential helper
      - run: |
          gcloud auth configure-docker -q
      # Push image to Google Container Registry
      - name: Push
        run: |-
          docker push eu.gcr.io/${{ env.GCP_PROJECT_ID }}/$IMAGE_NAME:$IMAGE_TAG