Publish binaries in dapper (#6375) #6
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| push: | |
| paths-ignore: | |
| - "**.md" | |
| - "channel.yaml" | |
| - "install.sh" | |
| - "!.github/workflows/test-suite.yaml" | |
| tags: | |
| - "v*" | |
| env: | |
| GITHUB_ACTION_TAG: ${{ github.ref_name }} | |
| GH_TOKEN: ${{ github.token }} | |
| name: Release | |
| permissions: | |
| contents: write | |
| id-token: write | |
| jobs: | |
| release-amd64: | |
| runs-on: runs-on,runner=8cpu-linux-x64,run-id=${{ github.run_id }},image=ubuntu22-full-x64,hdd=256 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Install Dapper | |
| run: | | |
| curl -sL https://releases.rancher.com/dapper/latest/dapper-$(uname -s)-$(uname -m) > /usr/local/bin/dapper | |
| chmod +x /usr/local/bin/dapper | |
| - name: Validate Release | |
| run: | | |
| dapper -f Dockerfile --target dapper make validate-release | |
| - name: Build | |
| run: | | |
| dapper -f Dockerfile --target dapper make dapper-ci | |
| - name: "Read secrets" | |
| uses: rancher-eio/read-vault-secrets@main | |
| with: | |
| secrets: | | |
| secret/data/github/repo/${{ github.repository }}/dockerhub/${{ github.repository_owner }}/credentials username | DOCKER_USERNAME ; | |
| secret/data/github/repo/${{ github.repository }}/dockerhub/${{ github.repository_owner }}/credentials password | DOCKER_PASSWORD ; | |
| - name: Package Images | |
| run: | | |
| dapper -f Dockerfile --target dapper make package-images | |
| - name: Scan Images | |
| continue-on-error: true | |
| run: | | |
| dapper -f Dockerfile --target dapper make scan-images | |
| - name: Test | |
| run: | | |
| dapper -f Dockerfile --target dapper make test | |
| - name: Publish Image Runtime | |
| run: | | |
| GITHUB_ACTION_TAG=${{ github.ref_name }} dapper -f Dockerfile --target dapper make publish-image-runtime | |
| env: | |
| DOCKER_USERNAME: ${{ env.DOCKER_USERNAME }} | |
| DOCKER_PASSWORD: ${{ env.DOCKER_PASSWORD }} | |
| - name: Checksum Artifacts | |
| run: | | |
| GITHUB_ACTION_TAG=${{ github.ref_name }} dapper -f Dockerfile --target dapper make checksum | |
| - name: Publish Artifacts | |
| run: | | |
| dapper -f Dockerfile --target dapper make publish-binary | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| release-arm64: | |
| runs-on: runs-on,runner=8cpu-linux-arm64,run-id=${{ github.run_id }},image=ubuntu22-full-arm64,hdd=256 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Install Dapper | |
| run: | | |
| curl -sL https://releases.rancher.com/dapper/latest/dapper-$(uname -s)-$(uname -m) > /usr/local/bin/dapper | |
| chmod +x /usr/local/bin/dapper | |
| - name: Validate Release | |
| run: | | |
| dapper -f Dockerfile --target dapper make validate-release | |
| - name: Build | |
| run: | | |
| dapper -f Dockerfile --target dapper make dapper-ci | |
| - name: "Read secrets" | |
| uses: rancher-eio/read-vault-secrets@main | |
| with: | |
| secrets: | | |
| secret/data/github/repo/${{ github.repository }}/dockerhub/${{ github.repository_owner }}/credentials username | DOCKER_USERNAME ; | |
| secret/data/github/repo/${{ github.repository }}/dockerhub/${{ github.repository_owner }}/credentials password | DOCKER_PASSWORD ; | |
| - name: Package Images | |
| run: | | |
| dapper -f Dockerfile --target dapper make package-images | |
| - name: Scan Images | |
| continue-on-error: true | |
| run: | | |
| dapper -f Dockerfile --target dapper make scan-images | |
| - name: Publish Image Runtime | |
| run: | | |
| GITHUB_ACTION_TAG=${{ github.ref_name }} dapper -f Dockerfile --target dapper make publish-image-runtime | |
| env: | |
| DOCKER_USERNAME: ${{ env.DOCKER_USERNAME }} | |
| DOCKER_PASSWORD: ${{ env.DOCKER_PASSWORD }} | |
| - name: Checksum | |
| run: | | |
| GITHUB_ACTION_TAG=${{ github.ref_name }} dapper -f Dockerfile --target dapper make checksum | |
| - name: Publish Artifacts | |
| run: | | |
| dapper -f Dockerfile --target dapper make publish-binary | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| dispatch: | |
| needs: [release-amd64, release-arm64] | |
| runs-on: runs-on,runner=8cpu-linux-x64,run-id=${{ github.run_id }},image=ubuntu22-full-x64,hdd=64 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Install Dapper | |
| run: | | |
| curl -sL https://releases.rancher.com/dapper/latest/dapper-$(uname -s)-$(uname -m) > /usr/local/bin/dapper | |
| chmod +x /usr/local/bin/dapper | |
| - name: "Read secrets" | |
| uses: rancher-eio/read-vault-secrets@main | |
| with: | |
| secrets: | | |
| secret/data/github/repo/${{ github.repository }}/pat_username/credentials token | PAT_USERNAME ; | |
| - name: Dispatch | |
| run: | | |
| dapper -f Dockerfile --target dapper make dispatch | |
| env: | |
| PAT_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| PATH_USERNAME: ${{ env.PAT_USERNAME }} | |
| GITHUB_ACTION_TAG: ${{ env.GITHUB_ACTION_TAG }} |