node-disk-manager/.github/workflows/factory.yaml at 79bfac22756ab9a4e49d451feb170e57c731881c · Vicente-Cheng/node-disk-manager · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
on:
  workflow_call:
    inputs:
      refs:
        required: false
        type: string
      tag:
        required: true
        type: string
      push:
        required: true
        type: boolean

env:
  repo: "rancher"
  controllerImageName: "harvester-node-disk-manager"
  webhookImageName: "harvester-node-disk-manager-webhook"

jobs:
  dapper-build:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
    - name: Checkout code without refs
      if: ${{ inputs.refs == '' }}
      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

    - name: Checkout code with refs
      if: ${{ inputs.refs != '' }}
      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
      with:
        ref: ${{ inputs.refs }}

    - name: Set up QEMU
      uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3

    - name: Set up Docker Buildx
      uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3

    - name: Run dapper
      run: make ci

    - name: Read some Secrets
      uses: rancher-eio/read-vault-secrets@d266f55186f80a893839f6e15662e67388e443e6 # v3
      if: ${{ inputs.push == true }}
      with:
        secrets: |
          secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials username | DOCKER_USERNAME ;
          secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials password | DOCKER_PASSWORD

    - name: Login to Docker Hub
      uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
      if: ${{ inputs.push == true }}
      with:
        username: ${{ env.DOCKER_USERNAME }}
        password: ${{ env.DOCKER_PASSWORD }}

    - name: Docker Build (Controller)
      uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
      with:
        provenance: false
        context: .
        platforms: linux/amd64,linux/arm64
        file: package/Dockerfile
        push: ${{ inputs.push }}
        tags: ${{ env.repo }}/${{ env.controllerImageName }}:${{ inputs.tag }}

    - name: Docker Build (Webhook)
      uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
      with:
        provenance: false
        context: .
        platforms: linux/amd64,linux/arm64
        file: package/Dockerfile.webhook
        push: ${{ inputs.push }}
        tags: ${{ env.repo }}/${{ env.webhookImageName }}:${{ inputs.tag }}