-
Notifications
You must be signed in to change notification settings - Fork 1.3k
183 lines (169 loc) · 7.5 KB
/
rust-docker-build.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
name: Build and deploy rust container images
on:
workflow_dispatch:
push:
paths:
- 'rust/**'
- '.github/workflows/rust-docker-build.yml'
branches:
- 'master'
jobs:
build:
name: build ${{ matrix.image }}
strategy:
matrix:
include:
- image: capture
dockerfile: ./rust/Dockerfile
- image: hook-api
dockerfile: ./rust/Dockerfile
- image: hook-janitor
dockerfile: ./rust/Dockerfile
- image: hook-worker
dockerfile: ./rust/Dockerfile
- image: hook-migrator
dockerfile: ./rust/Dockerfile.migrate-hooks
- image: cyclotron-janitor
dockerfile: ./rust/Dockerfile
- image: cyclotron-fetch
dockerfile: ./rust/Dockerfile
- image: property-defs-rs
dockerfile: ./rust/Dockerfile
- image: error-tracking-rs
dockerfile: ./rust/Dockerfile
runs-on: depot-ubuntu-22.04-4
permissions:
id-token: write # allow issuing OIDC tokens for this workflow run
contents: read # allow reading the repo contents
packages: write # allow push to ghcr.io
outputs:
capture_digest: ${{ steps.digest.outputs.capture_digest }}
cyclotron-fetch_digest: ${{ steps.digest.outputs.cyclotron-fetch_digest }}
cyclotron-janitor_digest: ${{ steps.digest.outputs.cyclotron-janitor_digest }}
property-defs-rs_digest: ${{ steps.digest.outputs.property-defs-rs_digest }}
hook-api_digest: ${{ steps.digest.outputs.hook-api_digest }}
hook-janitor_digest: ${{ steps.digest.outputs.hook-janitor_digest }}
hook-worker_digest: ${{ steps.digest.outputs.hook-worker_digest }}
hook-migrator_digest: ${{ steps.digest.outputs.hook-migrator_digest }}
error-tracking-rs_digest: ${{ steps.digest.outputs.error-tracking-rs_digest }}
defaults:
run:
working-directory: rust
steps:
- name: Check Out Repo
# Checkout project code
# Use sparse checkout to only select files in rust directory
# Turning off cone mode ensures that files in the project root are not included during checkout
uses: actions/checkout@v3
with:
sparse-checkout: 'rust/'
sparse-checkout-cone-mode: false
- name: Set up Depot CLI
uses: depot/setup-action@v1
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
with:
image: tonistiigi/binfmt:latest
platforms: all
- name: Login to ghcr.io
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
logout: false
- name: Docker meta
id: meta
uses: docker/metadata-action@v5
with:
images: ghcr.io/posthog/posthog/${{ matrix.image }}
tags: |
type=ref,event=pr
type=ref,event=branch
type=semver,pattern={{version}}
type=semver,pattern={{major}}.{{minor}}
type=sha
- name: Set up Docker Buildx
id: buildx
uses: docker/setup-buildx-action@v2
- name: Build and push image
id: docker_build
uses: depot/build-push-action@v1
with:
context: ./rust/
file: ${{ matrix.dockerfile }}
push: true
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
platforms: linux/arm64,linux/amd64
cache-from: type=gha
cache-to: type=gha,mode=max
build-args: BIN=${{ matrix.image }}
- name: Container image digest
id: digest
run: |
echo ${{ steps.docker_build.outputs.digest }}
echo "${{matrix.image}}_digest=${{ steps.docker_build.outputs.digest }}" >> $GITHUB_OUTPUT
cat $GITHUB_OUTPUT
deploy:
name: deploy ${{ matrix.release }}
runs-on: ubuntu-latest
needs: build
if: github.ref == 'refs/heads/master'
strategy:
matrix:
include:
- release: capture
values:
image:
sha: '${{ needs.build.outputs.capture_digest }}'
- release: capture-replay
values:
image:
sha: '${{ needs.build.outputs.capture_digest }}'
- release: cyclotron
values:
fetch_image:
sha: '${{ needs.build.outputs.cyclotron-fetch_digest }}'
janitor_image:
sha: '${{ needs.build.outputs.cyclotron-janitor_digest }}'
- release: property-defs-rs
values:
image:
sha: '${{ needs.build.outputs.property-defs-rs_digest }}'
# - release: error-tracking-rs - disabled until a charts in place, for now we just build
# values:
# image:
# sha: '${{ needs.build.outputs.error-tracking-rs_digest }}'
- release: hoghooks
values:
api_image:
sha: '${{ needs.build.outputs.hook-api_digest }}'
janitor_image:
sha: '${{ needs.build.outputs.hook-janitor_digest }}'
worker_image:
sha: '${{ needs.build.outputs.hook-worker_digest }}'
migrator_image:
sha: '${{ needs.build.outputs.hook-migrator_digest }}'
steps:
- name: get deployer token
id: deployer
uses: getsentry/action-github-app-token@v3
with:
app_id: ${{ secrets.DEPLOYER_APP_ID }}
private_key: ${{ secrets.DEPLOYER_APP_PRIVATE_KEY }}
- name: trigger ${{ matrix.release }} deployment
uses: peter-evans/repository-dispatch@v3
with:
token: ${{ steps.deployer.outputs.token }}
repository: PostHog/charts
event-type: commit_state_update
client-payload: |
{
"values": ${{ toJson(matrix.values) }},
"release": "${{ matrix.release }}",
"commit": ${{ toJson(github.event.head_commit) }},
"repository": ${{ toJson(github.repository) }},
"labels": [],
"timestamp": "${{ github.event.head_commit.timestamp }}"
}