Skip to content

Use repo-runners for improved reliability #658

Use repo-runners for improved reliability

Use repo-runners for improved reliability #658

name: Build and Sign Blockchain Commit Images
on:
push:
branches-ignore:
- 'release/[0-9]+.[0-9]+'
workflow_dispatch:
jobs:
build-container-geth-amd-sha:
runs-on: [self-hosted, blockchain, 8-cpu]
permissions:
contents: read
id-token: write
security-events: write
steps:
- uses: actions/checkout@v3
- name: Login at GCP Artifact Registry
# 9817fca8d235a679e56bdcc72c31dfc548413805 is master at Sep 28, 2023
uses: celo-org/reusable-workflows/.github/actions/auth-gcp-artifact-registry@9817fca8d235a679e56bdcc72c31dfc548413805
with:
workload-id-provider: 'projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-blockchain-dev/providers/github-by-repos'
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
- name: Build and push container
uses: celo-org/reusable-workflows/.github/actions/build-container@9817fca8d235a679e56bdcc72c31dfc548413805
with:
platforms: linux/amd64
registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
tag: ${{ github.sha }}
context: .
dockerfile: Dockerfile
push: ${{ fromJSON(true) }}
load: ${{ fromJSON(false) }}
build-container-geth-arm-sha:
runs-on: [self-hosted, blockchain, 8-cpu]
permissions:
contents: read
id-token: write
security-events: write
steps:
- uses: actions/checkout@v3
- name: Login at GCP Artifact Registry
uses: celo-org/reusable-workflows/.github/actions/auth-gcp-artifact-registry@9817fca8d235a679e56bdcc72c31dfc548413805
with:
workload-id-provider: 'projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-blockchain-dev/providers/github-by-repos'
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
- name: Build and push container
uses: celo-org/reusable-workflows/.github/actions/build-container@9817fca8d235a679e56bdcc72c31dfc548413805
with:
platforms: linux/arm64
registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
tag: ${{ github.sha }}
context: .
dockerfile: Dockerfile.arm64
push: ${{ fromJSON(true) }}
load: ${{ fromJSON(false) }}
build-container-geth-amd-master:
runs-on: [self-hosted, blockchain, 8-cpu]
if: github.ref == 'refs/heads/master'
permissions:
contents: read
id-token: write
security-events: write
steps:
- uses: actions/checkout@v3
- name: Login at GCP Artifact Registry
uses: celo-org/reusable-workflows/.github/actions/auth-gcp-artifact-registry@9817fca8d235a679e56bdcc72c31dfc548413805
with:
workload-id-provider: 'projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-blockchain/providers/github-by-repos'
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-blockchain-public/geth
- name: Build and push container
uses: celo-org/reusable-workflows/.github/actions/build-container@9817fca8d235a679e56bdcc72c31dfc548413805
with:
platforms: linux/amd64
registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
tag: master
context: .
dockerfile: Dockerfile
push: ${{ fromJSON(true) }}
load: ${{ fromJSON(false) }}
build-container-geth-arm-master:
runs-on: [self-hosted, blockchain, 8-cpu]
if: github.ref == 'refs/heads/master'
permissions:
contents: read
id-token: write
security-events: write
steps:
- uses: actions/checkout@v3
- name: Login at GCP Artifact Registry
uses: celo-org/reusable-workflows/.github/actions/auth-gcp-artifact-registry@9817fca8d235a679e56bdcc72c31dfc548413805
with:
workload-id-provider: 'projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-blockchain/providers/github-by-repos'
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-blockchain-public/geth
- name: Build and push container
uses: celo-org/reusable-workflows/.github/actions/build-container@9817fca8d235a679e56bdcc72c31dfc548413805
with:
platforms: linux/arm64
registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
tag: master
context: .
dockerfile: Dockerfile.arm64
push: ${{ fromJSON(true) }}
load: ${{ fromJSON(false) }}
build-container-geth-all-master:
runs-on: [self-hosted, blockchain, 8-cpu]
if: github.ref == 'refs/heads/master'
permissions:
contents: read
id-token: write
security-events: write
steps:
- uses: actions/checkout@v3
- name: Login at GCP Artifact Registry
uses: celo-org/reusable-workflows/.github/actions/auth-gcp-artifact-registry@9817fca8d235a679e56bdcc72c31dfc548413805
with:
workload-id-provider: 'projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-blockchain/providers/github-by-repos'
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-blockchain-public/geth-all
- name: Build and push container
uses: celo-org/reusable-workflows/.github/actions/build-container@9817fca8d235a679e56bdcc72c31dfc548413805
with:
platforms: linux/amd64
registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
tag: master
context: .
dockerfile: Dockerfile.alltools
push: ${{ fromJSON(true) }}
load: ${{ fromJSON(false) }}