-
Notifications
You must be signed in to change notification settings - Fork 0
62 lines (51 loc) · 1.86 KB
/
build-docker-image.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
name: Build docker image
on: [push]
env:
DOCKER_REGISTRY_PROJECT_ID: passculture-infra-prod
DOCKER_REGISTRY_REGION: europe-west1
DOCKER_REGISTRY_REPOSITORY: pass-culture-artifact-registry
jobs:
build-docker-image:
name: "Build image job"
runs-on: [self-hosted, linux, x64]
permissions:
id-token: write
contents: write
steps:
- name: Checkout ref
uses: actions/checkout@v3
with:
ref: "${{ github.ref }}"
fetch-depth: 0
- name: Output variables
id: vars
run: echo "DOCKER_REPO=${DOCKER_REGISTRY_REGION}-docker.pkg.dev/${DOCKER_REGISTRY_PROJECT_ID}/${DOCKER_REGISTRY_REPOSITORY}" >> $GITHUB_ENV
- name: Check short SHA
run: echo ${GITHUB_SHA::8}
- name: Set up Docker Buildx
uses: docker/[email protected]
with:
driver: docker
- id: openid-auth
name: "Authenticate with Google Cloud"
uses: "google-github-actions/auth@v1"
with:
create_credentials_file: false
token_format: "access_token"
workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
service_account: ${{ secrets.ARTIFACT_REGISTRY_SERVICE_ACCOUNT }}
- id: docker-login
uses: docker/[email protected]
name: "Docker login"
with:
registry: "${{ env.DOCKER_REGISTRY_REGION }}-docker.pkg.dev"
username: "oauth2accesstoken"
password: "${{ steps.openid-auth.outputs.access_token }}"
- name: "Build and push recommendation docker image"
uses: docker/[email protected]
with:
context: "apps/recommendation/api"
push: true
tags: |
${{ env.DOCKER_REPO }}/api-data/recommendation:${GITHUB_SHA::8}
${{ env.DOCKER_REPO }}/api-data/recommendation:latest