style(ct): fix typo in secrets reference #438
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Base Container Image | |
| on: | |
| push: | |
| tags: | |
| - 'v[6-9].**' | |
| branches: | |
| - 'develop' | |
| - '10478-version-base-img' | |
| paths: | |
| - 'modules/container-base/**' | |
| - 'modules/dataverse-parent/pom.xml' | |
| - '.github/workflows/container_base_push.yml' | |
| schedule: | |
| - cron: '23 3 * * 0' # Run for 'develop' every Sunday at 03:23 UTC | |
| env: | |
| PLATFORMS: linux/amd64,linux/arm64 | |
| NUM_PAST_RELEASES: 3 | |
| jobs: | |
| discover: | |
| name: Discover Release Matrix | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: read | |
| # Only run in upstream repo - avoid unnecessary runs in forks and only for scheduled | |
| if: ${{ github.repository_owner == 'IQSS' }} | |
| outputs: | |
| branches: ${{ steps.matrix.outputs.branches }} | |
| steps: | |
| - name: Build branch matrix options | |
| id: matrix | |
| # TODO: remove the feature branch and re-enable the if/else! | |
| run: | | |
| # Get last three releases and include develop branch as matrix elements | |
| #if [[ "${{ github.event_name }}" == "schedule" ]]; then | |
| echo "branches=$(curl -f -sS https://api.github.com/repos/IQSS/dataverse/releases | \ | |
| jq '[ .[0:${{ env.NUM_PAST_RELEASES }}] | .[].tag_name, "develop", "10478-version-base-img" ]')" | tr -d "\n" | tr -s " " | \ | |
| tee -a "$GITHUB_OUTPUT" | |
| #else | |
| # # Note: github.ref_name will be the name of the branch or the tag pushed | |
| # echo "branches=['${{ github.ref_name }}']" | tee -a "$GITHUB_OUTPUT" | |
| #fi | |
| build: | |
| name: Build image | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: read | |
| needs: discover | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| branch: ${{ fromJson(needs.discover.outputs.branches) }} | |
| # Only run in upstream repo - avoid unnecessary runs in forks | |
| if: ${{ github.repository_owner == 'IQSS' }} | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ matrix.branch }} | |
| - name: Determine Java version from Parent POM | |
| run: | | |
| echo "JAVA_VERSION=$(grep '<target.java.version>' modules/dataverse-parent/pom.xml | cut -f2 -d'>' | cut -f1 -d'<')" >> ${GITHUB_ENV} | |
| - name: Set up JDK ${{ env.JAVA_VERSION }} | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: ${{ env.JAVA_VERSION }} | |
| distribution: 'temurin' | |
| cache: 'maven' | |
| cache-dependency-path: | | |
| modules/container-base/pom.xml | |
| # Note: Accessing, pushing tags etc. to DockerHub will only succeed in upstream and | |
| # on events in context of upstream because secrets. PRs run in context of forks by default! | |
| - name: Log in to the Container registry | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| # This is replaced by adding a remote ARM64 build host in addition to the local AMD64 | |
| # - name: Set up QEMU for multi-arch builds | |
| # uses: docker/setup-qemu-action@v3 | |
| # with: | |
| # platforms: ${{ env.PLATFORMS }} | |
| # Setup SSH access to ARM64 builder node | |
| - name: Setup SSH agent | |
| uses: webfactory/ssh-agent@v0.9.0 | |
| with: | |
| ssh-private-key: ${{ secrets.BUILDER_ARM64_SSH_PRIVATE_KEY }} | |
| - name: Provide the known hosts key and the builder config | |
| run: | | |
| echo "${{ secrets.BUILDER_ARM64_SSH_HOST_KEY }}" > ~/.ssh/known_hosts | |
| mkdir -p modules/container-base/target/buildx-state/buildx/instances | |
| cat modules/container-base/target/buildx-state/buildx/instances/dataverse << EOF | |
| { "Name": "dataverse", | |
| "Driver": "docker-container", | |
| "Dynamic": false, | |
| "Nodes": [{"Name": "dataverse0", | |
| "Endpoint": "unix:///var/run/docker.sock", | |
| "Platforms": [{"os": "linux", "architecture": "amd64"}], | |
| "DriverOpts": null, | |
| "Flags": ["--allow-insecure-entitlement=network.host"], | |
| "Files": null}, | |
| {"Name": "dataverse1", | |
| "Endpoint": "ssh://${{ secrets.BUILDER_ARM64_SSH_CONNECTION }}", | |
| "Platforms": [{"os": "linux", "architecture": "arm64"}], | |
| "DriverOpts": null, | |
| "Flags": ["--allow-insecure-entitlement=network.host"], | |
| "Files": null}]} | |
| EOF | |
| - name: Add additional tags as options | |
| # TODO: remove the feature branch and re-enable the if/else! | |
| run: | | |
| # For the development branch, update the latest tag in addition | |
| if [[ "${{ matrix.branch }}" == "develop" || "${{ matrix.branch }}" == "10478-version-base-img" ]]; then | |
| echo "DOCKER_TAGS=-Ddocker.imagePropertyConfiguration=override -Ddocker.tags.develop=latest" | tee -a "${GITHUB_ENV}" | |
| # In case of releases <=6.2, we still need to provide backward compatible names "alpha" and "unstable" | |
| elif [[ "${{ matrix.branch }}" == "v6.2" ]]; then | |
| echo "DOCKER_TAGS=-Ddocker.imagePropertyConfiguration=override -Ddocker.tags.additional=alpha" | tee -a "${GITHUB_ENV}" | |
| fi | |
| # TODO: remove when feature branch is done | |
| #- name: Skip all but feature-branch | |
| # if: ${{ matrix.branch != '10478-version-base-img' }} | |
| # uses: actions/github-script@v7 | |
| # with: | |
| # script: | | |
| # core.setFailed('Stopping on purpose to avoid mayhem') | |
| - name: Deploy multi-arch base container image to Docker Hub | |
| id: build | |
| # Do not build for v6.0 and v6.1. We can simply reuse the one from v6.2. | |
| if: ${{ matrix.branch != 'v6.0' && matrix.branch != 'v6.1' }} | |
| run: mvn -f modules/container-base -Pct deploy -Ddocker.noCache ${DOCKER_TAGS} -Ddocker.platforms=${{ env.PLATFORMS }} | |
| - if: ${{ github.event_name == 'push' && github.ref_name == 'develop' }} | |
| name: Push description to DockerHub | |
| uses: peter-evans/dockerhub-description@v3 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| repository: gdcc/base | |
| short-description: "Dataverse Base Container image providing Payara application server and optimized configuration" | |
| readme-filepath: ./modules/container-base/README.md | |
| # - if: always() | |
| # name: Save status (workaround for matrix outputs) | |
| # run: | | |
| # # steps.build.outcome is the status BEFORE continue-on-error | |
| # echo "STATUS_$( echo "${{ matrix.branch }}" | tr ".:;,-/ " "_" )=${{ steps.build.outcome }}" | tee -a "${GITHUB_ENV}" | |
| push-app-img: | |
| name: "Rebase & Publish App Image" | |
| permissions: | |
| contents: read | |
| packages: write | |
| pull-requests: write | |
| secrets: inherit | |
| needs: | |
| - discover | |
| - build | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| branch: ${{ fromJson(needs.discover.outputs.branches) }} | |
| uses: ./.github/workflows/container_app_push.yml | |
| with: | |
| branch: ${{ matrix.branch }} | |