-
Notifications
You must be signed in to change notification settings - Fork 205
137 lines (131 loc) · 5.9 KB
/
build-sign-commit-images.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
name: Build and Sign Blockchain Commit Images
on:
push:
branches-ignore:
- 'release/[0-9]+.[0-9]+'
workflow_dispatch:
jobs:
build-container-geth-amd-sha:
runs-on: [self-hosted, blockchain, 8-cpu]
permissions:
contents: read
id-token: write
security-events: write
steps:
- uses: actions/checkout@v3
- name: Login at GCP Artifact Registry
# 9817fca8d235a679e56bdcc72c31dfc548413805 is master at Sep 28, 2023
uses: celo-org/reusable-workflows/.github/actions/auth-gcp-artifact-registry@9817fca8d235a679e56bdcc72c31dfc548413805
with:
workload-id-provider: 'projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-blockchain-dev/providers/github-by-repos'
service-account: 'celo-blockchain-dev@devopsre.iam.gserviceaccount.com'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
- name: Build and push container
uses: celo-org/reusable-workflows/.github/actions/build-container@9817fca8d235a679e56bdcc72c31dfc548413805
with:
platforms: linux/amd64
registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
tag: ${{ github.sha }}
context: .
dockerfile: Dockerfile
push: ${{ fromJSON(true) }}
load: ${{ fromJSON(false) }}
build-container-geth-arm-sha:
runs-on: [self-hosted, blockchain, 8-cpu]
permissions:
contents: read
id-token: write
security-events: write
steps:
- uses: actions/checkout@v3
- name: Login at GCP Artifact Registry
uses: celo-org/reusable-workflows/.github/actions/auth-gcp-artifact-registry@9817fca8d235a679e56bdcc72c31dfc548413805
with:
workload-id-provider: 'projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-blockchain-dev/providers/github-by-repos'
service-account: 'celo-blockchain-dev@devopsre.iam.gserviceaccount.com'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
- name: Build and push container
uses: celo-org/reusable-workflows/.github/actions/build-container@9817fca8d235a679e56bdcc72c31dfc548413805
with:
platforms: linux/arm64
registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
tag: ${{ github.sha }}
context: .
dockerfile: Dockerfile.arm64
push: ${{ fromJSON(true) }}
load: ${{ fromJSON(false) }}
build-container-geth-amd-master:
runs-on: [self-hosted, blockchain, 8-cpu]
if: github.ref == 'refs/heads/master'
permissions:
contents: read
id-token: write
security-events: write
steps:
- uses: actions/checkout@v3
- name: Login at GCP Artifact Registry
uses: celo-org/reusable-workflows/.github/actions/auth-gcp-artifact-registry@9817fca8d235a679e56bdcc72c31dfc548413805
with:
workload-id-provider: 'projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-blockchain/providers/github-by-repos'
service-account: 'celo-blockchain@devopsre.iam.gserviceaccount.com'
artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-blockchain-public/geth
- name: Build and push container
uses: celo-org/reusable-workflows/.github/actions/build-container@9817fca8d235a679e56bdcc72c31dfc548413805
with:
platforms: linux/amd64
registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
tag: master
context: .
dockerfile: Dockerfile
push: ${{ fromJSON(true) }}
load: ${{ fromJSON(false) }}
build-container-geth-arm-master:
runs-on: [self-hosted, blockchain, 8-cpu]
if: github.ref == 'refs/heads/master'
permissions:
contents: read
id-token: write
security-events: write
steps:
- uses: actions/checkout@v3
- name: Login at GCP Artifact Registry
uses: celo-org/reusable-workflows/.github/actions/auth-gcp-artifact-registry@9817fca8d235a679e56bdcc72c31dfc548413805
with:
workload-id-provider: 'projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-blockchain/providers/github-by-repos'
service-account: 'celo-blockchain@devopsre.iam.gserviceaccount.com'
artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-blockchain-public/geth
- name: Build and push container
uses: celo-org/reusable-workflows/.github/actions/build-container@9817fca8d235a679e56bdcc72c31dfc548413805
with:
platforms: linux/arm64
registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
tag: master
context: .
dockerfile: Dockerfile.arm64
push: ${{ fromJSON(true) }}
load: ${{ fromJSON(false) }}
build-container-geth-all-master:
runs-on: [self-hosted, blockchain, 8-cpu]
if: github.ref == 'refs/heads/master'
permissions:
contents: read
id-token: write
security-events: write
steps:
- uses: actions/checkout@v3
- name: Login at GCP Artifact Registry
uses: celo-org/reusable-workflows/.github/actions/auth-gcp-artifact-registry@9817fca8d235a679e56bdcc72c31dfc548413805
with:
workload-id-provider: 'projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-blockchain/providers/github-by-repos'
service-account: 'celo-blockchain@devopsre.iam.gserviceaccount.com'
artifact-registry: us-west1-docker.pkg.dev/devopsre/celo-blockchain-public/geth-all
- name: Build and push container
uses: celo-org/reusable-workflows/.github/actions/build-container@9817fca8d235a679e56bdcc72c31dfc548413805
with:
platforms: linux/amd64
registry: us-west1-docker.pkg.dev/devopsre/dev-images/geth
tag: master
context: .
dockerfile: Dockerfile.alltools
push: ${{ fromJSON(true) }}
load: ${{ fromJSON(false) }}