forked from kubeedge/kubeedge
-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Shelley-BaoYue <[email protected]>
- Loading branch information
1 parent
b9ecdcf
commit c425496
Showing
1 changed file
with
5 additions
and
101 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -6,113 +6,17 @@ on: | |
|
|
||
| env: | ||
| CONTAINER_RUN_OPTIONS: " " | ||
| IMAGE_REPOSITORY: kubeedge | ||
| IMAGE_REPOSITORY: shelleyby | ||
|
|
||
| jobs: | ||
| release-assests: | ||
| name: release kubeedge components | ||
| runs-on: ubuntu-22.04 | ||
| strategy: | ||
| matrix: | ||
| target: [kubeedge, edgesite, keadm] | ||
| os: [linux] | ||
| ARM_VERSION: [GOARM7, GOARM8, ""] | ||
| include: | ||
| - target: kubeedge | ||
| os: windows | ||
| ARM_VERSION: "" | ||
| - target: keadm | ||
| os: windows | ||
| ARM_VERSION: "" | ||
| outputs: | ||
| hash-kubeedge-linux-amd64: ${{ steps.hash.outputs.hash-kubeedge-linux-amd64 }} | ||
| hash-kubeedge-windows-amd64: ${{ steps.hash.outputs.hash-kubeedge-windows-amd64 }} | ||
| hash-kubeedge-linux-arm64: ${{ steps.hash.outputs.hash-kubeedge-linux-arm64 }} | ||
| hash-kubeedge-linux-arm: ${{ steps.hash.outputs.hash-kubeedge-linux-arm }} | ||
| hash-keadm-linux-amd64: ${{ steps.hash.outputs.hash-keadm-linux-amd64 }} | ||
| hash-keadm-linux-arm64: ${{ steps.hash.outputs.hash-keadm-linux-arm64 }} | ||
| hash-keadm-linux-arm: ${{ steps.hash.outputs.hash-keadm-linux-arm }} | ||
| hash-keadm-windows-amd64: ${{ steps.hash.outputs.hash-keadm-windows-amd64 }} | ||
| hash-edgesite-linux-amd64: ${{ steps.hash.outputs.hash-edgesite-linux-amd64 }} | ||
| hash-edgesite-linux-arm64: ${{ steps.hash.outputs.hash-edgesite-linux-arm64 }} | ||
| hash-edgesite-linux-arm: ${{ steps.hash.outputs.hash-edgesite-linux-arm }} | ||
| steps: | ||
| - name: checkout code | ||
| uses: actions/checkout@v3 | ||
| with: | ||
| # fetch-depth: | ||
| # 0 indicates all history for all branches and tags. | ||
| # for `git describe --tags` in Makefile. | ||
| fetch-depth: 0 | ||
| - name: Making and packaging | ||
| run: | | ||
| if [ "${{ matrix.os }}" == "linux" ]; then | ||
| docker pull kubeedge/build-tools:1.19.12-ke2 | ||
| BUILD_CONTAINER=true | ||
| else | ||
| BUILD_CONTAINER=false | ||
| fi | ||
| make release WHAT=${{ matrix.target }} ARM_VERSION=${{ matrix.ARM_VERSION }} OS=${{ matrix.os }} BUILD_WITH_CONTAINER=$BUILD_CONTAINER | ||
| - name: Generate arch | ||
| run: | | ||
| if [ "${{ matrix.ARM_VERSION }}" = "GOARM7" ]; then echo "output_arch=arm" >> $GITHUB_ENV; elif [ ${{ matrix.ARM_VERSION }} = "GOARM8" ]; then echo "output_arch=arm64" >> $GITHUB_ENV; else echo "output_arch=amd64" >> $GITHUB_ENV; fi | ||
| - name: Generate hashes | ||
| shell: bash | ||
| id: hash | ||
| run: | | ||
| cp _output/release/${{ github.ref_name }}/${{ matrix.target }}-${{ github.ref_name }}-${{ matrix.os }}-${{ env.output_arch }}.tar.gz . | ||
| echo "hash-${{ matrix.target }}-${{ matrix.os }}-${{ env.output_arch }}=$( \ | ||
| sha256sum ${{ matrix.target }}-${{ github.ref_name }}-${{ matrix.os }}-${{ env.output_arch}}.tar.gz | base64 -w0 \ | ||
| )" >> "$GITHUB_OUTPUT" | ||
| - name: Uploading assets... | ||
| if: ${{ !env.ACT }} | ||
| uses: softprops/action-gh-release@v1 | ||
| with: | ||
| files: | | ||
| _output/release/${{ github.ref_name }}/${{ matrix.target }}-${{ github.ref_name }}-${{ matrix.os }}-${{ env.output_arch }}.tar.gz | ||
| _output/release/${{ github.ref_name }}/checksum_${{ matrix.target }}-${{ github.ref_name }}-${{ matrix.os }}-${{ env.output_arch }}.tar.gz.txt | ||
| combine_hashes: | ||
| needs: [release-assests] | ||
| runs-on: ubuntu-22.04 | ||
| outputs: | ||
| hashes: ${{ steps.hashes.outputs.hashes }} | ||
| env: | ||
| HASHES: ${{ toJSON(needs.release-assests.outputs) }} | ||
| steps: | ||
| - id: hashes | ||
| run: | | ||
| echo "$HASHES" | jq -r '.[] | @base64d' | sed "/^$/d" > hashes.txt | ||
| echo "hashes=$(cat hashes.txt | base64 -w0)" >> "$GITHUB_OUTPUT" | ||
| # This step calls the generic workflow to generate provenance. | ||
| provenance: | ||
| needs: [combine_hashes] | ||
| permissions: | ||
| actions: read | ||
| id-token: write | ||
| contents: write | ||
| uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected] | ||
| with: | ||
| base64-subjects: "${{ needs.combine_hashes.outputs.hashes }}" | ||
| # Upload provenance to a new release | ||
| upload-assets: true | ||
|
|
||
| publish-image-to-dockerhub: | ||
| name: publish to DockerHub | ||
| strategy: | ||
| matrix: | ||
| target: [cloudcore, admission, edgesite-agent, edgesite-server, csidriver, iptables-manager, edgemark, installation-package, controller-manager] | ||
| target: [cloudcore] | ||
| outputs: | ||
| hash-digest-cloudcore: ${{ steps.hash.outputs.hash-digest-cloudcore }} | ||
| hash-digest-admission: ${{ steps.hash.outputs.hash-digest-admission }} | ||
| hash-digest-edgesite-agent: ${{ steps.hash.outputs.hash-digest-edgesite-agent }} | ||
| hash-digest-edgesite-server: ${{ steps.hash.outputs.hash-digest-edgesite-server }} | ||
| hash-digest-csidriver: ${{ steps.hash.outputs.hash-digest-csidriver }} | ||
| hash-digest-iptables-manager: ${{ steps.hash.outputs.hash-digest-iptables-manager }} | ||
| hash-digest-edgemark: ${{ steps.hash.outputs.hash-digest-edgemark }} | ||
| hash-digest-installation-package: ${{ steps.hash.outputs.hash-digest-installation-package }} | ||
| hash-digest-controller-manager: ${{ steps.hash.outputs.hash-digest-controller-manager }} | ||
| runs-on: ubuntu-22.04 | ||
| steps: | ||
| - name: checkout code | ||
|
|
@@ -155,15 +59,15 @@ jobs: | |
| needs: [publish-image-to-dockerhub] | ||
| strategy: | ||
| matrix: | ||
| target: [cloudcore, admission, edgesite-agent, edgesite-server, csidriver, iptables-manager, edgemark, installation-package, controller-manager] | ||
| target: [cloudcore] | ||
| permissions: | ||
| actions: read # for detecting the Github Actions environment. | ||
| id-token: write # for creating OIDC tokens for signing. | ||
| packages: write # for uploading attestations. | ||
| if: startsWith(github.ref, 'refs/tags/') | ||
| uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.4.0 | ||
| uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.9.0 | ||
| with: | ||
| image: kubeedge/${{ matrix.target }} | ||
| image: shelleyby/${{ matrix.target }} | ||
| registry-username: ${{ vars.DOCKERHUB_USER_NAME }} | ||
| digest: ${{ needs.publish-image-to-dockerhub.outputs[format('hash-digest-{0}', matrix.target)] }} | ||
| secrets: | ||
|
|
||