Changes to make a deployment of the barbican-worker #35
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Barbican Operator image builder | |
| on: | |
| push: | |
| branches: | |
| - '*' | |
| env: | |
| imageregistry: 'quay.io' | |
| imagenamespace: ${{ secrets.IMAGENAMESPACE || secrets.QUAY_USERNAME }} | |
| latesttag: latest | |
| jobs: | |
| check-secrets: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check secrets are set | |
| id: have-secrets | |
| if: "${{ env.imagenamespace != '' }}" | |
| run: echo "::set-output name=ok::true" | |
| outputs: | |
| have-secrets: ${{ steps.have-secrets.outputs.ok }} | |
| build-barbican-operator: | |
| name: Build barbican-operator image using buildah | |
| runs-on: ubuntu-latest | |
| needs: [check-secrets] | |
| if: needs.check-secrets.outputs.have-secrets == 'true' | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Get branch name | |
| id: branch-name | |
| uses: tj-actions/branch-names@v5 | |
| - name: Set latest tag for non main branch | |
| if: "${{ steps.branch-name.outputs.current_branch != 'main' }}" | |
| run: | | |
| echo "latesttag=${{ steps.branch-name.outputs.current_branch }}-latest" >> $GITHUB_ENV | |
| - name: Buildah Action | |
| id: build-barbican-operator | |
| uses: redhat-actions/buildah-build@v2 | |
| with: | |
| image: barbican-operator | |
| tags: ${{ env.latesttag }} ${{ github.sha }} | |
| containerfiles: | | |
| ./Dockerfile | |
| - name: Push barbican-operator To ${{ env.imageregistry }} | |
| uses: redhat-actions/push-to-registry@v2 | |
| with: | |
| image: ${{ steps.build-barbican-operator.outputs.image }} | |
| tags: ${{ steps.build-barbican-operator.outputs.tags }} | |
| registry: ${{ env.imageregistry }}/${{ env.imagenamespace }} | |
| username: ${{ secrets.QUAY_USERNAME }} | |
| password: ${{ secrets.QUAY_PASSWORD }} | |
| build-barbican-operator-bundle: | |
| needs: [ check-secrets, build-barbican-operator ] | |
| name: barbican-operator-bundle | |
| runs-on: ubuntu-latest | |
| if: needs.check-secrets.outputs.have-secrets == 'true' | |
| steps: | |
| - name: Install Go | |
| uses: actions/setup-go@v2 | |
| with: | |
| go-version: 1.19.x | |
| - name: Checkout barbican-operator repository | |
| uses: actions/checkout@v2 | |
| - name: Install operator-sdk | |
| uses: redhat-actions/openshift-tools-installer@v1 | |
| with: | |
| source: github | |
| operator-sdk: '1.26.0' | |
| - name: Log in to Quay Registry | |
| uses: redhat-actions/podman-login@v1 | |
| with: | |
| registry: ${{ env.imageregistry }} | |
| username: ${{ secrets.QUAY_USERNAME }} | |
| password: ${{ secrets.QUAY_PASSWORD }} | |
| - name: Log in to Red Hat Registry | |
| uses: redhat-actions/podman-login@v1 | |
| with: | |
| registry: registry.redhat.io | |
| username: ${{ secrets.REDHATIO_USERNAME }} | |
| password: ${{ secrets.REDHATIO_PASSWORD }} | |
| - name: Create bundle image | |
| run: | | |
| pushd "${GITHUB_WORKSPACE}"/.github/ | |
| chmod +x "create_bundle.sh" | |
| "./create_bundle.sh" | |
| popd | |
| env: | |
| REGISTRY: ${{ env.imageregistry }}/${{ env.imagenamespace }} | |
| GITHUB_SHA: ${{ github.sha }} | |
| BASE_IMAGE: barbican-operator | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Get branch name | |
| id: branch-name | |
| uses: tj-actions/branch-names@v5 | |
| - name: Set latest tag for non main branch | |
| if: "${{ steps.branch-name.outputs.current_branch != 'main' }}" | |
| run: | | |
| echo "latesttag=${{ steps.branch-name.outputs.current_branch }}-latest" >> $GITHUB_ENV | |
| - name: Build barbican-operator-bundle using buildah | |
| id: build-barbican-operator-bundle | |
| uses: redhat-actions/buildah-build@v2 | |
| with: | |
| image: barbican-operator-bundle | |
| tags: ${{ env.latesttag }} ${{ github.sha }} | |
| containerfiles: | | |
| ./bundle.Dockerfile | |
| - name: Push barbican-operator To ${{ env.imageregistry }} | |
| uses: redhat-actions/push-to-registry@v2 | |
| with: | |
| image: ${{ steps.build-barbican-operator-bundle.outputs.image }} | |
| tags: ${{ steps.build-barbican-operator-bundle.outputs.tags }} | |
| registry: ${{ env.imageregistry }}/${{ env.imagenamespace }} | |
| username: ${{ secrets.QUAY_USERNAME }} | |
| password: ${{ secrets.QUAY_PASSWORD }} | |
| build-barbican-operator-index: | |
| needs: [ check-secrets, build-barbican-operator-bundle ] | |
| name: barbican-operator-index | |
| runs-on: ubuntu-latest | |
| if: needs.check-secrets.outputs.have-secrets == 'true' | |
| steps: | |
| - name: Checkout barbican-operator repository | |
| uses: actions/checkout@v2 | |
| - name: Get branch name | |
| id: branch-name | |
| uses: tj-actions/branch-names@v5 | |
| - name: Set latest tag for non main branch | |
| if: "${{ steps.branch-name.outputs.current_branch != 'main' }}" | |
| run: | | |
| echo "latesttag=${{ steps.branch-name.outputs.current_branch }}-latest" >> $GITHUB_ENV | |
| - name: Install opm | |
| uses: redhat-actions/openshift-tools-installer@v1 | |
| with: | |
| source: github | |
| opm: 'latest' | |
| - name: Log in to Red Hat Registry | |
| uses: redhat-actions/podman-login@v1 | |
| with: | |
| registry: ${{ env.imageregistry }} | |
| username: ${{ secrets.QUAY_USERNAME }} | |
| password: ${{ secrets.QUAY_PASSWORD }} | |
| - name: Create index image | |
| run: | | |
| pushd "${GITHUB_WORKSPACE}"/.github/ | |
| chmod +x "create_opm_index.sh" | |
| "./create_opm_index.sh" | |
| popd | |
| env: | |
| REGISTRY: ${{ env.imageregistry }}/${{ env.imagenamespace }} | |
| GITHUB_SHA: ${{ github.sha }} | |
| BUNDLE_IMAGE: barbican-operator-bundle | |
| INDEX_IMAGE_TAG: ${{ env.latesttag }} | |
| INDEX_IMAGE: barbican-operator-index | |
| - name: Push barbican-operator-index To ${{ env.imageregistry }} | |
| uses: redhat-actions/push-to-registry@v2 | |
| with: | |
| image: barbican-operator-index | |
| tags: ${{ env.latesttag }} ${{ github.sha }} | |
| registry: ${{ env.imageregistry }}/${{ env.imagenamespace }} | |
| username: ${{ secrets.QUAY_USERNAME }} | |
| password: ${{ secrets.QUAY_PASSWORD }} |