Add image platforms to artifacts manifest file (#755)

* add auth for jfrog and public ecr * remove ecr auth * add public ecr auth * id-token write permission * Update artifacts_template_generator.py * [CI] Update charts artifacts manifest files Signed-off-by: DeeAjayi <[email protected]> * Update artifacts_template_generator.py --------- Signed-off-by: DeeAjayi <[email protected]> Co-authored-by: Vedant Pareek <[email protected]> Co-authored-by: DeeAjayi <[email protected]>
truefoundry · Nov 11, 2024 · f88e30e · f88e30e
1 parent 34f7783
commit f88e30e
Show file tree

Hide file tree

Showing 6 changed files with 3,246 additions and 215 deletions.
diff --git a/.github/workflows/update-artifacts.yml b/.github/workflows/update-artifacts.yml
@@ -5,8 +5,6 @@ on:
     branches:
       - 'main'
 
-
-
 jobs:
   path-filter:
     runs-on: ubuntu-latest
@@ -37,6 +35,7 @@ jobs:
     needs: path-filter
     permissions:
       contents: write
+      id-token: write
     env:
       ARTIFACTORY_USERNAME: ${{ secrets.TRUEFOUNDRY_ARTIFACTORY_PUBLIC_USERNAME }}
       ARTIFACTORY_PASSWORD: ${{ secrets.TRUEFOUNDRY_ARTIFACTORY_PUBLIC_PASSWORD }}
@@ -60,10 +59,30 @@ jobs:
         with:
           version: v3.15.1
 
-      - uses: actions/setup-python@v5
+      - name: Setup Python
+        uses: actions/setup-python@v5
         with:
           python-version: '3.10'
 
+      - name: Log in to JFrog Artifactory
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.TRUEFOUNDRY_ARTIFACTORY_PRIVATE_READONLY_USERNAME }}
+          password: ${{ secrets.TRUEFOUNDRY_ARTIFACTORY_PRIVATE_READONLY_PASSWORD }}
+          registry: ${{ vars.TRUEFOUNDRY_ARTIFACTORY_REGISTRY_URL }}
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ secrets.PUBLIC_ECR_IAM_ROLE_ARN }}
+          aws-region: us-east-1
+
+      - name: Login to Amazon ECR
+        id: login-ecr
+        uses: aws-actions/amazon-ecr-login@v2
+        with:
+          registry-type: public
+
       - name: Install python dependencies
         if: needs.path-filter.outputs.pathsrc_output
         run: |
@@ -97,4 +116,4 @@ jobs:
             git commit -am "[CI] Update charts artifacts manifest files" --signoff
             git pull origin --rebase
             git push
-          fi
+          fi