Flowise/.github/workflows/docker-image-ecr.yml at main · FlowiseAI/Flowise · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
name: Docker Image CI - AWS ECR

on:
    workflow_dispatch:
        inputs:
            environment:
                description: 'Environment to push the image to.'
                required: true
                default: 'dev'
                type: choice
                options:
                    - dev
                    - prod
            node_version:
                description: 'Node.js version to build this image with.'
                type: choice
                required: true
                default: '20'
                options:
                    - '20'
            tag_version:
                description: 'Tag version of the image to be pushed.'
                type: string
                required: true
                default: 'latest'

permissions:
    contents: read # Required for checkout
    id-token: write # Required for AWS OIDC

jobs:
    docker:
        runs-on: ubuntu-latest
        environment: ${{ github.event.inputs.environment }}
        steps:
            - name: Set default values
              id: defaults
              run: |
                  echo "node_version=${{ github.event.inputs.node_version || '20' }}" >> $GITHUB_OUTPUT
                  echo "tag_version=${{ github.event.inputs.tag_version || 'latest' }}" >> $GITHUB_OUTPUT

            - name: Checkout
              uses: actions/checkout@v6.0.2

            - name: Set up QEMU
              uses: docker/setup-qemu-action@v4.0.0

            - name: Set up Docker Buildx
              uses: docker/setup-buildx-action@v4.0.0

            - name: Configure AWS Credentials
              if: ${{ inputs.environment != 'prod' }}
              uses: aws-actions/configure-aws-credentials@v6
              with:
                  aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
                  aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
                  aws-region: ${{ secrets.AWS_REGION }}

            - name: Configure AWS OIDC Credentials
              if: ${{ inputs.environment == 'prod' }}
              uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v6.0.0
              with:
                  aws-region: ${{ secrets.AWS_REGION }}
                  role-to-assume: ${{ secrets.AWS_OIDC_IAM_ROLE }}
                  mask-aws-account-id: true
                  unset-current-credentials: true

            - name: Login to Amazon ECR
              uses: aws-actions/amazon-ecr-login@v2

            # -------------------------
            # Build and push main image
            # -------------------------
            - name: Build and push main image
              uses: docker/build-push-action@v6.19.2
              with:
                  context: .
                  file: Dockerfile
                  build-args: |
                      NODE_VERSION=${{ steps.defaults.outputs.node_version }}
                  platforms: linux/amd64,linux/arm64
                  push: true
                  tags: |
                      ${{ format('{0}.dkr.ecr.{1}.amazonaws.com/flowise:{2}',
                          secrets.AWS_ACCOUNT_ID,
                          secrets.AWS_REGION,
                          steps.defaults.outputs.tag_version) }}