Skip to content

Commit ec3d9e3

Browse files
zarbiszarbis
committed
image: try upstream version of workflow
1 parent b82adf4 commit ec3d9e3

1 file changed

Lines changed: 104 additions & 47 deletions

File tree

‎.github/workflows/image.yaml‎

Lines changed: 104 additions & 47 deletions
Original file line numberDiff line numberDiff line change
@@ -3,59 +3,116 @@ name: Image
33
on:
44
push:
55
branches:
6-
- "sync-*" # Codefresh change instead of `master`
6+
- sync-*
7+
pull_request:
8+
branches:
9+
- sync-*
10+
types: [labeled, unlabeled, opened, synchronize, reopened]
11+
12+
concurrency:
13+
group: ${{ github.workflow }}-${{ github.ref }}
14+
cancel-in-progress: true
715

8-
env:
9-
GOLANG_VERSION: "1.22"
16+
permissions: {}
1017

1118
jobs:
12-
publish:
13-
runs-on: ubuntu-latest
14-
env:
15-
GOPATH: /home/runner/work/argo-cd/argo-cd
19+
set-vars:
20+
permissions:
21+
contents: read
22+
if: github.repository == 'argoproj/argo-cd'
23+
runs-on: ubuntu-22.04
24+
outputs:
25+
image-tag: ${{ steps.image.outputs.tag}}
26+
platforms: ${{ steps.platforms.outputs.platforms }}
1627
steps:
17-
- uses: actions/setup-go@0caeaed6fd66a828038c2da3c0f662a42862658f # v1.1.3
18-
with:
19-
go-version: ${{ env.GOLANG_VERSION }}
2028
- uses: actions/checkout@8410ad0602e1e429cee44a835ae9f77f654a6694 # v4.0.0
21-
with:
22-
path: src/github.com/argoproj/argo-cd
2329

24-
# get image tag
25-
- run: echo ::set-output name=tag::$(cat ./VERSION)-${GITHUB_SHA::8}
26-
working-directory: ./src/github.com/argoproj/argo-cd
30+
- name: Set image tag for ghcr
31+
run: echo "tag=$(cat ./VERSION)-${GITHUB_SHA::8}" >> $GITHUB_OUTPUT
2732
id: image
2833

29-
# build
30-
- run: |
31-
docker images -a --format "{{.ID}}" | xargs -I {} docker rmi {}
32-
make image DEV_IMAGE=true DOCKER_PUSH=false IMAGE_NAMESPACE=ghcr.io/codefresh-io IMAGE_TAG=${{ steps.image.outputs.tag }}
33-
working-directory: ./src/github.com/argoproj/argo-cd
34-
- run: |
35-
docker login ghcr.io --username $USERNAME --password $PASSWORD
36-
docker push ghcr.io/codefresh-io/argocd:${{ steps.image.outputs.tag }}
37-
env:
38-
USERNAME: ${{ github.repository_owner }}
39-
PASSWORD: ${{ secrets.TOKEN }}
40-
# Codefresh step
41-
- name: Push docker image to quay repository
42-
env:
43-
QUAY_USERNAME: ${{ secrets.RELEASE_QUAY_USERNAME }}
44-
QUAY_TOKEN: ${{ secrets.RELEASE_QUAY_TOKEN }}
45-
IMAGE_NAMESPACE: quay.io/codefresh
34+
- name: Determine image platforms to use
35+
id: platforms
4636
run: |
47-
set -ue
48-
docker login quay.io --username "${QUAY_USERNAME}" --password "${QUAY_TOKEN}"
49-
docker tag ghcr.io/codefresh-io/argocd:${{ steps.image.outputs.tag }} ${IMAGE_NAMESPACE}/argocd:${{ steps.image.outputs.tag }}
50-
docker push ${IMAGE_NAMESPACE}/argocd:${{ steps.image.outputs.tag }}
51-
# # deploy
52-
# - run: git clone "https://$TOKEN@github.com/codefresh-io/argoproj-deployments"
53-
# env:
54-
# TOKEN: ${{ secrets.TOKEN }}
55-
# - run: |
56-
# docker run -v $(pwd):/src -w /src --rm -t lyft/kustomizer:v3.3.0 kustomize edit set image quay.io/argoproj/argocd=ghcr.io/codefresh-io/argocd:${{ steps.image.outputs.tag }}
57-
# git config --global user.email 'integration@codefresh.io'
58-
# git config --global user.name 'CI-Codefresh'
59-
# git diff --exit-code && echo 'Already deployed' || (git commit -am 'Upgrade argocd to ${{ steps.image.outputs.tag }}' && git push)
60-
# if: github.event_name == 'push'
61-
# working-directory: argoproj-deployments/argocd
37+
IMAGE_PLATFORMS=linux/amd64
38+
if [[ "${{ github.event_name }}" == "push" || "${{ contains(github.event.pull_request.labels.*.name, 'test-multi-image') }}" == "true" ]]
39+
then
40+
IMAGE_PLATFORMS=linux/amd64,linux/arm64,linux/s390x,linux/ppc64le
41+
fi
42+
echo "Building image for platforms: $IMAGE_PLATFORMS"
43+
echo "platforms=$IMAGE_PLATFORMS" >> $GITHUB_OUTPUT
44+
45+
build-only:
46+
needs: [set-vars]
47+
permissions:
48+
contents: read
49+
packages: write # for pushing packages to GHCR, which is used by cd.apps.argoproj.io to avoid polluting Quay with tags
50+
id-token: write # for creating OIDC tokens for signing.
51+
if: ${{ github.repository == 'argoproj/argo-cd' && github.event_name != 'push' }}
52+
uses: ./.github/workflows/image-reuse.yaml
53+
with:
54+
# Note: cannot use env variables to set go-version (https://docs.github.com/en/actions/using-workflows/reusing-workflows#limitations)
55+
# renovate: datasource=golang-version packageName=golang
56+
go-version: 1.24.1
57+
platforms: ${{ needs.set-vars.outputs.platforms }}
58+
push: false
59+
60+
build-and-publish:
61+
needs: [set-vars]
62+
permissions:
63+
contents: read
64+
packages: write # for pushing packages to GHCR, which is used by cd.apps.argoproj.io to avoid polluting Quay with tags
65+
id-token: write # for creating OIDC tokens for signing.
66+
if: ${{ github.repository == 'argoproj/argo-cd' && github.event_name == 'push' }}
67+
uses: ./.github/workflows/image-reuse.yaml
68+
with:
69+
quay_image_name: quay.io/codefresh-io/argocd:${{ needs.set-vars.outputs.image-tag }}
70+
ghcr_image_name: ghcr.io/codefresh-io/argo-cd/argocd:${{ needs.set-vars.outputs.image-tag }}
71+
# Note: cannot use env variables to set go-version (https://docs.github.com/en/actions/using-workflows/reusing-workflows#limitations)
72+
# renovate: datasource=golang-version packageName=golang
73+
go-version: 1.24.1
74+
platforms: ${{ needs.set-vars.outputs.platforms }}
75+
push: true
76+
secrets:
77+
quay_username: ${{ secrets.RELEASE_QUAY_USERNAME }}
78+
quay_password: ${{ secrets.RELEASE_QUAY_TOKEN }}
79+
ghcr_username: ${{ github.actor }}
80+
ghcr_password: ${{ secrets.GITHUB_TOKEN }}
81+
82+
# build-and-publish-provenance: # Push attestations to GHCR, latest image is polluting quay.io
83+
# needs:
84+
# - build-and-publish
85+
# permissions:
86+
# actions: read # for detecting the Github Actions environment.
87+
# id-token: write # for creating OIDC tokens for signing.
88+
# packages: write # for uploading attestations. (https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#known-issues)
89+
# if: ${{ github.repository == 'argoproj/argo-cd' && github.event_name == 'push' }}
90+
# # Must be refernced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator
91+
# uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.0.0
92+
# with:
93+
# image: ghcr.io/argoproj/argo-cd/argocd
94+
# digest: ${{ needs.build-and-publish.outputs.image-digest }}
95+
# registry-username: ${{ github.actor }}
96+
# secrets:
97+
# registry-password: ${{ secrets.GITHUB_TOKEN }}
98+
99+
# Deploy:
100+
# needs:
101+
# - build-and-publish
102+
# - set-vars
103+
# permissions:
104+
# contents: write # for git to push upgrade commit if not already deployed
105+
# packages: write # for pushing packages to GHCR, which is used by cd.apps.argoproj.io to avoid polluting Quay with tags
106+
# if: ${{ github.repository == 'argoproj/argo-cd' && github.event_name == 'push' }}
107+
# runs-on: ubuntu-22.04
108+
# steps:
109+
# - uses: actions/checkout@8410ad0602e1e429cee44a835ae9f77f654a6694 # v4.0.0
110+
# - run: git clone "https://$TOKEN@github.com/argoproj/argoproj-deployments"
111+
# env:
112+
# TOKEN: ${{ secrets.TOKEN }}
113+
# - run: |
114+
# docker run -u $(id -u):$(id -g) -v $(pwd):/src -w /src --rm -t ghcr.io/argoproj/argo-cd/argocd:${{ needs.set-vars.outputs.image-tag }} kustomize edit set image quay.io/argoproj/argocd=ghcr.io/argoproj/argo-cd/argocd:${{ needs.set-vars.outputs.image-tag }}
115+
# git config --global user.email 'ci@argoproj.com'
116+
# git config --global user.name 'CI'
117+
# git diff --exit-code && echo 'Already deployed' || (git commit -am 'Upgrade argocd to ${{ needs.set-vars.outputs.image-tag }}' && git push)
118+
# working-directory: argoproj-deployments/argocd

0 commit comments

Comments
 (0)