push-to-ecr.yml

name: Push to ECR

permissions:
  id-token: write
  contents: read

on:
  workflow_call:
    inputs:
      architecture:
        description: 'architecture'
        type: string
        required: true
      environment:
        description: 'environment'
        type: string
        required: true
    secrets:
      role:
        description: 'AWS role to assume'
        required: true
      account_id:
        description: 'AWS account id'
        required: true
      devRegion:
        description: 'AWS region for DEV'
        required: true
      prodRegion:
        description: 'AWS region for PROD'
        required: true

jobs:
  setup:
    runs-on: ubuntu-24.04
    outputs:
      runner: ${{ steps.select.outputs.runner }}
      matrix: ${{ steps.set-matrix.outputs.matrix }}
    steps:
      - name: Check branch
        id: select
        run: |
          if [ ${{ inputs.architecture }} == 'x86_64' ]; then
            echo "runner=ubuntu-24.04" >> $GITHUB_OUTPUT
          else
            echo "runner=ubuntu-24.04-arm" >> $GITHUB_OUTPUT
          fi
          cat $GITHUB_OUTPUT
      - uses: actions/checkout@v4
      - name: Build runtime matrix
        id: set-matrix
        run: |
          jq -c '[.runtimes[] | select(.architectures | index("arm64")) | select(.image != null and .image.baseImage != null) | .path]' manifest.json
          echo "matrix=$(jq -c '[.runtimes[] | select(.architectures | index("${{ inputs.architecture }}")) | select(.image != null and .image.baseImage != null) | .path]' manifest.json)" >> $GITHUB_OUTPUT

  build-upload:
    needs: setup
    runs-on: ${{ needs.setup.outputs.runner }}
    strategy:
      fail-fast: false
      matrix: 
        runtime_id: ${{fromJson(needs.setup.outputs.matrix)}}
    steps:
      - uses: actions/checkout@v4
      - name: configure aws credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: ${{ secrets.role }}
          role-session-name: GitHub_Action_LambdaPerf_Session
          aws-region: ${{ inputs.environment == 'DEV' && secrets.devRegion || inputs.environment == 'PROD' && secrets.prodRegion }}
      - name: Delete huge unnecessary folders
        run: |
          rm -rf /opt/hostedtoolcache
          rm -rf /usr/share/dotnet
          rm -rf /opt/ghc
          rm -rf "$AGENT_TOOLSDIRECTORY"
      - name: Set up Docker
        uses: docker/setup-docker-action@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 22
      - name: build and deploy
        env:
          ARCHITECTURE: ${{ inputs.architecture }}
          AWS_REGION: ${{ inputs.environment == 'DEV' && secrets.devRegion || inputs.environment == 'PROD' && secrets.prodRegion }}
          RUNTIME_ID: ${{ matrix.runtime_id }}
          AWS_ACCOUNT_ID: ${{ secrets.account_id }}
        run: |
          cd container-uploader
          yarn install
          node app.mjs

  clean-untagged-image:
    needs: build-upload
    runs-on: ubuntu-24.04
    steps:
      - name: configure aws credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: ${{ secrets.role }}
          role-session-name: GitHub_Action_LambdaPerf_Session
          aws-region: ${{ inputs.environment == 'DEV' && secrets.devRegion || inputs.environment == 'PROD' && secrets.prodRegion }}
      - name: clean untagged images
        env:
          AWS_REGION: ${{ inputs.environment == 'DEV' && secrets.devRegion || inputs.environment == 'PROD' && secrets.prodRegion }}
        run: |
          echo "Fetching untagged images..."
          IMAGES_JSON=$(aws ecr list-images \
            --region "${AWS_REGION}" \
            --repository-name lambda-perf \
            --filter "tagStatus=UNTAGGED" \
            --query 'imageIds' \
            --output json)

          COUNT=$(echo "$IMAGES_JSON" | jq length)
          if (( COUNT == 0 )); then
            echo "No untagged images found. Skipping deletion."
            exit 0
          fi

          echo "Found $COUNT untagged images. Deleting in batches of 100..."

          # read all images into an array
          mapfile -t IMAGES_ARRAY < <(echo "$IMAGES_JSON" | jq -c '.[]')

          BATCH=()
          for IMG in "${IMAGES_ARRAY[@]}"; do
            BATCH+=("$IMG")

            if (( ${#BATCH[@]} == 100 )); then
              BATCH_JSON=$(printf '%s\n' "${BATCH[@]}" | jq -s '.')
              echo "Deleting batch of 100 images..."
              aws ecr batch-delete-image \
                --region "${AWS_REGION}" \
                --repository-name lambda-perf \
                --image-ids "$BATCH_JSON"
              BATCH=()
            fi
          done

          # delete leftover images
          if (( ${#BATCH[@]} > 0 )); then
            BATCH_JSON=$(printf '%s\n' "${BATCH[@]}" | jq -s '.')
            LEFT_COUNT=${#BATCH[@]}
            echo "Deleting final batch of $LEFT_COUNT images..."
            aws ecr batch-delete-image \
              --region "${AWS_REGION}" \
              --repository-name lambda-perf \
              --image-ids "$BATCH_JSON"
          fi