Skip to content

chore: Update GAR Image Tagging to MozCloud Spec #2029

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
taddes merged 2 commits into from
Jan 30, 2026
Merged

chore: Update GAR Image Tagging to MozCloud Spec #2029

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1fe415b
add job for timestamp gen and pass as metadata to img
taddes Jan 29, 2026
94e7f83
review
taddes Jan 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 31 additions & 7 deletions .github/workflows/mozcloud-publish.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,8 @@
# Mozilla Deploy Actions url: <https://github.com/mozilla-it/deploy-actions>
# Note: even though Mozilla maintains the above actions, it is still suggested
# when upgrading to use the full commit SHA and comment with version.
# See <https://docs.github.com/en/actions/reference/security/secure-use#using-third-party-actions>
# Ex. `mozilla-it/deploy-actions/.github/workflows/build-and-push.yml@4784cb70739a4f32ce010921f60fb1ebbc791a38 # v6.2.2`
name: Build, Tag and Push Container Images to GAR Repository

on:
Expand All @@ -13,7 +18,17 @@ on:
workflow_dispatch: {}

jobs:
generate-timestamp:
runs-on: ubuntu-latest
outputs:
timestamp: ${{ steps.timestamp.outputs.timestamp }}
steps:
- name: Generate timestamp
id: timestamp
run: echo "timestamp=$(date -u +%Y%m%dT%H%M%S)" >> $GITHUB_OUTPUT

build-and-push-syncstorage-rs:
needs: generate-timestamp
if: >
github.event_name == 'workflow_dispatch' ||
(
Expand All @@ -29,7 +44,7 @@ jobs:
contents: read
id-token: write
packages: write
uses: mozilla-it/deploy-actions/.github/workflows/build-and-push.yml@1b87069d293273436a84dff04954a8950d3ff9ca # v6.1.0
uses: mozilla-it/deploy-actions/.github/workflows/build-and-push.yml@4784cb70739a4f32ce010921f60fb1ebbc791a38 # v6.2.2
with:
image_name: syncstorage-rs
gar_name: sync-prod
Expand All @@ -38,8 +53,10 @@ jobs:
SYNCSTORAGE_DATABASE_BACKEND=spanner
MYSQLCLIENT_PKG=libmysqlclient-dev
should_tag_ghcr: true
image_tag_metadata: ${{ needs.generate-timestamp.outputs.timestamp }}

build-and-push-syncstorage-rs-postgres:
needs: generate-timestamp
if: >
github.event_name == 'workflow_dispatch' ||
(
Expand All @@ -55,7 +72,7 @@ jobs:
contents: read
id-token: write
packages: write
uses: mozilla-it/deploy-actions/.github/workflows/build-and-push.yml@1b87069d293273436a84dff04954a8950d3ff9ca # v6.1.0
uses: mozilla-it/deploy-actions/.github/workflows/build-and-push.yml@4784cb70739a4f32ce010921f60fb1ebbc791a38 # v6.2.2
with:
image_name: syncstorage-rs-postgres
gar_name: sync-prod
Expand All @@ -64,13 +81,15 @@ jobs:
SYNCSTORAGE_DATABASE_BACKEND=postgres
TOKENSERVER_DATABASE_BACKEND=postgres
should_tag_ghcr: true
image_tag_metadata: ${{ needs.generate-timestamp.outputs.timestamp }}

build-and-push-syncstorage-rs-spanner-python-utils:
needs: generate-timestamp
if: >
github.event_name == 'workflow_dispatch' ||
(
github.event_name == 'push' &&
startsWith(github.ref, 'refs/tags/')
(github.ref_name == 'master' || startsWith(github.ref, 'refs/tags/'))
) ||
(
github.event_name == 'pull_request' &&
Expand All @@ -81,21 +100,23 @@ jobs:
contents: read
id-token: write
packages: write
uses: mozilla-it/deploy-actions/.github/workflows/build-and-push.yml@1b87069d293273436a84dff04954a8950d3ff9ca # v6.1.0
uses: mozilla-it/deploy-actions/.github/workflows/build-and-push.yml@4784cb70739a4f32ce010921f60fb1ebbc791a38 # v6.2.2
with:
image_name: syncstorage-rs-spanner-python-utils
gar_name: sync-prod
project_id: moz-fx-sync-prod
dockerfile_path: tools/spanner/Dockerfile
image_build_context: tools/spanner
should_tag_ghcr: true
image_tag_metadata: ${{ needs.generate-timestamp.outputs.timestamp }}

build-and-push-syncstorage-rs-postgres-python-utils:
needs: generate-timestamp
if: >
github.event_name == 'workflow_dispatch' ||
(
github.event_name == 'push' &&
startsWith(github.ref, 'refs/tags/')
(github.ref_name == 'master' || startsWith(github.ref, 'refs/tags/'))
) ||
(
github.event_name == 'pull_request' &&
Expand All @@ -106,16 +127,18 @@ jobs:
contents: read
id-token: write
packages: write
uses: mozilla-it/deploy-actions/.github/workflows/build-and-push.yml@1b87069d293273436a84dff04954a8950d3ff9ca # v6.1.0
uses: mozilla-it/deploy-actions/.github/workflows/build-and-push.yml@4784cb70739a4f32ce010921f60fb1ebbc791a38 # v6.2.2
with:
image_name: syncstorage-rs-postgres-python-utils
gar_name: sync-prod
project_id: moz-fx-sync-prod
dockerfile_path: tools/postgres/Dockerfile
image_build_context: tools/postgres
should_tag_ghcr: true
image_tag_metadata: ${{ needs.generate-timestamp.outputs.timestamp }}

build-and-push-syncstorage-rs-mysql:
needs: generate-timestamp
if: >
github.event_name == 'workflow_dispatch' ||
(
Expand All @@ -131,7 +154,7 @@ jobs:
contents: read
id-token: write
packages: write
uses: mozilla-it/deploy-actions/.github/workflows/build-and-push.yml@1b87069d293273436a84dff04954a8950d3ff9ca # v6.1.0
uses: mozilla-it/deploy-actions/.github/workflows/build-and-push.yml@4784cb70739a4f32ce010921f60fb1ebbc791a38 # v6.2.2
with:
image_name: syncstorage-rs-mysql
gar_name: sync-prod
Expand All @@ -140,3 +163,4 @@ jobs:
SYNCSTORAGE_DATABASE_BACKEND=mysql
TOKENSERVER_DATABASE_BACKEND=mysql
should_tag_ghcr: true
image_tag_metadata: ${{ needs.generate-timestamp.outputs.timestamp }}
Loading