@@ -21,27 +21,31 @@ jobs:
2121 build :
2222 permissions :
2323 id-token : write
24+ runs-on : ${{ matrix.runner }}
2425 strategy :
2526 fail-fast : false
2627 matrix :
2728 runner : ["ubuntu-latest", "ubicloud-standard-8-arm-ubuntu-2404"]
2829 ubi-version : ["ubi9"]
29- runs-on : ${{ matrix.runner }}
3030 steps :
3131 - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
3232 with :
3333 persist-credentials : false
34+
3435 - name : Login to Stackable Harbor
3536 uses : docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
3637 with :
3738 registry : oci.stackable.tech
3839 username : robot$sdp+github-action-build
3940 password : ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }}
41+
4042 - name : Set up Cosign
4143 uses : sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
44+
4245 - name : Determine Architecture
4346 run : |
4447 echo "TAG=$(git rev-parse --short HEAD)-$(arch)" >> "$GITHUB_ENV"
48+
4549 - name : Build and push
4650 id : build-and-push
4751 uses : docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
5155 push : true
5256 tags : oci.stackable.tech/sdp/${{ matrix.ubi-version }}-rust-builder:${{ env.TAG }}
5357 provenance : false
58+
5459 - name : Sign the published builder image
5560 shell : bash
5661 env :
@@ -60,28 +65,33 @@ jobs:
6065 # This generates a signature and publishes it to the registry, next to the image
6166 # Uses the keyless signing flow with Github Actions as identity provider
6267 cosign sign -y "oci.stackable.tech/sdp/${{ matrix.ubi-version }}-rust-builder@$DIGEST"
68+
6369 create_manifest :
70+ name : Create and Push Image Index Manifest
71+ needs : ["build"]
6472 permissions :
6573 id-token : write
74+ runs-on : ubuntu-latest
6675 strategy :
6776 fail-fast : false
6877 matrix :
6978 ubi-version : ["ubi9"]
70- runs-on : ubuntu-latest
71- needs : ["build"]
7279 steps :
7380 - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
7481 with :
7582 persist-credentials : false
83+
7684 - name : Login to Stackable Harbor
7785 uses : docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
7886 with :
7987 registry : oci.stackable.tech
8088 username : robot$sdp+github-action-build
8189 password : ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }}
90+
8291 - name : Set up Cosign
8392 uses : sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
84- - name : Build Manifest List
93+
94+ - name : Create and Push Image Index Manifest
8595 shell : bash
8696 run : |
8797 COMMIT_ID=$(git rev-parse --short HEAD)
0 commit comments