build-and-publish-container-image.yaml

name: Create and publish k8s workbench container image

on:
  push:
    branches:
    - "**"
    tags:
    - "v*.*.*"
  pull_request:
    branches:
    - "main"


env:
  REGISTRY: ghcr.io
  IMAGE_NAME: harbor-day2-operator

jobs:
  build-and-push-image:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write

    steps:
    - name: Checkout repository
      uses: actions/checkout@v4
    - uses: hadolint/hadolint-action@v3.1.0
      with:
        dockerfile: Dockerfile
    - uses: ricardochaves/python-lint@v1.4.0
      with:
        use-pylint: false
        use-flake8: false
        use-black: false
        use-mypy: false
        use-isort: false
    - name: Set up Docker Buildx
      uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5
      with:
        driver: docker
    - name: Cache Docker layers
      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57
      with:
        path: /tmp/.buildx-cache
        key: ${{ runner.os }}-buildx-${{ github.sha }}
        restore-keys: |
          ${{ runner.os }}-buildx-
    - name: Log in to the container registry
      uses: docker/login-action@327cd5a69de6c009b9ce71bce8395f28e651bf99
      with:
        registry: ${{ env.REGISTRY }}
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}
    - name: Extract metadata (tags, labels) for container
      id: meta
      uses: docker/metadata-action@8e1d5461f02b7886d3c1a774bfbd873650445aa2
      with:
        images: ${{ env.REGISTRY }}/steadforce/steadops/workbenches/${{ env.IMAGE_NAME }}
        tags: |
          type=ref,event=branch
          type=ref,event=pr
          type=semver,pattern={{version}}
          type=semver,pattern={{major}}.{{minor}}
          type=semver,pattern={{major}}
          type=sha
    - name: Build container image for tests
      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d
      with:
        context: .
        push: false
        tags: ${{ env.IMAGE_NAME }}:test
        cache-from: type=local,src=/tmp/.buildx-cache
        cache-to: type=local,dest=/tmp/.buildx-cache,mode=max
    - name: Test harbor tool
      run: |
        docker run --rm ${{ env.IMAGE_NAME }}:test /usr/local/harbor --help
    - name: Tag and push tested container image
      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d
      with:
        context: .
        push: ${{ github.event_name != 'pull_request' }}
        tags: ${{ steps.meta.outputs.tags }}
        labels: ${{ steps.meta.outputs.labels }}
        cache-from: type=local,src=/tmp/.buildx-cache
        cache-to: type=local,dest=/tmp/.buildx-cache,mode=max