HaimKortovich
f597662201
All checks were successful
Build and Publish / build-release (push) Successful in 10m0s
78 lines
2.4 KiB
YAML
78 lines
2.4 KiB
YAML
name: Build and Publish
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
env:
|
|
CHART_NAME: ${{ github.event.repository.name }}
|
|
IMAGE_NAME: ${{ github.event.repository.name }}
|
|
jobs:
|
|
build-release:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
id-token: write
|
|
contents: read
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
|
|
- uses: actions/cache@v4
|
|
with:
|
|
path: /nix/store
|
|
key: nix-${{ hashFiles('./build/flake.lock') }}
|
|
|
|
- uses: DeterminateSystems/determinate-nix-action@v3
|
|
|
|
- uses: DeterminateSystems/flake-checker-action@main
|
|
with:
|
|
flake-lock-path: ./build/flake.lock
|
|
|
|
- name: Build Docker Image via Nix Flake
|
|
run: |
|
|
nix build ./build#dockerImage --print-build-logs
|
|
docker load < result
|
|
|
|
- name: Log in to Gitea Container Registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ${{ github.server_url }}
|
|
username: ${{ secrets.CI_USER }}
|
|
password: ${{ secrets.CI_PASSWORD }}
|
|
|
|
- name: Tag and Push Docker Image
|
|
run: |
|
|
VERSION=${{ github.run_number }}
|
|
|
|
# Strip https from server URL
|
|
REGISTRY=${GITHUB_SERVER_URL#https://}
|
|
|
|
TARGET_IMAGE=$REGISTRY/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
|
|
|
|
# Auto-detect the built image name (better version)
|
|
SOURCE_IMAGE=$(docker load < result | awk '{print $3}')
|
|
|
|
docker tag $SOURCE_IMAGE $TARGET_IMAGE:$VERSION
|
|
docker tag $SOURCE_IMAGE $TARGET_IMAGE:latest
|
|
docker push $TARGET_IMAGE:$VERSION
|
|
docker push $TARGET_IMAGE:latest
|
|
|
|
- name: Setup Helm
|
|
uses: azure/setup-helm@v4
|
|
with:
|
|
version: v3.14.0
|
|
|
|
- name: Package Helm Chart
|
|
run: |
|
|
VERSION=${{ github.run_number }}
|
|
helm package ops/chart --version $VERSION --app-version $VERSION
|
|
|
|
- name: Push Helm Chart to Gitea Registry
|
|
run: |
|
|
VERSION=${{ github.run_number }}
|
|
CHART_FILE=${{ env.CHART_NAME }}-${VERSION}.tgz
|
|
|
|
curl -f --user "${{ secrets.CI_USER }}:${{ secrets.CI_PASSWORD }}" \
|
|
-X POST \
|
|
--upload-file ./$CHART_FILE \
|
|
"${{ github.server_url }}/api/packages/${{ github.repository_owner }}/helm/api/charts"
|