Build FPM Images #8
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This is a placeholder workflow and will be replaced once the appropriate | |
| # functionality passes code review. | |
| # | |
| # Dispatching workflow calls to a GHA workflow on a branch requires that a | |
| # workflow file with the correct name exists in the default branch, even | |
| # if that workflow bears no resemblance to the target workflow | |
| name: Build FPM Images | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| version: | |
| description: The version to use in the image label | |
| required: true | |
| type: string | |
| push: | |
| tags: [ '*' ] | |
| jobs: | |
| build: | |
| strategy: | |
| matrix: | |
| include: | |
| - directory: centos/8 | |
| label: centos8 | |
| - directory: debian/12 | |
| label: debian12 | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write # required for aws-actions/configure-aws-credentials | |
| contents: read | |
| steps: | |
| - name: version | |
| shell: bash | |
| env: | |
| VERSION: ${{ inputs.version }} | |
| REF_NAME: ${{ github.ref_name }} | |
| run: | | |
| V="${VERSION:-${REF_NAME}}" | |
| if [[ -z "$V" ]]; then | |
| echo "No version or ref_name set" >&2 | |
| exit 1 | |
| fi | |
| # Sanitize label to contain only valid chars: alphanumeric, underscore, period, hyphen | |
| # Must start with alphanumeric or underscore. | |
| shopt -q extglob | |
| V="${V//[^A-Za-z0-9_.-]/-}" # convert invalid chars to hyphens | |
| V="${V/#*([^A-Za-z0-9_])/}" # strip leading invalid chars (needs `shopt extglob`) | |
| echo "V=$V" >> "$GITHUB_ENV" | |
| - name: Assume AWS ECR Push Role | |
| uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1 | |
| with: | |
| aws-region: us-west-2 | |
| role-to-assume: arn:aws:iam::146628656107:role/fpm-oci-tag-build-gha | |
| role-session-name: "gha-fpm-build=${{ github.run_number }}" | |
| role-duration-seconds: 900 | |
| - name: Log into ECR | |
| uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0 | |
| with: | |
| registry: public.ecr.aws | |
| env: | |
| AWS_REGION: us-east-1 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0 | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Build FPM Image | |
| uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0 | |
| with: | |
| push: true | |
| context: ${{ matrix.directory }} | |
| file: ${{ matrix.directory }}/Dockerfile | |
| platforms: linux/amd64,linux/arm64 | |
| tags: | | |
| public.ecr.aws/gravitational/fpm:${{ matrix.label }}-${{ env.V }} |