Skip to content

Commit 4311ad8

Browse files
andrpacandrpac
committed
feat: dirty commit with new promote pipeline
1 parent e241659 commit 4311ad8

File tree

2 files changed

+148
-9
lines changed

2 files changed

+148
-9
lines changed

‎.github/actions/image2commit/action.yml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ inputs:
1515
outputs:
1616
commit_sha:
1717
description: "Resolved full commit SHA"
18-
18+
value: ${{ steps.resolve.outputs.commit_sha }}
1919
runs:
2020
using: "composite"
2121
steps:
@@ -37,4 +37,6 @@ runs:
3737
"${{ inputs.repo }}" \
3838
"${{ inputs.image_sha }}"
3939
)
40+
41+
echo "Raw full_sha: $full_sha"
4042
echo "commit_sha=$full_sha" >> $GITHUB_OUTPUT

‎.github/workflows/release-image.yml

Lines changed: 145 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -16,28 +16,33 @@ on:
1616
required: false
1717
default: "latest"
1818
type: string
19-
19+
push:
20+
branches:
21+
- '**'
22+
2023
permissions:
2124
contents: write
2225
pull-requests: write
2326

2427
jobs:
25-
26-
# Note, the first step is necessary for getting the exact commit from the passed in image_sha
27-
# This is because, the release-image step should exactly check out that exact commit
28+
# Image2commit: Creates a mapping between the image_sha given as input and the actual git commit
29+
# This is necassary for the release-image step that requires checking out that exact git commit
2830
image2commit:
2931
name: Resolve Commit SHA from Image
3032
runs-on: ubuntu-latest
33+
environment: release
3134
outputs:
3235
commit_sha: ${{ steps.resolve.outputs.commit_sha }}
33-
3436
steps:
37+
- name: Checkout code
38+
uses: actions/checkout@v4
39+
3540
- name: Log in to Docker registry
3641
uses: docker/login-action@v3
3742
with:
3843
registry: docker.io
39-
username: ${{ secrets.DOCKER_USERNAME }}
40-
password: ${{ secrets.DOCKER_PASSWORD }}
44+
username: ${{ secrets.ANDRPAC_DOCKER_USERNAME }}
45+
password: ${{ secrets.ANDRPAC_DOCKER_PASSWORD }}
4146

4247
- name: Run image2commit
4348
id: resolve
@@ -56,6 +61,128 @@ jobs:
5661
run: |
5762
echo "Resolved commit: ${{ needs.image2commit.outputs.commit_sha }}"
5863
64+
# Release-image: Created and uploads a release for the specified operator version given in the image_sha
65+
# Note, with new releases, all of the release artifacts will be stored withing docs/releases/{release_version}
66+
release-image:
67+
runs-on: ubuntu-latest
68+
environment: release
69+
needs: image2commit
70+
env:
71+
VERSION: ${{ github.event.inputs.version || 'test-0.0.0-dev' }}
72+
AUTHORS: ${{ github.event.inputs.authors || 'unknown' }}
73+
IMAGE_SHA: ${{ github.event.inputs.image_sha || 'latest' }}
74+
DOCKER_SIGNATURE_REPO: docker.io/andrpac/signatures
75+
DOCKER_RELEASE_REPO: docker.io/andrpac/mongodb-atlas-kubernetes-operator
76+
DOCKER_PRERELEASE_REPO: docker.io/andrpac/mongodb-atlas-kubernetes-operator-prerelease
77+
QUAY_RELEASE_REPO: quay.io/andrpac/mongodb-atlas-kubernetes-operator
78+
QUAY_PRERELEASE_REPO: quay.io/andrpac/mongodb-atlas-kubernetes-operator-prerelease
79+
steps:
80+
- name: Checkout code
81+
uses: actions/checkout@v4
82+
with:
83+
fetch-depth: 0
84+
#ref: $#{{ needs.image2commit.outputs.commit_sha }} !!!!!!!!! SUPER IMPORTNAT TO PUT BACK !!!!!!!
85+
86+
- name: Generate GitHub App Token
87+
id: generate_token
88+
uses: mongodb/apix-action/token@v8
89+
with:
90+
app-id: ${{ secrets.AKO_RELEASER_APP_ID }}
91+
private-key: ${{ secrets.AKO_RELEASER_RSA_KEY }}
92+
93+
# Login in into all registries
94+
- name: Log in to Docker registry
95+
uses: docker/login-action@v3
96+
with:
97+
registry: docker.io
98+
username: ${{ secrets.ANDRPAC_DOCKER_USERNAME }}
99+
password: ${{ secrets.ANDRPAC_DOCKER_PASSWORD }}
100+
101+
- name: Log in to Quay registry
102+
uses: docker/login-action@v3
103+
with:
104+
registry: quay.io
105+
username: ${{ secrets.ANDRPAC_QUAY_USERNAME }}
106+
password: ${{ secrets.ANDRPAC_QUAY_PASSWORD }}
107+
108+
- name: Install devbox
109+
uses: jetify-com/[email protected]
110+
111+
# This step configures all of the dynamic variables needed for later steps
112+
- name: Configure job environment for downstream steps
113+
id: tags
114+
run: |
115+
promoted_tag="promoted-${IMAGE_SHA}"
116+
release_tag="${VERSION}"
117+
certified_tag="certified-${release_tag}"
118+
119+
docker_image_url="${DOCKER_RELEASE_REPO}:${release_tag}"
120+
quay_image_url="${QUAY_RELEASE_REPO}:${release_tag}"
121+
quay_certified_image_url="${QUAY_RELEASE_REPO}:${certified_tag}"
122+
123+
echo "promoted_tag=$promoted_tag" >> $GITHUB_OUTPUT
124+
echo "release_tag=$release_tag" >> $GITHUB_OUTPUT
125+
echo "certified_tag=$certified_tag" >> $GITHUB_OUTPUT
126+
echo "docker_image_url=$docker_image_url" >> $GITHUB_OUTPUT
127+
echo "quay_image_url=$quay_image_url" >> $GITHUB_OUTPUT
128+
echo "quay_certified_image_url=$quay_certified_image_url" >> $GITHUB_OUTPUT
129+
130+
# Move prerelease images to official release registries in Docker Hub and Quay
131+
- name: Move image to Docker registry release from prerelease
132+
run: devbox run -- ./scripts/move-image.sh
133+
env:
134+
IMAGE_SRC_REPO: ${{ env.DOCKER_PRERELEASE_REPO }}
135+
IMAGE_DEST_REPO: ${{ env.DOCKER_RELEASE_REPO }}
136+
IMAGE_SRC_TAG: ${{ steps.tags.outputs.promoted_tag }}
137+
IMAGE_DEST_TAG: ${{ github.event.inputs.version }}
138+
139+
- name: Move image to Quay registry release from prerelease
140+
run: devbox run -- ./scripts/move-image.sh
141+
env:
142+
IMAGE_SRC_REPO: ${{ env.QUAY_PRERELEASE_REPO }}
143+
IMAGE_DEST_REPO: ${{ env.QUAY_RELEASE_REPO }}
144+
IMAGE_SRC_TAG: ${{ steps.tags.outputs.promoted_tag }}
145+
IMAGE_DEST_TAG: ${{ github.event.inputs.version }}
146+
147+
# Create Openshift certified images
148+
- name: Create OpenShift certified image on Quay
149+
run: devbox run -- ./scripts/move-image.sh
150+
env:
151+
IMAGE_SRC_REPO: ${{ env.QUAY_PRERELEASE_REPO }}
152+
IMAGE_DEST_REPO: ${{ env.QUAY_RELEASE_REPO }}
153+
IMAGE_SRC_TAG: ${{ steps.tags.outputs.promoted_tag }}
154+
IMAGE_DEST_TAG: ${{ steps.tags.outputs.certified_tag }}
155+
156+
# Link updates to pr: all-in-one.yml, helm-updates, sdlc requirements
157+
- name: Generate deployment configurations
158+
uses: ./.github/actions/gen-install-scripts
159+
with:
160+
ENV: prod
161+
IMAGE_URL: ${{ steps.tags.outputs.docker_image_url }}
162+
163+
- name: Bump Helm chart version
164+
run: devbox run -- ./scripts/bump-helm-chart-version.sh
165+
166+
# Prepare SDLC requirement: signatures, sboms, compliance reports
167+
# Note, signed images will live in mongodb/release and mongodb/signature repos
168+
- name: Sign released images
169+
run: |
170+
devbox run -- make sign IMG="${{ steps.tags.outputs.docker_image_url }}" SIGNATURE_REPO="${{ env.DOCKER_RELEASE_REPO }}"
171+
devbox run -- make sign IMG="${{ steps.tags.outputs.quay_image_url }}" SIGNATURE_REPO="${{ env.QUAY_RELEASE_REPO }}"
172+
devbox run -- make sign IMG="${{ steps.tags.outputs.docker_image_url }}" SIGNATURE_REPO="${{ env.DOCKER_SIGNATURE_REPO }}"
173+
devbox run -- make sign IMG="${{ steps.tags.outputs.quay_certified_image_url }}" SIGNATURE_REPO="${{ env.QUAY_RELEASE_REPO }}"
174+
devbox run -- make sign IMG="${{ steps.tags.outputs.quay_certified_image_url }}" SIGNATURE_REPO="${{ env.DOCKER_SIGNATURE_REPO }}"
175+
env:
176+
PKCS11_URI: ${{ secrets.PKCS11_URI }}
177+
GRS_USERNAME: ${{ secrets.GRS_USERNAME }}
178+
GRS_PASSWORD: ${{ secrets.GRS_PASSWORD }}
179+
180+
- name: Generate SBOMs
181+
run: devbox run -- make generate-sboms RELEASED_OPERATOR_IMAGE="${{ env.DOCKER_RELEASE_REPO }}"
182+
183+
- name: Create SDLC report
184+
run: devbox run -- make gen-sdlc-checklist
185+
59186
prepare-environment:
60187
name: Set up Environment Variables
61188
runs-on: ubuntu-latest
@@ -151,7 +278,7 @@ jobs:
151278
echo "quay_image_url=$quay_image_url" >> $GITHUB_OUTPUT
152279
echo "quay_certified_image_url=$quay_certified_image_url" >> $GITHUB_OUTPUT
153280
154-
release-image:
281+
release-image1:
155282
runs-on: ubuntu-latest
156283
if: false
157284
environment: release
@@ -205,6 +332,7 @@ jobs:
205332
short_sha="${sha:0:6}"
206333
echo "promoted_tag=promoted-${short_sha}" >> "$GITHUB_OUTPUT"
207334
335+
# Move prerelease images to official release registries in Docker Hub and Quay
208336
- name: Move image to Docker registry release from prerelease
209337
run: devbox run -- ./scripts/move-image.sh
210338
env:
@@ -220,6 +348,15 @@ jobs:
220348
IMAGE_DEST_REPO: ${{ env.QUAY_RELEASE_REPO }}
221349
IMAGE_SRC_TAG: ${{ steps.tags.outputs.promoted_tag }}
222350
IMAGE_DEST_TAG: ${{ github.event.inputs.version }}
351+
352+
# Create Openshift certified images
353+
- name: Create OpenShift certified image on Quay
354+
run: devbox run -- ./scripts/move-image.sh
355+
env:
356+
IMAGE_SRC_REPO: ${{ env.QUAY_PRERELEASE_REPO }}
357+
IMAGE_DEST_REPO: ${{ env.QUAY_RELEASE_REPO }}
358+
IMAGE_SRC_TAG: ${{ steps.tags.outputs.promoted_tag }}
359+
IMAGE_DEST_TAG: ${{ steps.tags.outputs.certified_tag }}
223360

224361
- name: Create deploy configurations
225362
uses: ./.github/actions/gen-install-scripts

0 commit comments

Comments
 (0)