reusable-workflows/examples/docker-ops.yml at master · udx/reusable-workflows · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
name: Docker Release Example

on:
  push:
    branches: [main]
  workflow_dispatch:

jobs:
  # ===========================================================================
  # Docker Hub: docker-hub
  # USE CASE: Build, scan, and publish to Docker Hub + GitHub Releases
  # ===========================================================================
  docker-hub:
    uses: udx/reusable-workflows/.github/workflows/docker-ops.yml@master
    with:
      image_name: ${{ vars.IMAGE_NAME }}
      working_directory: .
      # Set to "false" for repos that need to avoid GitHub Actions cache usage.
      enable_cache: "true"
      docker_login: ${{ vars.DOCKER_USERNAME }}
      docker_org: ${{ vars.DOCKER_ORG }}
      docker_repo: ${{ vars.DOCKER_REPO }}
    secrets:
      docker_token: ${{ secrets.DOCKER_TOKEN }}

  # ===========================================================================
  # GCP: gcr
  # USE CASE: Publish to GCP Artifact Registry using OIDC (Keyless)
  # ===========================================================================
  gcr:
    permissions:
      id-token: write
      contents: write
    uses: udx/reusable-workflows/.github/workflows/docker-ops.yml@master
    with:
      image_name: ${{ vars.IMAGE_NAME }}
      working_directory: .
      enable_cache: "true"
      gcp_region: ${{ vars.GCP_REGION }}
      gcp_project_id: ${{ vars.GCP_PROJECT_ID }}
      gcp_repo: ${{ vars.GCP_REPO }}
      gcp_workload_identity_provider: ${{ vars.GCP_WORKLOAD_IDENTITY_PROVIDER }}
      gcp_service_account: ${{ vars.GCP_SERVICE_ACCOUNT }}

  # ===========================================================================
  # Azure: acr
  # USE CASE: Publish to Azure Container Registry using OIDC (Keyless)
  # ===========================================================================
  acr:
    permissions:
      id-token: write
      contents: write
    uses: udx/reusable-workflows/.github/workflows/docker-ops.yml@master
    with:
      image_name: ${{ vars.IMAGE_NAME }}
      working_directory: .
      enable_cache: "true"
      acr_registry: ${{ vars.ACR_REGISTRY }}
      acr_repository: ${{ vars.ACR_REPOSITORY }}
      azure_client_id: ${{ vars.AZURE_CLIENT_ID }}
      azure_tenant_id: ${{ vars.AZURE_TENANT_ID }}
      azure_subscription_id: ${{ vars.AZURE_SUBSCRIPTION_ID }}

  # ===========================================================================
  # All: all
  # USE CASE: Publish to Docker Hub, GCP, and Azure simultaneously
  # ===========================================================================
  multi-registry:
    permissions:
      id-token: write
      contents: write
    uses: udx/reusable-workflows/.github/workflows/docker-ops.yml@master
    with:
      image_name: ${{ vars.IMAGE_NAME }}
      working_directory: .
      enable_cache: "true"
      # Docker Hub
      docker_login: ${{ vars.DOCKER_USERNAME }}
      docker_org: ${{ vars.DOCKER_ORG }}
      docker_repo: ${{ vars.DOCKER_REPO }}
      # GCP
      gcp_region: ${{ vars.GCP_REGION }}
      gcp_project_id: ${{ vars.GCP_PROJECT_ID }}
      gcp_repo: ${{ vars.GCP_REPO }}
      gcp_workload_identity_provider: ${{ vars.GCP_WORKLOAD_IDENTITY_PROVIDER }}
      gcp_service_account: ${{ vars.GCP_SERVICE_ACCOUNT }}
      # Azure
      acr_registry: ${{ vars.ACR_REGISTRY }}
      acr_repository: ${{ vars.ACR_REPOSITORY }}
      azure_client_id: ${{ vars.AZURE_CLIENT_ID }}
      azure_tenant_id: ${{ vars.AZURE_TENANT_ID }}
      azure_subscription_id: ${{ vars.AZURE_SUBSCRIPTION_ID }}
    secrets:
      docker_token: ${{ secrets.DOCKER_TOKEN }}
      slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}

  # ===========================================================================
  # Multi-function repo: no-github-release
  # USE CASE: Skip GitHub Release (e.g., multi-function repos where another
  #           job handles the release, or GCP/ACR-only publishing)
  # ===========================================================================
  no-github-release:
    permissions:
      id-token: write
      contents: write
    uses: udx/reusable-workflows/.github/workflows/docker-ops.yml@master
    with:
      image_name: ${{ vars.IMAGE_NAME }}
      working_directory: functions/sqlOps
      dockerfile_path: Dockerfile
      enable_github_release: "false"
      gcp_region: ${{ vars.GCP_REGION }}
      gcp_project_id: ${{ vars.GCP_PROJECT_ID }}
      gcp_repo: ${{ vars.GCP_REPO }}
      gcp_workload_identity_provider: ${{ vars.GCP_WORKLOAD_IDENTITY_PROVIDER }}
      gcp_service_account: ${{ vars.GCP_SERVICE_ACCOUNT }}

  # ===========================================================================
  # Multi-function repo: function-subdir
  # USE CASE: Function-specific build from a repository subdirectory
  # ===========================================================================
  function-subdir:
    permissions:
      id-token: write
      contents: write
    uses: udx/reusable-workflows/.github/workflows/docker-ops.yml@master
    with:
      image_name: sql-ops
      working_directory: functions/sqlOps
      dockerfile_path: Dockerfile
      docker_login: ${{ vars.DOCKER_USERNAME }}
      docker_org: ${{ vars.DOCKER_ORG }}
      docker_repo: sql-ops
    secrets:
      docker_token: ${{ secrets.DOCKER_TOKEN }}

# Full Documentation:
#   - See docs/workflows/docker-ops.md for complete setup guides, troubleshooting, and best practices