Update changelog #32
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # 🏃♀️ Continuous Integration and Delivery: Stable | |
| # =============================================== | |
| # | |
| # Note: for this workflow to succeed, the following secrets must be installed | |
| # in the repository: | |
| # | |
| # ``ADMIN_GITHUB_TOKEN`` | |
| # A personal access token of a user with collaborator or better access to | |
| # the project repository. You can generate this by visiting GitHub → | |
| # Settings → Developer settings → Personal access tokens → Generate new | |
| # token. Give the token scopes on ``repo``, ``write:packages``, | |
| # ``delete:packages``, ``workflow``, and ``read:gpg_key``. | |
| # ``CODE_SIGNING_KEY`` | |
| # A *private* key with which we can sign artifacts. | |
| # ``OSSRH_USERNAME`` | |
| # Username for the Central Repository. | |
| # ``OSSRH_USERNAME`` | |
| # Password for the Central Repository. | |
| # | |
| --- | |
| name: 😌 Stable integration & delivery | |
| # Driving Event | |
| # ------------- | |
| # | |
| # What event starts this workflow: a push of a release tag. Note: according to | |
| # https://git.io/JJZQt we have been doing our tag matching wrong. It's not | |
| # regexp, it's not glob…it's more like…glob++ 😮 | |
| on: | |
| push: | |
| tags: | |
| - 'release/*' | |
| concurrency: roundup | |
| # What to Do | |
| # ---------- | |
| # | |
| # Round up, yee-haw! | |
| jobs: | |
| stable-assembly: | |
| name: 🐴 Stable Assembly | |
| runs-on: ubuntu-latest | |
| steps: | |
| - | |
| name: 💳 Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| lfs: true | |
| token: ${{secrets.ADMIN_GITHUB_TOKEN}} | |
| fetch-depth: 0 | |
| - | |
| name: 💵 Maven Cache | |
| uses: actions/cache@v3 | |
| with: | |
| path: ~/.m2/repository | |
| # The "key" used to indicate a set of cached files is the operating system runner | |
| # plus "mvn" for Maven-specific builds, plus a hash of the `pom.xml` files, which | |
| # should uniquely identify the dependent jars; plus "pds" because we pds-prefix | |
| # everything with "pds" in PDS—even when the context is obvious! 😅 | |
| key: pds-${{runner.os}}-mvn-${{hashFiles('**/pom.xml')}} | |
| # To restore a set of files, we only need to match a prefix of the saved key. | |
| restore-keys: pds-${{runner.os}}-mvn- | |
| - | |
| name: 🤠 Roundup | |
| uses: NASA-PDS/roundup-action@stable | |
| with: | |
| assembly: stable | |
| maven-doc-phases: package | |
| # TODO: Remove | |
| maven-stable-artifact-phases: clean,install,deploy | |
| packages: openjdk11-jdk | |
| env: | |
| ossrh_username: ${{secrets.OSSRH_USERNAME}} | |
| ossrh_password: ${{secrets.OSSRH_PASSWORD}} | |
| CODE_SIGNING_KEY: ${{secrets.CODE_SIGNING_KEY}} | |
| ADMIN_GITHUB_TOKEN: ${{secrets.ADMIN_GITHUB_TOKEN}} | |
| - | |
| name: 🫙 Jar and Tag Determination | |
| id: jartag | |
| run: | | |
| echo "jar_file==$(ls ./service/target/*.jar)" >> $GITHUB_OUTPUT | |
| echo "image_tag=$(echo ${{github.ref}} | awk -F/ '{print $NF}')" >> $GITHUB_OUTPUT | |
| - | |
| name: 💳 Docker Hub Identification | |
| uses: docker/login-action@v2 | |
| with: | |
| username: ${{secrets.DOCKERHUB_USERNAME}} | |
| password: ${{secrets.DOCKERHUB_TOKEN}} | |
| - | |
| name: 🎰 QEMU Multiple Machine Emulation | |
| uses: docker/setup-qemu-action@v2 | |
| - | |
| name: 🚢 Docker Buildx | |
| uses: docker/setup-buildx-action@v2 | |
| - | |
| name: 🧱 Image Construction and Publication | |
| uses: docker/build-push-action@v3 | |
| with: | |
| context: ./ | |
| file: ./service/docker/Dockerfile | |
| build-args: api_jar=${{steps.jartag.outputs.jar_file}} | |
| platforms: linux/amd64,linux/arm64 | |
| push: true | |
| tags: ${{secrets.DOCKERHUB_USERNAME}}/registry-api-service:${{steps.jartag.outputs.image_tag}} | |
| ... | |
| # -*- mode: yaml; indent: 4; fill-column: 120; coding: utf-8 -*- |