Daggerize with modules and publish images to ECR #11
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Checks | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| branches: | |
| - main | |
| jobs: | |
| lint-test: | |
| name: Lint & Test | |
| runs-on: dagger-g2-v0-13-3-2c | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Lint | |
| run: | | |
| dagger call -m ./ci --source . lint stdout | |
| - name: Test | |
| run: | | |
| dagger call -m ./ci --source . test stdout | |
| publish: | |
| name: Publish to ECR | |
| runs-on: dagger-g2-v0-13-3-2c | |
| if: github.event_name == 'push' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - id: install-aws-cli | |
| uses: unfor19/install-aws-cli-action@v1 | |
| with: | |
| version: 2 | |
| verbose: false | |
| arch: amd64 | |
| - name: Configure AWS credentials | |
| id: creds | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-region: us-east-1 | |
| - name: Login ECR | |
| id: login-ecr | |
| run: | | |
| export ECR_TOKEN="$(aws ecr get-login-password)" | |
| echo "token=$ECR_TOKEN" >> $GITHUB_OUTPUT | |
| - name: Publish | |
| env: | |
| ECR_TOKEN: ${{ steps.login-ecr.outputs.token }} | |
| ECR_REGISTRY: 125635003186.dkr.ecr.us-east-1.amazonaws.com | |
| ECR_REPO: dagger-registry | |
| run: | | |
| dagger call -m ./ci --source . build with-registry-auth --address $ECR_REGISTRY --secret env:ECR_TOKEN --username AWS publish --address "$ECR_REGISTRY/$ECR_REPO:${{ github.sha }}" | |
| - name: "Update dagger registry deployment" | |
| env: | |
| DAGGER_CI_GITHUB_TOKEN: ${{ secrets.DAGGER_CI_GITHUB_TOKEN }} | |
| ECR_REGISTRY: "125635003186.dkr.ecr.us-east-1.amazonaws.com" | |
| ECR_REPOSITORY: dagger-registry | |
| IMAGE_TAG: ${{ github.sha }} | |
| DAGGER_CLOUD_TOKEN: ${{ secrets.DAGGER_CLOUD_TOKEN }} | |
| run: | | |
| dagger call -m github.com/matipan/daggerverse/image-updater update \ | |
| --repo github.com/dagger/dagger.io \ | |
| --branch main \ | |
| --files "infra/prod/eks-2024-01-30/argocd/dagger-registry/deployment.yaml" \ | |
| --containers 0 \ | |
| --image-url "$ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG" \ | |
| --git-user "dagger-ci[bot]" \ | |
| --git-email "[email protected]" \ | |
| --git-password env:DAGGER_CI_GITHUB_TOKEN \ | |
| --app-name "Dagger Registry" \ | |
| --force-with-lease |