template-build.yml

on:
  workflow_call:
    inputs:
      release-tag-name:
        required: true
        type: string
      push:
        required: true
        type: boolean
env:
  PLATFORMS: linux/amd64,linux/arm64

jobs:
  dapper-build:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: ci
        run: make ci

      - name: Package
        run: make package

      - name: Package webhook
        run: make package-webhook

      - name: Read Secrets
        uses: rancher-eio/read-vault-secrets@main
        if: ${{ inputs.push == true }}
        with:
          secrets: |
            secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials username | DOCKER_USERNAME ;
            secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials password | DOCKER_PASSWORD

      - name: Login to Docker Hub
        uses: docker/login-action@v3
        if: ${{ inputs.push == true }}
        with:
          username: ${{ env.DOCKER_USERNAME }}
          password: ${{ env.DOCKER_PASSWORD }}

      - name: Docker Build node-manager
        uses: docker/build-push-action@v5
        with:
          provenance: false
          context: .
          platforms: ${{ env.PLATFORMS }}
          file: package/Dockerfile
          push: ${{ inputs.push }}
          tags: rancher/harvester-node-manager:${{ inputs.release-tag-name }}

      - name: Docker Build node-manager-webhook
        uses: docker/build-push-action@v5
        with:
          provenance: false
          context: .
          platforms: ${{ env.PLATFORMS }}
          file: package/Dockerfile.webhook
          push: ${{ inputs.push }}
          tags: rancher/harvester-node-manager-webhook:${{ inputs.release-tag-name }}