Skip to content

Authorize forskingsleder to create team (#323) #134

Authorize forskingsleder to create team (#323)

Authorize forskingsleder to create team (#323) #134

name: Build and Deploy Docker Image
permissions:
contents: read
id-token: write
on:
push:
branches:
- develop
- main
paths:
- 'src/**'
- 'server.js'
- 'index.html'
- 'tsconfig.json'
- 'tsconfig.node.json'
- 'vite.config.ts'
- 'package.json'
- 'package-lock.json'
- 'Dockerfile'
release:
types: [published]
workflow_dispatch:
env:
REGISTRY: europe-north1-docker.pkg.dev/artifact-registry-5n/dapla-stat-docker
IMAGE: dapla-ctrl
TAG: ${{ github.ref_name }}-${{ github.sha }}
jobs:
build-and-push:
runs-on: ubuntu-latest
steps:
- name: Check out repo
uses: actions/checkout@v3
- id: "auth"
name: "Authenticate to Google Cloud"
uses: "google-github-actions/[email protected]"
with:
workload_identity_provider: "projects/848539402404/locations/global/workloadIdentityPools/gh-actions/providers/gh-actions"
service_account: "gh-actions-dapla-stat@artifact-registry-5n.iam.gserviceaccount.com"
token_format: "access_token"
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v1
- name: Login to registry
uses: docker/login-action@v2
with:
registry: ${{ env.REGISTRY }}
username: "oauth2accesstoken"
password: "${{ steps.auth.outputs.access_token }}"
- name: Docker meta
id: metadata
uses: docker/metadata-action@v4
with:
images: ${{ env.REGISTRY }}/${{ env.IMAGE }}
tags: |
type=schedule
type=ref,event=branch
type=ref,event=pr,suffix=-${{ github.event.pull_request.head.sha }}
type=raw,value={{branch}}-{{sha}}-{{date 'YYYYMMDDHHmmss'}},enable={{is_default_branch}}
type=semver,pattern=v{{version}}
type=semver,pattern=v{{major}}.{{minor}}
type=semver,pattern=v{{major}}
type=raw,value=${{ env.TAG }}, enable=true
- name: Build and push
uses: docker/build-push-action@v2
with:
context: .
file: ./Dockerfile
push: true
tags: ${{ steps.metadata.outputs.tags }}