publish_images_on_push.yaml

# (C) Copyright Confidential Containers Contributors 2023.
# SPDX-License-Identifier: Apache-2.0
#
# Build and push project images on pull requests merged.
---
name: Publish project images

on:
  push:
    branches:
      - 'main'

  workflow_dispatch:

jobs:
  get_changed_files:
    runs-on: ubuntu-latest
    outputs:
      changed_files: ${{ steps.changed-files.outputs.all_changed_files }}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@v40

  caa:
    uses: ./.github/workflows/caa_build_and_push_per_arch.yaml
    with:
      registry: ghcr.io/${{ github.repository_owner }}
    secrets: inherit

  csi-wrapper:
    needs: [get_changed_files]
    uses: ./.github/workflows/csi_wrapper_images.yaml
    if: >
      github.event_name == 'push' &&
      contains(needs.get_changed_files.outputs.changed_files, 'volumes/csi-wrapper/')
    with:
      registry: ghcr.io/${{ github.repository_owner }}
      image_tags: latest,${{ github.sha }}
      git_ref: ${{ github.sha }}
    secrets: inherit

  peerpod-ctrl:
    needs: [get_changed_files]
    uses: ./.github/workflows/peerpod-ctrl_image.yaml
    if: >
      github.event_name == 'push' &&
      contains(needs.get_changed_files.outputs.changed_files, 'peerpod-ctrl/')
    with:
      registry: ghcr.io/${{ github.repository_owner }}
      image_tags: latest,${{ github.sha }}
      git_ref: ${{ github.sha }}
    secrets: inherit

  peerpodconfig-ctrl:
    needs: [get_changed_files]
    uses: ./.github/workflows/peerpodconfig-ctrl_image.yaml
    if: >
      github.event_name == 'push' &&
      contains(needs.get_changed_files.outputs.changed_files, 'peerpodconfig-ctrl/')
    with:
      registry: ghcr.io/${{ github.repository_owner }}
      image_tags: ${{ github.sha }},latest
      git_ref: ${{ github.sha }}
    secrets: inherit

  webhook:
    needs: [get_changed_files]
    uses: ./.github/workflows/webhook_image.yaml
    if: >
      github.event_name == 'push' &&
      contains(needs.get_changed_files.outputs.changed_files, 'webhook/')
    with:
      registry: ghcr.io/${{ github.repository_owner }}
      image_tags: ${{ github.sha }},latest
      git_ref: ${{ github.sha }}
    secrets: inherit