Security: updated cert gen for OpenSearch. #478
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: docker-nifi | |
| on: | |
| push: | |
| branches: [ master ] | |
| pull_request: | |
| branches: [ master ] | |
| release: | |
| types: [published] | |
| # Allows you to run this workflow manually from the Actions tab | |
| workflow_dispatch: | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| env: | |
| working-directory: ./nifi | |
| # Steps represent a sequence of tasks that will be executed as part of the job | |
| steps: | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v1 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v1 | |
| - name: checkout repo | |
| uses: actions/checkout@v2 | |
| - name: Log in to Docker Hub | |
| uses: docker/login-action@v1 | |
| with: | |
| username: ${{ secrets.DOCKER_HUB_USERNAME }} | |
| password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }} | |
| - name: Extract metadata (tags, labels) for Docker | |
| id: meta | |
| uses: docker/metadata-action@v3 | |
| with: | |
| images: cogstacksystems/cogstack-nifi:latest | |
| - uses: actions/checkout@v2 | |
| - name: Get and set release version env var | |
| id: release_version | |
| run: | | |
| echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV | |
| echo "::set-output name=RELEASE_VERSION::$RELEASE_VERSION" | |
| - name: output test | |
| run: | | |
| echo ${{ env.RELEASE_VERSION }} | |
| echo $RELEASE_VERSION | |
| - name: set docker release tag name | |
| id: set_release_version | |
| if: ${{ env.RELEASE_VERSION != 'master' }} | |
| run: echo "RELEASE_VERSION=${RELEASE_VERSION#?}" >> $GITHUB_ENV | |
| - name: set docker tag name latest | |
| id: set_release_version_latest | |
| if: ${{ env.RELEASE_VERSION == 'master' }} | |
| run: echo "RELEASE_VERSION=latest" >> $GITHUB_ENV | |
| - name: Build and push Docker NiFi image | |
| id: docker_build | |
| uses: docker/build-push-action@v2 | |
| with: | |
| context : ./nifi | |
| file : "./nifi/Dockerfile" | |
| allow: network.host | |
| github-token: ${{ github.token }} | |
| tags: cogstacksystems/cogstack-nifi:${{ env.RELEASE_VERSION }} | |
| push: true | |
| - name: Image digest | |
| run: echo ${{ steps.docker_build.outputs.digest }} |