-
Notifications
You must be signed in to change notification settings - Fork 99
60 lines (54 loc) · 2.16 KB
/
dockerimage.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
name: Build and Publish kubectl container
on:
push:
jobs:
build:
runs-on: ubuntu-latest
permissions:
id-token: write
steps:
- uses: actions/checkout@v2
- name: Build and test kubectl container
run: |
GIT_BRANCH=${GITHUB_REF#refs/heads/} make docker_build
GIT_BRANCH=${GITHUB_REF#refs/heads/} make test
- name: Docker meta
if: ${{ startsWith(github.ref, 'refs/heads/m') || startsWith(github.ref, 'refs/heads/v') }}
id: docker_meta
uses: crazy-max/ghaction-docker-meta@v1
with:
images: lachlanevenson/k8s-kubectl
tag-semver: |
{{raw}}
- name: Set up QEMU
if: ${{ startsWith(github.ref, 'refs/heads/m') || startsWith(github.ref, 'refs/heads/v') }}
uses: docker/setup-qemu-action@v1
- name: Set up Docker Buildx
if: ${{ startsWith(github.ref, 'refs/heads/m') || startsWith(github.ref, 'refs/heads/v') }}
uses: docker/setup-buildx-action@v1
- name: install cosign
uses: sigstore/cosign-installer@main
with:
cosign-release: 'v1.13.1'
- name: Login to DockerHub
if: ${{ startsWith(github.ref, 'refs/heads/m') || startsWith(github.ref, 'refs/heads/v') }}
uses: docker/login-action@v1
with:
username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }}
- name: Build and publish multi-arch kubectl container
if: ${{ startsWith(github.ref, 'refs/heads/m') || startsWith(github.ref, 'refs/heads/v') }}
uses: docker/build-push-action@v2
with:
platforms: linux/amd64,linux/s390x,linux/arm64,linux/ppc64le
push: true
tags: |
${{ github.ref != 'refs/heads/main' && steps.docker_meta.outputs.tags || '' }}
${{ github.ref == 'refs/heads/main' && 'lachlanevenson/k8s-kubectl:latest' || '' }}
labels: ${{ steps.docker_meta.outputs.labels }}
- name: Sign image only on version branches
if: ${{ startsWith(github.ref, 'refs/heads/v') }}
run: cosign sign --oidc-issuer https://token.actions.githubusercontent.com ${TAGS}
env:
TAGS: ${{ steps.docker_meta.outputs.tags }}
COSIGN_EXPERIMENTAL: 1