You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
97 lines
3.3 KiB
97 lines
3.3 KiB
--- |
|
name: Publish |
|
run-name: Publish ${{ inputs.publish_type }} |
|
|
|
on: |
|
workflow_dispatch: |
|
inputs: |
|
publish_type: |
|
description: "Publish Options" |
|
default: "Initial Publish" |
|
type: choice |
|
options: |
|
- Initial Publish |
|
- Redeploy |
|
- Dry Run |
|
version: |
|
description: 'Version to publish (default: latest release)' |
|
required: true |
|
type: string |
|
default: latest |
|
|
|
jobs: |
|
setup: |
|
name: Setup |
|
runs-on: ubuntu-22.04 |
|
outputs: |
|
release-version: ${{ steps.version-output.outputs.version }} |
|
steps: |
|
- name: Version output |
|
id: version-output |
|
run: | |
|
if [[ "${{ inputs.version }}" == "latest" || "${{ inputs.version }}" == "" ]]; then |
|
VERSION=$(curl "https://api.github.com/repos/bitwarden/directory-connector/releases" | jq -c '.[] | select(.tag_name) | .tag_name' | head -1 | grep -ohE '20[0-9]{2}\.([1-9]|1[0-2])\.[0-9]+') |
|
echo "Latest Released Version: $VERSION" |
|
echo "version=$VERSION" >> $GITHUB_OUTPUT |
|
else |
|
echo "Release Version: ${{ inputs.version }}" |
|
echo "version=${{ inputs.version }}" >> $GITHUB_OUTPUT |
|
fi |
|
|
|
publish-docker: |
|
name: Publish Docker images |
|
runs-on: ubuntu-22.04 |
|
needs: setup |
|
env: |
|
_AZ_REGISTRY: bitwardenprod.azurecr.io |
|
_PROJECT_NAME: key-connector |
|
_RELEASE_VERSION: ${{ needs.setup.outputs.release-version }} |
|
|
|
steps: |
|
- name: Log in to Azure |
|
uses: Azure/login@e15b166166a8746d1a47596803bd8c1b595455cf # v1.6.0 |
|
with: |
|
creds: ${{ secrets.AZURE_PROD_KV_CREDENTIALS }} |
|
|
|
- name: Log in to ACR |
|
run: az acr login -n ${_AZ_REGISTRY%.azurecr.io} |
|
|
|
- name: Set up DCT |
|
id: setup-dct |
|
uses: bitwarden/gh-actions/setup-docker-trust@main |
|
with: |
|
azure-creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }} |
|
azure-keyvault-name: "bitwarden-ci" |
|
|
|
- name: Pull image |
|
run: docker pull $_AZ_REGISTRY/$_PROJECT_NAME:dev |
|
|
|
- name: Tag version and latest |
|
run: | |
|
if [[ "${{ inputs.publish_type }}" == "Dry Run" ]]; then |
|
docker tag $_AZ_REGISTRY/$_PROJECT_NAME:dev bitwarden/$_PROJECT_NAME:dryrun |
|
else |
|
docker tag $_AZ_REGISTRY/$_PROJECT_NAME:dev $_AZ_REGISTRY/$_PROJECT_NAME:$_RELEASE_VERSION |
|
docker tag $_AZ_REGISTRY/$_PROJECT_NAME:dev $_AZ_REGISTRY/$_PROJECT_NAME:latest |
|
|
|
docker tag $_AZ_REGISTRY/$_PROJECT_NAME:dev bitwarden/$_PROJECT_NAME:$_RELEASE_VERSION |
|
docker tag $_AZ_REGISTRY/$_PROJECT_NAME:dev bitwarden/$_PROJECT_NAME:latest |
|
fi |
|
|
|
- name: Push release version and latest image to ACR |
|
if: ${{ inputs.publish_type != 'Dry Run' }} |
|
run: | |
|
docker push $_AZ_REGISTRY/$_PROJECT_NAME:$_RELEASE_VERSION |
|
docker push $_AZ_REGISTRY/$_PROJECT_NAME:latest |
|
|
|
- name: Push release version and latest image to Docker Hub |
|
if: ${{ inputs.publish_type != 'Dry Run' }} |
|
env: |
|
DOCKER_CONTENT_TRUST: 1 |
|
DOCKER_CONTENT_TRUST_REPOSITORY_PASSPHRASE: ${{ steps.setup-dct.outputs.dct-delegate-repo-passphrase }} |
|
run: | |
|
docker push bitwarden/$_PROJECT_NAME:$_RELEASE_VERSION |
|
docker push bitwarden/$_PROJECT_NAME:latest |
|
|
|
- name: Log out of Docker |
|
run: docker logout
|
|
|