Skip to content

Workflow file for this run

name: Build and Push to Google Artifact Registry
on: [push]
env:
REGISTRY: europe-north1-docker.pkg.dev/nais-io/nais/images
jobs:
build_and_push_contests:
if: ${{ github.ref == 'refs/heads/main' }}
permissions:
contents: "read"
id-token: "write"
runs-on: ubuntu-latest
outputs:
imageTag: ${{ steps.metadata.outputs.version }}
steps:
- name: Checkout contests
uses: actions/checkout@v3
- id: "auth"
name: "Authenticate to Google Cloud"
uses: "google-github-actions/auth@v1"
with:
workload_identity_provider: ${{ secrets.NAIS_IO_WORKLOAD_IDENTITY_PROVIDER }}
service_account: "[email protected]"
token_format: "access_token"
- name: Set up Docker Buildx
id: buildx
uses: docker/setup-buildx-action@v2
- name: Login to registry
uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a
with:
registry: ${{ env.REGISTRY }}
username: "oauth2accesstoken"
password: "${{ steps.auth.outputs.access_token }}"
- name: Docker meta contests
id: metadata
uses: docker/metadata-action@v4
with:
images: ${{ env.REGISTRY }}/contests
# Docker tags based on the following events/attributes
tags: |
type=schedule
type=ref,event=branch
type=ref,event=pr
type=semver,pattern=v{{version}}
type=semver,pattern=v{{major}}.{{minor}}
type=semver,pattern=v{{major}}
type=sha
- name: Build and push contests
uses: docker/build-push-action@v3
with:
context: .
file: Dockerfile
push: true
tags: ${{ steps.metadata.outputs.tags }}
labels: ${{ steps.metadata.outputs.labels }}
cache-from: type=gha
cache-to: type=gha,mode=max