Skip to content

Merge pull request #50 from cu-devclub/hotfix #35

Merge pull request #50 from cu-devclub/hotfix

Merge pull request #50 from cu-devclub/hotfix #35

name: Auth
on:
push:
branches: [main, testing, latest]
paths: [api/src/**]
tags: [ v* ]
env:
# Use docker.io for Docker Hub (Default) / Use ghcr.io for GitHub Container Registry
REGISTRY: ghcr.io
# github.repository as <account>/<repo>
IMAGE_NAME: ${{ github.repository }}
jobs:
docker:
# Ensures that docker action will not run on pull requests in draft state
if: github.event.pull_request.draft == false
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
steps:
-
name: Checkout repository
uses: actions/checkout@v3
-
name: Make ENVFILE
uses: SpicyPizza/[email protected]
with:
envkey_COOKIE_SECRET: ${{ secrets.PROD_JWT_SECRET_KEY }}
envkey_PUBKEY: ${{ secrets.PROD_PUBKEY }}
file_name: .env
directory: ./auth/
-
name: create-json
id: create-json
uses: jsdaniell/[email protected]
with:
name: "client_secrets.json"
json: ${{ secrets.PROD_CLIENT_SECRETS }}
dir: 'auth/'
-
name: Set up QEMU
uses: docker/setup-qemu-action@v3
-
name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
-
name: Docker Metadata
id: meta
uses: docker/metadata-action@v5
with:
images: |
${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
flavor: |
latest=auto
prefix=auth-,onlatest=true
tags: |
type=ref,event=branch
type=ref,event=pr
type=semver,pattern={{version}}
type=semver,pattern={{major}}.{{minor}}
type=semver,pattern={{major}}
-
name: Log into registry ${{ env.REGISTRY }}
if: github.event_name != 'pull_request'
uses: docker/login-action@v3
with:
registry: ${{ env.REGISTRY }}
# Username and Password for DOCKER HUB
#username: ${{ secrets.DOCKERHUB_USERNAME }}
#password: ${{ secrets.DOCKERHUB_TOKEN }}
# Username and Password for GITHUB CONTAINER REGISTRY
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
-
name: Build and Push Docker Image
id: build-and-push
uses: docker/build-push-action@v5
with:
context: "./auth"
push: ${{ github.event_name != 'pull_request' }}
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
cache-from: type=gha
cache-to: type=gha,mode=max