mirror of
https://github.com/aljazceru/kata-containers.git
synced 2026-01-07 00:14:21 +01:00
cfd8f4ff76
The "build-assets-${arch}" jobs need to have access to the secrets in
order to log into the container registry in the cases where
"push-to-registry", which is used to push the builder containers to
quay.io, is set to "yes".
Now that "build-assets-${arch}" pass the secrets down, we need to log
into the container registry in the "build-kata-static-tarball-${arch}"
files, in case "push-to-registry" is set to "yes".
Fixes: #6899
Signed-off-by: Fabiano Fidêncio <fabiano.fidencio@intel.com>
75 lines
2.3 KiB
YAML
75 lines
2.3 KiB
YAML
name: CI | Publish Kata Containers payload
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
- stable-*
|
|
|
|
jobs:
|
|
build-assets-amd64:
|
|
uses: ./.github/workflows/build-kata-static-tarball-amd64.yaml
|
|
with:
|
|
push-to-registry: yes
|
|
secrets: inherit
|
|
|
|
build-assets-arm64:
|
|
uses: ./.github/workflows/build-kata-static-tarball-arm64.yaml
|
|
with:
|
|
push-to-registry: yes
|
|
secrets: inherit
|
|
|
|
build-assets-s390x:
|
|
uses: ./.github/workflows/build-kata-static-tarball-s390x.yaml
|
|
with:
|
|
push-to-registry: yes
|
|
secrets: inherit
|
|
|
|
publish-kata-deploy-payload-amd64:
|
|
needs: build-assets-amd64
|
|
uses: ./.github/workflows/publish-kata-deploy-payload-amd64.yaml
|
|
with:
|
|
registry: quay.io
|
|
repo: kata-containers/kata-deploy-ci
|
|
tag: kata-containers-amd64
|
|
secrets: inherit
|
|
|
|
publish-kata-deploy-payload-arm64:
|
|
needs: build-assets-arm64
|
|
uses: ./.github/workflows/publish-kata-deploy-payload-arm64.yaml
|
|
with:
|
|
registry: quay.io
|
|
repo: kata-containers/kata-deploy-ci
|
|
tag: kata-containers-arm64
|
|
secrets: inherit
|
|
|
|
publish-kata-deploy-payload-s390x:
|
|
needs: build-assets-s390x
|
|
uses: ./.github/workflows/publish-kata-deploy-payload-s390x.yaml
|
|
with:
|
|
registry: quay.io
|
|
repo: kata-containers/kata-deploy-ci
|
|
tag: kata-containers-s390x
|
|
secrets: inherit
|
|
|
|
publish-manifest:
|
|
runs-on: ubuntu-latest
|
|
needs: [publish-kata-deploy-payload-amd64, publish-kata-deploy-payload-arm64, publish-kata-deploy-payload-s390x]
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v3
|
|
|
|
- name: Login to Kata Containers quay.io
|
|
uses: docker/login-action@v2
|
|
with:
|
|
registry: quay.io
|
|
username: ${{ secrets.QUAY_DEPLOYER_USERNAME }}
|
|
password: ${{ secrets.QUAY_DEPLOYER_PASSWORD }}
|
|
|
|
- name: Push multi-arch manifest
|
|
run: |
|
|
docker manifest create quay.io/kata-containers/kata-deploy-ci:kata-containers-latest \
|
|
--amend quay.io/kata-containers/kata-deploy-ci:kata-containers-amd64 \
|
|
--amend quay.io/kata-containers/kata-deploy-ci:kata-containers-arm64 \
|
|
--amend quay.io/kata-containers/kata-deploy-ci:kata-containers-s390x
|
|
docker manifest push quay.io/kata-containers/kata-deploy-ci:kata-containers-latest
|