Skip to content

build(deps): bump the github-actions group with 3 updates (#348) #549

build(deps): bump the github-actions group with 3 updates (#348)

build(deps): bump the github-actions group with 3 updates (#348) #549

Workflow file for this run

name: Docker
on:
pull_request: {}
push:
branches:
- main
jobs:
publish:
runs-on: ubuntu-latest
outputs:
meta_json: ${{ steps.meta.outputs.json }}
steps:
- name: Checkout
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
- name: Docker Meta
id: meta
uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
with:
flavor: |
latest=true
images: |
gcr.io/pomerium-registry/verify
pomerium/verify
tags: |
type=ref,event=branch
type=ref,event=pr
type=sha
- name: Set up QEMU
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db
- name: gcloud authenticate
if: ${{ github.event_name != 'pull_request' }}
uses: google-github-actions/auth@62cf5bd3e4211a0a0b51f2c6d6a37129d828611d
with:
project_id: ${{ secrets.GCP_PRODUCTION_PROJECT_ID }}
credentials_json: ${{ secrets.GCP_SERVICE_ACCOUNT }}
- name: gcloud sdk
if: ${{ github.event_name != 'pull_request' }}
uses: google-github-actions/setup-gcloud@f0990588f1e5b5af6827153b93673613abdc6ec7
- name: gcloud docker setup
if: ${{ github.event_name != 'pull_request' }}
run: gcloud auth configure-docker
- name: Login to DockerHub
if: ${{ github.event_name != 'pull_request' }}
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567
with:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: build and push
uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75
with:
context: .
platforms: linux/amd64,linux/arm64
push: ${{ github.event_name != 'pull_request' }}
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
cache-from: type=gha
cache-to: type=gha,mode=max
deploy:
runs-on: ubuntu-latest
if: ${{ github.event_name != 'pull_request' }}
needs: publish
steps:
- name: checkout
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
- name: gcloud authenticate
uses: google-github-actions/auth@62cf5bd3e4211a0a0b51f2c6d6a37129d828611d
with:
project_id: ${{ secrets.GCP_PRODUCTION_PROJECT_ID }}
credentials_json: ${{ secrets.GCP_SERVICE_ACCOUNT }}
- name: gcloud sdk
uses: google-github-actions/setup-gcloud@f0990588f1e5b5af6827153b93673613abdc6ec7
- name: deploy to cloud run
uses: google-github-actions/deploy-cloudrun@6ffa584a8ff78a430af94158c5538716464ea5a0
if: ${{ github.event_name != 'pull_request' }}
with:
image: ${{ fromJSON(needs.publish.outputs.meta_json).tags[0] }}
service: verify
flags: "--allow-unauthenticated"