2dbc92c1a6
All checks were successful
Build and Push to ACR / Build and Push (push) Successful in 1m34s
Change-Id: I11e12d8d4c914eabdc30ba4d8be494fd09b617a3
105 lines
3.4 KiB
YAML
105 lines
3.4 KiB
YAML
name: Build and Push to ACR
|
|
|
|
on:
|
|
push:
|
|
branches: [ "main" ]
|
|
workflow_dispatch: {}
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
env:
|
|
AZURE_FEDERATED_TOKEN_FILE: /var/run/secrets/azure/tokens/azure-identity-token
|
|
|
|
jobs:
|
|
build:
|
|
name: Build and Push
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
id-token: write
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up JDK 17
|
|
uses: actions/setup-java@v4
|
|
with:
|
|
distribution: 'temurin'
|
|
java-version: '17'
|
|
cache: 'maven'
|
|
|
|
- name: Install Maven 3.9
|
|
run: |
|
|
MVN_VERSION=3.9.9
|
|
wget -q "https://archive.apache.org/dist/maven/maven-3/${MVN_VERSION}/binaries/apache-maven-${MVN_VERSION}-bin.tar.gz"
|
|
tar -xzf "apache-maven-${MVN_VERSION}-bin.tar.gz" -C /opt
|
|
ln -sf "/opt/apache-maven-${MVN_VERSION}/bin/mvn" /usr/local/bin/mvn
|
|
mvn --version
|
|
|
|
- name: Build with Maven
|
|
run: |
|
|
mvn clean package -DskipTests -B
|
|
echo "✓ Build complete"
|
|
|
|
- name: Run tests
|
|
run: mvn test -B
|
|
|
|
- name: Install Azure CLI
|
|
run: |
|
|
command -v az &>/dev/null || curl -sL https://aka.ms/InstallAzureCLIDeb | bash
|
|
|
|
- name: Install Docker CLI
|
|
run: |
|
|
command -v docker &>/dev/null || (apt-get update -qq && apt-get install -y docker.io)
|
|
docker --version
|
|
|
|
- name: Azure login (OIDC)
|
|
run: |
|
|
az login \
|
|
--service-principal \
|
|
--username "$AZURE_CLIENT_ID" \
|
|
--tenant "$AZURE_TENANT_ID" \
|
|
--federated-token "$(cat $AZURE_FEDERATED_TOKEN_FILE)"
|
|
echo "✓ Azure login successful"
|
|
|
|
- name: Get ACR details
|
|
id: acr
|
|
run: |
|
|
ACR_NAME=$(az acr list --query "[0].name" -o tsv)
|
|
ACR_NAME="${ACR_NAME:-bstagecjotdevacr}"
|
|
echo "ACR_NAME=$ACR_NAME" >> $GITHUB_ENV
|
|
echo "ACR_LOGIN_SERVER=${ACR_NAME}.azurecr.io" >> $GITHUB_ENV
|
|
echo "✓ Using ACR: ${ACR_NAME}.azurecr.io"
|
|
|
|
- name: ACR Login
|
|
run: |
|
|
ACR_TOKEN=$(az acr login --name "$ACR_NAME" --expose-token --output tsv --query accessToken)
|
|
docker login "$ACR_LOGIN_SERVER" \
|
|
--username 00000000-0000-0000-0000-000000000000 \
|
|
--password "$ACR_TOKEN"
|
|
echo "✓ ACR login successful"
|
|
|
|
- name: Build and Push Docker image
|
|
run: |
|
|
IMAGE_TAG="${{ gitea.sha }}"
|
|
IMAGE_FULL="${ACR_LOGIN_SERVER}/test-alex-2:${IMAGE_TAG}"
|
|
IMAGE_LATEST="${ACR_LOGIN_SERVER}/test-alex-2:latest"
|
|
docker build -t "$IMAGE_FULL" -t "$IMAGE_LATEST" .
|
|
docker push "$IMAGE_FULL"
|
|
docker push "$IMAGE_LATEST"
|
|
echo "IMAGE_FULL=$IMAGE_FULL" >> $GITHUB_ENV
|
|
echo "✓ Pushed: $IMAGE_FULL"
|
|
|
|
- name: Build Summary
|
|
run: |
|
|
echo "### ✅ Build Successful" >> $GITHUB_STEP_SUMMARY
|
|
echo "| | |" >> $GITHUB_STEP_SUMMARY
|
|
echo "|---|---|" >> $GITHUB_STEP_SUMMARY
|
|
echo "| **Service** | test-alex-2 |" >> $GITHUB_STEP_SUMMARY
|
|
echo "| **Runtime** | Java Spring Boot |" >> $GITHUB_STEP_SUMMARY
|
|
echo "| **Commit** | ${{ gitea.sha }} |" >> $GITHUB_STEP_SUMMARY
|
|
echo "| **Image** | $IMAGE_FULL |" >> $GITHUB_STEP_SUMMARY
|