release.yaml

name: Release

## workflow will trigger on below condition,
## except image release that have jobs condition to trigger only on tagging
on:
  push:
    branches:
      - main
    tags:
      - 'chain/v*.*.*'
      - 'relay/nakama/v*.*.*'

env:
  REGISTRY_URL: us-docker.pkg.dev

jobs:
  chain-release:
    name: Chain Image Release
    if: github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/chain/v')
    runs-on: ubuntu-latest
    defaults:
      run:
        shell: bash
        working-directory: chain
    # Add "id-token" with the intended permissions.
    permissions:
      contents: 'read'
      id-token: 'write'
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2
      - name: Cache Docker images
        uses: ScribeMD/docker-cache@0.3.4
        with:
          key: docker-${{ runner.os }}-${{ hashFiles('chain/Dockerfile') }}
      - name: GCP auth
        id: auth
        uses: google-github-actions/auth@v1
        with:
          workload_identity_provider: ${{ secrets.GCP_WIF_PROVIDER }}
          service_account: ${{ secrets.GCP_WIF_SERVICE_ACCOUNT }}
      - name: GCP - Set up Cloud SDK
        uses: google-github-actions/setup-gcloud@v1
        with:
          project_id: ${{ env.GCP_PROJECT_ID_PACKAGES }}
      - name: Docker - Auth to artifact registry
        run: |
          gcloud auth configure-docker ${{ env.REGISTRY_URL }}
      - name: Docker - Build
        run: |
          docker build -t chain-local-build:latest .
      - name: Docker - Publish Image
        run: |
          ## Construct image_id
          IMAGE_ID_CHAIN=${{ env.REGISTRY_URL }}/${{ github.repository_owner }}/${{ github.event.repository.name }}/chain
          IMAGE_ID_CHAIN=$(echo $IMAGE_ID_CHAIN | tr '[A-Z]' '[a-z]')

          ## Get version from tag name (ex: chain/v0.0.0 --> registry/chain:v0.0.0)
          ## Or use 'latest' when on main branch
          VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')
          [ "$VERSION" == "main" ] && VERSION=latest
          echo "Image to push: $IMAGE_ID_CHAIN:$VERSION"

          docker tag chain-local-build:latest $IMAGE_ID_CHAIN:$VERSION
          docker push $IMAGE_ID_CHAIN:$VERSION
  nakama-release:
    name: Nakama Image Release
    if: github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/relay/nakama/v')
    runs-on: ubuntu-latest
    defaults:
      run:
        shell: bash
        working-directory: relay/nakama
    # Add "id-token" with the intended permissions.
    permissions:
      contents: 'read'
      id-token: 'write'
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2
      - name: Cache Docker images
        uses: ScribeMD/docker-cache@0.3.4
        with:
          key: docker-${{ runner.os }}-${{ hashFiles('relay/nakama/Dockerfile') }}
      - name: GCP auth
        id: auth
        uses: google-github-actions/auth@v1
        with:
          workload_identity_provider: ${{ secrets.GCP_WIF_PROVIDER }}
          service_account: ${{ secrets.GCP_WIF_SERVICE_ACCOUNT }}
      - name: GCP - Set up Cloud SDK
        uses: google-github-actions/setup-gcloud@v1
        with:
          project_id: ${{ env.GCP_PROJECT_ID_PACKAGES }}
      - name: Docker - Auth to artifact registry
        run: |
          gcloud auth configure-docker ${{ env.REGISTRY_URL }}
      - name: Docker - Build
        run: |
          docker build -t nakama-local-build:latest .
      - name: Docker - Publish Image
        run: |
          ## Construct image_id
          IMAGE_ID_NAKAMA=${{ env.REGISTRY_URL }}/${{ github.repository_owner }}/${{ github.event.repository.name }}/relay/nakama
          IMAGE_ID_NAKAMA=$(echo $IMAGE_ID_NAKAMA | tr '[A-Z]' '[a-z]')

          ## Get version from tag name (ex: relay/nakama/v0.0.0 --> registry/relay/nakama:v0.0.0)
          ## Or use 'latest' when on main branch
          VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')
          [ "$VERSION" == "main" ] && VERSION=latest
          echo "Image to push: $IMAGE_ID_NAKAMA:$VERSION"

          docker tag nakama-local-build:latest $IMAGE_ID_NAKAMA:$VERSION
          docker push $IMAGE_ID_NAKAMA:$VERSION