build: migrate to hyperledger-identus org and Docker Hub (#1520)

Signed-off-by: Yurii Shynbuiev <[email protected]> Signed-off-by: Hyperledger Bot <[email protected]> Co-authored-by: Hyperledger Bot <[email protected]>
hyperledger-identus · Feb 13, 2025 · 9288470 · 9288470
1 parent 8147901
commit 9288470
Show file tree

Hide file tree

Showing 22 changed files with 338 additions and 436 deletions.
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
@@ -1 +1 @@
-* @hyperledger/identus-maintainers
+* @hyperledger-identus/identus-maintainers
diff --git a/.github/ISSUE_TEMPLATE.md b/.github/ISSUE_TEMPLATE.md
@@ -1,5 +1,5 @@
 To submit a new issue, please, use one of the following templates:
 
-https://github.com/hyperledger/identus-cloud-agent/issues/new/choose
+<https://github.com/hyperledger-identus/cloud-agent/issues/new/choose>
 
 Thank you!
diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
@@ -1,12 +1,12 @@
-### Description: 
+### Description
 Summarize the changes you're submitting in a few sentences, including Jira ticket ATL-xxxx if applicable.
 Link to any discussion, related issues and bug reports to give the context to help the reviewer understand the PR.
 
-### Alternatives Considered (optional): 
+### Alternatives Considered (optional)
 Link to existing ADR (Architecture Decision Record), if any. If relevant, describe other approaches explored and the selected approach. Documenting why the methods were not selected will create a knowledge base for future reference, helping prevent others from revisiting less optimal ideas.
 
-### Checklist: 
-- [ ] My PR follows the [contribution guidelines](https://github.com/hyperledger/identus-cloud-agent/blob/main/CONTRIBUTING.md) of this project
+### Checklist
+- [ ] My PR follows the [contribution guidelines](https://github.com/hyperledger-identus/cloud-agent/blob/main/CONTRIBUTING.md) of this project
 - [ ] My PR is free of third-party dependencies that don't comply with the [Allowlist](https://toc.hyperledger.org/governing-documents/allowed-third-party-license-policy.html#approved-licenses-for-allowlist)
 - [ ] I have commented my code, particularly in hard-to-understand areas
 - [ ] I have made corresponding changes to the documentation

diff --git a/.github/docker/Dockerfile b/.github/docker/Dockerfile
diff --git a/.github/workflows/build-test-docker.yml b/.github/workflows/build-test-docker.yml
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -7,21 +7,6 @@ concurrency:
 
 on:
   workflow_dispatch:
-  push:
-    branches:
-      - "main"
-      - "beta"
-    paths:
-      - "cloud-agent/**"
-      - "castor/**"
-      - "connect/**"
-      - "mercury/**"
-      - "pollux/**"
-      - "shared/**"
-      - "shared-test/**"
-      - "*.sbt"
-      - "project/**"
-      - "prism-node/**"
 
 permissions:
   contents: write
@@ -68,11 +53,10 @@ jobs:
           node-version: "lts/*"
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
-          registry: ghcr.io
-          username: ${{ env.GITHUB_ACTOR }}
-          password: ${{ env.GITHUB_TOKEN }}
+          username: ${{ vars.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v2
@@ -97,18 +81,36 @@ jobs:
           echo "REVISION_VERSION=${REVISION_VERSION}" >> $GITHUB_ENV
           echo "BUILD_VERSION=${BUILD_VERSION}" >> $GITHUB_ENV
 
-      - name: Build and push Docker image
+      - name: Build Docker Image
         run: |
           sbt "set version := \"${{ env.BUILD_VERSION }}\"" "docker:stage"
-          docker buildx build --platform=linux/arm64,linux/amd64 --push -t ghcr.io/hyperledger/identus-cloud-agent:${{ env.BUILD_VERSION}} ./cloud-agent/service/server/target/docker/stage
+          docker buildx build --platform=linux/arm64,linux/amd64 --push -t ${{ vars.DOCKERHUB_ORG }}/identus-cloud-agent:${{ env.BUILD_VERSION }} ./cloud-agent/service/server/target/docker/stage
 
-      - name: Trigger helm chart update
-        uses: peter-evans/repository-dispatch@v3
+      - name: Docker Metadata Action
+        id: meta
+        uses: docker/metadata-action@v5
         with:
-          token: ${{ secrets.ATALA_GITHUB_TOKEN }}
-          repository: input-output-hk/atala-prism-helm-charts
-          event-type: build-chart-package
-          client-payload: '{"version": "${{ env.BUILD_VERSION }}", "chart": "cloud-agent"}'
+          images: ${{ vars.DOCKERHUB_ORG }}/identus-cloud-agent
+          tags: |
+            type=semver,pattern={{version}}
+          labels: |
+            org.opencontainers.image.title=identus-cloud-agent
+            org.opencontainers.image.description=Hyperledger Identus Cloud Agent
+            org.opencontainers.image.url=https://github.com/hyperledger-identus/identus-cloud-agent
+            org.opencontainers.license=Apache-2.0
+            latest=${{ github.ref == 'refs/heads/main' && 'true' || 'false' }}
+            snapshot=${{ github.ref != 'refs/heads/main' && 'true' || 'false' }}
+
+      - name: Push Docker Image
+        id: push
+        uses: docker/build-push-action@v6
+        with:
+          context: ./cloud-agent/service/server/target/docker/stage
+          platforms: linux/amd64,linux/arm64
+          tags: ${{ steps.meta.outputs.tags }}
+          push: ${{ steps.meta.outputs.tags != '' }}
+          labels: ${{ steps.meta.outputs.labels }}
+          annotations: ${{ steps.meta.outputs.annotations }}
 
       - name: Build Cloud-Agent Open API Specification
         id: build-oas

diff --git a/.github/workflows/oasdiff.yml b/.github/workflows/oasdiff.yml
@@ -25,8 +25,8 @@ permissions:
   pull-requests: write
   actions: write
 
-# https://raw.githubusercontent.com/hyperledger/identus-cloud-agent/prism-agent-v1.29.0/prism-agent/service/api/http/prism-agent-openapi-spec.yaml
-# https://raw.githubusercontent.com/hyperledger/identus-cloud-agent/main/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml
+# https://raw.githubusercontent.com/hyperledger-identus/cloud-agent/prism-agent-v1.29.0/prism-agent/service/api/http/prism-agent-openapi-spec.yaml
+# https://raw.githubusercontent.com/hyperledger-identus/cloud-agent/main/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml
 
 jobs:
   oasdiff-breaking:
@@ -40,13 +40,13 @@ jobs:
         run: |
           echo Base tag: "$BASE_TAG"
           if [[ "$BASE_TAG" =~ cloud-agent-v* ]]; then
-            echo "BASE_URL=https://raw.githubusercontent.com/hyperledger/identus-cloud-agent/${BASE_TAG}/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
+            echo "BASE_URL=https://raw.githubusercontent.com/hyperledger-identus/cloud-agent/${BASE_TAG}/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
           elif [[ "$BASE_TAG" =~ prism-agent-v* ]]; then
-            echo "BASE_URL=https://raw.githubusercontent.com/hyperledger/identus-cloud-agent/${BASE_TAG}/prism-agent/service/api/http/prism-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
+            echo "BASE_URL=https://raw.githubusercontent.com/hyperledger-identus/cloud-agent/${BASE_TAG}/prism-agent/service/api/http/prism-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
           elif [[ "$BASE_TAG" == 'main' ]]; then
-            echo "BASE_URL=https://raw.githubusercontent.com/hyperledger/identus-cloud-agent/${BASE_TAG}/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
+            echo "BASE_URL=https://raw.githubusercontent.com/hyperledger-identus/cloud-agent/${BASE_TAG}/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
           elif [[ "$GITHUB_EVENT_NAME" == 'pull_request' ]]; then
-            echo "BASE_URL=https://raw.githubusercontent.com/hyperledger/identus-cloud-agent/main/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
+            echo "BASE_URL=https://raw.githubusercontent.com/hyperledger-identus/cloud-agent/main/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
           fi
 
       - name: Resolve the revision OpenAPI spec URL
@@ -57,13 +57,13 @@ jobs:
         run: |
           echo Revision tag: "$REV_TAG"
           if [[ "$REV_TAG" =~ cloud-agent-v* ]]; then
-            echo "REV_URL=https://raw.githubusercontent.com/hyperledger/identus-cloud-agent/${REV_TAG}/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
+            echo "REV_URL=https://raw.githubusercontent.com/hyperledger-identus/cloud-agent/${REV_TAG}/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
           elif [[ "$REV_TAG" =~ prism-agent-v* ]]; then
-            echo "REV_URL=https://raw.githubusercontent.com/hyperledger/identus-cloud-agent/${REV_TAG}/prism-agent/service/api/http/prism-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
+            echo "REV_URL=https://raw.githubusercontent.com/hyperledger-identus/cloud-agent/${REV_TAG}/prism-agent/service/api/http/prism-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
           elif [[ "$REV_TAG" == 'main' ]]; then
-            echo "REV_URL=https://raw.githubusercontent.com/hyperledger/identus-cloud-agent/${REV_TAG}/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
+            echo "REV_URL=https://raw.githubusercontent.com/hyperledger-identus/cloud-agent/${REV_TAG}/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
           elif [[ "$GITHUB_EVENT_NAME" == 'pull_request' ]]; then
-            echo "REV_URL=https://raw.githubusercontent.com/hyperledger/identus-cloud-agent/${BRANCH_NAME}/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
+            echo "REV_URL=https://raw.githubusercontent.com/hyperledger-identus/cloud-agent/${BRANCH_NAME}/cloud-agent/service/api/http/cloud-agent-openapi-spec.yaml" >> "$GITHUB_ENV"
           fi
 
       - name: Check URLS

diff --git a/.github/workflows/release-clients.yml b/.github/workflows/release-clients.yml
@@ -55,11 +55,6 @@ jobs:
           registry-url: https://npm.pkg.github.com/
           scope: "@hyperledger"
 
-      - name: Setup Python
-        uses: actions/setup-python@v4
-        with:
-          python-version: "3.10"
-
       - name: Setup Gradle
         uses: gradle/[email protected]
 

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -49,11 +49,10 @@ jobs:
           git_tag_gpgsign: false
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
-          registry: ghcr.io
-          username: ${{ env.GITHUB_ACTOR }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          username: ${{ vars.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v2
@@ -68,18 +67,11 @@ jobs:
           GIT_AUTHOR_NAME: ${{ steps.import_gpg.outputs.name }}
           GIT_COMMITTER_NAME: ${{ steps.import_gpg.outputs.name }}
           GITHUB_TOKEN: ${{ secrets.IDENTUS_CI }}
+          DOCKERHUB_ORG: ${{ vars.DOCKERHUB_ORG }}
         run: |
           npm install
           npx semantic-release
 
       - name: Get release version
         id: get_version
         run: echo "RELEASE_VERSION=$(cat .release-version)" >> $GITHUB_ENV
-
-      - name: Trigger helm chart update
-        uses: peter-evans/repository-dispatch@v3
-        with:
-          token: ${{ secrets.ATALA_GITHUB_TOKEN }}
-          repository: input-output-hk/atala-prism-helm-charts
-          event-type: build-chart-package
-          client-payload: '{"version": "${{ env.RELEASE_VERSION }}", "chart": "cloud-agent"}'
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		* @hyperledger/identus-maintainers
		* @hyperledger-identus/identus-maintainers