build-publish-containers.yml

name: Build and publish container images
on:
  pull_request:
  workflow_dispatch:
    inputs:
      upstream_version:
        type: string
        description: Which version should be build?

  push:
  schedule:
   # rebuild image every Monday morning
   - cron: '43 3 * * 1'

jobs:
  build_publish:
    name: Build/publish containers
    runs-on: ubuntu-latest
    permissions:
      packages: write
      contents: read
    strategy:
      matrix:
        tag:
          - azure-pipelines-azureagent
          - azure-pipelines-jupyterhub
          - azure-pipelines-rocky8
      fail-fast: false
    steps:
      - name: Check out the repo
        uses: actions/checkout@v4

      - name: Fix image date tag
        run: |
          echo IMAGE_TAG=$(date +"%Y%m%d") >> $GITHUB_ENV

      - name: Check if we should publish
        if: >-
          (github.event_name == 'push' ||
          github.event_name == 'schedule' ||
          github.event_name == 'workflow_dispatch') &&
          github.ref_name == 'main'
        run: |
          echo PUBLISH_IMAGES=1 >> $GITHUB_ENV
    
      - name: Determine latest release of VSTS Agent
        if: matrix.tag == 'azure-pipelines-azureagent'
        id: getvstsagentlatest
        run: |
          release=$(curl -s -H "Accept: application/vnd.github.v3+json" https://api.github.com/repos/microsoft/azure-pipelines-agent/releases/latest | jq -r .name)
          echo "Building release $release"
          echo "RELEASE=${release:1}" >> $GITHUB_ENV

      - name: Fetch vsc-config
        if: matrix.tag == 'azure-pipelines-jupyterhub'
        uses: actions/checkout@v4
        with:
          repository: vub-hpc/vsc-config
          token: ${{ secrets.GH_PAT_VSC_CONFIG }}
          path: azure-pipelines-jupyterhub/vsc-config

      - name: Build Image
        uses: redhat-actions/buildah-build@v2.13
        id: build-image
        with:
          tags: latest ${{ github.sha }} ${{ env.IMAGE_TAG }} ${{env.RELEASE}}
          image: ${{ matrix.tag }}
          context: ${{ matrix.tag }}
          build-args: |
            operator_name=${{ secrets.JH_USERNAME }}
            operator_uid=${{ secrets.JH_UID }}
            az_ag_release=${{ env.RELEASE }}
          dockerfiles: |
            ./${{ matrix.tag }}/Dockerfile

      - name: Print image name and tags
        run: echo "Image ${{ steps.build-image.outputs.image }} build with tags ${{ steps.build-image.outputs.tags }}" >> $GITHUB_STEP_SUMMARY

      - name: Publish image on ghcr.io
        id: push-to-ghcr
        if: env.PUBLISH_IMAGES
        uses: redhat-actions/push-to-registry@v2.8
        with:
          image: ${{ steps.build-image.outputs.image }}
          tags: ${{ steps.build-image.outputs.tags }}
          registry: ghcr.io/${{ github.repository_owner }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Print image url
        if: env.PUBLISH_IMAGES
        run: echo "Image pushed to ${{ steps.push-to-ghcr.outputs.registry-paths }}" >> $GITHUB_STEP_SUMMARY


  build_publish_ondemand:
    name: Build/publish ondemand container
    runs-on: ubuntu-latest
    permissions:
      packages: write
      contents: read
    steps:
      - name: Check if we should publish
        if: >-
          (github.event_name == 'push' ||
          github.event_name == 'schedule' ||
          github.event_name == 'workflow_dispatch') &&
          github.ref_name == 'main'
        run: |
          echo PUBLISH_IMAGES=1 >> $GITHUB_ENV

      - name: Set a tag based on the date
        run: |
          IMAGE_TAG=$(date +"%Y%m%d")
          echo IMAGE_TAG=$IMAGE_TAG >> $GITHUB_ENV
          echo "Image tag is $IMAGE_TAG"

      - name: Determine latest release of ondemand
        id: getlatestrelease
        run: |
          release=$(curl -s -H "Accept: application/vnd.github.v3+json" https://api.github.com/repos/OSC/ondemand/releases/latest | jq -r .name)
          echo "Building release $release"
          echo "RELEASE=${release}" >> $GITHUB_ENV

      - name: Check the version specified manually
        if: ${{ inputs.upstream_version }}
        shell: bash
        run: |
          release=$(curl -s -H "Accept: application/vnd.github.v3+json" https://api.github.com/repos/OSC/ondemand/releases/tags/${{ inputs.upstream_version }} | jq -e -r .name)
          echo "Building release $release"
          echo "RELEASE=${release}" >> $GITHUB_ENV

      - name: Check out the repo
        uses: actions/checkout@v4
        with:
          repository: 'OSC/ondemand'
          ref: '${{ env.RELEASE }}'
          path: 'ondemand'

      - name: Build Image
        uses: redhat-actions/buildah-build@v2
        id: build-image
        with:
          tags: latest ${{ env.IMAGE_TAG }} ${{ env.RELEASE }}
          image: ondemand
          containerfiles: ondemand/Dockerfile
          context: ondemand
          build-args: |
            VERSION=${{ env.RELEASE }}

      - name: Print image name and tags
        run: echo "Image ${{ steps.build-image.outputs.image }} build with tags ${{ steps.build-image.outputs.tags }}" >> $GITHUB_STEP_SUMMARY

      - name: Publish image on ghcr.io
        id: push-to-ghcr
        if: env.PUBLISH_IMAGES
        uses: redhat-actions/push-to-registry@v2
        with:
          image: ${{ steps.build-image.outputs.image }}
          tags: ${{ steps.build-image.outputs.tags }}
          registry: ghcr.io/${{ github.repository_owner }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Print image url
        if: env.PUBLISH_IMAGES
        run: echo "Image pushed to ${{ steps.push-to-ghcr.outputs.registry-paths }}" >> $GITHUB_STEP_SUMMARY