Skip to content

Publish v0.12.7 (#410) #449

Publish v0.12.7 (#410)

Publish v0.12.7 (#410) #449

Workflow file for this run

name: cd-runtime
on:
workflow_dispatch:
inputs:
environment:
description: "environment"
required: true
default: "stage"
type: choice
options:
- stage
- prod
releasetag:
description: "releasetag"
required: true
type: string
push:
branches:
- main
env:
GOPRIVATE: "github.com/hypermodeinc/*"
permissions:
id-token: write # This is required for requesting the JWT
contents: read # This is required for actions/checkout
jobs:
runtime-build-push:
if: ${{ github.event_name == 'push' }}
environment: stage
runs-on: warp-ubuntu-latest-x64-16x
steps:
- name: Configure git for private modules
env:
TOKEN: ${{ secrets.GO_PRIVATE_MODULES }}
run: git config --global url."https://admin-hypermode:${TOKEN}@github.com".insteadOf "https://github.com"
- uses: actions/checkout@v4
- name: Setup Go
uses: actions/setup-go@v5
with:
go-version-file: "go.mod"
check-latest: true
- name: Runtime Git SHA
run: |
RUNTIME_GIT_SHA=$(git rev-parse --short HEAD)
echo "runtime git sha "$RUNTIME_GIT_SHA
echo "RUNTIME_GIT_SHA=$RUNTIME_GIT_SHA" >> $GITHUB_ENV
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
with:
role-to-assume: "${{ vars.AWS_ROLE }}"
role-session-name: CD_RUNTIME
aws-region: "${{ vars.AWS_REGION }}"
- name: Login to Amazon ECR
uses: aws-actions/amazon-ecr-login@v2
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Build and push runtime docker image
uses: docker/build-push-action@v6
with:
context: .
cache-from: type=gha
cache-to: type=gha,mode=max
platforms: linux/amd64,linux/arm64
push: true
# see https://github.com/docker/build-push-action/issues/755 for why provenance=false
provenance: false
tags: |
${{ vars.AWS_ACCOUNT_ID }}.dkr.ecr.${{ vars.AWS_REGION }}.amazonaws.com/hypermode/runtime:main-${{ env.RUNTIME_GIT_SHA }}
${{ vars.AWS_ACCOUNT_ID }}.dkr.ecr.${{ vars.AWS_REGION }}.amazonaws.com/hypermode/runtime:latest
runtime-build-workflow-dispatch:
if: ${{ github.event_name == 'workflow_dispatch' }}
environment: "${{ github.event.inputs.environment }}"
runs-on: warp-ubuntu-latest-x64-16x
steps:
- name: Configure git for private modules
env:
TOKEN: ${{ secrets.GO_PRIVATE_MODULES }}
run: git config --global url."https://admin-hypermode:${TOKEN}@github.com".insteadOf "https://github.com"
- uses: actions/checkout@v4
with:
ref: "${{ github.event.inputs.releasetag }}"
- name: Setup Go
uses: actions/setup-go@v5
with:
go-version-file: "go.mod"
check-latest: true
- name: Set Runtime Release Version
run: |
#!/bin/bash
GIT_TAG_NAME='${{ github.event.inputs.releasetag }}'
if [[ "$GIT_TAG_NAME" == "v"* ]];
then
echo "this is a release tag"
else
echo "this is NOT a release tag"
exit 1
fi
RUNTIME_RELEASE_VERSION=$(echo $GIT_TAG_NAME | sed 's/runtime-//')
echo "making a new release for runtime "$RUNTIME_RELEASE_VERSION
echo "RUNTIME_RELEASE_VERSION=$RUNTIME_RELEASE_VERSION" >> $GITHUB_ENV
- name: Runtime Git SHA
run: |
RUNTIME_GIT_SHA=$(git rev-parse --short HEAD)
echo "runtime git sha "$RUNTIME_GIT_SHA
echo "RUNTIME_GIT_SHA=$RUNTIME_GIT_SHA" >> $GITHUB_ENV
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
with:
role-to-assume: "${{ vars.AWS_ROLE }}"
role-session-name: CD_RUNTIME
aws-region: "${{ vars.AWS_REGION }}"
- name: Login to Amazon ECR
uses: aws-actions/amazon-ecr-login@v2
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Build and push runtime docker image
uses: docker/build-push-action@v6
with:
context: .
cache-from: type=gha
cache-to: type=gha,mode=max
platforms: linux/amd64,linux/arm64
push: true
# see https://github.com/docker/build-push-action/issues/755 for why provenance=false
provenance: false
tags: ${{ vars.AWS_ACCOUNT_ID }}.dkr.ecr.${{ vars.AWS_REGION }}.amazonaws.com/hypermode/runtime:${{ env.RUNTIME_RELEASE_VERSION }}-${{ env.RUNTIME_GIT_SHA }}