weseek__growi/.github/workflows/reusable-app-build-image.yml

name: Reusable build app container image workflow

on:
  workflow_call:
    inputs:
      tags:
        type: string
        required: true
      image-name:
        type: string
        default: weseek/growi
      tag-temporary:
        type: string
        default: latest
    secrets:
      AWS_ROLE_TO_ASSUME_FOR_OIDC:
        required: true
      DOCKER_REGISTRY_PASSWORD:
        required: true
      DOCKER_REGISTRY_ON_GITHUB_PASSWORD:
        required: true



jobs:

  build-image:
    runs-on: ubuntu-latest

    # These permissions are needed to interact with GitHub's OIDC Token endpoint.
    permissions:
      id-token: write
      contents: write

    strategy:
      matrix:
        platform: [amd64, arm64]

    steps:
    - uses: actions/checkout@v3

    - name: Configure AWS Credentials
      uses: aws-actions/configure-aws-credentials@v1
      with:
        aws-region: ap-northeast-1
        role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME_FOR_OIDC }}
        role-session-name: SessionForReleaseGROWI-RC

    - name: Run CodeBuild
      uses: aws-actions/aws-codebuild-run-build@v1
      with:
        project-name: growi-official-image-builder
        image-override: ${{ (matrix.platform == 'amd64' && 'aws/codebuild/standard:6.0') || 'aws/codebuild/amazonlinux2-aarch64-standard:2.0' }}
        environment-type-override: ${{ (matrix.platform == 'amd64' && 'LINUX_CONTAINER') || 'ARM_CONTAINER' }}
        env-vars-for-codebuild: |
          IMAGE_TAG,
          IMAGE_TAG_GHCR
      env:
        IMAGE_TAG: docker.io/${{ inputs.image-name }}:${{ inputs.tag-temporary }}-${{ matrix.platform }}
        IMAGE_TAG_GHCR: ghcr.io/${{ inputs.image-name }}:${{ inputs.tag-temporary }}-${{ matrix.platform }}


  create-manifest:
    needs: [build-image]
    runs-on: ubuntu-latest

    strategy:
      matrix:
        registry: [docker.io, ghcr.io]

    steps:
    - uses: actions/checkout@v3

    - name: Retrieve information from package.json
      uses: myrotvorets/info-from-package-json-action@1.2.0
      id: package-json

    - name: Docker meta for extra-images
      id: meta-extra-images
      uses: docker/metadata-action@v4
      with:
        images: ${{ matrix.registry }}/${{ inputs.image-name }}
        sep-tags: ','
        tags: |
          type=raw,value=${{ inputs.tag-temporary }}-amd64
          type=raw,value=${{ inputs.tag-temporary }}-arm64

    - name: Login to Container Registry
      uses: docker/login-action@v2
      with:
        registry: ${{ matrix.registry }}
        username: wsmoogle
        password: ${{ (startsWith(matrix.registry, 'docker') && secrets.DOCKER_REGISTRY_PASSWORD) || secrets.DOCKER_REGISTRY_ON_GITHUB_PASSWORD }}

    - name: Create and push manifest images for ${{ matrix.registry }}
      uses: Noelware/docker-manifest-action@master
      with:
        base-image: ${{ inputs.tags }}
        extra-images: ${{ steps.meta-extra-images.outputs.tags }}
        push: true