1- name : Release
1+ name : release
22
33on :
44 release :
3232 release :
3333 runs-on : ubuntu-latest
3434 needs : qc
35- if : github.ref == 'refs/heads/production'
35+ permissions :
36+ contents : read
37+ packages : write
38+ id-token : write
39+ attestations : write
3640 steps :
3741 - uses : actions/checkout@v4
3842
@@ -71,14 +75,47 @@ jobs:
7175 tags : |
7276 ${{ env.REGISTRY }}/${{ env.CMS_IMAGE_NAME }}:${{ env.RELEASE_VERSION }}
7377 labels : ${{ steps.cms_meta.outputs.labels }}
74-
78+
7579 - name : Attest CMS image artifacts
7680 uses : actions/attest-build-provenance@v2
7781 with :
7882 subject-name : ${{ env.REGISTRY }}/${{ env.CMS_IMAGE_NAME }}
7983 subject-digest : ${{ steps.build_and_push_cms.outputs.digest }}
8084 push-to-registry : true
8185
86+ - name : Inspect the released image
87+ run : |
88+ docker pull ${{ env.REGISTRY }}/${{ env.CMS_IMAGE_NAME }}:${{ env.RELEASE_VERSION }}
89+ docker image inspect ${{ env.REGISTRY }}/${{ env.CMS_IMAGE_NAME }}:${{ env.RELEASE_VERSION }}
90+
91+ release-extra :
92+ runs-on : ubuntu-latest
93+ needs : qc
94+ permissions :
95+ contents : read
96+ packages : write
97+ id-token : write
98+ attestations : write
99+ steps :
100+ - uses : actions/checkout@v4
101+
102+ - name : Set up QEMU
103+ uses : docker/setup-qemu-action@v3
104+
105+ - name : Set up Docker Buildx
106+ uses : docker/setup-buildx-action@v3
107+
108+ - name : Extract the tag
109+ run : |
110+ echo "RELEASE_VERSION=${GITHUB_REF/refs\/tags\/v/}" >> $GITHUB_ENV
111+
112+ - name : Login to Docker Hub
113+ uses : docker/login-action@v3
114+ with :
115+ registry : ${{ env.REGISTRY }}
116+ username : ${{ secrets.DOCKERHUB_USERNAME }}
117+ password : ${{ secrets.DOCKERHUB_TOKEN }}
118+
82119 - name : Extract Mlflow UI meta
83120 id : mlflow_ui_meta
84121 uses : docker/metadata-action@v5
@@ -91,23 +128,21 @@ jobs:
91128 with :
92129 platforms : linux/amd64,linux/arm64
93130 context : .
94- file : docker/Dockerfile
131+ file : docker/mlflow/server/ Dockerfile
95132 push : true
96133 github-token : ${{ github.token }}
97134 tags : |
98135 ${{ env.REGISTRY }}/${{ env.MLFLOW_UI_IMAGE_NAME }}:${{ env.RELEASE_VERSION }}
99136 labels : ${{ steps.mlflow_ui_meta.outputs.labels }}
100-
137+
101138 - name : Attest Mlflow UI image artifacts
102139 uses : actions/attest-build-provenance@v2
103140 with :
104141 subject-name : ${{ env.REGISTRY }}/${{ env.MLFLOW_UI_IMAGE_NAME }}
105142 subject-digest : ${{ steps.build_and_push_mlflow_ui.outputs.digest }}
106143 push-to-registry : true
107-
108- - name : Inspect released images
144+
145+ - name : Inspect the released image
109146 run : |
110- docker pull ${{ env.REGISTRY }}/${{ env.CMS_IMAGE_NAME }}:${{ env.RELEASE_VERSION }}
111- docker image inspect ${{ env.CMS_IMAGE_NAME }}:${{ env.RELEASE_VERSION }}
112147 docker pull ${{ env.REGISTRY }}/${{ env.MLFLOW_UI_IMAGE_NAME }}:${{ env.RELEASE_VERSION }}
113- docker image inspect ${{ env.MLFLOW_UI_IMAGE_NAME }}:${{ env.RELEASE_VERSION }}
148+ docker image inspect ${{ env.REGISTRY }}/${{ env. MLFLOW_UI_IMAGE_NAME }}:${{ env.RELEASE_VERSION }}
0 commit comments