Use GHCR to publish container image

.github/workflows/build-test-publish.yml

@@ -63,16 +63,19 @@ jobs:
     permissions:
       contents: 'write'
       id-token: 'write'
+      packages: 'write'
     outputs:
       image_tag: ${{ steps.meta.outputs.version }}
     steps:
     - name: Checkout code
       uses: actions/checkout@v5
 
     - name: Install Go
+      id: set-go
       uses: actions/setup-go@v6
       with:
         go-version-file: go.mod
+        check-latest: true
 
     - name: OCI Metadata
       id: meta
@@ -81,6 +84,7 @@ jobs:
         images: |
           rabbitmqoperator/messaging-topology-operator
           quay.io/rabbitmqoperator/messaging-topology-operator
+          ghcr.io/rabbitmq/messaging-topology-operator
         # generate Docker tags based on the following events/attributes
         tags: |
           type=sha
@@ -93,22 +97,30 @@ jobs:
       uses: docker/setup-buildx-action@v3
 
     - name: Login to Docker Hub
-      if: ${{ startsWith(github.ref, 'refs/tags/v') }}
+      if: ${{ github.event_name != 'pull_request' && startsWith(github.ref, 'refs/tags/v') }}
       uses: docker/login-action@v3
       with:
         username: ${{ secrets.DOCKERHUB_USERNAME }}
         password: ${{ secrets.DOCKERHUB_TOKEN }}
 
     - name: Login to Quay.io
-      if: ${{ startsWith(github.ref, 'refs/tags/v') }}
+      if: ${{ github.event_name != 'pull_request' && startsWith(github.ref, 'refs/tags/v') }}
       uses: docker/login-action@v3
       with:
         registry: quay.io
         username: ${{ secrets.QUAY_USERNAME }}
         password: ${{ secrets.QUAY_ROBOT_TOKEN }}
 
+    - name: Login to GHCR
+      if: ${{ github.event_name != 'pull_request' && startsWith(github.ref, 'refs/tags/v') }}
+      uses: docker/login-action@v3
+      with:
+        registry: ghcr.io
+        username: ${{ github.repository_owner }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+
     - name: Build and push
-      if: ${{ startsWith(github.ref, 'refs/tags/v') }}
+      if: ${{ github.event_name != 'pull_request' && startsWith(github.ref, 'refs/tags/v') }}
       uses: docker/build-push-action@v6
       with:
         context: .
@@ -117,6 +129,8 @@ jobs:
         provenance: false
         tags: ${{ steps.meta.outputs.tags }}
         labels: ${{ steps.meta.outputs.labels }}
+        build-args: |
+          GO_TAG=${{ steps.set-go.outputs.go-version }}
 
     - name: Build to TAR
       id: build_tar
@@ -128,6 +142,8 @@ jobs:
         labels: ${{ steps.meta.outputs.labels }}
         outputs: |
           type=docker,dest=./operator.tar
+        build-args: |
+          GO_TAG=${{ steps.set-go.outputs.go-version }}
 
     - name: Upload Operator artifact
       uses: actions/upload-artifact@v5
@@ -149,7 +165,7 @@ jobs:
         kustomize edit set image \
         rabbitmqoperator/messaging-topology-operator-dev=rabbitmqoperator/messaging-topology-operator:"${RELEASE_VERSION}"
         popd
-        make generate-manifests QUAY_IO_OPERATOR_IMAGE=quay.io/rabbitmqoperator/messaging-topology-operator:"${RELEASE_VERSION}"
+        make generate-manifests QUAY_IO_OPERATOR_IMAGE=quay.io/rabbitmqoperator/messaging-topology-operator:"${RELEASE_VERSION}" GHCR_IO_OPERATOR_IMAGE=ghcr.io/rabbitmq/messaging-topology-operator:"${RELEASE_VERSION}"
 
     - name: Upload operator manifests
       uses: actions/upload-artifact@v5
@@ -174,6 +190,10 @@ jobs:
       contents: 'write'
       id-token: 'write'
     needs: build_operator
+    env:
+      # Taken from https://github.com/kubernetes-sigs/kind/releases/tag/v0.18.0
+      # The image here should be listed under 'Images built for this release' for the version of kind in go.mod
+      KIND_NODE_IMAGE: "kindest/node:v1.32.0"
     steps:
     - name: Check out code
       uses: actions/checkout@v5

Dockerfile

@@ -1,5 +1,6 @@
+ARG GO_TAG=1.24
 # Build the manager binary
-FROM --platform=$BUILDPLATFORM golang:1.24 AS builder
+FROM --platform=$BUILDPLATFORM golang:${GO_TAG} AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

Makefile

@@ -159,15 +159,18 @@ api-reference: install-tools
 		--max-depth 30
 
 QUAY_IO_OPERATOR_IMAGE ?= quay.io/rabbitmqoperator/messaging-topology-operator:latest
+GHCR_IO_OPERATOR_IMAGE ?= ghcr.io/rabbitmq/messaging-topology-operator:latest
 ## used in CI pipeline to create release artifact
 .PHONY: generate-manifests
 generate-manifests: | $(YTT)
 	mkdir -p releases
 	kustomize build config/installation/  > releases/messaging-topology-operator.bak
 	sed '/CERTIFICATE_NAMESPACE.*CERTIFICATE_NAME/d' releases/messaging-topology-operator.bak > releases/messaging-topology-operator.yaml
 	$(YTT) -f releases/messaging-topology-operator.yaml -f config/ytt_overlays/change_deployment_image.yml --data-value operator_image=$(QUAY_IO_OPERATOR_IMAGE) > releases/messaging-topology-operator-quay-io.yaml
+	$(YTT) -f releases/messaging-topology-operator.yaml -f config/ytt_overlays/change_deployment_image.yml --data-value operator_image=$(GHCR_IO_OPERATOR_IMAGE) > releases/messaging-topology-operator-ghcr-io.yaml
 	kustomize build config/installation/cert-manager/ > releases/messaging-topology-operator-with-certmanager.yaml
 	$(YTT) -f releases/messaging-topology-operator-with-certmanager.yaml -f config/ytt_overlays/change_deployment_image.yml --data-value operator_image=$(QUAY_IO_OPERATOR_IMAGE) > releases/messaging-topology-operator-with-certmanager-quay-io.yaml
+	$(YTT) -f releases/messaging-topology-operator-with-certmanager.yaml -f config/ytt_overlays/change_deployment_image.yml --data-value operator_image=$(GHCR_IO_OPERATOR_IMAGE) > releases/messaging-topology-operator-with-certmanager-ghcr-io.yaml
 
 # Run go fmt against code
 fmt: