55 tags :
66 - ' *'
77
8- env :
9- IMAGE : rancher/hyperkube
10-
118jobs :
129 build-push-images :
1310 runs-on : ubuntu-latest
@@ -22,10 +19,18 @@ jobs:
2219 steps :
2320 - name : Checkout code
2421 uses : actions/checkout@v4
22+ - name : Load Secrets from Vault
23+ uses : rancher-eio/read-vault-secrets@main
24+ with :
25+ secrets : |
26+ secret/data/github/repo/${{ github.repository }}/stage-registry/rancher/rke-extended-life/credentials endpoint | STAGE_REGISTRY_ENDPOINT;
27+ secret/data/github/repo/${{ github.repository }}/stage-registry/rancher/rke-extended-life/credentials username | STAGE_REGISTRY_USERNAME;
28+ secret/data/github/repo/${{ github.repository }}/stage-registry/rancher/rke-extended-life/credentials password | STAGE_REGISTRY_PASSWORD;
2529 - name : Setup Environment Variables
2630 run : |
2731 echo "ARCH=${{ matrix.arch }}" >> "$GITHUB_ENV"
2832 echo "K8S_VERSION=$( echo ${{ github.ref_name }} | tr -s " " | cut -d "-" -f1 )" >> "$GITHUB_ENV"
33+ echo "IMAGE=${STAGE_REGISTRY_ENDPOINT}/rke-extended-life/hyperkube" >> "$GITHUB_ENV"
2934 - name : Prepare binaries
3035 run : make k8s-binaries
3136 - name : Docker meta
@@ -39,17 +44,12 @@ jobs:
3944 uses : docker/setup-qemu-action@v3
4045 - name : Set up Docker Buildx
4146 uses : docker/setup-buildx-action@v3
42- - name : Load Secrets from Vault
43- uses : rancher-eio/read-vault-secrets@main
44- with :
45- secrets : |
46- secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials username | DOCKER_USERNAME ;
47- secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials password | DOCKER_PASSWORD
4847 - name : Login to Docker Hub
4948 uses : docker/login-action@v3
5049 with :
51- username : ${{ env.DOCKER_USERNAME }}
52- password : ${{ env.DOCKER_PASSWORD }}
50+ registry : ${{ env.STAGE_REGISTRY_ENDPOINT }}
51+ username : ${{ env.STAGE_REGISTRY_USERNAME }}
52+ password : ${{ env.STAGE_REGISTRY_PASSWORD }}
5353 - name : Build and push Docker image
5454 id : build
5555 uses : docker/build-push-action@v5
@@ -89,29 +89,33 @@ jobs:
8989 merge-multiple : true
9090 - name : Set up Docker Buildx
9191 uses : docker/setup-buildx-action@v3
92+ - name : Load Secrets from Vault
93+ uses : rancher-eio/read-vault-secrets@main
94+ with :
95+ secrets : |
96+ secret/data/github/repo/${{ github.repository }}/stage-registry/rancher/rke-extended-life/credentials endpoint | STAGE_REGISTRY_ENDPOINT;
97+ secret/data/github/repo/${{ github.repository }}/stage-registry/rancher/rke-extended-life/credentials username | STAGE_REGISTRY_USERNAME;
98+ secret/data/github/repo/${{ github.repository }}/stage-registry/rancher/rke-extended-life/credentials password | STAGE_REGISTRY_PASSWORD;
99+ - name : Set IMAGE with registry endpoint
100+ run : echo "IMAGE=${STAGE_REGISTRY_ENDPOINT}/rke-extended-life/hyperkube" >> "$GITHUB_ENV"
92101 - name : Docker meta
93102 id : meta
94103 uses : docker/metadata-action@v5
95104 with :
96105 images : ${{ env.IMAGE }}
97106 flavor : |
98107 latest=false
99- - name : Load Secrets from Vault
100- uses : rancher-eio/read-vault-secrets@main
101- with :
102- secrets : |
103- secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials username | DOCKER_USERNAME ;
104- secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials password | DOCKER_PASSWORD
105108 - name : Login to Docker Hub
106109 uses : docker/login-action@v3
107110 with :
108- username : ${{ env.DOCKER_USERNAME }}
109- password : ${{ env.DOCKER_PASSWORD }}
111+ registry : ${{ env.STAGE_REGISTRY_ENDPOINT }}
112+ username : ${{ env.STAGE_REGISTRY_USERNAME }}
113+ password : ${{ env.STAGE_REGISTRY_PASSWORD }}
110114 - name : Create manifest list and push
111115 working-directory : /tmp/digests
112116 run : |
113117 docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
114118 $(printf '${{ env.IMAGE }}@sha256:%s ' *)
115119 - name : Inspect image
116120 run : |
117- docker buildx imagetools inspect ${{ env.IMAGE }}:${{ steps.meta.outputs.version }}
121+ docker buildx imagetools inspect ${{ env.IMAGE }}:${{ steps.meta.outputs.version }}
0 commit comments