Skip to content

Commit 45e6c43

Browse files
committed
update CI for rke extended life
1 parent 007bef3 commit 45e6c43

File tree

1 file changed

+24
-20
lines changed

1 file changed

+24
-20
lines changed

.github/workflows/release.yaml

Lines changed: 24 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -5,9 +5,6 @@ on:
55
tags:
66
- '*'
77

8-
env:
9-
IMAGE: rancher/hyperkube
10-
118
jobs:
129
build-push-images:
1310
runs-on: ubuntu-latest
@@ -22,10 +19,18 @@ jobs:
2219
steps:
2320
- name: Checkout code
2421
uses: actions/checkout@v4
22+
- name: Load Secrets from Vault
23+
uses: rancher-eio/read-vault-secrets@main
24+
with:
25+
secrets: |
26+
secret/data/github/repo/${{ github.repository }}/stage-registry/rancher/rke-extended-life/credentials endpoint | STAGE_REGISTRY_ENDPOINT;
27+
secret/data/github/repo/${{ github.repository }}/stage-registry/rancher/rke-extended-life/credentials username | STAGE_REGISTRY_USERNAME;
28+
secret/data/github/repo/${{ github.repository }}/stage-registry/rancher/rke-extended-life/credentials password | STAGE_REGISTRY_PASSWORD;
2529
- name: Setup Environment Variables
2630
run: |
2731
echo "ARCH=${{ matrix.arch }}" >> "$GITHUB_ENV"
2832
echo "K8S_VERSION=$( echo ${{ github.ref_name }} | tr -s " " | cut -d "-" -f1 )" >> "$GITHUB_ENV"
33+
echo "IMAGE=${STAGE_REGISTRY_ENDPOINT}/rke-extended-life/hyperkube" >> "$GITHUB_ENV"
2934
- name: Prepare binaries
3035
run: make k8s-binaries
3136
- name: Docker meta
@@ -39,17 +44,12 @@ jobs:
3944
uses: docker/setup-qemu-action@v3
4045
- name: Set up Docker Buildx
4146
uses: docker/setup-buildx-action@v3
42-
- name: Load Secrets from Vault
43-
uses: rancher-eio/read-vault-secrets@main
44-
with:
45-
secrets: |
46-
secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials username | DOCKER_USERNAME ;
47-
secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials password | DOCKER_PASSWORD
4847
- name: Login to Docker Hub
4948
uses: docker/login-action@v3
5049
with:
51-
username: ${{ env.DOCKER_USERNAME }}
52-
password: ${{ env.DOCKER_PASSWORD }}
50+
registry: ${{ env.STAGE_REGISTRY_ENDPOINT }}
51+
username: ${{ env.STAGE_REGISTRY_USERNAME }}
52+
password: ${{ env.STAGE_REGISTRY_PASSWORD }}
5353
- name: Build and push Docker image
5454
id: build
5555
uses: docker/build-push-action@v5
@@ -89,29 +89,33 @@ jobs:
8989
merge-multiple: true
9090
- name: Set up Docker Buildx
9191
uses: docker/setup-buildx-action@v3
92+
- name: Load Secrets from Vault
93+
uses: rancher-eio/read-vault-secrets@main
94+
with:
95+
secrets: |
96+
secret/data/github/repo/${{ github.repository }}/stage-registry/rancher/rke-extended-life/credentials endpoint | STAGE_REGISTRY_ENDPOINT;
97+
secret/data/github/repo/${{ github.repository }}/stage-registry/rancher/rke-extended-life/credentials username | STAGE_REGISTRY_USERNAME;
98+
secret/data/github/repo/${{ github.repository }}/stage-registry/rancher/rke-extended-life/credentials password | STAGE_REGISTRY_PASSWORD;
99+
- name: Set IMAGE with registry endpoint
100+
run: echo "IMAGE=${STAGE_REGISTRY_ENDPOINT}/rke-extended-life/hyperkube" >> "$GITHUB_ENV"
92101
- name: Docker meta
93102
id: meta
94103
uses: docker/metadata-action@v5
95104
with:
96105
images: ${{ env.IMAGE }}
97106
flavor: |
98107
latest=false
99-
- name: Load Secrets from Vault
100-
uses: rancher-eio/read-vault-secrets@main
101-
with:
102-
secrets: |
103-
secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials username | DOCKER_USERNAME ;
104-
secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials password | DOCKER_PASSWORD
105108
- name: Login to Docker Hub
106109
uses: docker/login-action@v3
107110
with:
108-
username: ${{ env.DOCKER_USERNAME }}
109-
password: ${{ env.DOCKER_PASSWORD }}
111+
registry: ${{ env.STAGE_REGISTRY_ENDPOINT }}
112+
username: ${{ env.STAGE_REGISTRY_USERNAME }}
113+
password: ${{ env.STAGE_REGISTRY_PASSWORD }}
110114
- name: Create manifest list and push
111115
working-directory: /tmp/digests
112116
run: |
113117
docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
114118
$(printf '${{ env.IMAGE }}@sha256:%s ' *)
115119
- name: Inspect image
116120
run: |
117-
docker buildx imagetools inspect ${{ env.IMAGE }}:${{ steps.meta.outputs.version }}
121+
docker buildx imagetools inspect ${{ env.IMAGE }}:${{ steps.meta.outputs.version }}

0 commit comments

Comments
 (0)