ci: pipeline for oci monitor / make Jenkins pull images

Author: dervoeti

.github/workflows/build_oci_monitor.yml

@@ -0,0 +1,42 @@
+name: Build OCI monitor docker image
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  id-token: write
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      -
+        name: Login to Stackable Harbor
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
+        with:
+          registry: oci.stackable.tech
+          username: robot$stackable+github-action-build
+          password: ${{ secrets.HARBOR_ROBOT_STACKABLE_GITHUB_ACTION_BUILD_SECRET }}
+      -
+        name: Set up Cosign
+        uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # tag=v3.3.0
+      -
+        name: Build and push
+        id: build-and-push
+        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
+        with:
+          context: ./tools/monitor-oci-artifacts
+          file: ./tools/monitor-oci-artifacts/Dockerfile
+          push: true
+          tags: oci.stackable.tech/stackable/monitor-oci-artifacts:0.0.0-dev
+          build-args: |
+            REVISION=${{ github.sha }}
+            VERSION=dev
+      -
+        name: Sign the published image
+        run: cosign sign -y oci.stackable.tech/stackable/monitor-oci-artifacts@${{ steps.build-and-push.outputs.digest }}

apps/jjb/maintenance.j2

@@ -5,7 +5,7 @@
     defaults: global
     description: ''
     disabled: false
-    display-name: 'Docker system prune (nightly)' 
+    display-name: 'Docker system prune (nightly)'
     concurrent: false
     quiet-period: 5
     logrotate:
@@ -16,7 +16,7 @@
     triggers:
       - timed: "H 23 * * *"
     builders:
-      - shell: 
+      - shell:
           command: |
             docker system prune -f
 - job:
@@ -25,7 +25,7 @@
     defaults: global
     description: ''
     disabled: false
-    display-name: 'Monitor OCI Artifacts (daily)' 
+    display-name: 'Monitor OCI Artifacts (daily)'
     concurrent: false
     quiet-period: 5
     logrotate:
@@ -44,16 +44,12 @@
     triggers:
       - timed: "H 7 * * *"
     builders:
-      - shell: 
+      - shell:
           command: |
-            cd tools/monitor-oci-artifacts/
-            docker build . -t docker.stackable.tech/tools/monitor-oci-artifacts:latest
-            cd ../../
-
             set +x
             set +e
 
-            docker run --rm docker.stackable.tech/tools/monitor-oci-artifacts:latest > report.txt
+            docker run --rm oci.stackable.tech/stackable/monitor-oci-artifacts:0.0.0-dev > report.txt
             report_exit_code=$?
 
             exit $report_exit_code
@@ -72,7 +68,7 @@
     defaults: global
     description: ''
     disabled: false
-    display-name: 'Harbor Garbage Collection (daily)' 
+    display-name: 'Harbor Garbage Collection (daily)'
     concurrent: false
     quiet-period: 5
     logrotate:
@@ -96,16 +92,12 @@
             credential-id: HARBOR_ROBOT_PASSWORD
             variable: HARBOR_ROBOT_PASSWORD
     builders:
-      - shell: 
+      - shell:
           command: |
-            cd tools/harbor-garbage-collector/
-            docker build . -t docker.stackable.tech/tools/harbor-garbage-collector:latest
-            cd ../../
-
             set +x
             set +e
 
-            docker run --rm -e HARBOR_ROBOT_PASSWORD=$HARBOR_ROBOT_PASSWORD docker.stackable.tech/tools/harbor-garbage-collector:latest > report.txt
+            docker run --rm -e HARBOR_ROBOT_PASSWORD=$HARBOR_ROBOT_PASSWORD oci.stackable.tech/stackable/harbor-garbage-collector:0.0.0-dev > report.txt
             report_exit_code=$?
 
             exit $report_exit_code
@@ -124,7 +116,7 @@
     defaults: global
     description: ''
     disabled: false
-    display-name: 'Nexus Garbage Collection (daily)' 
+    display-name: 'Nexus Garbage Collection (daily)'
     concurrent: false
     quiet-period: 5
     logrotate:
@@ -149,20 +141,16 @@
             username: NEXUS_USER
             password: NEXUS_PASSWORD
     builders:
-      - shell: 
+      - shell:
           command: |
-            cd tools/nexus-garbage-collector/
-            docker build . -t docker.stackable.tech/tools/nexus-garbage-collector:latest
-            cd ../../
-
             set +x
             set +e
 
             docker run --rm \
               -e NEXUS_USER=$NEXUS_USER \
               -e NEXUS_PASSWORD=$NEXUS_PASSWORD \
               -e RUST_LOG=info \
-              docker.stackable.tech/tools/nexus-garbage-collector:latest &> report.txt
+              oci.stackable.tech/stackable/nexus-garbage-collector:0.0.0-dev &> report.txt
             report_exit_code=$?
 
             exit $report_exit_code