container-image.yml

name: "Container Image"

on:
  workflow_call:
    secrets:
      DOCKER_HUB_TOKEN:
        required: true
      DOCKER_HUB_USER:
        required: true
      GH_PAT:
        required: true
      GH_USER:
        required: true
      AWS_OIDC_ROLE_TO_ASSUME:
        required: true

  workflow_dispatch:

env:
  GO_VERSION: 1.19
  AWS_REGION: us-east-1

permissions:
  id-token: write
  contents: read

jobs:
  publish_container_images:
    name: Publish Container Images
    runs-on: ubuntu-latest
    steps:
      - name: Set up Go 1.x
        uses: actions/setup-go@v3
        with:
          go-version: ${{ env.GO_VERSION }}
        id: go

      - name: Check out code
        uses: actions/checkout@v3

      - id: go-cache-paths
        run: |
          echo "::set-output name=go-build::$(go env GOCACHE)"
          echo "::set-output name=go-mod::$(go env GOMODCACHE)"

      - name: Go Build Cache
        uses: actions/cache@v3
        with:
          path: ${{ steps.go-cache-paths.outputs.go-build }}
          key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum') }}

      - name: Go Mod Cache
        uses: actions/cache@v3
        with:
          path: ${{ steps.go-cache-paths.outputs.go-mod }}
          key: ${{ runner.os }}-go-mod-${{ hashFiles('**/go.sum') }}

      - name: Git Current branch name (Version)
        run: |
          echo ${{ github.ref_name }}

      - name: Docker Version
        run: docker version

      - uses: actions/cache@v3
        with:
          path: |
            ~/.cache/go-build
            ~/go/pkg/mod
          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
          restore-keys: |
            ${{ runner.os }}-go-

      - name: Show workspace files
        run: tree .

      - name: Build container images
        run: make container-build GIT_VERSION=${{ github.ref_name }}

      - name: Show local container images
        run: docker images

      - name: Logging in Docker Hub
        run: echo ${{ secrets.DOCKER_HUB_TOKEN }} | docker login -u ${{ secrets.DOCKER_HUB_USER }} --password-stdin

      - name: Publish Images in Docker Hub
        run: make container-publish-docker GIT_VERSION=${{ github.ref_name }}

      - name: Logging in GitHub Registry
        run: echo ${{ secrets.GH_PAT }} | docker login ghcr.io -u ${{ secrets.GH_USER }} --password-stdin

      - name: Publish Images in GitHub Registry
        run: make container-publish-github GIT_VERSION=${{ github.ref_name }}

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@master
        with:
          role-to-assume: ${{ secrets.AWS_OIDC_ROLE_TO_ASSUME }}
          role-session-name: publish-ecr-public-images
          aws-region: ${{ env.AWS_REGION }}

      - name: Logging in AWS ECR Public Repository
        env:
          AWS_REGION: ${{ env.AWS_REGION }}
        run: aws ecr-public get-login-password --region $AWS_REGION | docker login --username AWS --password-stdin public.ecr.aws

      # not supported public repos yet: https://github.com/aws-actions/amazon-ecr-login/issues/116
      # - name: Logging in AWS ECR Public Repository
      #   id: login-ecr
      #   uses: aws-actions/amazon-ecr-login@v1

      - name: Publish Images in GitHub Packages
        run: make container-publish-aws-ecr GIT_VERSION=${{ github.ref_name }}