docker-publish.yaml

name: Docker
on:
  release:
    types: [released]
  workflow_dispatch:
    inputs:
      tag:
        required: false
        description: Tag/version to publish

# These permissions are needed to interact with GitHub's OIDC Token endpoint.
permissions:
  id-token: write
  contents: read

jobs:
  deploy:
    name: Build and push Docker image
    runs-on: ubuntu-20.04
    steps:

      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up NodeJS
        uses: actions/setup-node@v4
        with:
          node-version: "18.17.0"

      - name: Set up Go
        uses: actions/setup-go@v4
        with:
          go-version: "1.20.6"
        id: go

      - name: Extract version
        shell: bash
        run: |
          if [ "${{ github.event.inputs.tag }}" != "" ]; then
            echo "tag=$(echo ${{ github.event.inputs.tag }} | sed s/^v//)" >> $GITHUB_OUTPUT
          else
            echo "tag=$(echo ${GITHUB_REF##*/} | sed s/^v//)" >> $GITHUB_OUTPUT
          fi
        id: version

      - name: Generate code
        run: make gen VERSION=${{ steps.version.outputs.tag }}

      - name: Checks validator
        run: make checks-validator
        env:
          GOLANGCI_LINT_FLAGS: --out-format github-actions

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v3
        with:
          aws-region: us-east-1
          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v2

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2
        with:
          buildkitd-flags: --debug

      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v2

      - name: Login to DockerHub
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Build and push lakectl
        uses: docker/build-push-action@v3
        with:
          context: .
          target: lakectl
          push: true
          platforms: linux/amd64,linux/arm64,darwin/amd64,darwin/arm64
          build-args: VERSION=${{ steps.version.outputs.tag }}
          tags: |
            ${{ steps.login-ecr.outputs.registry }}/lakectl:${{ steps.version.outputs.tag }}
            treeverse/lakectl:${{ steps.version.outputs.tag }}
            treeverse/lakectl:latest

      - name: Build and push lakefs
        uses: docker/build-push-action@v3
        with:
          context: .
          target: lakefs-plugins
          push: true
          platforms: linux/amd64,linux/arm64,darwin/amd64,darwin/arm64
          build-args: VERSION=${{ steps.version.outputs.tag }}
          tags: |
            ${{ steps.login-ecr.outputs.registry }}/lakefs:${{ steps.version.outputs.tag }}
            treeverse/lakefs:${{ steps.version.outputs.tag }}
            treeverse/lakefs:latest