Bump docker/build-push-action from 4 to 5 #352
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| "on": | |
| push: | |
| branches-ignore: | |
| # These should always correspond to pull requests, so ignore them for | |
| # the push trigger and let them be triggered by the pull_request | |
| # trigger, avoiding running the workflow twice. This is a minor | |
| # optimization so there's no need to ensure this is comprehensive. | |
| - "dependabot/**" | |
| - "renovate/**" | |
| - "tickets/**" | |
| - "u/**" | |
| tags: | |
| - "*" | |
| pull_request: {} | |
| jobs: | |
| test: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| python: | |
| - "3.11" | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Set up Python | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: ${{ matrix.python }} | |
| - name: Run pre-commit | |
| uses: pre-commit/[email protected] | |
| - name: Install tox | |
| run: pip install tox | |
| - name: Install librdkafka | |
| run: sudo apt-get install librdkafka-dev | |
| - name: Cache tox environments | |
| id: cache-tox | |
| uses: actions/cache@v3 | |
| with: | |
| path: .tox | |
| # requirements/*.txt and pyproject.toml have versioning info that | |
| # would impact the tox environment. | |
| key: tox-${{ hashFiles('requirements/*.txt') }}-${{ hashFiles('pyproject.toml') }} | |
| restore-keys: | | |
| tox-${{ matrix.python }}-${{ hashFiles('requirements/*.txt') }}- | |
| - name: Run tox | |
| run: tox -e py,coverage-report,typing | |
| build: | |
| runs-on: ubuntu-latest | |
| needs: [test] | |
| # Only do Docker builds of tagged releases and pull requests from ticket | |
| # branches. This will still trigger on pull requests from untrusted | |
| # repositories whose branch names match our tickets/* branch convention, | |
| # but in this case the build will fail with an error since the secret | |
| # won't be set. | |
| if: > | |
| startsWith(github.ref, 'refs/tags/') | |
| || startsWith(github.head_ref, 'tickets/') | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - name: Define the Docker tag | |
| id: vars | |
| run: echo ::set-output name=tag::$(scripts/docker-tag.sh) | |
| - name: Print the tag | |
| id: print | |
| run: echo ${{steps.vars.outputs.tag}} | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v2 | |
| - name: Log in to Docker Hub | |
| uses: docker/login-action@v2 | |
| with: | |
| username: ${{ secrets.DOCKER_USERNAME }} | |
| password: ${{ secrets.DOCKER_TOKEN }} | |
| - name: Log in to GitHub Container Registry | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build and push the frontend image | |
| uses: docker/build-push-action@v5 | |
| with: | |
| context: . | |
| push: true | |
| tags: | | |
| lsstsqre/kafkaconnect:${{ steps.vars.outputs.tag }} | |
| ghcr.io/lsst-sqre/kafkaconnect:${{ steps.vars.outputs.tag }} | |
| cache-from: type=gha,scope=frontend | |
| cache-to: type=gha,mode=max,scope=frontend | |
| docs: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Set up Python | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: "3.11" | |
| - name: Install tox and ltd-conveyor | |
| run: pip install tox ltd-conveyor | |
| - name: Install graphviz and librdkafka-dev (for dependencies) | |
| run: sudo apt-get install graphviz librdkafka-dev | |
| - name: Run tox | |
| run: tox -e docs | |
| # Only attempt documentation uploads for long-lived branches, tagged | |
| # releases, and pull requests from ticket branches. This avoids version | |
| # clutter in the docs and failures when a PR doesn't have access to | |
| # secrets. This will still trigger on pull requests from untrusted | |
| # repositories whose branch names match our tickets/* branch convention, | |
| # but in this case the build will fail with an error since the secret | |
| # won't be set. | |
| - name: Upload to LSST the Docs | |
| env: | |
| LTD_USERNAME: ${{ secrets.LTD_USERNAME }} | |
| LTD_PASSWORD: ${{ secrets.LTD_PASSWORD }} | |
| run: ltd upload --product kafka-connect-manager --gh --dir docs/_build/html | |
| if: > | |
| github.event_name != 'pull_request' | |
| || startsWith(github.head_ref, 'tickets/') | |
| pypi: | |
| runs-on: ubuntu-latest | |
| needs: [test] | |
| if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags') | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 # full history for setuptools_scm | |
| - name: Set up Python | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: "3.11" | |
| - name: Python install | |
| run: | | |
| python -m pip install --upgrade pip | |
| pip install . | |
| pip install --upgrade setuptools wheel | |
| - name: Build a binary wheel and a source tarball | |
| run: python setup.py sdist bdist_wheel | |
| - name: Publish package | |
| uses: pypa/[email protected] | |
| with: | |
| user: __token__ | |
| password: ${{ secrets.PYPI_SQRE_ADMIN }} |