Switch to matrix workflow

Author: giom-l

.github/workflows/docker_publish.yml

@@ -9,31 +9,89 @@ on:
         type: string
       generic_tag:
         required: true
-        type: string
+        type: string        
 
 jobs:
-  deploy-ghcr:
-    permissions:
-      packages: write
-    uses: ./.github/workflows/publish_ghcr.yml
-    secrets: inherit
-    with:
-      version: ${{ inputs.version }}
-      generic_tag: ${{ inputs.generic_tag }}
+  deploy:
+    continue-on-error: true
+    strategy:
+      fail-fast: false
+      matrix:
+        registry: ['docker.io', 'ghcr.io', 'ecr']
+          
+    runs-on: ubuntu-latest
+    steps: 
+
+      - name: Download docker image
+        uses: actions/download-artifact@v4
+        with:
+          name: image
+          path: /tmp
+
+      # setup containerd to preserve provenance attestations :https://docs.docker.com/build/attestations/#creating-attestations
+      - name: Setup docker with containerd
+        uses: crazy-max/ghaction-setup-docker@v3
+        with:
+          daemon-config: |
+            {
+              "features": {
+                "containerd-snapshotter": true
+              }
+            }     
+                      
+      - name: Load docker image into daemon
+        run: |
+          docker load --input /tmp/image.tar
 
-  deploy-dockerhub:
-    uses: ./.github/workflows/publish_dockerhub.yml
-    secrets: inherit
-    with:
-      version: ${{ inputs.version }}
-      generic_tag: ${{ inputs.generic_tag }}
+      - name: Login to docker.io
+        if: matrix.registry == 'docker.io'
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ matrix.registry }}
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-  deploy-ecr:
-    uses: ./.github/workflows/publish_ecr.yml
-    permissions:
-      contents: read # To read secrets
-      id-token: write # This is required for requesting the JWT
-    secrets: inherit
-    with:
-      version: ${{ inputs.version }}
-      generic_tag: ${{ inputs.generic_tag }}
+      - name: Login to ghcr.io
+        if: matrix.registry == 'ghcr.io' 
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ matrix.registry }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+  
+      - name: Configure AWS credentials
+        if: matrix.registry == 'ecr'
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-region: us-east-1 # This region only for public ECR
+          role-to-assume: ${{ secrets.AWS_ROLE }}
+  
+      - name: Login to public ECR
+        if: matrix.registry == 'ecr'
+        id: login-ecr-public
+        uses: aws-actions/amazon-ecr-login@v2
+        with:
+          registry-type: public        
+          
+      - name: define env vars
+        run: |
+          if [ ${{matrix.registry }} == 'docker.io' ]; then
+            echo "REGISTRY=${{ matrix.registry }}" >> $GITHUB_ENV
+            echo "REPOSITORY=${{ github.repository }}" >> $GITHUB_ENV
+          elif [ ${{ matrix.registry }} == 'ghcr.io' ]; then
+            echo "REGISTRY=${{ matrix.registry }}" >> $GITHUB_ENV
+            echo "REPOSITORY=${{ github.repository }}" >> $GITHUB_ENV
+          elif [ ${{ matrix.registry }} == 'ecr' ]; then
+            echo "REGISTRY=${{ steps.login-ecr-public.outputs.registry }}" >> $GITHUB_ENV
+            echo "REPOSITORY=${{ github.repository }}" >> $GITHUB_ENV
+          else 
+            echo "REGISTRY=" >> $GITHUB_ENV
+            echo "REPOSITORY=notworking" >> $GITHUB_ENV
+          fi
+        
+      - name: Push images to ${{ matrix.registry }}
+        run: |
+          docker tag kafka-ui:temp ${{ env.REGISTRY }}/${{ env.REPOSITORY }}:${{ inputs.generic_tag }}
+          docker tag kafka-ui:temp ${{ env.REGISTRY }}/${{ env.REPOSITORY }}:${{ inputs.version }}
+          docker push ${{ env.REGISTRY }}/${{ env.REPOSITORY }}:${{ inputs.generic_tag }}
+          docker push ${{ env.REGISTRY }}/${{ env.REPOSITORY }}:${{ inputs.version }}

.github/workflows/main.yml

@@ -58,7 +58,7 @@ jobs:
       sha: ${{ github.sha }}
       version: ${{ needs.jar-build.outputs.version }}
 
-  docker-deploy:
+  docker-deploy: 
     needs: [jar-build, docker-build]
     permissions:
       contents: read # To read secrets