Fix release workflow conditional so it doesn't run on PR (#4536) #11
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: docker | |
| on: | |
| push: | |
| branches: | |
| - 'main' | |
| - 'r[0-9]+' | |
| tags: | |
| - 'v*' | |
| # Needed to login to DockerHub | |
| permissions: | |
| contents: read | |
| id-token: write | |
| jobs: | |
| get-tag: | |
| if: github.repository == 'grafana/tempo' # skip in forks | |
| runs-on: ubuntu-24.04 | |
| outputs: | |
| tag: ${{ steps.get-tag.outputs.tag }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: fetch tags | |
| run: git fetch --tags | |
| - id: get-tag | |
| run: | | |
| echo "tag=$(./tools/image-tag)" >> "$GITHUB_OUTPUT" | |
| docker: | |
| if: github.repository == 'grafana/tempo' | |
| needs: get-tag | |
| strategy: | |
| matrix: | |
| component: [ tempo, tempo-vulture, tempo-query, tempo-cli ] | |
| runner_arch: [ { runner: ubuntu-24.04, arch: amd64 }, { runner: github-hosted-ubuntu-arm64, arch: arm64 } ] | |
| runs-on: ${{ matrix.runner_arch.runner }} | |
| env: | |
| TAG: ${{ needs.get-tag.outputs.tag }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: fetch tags | |
| run: git fetch --tags | |
| - name: build-tempo-binaries | |
| run: | | |
| COMPONENT=${{ matrix.component }} GOARCH=${{ matrix.runner_arch.arch }} make exe | |
| - name: docker-build | |
| run: | | |
| TAG_ARCH="$TAG-${{ matrix.runner_arch.arch }}" | |
| docker build -f cmd/${{ matrix.component }}/Dockerfile -t grafana/${{ matrix.component }}:$TAG_ARCH . | |
| - name: Login to DockerHub | |
| uses: grafana/shared-workflows/actions/dockerhub-login@dockerhub-login-v1.0.0 | |
| - name: docker-push | |
| run: | | |
| TAG_ARCH="$TAG-${{ matrix.runner_arch.arch }}" | |
| docker push grafana/${{ matrix.component }}:$TAG_ARCH | |
| manifest: | |
| if: github.repository == 'grafana/tempo' | |
| needs: ['get-tag', 'docker'] | |
| strategy: | |
| matrix: | |
| component: [ tempo, tempo-vulture, tempo-query, tempo-cli ] | |
| runs-on: ubuntu-24.04 | |
| env: | |
| TAG: ${{ needs.get-tag.outputs.tag }} | |
| IMAGE_NAME: grafana/${{ matrix.component }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Login to DockerHub | |
| uses: grafana/shared-workflows/actions/dockerhub-login@dockerhub-login-v1.0.0 | |
| - name: docker-manifest-create-and-push | |
| run: | | |
| docker manifest create \ | |
| $IMAGE_NAME:$TAG \ | |
| --amend $IMAGE_NAME:$TAG-amd64 \ | |
| --amend $IMAGE_NAME:$TAG-arm64 | |
| docker manifest push $IMAGE_NAME:$TAG | |
| docker manifest create \ | |
| $IMAGE_NAME:latest \ | |
| --amend $IMAGE_NAME:$TAG-amd64 \ | |
| --amend $IMAGE_NAME:$TAG-arm64 | |
| docker manifest push $IMAGE_NAME:latest | |
| cd-to-dev-env: | |
| # This job deploys the latest main commit to the dev environment | |
| if: github.repository == 'grafana/tempo' && github.ref == 'refs/heads/main' | |
| runs-on: ubuntu-24.04 | |
| needs: manifest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: fetch tags | |
| run: git fetch --tags | |
| - name: get-tag | |
| run: | | |
| echo "grafana/tempo:$(./tools/image-tag)" > tags_for_cd_tempo | |
| echo "grafana/tempo-query:$(./tools/image-tag)" > tags_for_cd_tempo_query | |
| echo "grafana/tempo-vulture:$(./tools/image-tag)" > tags_for_cd_tempo_vulture | |
| - name: Authenticate to GAR | |
| uses: grafana/shared-workflows/actions/login-to-gar@main | |
| id: login-to-gar | |
| with: | |
| registry: us-docker.pkg.dev | |
| environment: prod | |
| - name: Get Vault secrets | |
| uses: grafana/shared-workflows/actions/get-vault-secrets@main | |
| with: | |
| common_secrets: | | |
| GITHUB_APP_ID=updater-app:app-id | |
| GITHUB_APP_INSTALLATION_ID=updater-app:app-installation-id | |
| GITHUB_APP_PRIVATE_KEY=updater-app:private-key | |
| - name: Update jsonnet | |
| run: | | |
| set -e -o pipefail | |
| cat << EOF > config.json | |
| { | |
| "destination_branch": "master", | |
| "pull_request_branch_prefix": "auto-merge/cd-tempo-dev", | |
| "pull_request_enabled": true, | |
| "pull_request_existing_strategy": "ignore", | |
| "repo_name": "deployment_tools", | |
| "update_jsonnet_attribute_configs": [ | |
| { | |
| "file_path": "ksonnet/environments/tempo/dev-us-central-0.tempo-dev-01/images.libsonnet", | |
| "jsonnet_key": "tempo", | |
| "jsonnet_value_file": "tags_for_cd_tempo" | |
| }, | |
| { | |
| "file_path": "ksonnet/environments/tempo/dev-us-central-0.tempo-dev-01/images.libsonnet", | |
| "jsonnet_key": "tempo_query", | |
| "jsonnet_value_file": "tags_for_cd_tempo_query" | |
| }, | |
| { | |
| "file_path": "ksonnet/environments/tempo/dev-us-central-0.tempo-dev-01/images.libsonnet", | |
| "jsonnet_key": "tempo_vulture", | |
| "jsonnet_value_file": "tags_for_cd_tempo_vulture" | |
| } | |
| ] | |
| } | |
| EOF | |
| docker run --rm \ | |
| -e GITHUB_APP_ID \ | |
| -e GITHUB_APP_INSTALLATION_ID \ | |
| -e GITHUB_APP_PRIVATE_KEY \ | |
| -e CONFIG_JSON="$(cat config.json)" \ | |
| -v ./tags_for_cd_tempo:/app/tags_for_cd_tempo \ | |
| -v ./tags_for_cd_tempo_query:/app/tags_for_cd_tempo_query \ | |
| -v ./tags_for_cd_tempo_vulture:/app/tags_for_cd_tempo_vulture us-docker.pkg.dev/grafanalabs-global/docker-deployment-tools-prod/updater |