Push image to Docker Hub staging repository on a successful build.

Signed-off-by: Govind Kamat <govkamat@amazon.com>
opensearch-project · Dec 22, 2024 · 907b332 · 907b332
1 parent 477aad9
commit 907b332
Showing 1 changed file with 20 additions and 2 deletions.
diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
@@ -29,11 +29,29 @@ jobs:
           version: 'v0.9.1'
       - uses: actions/checkout@v4
 
+      - name: Configure Role to Acquire Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ secrets.BENCHMARK_DOCKERHUB_ROLE }}
+          aws-region: us-east-1
+
+      - name: Retrieve Password
+        id: retrieve-password
+        run: |
+          DOCKERHUB_PASSWORD=`aws secretsmanager get-secret-value --secret-id jenkins-staging-dockerhub-credential --query SecretString --output text`
+          echo "::add-mask::$DOCKERHUB_PASSWORD"
+          echo "dockerhub-password=$DOCKERHUB_PASSWORD" >> $GITHUB_OUTPUT
+
+      - name: Login to DockerHub
+        uses: docker/login-action@v1
+        with:
+          username: ${{ secrets.BENCHMARK_DOCKERHUB_USERNAME }}
+          password: ${{ steps.retrieve-password.outputs.dockerhub-password }}
+
       - name: Docker Build ${{ matrix.platform }}
         run: |
             docker buildx version
             tag=osb/osb-`echo ${{ matrix.platform }} | tr '/' '-'`
             set -x
-            docker buildx build --platform ${{ matrix.platform }} --build-arg VERSION=`cat version.txt` --build-arg BUILD_DATE=`date -u +%Y-%m-%dT%H:%M:%SZ` -f docker/Dockerfile -t "$tag" -o type=docker .
+            docker buildx build --platform ${{ matrix.platform }} --build-arg VERSION=`cat version.txt` --build-arg BUILD_DATE=`date -u +%Y-%m-%dT%H:%M:%SZ` -f docker/Dockerfile -t "$tag" --push .
             set +x
-            docker images | grep "$tag"