Update .prow.yaml

nephio-project · Jul 9, 2024 · b79794d · b79794d
1 parent 7f1c36f
commit b79794d
Showing 1 changed file with 97 additions and 0 deletions.
diff --git a/.prow.yaml b/.prow.yaml
@@ -156,3 +156,100 @@ postsubmits:
             items:
               - key: .dockerconfigjson
                 path: config.json
+
+  - name: build-push-image
+    cluster: default
+    run_if_changed: "^VERSION$"
+    branches:
+    - main
+    - master
+    annotations:
+      description: Build and Push Image to DockerHub
+    decorate: true
+    decoration_config:
+      censor_secrets: true
+    max_concurrency: 1
+    spec:
+      containers:
+      - name: kaniko
+        image: gcr.io/kaniko-project/executor:debug
+        command:
+        - "/bin/sh"
+        - "-c"
+        - |
+          executor --context=${PWD} \
+            --dockerfile=Dockerfile --destination=nephio/nmath:${BUILD_ID}
+        volumeMounts:
+          - name: kaniko-secret
+            mountPath: /kaniko/.docker/
+        resources:
+          requests:
+            cpu: 2
+            memory: 2Gi
+      volumes:
+        - name: kaniko-secret
+          secret:
+            secretName: regcred
+            items:
+              - key: .dockerconfigjson
+                path: config.json
+  - name: image-nephio-test-sign
+    cluster: default
+    always_run: true
+    branches:
+    - "^v.*$"
+    annotations:
+      description: Build and Push Image to DockerHub when release tag is created
+    decorate: true
+    decoration_config:
+      censor_secrets: true
+    max_concurrency: 0
+    spec:
+      containers:
+      - name: kaniko
+        image: gcr.io/kaniko-project/executor:debug
+        command:
+        - "/bin/sh"
+        - "-c"
+        - |
+          executor --context=${PWD} \
+            --dockerfile=Dockerfile --destination=nephio/nmath:${PULL_BASE_REF}
+        volumeMounts:
+          - name: kaniko-secret
+            mountPath: /kaniko/.docker/
+        resources:
+          requests:
+            cpu: 1
+            memory: 1Gi
+      - name: nephio-image-signer
+        image: nephio/releaser:latest
+        command:
+          - "/bin/sh"
+          - "-c"
+          - |
+            /usr/local/bin/release nephio/nmath:${PULL_BASE_REF}
+        resources:
+          requests:
+            cpu: 1
+            memory: 64Mi
+          limits:
+            cpu: 1
+            memory: 128Mi
+        env:
+          - name: COSIGN_PRIVATE_KEY
+            valueFrom:
+              secretKeyRef:
+                name: cosign-private-key
+                key: COSIGN_PRIVATE_KEY
+          - name: COSIGN_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: cosign-private-key-passwd
+                key: COSIGN_PASSWORD
+      volumes:
+        - name: kaniko-secret
+          secret:
+            secretName: regcred
+            items:
+              - key: .dockerconfigjson
+                path: config.json