feat: setting to force oauth2/oidc login & refactor (#1131) #699
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and Push to Docker Registry | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| on: | |
| push: | |
| branches: | |
| - develop | |
| tags: | |
| - 'v*' | |
| paths: | |
| - 'apps/nestjs-backend/**' | |
| - 'apps/nextjs-app/**' | |
| - 'packages/core/**' | |
| - 'packages/sdk/**' | |
| - '.github/**' | |
| - 'scripts/**' | |
| jobs: | |
| build-push: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| target: [app, db-migrate] | |
| arch: [amd64, arm64] | |
| include: | |
| - target: app | |
| file: Dockerfile | |
| image: teable | |
| - target: db-migrate | |
| file: Dockerfile.db-migrate | |
| image: teable-db-migrate | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Login to GitHub container registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.PACKAGES_KEY }} | |
| - name: Login to Docker Hub registry | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKER_HUB_NAME }} | |
| password: ${{ secrets.DOCKER_HUB_AK }} | |
| - name: Login to Ali container registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: registry.cn-shenzhen.aliyuncs.com | |
| username: ${{ secrets.ALI_DOCKER_USERNAME }} | |
| password: ${{ secrets.ALI_DOCKER_PASSWORD }} | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20.9.0 | |
| - name: ⚙️ Install zx | |
| run: npm install -g zx | |
| - name: ⚙️ Docker meta | |
| id: meta | |
| uses: docker/metadata-action@v5 | |
| with: | |
| images: | | |
| registry.cn-shenzhen.aliyuncs.com/teable/${{ matrix.image }} | |
| ghcr.io/teableio/${{ matrix.image }} | |
| docker.io/teableio/${{ matrix.image }} | |
| tags: | | |
| type=sha,format=long | |
| type=raw,value=latest | |
| - name: ⚙️ Set up QEMU | |
| uses: docker/setup-qemu-action@v3 | |
| - name: 📦 Build and push | |
| run: | | |
| zx scripts/build-image.mjs --file=dockers/teable/${{ matrix.file }} \ | |
| --build-arg="ENABLE_CSP=false" \ | |
| --tag="${{ steps.meta.outputs.tags }}" \ | |
| --platform="linux/${{ matrix.arch }}" \ | |
| --push | |
| create-manifest: | |
| needs: build-push | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| target: [app, db-migrate] | |
| include: | |
| - target: app | |
| image: teable | |
| - target: db-migrate | |
| image: teable-db-migrate | |
| steps: | |
| - name: Login to GitHub container registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.PACKAGES_KEY }} | |
| - name: Login to Docker Hub registry | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKER_HUB_NAME }} | |
| password: ${{ secrets.DOCKER_HUB_AK }} | |
| - name: Login to Ali container registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: registry.cn-shenzhen.aliyuncs.com | |
| username: ${{ secrets.ALI_DOCKER_USERNAME }} | |
| password: ${{ secrets.ALI_DOCKER_PASSWORD }} | |
| - name: Create and push manifest | |
| run: | | |
| REGISTRIES=("registry.cn-shenzhen.aliyuncs.com/teable" "ghcr.io/teableio" "docker.io/teableio") | |
| TAGS=("latest" "sha-${{ github.sha }}") | |
| for REGISTRY in "${REGISTRIES[@]}"; do | |
| for TAG in "${TAGS[@]}"; do | |
| docker manifest create $REGISTRY/${{ matrix.image }}:$TAG \ | |
| $REGISTRY/${{ matrix.image }}:${TAG}-amd64 \ | |
| $REGISTRY/${{ matrix.image }}:${TAG}-arm64 | |
| docker manifest push $REGISTRY/${{ matrix.image }}:$TAG | |
| done | |
| done |