diom/.github/workflows/on-push.yml at f3baecc8317e8bf595bc89569094a1e85f2044e5 · svix/diom · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
name: CI on Push to Main

on:
  push:
    branches: [main]

jobs:
  ci:
    uses: ./.github/workflows/ci.yml
    secrets: inherit

  # Disabling for now because results are too inconsistent
  # on github runners. Will revisit later.
  #  benchmark:
  #    uses: ./.github/workflows/benchmark.yml
  #    secrets: inherit

  java:
    uses: ./.github/workflows/java.yml

  javascript:
    uses: ./.github/workflows/javascript.yml

  python:
    uses: ./.github/workflows/python.yml

  docker_publish_server:
    uses: ./.github/workflows/docker-publish.yml
    secrets: inherit
    needs: ci
    with:
      image_name: svix/diom-server-private
      target: prod
    permissions:
      actions: read
      contents: read
      packages: write
      security-events: write

  docker_publish_cli:
    uses: ./.github/workflows/docker-publish.yml
    secrets: inherit
    needs: ci
    with:
      image_name: svix/diom-cli-private
      target: cli-prod
    permissions:
      actions: read
      contents: read
      packages: write
      security-events: write

  docker_publish_operator:
    uses: ./.github/workflows/docker-publish.yml
    secrets: inherit
    needs: ci
    with:
      image_name: svix/diom-operator-private
      target: prod
      file: ./infra/operator/Dockerfile
    permissions:
      actions: read
      contents: read
      packages: write
      security-events: write

  helm-publish:
    needs: ci
    uses: ./.github/workflows/helm-publish.yml
    secrets: inherit
    permissions:
      contents: read
      packages: write
    with:
      version: 0.0.0-${{ github.sha }}
      server_image_tag: sha-${{ github.sha }}
      operator_image_tag: sha-${{ github.sha }}
      is_release: false