Skip to content

ci: branch-tagged image builds via workflow_dispatch (insight#1994 Phase 1) #227

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cyberantonz merged 1 commit into from
Jul 29, 2026
+30 −5
Merged

ci: branch-tagged image builds via workflow_dispatch (insight#1994 Phase 1) #227

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
35 changes: 30 additions & 5 deletions .github/workflows/docker.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,8 +29,25 @@ jobs:
# Format mirrors constructorfabric/insight's build-images.yml
# exactly so that `sort -V` over mixed subchart appVersions on
# the umbrella side stays consistent.
#
# Branch builds (insight#1994) append `.<sanitized-branch>` after the
# sha so a branch image can never be mistaken for a main release tag —
# main keeps the suffix-less format, and dispatch-umbrella (which pins
# the subchart appVersion) stays main-only.
env:
REF_NAME: ${{ github.ref_name }}
run: |
BUILD_TAG="$(date -u +%Y.%m.%d.%H.%M)-$(echo "${GITHUB_SHA}" | cut -c1-7)"
if [ "${GITHUB_REF}" != "refs/heads/main" ]; then
# Docker tag charset is [A-Za-z0-9._-] (branch names carry `/`);
# cap the suffix well under the 128-char tag limit and trim
# separator runs the sanitizer may produce at the edges.
SAFE_BRANCH="$(printf '%s' "$REF_NAME" \
| tr -c 'a-zA-Z0-9._-' '-' \
| sed -E 's/^[-.]+//; s/[-.]+$//' \
| cut -c1-60)"
BUILD_TAG="${BUILD_TAG}.${SAFE_BRANCH}"
fi
echo "build_tag=${BUILD_TAG}" >> "$GITHUB_OUTPUT"
echo "Build tag for this run: ${BUILD_TAG}"

Expand Down Expand Up @@ -139,12 +156,15 @@ jobs:
uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
with:
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
# Two tags on default-branch pushes — matches
# constructorfabric/insight backend scheme. The date-based tag
# already embeds the sha, so a separate short-sha tag is
# redundant.
# Matches constructorfabric/insight's backend scheme. The date-based
# tag already embeds the sha, so a separate short-sha tag is
# redundant. The build tag applies on every run — the only triggers
# are a main push and workflow_dispatch, and a branch dispatch is a
# deliberate branch image build (insight#1994; the branch-suffixed
# tag comes from `prepare`). `latest` stays default-branch-only —
# a branch build must never move it.
tags: |
type=raw,value=${{ needs.prepare.outputs.build_tag }},enable={{is_default_branch}}
type=raw,value=${{ needs.prepare.outputs.build_tag }}
type=raw,value=latest,enable={{is_default_branch}}

- name: Create multi-arch manifest and push
Expand All @@ -154,6 +174,11 @@ jobs:
$(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
$(printf '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@sha256:%s ' *)

# Copy-pastable pushed ref on the run's Summary page (insight#1994).
- name: Report pushed image
run: |
echo '- `${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ needs.prepare.outputs.build_tag }}`' >> "$GITHUB_STEP_SUMMARY"

# ─── Umbrella chart dispatch ───────────────────────────────────────────────
# After a successful main-branch image build, trigger the umbrella chart
# workflow in constructorfabric/insight so it bumps the frontend subchart
Expand Down