Update requirements for ansible ... #1586
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ansible | |
| on: | |
| push: | |
| branches: | |
| - main | |
| paths: | |
| - ansible/* | |
| - .github/workflows/ansible.yml | |
| workflow_dispatch: | |
| schedule: | |
| - cron: "0 8 * * 1" | |
| env: | |
| BUILD_VERSION: "11.1.0" | |
| DOCKER_CLI_EXPERIMENTAL: enabled | |
| REPOSITORY: ${{ github.actor }}/${{ github.workflow }} | |
| permissions: read-all | |
| jobs: | |
| deploy: | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| distro: [ubuntu, alpine] | |
| #distro: [ubuntu] | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| packages: write | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v1 | |
| with: | |
| disable-sudo: true | |
| egress-policy: block | |
| disable-telemetry: true | |
| allowed-endpoints: | |
| acghubeus1.actions.githubusercontent.com:443 | |
| api.github.com:443 | |
| archive.ubuntu.com:80 | |
| artifactcache.actions.githubusercontent.com:443 | |
| auth.docker.io:443 | |
| crates.io:443 | |
| dl-cdn.alpinelinux.org:443 | |
| docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.com:443 | |
| files.pythonhosted.org:443 | |
| ghcr.io:443 | |
| github.com:443 | |
| pkg-containers.githubusercontent.com:443 | |
| index.crates.io:443 | |
| index.docker.io:443 | |
| pipelinesghubeus2.actions.githubusercontent.com:443 | |
| ports.ubuntu.com:80 | |
| production.cloudflare.docker.com:443 | |
| pypi.org:443 | |
| registry-1.docker.io:443 | |
| security.ubuntu.com:80 | |
| static.crates.io:443 | |
| www.piwheels.org:443 | |
| - name: Source checkout | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.4.2 | |
| - name: Setup QEMU | |
| id: qemu | |
| uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v1.2.0 | |
| - name: Setup Buildx | |
| id: buildx | |
| uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v1 | |
| - name: Set Docker metadata | |
| id: docker_meta | |
| uses: docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 # v3 | |
| with: | |
| images: ${{ env.REPOSITORY }} | |
| labels: | | |
| org.opencontainers.image.version=${{ env.BUILD_VERSION }} | |
| org.opencontainers.image.revision=${{ github.sha }} | |
| org.opencontainers.image.title=${{ env.REPOSITORY }} | |
| - name: GitHub login | |
| if: ${{ github.event_name != 'pull_request' }} | |
| uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v1.12.0 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: DockerHub login | |
| if: ${{ github.event_name != 'pull_request' }} | |
| uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v1.12.0 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_PASSWORD }} | |
| - name: Build and push (Ubuntu) | |
| if: ${{ matrix.distro == 'ubuntu' }} | |
| uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v2.8.0 | |
| with: | |
| push: ${{ github.event_name != 'pull_request' }} | |
| context: ${{ github.workflow }} | |
| file: ${{ github.workflow }}/Dockerfile | |
| #platforms: linux/amd64,linux/arm64,linux/ppc64le,linux/arm/v7 | |
| platforms: linux/amd64,linux/arm64 | |
| #platforms: linux/amd64,linux/arm64,linux/ppc64le | |
| build-args: | | |
| BUILD_VERSION | |
| sbom: true | |
| provenance: true | |
| cache-from: type=gha, scope=${{ github.workflow }}-${{ matrix.distro }} | |
| cache-to: type=gha, scope=${{ github.workflow }}-${{ matrix.distro }} | |
| labels: ${{ steps.docker_meta.outputs.labels }} | |
| tags: | | |
| docker.io/${{ env.REPOSITORY }}:${{ env.BUILD_VERSION }} | |
| docker.io/${{ env.REPOSITORY }}:${{ env.BUILD_VERSION }}-${{ matrix.distro }} | |
| docker.io/${{ env.REPOSITORY }}:latest | |
| ghcr.io/${{ env.REPOSITORY }}:${{ env.BUILD_VERSION }} | |
| ghcr.io/${{ env.REPOSITORY }}:${{ env.BUILD_VERSION }}-${{ matrix.distro }} | |
| ghcr.io/${{ env.REPOSITORY }}:latest | |
| - name: Build and push (Alpine) | |
| if: ${{ matrix.distro == 'alpine' }} | |
| uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v2.8.0 | |
| with: | |
| push: ${{ github.event_name != 'pull_request' }} | |
| context: ${{ github.workflow }} | |
| file: ${{ github.workflow }}/Dockerfile.${{ matrix.distro }} | |
| #platforms: linux/amd64,linux/arm64,linux/ppc64le,linux/arm/v7 | |
| #platforms: linux/amd64,linux/arm64,linux/arm/v7,linux/ppc64le | |
| platforms: linux/amd64,linux/arm64 | |
| #platforms: linux/amd64,linux/arm64,linux/ppc64le | |
| build-args: | | |
| BUILD_VERSION | |
| sbom: true | |
| provenance: true | |
| cache-from: type=gha, scope=${{ github.workflow }}-${{ matrix.distro }} | |
| cache-to: type=gha, scope=${{ github.workflow }}-${{ matrix.distro }} | |
| labels: ${{ steps.docker_meta.outputs.labels }} | |
| tags: | | |
| docker.io/${{ env.REPOSITORY }}:${{ env.BUILD_VERSION }}-${{ matrix.distro }} | |
| ghcr.io/${{ env.REPOSITORY }}:${{ env.BUILD_VERSION }}-${{ matrix.distro }} |