ecamo 0.1.0

SSL image proxy with JWT authentication
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120

name: ci

on: 
  create: {}
  pull_request:
    branches: [main]
  push:
    branches: [main, ci-test]

env:
  DOCKER_REPO: public.ecr.aws/cookpad/ecamo

jobs:
  test:
    name: test-webapp
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@master
      - uses: actions-rs/toolchain@v1
        with:
          toolchain: stable
      - uses: actions-rs/cargo@v1
        with:
          command: build
      - uses: actions-rs/cargo@v1
        with:
          command: test

  test-fastlyce:
    name: test-fastlyce
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@master
      - uses: actions-rs/toolchain@v1
        with:
          toolchain: stable
          target: wasm32-wasi
          override: true
      # FIXME: https://github.com/actions-rs/cargo/issues/6
      - run: cargo build
        working-directory: ./contrib/fastlyce
      # - uses: actions-rs/cargo@v1
      #   with:
      #     command: test

  docker-build:
    name: docker-build
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    steps:
      - uses: aws-actions/configure-aws-credentials@v1
        # uses: aws-actions/configure-aws-credentials@a78fcb01f76c8c5c3b05ab82718a6f7919fc0269
        # https://github.com/aws-actions/configure-aws-credentials/issues/271
        with:
          aws-region: us-east-1
          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
          role-skip-session-tagging: 'true'
        if: "${{ github.event_name == 'push' || github.event_name == 'create' }}"
      - name: Login to ECR Public
        run: 'aws ecr-public get-login-password --region us-east-1 | docker login --username AWS --password-stdin public.ecr.aws'
        # FIXME: https://github.com/aws-actions/amazon-ecr-login/issues/116
        # uses: aws-actions/amazon-ecr-login@v1
        if: "${{ github.event_name == 'push' || github.event_name == 'create' }}"

      - uses: actions/checkout@master
      - run: 'echo $GITHUB_SHA > REVISION'

      - run: "docker pull ${DOCKER_REPO}:latest || :"
      - name: "docker tag ${DOCKER_REPO}:${TAG} ${DOCKER_REPO}:latest"
        run: |
          TAG=$(basename "${{ github.ref }}")
          docker pull ${DOCKER_REPO}:${TAG} || :
          docker tag ${DOCKER_REPO}:${TAG} ${DOCKER_REPO}:latest || :
        if: "${{ startsWith(github.ref, 'refs/tags/v') }}"

      - run: "docker pull ${DOCKER_REPO}:builder || :"

      - run: "docker build --pull --cache-from ${DOCKER_REPO}:builder --target builder -t ${DOCKER_REPO}:builder -f Dockerfile ."
      - run: "docker build --pull --cache-from ${DOCKER_REPO}:builder --cache-from ${DOCKER_REPO}:latest -t ${DOCKER_REPO}:stage-${GITHUB_SHA} -f Dockerfile ."


      - run: "docker push ${DOCKER_REPO}:stage-${GITHUB_SHA}"
        if: "${{ github.event_name == 'push' || github.event_name == 'create' }}"
      - run: "docker push ${DOCKER_REPO}:builder"
        if: "${{ github.ref == 'refs/heads/main' }}"

  docker-push:
    name: docker-push
    runs-on: ubuntu-latest
    needs: [test, docker-build]
    if: "${{ github.event_name == 'push' || github.event_name == 'create' }}"
    permissions:
      id-token: write
      contents: read
    steps:
      - uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-region: us-east-1
          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
          role-skip-session-tagging: 'true'
      - name: Login to ECR Public
        run: 'aws ecr-public get-login-password --region us-east-1 | docker login --username AWS --password-stdin public.ecr.aws'

      - run: "docker pull ${DOCKER_REPO}:stage-${GITHUB_SHA}"

      - run: |
          docker tag ${DOCKER_REPO}:stage-${GITHUB_SHA} ${DOCKER_REPO}:${GITHUB_SHA}
          docker push ${DOCKER_REPO}:${GITHUB_SHA}
      - run: |
          docker tag ${DOCKER_REPO}:stage-${GITHUB_SHA} ${DOCKER_REPO}:latest
          docker push ${DOCKER_REPO}:latest
        if: "${{ github.ref == 'refs/heads/main' }}"
      - run: |
          TAG=$(basename "${{ github.ref }}")
          docker tag ${DOCKER_REPO}:stage-${GITHUB_SHA} ${DOCKER_REPO}:${TAG}
          docker push ${DOCKER_REPO}:${TAG}
        if: "${{ startsWith(github.ref, 'refs/tags/v') }}"