Publish release artifacts (docker images, helm chart) to GHCR

Author: amuraru

.github/workflows/build-push-docker.yml

@@ -1,14 +1,32 @@
-name: build-publish-docker-image
+name: release
 
 on:
   push:
     tags:
       - '*'
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  # GitHub Container Registry
+  GHCR_REGISTRY: ghcr.io
+  # github.repository as <account>/<repo>
+  GHCR_IMAGE_NAME: ${{ github.repository }}
+  # Docker Hub image names
+  DOCKERHUB_ZK_IMAGE: adobe/zookeeper
+  DOCKERHUB_OPERATOR_IMAGE: adobe/zookeeper-operator
+
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
       - name: Set up Go 1.25
         uses: actions/setup-go@v2
         with:
@@ -18,7 +36,6 @@ jobs:
         run: |
           sudo ln -sf `which go` `sudo which go` || true
           sudo go version
-      - uses: actions/checkout@v2
       - name: get go version
         run: go version
       - name: Gofmt and License checks
@@ -27,58 +44,112 @@ jobs:
         run: make test
       - name: Get tag name
         id: vars
+        run: echo "tag=${GITHUB_REF:10}" >> $GITHUB_OUTPUT
+      - name: Set Release Date
         run: |
-          ref=${GITHUB_REF:10}
-          ref="${ref////-}"
-          echo $ref
-          echo ::set-output name=tag::$ref
-          echo ::set-output name=created::$(date -u +'%Y-%m-%dT%H:%M:%SZ')
+          echo "BUILT_AT=$(date --rfc-3339=date)" >> ${GITHUB_ENV}
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
-      - name: Login to DockerHub
-        if: startsWith(github.ref, 'refs/tags/')
+      # Login against Docker Hub
+      - name: Login to DockerHub Registry
         uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
+      # Login against GitHub Container Registry
+      - name: Log into GitHub Container Registry ${{ env.GHCR_REGISTRY }}
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.GHCR_REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
+      # Extract metadata for zookeeper Apache image
+      - name: Extract Docker metadata for zookeeper Apache
+        if: ${{ startsWith(github.ref, 'refs/tags/zk') }}
+        id: meta-zk-apache
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            ${{ env.DOCKERHUB_ZK_IMAGE }}
+            ${{ env.GHCR_REGISTRY }}/${{ env.GHCR_IMAGE_NAME }}/zookeeper
+          tags: |
+            type=raw,value=3.8.4-apache-${{ steps.vars.outputs.tag }}
       - name: Build and push zookeeper Apache image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         if: ${{ startsWith(github.ref, 'refs/tags/zk') }}
         with:
           context: docker/zookeeper-image
           platforms: linux/amd64,linux/arm64
-          tags: adobe/zookeeper:3.8.4-apache-${{ steps.vars.outputs.tag }}
+          tags: ${{ steps.meta-zk-apache.outputs.tags }}
+          labels: ${{ steps.meta-zk-apache.outputs.labels }}
           push: ${{ startsWith(github.ref, 'refs/tags/zk') }}
-          labels: |
-            org.opencontainers.image.source=${{ github.event.repository.html_url }}
-            org.opencontainers.image.created=${{ steps.prep.outputs.created }}
-            org.opencontainers.image.revision=${{ github.sha }}
 
+      # Extract metadata for zookeeper image
+      - name: Extract Docker metadata for zookeeper
+        if: ${{ !startsWith(github.ref, 'refs/tags/zk') }}
+        id: meta-zk
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            ${{ env.DOCKERHUB_ZK_IMAGE }}
+            ${{ env.GHCR_REGISTRY }}/${{ env.GHCR_IMAGE_NAME }}/zookeeper
+          tags: |
+            type=raw,value=3.8.4-${{ steps.vars.outputs.tag }}
       - name: Build and push zookeeper image
         if: ${{ !startsWith(github.ref, 'refs/tags/zk') }}
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: docker
           platforms: linux/amd64,linux/arm64
-          tags: adobe/zookeeper:3.8.4-${{ steps.vars.outputs.tag }}
+          tags: ${{ steps.meta-zk.outputs.tags }}
+          labels: ${{ steps.meta-zk.outputs.labels }}
           push: ${{ startsWith(github.ref, 'refs/tags/') && !startsWith(github.ref, 'refs/tags/zk') }}
-          labels: |
-            org.opencontainers.image.source=${{ github.event.repository.html_url }}
-            org.opencontainers.image.created=${{ steps.prep.outputs.created }}
-            org.opencontainers.image.revision=${{ github.sha }}
 
+      # Extract metadata for zookeeper-operator image
+      - name: Extract Docker metadata for zookeeper-operator
+        if: ${{ !startsWith(github.ref, 'refs/tags/zk') }}
+        id: meta-operator
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            ${{ env.DOCKERHUB_OPERATOR_IMAGE }}
+            ${{ env.GHCR_REGISTRY }}/${{ env.GHCR_IMAGE_NAME }}
+          tags: |
+            type=ref,event=tag
       - name: Build and push zookeeper-operator image
         if: ${{ !startsWith(github.ref, 'refs/tags/zk') }}
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
-          tags: adobe/zookeeper-operator:${{ steps.vars.outputs.tag }}
+          platforms: linux/amd64,linux/arm64
+          build-args: |
+            VERSION=${{ fromJSON(steps.meta-operator.outputs.json).labels['org.opencontainers.image.version'] }}
+            BUILT_AT=${{ env.BUILT_AT }}
+            GIT_SHA=${{ github.sha }}
+          tags: ${{ steps.meta-operator.outputs.tags }}
+          labels: ${{ steps.meta-operator.outputs.labels }}
           push: ${{ startsWith(github.ref, 'refs/tags/') && !startsWith(github.ref, 'refs/tags/zk') }}
-          labels: |
-            org.opencontainers.image.source=${{ github.event.repository.html_url }}
-            org.opencontainers.image.created=${{ steps.prep.outputs.created }}
-            org.opencontainers.image.revision=${{ github.sha }}
+
+      # Update Helm Chart version
+      - name: Update Chart.yaml version
+        if: ${{ !startsWith(github.ref, 'refs/tags/zk') }}
+        run: |
+          sed -i "s/^version:.*/version: \"${{ steps.vars.outputs.tag }}\"/" charts/zookeeper-operator/Chart.yaml
+          sed -i "s/^appVersion:.*/appVersion: \"${{ steps.vars.outputs.tag }}\"/" charts/zookeeper-operator/Chart.yaml
+      # Push Helm Chart to GitHub Container Registry
+      - name: Push Helm Chart to GHCR
+        if: ${{ !startsWith(github.ref, 'refs/tags/zk') }}
+        uses: appany/[email protected]
+        with:
+          name: zookeeper-operator
+          repository: ${{ github.repository_owner }}/zookeeper-operator
+          tag: ${{ steps.vars.outputs.tag }}
+          path: charts/zookeeper-operator
+          registry: ${{ env.GHCR_REGISTRY }}
+          registry_username: ${{ github.actor }}
+          registry_password: ${{ secrets.GITHUB_TOKEN }}
+          update_dependencies: 'true'