Merge pull request #31 from mconf/ci-portal-updates-for-dockerfile

[OPS-985] Portal updates for dockerfile

Author: daronco

.github/workflows/all-build-push-image.yml

@@ -25,6 +25,11 @@ on:
         required: false
         type: string
         default: 'linux/amd64'
+      build_target:
+        description: 'Docker build target stage (optional, defaults to last stage)'
+        required: false
+        type: string
+        default: ''
       runs-on:
         type: string
         required: false
@@ -105,6 +110,7 @@ jobs:
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+          target: ${{ inputs.build_target }}
           cache-from: |
             type=gha,scope=${{ inputs.image_name }}
             type=registry,ref=${{ inputs.registry }}/${{ inputs.organization }}/${{ inputs.image_name }}:buildcache,image-manifest=true

.github/workflows/portal-ruby-lint.yml

@@ -29,3 +29,7 @@ jobs:
         run: bundle exec rubocop -l -f github --config .rubocop.yml
       - name: Lint HAML files
         run: bundle exec haml-lint -c .haml-lint.yml app/views
+      - name: Lint Dockerfile
+        uses: hadolint/hadolint-action@v3.3.0
+        with:
+          dockerfile: Dockerfile

README.md

@@ -136,6 +136,7 @@ Workflows may require the following secrets (configured in your repository):
 - `SSH_PRIVATE_KEY`: SSH key for accessing private Git repositories
 - `HARBOR_USERNAME`: Harbor registry username
 - `HARBOR_PASSWORD`: Harbor registry password
+- `DOCKERHUB_USERNAME`: DockerHub username
 - `DOCKERHUB_PASSWORD`: DockerHub password
 - `REGISTRY_ACCESS_TOKEN`: DockerHub access token for pushing images (will be deprecated in favor of `DOCKERHUB_PASSWORD`)
 - `TRIVY_EXPLORER_AUTH_TOKEN`: Authentication for Trivy Explorer

examples/all-build-push-image.yml

@@ -17,6 +17,7 @@ jobs:
       registry: registry.example.com
       # dockerfile_path (optional): Path to Dockerfile (default: ./Dockerfile)
       # platforms (optional): Target platforms (default: linux/amd64)
+      # build_target (optional): Docker build target stage (default: last stage)
       # runs-on (optional): Runner to use (default: ["self-hosted", "ubuntu-22.04"])
     secrets: inherit
     # Required secrets: