chore: Push components

Author: tomasol

.github/workflows/push-components.yml

@@ -0,0 +1,67 @@
+name: push-components
+
+permissions:
+  contents: write
+
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "The tag to be used when pushing components to the Docker Hub."
+        required: true
+        type: string
+      ref:
+        description: "The ref (branch or SHA) to process"
+        required: true
+        type: string
+        default: "main"
+
+defaults:
+  run:
+    shell: bash -xe {0}
+
+jobs:
+  push-components:
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event.inputs.ref }} # Use the ref if provided, otherwise defaults to the current branch/commit
+
+      - uses: nixbuild/nix-quick-install-action@v34
+        with:
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+          nix_conf: |
+            extra-substituters = https://cache.garnix.io
+            extra-trusted-public-keys = cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g
+      - name: Populate the nix store
+        run: |
+          nix develop --command echo
+
+      - name: Log in to Docker Hub
+        run: |
+          echo "$DOCKER_HUB_TOKEN" | docker login -u "$DOCKER_HUB_USERNAME" --password-stdin
+        env:
+          DOCKER_HUB_USERNAME: ${{ secrets.DOCKER_HUB_USERNAME }}
+          DOCKER_HUB_TOKEN: ${{ secrets.DOCKER_HUB_TOKEN }}
+
+      - name: Run push-components.sh
+        run: |
+          nix develop --command ./scripts/push-components.sh $TAG
+        env:
+          TAG: ${{ github.event.inputs.tag }}
+
+      - name: Configure git before push
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Push obelisk-oci.toml
+        run: |
+          git add obelisk-oci.toml
+          git commit -m "chore: Bump components to $TAG"
+          git remote set-url origin https://x-access-token:${GITHUB_TOKEN}@github.com/${{ github.repository }}.git
+          git push origin ${{ github.event.inputs.ref }}
+        env:
+          TAG: ${{ github.event.inputs.tag }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

obelisk-oci.toml

@@ -0,0 +1,27 @@
+api.listening_addr = "127.0.0.1:5005"
+webui.listening_addr = "127.0.0.1:8080"
+
+[log.stdout]
+enabled = true
+
+[[activity_wasm]]
+name = "activity_fly_http"
+location.oci = "docker.io/getobelisk/components_flyio_activity_fly_http:2025-09-28@sha256:41d1e9af0a0ef46b182f459e5113f224aa9cb29af197a8d841f8a1845d708ae6"
+max_retries = 0
+exec.lock_expiry.seconds = 15
+env_vars = ["FLY_API_TOKEN"]
+forward_stdout = "stderr"
+forward_stderr = "stderr"
+
+[[webhook_endpoint]]
+name = "webhook_fly_secrets_updater"
+location.oci = "docker.io/getobelisk/components_flyio_webhook_fly_secrets_updater:2025-09-28@sha256:ce78a2bcf3c47ca7409fba65a666f81397479985b0b1796bb06cbe5a6c98dc06"
+http_server = "webhook_server"
+routes = [{ methods = ["POST"], route = "/" }]
+env_vars = ["FLY_API_TOKEN"]
+forward_stdout = "stderr"
+forward_stderr = "stderr"
+
+[[http_server]]
+name = "webhook_server"
+listening_addr = "0.0.0.0:9090"

scripts/push-components.sh

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+
+# Pushes all WASM components to the Docker Hub and updates obelisk-oci.toml
+
+set -exuo pipefail
+cd "$(dirname "$0")/.."
+
+TAG="$1"
+TOML_FILE="obelisk-oci.toml"
+PREFIX="docker.io/getobelisk/components_flyio_"
+
+push() {
+    RELATIVE_PATH=$1
+    FILE_NAME_WITHOUT_EXT=$(basename "$RELATIVE_PATH" | sed 's/\.[^.]*$//')
+    OCI_LOCATION="${PREFIX}${FILE_NAME_WITHOUT_EXT}:${TAG}"
+    echo "Pushing ${RELATIVE_PATH} to ${OCI_LOCATION}..."
+    OUTPUT=$(obelisk client component push "$RELATIVE_PATH" "$OCI_LOCATION")
+
+    # Replace the old location with the actual OCI location
+    sed -i -E "/name = \"${FILE_NAME_WITHOUT_EXT}\"/{n;s|location\.oci = \".*\"|location.oci = \"${OUTPUT}\"|}" "$TOML_FILE"
+}
+
+# Build components
+just build
+
+push "target/wasm32-wasip2/release/activity_fly_http.wasm"
+push "target/wasm32-wasip2/release/webhook_fly_secrets_updater.wasm"
+
+echo "All components pushed and TOML file updated successfully."