November 2025 212 #1861
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Main workflow | |
| on: | |
| push: | |
| branches: | |
| - 'dev-v*' | |
| - 'release-v*' | |
| pull_request: | |
| branches: | |
| - 'dev-v*' | |
| - 'release-v*' | |
| jobs: | |
| validate: | |
| permissions: | |
| contents: read | |
| id-token: write | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 | |
| container: | |
| image: rancher/dapper:v0.6.0 | |
| steps: | |
| - name: Force Install GIT latest | |
| run: | | |
| apk add git --update-cache | |
| git --version | |
| git config --global --add safe.directory "$GITHUB_WORKSPACE" | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Validate | |
| run: dapper ci | |
| mirror-images: | |
| permissions: | |
| contents: read | |
| id-token: write | |
| runs-on: ubuntu-latest | |
| needs: validate | |
| container: | |
| image: rancher/dapper:v0.6.0 | |
| if: github.event_name == 'push' && startsWith(github.ref_name, 'release-v') | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Retrieve Registy secrets from vault | |
| uses: rancher-eio/read-vault-secrets@main | |
| with: | |
| secrets: | | |
| secret/data/github/repo/${{ github.repository }}/registry-endpoint/credentials token | REGISTRY_ENDPOINT ; | |
| secret/data/github/repo/${{ github.repository }}/registry-username/credentials token | REGISTRY_USERNAME ; | |
| secret/data/github/repo/${{ github.repository }}/registry-password/credentials token | REGISTRY_PASSWORD | |
| - name: Validate | |
| run: dapper mirror-images | |
| upload: | |
| permissions: | |
| contents: read | |
| id-token: write | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| needs: validate | |
| if: github.event_name == 'push' | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Retrieve Google auth from vault | |
| uses: rancher-eio/read-vault-secrets@main | |
| with: | |
| secrets: | | |
| secret/data/github/repo/${{ github.repository }}/google-auth/rancher/credentials token | GOOGLE_AUTH ; | |
| - name: Authenticate with Google Cloud | |
| uses: 'google-github-actions/auth@v2' | |
| with: | |
| credentials_json: '${{ env.GOOGLE_AUTH }}' | |
| - name: Upload to Google Cloud Storage | |
| uses: google-github-actions/upload-cloud-storage@v2 | |
| with: | |
| path: data/ | |
| destination: releases.rancher.com/kontainer-driver-metadata/${{ github.ref_name }} | |
| parent: false | |
| predefinedAcl: publicRead | |
| process_gcloudignore: false | |
| headers: |- | |
| cache-control: public,no-cache,proxy-revalidate |