Add pipeline to build docker images

wultra · Jan 23, 2024 · 6d46541 · 6d46541
1 parent 347cf6a
commit 6d46541
Show file tree

Hide file tree

Showing 2 changed files with 160 additions and 2 deletions.
diff --git a/.github/workflows/publish-docker-image.yml b/.github/workflows/publish-docker-image.yml
@@ -0,0 +1,158 @@
+name: Build and deploy docker image
+
+on:
+  push:
+#  workflow_dispatch:
+#    branches:
+#      - 'develop'
+#      - 'master'
+#      - 'releases/*'
+#    inputs:
+#      version:
+#        type: string
+#        required: true
+#  pull_request:
+#    branches:
+#      - 'develop'
+#      - 'master'
+#      - 'releases/*'
+
+jobs:
+  build:
+    runs-on: 'ubuntu-latest'
+    environment: docker-publish
+    env:
+      # these are global secrets - for readonly access to artifactory
+      INTERNAL_USERNAME: ${{ secrets.JFROG_USERNAME }}
+      INTERNAL_PASSWORD: ${{ secrets.JFROG_PASSWORD }}
+    steps:
+      - uses: actions/checkout@v4
+#      - uses: actions/setup-java@v4
+#        with:
+#          java-version: '17'
+#          distribution: 'temurin'
+#          server-id: jfrog-central
+#          server-username: INTERNAL_USERNAME
+#          server-password: INTERNAL_PASSWORD
+#      - name: Set Timestamp for docker image for development branch
+#        if: github.ref == 'refs/heads/develop'
+#        run: echo "TIMESTAMP=-$(date +%Y.%m.%d)" >> $GITHUB_ENV
+      - name: Libs
+        run: |
+          cd  ${GITHUB_WORKSPACE}/deploy/lib
+          wget https://download.oracle.com/otn-pub/otn_software/jdbc/233/ojdbc11.jar
+          wget https://jdbc.postgresql.org/download/postgresql-42.7.1.jar
+      - name: Get Powerauth war files
+        run: |
+          cd ${GITHUB_WORKSPACE}/deploy/images
+          wget  https://${{ env.INTERNAL_USERNAME }}:${{ env.INTERNAL_PASSWORD }}@wultra.jfrog.io/artifactory/internal-maven-repository/io/getlime/security/powerauth-admin/${{ inputs.version }}/powerauth-admin-${{ inputs.version }}.war -O powerauth-admin.war
+          wget  https://${{ env.INTERNAL_USERNAME }}:${{ env.INTERNAL_PASSWORD }}@wultra.jfrog.io/artifactory/internal-maven-repository/io/getlime/security/powerauth-java-server/${{ inputs.version }}/powerauth-java-server-${{ inputs.version }}.war -O powerauth-java-server.war
+#          wget  https://${{ env.INTERNAL_USERNAME }}:${{ env.INTERNAL_PASSWORD }}@wultra.jfrog.io/artifactory/internal-maven-repository/io/getlime/security/powerauth-data-adapter/${{ inputs.version }}/powerauth-data-adapter-${{ inputs.version }}.war -O powerauth-data-adapter.war
+#          wget  https://${{ env.INTERNAL_USERNAME }}:${{ env.INTERNAL_PASSWORD }}@wultra.jfrog.io/artifactory/internal-maven-repository/io/getlime/security/powerauth-nextstep/${{ inputs.version }}/powerauth-nextstep-${{ inputs.version }}.war -O powerauth-nextstep.war
+#          wget  https://${{ env.INTERNAL_USERNAME }}:${{ env.INTERNAL_PASSWORD }}@wultra.jfrog.io/artifactory/internal-maven-repository/io/getlime/security/powerauth-push-server/${{ inputs.version }}/powerauth-push-server-${{ inputs.version }}.war -O powerauth-push-server.war
+#          wget  https://${{ env.INTERNAL_USERNAME }}:${{ env.INTERNAL_PASSWORD }}@wultra.jfrog.io/artifactory/internal-maven-repository/io/getlime/security/powerauth-webflow/${{ inputs.version }}/powerauth-webflow-${{ inputs.version }}.war -O powerauth-webflow.war
+#          wget  https://${{ env.INTERNAL_USERNAME }}:${{ env.INTERNAL_PASSWORD }}@wultra.jfrog.io/artifactory/internal-maven-repository/io/getlime/security/powerauth-tpp-engine/${{ inputs.version }}/powerauth-tpp-engine-${{ inputs.version }}.war -O powerauth-tpp-engine.war
+#      - name: Log in to Azure registry
+#        if: ${{ github.event_name == 'workflow_dispatch' }}
+#        uses: docker/login-action@v2
+#        with:
+#          registry: https://powerauth.azurecr.io/
+#          username: ${{ secrets.ACR_USERNAME }}
+#          password: ${{ secrets.ACR_PASSWORD }}
+      - name: "powerauth-server: Build and push container image to Azure registry"
+        uses: docker/build-push-action@v3
+        with:
+          push: false
+          platforms: linux/amd64,linux/arm64
+          tags: powerauth.azurecr.io/server:${{ inputs.version }}
+          file: ./docker-powerauth-server/Dockerfile
+          context: ${{ env.GITHUB_WORKSPACE }}
+#      - name: prepare ref to fetch liquibase files
+#        # SNAPSHOT is treated as develop branch i.e. latest
+#        run: |
+#          cd docker-powerauth-cloud
+#          PAS=`mvn help:evaluate -Dexpression=powerauth-java-server.version -q -DforceStdout`
+#          if [[ "$PAS" == *"SNAPSHOT"* ]]; then
+#            echo "to_fetch_pas=develop" >> $GITHUB_ENV
+#          else
+#            echo "to_fetch_pas=$PAS" >> $GITHUB_ENV
+#          fi
+#          ENR=`mvn help:evaluate -Dexpression=enrollment-server.version -q -DforceStdout`
+#          if [[ "$ENR" == *"SNAPSHOT"* ]]; then
+#            echo "to_fetch_enr=develop" >> $GITHUB_ENV
+#          else
+#            echo "to_fetch_enr=$ENR" >> $GITHUB_ENV
+#          fi
+#          PUSH=`mvn help:evaluate -Dexpression=powerauth-push-server.version -q -DforceStdout`
+#          if [[ "$PUSH" == *"SNAPSHOT"* ]]; then
+#            echo "to_fetch_push=develop" >> $GITHUB_ENV
+#          else
+#            echo "to_fetch_push=$PUSH" >> $GITHUB_ENV
+#          fi
+#        # run: echo "to_fetch=github.ref_name" >> $GITHUB_ENV
+#      - name: Get liquibase files from PAS
+#        uses: actions/checkout@v3
+#        with:
+#          repository: wultra/powerauth-server
+#          path: powerauth-server
+#          token: ${{ secrets.GH_PAC_PAT }}
+#          ref: ${{ env.to_fetch_pas }}
+#      - name: Get liquibase files from Enrollment Server
+#        uses: actions/checkout@v3
+#        with:
+#          repository: wultra/enrollment-server
+#          path: enrollment-server
+#          token: ${{ secrets.GH_PAC_PAT }}
+#          ref: ${{ env.to_fetch_enr }}
+#      - name: Get liquibase files from Push Server
+#        uses: actions/checkout@v3
+#        with:
+#          repository: wultra/powerauth-push-server
+#          path: powerauth-push-server
+#          token: ${{ secrets.GH_PAC_PAT }}
+#          ref: ${{ env.to_fetch_push }}
+#      - name: Copy liquibase files
+#        run: docker-powerauth-cloud/copy_liquibase.sh
+#      - name: Set up QEMU
+#        uses: docker/setup-qemu-action@v2
+#      - name: Set up Docker Buildx
+#        uses: docker/setup-buildx-action@v2
+#        with:
+#          install: true
+#      - name: Log in to JFrog registry
+#        if: ${{ github.event_name == 'workflow_dispatch' && inputs.jfrog_deploy == true }}
+#        uses: docker/login-action@v2
+#        with:
+#          registry: https://wultra.jfrog.io/
+#          username: ${{ secrets.JFROG_CONTAINER_REGISTRY_USERNAME }}
+#          password: ${{ secrets.JFROG_CONTAINER_REGISTRY_PASSWORD }}
+#      - name: Build and push container image to registry
+#        if: ${{ github.event_name == 'workflow_dispatch' && inputs.jfrog_deploy == true }}
+#        uses: docker/build-push-action@v3
+#        with:
+#          push: ${{ github.event_name == 'workflow_dispatch' && inputs.jfrog_deploy == true }}
+#          platforms: linux/amd64,linux/arm64
+#          tags: wultra.jfrog.io/wultra-docker/powerauth-cloud:${{ env.REVISION }}${{ env.TIMESTAMP }}
+#          file: ./docker-powerauth-cloud/Dockerfile
+#          context: .
+#      - name: Log in to Azure registry
+#        if: ${{ github.event_name == 'workflow_dispatch' }}
+#        uses: docker/login-action@v2
+#        with:
+#          registry: https://powerauth.azurecr.io/
+#          username: ${{ secrets.ACR_USERNAME }}
+#          password: ${{ secrets.ACR_PASSWORD }}
+#      - name: Build and push container image to Azure registry
+#        uses: docker/build-push-action@v3
+#        with:
+#          push: ${{ github.event_name == 'workflow_dispatch' }}
+#          platforms: linux/amd64,linux/arm64
+#          tags: powerauth.azurecr.io/powerauth-cloud:${{ env.REVISION }}${{ env.TIMESTAMP }}-${{ github.sha }}
+#          file: ./docker-powerauth-cloud/Dockerfile
+#          context: .
+#      - if: ${{ github.event_name == 'workflow_dispatch' }}
+#        run: |
+#          echo '### 🚀 Published images' >> $GITHUB_STEP_SUMMARY
+#          echo 'powerauth.azurecr.io/powerauth-cloud:${{ env.REVISION }}${{ env.TIMESTAMP }}-${{ github.sha }}' >> $GITHUB_STEP_SUMMARY
+#      - if: ${{ github.event_name == 'workflow_dispatch' && inputs.jfrog_deploy == true }}
+#        run: echo 'wultra.jfrog.io/wultra-docker/powerauth-cloud:${{ env.REVISION }}${{ env.TIMESTAMP }}' >> $GITHUB_STEP_SUMMARY
diff --git a/docker-powerauth-server/Dockerfile b/docker-powerauth-server/Dockerfile
@@ -1,4 +1,4 @@
-FROM tomcat:10.1.15-jdk17-temurin-jammy@sha256:b59a28630efc10589c45994471264f9c0e29ee381d4f0d50a8eac1d68a076746
+FROM tomcat:10.1.18-jre17-temurin-jammy@sha256:72c0b86b3f9b9d2a2d763be9ac8f13f03aec99be5a2122c63e4edf0dd93f8904
 LABEL maintainer="[email protected]"
 
 # Prepare environment variables
@@ -10,7 +10,7 @@ RUN rm -rf $TOMCAT_HOME/webapps/*
 
 # Copy libraries
 ADD deploy/lib/ojdbc11.jar $TOMCAT_HOME/lib/
-ADD deploy/lib/postgresql.jar $TOMCAT_HOME/lib/
+ADD deploy/lib/postgresql*.jar $TOMCAT_HOME/lib/
 
 # Deploy and run applications
 ADD deploy/conf/powerauth-java-server.xml $TOMCAT_HOME/conf/Catalina/localhost/