fix: build and release

.github/workflows/docker-build.yml

@@ -14,44 +14,65 @@ jobs:
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
 
-      - name: Validate Conventional Commit
+      - name: Validate Conventional Commit (subject line only)
         id: validate
         run: |
-          if git log -1 --pretty=%B | grep -Eq "^(feat|fix|docs|style|refactor|perf|test|chore|build|ci|revert)(\(.+\))?: .+"; then
+          SUBJECT="$(git log -1 --pretty=%s)"
-            echo "valid=true" >> $GITHUB_OUTPUT
+          echo "Commit subject: $SUBJECT"
+          if echo "$SUBJECT" | grep -Eq '^(feat|fix|docs|style|refactor|perf|test|chore|build|ci|revert)(\(.+\))?: .+'; then
+            echo "valid=true" >> "$GITHUB_OUTPUT"
           else
-            echo "valid=false" >> $GITHUB_OUTPUT
+            echo "valid=false" >> "$GITHUB_OUTPUT"
           fi
 
       - name: Stop if not a Conventional Commit
-        if: ${{ steps.validate.outputs.valid == 'false' }}
+        if: ${{ steps.validate.outputs.valid != 'true' }}
         run: |
           echo "Latest commit is not a valid Conventional Commit. Skipping build."
           exit 0
 
-      - name: Docker Login
+      - name: Log in to registry
-        env:
+        if: ${{ steps.validate.outputs.valid == 'true' }}
-          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+        uses: docker/login-action@v3
-          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
-        run: |
-          echo "$DOCKER_PASSWORD" | docker login $DOCKER_REGISTRY -u "$DOCKER_USERNAME" --password-stdin
-
-      - name: Build Docker Image
-        run: |
-          docker build -t "$DOCKER_REGISTRY/$DOCKER_IMAGE:latest" .
-
-      - name: Push Docker Image
-        run: |
-          docker push "$DOCKER_REGISTRY/$DOCKER_IMAGE:latest"
-
-      - name: Trigger Kubernetes Redeployment
-        uses: docker://alpine/kubectl:1.34.1
-        env:
-          KUBECONFIG: ${{ secrets.KUBECONFIG }}
         with:
-          args: >
+          registry: ${{ env.DOCKER_REGISTRY }}
-            patch deployment tap-frontend -n frontend
+          username: ${{ secrets.DOCKER_USERNAME }}
-            -p '{"spec":{"template":{"metadata":{"annotations":{"kubectl.kubernetes.io/restartedAt":"'"$(date -u +'%Y-%m-%dT%H:%M:%SZ')"'"}}}}}'
+          password: ${{ secrets.DOCKER_PASSWORD }}
-            && kubectl rollout status deployment tap-frontend -n frontend --timeout=120s
+
+      - name: Set up Docker Buildx
+        if: ${{ steps.validate.outputs.valid == 'true' }}
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build and push
+        if: ${{ steps.validate.outputs.valid == 'true' }}
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: ${{ env.DOCKER_REGISTRY }}/${{ env.DOCKER_IMAGE }}:latest
+          provenance: false  # avoids warnings on some registries
+
+      - name: Install kubectl
+        if: ${{ steps.validate.outputs.valid == 'true' }}      
+        uses: azure/setup-kubectl@v4
+        with:
+          version: v1.34.1
+
+      - name: Write kubeconfig
+        if: ${{ steps.validate.outputs.valid == 'true' }}      
+        run: |
+          umask 077
+          echo "${{ secrets.KUBECONFIG }}" > kubeconfig
+
+      - name: Restart deployment and wait
+        if: ${{ steps.validate.outputs.valid == 'true' }}
+        env:
+          KUBECONFIG: ${{ github.workspace }}/kubeconfig
+        run: |
+          set -euo pipefail
+          kubectl -n frontend rollout restart deployment/tap-frontend
+          kubectl -n frontend rollout status deployment/tap-frontend --timeout=180s