docker.yml

name: Docker

on:
  push:
    branches:
      - main
    tags:
      - v*
  pull_request:
    branches:
      - '*'

jobs:
  docker:
    runs-on: ubuntu-latest
    steps:
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Get Secrets
        if: github.event_name != 'pull_request'
        uses: grafana/shared-workflows/actions/get-vault-secrets@main
        with:
          # Secrets placed in the ci/common/<path> path in Vault
          common_secrets: |
            DOCKERHUB_USERNAME=dockerhub:username
            DOCKERHUB_TOKEN=dockerhub:password
      - name: Login to Docker Hub
        uses: docker/login-action@v3
        if: github.event_name != 'pull_request'
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - id: docker_tag
        run: echo "DOCKER_TAG=${GITHUB_REF_NAME#v}" >> "$GITHUB_ENV"
      - name: Build and push
        uses: docker/build-push-action@v5
        with:
          push: github.event_name != 'pull_request'
          platforms: linux/amd64,linux/arm64
          tags: |
            grafana/tanka:${{ env.DOCKER_TAG }}
            {{ github.event_name == 'push' && github.ref == 'refs/heads/main' && 'grafana/tanka:latest' || ''}}