add fake service account #38
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build, Test, and Publish Docker Image RSLEARN | |
| on: # TODO: Only run on pull request or push to main | |
| push: | |
| branches: | |
| - henryh/setup_github_actions | |
| env: | |
| REGISTRY: ghcr.io | |
| IMAGE_NAME: ${{ github.repository }} | |
| SERVICE_NAME: "rslearn_projects" | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| outputs: | |
| ghcr_docker_image: ${{ steps.image-names.outputs.ghcr_image_name }} | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Log in to the Container registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ${{ env.REGISTRY }} | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Extract metadata (tags, labels) for Docker | |
| id: meta | |
| uses: docker/metadata-action@v5 | |
| with: | |
| images: | | |
| ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} | |
| tags: | | |
| type=sha,format=long | |
| type=sha,format=short | |
| type=raw,value=latest,enable={{is_default_branch}} | |
| - name: Build and push Docker image | |
| id: build-push | |
| uses: docker/build-push-action@v6 | |
| with: | |
| context: . | |
| push: true | |
| tags: ${{ steps.meta.outputs.tags }} | |
| labels: ${{ steps.meta.outputs.labels }} | |
| - name: Set Environment Variables | |
| run: | | |
| echo "TEST_BUCKET=test-bucket" >> $GITHUB_ENV | |
| echo "TEST_PREFIX=tests/" | |
| - name: Store Image Names | |
| # We need the docker image name downstream in test & deploy. This saves the full docker image names to outputs | |
| id: image-names | |
| run: |- | |
| GHCR_IMAGE="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build-push.outputs.digest }}" | |
| GHCR_IMAGE=`echo ${GHCR_IMAGE} | tr '[:upper:]' '[:lower:]'` # docker requires that all image names be lowercase | |
| echo "ghcr.io Docker image name is ${GHCR_IMAGE}" | |
| echo "ghcr_image_name=\"${GHCR_IMAGE}\"" >> $GITHUB_OUTPUT | |
| test: | |
| needs: build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Log in to the Container registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ${{ env.REGISTRY }} | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Pull the latest image | |
| run: | | |
| docker pull ${{ needs.build.outputs.ghcr_docker_image }} | |
| - name: Set Environment Variables | |
| run: | | |
| echo "TEST_BUCKET=test-bucket" >> $GITHUB_ENV | |
| echo "TEST_PREFIX=tests/" >> $GITHUB_ENV | |
| echo "STORAGE_EMULATOR_HOST=http://localhost:4443" >> $GITHUB_ENV | |
| - name: Run Unit Tests | |
| run: | | |
| docker run --rm ${{ needs.build.outputs.ghcr_docker_image }} pytest -n auto tests/ --ignore tests/integration/ -vv | |
| - name: Build docker images | |
| run: | | |
| ls -la && COMPOSE_DOCKER_CLI_BUILD=1 DOCKER_BUILDKIT=1 docker compose -f docker-compose.yaml build | |
| - name: Run Integration Tests | |
| run: | | |
| docker compose up -d --wait --quiet-pull | |
| sleep 10 | |
| curl http://0.0.0.0:4443/storage/v1/b/test-bucket | |
| docker run --rm \ | |
| -e TEST_BUCKET=${{ env.TEST_BUCKET }} \ | |
| -e TEST_PREFIX=${{ env.TEST_PREFIX }} \ | |
| -e STORAGE_EMULATOR_HOST=${{ env.STORAGE_EMULATOR_HOST }} \ | |
| -e AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }} \ | |
| -e AWS_SECRET_ACCESS_KEY=${{ secrets.AWS_SECRET_ACCESS_KEY }} \ | |
| -e AWS_DEFAULT_REGION=${{ secrets.AWS_DEFAULT_REGION }} \ | |
| --network host \ | |
| ${{ needs.build.outputs.ghcr_docker_image }} \ | |
| pytest tests/integration/data_sources/test_aws_landsat.py -k test_gcs | |
| - name: Clean up | |
| if: always() | |
| run: | | |
| docker image prune -f |