build: add workflow that publish image to harbor

Author: zeidlitz

.github/workflows/push-image.yaml

@@ -0,0 +1,48 @@
+name: Build and push bpctl image
+
+on:
+  push:
+    branches: [ main ]
+    tags: [ "v*" ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout source
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Harbor
+        uses: docker/login-action@v3
+        with:
+          registry: harbor.nbis.se
+          username: ${{ secrets.HARBOR_USERNAME }}
+          password: ${{ secrets.HARBOR_PASSWORD }}
+
+      - name: Extract version
+        id: version
+        run: |
+          if [[ "${GITHUB_REF_TYPE}" == "tag" ]]; then
+            echo "version=${GITHUB_REF_NAME}" >> "$GITHUB_OUTPUT"
+          else
+            echo "version=dev-${GITHUB_SHA::7}" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Build and push image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Containerfile
+          push: true
+          build-args: |
+            VERSION=${{ steps.version.outputs.version }}
+          tags: |
+            harbor.nbis.se/myproject/bpctl:${{ steps.version.outputs.version }}
+            harbor.nbis.se/myproject/bpctl:latest

Containerfile

@@ -1,10 +1,12 @@
 # Buld stage
 FROM golang:1.24 AS builder
+ARG VERSION=dev
 WORKDIR /app
 COPY go.mod go.sum ./
 RUN go mod download
 COPY . .
-RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o bpctl .
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 \
+    go build -ldflags "-X main.version=${VERSION}" -o bpctl .
 
 # Run stage
 FROM gcr.io/distroless/cc:nonroot

helpers/templates/job.template.yaml

@@ -101,14 +101,14 @@ spec:
           volumeMounts:
             - name: data-volume
               mountPath: /data
-            - name: xml-data
+            - name: xml-data-{{ .JobName }}
               mountPath: /data/xml-data/
             - name: tls
               mountPath: /.secrets/tls/
       volumes:
         - name: data-volume
           emptyDir: {}
-        - name: xml-data
+        - name: xml-data-{{ .JobName }}
           secret:
             defaultMode: 288
             secretName: {{ .MailXmlSecretName }}