mirror of
https://github.com/taylanbakircioglu/flowfish.git
synced 2026-09-21 10:03:21 +00:00
taylanbakircioglu
575f8dcda1
One matrix job intermittently failed at the login step with 'Get "https://registry-1.docker.io/v2/": context deadline exceeded' while sibling jobs authenticated fine with the same secrets — a transient network blip, not a credentials problem. Replace docker/login-action with a `docker login --password-stdin` retry loop (5 attempts, 10s backoff) so transient failures self-heal.
88 lines
3.1 KiB
YAML
88 lines
3.1 KiB
YAML
name: Build and Push Docker Images
|
|
|
|
on:
|
|
push:
|
|
branches: ["main"]
|
|
workflow_dispatch:
|
|
|
|
env:
|
|
DOCKERHUB_REPO: taylanbakircioglu/flowfish
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- service: backend
|
|
dockerfile: backend/Dockerfile
|
|
- service: frontend
|
|
dockerfile: frontend/Dockerfile.production
|
|
- service: api-gateway
|
|
dockerfile: services/api-gateway/Dockerfile
|
|
- service: ingestion-service
|
|
dockerfile: services/ingestion-service/Dockerfile
|
|
- service: cluster-manager
|
|
dockerfile: services/cluster-manager/Dockerfile
|
|
- service: timeseries-writer
|
|
dockerfile: services/timeseries-writer/Dockerfile
|
|
- service: timeseries-query
|
|
dockerfile: services/timeseries-query/Dockerfile
|
|
- service: graph-writer
|
|
dockerfile: services/graph-writer/Dockerfile
|
|
- service: graph-query
|
|
dockerfile: services/graph-query/Dockerfile
|
|
- service: analysis-orchestrator
|
|
dockerfile: services/analysis-orchestrator/Dockerfile
|
|
- service: l7-ingestion-service
|
|
dockerfile: services/l7-ingestion-service/Dockerfile
|
|
- service: flowfish-l7-collector
|
|
dockerfile: services/flowfish-l7-collector/Dockerfile
|
|
- service: change-worker
|
|
dockerfile: backend/Dockerfile.worker
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Generate version tag
|
|
id: version
|
|
run: echo "TAG=$(date +'%Y%m%d.%H%M')-${GITHUB_SHA::7}" >> $GITHUB_OUTPUT
|
|
|
|
- name: Login to Docker Hub
|
|
env:
|
|
DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
run: |
|
|
# Retry to tolerate transient docker.io timeouts, e.g.
|
|
# 'Get "https://registry-1.docker.io/v2/": context deadline exceeded'.
|
|
# Credentials are written to ~/.docker/config.json, which buildx
|
|
# (docker/build-push-action) reads for the push.
|
|
for attempt in 1 2 3 4 5; do
|
|
if echo "$DOCKERHUB_TOKEN" | docker login -u "$DOCKERHUB_USERNAME" --password-stdin; then
|
|
echo "Logged in to Docker Hub on attempt $attempt"
|
|
exit 0
|
|
fi
|
|
echo "Docker Hub login attempt $attempt failed; retrying in 10s..."
|
|
sleep 10
|
|
done
|
|
echo "::error::Docker Hub login failed after 5 attempts"
|
|
exit 1
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Build & Push ${{ matrix.service }}
|
|
uses: docker/build-push-action@v6
|
|
with:
|
|
context: .
|
|
file: ./${{ matrix.dockerfile }}
|
|
platforms: linux/amd64,linux/arm64
|
|
push: true
|
|
tags: |
|
|
${{ env.DOCKERHUB_REPO }}:${{ matrix.service }}-latest
|
|
${{ env.DOCKERHUB_REPO }}:${{ matrix.service }}-${{ steps.version.outputs.TAG }}
|
|
cache-from: type=gha,scope=${{ matrix.service }}
|
|
cache-to: type=gha,mode=max,scope=${{ matrix.service }}
|