mirror of
https://github.com/bitwarden/server
synced 2025-12-24 20:23:21 +00:00
72 lines
2.1 KiB
YAML
72 lines
2.1 KiB
YAML
name: Container registry cleanup
|
|
|
|
on:
|
|
pull_request:
|
|
types: [closed]
|
|
|
|
env:
|
|
_AZ_REGISTRY: "bitwardenprod.azurecr.io"
|
|
|
|
jobs:
|
|
build-docker:
|
|
name: Remove branch-specific Docker images
|
|
runs-on: ubuntu-22.04
|
|
permissions:
|
|
id-token: write
|
|
steps:
|
|
- name: Log in to Azure
|
|
uses: bitwarden/gh-actions/azure-login@main
|
|
with:
|
|
subscription_id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
|
|
tenant_id: ${{ secrets.AZURE_TENANT_ID }}
|
|
client_id: ${{ secrets.AZURE_CLIENT_ID }}
|
|
|
|
- name: Log in to Azure ACR
|
|
run: az acr login -n $_AZ_REGISTRY --only-show-errors
|
|
|
|
########## Remove Docker images ##########
|
|
- name: Remove the Docker image from ACR
|
|
env:
|
|
REF: ${{ github.event.pull_request.head.ref }}
|
|
SERVICES: |
|
|
services:
|
|
- Admin
|
|
- Api
|
|
- Attachments
|
|
- Events
|
|
- EventsProcessor
|
|
- Icons
|
|
- Identity
|
|
- K8S-Proxy
|
|
- MsSql
|
|
- Nginx
|
|
- Notifications
|
|
- Server
|
|
- Setup
|
|
- Sso
|
|
run: |
|
|
for SERVICE in $(echo "${{ env.SERVICES }}" | yq e ".services[]" - )
|
|
do
|
|
SERVICE_NAME=$(echo $SERVICE | awk '{print tolower($0)}')
|
|
IMAGE_TAG=$(echo "${REF}" | sed "s#/#-#g") # slash safe branch name
|
|
|
|
echo "[*] Checking if remote exists: $_AZ_REGISTRY/$SERVICE_NAME:$IMAGE_TAG"
|
|
TAG_EXISTS=$(
|
|
az acr repository show-tags --name $_AZ_REGISTRY --repository $SERVICE_NAME \
|
|
| jq --arg $TAG "$IMAGE_TAG" -e '. | any(. == "$TAG")'
|
|
)
|
|
|
|
if [[ "$TAG_EXISTS" == "true" ]]; then
|
|
echo "[*] Tag exists. Removing tag"
|
|
az acr repository delete --name $_AZ_REGISTRY --image $SERVICE_NAME:$IMAGE_TAG --yes
|
|
else
|
|
echo "[*] Tag does not exist. No action needed"
|
|
fi
|
|
done
|
|
|
|
- name: Log out of Docker
|
|
run: docker logout
|
|
|
|
- name: Log out from Azure
|
|
uses: bitwarden/gh-actions/azure-logout@main
|