mirror of
https://github.com/bitwarden/server.git
synced 2024-11-29 13:25:17 +01:00
65 lines
2.0 KiB
YAML
65 lines
2.0 KiB
YAML
name: Container registry cleanup
|
|
|
|
on:
|
|
pull_request:
|
|
types: [closed]
|
|
|
|
env:
|
|
_AZ_REGISTRY: "bitwardenprod.azurecr.io"
|
|
|
|
jobs:
|
|
build-docker:
|
|
name: Remove branch-specific Docker images
|
|
runs-on: ubuntu-22.04
|
|
steps:
|
|
- name: Log in to Azure - production subscription
|
|
uses: Azure/login@e15b166166a8746d1a47596803bd8c1b595455cf # v1.6.0
|
|
with:
|
|
creds: ${{ secrets.AZURE_PROD_KV_CREDENTIALS }}
|
|
|
|
- name: Log in to Azure ACR
|
|
run: az acr login -n $_AZ_REGISTRY --only-show-errors
|
|
|
|
########## Remove Docker images ##########
|
|
- name: Remove the Docker image from ACR
|
|
env:
|
|
REF: ${{ github.event.pull_request.head.ref }}
|
|
SERVICES: |
|
|
services:
|
|
- Admin
|
|
- Api
|
|
- Attachments
|
|
- Events
|
|
- EventsProcessor
|
|
- Icons
|
|
- Identity
|
|
- K8S-Proxy
|
|
- MsSql
|
|
- Nginx
|
|
- Notifications
|
|
- Server
|
|
- Setup
|
|
- Sso
|
|
run: |
|
|
for SERVICE in $(echo "${{ env.SERVICES }}" | yq e ".services[]" - )
|
|
do
|
|
SERVICE_NAME=$(echo $SERVICE | awk '{print tolower($0)}')
|
|
IMAGE_TAG=$(echo "${REF}" | sed "s#/#-#g") # slash safe branch name
|
|
|
|
echo "[*] Checking if remote exists: $_AZ_REGISTRY/$SERVICE_NAME:$IMAGE_TAG"
|
|
TAG_EXISTS=$(
|
|
az acr repository show-tags --name $_AZ_REGISTRY --repository $SERVICE_NAME \
|
|
| jq --arg $TAG "$IMAGE_TAG" -e '. | any(. == "$TAG")'
|
|
)
|
|
|
|
if [[ "$TAG_EXISTS" == "true" ]]; then
|
|
echo "[*] Tag exists. Removing tag"
|
|
az acr repository delete --name $_AZ_REGISTRY --image $SERVICE_NAME:$IMAGE_TAG --yes
|
|
else
|
|
echo "[*] Tag does not exist. No action needed"
|
|
fi
|
|
done
|
|
|
|
- name: Log out of Docker
|
|
run: docker logout
|