use ko to build images (#34)

.github/workflows/build-images.yaml

@@ -1,8 +1,5 @@
 name: Build docker images
 
-env:
-  DOCKER_BASE_NAME: 'ghcr.io/${{ github.repository_owner }}/cert-manager-webhook-dnsimple'
-
 on:
   workflow_call:
     inputs:
@@ -20,30 +17,32 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
 
-      - name: Set up Docker Buildx
+      - name: Setup Go
-        uses: docker/setup-buildx-action@v3
+        uses: actions/setup-go@v5
-
-      - name: Login to GHCR
-        uses: docker/login-action@v3
         with:
-          registry: ghcr.io
+          go-version-file: src/go.mod
-          password: ${{ secrets.GITHUB_TOKEN }}
+          cache-dependency-path: src/go.sum
-          username: ${{ github.repository_owner }}
 
-      - name: Format tags
+
-        id: format-tags
+      - name: Get go dependencies
-        # prepends DOCKER_BASE_NAME to every entry in the string ${{ inputs.tags }}
         run: |
-          echo "TAGS=$(printf '${{ env.DOCKER_BASE_NAME }}:%s,' ${{ inputs.tags }})" >> $GITHUB_OUTPUT
+          cd src
+          go mod download 
 
-      - name: Build and push Docker image
+
-        uses: docker/build-push-action@v5
+      - name: Setup ko
-        with:
+        # KO is a tool for building go container images https://ko.build/
-          context: .
+        uses: ko-build/setup-ko@v0.6
-          file: ./Dockerfile
+        # KO is configured to use GHCR as the registry
-          platforms: linux/amd64,linux/arm64
+
-          push: true
+
-          tags: ${{ steps.format-tags.outputs.TAGS }}
+      - name: Format tags with a comma
+        id: format-tags
+        run: echo "TAGS=$(echo ${{ inputs.tags }} | tr ' ' ',')" >> $GITHUB_OUTPUT
+
+
+      - name: Build images
+        run: |
+          cd src
+          ko build --tags="${{ steps.format-tags.outputs.TAGS }}" --platform=linux/amd64,linux/arm64 --bare --sbom=none

.github/workflows/workflow_full-test-suite.yaml

@@ -19,7 +19,7 @@ jobs:
     name: Build Docker image
     uses: ./.github/workflows/build-images.yaml
     with:
-      tags: >
+      tags: >-
         commit-${{ github.sha }}
         latest
     needs: code-test

.github/workflows/workflow_tagged-build.yaml

@@ -10,7 +10,7 @@ jobs:
     name: Build tagged Docker image
     uses: ./.github/workflows/build-images.yaml
     with:
-      tags: >
+      tags: >-
         ${{ github.ref_name }}
         commit-${{ github.sha }}
         latest

Dockerfile

@@ -1,25 +0,0 @@
-FROM golang:1.22-alpine AS build_deps
-
-RUN apk add --no-cache git
-
-WORKDIR /workspace
-ENV GO111MODULE=on
-
-COPY src/go.mod .
-COPY src/go.sum .
-
-RUN go mod download
-
-FROM build_deps AS build
-
-COPY src .
-
-RUN CGO_ENABLED=0 go build -o webhook -ldflags '-w -extldflags "-static"' .
-
-FROM alpine:3.17
-
-RUN apk add --no-cache ca-certificates
-
-COPY --from=build /workspace/webhook /usr/local/bin/webhook
-
-ENTRYPOINT ["webhook"]

src/go.mod

@@ -1,4 +1,4 @@
-module github.com/neoskop/cert-manager-webhook-dnsimple
+module github.com/puzzle/cert-manager-webhook-dnsimple
 
 go 1.22