ecrbuild-all.yml

# Based on https://docs.github.com/en/actions/deployment/deploying-to-your-cloud-provider/deploying-to-amazon-elastic-container-service

name: docker build to ECR

on:
    workflow_call:
        secrets:
            AWS_ACCESS_KEY_ID:
                required: true
            AWS_SECRET_ACCESS_KEY:
                required: true
        inputs:
            publish_to_ghcr:
                type: boolean
                default: false
        outputs:
            core-image:
                description: "Core image SHA"
                value: ${{ jobs.build-core.outputs.image-sha}}
            base-image:
                description: "Base image SHA"
                value: ${{ jobs.build-base.outputs.image-sha }}
            jobs-image:
                description: "Jobs image SHA"
                value: ${{ jobs.build-jobs.outputs.image-sha }}

jobs:
    emit-sha-tag:
        name: Emit container tag sha
        runs-on: ubuntu-latest
        steps:
            - name: Checkout
              uses: actions/checkout@v4
            - name: Get image tag
              id: label
              run: |
                  sha_short=$(git describe --always --abbrev=40 --dirty)
                  echo "Building containers with tag:"
                  echo "$sha_short"

    build-base:
        uses: ./.github/workflows/ecrbuild-template.yml
        with:
            publish_to_ghcr: ${{ inputs.publish_to_ghcr }}
            ghcr_image_name: platform-migrations
        secrets:
            AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
            AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}

    build-core:
        uses: ./.github/workflows/ecrbuild-template.yml
        # needs:
        #   - build-base
        with:
            package: core
            publish_to_ghcr: ${{ inputs.publish_to_ghcr }}
            ghcr_image_name: platform
            # we require a bigger lad
            # We are now public, default public runner is big enough
            # runner: ubuntu-latest-m
        secrets:
            AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
            AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}

    build-jobs:
        uses: ./.github/workflows/ecrbuild-template.yml
        # needs:
        #   - build-base
        with:
            package: jobs
            target: jobs
            publish_to_ghcr: ${{ inputs.publish_to_ghcr }}
            ghcr_image_name: platform-jobs
        secrets:
            AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
            AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}