dockerize.yaml

name: Build and push Docker images

on:
  push:
    tags: '@openfn/ws-worker@**'
  workflow_call:

jobs:
  check-tag:
    name: Check if Docker tag exists
    runs-on: ubuntu-latest
    outputs:
      should_build: ${{ steps.check.outputs.should_build }}
      version: ${{ steps.extract.outputs.version }}
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
      - name: Find worker release tag
        id: extract
        run: |
          # The worker release tag on the commit being built. This covers a
          # pushed tag and a call from the publish workflow, where github.ref
          # is main, not the tag.
          GIT_TAG=$(git tag --points-at HEAD --list "@openfn/ws-worker@[0-9]*" | sort -V | tail -n 1)
          echo Git Tag: $GIT_TAG

          if [ -z "$GIT_TAG" ]; then
            echo "No ws-worker release tag on this commit, skipping build"
            exit 0
          fi

          VERSION=${GIT_TAG#@openfn/ws-worker@}
          if ! echo "$VERSION" | grep -Eq '^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.-]+)?$'; then
            echo "::error::Can't read a version from tag $GIT_TAG"
            exit 1
          fi
          echo Version: $VERSION

          echo "version=$VERSION" >> $GITHUB_OUTPUT
      - name: Check if Docker tag exists
        id: check
        if: steps.extract.outputs.version != ''
        env:
          VERSION: ${{ steps.extract.outputs.version }}
        run: |
          STATUS=$(curl -s -o /dev/null -w "%{http_code}" \
            https://hub.docker.com/v2/repositories/openfn/ws-worker/tags/$VERSION/)
          if [ "$STATUS" = "200" ]; then
            echo "Tag $VERSION already exists on Docker Hub, skipping build"
            echo "should_build=false" >> $GITHUB_OUTPUT
          else
            echo "should_build=true" >> $GITHUB_OUTPUT
          fi

  build-and-push-worker-image:
    needs: check-tag
    if: needs.check-tag.outputs.should_build == 'true'
    name: Push Docker image to Docker Hub
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v6
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - name: Docker metadata
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: openfn/ws-worker
          tags: |
            type=semver,pattern={{version}},value=${{ needs.check-tag.outputs.version }}
      - name: Build and push
        uses: docker/build-push-action@v5
        with:
          context: .
          push: ${{ github.event_name != 'pull_request' }}
          target: ws-worker
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}