arconia-templates/Taskfile.yml at main · arconia-io/arconia-templates · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
# https://taskfile.dev

version: '3'

vars:
  REGISTRY: ghcr.io
  TEMPLATES_BASE_REPOSITORY: arconia-io/arconia-templates
  VERSION: '{{.VERSION | default "latest"}}'

tasks:
  default:
    cmds:
      - task --list
    silent: true

  templates:publish:
    desc: Publish the Template artifacts to the registry
    cmds:
      - |
        arconia template push \
          --base-ref {{.REGISTRY}}/{{.TEMPLATES_BASE_REPOSITORY}} \
          --tag {{.VERSION}} \
          --output-report template-push-report.json

  templates:sign:
    desc: Sign the Template artifacts with Cosign
    cmds:
      - |
        jq -r '.artifacts[] | "\(.ref | split(":")[0])@\(.digest)"' template-push-report.json | while read -r artifact; do
          cosign sign --yes "$artifact"
        done

  catalog:publish:
    desc: Publish the Template Catalog artifact to the registry
    cmds:
      - |
        arconia template catalog push \
          --name arconia-project-templates \
          --ref {{.REGISTRY}}/{{.TEMPLATES_BASE_REPOSITORY}}/catalog \
          --tag {{.VERSION}} \
          --from-report template-push-report.json \
          --output-report template-catalog-push-report.json

  catalog:sign:
    desc: Sign the Template Catalog artifacts with Cosign
    cmds:
      - |
        jq -r '.artifacts[] | "\(.ref | split(":")[0])@\(.digest)"' template-catalog-push-report.json | while read -r artifact; do
          cosign sign --yes "$artifact"
        done