如何获取推送镜像到docker repo后的sha值

Question

现在我在github操作中实现了一个docker ci，第一步是构建docker镜像，并像这样推送到远程repo：

- name: Build image push to aliyun
  uses: docker/build-push-action@v1
  with:
    registry: ${{ secrets.ALI_DOCKER_HUB_REGISTRY }}
    username: ${{ secrets.ALIYUN_DOCKER_REPO_USER_NAME }}
    password: ${{ secrets.ALIYUN_DOCKER_REPO_USER_PASSWORD }}
    tag_with_sha: true
    repository: reddwarf-pro/dolphin-post
    path: 'dolphin-post'

在推送到远程repo之后，下一步我想使用这个最新的镜像更新我的kubernetes集群应用程序。我想这样做：

- name: deploy to cluster
  uses: steebchen/kubectl@v2.0.0
  with: # defaults to latest kubectl binary version
    config: ${{ secrets.KUBE_CONFIG_DATA }}
    command: set image --record deployment/my-app container=${{ github.repository }}:${{ github.sha }}
- name: verify deployment
  uses: steebchen/kubectl@v2.0.0
  with:
    config: ${{ secrets.KUBE_CONFIG_DATA }}
    version: v1.21.0 # specify kubectl binary version explicitly
    command: rollout status deployment/my-app

github.sha表示最新的图像sha代码。但是现在我不知道如何获得github.sha值。我应该设置成环境变量吗？如何设置成环境变量？我应该在哪里以及如何设置github.sha值？

Answer 1

如下所示：

- name: Build image push to aliyun
  uses: docker/build-push-action@v1
  with:
    registry: ${{ secrets.ALI_DOCKER_HUB_REGISTRY }}
    username: ${{ secrets.ALIYUN_DOCKER_REPO_USER_NAME }}
    password: ${{ secrets.ALIYUN_DOCKER_REPO_USER_PASSWORD }}
    tags: ${{ github.sha }}
    repository: reddwarf-pro/dolphin-post
    path: 'dolphin-post'

- name: deploy to cluster
  uses: steebchen/kubectl@v2.0.0
  with: # defaults to latest kubectl binary version
    config: ${{ secrets.KUBE_CONFIG_DATA }}
    command: set image --record deployment/dolphin-post-service dolphin-post-service=registry.cn-hangzhou.aliyuncs.com/reddwarf-pro/dolphin-post:${{ github.sha }} -n reddwarf-pro