Base builds off changed directory structure of repo

.github/workflows/build-push-ar.yml

@@ -0,0 +1,57 @@
+name: build-push-ar
+on:
+  workflow_call:
+    inputs:
+      image:
+        required: true
+        type: string
+      build-args:
+        required: false
+        type: string
+        default: ""
+      context:
+        required: false
+        type: string
+        default: "."
+jobs:
+  build-push-ar:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+    - uses: 'actions/checkout@v4'
+    - name: Extract branch name
+      shell: bash
+      run: echo "branch=${GITHUB_REF#refs/heads/}"  >> $GITHUB_OUTPUT
+      id: extract_branch
+    - name: Extract tag name
+      shell: bash
+      run: |-
+        t=$(echo ${GITHUB_SHA} | cut -c1-7)
+        echo "tag=$t" >> $GITHUB_OUTPUT
+      id: extract_tag
+    - id: 'auth'
+      name: 'Authenticate to Google Cloud'
+      uses: 'google-github-actions/auth@v1'
+      with:
+        workload_identity_provider: ${{ secrets.GCLOUD_OIDC_POOL }}
+        create_credentials_file: true
+        service_account: ${{ secrets.GSA }}
+        token_format: 'access_token'
+    - uses: 'docker/login-action@v3'
+      name: 'Docker login'
+      with:
+        registry: 'us-docker.pkg.dev'
+        username: 'oauth2accesstoken'
+        password: '${{ steps.auth.outputs.access_token }}'
+    - name: Build and push
+      uses: docker/build-push-action@v5
+      with:
+        context: ${{ inputs.context }}
+        push: true
+        build-args: ${{ inputs.build-args }}
+        tags: |
+          us-docker.pkg.dev/${{ secrets.GCLOUD_PROJECT }}/${{ inputs.image }}:${{steps.extract_branch.outputs.branch}}-${{steps.extract_tag.outputs.tag}}
+          us-docker.pkg.dev/${{ secrets.GCLOUD_PROJECT }}/${{ inputs.image }}:${{steps.extract_branch.outputs.branch}}

.github/workflows/build-push.yml

@@ -1,76 +1,50 @@
-name: Workflow Template - Build and push
+name: build-push
 on:
-  workflow_call:
-    inputs:
-      dir:
-        required: true
-        type: string
-      major_version:
-        required: true
-        type: string
-      build_arg:
-        type: string
+  push:
 jobs:
-  build-push:
+  find-jobs:
+    name: Find changed directories
     runs-on: ubuntu-latest
-    timeout-minutes: 15
+    outputs:
+      folders: ${{ steps.jobs.outputs.folders }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - id: jobs
+        run: |
+          folders=$(git diff --diff-filter="ACMR" --name-only ${{ github.event.before }} ${{ github.event.after }} | xargs dirname | awk -F '/' '{print $1}' | sort | uniq | grep -Ev "^\." | awk NF | jq -c --raw-input --slurp 'split("\n") | .[0:-1]')
+          echo "folders=$folders" >> $GITHUB_OUTPUT
+
+  get-tags:
+    needs: [find-jobs]
+    runs-on: ubuntu-latest
+    outputs:
+      tags: ${{ steps.tags.outputs.tags }}
+    steps:
+      - uses: actions/checkout@v4
+      - id: tags
+        run: |
+          json_array=$(echo '${{ needs.find-jobs.outputs.folders }}' | jq -rc '.[]')
+          TAGS=$(while read -r REPO; do
+            for TAG in $(ls $REPO/.build-args); do
+              echo '{"context":"'${REPO}'", "image":"'${REPO}':'${TAG}'", "args":"'$(cat ${REPO}/.build-args/${TAG})'"},'
+            done
+          done <<< "$json_array")
+          TAGS=$(echo "[${TAGS%,}]")
+          echo "tags=$TAGS" >> $GITHUB_OUTPUT
+
+  build-push-ar:
+    needs: [get-tags]
+    strategy:
+      matrix:
+        tags: ${{ fromJson(needs.get-tags.outputs.tags )}}
+    uses: ./.github/workflows/build-push-ar.yml
+    with:
+      image: "internal/${{ matrix.image }}"
+      context: ${{ matrix.context }}
+      build-args: ${{ matrix.args }}
     permissions:
       contents: read
       id-token: write
-    steps:
-
-    - name: Extract branch name
-      shell: bash
-      run: echo "branch=${GITHUB_REF#refs/heads/}"  >> $GITHUB_OUTPUT
-      id: extract_branch
-
-    - name: Extract tag name
-      shell: bash
-      run: |-
-        t=$(echo ${GITHUB_SHA} | cut -c1-7)
-        echo "tag=$t" >> $GITHUB_OUTPUT
-      id: extract_tag
-
-    - uses: 'actions/checkout@v3'
-
-    - name: 'Authenticate to Google Cloud'
-      id: 'auth'
-      uses: 'google-github-actions/auth@v0'
-      with:
-        workload_identity_provider: ${{ secrets.GCLOUD_OIDC_POOL }}
-        create_credentials_file: true
-        service_account: ${{ secrets.GSA }}
-        token_format: 'access_token'
-
-    - name: 'Docker login init'
-      uses: 'docker/login-action@v1'
-      with:
-        registry: 'us-docker.pkg.dev'
-        username: 'oauth2accesstoken'
-        password: '${{ steps.auth.outputs.access_token }}'
-
-    - name: 'Docker login'
-      run: echo '${{ steps.auth.outputs.access_token }}' | docker login -u oauth2accesstoken --password-stdin https://us-docker.pkg.dev
-
-    - name: Lint Dockerfile
-      uses: hadolint/[email protected]
-      with:
-        dockerfile: ${{ inputs.dir }}/Dockerfile
-
-    - name: Lint shell
-      working-directory: ${{ inputs.dir }}
-      run: |-
-        echo "Running shellcheck on"
-        find . -name "*.sh" -exec ls -l {} \;
-        echo "Starting..."
-        find . -name "*.sh" -exec shellcheck {} \;
-
-    - name: Build and push
-      uses: docker/build-push-action@v3
-      with:
-        context: ${{ inputs.dir }}
-        push: true
-        build-args: ${{ inputs.build_arg }}
-        tags: |
-          us-docker.pkg.dev/${{ secrets.GCLOUD_PROJECT }}/${{ secrets.GCLOUD_AR_REPO }}/${{ inputs.dir }}:${{ inputs.major_version }}-${{steps.extract_branch.outputs.branch}}-${{steps.extract_tag.outputs.tag}}
-          us-docker.pkg.dev/${{ secrets.GCLOUD_PROJECT }}/${{ secrets.GCLOUD_AR_REPO }}/${{ inputs.dir }}:${{ inputs.major_version }}-${{steps.extract_branch.outputs.branch}}
+    secrets: inherit

loris/.build-args/3.2

@@ -0,0 +1 @@
+LORIS_VERSION=3.2.1

nginx/.build-args/1.25

@@ -0,0 +1,2 @@
+NGINX_VERSION=1.25.1
+

php/.build-args/8.1

@@ -0,0 +1,2 @@
+PHP_VERSION=8.1
+

php/.build-args/8.2

@@ -0,0 +1,2 @@
+PHP_VERSION=8.2
+

php/.build-args/8.3

@@ -0,0 +1,2 @@
+PHP_VERSION=8.3
+