build-jumpbox-image.yaml

name: Build Jumpbox Image
on:
  schedule:
  - cron: '0 10 * * *' # everyday at 10am
  push:
    branches:
    - main
    paths:
    - 'packer/jumpbox/**'
    - .github/workflows/build-jumpbox-image.yaml
  pull_request:
    branches:
    - main
    paths:
    - 'packer/jumpbox/**'
    - .github/workflows/build-jumpbox-image.yaml
jobs:
  build_and_push_jumpbox:
    name: Build Jumpbox GCP Compute Image
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    steps:
    - uses: actions/checkout@v4

    - name: Authenicate to Google Cloud
      uses: google-github-actions/auth@v0
      with:
        credentials_json: ${{ secrets.GCP_SERVICE_ACCOUNT_KEY }}

    - name: Setup Google Cloud SDK
      id: auth
      uses: google-github-actions/setup-gcloud@v0
      with:
        project_id: kots-field-labs

    # initialize
    - name: Initialize Packer
      uses: hashicorp/packer-github-actions@master
      with:
        command: init
        working_directory: ./packer
        target: jumpbox
      env:
        PACKER_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}

    # validate templates
    - name: Validate Packer Template
      uses: hashicorp/packer-github-actions@master
      with:
        command: validate
        arguments: -syntax-only
        working_directory: ./packer
        target: jumpbox
      env:
        PACKER_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}

    # build artifact for push/merge (use default name)
    - name: Build VM Image
      uses: hashicorp/packer-github-actions@master
      if: ${{ github.event_name != 'pull_request' }}
      with:
        command: build
        arguments: "-force"
        working_directory: ./packer
        target: jumpbox
      env:
        PACKER_LOG: 1
        PKR_VAR_service_account_key: ${{secrets.GCP_SERVICE_ACCOUNT_KEY}}
        PKR_VAR_zone: europe-west1-b
        PACKER_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}

    # build artifact for PRs (need to assign image name)
    - name: Build VM Image
      uses: hashicorp/packer-github-actions@master
      if: ${{ github.event_name == 'pull_request' }}
      with:
        command: build
        arguments: "-force"
        working_directory: ./packer
        target: jumpbox
      env:
        PACKER_LOG: 1
        PKR_VAR_service_account_key: ${{secrets.GCP_SERVICE_ACCOUNT_KEY}}
        PKR_VAR_image_name: airgap-jumpbox-${{github.sha}}
        PACKER_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}

    # delete built artifact for PRs (save storage costs)
    - name: Delete VM Image
      if: ${{ github.event_name == 'pull_request' }}
      run: gcloud compute images delete --quiet airgap-jumpbox-${{github.sha}}
      shell: bash