mirror of
https://github.com/docker/login-action.git
synced 2026-10-13 18:03:06 +01:00
Compare commits
2 Commits
f95fe26bb1
...
20e0a61734
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
20e0a61734 | ||
|
|
f40589c4bf |
@@ -50,7 +50,7 @@ test('logout calls exec', async () => {
|
|||||||
|
|
||||||
const registry = 'https://ghcr.io';
|
const registry = 'https://ghcr.io';
|
||||||
|
|
||||||
await logout(registry, '');
|
await logout(registry);
|
||||||
|
|
||||||
expect(execSpy).toHaveBeenCalledTimes(1);
|
expect(execSpy).toHaveBeenCalledTimes(1);
|
||||||
const callfunc = execSpy.mock.calls[0];
|
const callfunc = execSpy.mock.calls[0];
|
||||||
|
|||||||
2
dist/index.js
generated
vendored
2
dist/index.js
generated
vendored
File diff suppressed because one or more lines are too long
2
dist/index.js.map
generated
vendored
2
dist/index.js.map
generated
vendored
File diff suppressed because one or more lines are too long
@@ -1,8 +1,4 @@
|
|||||||
import path from 'path';
|
|
||||||
import * as core from '@actions/core';
|
import * as core from '@actions/core';
|
||||||
import * as yaml from 'js-yaml';
|
|
||||||
|
|
||||||
import {Buildx} from '@docker/actions-toolkit/lib/buildx/buildx';
|
|
||||||
|
|
||||||
export interface Inputs {
|
export interface Inputs {
|
||||||
registry: string;
|
registry: string;
|
||||||
@@ -14,15 +10,6 @@ export interface Inputs {
|
|||||||
registryAuth: string;
|
registryAuth: string;
|
||||||
}
|
}
|
||||||
|
|
||||||
export interface Auth {
|
|
||||||
registry: string;
|
|
||||||
username: string;
|
|
||||||
password: string;
|
|
||||||
scope: string;
|
|
||||||
ecr: string;
|
|
||||||
configDir: string;
|
|
||||||
}
|
|
||||||
|
|
||||||
export function getInputs(): Inputs {
|
export function getInputs(): Inputs {
|
||||||
return {
|
return {
|
||||||
registry: core.getInput('registry'),
|
registry: core.getInput('registry'),
|
||||||
@@ -34,49 +21,3 @@ export function getInputs(): Inputs {
|
|||||||
registryAuth: core.getInput('registry-auth')
|
registryAuth: core.getInput('registry-auth')
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
||||||
export function getAuthList(inputs: Inputs): Array<Auth> {
|
|
||||||
if (inputs.registryAuth && (inputs.registry || inputs.username || inputs.password || inputs.scope || inputs.ecr)) {
|
|
||||||
throw new Error('Cannot use registry-auth with other inputs');
|
|
||||||
}
|
|
||||||
let auths: Array<Auth> = [];
|
|
||||||
if (!inputs.registryAuth) {
|
|
||||||
auths.push({
|
|
||||||
registry: inputs.registry || 'docker.io',
|
|
||||||
username: inputs.username,
|
|
||||||
password: inputs.password,
|
|
||||||
scope: inputs.scope,
|
|
||||||
ecr: inputs.ecr || 'auto',
|
|
||||||
configDir: scopeToConfigDir(inputs.registry, inputs.scope)
|
|
||||||
});
|
|
||||||
} else {
|
|
||||||
auths = (yaml.load(inputs.registryAuth) as Array<Auth>).map(auth => {
|
|
||||||
core.setSecret(auth.password); // redacted in workflow logs
|
|
||||||
return {
|
|
||||||
registry: auth.registry || 'docker.io',
|
|
||||||
username: auth.username,
|
|
||||||
password: auth.password,
|
|
||||||
scope: auth.scope,
|
|
||||||
ecr: auth.ecr || 'auto',
|
|
||||||
configDir: scopeToConfigDir(auth.registry || 'docker.io', auth.scope)
|
|
||||||
};
|
|
||||||
});
|
|
||||||
}
|
|
||||||
if (auths.length == 0) {
|
|
||||||
throw new Error('No registry to login');
|
|
||||||
}
|
|
||||||
return auths;
|
|
||||||
}
|
|
||||||
|
|
||||||
export function scopeToConfigDir(registry: string, scope?: string): string {
|
|
||||||
if (!scope || scope === '') {
|
|
||||||
return '';
|
|
||||||
}
|
|
||||||
let configDir = path.join(Buildx.configDir, 'config', registry === 'docker.io' ? 'registry-1.docker.io' : registry);
|
|
||||||
if (scope.startsWith('@')) {
|
|
||||||
configDir += scope;
|
|
||||||
} else {
|
|
||||||
configDir = path.join(configDir, scope);
|
|
||||||
}
|
|
||||||
return configDir;
|
|
||||||
}
|
|
||||||
|
|||||||
@@ -1,11 +1,19 @@
|
|||||||
|
import path from 'path';
|
||||||
|
import * as aws from './aws';
|
||||||
import * as core from '@actions/core';
|
import * as core from '@actions/core';
|
||||||
|
|
||||||
import * as aws from './aws';
|
|
||||||
import * as context from './context';
|
|
||||||
|
|
||||||
import {Docker} from '@docker/actions-toolkit/lib/docker/docker';
|
import {Docker} from '@docker/actions-toolkit/lib/docker/docker';
|
||||||
|
import {Buildx} from '@docker/actions-toolkit/lib/buildx/buildx';
|
||||||
|
|
||||||
export async function login(auth: context.Auth): Promise<void> {
|
export interface Auth {
|
||||||
|
registry: string;
|
||||||
|
username: string;
|
||||||
|
password: string;
|
||||||
|
scope?: string;
|
||||||
|
ecr: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
export async function login(auth: Auth): Promise<void> {
|
||||||
if (/true/i.test(auth.ecr) || (auth.ecr == 'auto' && aws.isECR(auth.registry))) {
|
if (/true/i.test(auth.ecr) || (auth.ecr == 'auto' && aws.isECR(auth.registry))) {
|
||||||
await loginECR(auth.registry, auth.username, auth.password, auth.scope);
|
await loginECR(auth.registry, auth.username, auth.password, auth.scope);
|
||||||
} else {
|
} else {
|
||||||
@@ -13,19 +21,9 @@ export async function login(auth: context.Auth): Promise<void> {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
export async function logout(registry: string, configDir: string): Promise<void> {
|
export async function logout(registry: string): Promise<void> {
|
||||||
let envs: {[key: string]: string} | undefined;
|
|
||||||
if (configDir !== '') {
|
|
||||||
envs = Object.assign({}, process.env, {
|
|
||||||
DOCKER_CONFIG: configDir
|
|
||||||
}) as {
|
|
||||||
[key: string]: string;
|
|
||||||
};
|
|
||||||
core.info(`Alternative config dir: ${configDir}`);
|
|
||||||
}
|
|
||||||
await Docker.getExecOutput(['logout', registry], {
|
await Docker.getExecOutput(['logout', registry], {
|
||||||
ignoreReturnCode: true,
|
ignoreReturnCode: true
|
||||||
env: envs
|
|
||||||
}).then(res => {
|
}).then(res => {
|
||||||
if (res.stderr.length > 0 && res.exitCode != 0) {
|
if (res.stderr.length > 0 && res.exitCode != 0) {
|
||||||
core.warning(res.stderr.trim());
|
core.warning(res.stderr.trim());
|
||||||
@@ -56,13 +54,19 @@ export async function loginECR(registry: string, username: string, password: str
|
|||||||
|
|
||||||
async function loginExec(registry: string, username: string, password: string, scope?: string): Promise<void> {
|
async function loginExec(registry: string, username: string, password: string, scope?: string): Promise<void> {
|
||||||
let envs: {[key: string]: string} | undefined;
|
let envs: {[key: string]: string} | undefined;
|
||||||
if (scope && scope !== '') {
|
if (scope && scope.length > 0) {
|
||||||
|
let dockerConfigDir = path.join(Buildx.configDir, 'config', registry === 'docker.io' ? 'registry-1.docker.io' : registry);
|
||||||
|
if (scope.startsWith('@')) {
|
||||||
|
dockerConfigDir += scope;
|
||||||
|
} else {
|
||||||
|
dockerConfigDir = path.join(dockerConfigDir, scope);
|
||||||
|
}
|
||||||
envs = Object.assign({}, process.env, {
|
envs = Object.assign({}, process.env, {
|
||||||
DOCKER_CONFIG: context.scopeToConfigDir(registry, scope)
|
DOCKER_CONFIG: dockerConfigDir
|
||||||
}) as {
|
}) as {
|
||||||
[key: string]: string;
|
[key: string]: string;
|
||||||
};
|
};
|
||||||
core.info(`Logging into ${registry} (scope ${scope})...`);
|
core.info(`Logging into ${registry} with scope ${scope}...`);
|
||||||
} else {
|
} else {
|
||||||
core.info(`Logging into ${registry}...`);
|
core.info(`Logging into ${registry}...`);
|
||||||
}
|
}
|
||||||
|
|||||||
36
src/main.ts
36
src/main.ts
@@ -1,3 +1,4 @@
|
|||||||
|
import * as yaml from 'js-yaml';
|
||||||
import * as core from '@actions/core';
|
import * as core from '@actions/core';
|
||||||
import * as actionsToolkit from '@docker/actions-toolkit';
|
import * as actionsToolkit from '@docker/actions-toolkit';
|
||||||
|
|
||||||
@@ -9,14 +10,35 @@ export async function main(): Promise<void> {
|
|||||||
const inputs: context.Inputs = context.getInputs();
|
const inputs: context.Inputs = context.getInputs();
|
||||||
stateHelper.setLogout(inputs.logout);
|
stateHelper.setLogout(inputs.logout);
|
||||||
|
|
||||||
const auths = context.getAuthList(inputs);
|
if (inputs.registryAuth && (inputs.registry || inputs.username || inputs.password || inputs.scope || inputs.ecr)) {
|
||||||
stateHelper.setRegistries(Array.from(new Map(auths.map(auth => [`${auth.registry}|${auth.configDir}`, {registry: auth.registry, configDir: auth.configDir} as stateHelper.RegistryState])).values()));
|
throw new Error('Cannot use registry-auth with other inputs');
|
||||||
|
}
|
||||||
|
|
||||||
if (auths.length === 1) {
|
if (!inputs.registryAuth) {
|
||||||
await docker.login(auths[0]);
|
stateHelper.setRegistries([inputs.registry || 'docker.io']);
|
||||||
|
await docker.login({
|
||||||
|
registry: inputs.registry || 'docker.io',
|
||||||
|
username: inputs.username,
|
||||||
|
password: inputs.password,
|
||||||
|
scope: inputs.scope,
|
||||||
|
ecr: inputs.ecr || 'auto'
|
||||||
|
});
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
const auths = (yaml.load(inputs.registryAuth) as docker.Auth[]).map(auth => ({
|
||||||
|
registry: auth.registry || 'docker.io',
|
||||||
|
username: auth.username,
|
||||||
|
password: auth.password,
|
||||||
|
scope: auth.scope,
|
||||||
|
ecr: auth.ecr || 'auto'
|
||||||
|
}));
|
||||||
|
if (auths.length == 0) {
|
||||||
|
throw new Error('No registry to login');
|
||||||
|
}
|
||||||
|
|
||||||
|
stateHelper.setRegistries(auths.map(auth => auth.registry).filter((value, index, self) => self.indexOf(value) === index));
|
||||||
|
|
||||||
for (const auth of auths) {
|
for (const auth of auths) {
|
||||||
await core.group(`Login to ${auth.registry}`, async () => {
|
await core.group(`Login to ${auth.registry}`, async () => {
|
||||||
await docker.login(auth);
|
await docker.login(auth);
|
||||||
@@ -28,10 +50,8 @@ async function post(): Promise<void> {
|
|||||||
if (!stateHelper.logout) {
|
if (!stateHelper.logout) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
for (const registryState of stateHelper.registries) {
|
for (const registry of stateHelper.registries.split(',')) {
|
||||||
await core.group(`Logout from ${registryState.registry}`, async () => {
|
await docker.logout(registry);
|
||||||
await docker.logout(registryState.registry, registryState.configDir);
|
|
||||||
});
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -1,15 +1,10 @@
|
|||||||
import * as core from '@actions/core';
|
import * as core from '@actions/core';
|
||||||
|
|
||||||
export const registries = process.env['STATE_registries'] ? (JSON.parse(process.env['STATE_registries']) as Array<RegistryState>) : [];
|
export const registries = process.env['STATE_registries'] || '';
|
||||||
export const logout = /true/i.test(process.env['STATE_logout'] || '');
|
export const logout = /true/i.test(process.env['STATE_logout'] || '');
|
||||||
|
|
||||||
export interface RegistryState {
|
export function setRegistries(registries: string[]) {
|
||||||
registry: string;
|
core.saveState('registries', registries.join(','));
|
||||||
configDir: string;
|
|
||||||
}
|
|
||||||
|
|
||||||
export function setRegistries(registries: Array<RegistryState>) {
|
|
||||||
core.saveState('registries', JSON.stringify(registries));
|
|
||||||
}
|
}
|
||||||
|
|
||||||
export function setLogout(logout: boolean) {
|
export function setLogout(logout: boolean) {
|
||||||
|
|||||||
Reference in New Issue
Block a user