Improve Image Versioning (#7)

- Build and publish images based on git tags
- Simplify python tag name
- Publish a mutable main image

Author: ryanmrodriguez

.github/workflows/build.yml

@@ -8,6 +8,7 @@ on:
 
 env:
   REGISTRY: ghcr.io
+  PUSH: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
 
 jobs:
   bake:
@@ -26,4 +27,6 @@ jobs:
       - name: Build and Push
         uses: docker/bake-action@37816e747588cb137173af99ab33873600c46ea8 # v6
         with:
-          push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
+          push: ${{ env.PUSH == 'true' }}
+        env:
+          BUILD_VERSION: ${{ env.PUSH == 'true' && 'main' || 'pr' }}

.github/workflows/publish.yml

@@ -0,0 +1,33 @@
+name: Publish Images
+
+on:
+  push:
+    tags:
+      - '*'
+
+env:
+  REGISTRY: ghcr.io
+
+jobs:
+  bake:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and Push
+        uses: docker/bake-action@v4
+        with:
+          push: true
+        env:
+          BUILD_VERSION: ${{ github.ref_name }}

docker-bake.hcl

@@ -1,21 +1,29 @@
-group "default" {
-  targets = ["python"]
+variable "BUILD_VERSION" {
+  default = "dev"
+}
+
+variable "PYTHON_VERSION" {
+  default = "3.13.5"
 }
 
-variable "PYTHON_TAG" {
-  default = "3.13.5-slim-bookworm"
+variable "PYTHON_BASE_VARIANT" {
+  default = "slim-bookworm"
 }
 
-variable "PYTHON_SHA" {
+variable "PYTHON_BASE_SHA" {
   default = "f2fdaec50160418e0c2867ba3e254755edd067171725886d5d303fd7057bbf81"
 }
 
+group "default" {
+  targets = ["python"]
+}
+
 target "python" {
   context = "docker/python"
   args = {
-    PYTHON_TAG_SHA = "${PYTHON_TAG}@sha256:${PYTHON_SHA}"
+    PYTHON_TAG_SHA = "${PYTHON_VERSION}-${PYTHON_BASE_VARIANT}@sha256:${PYTHON_BASE_SHA}"
   }
   tags = [
-    "ghcr.io/powerhome/cdk8s-cmp-python:${PYTHON_TAG}"
+    "ghcr.io/powerhome/cdk8s-cmp-python:${BUILD_VERSION}-${PYTHON_VERSION}"
   ]
 }