update-internal-mirrors.yaml

name: Update Mirrors
on:
  push:
    tags:
      - main
  workflow_dispatch:
  schedule: # Schedule to run twice a day at 8:00 AM and 8:00 PM
    - cron: '0 8,20 * * *'

concurrency:
  group: update-mirrors-${{ github.ref }}
  cancel-in-progress: true
jobs:
  update-mirrors:
    runs-on: ubuntu-latest
    environment: integration
    strategy:
      fail-fast: false
      matrix:
        mirror:
          # note library just means it is part of the official library
          - name: library/postgres
            expression: '^[0-9]+\.[0-9]+$'
          - name: ethereum/client-go
            expression: '^(alltools-v|v)[0-9]\.[0-9]+\.[0-9]+$'
          - name: friendsofgo/killgrave
            expression: '^[0-9]+\.[0-9]+\.[0-9]+$'
          - name: mockserver/mockserver
            expression: '^[0-9]+\.[0-9]+\.[0-9]+$'
          - name: testcontainers/ryuk
            expression: '^[0-9]+\.[0-9]+\.[0-9]+$'
          - name: confluentinc/cp-kafka
            expression: '^[0-9]+\.[0-9]+\.[0-9]+$'
          - name: confluentinc/cp-schema-registry
            expression: '^[0-9]+\.[0-9]+\.[0-9]+$'
          - name: confluentinc/cp-zookeeper
            expression: '^[0-9]+\.[0-9]+\.[0-9]+$'
          - name: hyperledger/besu
            expression: '^[0-9]+\.[0-9]+(\.[0-9]+)?$'
            page_size: 300
          - name: thorax/erigon
            expression: '^v[0-9]+\.[0-9]+\.[0-9]+$'
          - name: nethermind/nethermind
            expression: '^[0-9]+\.[0-9]+\.[0-9]+$'
          - name: wiremock/wiremock
            expression: '^[0-9]+\.[0-9]+\.[0-9]+$'
          # disabled until gcloud auth is added
          # - name: gcr.io/prysmaticlabs/prysm/beacon-chain
          #   expression: '^v[0-9]+\.[0-9]+\.[0-9]+$'
          # - name: gcr.io/prysmaticlabs/prysm/validator
          #   expression: '^v[0-9]+\.[0-9]+\.[0-9]+$'
          - name: tofelb/ethereum-genesis-generator
            expression: '^[0-9]+\.[0-9]+\.[0-9]+(\-slots\-per\-epoch)?'
          # This one only has latest tag, probably only want to update it when we know for sure it's a new version we want
          #  - name: protolambda/eth2-val-tools
          #   expression: 'latest'
    permissions:
      id-token: write
      contents: read
    steps:
      - name: Checkout the Repo
        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4

        # Setup AWS creds
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
        with:
          aws-region: ${{ secrets.QA_AWS_REGION }}
          role-to-assume: ${{ secrets.QA_AWS_ROLE_TO_ASSUME }}
          role-duration-seconds: 3600

      # Login to ECR
      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2.0.1
        with:
          mask-password: 'true'
        env:
          AWS_REGION: ${{ secrets.QA_AWS_REGION }}

      # - name: Login to Google Cloud
      #   uses: google-github-actions/auth@55bd3a7c6e2ae7cf1877fd1ccb9d54c0503c457c # v2.1.2
      #   with:
      #     credentials_json: '${{ secrets.GOOGLE_CREDENTIALS }}'

      # Update all mirror images
      - name: Update images
        id: check
        shell: bash
        run: |
          ./scripts/update_mirrors.sh ${{ secrets.QA_AWS_ACCOUNT_NUMBER }}.dkr.ecr.${{ secrets.QA_AWS_REGION }}.amazonaws.com ${{matrix.mirror.name}} '${{matrix.mirror.expression}}' ${{matrix.mirror.page_size}}

  update-other-images:
    runs-on: ubuntu-latest
    environment: integration
    permissions:
      id-token: write
      contents: read
    steps:
      - name: Checkout the Repo
        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4

        # Setup AWS creds
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
        with:
          aws-region: ${{ secrets.QA_AWS_REGION }}
          role-to-assume: ${{ secrets.QA_AWS_ROLE_TO_ASSUME }}
          role-duration-seconds: 3600

      # Login to ECR
      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2.0.1
        with:
          mask-password: 'true'
        env:
          AWS_REGION: ${{ secrets.QA_AWS_REGION }}

      # Update all mirror images
      - name: Update images
        id: check
        shell: bash
        run: |
          ./scripts/update_mirrors.sh ${{ secrets.QA_AWS_ACCOUNT_NUMBER }}.dkr.ecr.${{ secrets.QA_AWS_REGION }}.amazonaws.com