From c61ff5f3f60713ce43672848a28186756faf1f7e Mon Sep 17 00:00:00 2001
From: = <m.corfiatis@gns.cri.nz>
Date: Thu, 19 Dec 2024 11:39:26 +1300
Subject: [PATCH] feat: add gha for codebuild fedora arm

Add github actions workflow for running arm fedora codebuild builds.
---
 .github/workflows/build-magpi.yml | 57 +++++++++++++++++++++++++++++++
 1 file changed, 57 insertions(+)
 create mode 100644 .github/workflows/build-magpi.yml

diff --git a/.github/workflows/build-magpi.yml b/.github/workflows/build-magpi.yml
new file mode 100644
index 0000000..e1090b5
--- /dev/null
+++ b/.github/workflows/build-magpi.yml
@@ -0,0 +1,57 @@
+name: magpibuild-arm64
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+  workflow_dispatch: {}
+permissions:
+  id-token: write
+  packages: write
+concurrency:
+  group: ${{ github.run_id }}
+  cancel-in-progress: true
+jobs:
+  codebuild:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
+        with:
+          aws-region: ap-southeast-2
+          role-to-assume: arn:aws:iam::615890063537:role/tf-dev-github-actions-geonet-codebuild-magpi
+          role-duration-seconds: 3600
+          role-session-name: "github-actions-base-images-arm64-magpi"
+      - name: Run CodeBuild
+        uses: aws-actions/aws-codebuild-run-build@v1
+        env:
+          GHCR_USER: ${{ github.actor }}
+          GHCR_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          project-name: tf-dev-magpi-codebuild
+          disable-source-override: false
+          source-version-override: ${{ github.ref }}
+          env-vars-for-codebuild: |
+            GHCR_USER,
+            GHCR_TOKEN
+          buildspec-override: |
+            version: 0.2
+            env:
+              shell: bash
+              git-credential-helper: yes
+            phases:
+              build:
+                on-failure: ABORT
+                commands:
+                  - docker build -t rpmbuild-fedora images/rpmbuild-fedora
+                  - docker tag rpmbuild-fedora:latest ghcr.io/geonet/base-images/rpmbuild-fedora:latest
+              post_build:
+                on-failure: ABORT
+                commands:
+                  - |
+                    if expr "${CODEBUILD_SOURCE_VERSION}" : "refs/heads/main" >/dev/null; then
+                      docker login -u ${GHCR_USER} -p ${GHCR_TOKEN} ghcr.io
+                      docker push ghcr.io/geonet/base-images/rpmbuild-fedora:latest
+                    fi