feat: add docker build and push actions

.github/workflows/build.yaml

@@ -0,0 +1,69 @@
+name: 'Build'
+on:
+    push:
+        branches:
+            - main
+    pull_request:
+        branches:
+            - main
+env:
+    GCP_OIDC_PROVIDER_NAME: github-provider
+    GCP_PROJECT_ID: basemind-ai-development
+    GCP_PROJECT_NUMBER: 78794879644
+    GCP_SERVICE_ACCOUNT_NAME: github-actions
+    GCP_WORKLOAD_IDENTITY_POOL: dev-pool
+    GCP_REGION: europe-west3
+jobs:
+    build:
+        runs-on: ubuntu-latest
+        strategy:
+            matrix:
+                service:
+                    - api-gateway
+                    - dashboard-backend
+                    - openai-connector
+                    - frontend
+                include:
+                    - file_path: ./docker/Dockerfile.go-services
+                      service: api-gateway
+                    - file_path: ./docker/Dockerfile.go-services
+                      service: dashboard-backend
+                    - file_path: ./docker/Dockerfile.ts-services
+                      service: openai-connector
+                    - file_path: ./docker/Dockerfile.frontend
+                      service: frontend
+        permissions:
+            contents: 'read'
+            id-token: 'write'
+        steps:
+            - name: Checkout
+              id: checkout
+              uses: actions/checkout@v4
+            - name: Authenticate to Google Cloud
+              id: auth
+              uses: google-github-actions/auth@v1
+              with:
+                  token_format: access_token
+                  workload_identity_provider: projects/${{env.GCP_PROJECT_NUMBER}}/locations/global/workloadIdentityPools/${{env.GCP_WORKLOAD_IDENTITY_POOL}}/providers/${{env.GCP_OIDC_PROVIDER_NAME}}
+                  service_account: ${{env.GCP_SERVICE_ACCOUNT_NAME}}@${{env.GCP_PROJECT_ID}}.iam.gserviceaccount.com
+            - name: Login to Artifact Registry
+              uses: docker/login-action@v3
+              with:
+                  registry: ${{env.GCP_REGION}}-docker.pkg.dev
+                  username: oauth2accesstoken
+                  password: ${{ steps.auth.outputs.access_token }}
+            - name: Set up QEMU
+              uses: docker/setup-qemu-action@v3
+            - name: Set up Docker BuildX
+              uses: docker/setup-buildx-action@v3
+            - name: Build and push
+              uses: docker/build-push-action@v5
+              with:
+                  push: ${{github.event_name == 'push' && startsWith(github.ref, 'refs/tags')}}
+                  context: .
+                  file: ${{matrix.file_path}}
+                  build-args: |
+                      BUILD_TARGET=${{matrix.service}}
+                  tags: |
+                      ${{env.GCP_REGION}}-docker.pkg.dev/${{env.GCP_PROJECT_ID}}/basemind/${{matrix.service}}:latest
+                      ${{env.GCP_REGION}}-docker.pkg.dev/${{env.GCP_PROJECT_ID}}/basemind/${{matrix.service}}:${{github.sha}}

.github/workflows/ci-tests-go.yaml → .github/workflows/tests-go.yaml

@@ -48,9 +48,9 @@ jobs:
               run: curl -sSf https://atlasgo.sh | sh
             - name: Authenticate with GCP
               id: auth
-              uses: google-github-actions/auth@v1.1.1
+              uses: google-github-actions/auth@v1
               with:
-                  workload_identity_provider: 'projects/${GCP_PROJECT_NUMBER}/locations/global/workloadIdentityPools/${GCP_WORKLOAD_IDENTITY_POOL}/providers/${GCP_OIDC_PROVIDER_NAME}'
-                  service_account: '${GCP_SERVICE_ACCOUNT_NAME}@${GCP_PROJECT_ID}.iam.gserviceaccount.com'
+                  workload_identity_provider: projects/${{env.GCP_PROJECT_NUMBER}}/locations/global/workloadIdentityPools/${{env.GCP_WORKLOAD_IDENTITY_POOL}}/providers/${{env.GCP_OIDC_PROVIDER_NAME}}
+                  service_account: ${{env.GCP_SERVICE_ACCOUNT_NAME}}@${{env.GCP_PROJECT_ID}}.iam.gserviceaccount.com
             - name: Test
               run: go test ./...

.github/workflows/ci-validate.yaml → .github/workflows/validate.yaml

@@ -11,7 +11,6 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - uses: actions/checkout@v4
-
             - name: Setup Golang
               uses: actions/setup-go@v4
               with:

docker-compose.yaml

@@ -89,7 +89,6 @@ services:
             target: install
             args:
                 BUILD_TARGET: openai-connector
-                NODE_ENV: development
                 PORT: 8000
         ports:
             - '8000:8000'
@@ -110,8 +109,6 @@ services:
             dockerfile: docker/Dockerfile.frontend
             context: .
             target: install
-            args:
-                - NODE_ENV=development
         ports:
             - '3000:3000'
         volumes:

docker/Dockerfile.frontend

@@ -3,10 +3,8 @@ RUN npm i -g pnpm
 
 FROM base AS install
 WORKDIR /app/
-ARG NODE_ENV="production"
-ENV NODE_ENV=${NODE_ENV}
 COPY package.json pnpm-lock.yaml tsconfig.json .npmrc pnpm-workspace.yaml ./
-COPY frontend/tsconfig.json frontend/package.json frontend/pnpm-lock.yaml frontend/next.config.js frontend/i18n.js frontend/postcss.config.js frontend/tailwind.config.js ./frontend/
+COPY frontend/*.json frontend/*.js frontend/*.d.ts frontend/*.yaml ./frontend/
 RUN pnpm install -r --ignore-scripts \
     && pnpm add -D @next/swc-linux-arm64-gnu @next/swc-linux-arm64-musl -w
 
@@ -31,8 +29,8 @@ COPY frontend/public frontend/public
 COPY --from=build --chown=app:nodejs /app/frontend/dist frontend/dist
 
 COPY package.json pnpm-lock.yaml .npmrc pnpm-workspace.yaml ./
-COPY frontend/package.json frontend/pnpm-lock.yaml frontend/next.config.js frontend/next-i18next.config.js frontend/tailwind.config.js ./frontend/
-RUN pnpm install -r --ignore-scripts
+COPY frontend/package.json frontend/pnpm-lock.yaml frontend/next.config.js frontend/i18n.js frontend/tailwind.config.js ./frontend/
+RUN pnpm install -r --prod
 
 WORKDIR /app/frontend
 USER app

docker/Dockerfile.ts-services

@@ -4,8 +4,6 @@ RUN npm i -g pnpm
 FROM base AS install
 WORKDIR /app/
 ARG BUILD_TARGET
-ARG NODE_ENV="production"
-ENV NODE_ENV=${NODE_ENV}
 COPY package.json pnpm-lock.yaml tsconfig.json .npmrc pnpm-workspace.yaml ./
 COPY services/${BUILD_TARGET}/tsconfig* services/${BUILD_TARGET}/package.json services/${BUILD_TARGET}/webpack.config.ts ./services/${BUILD_TARGET}/
 RUN pnpm install -r --ignore-scripts