ci: use docker hub images directly

Author: fredleger

.github/workflows/__shared-ci.yml

@@ -11,6 +11,11 @@ on:
       built-images:
         value: ${{ jobs.docker-build-images.outputs.built-images }}
 
+
+env:
+  DOCKERHUB_REGISTRY_USER: ${{ secrets.DOCKERHUB_REGISTRY_USER }}
+  DOCKERHUB_REGISTRY_PASSWORD: ${{ secrets.DOCKERHUB_REGISTRY_PASSWORD }}
+
 jobs:
 
   golangci-lint:
@@ -125,13 +130,15 @@ jobs:
       packages: write
       pull-requests: read
     secrets:
-      oci-registry-password: ${{ secrets.GITHUB_TOKEN }}
+      oci-registry-password: $DOCKERHUB_REGISTRY_PASSWORD
     with:
       runs-on: '["self-hosted"]'
-      oci-registry: "ghcr.io"
+      oci-registry: "docker.io"
+      oci-registry-username: $DOCKERHUB_REGISTRY_USER
       images: |
         [{
-          "name": "app",
+          "name": "http-header-authenticator",
+          "repository": "webofmars",
           "tag": "${{ inputs.tag }}",
           "dockerfile": "./Dockerfile",
           "platforms": [

.github/workflows/pull-request-ci.yml

@@ -24,6 +24,7 @@ jobs:
     name: Continuous Integration
     uses: ./.github/workflows/__shared-ci.yml
     permissions:
+      actions: write
       contents: read
       id-token: write
       issues: read

.github/workflows/release.yml

@@ -43,28 +43,6 @@ jobs:
           publish: true
           disable-autolabeler: true
 
-      - uses: docker/login-action@v3
-        with:
-          registry: "ghcr.io"
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - uses: docker/login-action@v3
-        with:
-          registry: "docker.io"
-          username: ${{ secrets.DOCKERHUB_REGISTRY_USER     }}
-          password: ${{ secrets.DOCKERHUB_REGISTRY_PASSWORD }}
-
-      - name: Push built images to Docker.io
-        run: |
-          APP_IMAGE="${{ fromJson(needs.ci.outputs.built-images).app.images[0] }}"
-          docker pull "$APP_IMAGE"
-          APP_TAG="${{ steps.update_release_draft.outputs.tag_name }}"
-          APP_REGISTRY_PATH="docker.io/webofmars"
-          APP_DOCKERIO_IMAGE="${APP_REGISTRY_PATH}/http-header-authenticator:$APP_TAG"
-          docker tag "$APP_IMAGE" "$APP_DOCKERIO_IMAGE"
-          docker push "$APP_DOCKERIO_IMAGE"
-
   helm-push:
     name: "Helm: push chart to harbor registry"
     needs: ci