download image on release

Author: artyom-morozov

.github/actions/push-docker/action.yml

@@ -1,5 +1,5 @@
 name: "Docker Push"
-description: "Builds and pushes a Docker image with specified tags"
+description: "Builds and pushes a Docker image with specified tags, or pulls from source registry and re-tags"
 inputs:
   version_tag:
     description: "The primary version tag for the image (e.g., 1.0.0)"
@@ -14,6 +14,14 @@ inputs:
   docker_password:
     description: "Docker Hub password"
     required: true
+  source_registry:
+    description: "Source registry to pull from (e.g., ECR). If provided, will pull and re-tag instead of building"
+    required: false
+    default: ""
+  source_image_tag:
+    description: "Source image tag to pull (without platform suffix). Required if source_registry is provided"
+    required: false
+    default: ""
 
 runs:
   using: "composite"
@@ -42,7 +50,45 @@ runs:
         echo "TAGS_LIST=$tags" >> $GITHUB_OUTPUT
         echo "Prepared tags: $tags"
 
+    - name: Pull from Source and Push to DockerHub
+      if: inputs.source_registry != ''
+      shell: bash
+      run: |
+        source_image="${{ inputs.source_registry }}/solace-agent-mesh:${{ inputs.source_image_tag }}"
+
+        echo "Pulling multi-platform image from ECR: ${source_image}"
+
+        # Pull the multi-platform manifest and both platform images
+        docker pull --platform linux/amd64 "${source_image}-amd64"
+        docker pull --platform linux/arm64 "${source_image}-arm64"
+
+        # Convert comma-separated tags to array
+        IFS=',' read -ra TAGS <<< "${{ steps.docker_tags.outputs.TAGS_LIST }}"
+
+        # For each target tag, create a multi-platform manifest
+        for TAG in "${TAGS[@]}"; do
+          TAG=$(echo "$TAG" | xargs)  # Trim whitespace
+          echo "Creating multi-platform manifest for: ${TAG}"
+          
+          # Tag the platform-specific images for DockerHub
+          docker tag "${source_image}-amd64" "${TAG}-amd64"
+          docker tag "${source_image}-arm64" "${TAG}-arm64"
+          
+          # Push platform-specific images
+          docker push "${TAG}-amd64"
+          docker push "${TAG}-arm64"
+          
+          # Create and push multi-platform manifest
+          docker buildx imagetools create \
+            --tag "${TAG}" \
+            "${TAG}-amd64" \
+            "${TAG}-arm64"
+        done
+
+        echo "Successfully pulled from ECR and pushed to DockerHub"
+
     - name: Build And Push Docker Image
+      if: inputs.source_registry == ''
       uses: docker/build-push-action@v6.16.0
       with:
         context: "."

.github/workflows/release.yml

@@ -49,7 +49,7 @@ jobs:
       MANIFEST_AWS_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
 
   build_and_push_docker:
-    name: Build and Push Docker Image
+    name: Pull from ECR and Push to DockerHub
     needs: release
     runs-on: ubuntu-latest
     steps:
@@ -58,10 +58,27 @@ jobs:
         with:
           ref: ${{ needs.release.outputs.commit_hash }}
 
-      - name: Build and Push Docker Image to DockerHub
+      - name: Get Commit Hash
+        id: get_commit_hash
+        run: |
+          echo "short_sha=$(git rev-parse HEAD | cut -c1-10)" >> $GITHUB_OUTPUT
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
+        with:
+          aws-access-key-id: ${{ secrets.SAM_AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.SAM_AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ secrets.AWS_DEFAULT_REGION }}
+
+      - name: Login to Amazon ECR
+        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2.0.1
+
+      - name: Pull from ECR and Push to DockerHub
         uses: ./.github/actions/push-docker
         with:
           version_tag: ${{ needs.release.outputs.new_version }}
           push_latest: true
           docker_username: ${{ secrets.DOCKER_USERNAME }}
           docker_password: ${{ secrets.DOCKER_PASSWORD }}
+          source_registry: ${{ secrets.SAM_AWS_ECR_REGISTRY }}
+          source_image_tag: ${{ needs.release.outputs.new_version }}-${{ steps.get_commit_hash.outputs.short_sha }}