GHA: init github actions

Signed-off-by: Vicente Cheng <[email protected]>

.github/workflows/dev.yml

@@ -0,0 +1,14 @@
+name: Dev Build and Publish
+
+on:
+  push:
+    branches:
+    - master
+
+jobs:
+  build-for-dev:
+    uses: ./.github/workflows/factory.yml
+    with:
+      tag: ${{ github.ref_name }}-head
+      push: true
+    secrets: inherit

.github/workflows/factory.yml

@@ -0,0 +1,57 @@
+on:
+  workflow_call:
+    inputs:
+      tag:
+        required: true
+        type: string
+      push:
+        required: true
+        type: boolean
+
+env:
+  repo: "rancher"
+  controllerImageName: "harvester-networkfs-manager"
+
+jobs:
+  dapper-build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v4
+
+    - name: Set up QEMU
+      uses: docker/setup-qemu-action@v3
+
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Run dapper
+      run: make ci
+
+    - name: Read some Secrets
+      uses: rancher-eio/read-vault-secrets@main
+      if: ${{ inputs.push == true }}
+      with:
+        secrets: |
+          secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials username | DOCKER_USERNAME ;
+          secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials password | DOCKER_PASSWORD
+
+    - name: Login to Docker Hub
+      uses: docker/login-action@v3
+      if: ${{ inputs.push == true }}
+      with:
+        username: ${{ env.DOCKER_USERNAME }}
+        password: ${{ env.DOCKER_PASSWORD }}
+
+    - name: Docker Build (Controller)
+      uses: docker/build-push-action@v5
+      with:
+        provenance: false
+        context: .
+        platforms: linux/amd64,linux/arm64
+        file: package/Dockerfile
+        push: ${{ inputs.push }}
+        tags: ${{ env.repo }}/${{ env.controllerImageName }}:${{ inputs.tag }}

.github/workflows/pull_request.yml

@@ -0,0 +1,13 @@
+name: Pull Request Build
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+
+jobs:
+  build-for-dev:
+    uses: ./.github/workflows/factory.yml
+    with:
+      tag: pr-${{ github.event.number }}
+      push: false
+    secrets: inherit

.github/workflows/release.yml

@@ -0,0 +1,14 @@
+name: Release Build and Publish
+
+on:
+  push:
+    tags:
+    - v**
+
+jobs:
+  build-for-release:
+    uses: ./.github/workflows/factory.yml
+    with:
+      tag: ${{ github.ref_name }}
+      push: true
+    secrets: inherit