66
66
release-image :
67
67
runs-on : ubuntu-latest
68
68
environment : release
69
- needs : image2commit
70
69
env :
71
70
VERSION : ${{ github.event.inputs.version || 'test-0.0.0-dev' }}
72
71
AUTHORS : ${{ github.event.inputs.authors || 'unknown' }}
@@ -95,15 +94,15 @@ jobs:
95
94
uses : docker/login-action@v3
96
95
with :
97
96
registry : docker.io
98
- username : ${{ secrets.ANDRPAC_DOCKER_USERNAME }}
99
- password : ${{ secrets.ANDRPAC_DOCKER_PASSWORD }}
97
+ username : ${{ secrets.DOCKER_USERNAME }}
98
+ password : ${{ secrets.DOCKER_PASSWORD }}
100
99
101
100
- name : Log in to Quay registry
102
101
uses : docker/login-action@v3
103
102
with :
104
103
registry : quay.io
105
- username : ${{ secrets.ANDRPAC_QUAY_USERNAME }}
106
- password : ${{ secrets.ANDRPAC_QUAY_PASSWORD }}
104
+ username : ${{ secrets.QUAY_USERNAME }}
105
+ password : ${{ secrets.QUAY_PASSWORD }}
107
106
108
107
- name : Log in to Artifactory
109
108
uses : docker/login-action@v3
@@ -112,9 +111,6 @@ jobs:
112
111
username : ${{ secrets.MDB_ARTIFACTORY_USERNAME }}
113
112
password : ${{ secrets.MDB_ARTIFACTORY_PASSWORD }}
114
113
115
- - name : Install devbox
116
- uses :
jetify-com/[email protected]
117
-
118
114
# This step configures all of the dynamic variables needed for later steps
119
115
- name : Configure job environment for downstream steps
120
116
id : tags
@@ -135,30 +131,6 @@ jobs:
135
131
echo "quay_certified_image_url=$quay_certified_image_url" >> $GITHUB_OUTPUT
136
132
137
133
# Move prerelease images to official release registries in Docker Hub and Quay
138
- - name : Move image to Docker registry release from prerelease
139
- run : devbox run -- ./scripts/move-image.sh
140
- env :
141
- IMAGE_SRC_REPO : ${{ env.DOCKER_PRERELEASE_REPO }}
142
- IMAGE_DEST_REPO : ${{ env.DOCKER_RELEASE_REPO }}
143
- IMAGE_SRC_TAG : ${{ steps.tags.outputs.promoted_tag }}
144
- IMAGE_DEST_TAG : ${{ steps.tags.outputs.release_tag }}
145
-
146
- - name : Move image to Quay registry release from prerelease
147
- run : devbox run -- ./scripts/move-image.sh
148
- env :
149
- IMAGE_SRC_REPO : ${{ env.QUAY_PRERELEASE_REPO }}
150
- IMAGE_DEST_REPO : ${{ env.QUAY_RELEASE_REPO }}
151
- IMAGE_SRC_TAG : ${{ steps.tags.outputs.promoted_tag }}
152
- IMAGE_DEST_TAG : ${{ steps.tags.outputs.release_tag }}
153
-
154
- # Create Openshift certified images
155
- - name : Create OpenShift certified image on Quay
156
- run : devbox run -- ./scripts/move-image.sh
157
- env :
158
- IMAGE_SRC_REPO : ${{ env.QUAY_PRERELEASE_REPO }}
159
- IMAGE_DEST_REPO : ${{ env.QUAY_RELEASE_REPO }}
160
- IMAGE_SRC_TAG : ${{ steps.tags.outputs.promoted_tag }}
161
- IMAGE_DEST_TAG : ${{ steps.tags.outputs.certified_tag }}
162
134
163
135
# Link updates to pr: all-in-one.yml, helm-updates, sdlc requirements
164
136
- name : Generate deployment configurations
@@ -168,55 +140,53 @@ jobs:
168
140
IMAGE_URL : ${{ steps.tags.outputs.docker_image_url }}
169
141
170
142
- name : Bump Helm chart version
171
- run : devbox run -- ./scripts/bump-helm-chart-version.sh
143
+ run : ./scripts/bump-helm-chart-version.sh
172
144
173
145
# Prepare SDLC requirement: signatures, sboms, compliance reports
174
146
# Note, signed images will live in mongodb/release and mongodb/signature repos
175
- - name : Sign released images
176
- run : |
177
- devbox run -- make sign IMG="${{ steps.tags.outputs.docker_image_url }}" SIGNATURE_REPO="${{ env.DOCKER_RELEASE_REPO }}"
178
- devbox run -- make sign IMG="${{ steps.tags.outputs.quay_image_url }}" SIGNATURE_REPO="${{ env.QUAY_RELEASE_REPO }}"
179
- devbox run -- make sign IMG="${{ steps.tags.outputs.docker_image_url }}" SIGNATURE_REPO="${{ env.DOCKER_SIGNATURE_REPO }}"
180
- devbox run -- make sign IMG="${{ steps.tags.outputs.quay_certified_image_url }}" SIGNATURE_REPO="${{ env.QUAY_RELEASE_REPO }}"
181
- devbox run -- make sign IMG="${{ steps.tags.outputs.quay_certified_image_url }}" SIGNATURE_REPO="${{ env.DOCKER_SIGNATURE_REPO }}"
182
- env :
183
- PKCS11_URI : ${{ secrets.PKCS11_URI }}
184
- GRS_USERNAME : ${{ secrets.GRS_USERNAME }}
185
- GRS_PASSWORD : ${{ secrets.GRS_PASSWORD }}
186
-
187
- - name : Generate SBOMs
188
- run : devbox run -- make generate-sboms RELEASED_OPERATOR_IMAGE="${{ env.DOCKER_RELEASE_REPO }}"
189
147
190
148
- name : Create SDLC report
191
- run : devbox run -- make gen-sdlc-checklist
192
-
149
+ run : make gen-sdlc-checklist
150
+
193
151
# Create PR on release branch with all updates generated
194
- - name : Create release branch with updates, tag new updates
152
+ - name : Make release changes
195
153
env :
196
- GITHUB_TOKEN : ${{ steps.generate_token.outputs.token }}
154
+ GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
197
155
run : |
198
- git config --global user.name "${{ steps.generate_token.outputs.user-name }}"
199
- git config --global user.email "${{ steps.generate_token.outputs.user-email }}"
200
-
156
+ export VERSION="${VERSION}"
201
157
export BRANCH="new-release/${VERSION}"
202
158
export COMMIT_MESSAGE="feat: release ${VERSION} from release-image workflow"
203
- export RELEASE_DIR="docs/releases/${VERSION}"
159
+ export RELEASE_DIR="docs/releases/v${VERSION}"
160
+
161
+ git config --global user.name "${{ steps.generate_token.outputs.user-name }}"
162
+ git config --global user.email "${{ steps.generate_token.outputs.user-email }}"
204
163
205
- git checkout -b "$BRANCH"
206
-
207
164
mkdir -p "$RELEASE_DIR"
208
- mv deploy "$RELEASE_DIR"/deploy
209
- mv bundle "$RELEASE_DIR"/bundle
210
- mv bundle.Dockerfile "$RELEASE_DIR"/bundle.Dockerfile
211
-
165
+ mv bundle "$RELEASE_DIR/bundle"
166
+ mv bundle.Dockerfile "$RELEASE_DIR/bundle.Dockerfile"
167
+ mv deploy "$RELEASE_DIR/deploy"
168
+ mv helm-charts "$RELEASE_DIR/helm-charts"
169
+
170
+ git add -f "$RELEASE_DIR"
171
+ git commit -m "temp: release content for ${VERSION}"
172
+
173
+ export SOURCE_COMMIT=$(git rev-parse HEAD)
174
+
175
+ git fetch origin
176
+ git checkout -b "$BRANCH" origin/main
177
+ git push origin "$BRANCH"
178
+
179
+ git checkout -f "$SOURCE_COMMIT" -- "$RELEASE_DIR"
212
180
git add -f "$RELEASE_DIR"
181
+
213
182
scripts/create-signed-commit.sh
214
183
215
184
gh pr create \
216
185
--draft \
217
- --head="$BRANCH" \
186
+ --base main \
187
+ --head "$BRANCH" \
218
188
--title "$COMMIT_MESSAGE" \
219
- --body "This is an autogenerated PR to prepare for the release"
189
+ --body "This is an autogenerated PR to prepare for the release"
220
190
221
191
prepare-environment :
222
192
name : Set up Environment Variables
0 commit comments