ci: add staging ci for release prep

Signed-off-by: Abhinandan Purkait <[email protected]>

Author: Abhinandan-Purkait

.github/workflows/release.yml

@@ -1,136 +1,12 @@
-# Copyright 2018-2020 The OpenEBS Authors. All rights reserved.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
 name: Release Images and Charts
 
 on:
   release:
     types:
-      - 'created'
+      - "created"
 
 jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Shellcheck
-        uses: reviewdog/action-shellcheck@v1
-        with:
-          github_token: ${{ secrets.github_token }}
-          reporter: github-pr-review
-          path: "."
-          pattern: "*.sh"
-
-      - uses: cachix/install-nix-action@v22
-      - uses: rrbutani/[email protected]
-        with:
-          file: shell.nix
-
-      - name: Set up Go 1.19
-        uses: actions/setup-go@v5
-        with:
-          go-version: 1.19.13
-          cache: false
-
-      - name: Check if the chart is publishable
-        run: |
-          TAG=${{ github.event.release.tag_name }}
-          ./scripts/update-chart-version.sh --tag $TAG --publish-release
-
-      - name: Run chart-testing lint
-        run: |
-          ct lint --config ct.yaml
-
-  unit-test:
-    runs-on: ubuntu-latest
-    needs: ['lint']
-    steps:
-      - name: Set up Go 1.19
-        uses: actions/setup-go@v5
-        with:
-          go-version: 1.19.13
-
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Unit test
-        run: make test
-
-      - name: Verify corrections
-        run: make verify-src
-
-      - name: Upload Coverage Report
-        uses: codecov/codecov-action@v4
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          file: ./coverage.txt
-          name: coverage-$(date +%s)
-          flags: unittests
-
-  integration-test:
-    runs-on: ubuntu-22.04
-    needs: ['lint', 'unit-test']
-    strategy:
-      matrix:
-        kubernetes: [v1.27.2]
-    steps:
-      - name: Set up Go 1.19
-        uses: actions/setup-go@v5
-        with:
-          go-version: 1.19.13
-
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Build images locally
-        run: make provisioner-localpv-image || exit 1;
-
-      - name: Setup Minikube-Kubernetes
-        uses: medyagh/setup-minikube@latest
-        with:
-          cache: false
-          minikube-version: 1.31.1
-          driver: none
-          kubernetes-version: ${{ matrix.kubernetes }}
-          cni: calico
-          start-args: '--install-addons=false'
-
-      - name: Set up infra for integration test
-        run: |
-          sudo apt-get update && sudo apt-get install -y xfsprogs quota linux-modules-extra-`uname -r`
-          go install -mod=mod github.com/onsi/ginkgo/v2/[email protected]
-          helm install localpv-provisioner ./deploy/helm/charts -n openebs --create-namespace --set localpv.image.pullPolicy=Never --set analytics.enabled=false
-          kubectl get pods -A
-
-      - name: Integration test
-        run: |
-          make integration-test
-
-      - name: Upload Integration Test Coverage Report
-        uses: codecov/codecov-action@v4
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          file: ./tests/integration_coverage.txt
-          name: coverage-integration-test-$(date +%s)
-          flags: integrationtests
-
-  provisioner-localpv:
-    needs: ['integration-test']
+  release-images-and-chart:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -143,111 +19,84 @@ jobs:
           echo "NIX_PATH=$NIX_PATH" >> $GITHUB_ENV
           nix-shell --pure --run "echo" ./shell.nix
 
-      - name: Check if the chart is publishable
-        run: |
-          TAG=${{ github.event.release.tag_name }}
-          nix-shell --pure --run "./scripts/update-chart-version.sh --tag $TAG --publish-release" ./shell.nix
-
       - name: Set Image Org
-        # sets the default IMAGE_ORG to openebs
         run: |
-          [ -z "${{ secrets.IMAGE_ORG }}" ] && IMAGE_ORG=openebs || IMAGE_ORG=${{ secrets.IMAGE_ORG}}
+          [ -z "${{ secrets.IMAGE_ORG }}" ] && IMAGE_ORG=openebs || IMAGE_ORG=${{ secrets.IMAGE_ORG }}
           echo "IMAGE_ORG=${IMAGE_ORG}" >> $GITHUB_ENV
 
-      - name: Set IMAGE_TAG and BRANCH
-        run: |
-          BRANCH=${{ github.ref_name }}
-          echo "BRANCH=$BRANCH" >> $GITHUB_ENV
-          echo "IMAGE_TAG=$(awk -F': ' '/^version:/ {print $2}' deploy/helm/charts/Chart.yaml)" >> $GITHUB_ENV
+      - name: Log in to GHCR for Helm
+        run: nix-shell --pure --run "echo ${{ secrets.GITHUB_TOKEN }} | helm registry login ghcr.io -u ${{ github.actor }} --password-stdin" ./shell.nix
 
-      - name: Set Build Date
-        id: date
+      - name: Pull OCI chart from GHCR
+        env:
+          IMAGE_ORG: ${{ env.IMAGE_ORG }}
+          RAW_TAG: ${{ github.ref_name }}
         run: |
-          echo "DATE=$(date -u +'%Y-%m-%dT%H:%M:%S%Z')" >> $GITHUB_OUTPUT
+          TAG="${RAW_TAG#v}"
+          echo "Using chart version: $TAG"
 
-      - name: Docker meta
-        id: docker_meta
-        uses: docker/metadata-action@v4
-        with:
-          # add each registry to which the image needs to be pushed here
-          images: |
-            ${{ env.IMAGE_ORG }}/provisioner-localpv
-            quay.io/${{ env.IMAGE_ORG }}/provisioner-localpv
-            ghcr.io/${{ env.IMAGE_ORG }}/provisioner-localpv
-          tags: |
-            type=raw,value=latest,enable=false
-            type=raw,value=${{ env.IMAGE_TAG }}
-
-      - name: Print Tag info
-        run: |
-          echo "BRANCH: ${{ env.BRANCH }}"
-          echo "RELEASE_TAG: ${{ steps.docker_meta.outputs.tags }}"
+          rm -rf deploy/helm/charts
+          mkdir -p charts-staged charts-final deploy/helm/charts
 
-      - name: Setup QEMU
-        uses: docker/setup-qemu-action@v2
-        with:
-          platforms: all
+          CHART_REF=oci://ghcr.io/${IMAGE_ORG}/helm/localpv-provisioner
+          helm pull "$CHART_REF" \
+            --version "$TAG" \
+            --destination charts-staged
 
-      - name: Setup Docker Buildx
-        id: buildx
-        uses: docker/setup-buildx-action@v2
-        with:
-          version: v0.5.1
+          tar -xzf charts-staged/localpv-provisioner-"$TAG".tgz -C charts-final
+
+          mv charts-final/localpv-provisioner/* deploy/helm/charts
+
+      - name: Set Chart Version
+        run: |
+          echo "VERSION=$(awk -F': ' '/^version:/ {print $2}' deploy/helm/charts/Chart.yaml)" >> $GITHUB_ENV
 
-      - name: Login to DockerHub
-        uses: docker/login-action@v2
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to Quay
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: quay.io
           username: ${{ secrets.QUAY_USERNAME }}
           password: ${{ secrets.QUAY_TOKEN }}
 
       - name: Login to GHCR
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Build and Push Image
-        uses: docker/build-push-action@v4
-        with:
-          context: .
-          file: ./buildscripts/provisioner-localpv/provisioner-localpv.Dockerfile
-          push: true
-          platforms: linux/amd64, linux/arm64, linux/arm/v7, linux/ppc64le
-          tags: |
-            ${{ steps.docker_meta.outputs.tags }}
-          build-args: |
-            DBUILD_DATE=${{ steps.date.outputs.DATE }}
-            DBUILD_REPO_URL=https://github.com/openebs/dynamic-localpv-provisioner
-            DBUILD_SITE_URL=https://openebs.io
-            BRANCH=${{ env.BRANCH }}
-
-  release-chart:
-    runs-on: ubuntu-latest
-    needs: ["provisioner-localpv"]
-    steps:
-      - uses: actions/checkout@v4
+      - name: Mirror multi-arch image with crane to Dockerhub
+        env:
+          SRC: ghcr.io/${{ env.IMAGE_ORG }}/dev/provisioner-localpv:${{ env.VERSION }}
+          DH: docker.io/${{ env.IMAGE_ORG }}/provisioner-localpv:${{ env.VERSION }}
+        run: |
+            nix-shell --pure --run "crane copy --platform all ${{ env.SRC }} ${{ env.DH }}" ./shell.nix
 
-      - uses: cachix/install-nix-action@v22
-      - name: Pre-populate nix-shell
+      - name: Mirror multi-arch image with crane to Github
+        env:
+          SRC: ghcr.io/${{ env.IMAGE_ORG }}/dev/provisioner-localpv:${{ env.VERSION }}
+          GH: ghcr.io/${{ env.IMAGE_ORG }}/provisioner-localpv:${{ env.VERSION }}
         run: |
-          export NIX_PATH=nixpkgs=$(jq '.nixpkgs.url' nix/sources.json -r)
-          echo "NIX_PATH=$NIX_PATH" >> $GITHUB_ENV
-          nix-shell --pure --run "echo" ./shell.nix
+            nix-shell --pure --run "crane copy --platform all ${{ env.SRC }} ${{ env.GH }}" ./shell.nix
+
+      - name: Mirror multi-arch image with crane to Quay
+        env:
+          SRC: ghcr.io/${{ env.IMAGE_ORG }}/dev/provisioner-localpv:${{ env.VERSION }}
+          QY: quay.io/${{ env.IMAGE_ORG }}/provisioner-localpv:${{ env.VERSION }}
+        run: |
+            nix-shell --pure --run "crane copy --platform all ${{ env.SRC }} ${{ env.QY }}"
 
-      - name: Check if the chart is publishable
+      - name: Update the registry and the repository
         run: |
-          TAG=${{ github.event.release.tag_name }}
-          nix-shell --pure --run "./scripts/update-chart-version.sh --tag $TAG --publish-release" ./shell.nix
+          nix-shell --pure --run "./scripts/update-reg-repo.sh --registry docker.io/ --repository ${{ env.IMAGE_ORG }}/provisioner-localpv" ./shell.nix
 
-      - name: Publish dynamic localpv develop or prerelease helm chart
+      - name: Publish chart via helm-gh-pages
         uses: stefanprodan/helm-gh-pages@master
         with:
           token: ${{ secrets.GITHUB_TOKEN }}