diff --git a/.github/workflows/build-coreos.yml b/.github/workflows/build-coreos.yml index b0cd453e0..3e625957a 100644 --- a/.github/workflows/build-coreos.yml +++ b/.github/workflows/build-coreos.yml @@ -10,7 +10,7 @@ on: description: "Build debug image" type: boolean default: false - required: true + required: false jobs: build-coreos-image: diff --git a/.github/workflows/release-cli.yml b/.github/workflows/release-cli.yml index 95cccebfd..5726f9094 100644 --- a/.github/workflows/release-cli.yml +++ b/.github/workflows/release-cli.yml @@ -38,6 +38,21 @@ jobs: cosignPrivateKey: ${{ secrets.COSIGN_PRIVATE_KEY }} cosignPassword: ${{ secrets.COSIGN_PASSWORD }} + - name: Login to Azure + uses: ./.github/actions/azure_login + with: + azure_credentials: ${{ secrets.AZURE_CREDENTIALS }} + - name: Login to GCP + uses: ./.github/actions/gcp_login + with: + gcp_service_account_json: ${{ secrets.GCP_SERVICE_ACCOUNT }} + + - name: Build version manifest + run: | + cd hack/build-manifest/ + AZURE_SUBSCRIPTION_ID=0d202bbb-4fa7-4af8-8125-58c269a05435 go run . > versions-manifest.json + cat versions-manifest.json + - name: Release CLI # GitHub endorsed release project. See: https://github.com/actions/create-release uses: softprops/action-gh-release@1e07f4398721186383de40550babbdf2b84acfc5 @@ -47,3 +62,4 @@ jobs: files: | build/constellation-* build/cosign.pub + hack/build-manifest/versions-manifest.json diff --git a/docs/release.md b/docs/release.md index 32f29ebae..197582370 100644 --- a/docs/release.md +++ b/docs/release.md @@ -8,13 +8,27 @@ This checklist will prepare `v1.3.0` from `v1.2.0`. Adjust your version numbers * branch: `release/v1.3.0` * Container image tag: `v1.3.0` * Version of the image to build: `1.3.0` + ```sh + # Alternative from CLI + gh workflow run build-micro-service-manual.yml --ref release/v1.3.0 -F microService=access-manager -F imageTag=v1.3.0 -F version=1.3.0 + gh workflow run build-micro-service-manual.yml --ref release/v1.3.0 -F microService=join-service -F imageTag=v1.3.0 -F version=1.3.0 + gh workflow run build-micro-service-manual.yml --ref release/v1.3.0 -F microService=kmsserver -F imageTag=v1.3.0 -F version=1.3.0 + gh workflow run build-micro-service-manual.yml --ref release/v1.3.0 -F microService=verification-service -F imageTag=v1.3.0 -F version=1.3.0 + ``` 2. Use [Build operator manual](https://github.com/edgelesssys/constellation/actions/workflows/build-operator-manual.yml) and run the pipeline once with the following parameters: * branch: `release/v1.3.0` * Container image tag: `v1.3.0` + ```sh + # Alternative from CLI + gh workflow run build-operator-manual.yml --ref release/v1.3.0 -F imageTag=v1.3.0 + ``` 3. Review and update changelog with all changes since last release. [GitHub's diff view](https://github.com/edgelesssys/constellation/compare/v1.2.0...main) helps a lot! - 4. Update versions [versions.go](../internal/versions/versions.go#L33-L36) to `v1.3.0` + 4. Update versions [versions.go](../internal/versions/versions.go#L33-L36) to `v1.3.0` and **push your changes**. 5. Create a [production coreOS image](/.github/workflows/build-coreos.yml) - 6. Update [default images in config](/internal/config/config.go) + ```sh + gh workflow run build-coreos.yml --ref release/v1.3.0 -F debug=false -F coreOSConfigBranch=constellation + ``` + 6. Update [default images in config](/internal/config/images_enterprise.go) 7. Merge this branch back to `main` 3. Run E2E to confirm stability and [generate measurements](/.github/workflows/e2e-test-manual.yml) 4. Create a new tag in `constellation` on `main` diff --git a/internal/versions/versions.go b/internal/versions/versions.go index bcfee4c40..5cbc563f8 100644 --- a/internal/versions/versions.go +++ b/internal/versions/versions.go @@ -30,13 +30,13 @@ func IsSupportedK8sVersion(version string) bool { const ( // Constellation images. // These images are built in a way that they support all versions currently listed in VersionConfigs. - JoinImage = "ghcr.io/edgelesssys/constellation/join-service:v0.0.1-0.20220829144944-7c832273fd83" - AccessManagerImage = "ghcr.io/edgelesssys/constellation/access-manager:v1.5.0" - KmsImage = "ghcr.io/edgelesssys/constellation/kmsserver:v0.0.1-0.20220829144944-7c832273fd83" - VerificationImage = "ghcr.io/edgelesssys/constellation/verification-service:v0.0.1-0.20220829144944-7c832273fd83" + JoinImage = "ghcr.io/edgelesssys/constellation/join-service:v0.0.1" + AccessManagerImage = "ghcr.io/edgelesssys/constellation/access-manager:v0.0.1" + KmsImage = "ghcr.io/edgelesssys/constellation/kmsserver:v0.0.1" + VerificationImage = "ghcr.io/edgelesssys/constellation/verification-service:v0.0.1" GcpGuestImage = "ghcr.io/edgelesssys/gcp-guest-agent:20220713.00" NodeOperatorCatalogImage = "ghcr.io/edgelesssys/constellation/node-operator-catalog" - NodeOperatorVersion = "v1.5.0" + NodeOperatorVersion = "v0.0.1" NodeMaintenanceOperatorCatalogImage = "quay.io/medik8s/node-maintenance-operator-catalog" NodeMaintenanceOperatorVersion = "v0.13.0"