release.yml

name: "Release Container Image"

on:
  workflow_dispatch:
    inputs:
      registryName:
        description: "Target container registry. Defaults to ECR Public"
        required: false
        type: string
      region:
        description: "Target region. Defaults to us-east-1"
        required: false
        default: us-east-1
        type: string

permissions:
  contents: read
  id-token: write

jobs:
  unit-test:
    uses: ./.github/workflows/go.yml
  docker-build:
    uses: ./.github/workflows/docker-image.yml
  integ:
    permissions:
      contents: read
      id-token: write
      packages: write
    uses: ./.github/workflows/integ.yml
  release:
    environment: prod
    runs-on: ubuntu-latest
    needs: [unit-test, docker-build, integ]

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
        with:
          egress-policy: audit
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0
      - name: Set up QEMU
        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
        with:
          platforms: linux/amd64, linux/arm64
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
        with:
          role-to-assume: ${{ secrets.RELEASE_ROLE_ARN }}
          role-session-name: csi-driver-cd-${{ github.run_id }}
          aws-region: ${{ inputs.region }}
      - name: Run make
        run: make
        env:
          PRIVREPO: ${{ inputs.registryName }}
          REGION: ${{ inputs.region }}