Add push-artifasts.sh script; extend Makefile

Author: MartinWeindel

.gitignore

@@ -5,6 +5,8 @@
 **/dev
 /bin
 /hack/tools/bin
+/artifacts
+images.txt
 
 cover.out
 *.coverprofile

Makefile

@@ -11,6 +11,8 @@ EFFECTIVE_VERSION           := $(VERSION)-$(shell git rev-parse HEAD)
 LD_FLAGS                    := "-w $(shell bash $(GARDENER_HACK_DIR)/get-build-ld-flags.sh k8s.io/component-base $(REPO_ROOT)/VERSION $(EXTENSION_PREFIX))"
 LEADER_ELECTION             := false
 IGNORE_OPERATION_ANNOTATION := true
+export REPO ?= ghcr.io/ironcore-dev
+export TAG ?= $(EFFECTIVE_VERSION)
 
 WEBHOOK_CONFIG_PORT	:= 8443
 WEBHOOK_CONFIG_MODE	:= url
@@ -33,6 +35,12 @@ endif
 TOOLS_DIR := $(HACK_DIR)/tools
 include $(GARDENER_HACK_DIR)/tools.mk
 
+KO := $(TOOLS_BIN_DIR)/ko
+# renovate: datasource=github-releases depName=ko-build/ko
+KO_VERSION ?= v0.17.1
+$(KO): $(call tool_version_file,$(KO),$(KO_VERSION))
+	GOBIN=$(abspath $(TOOLS_BIN_DIR)) go install github.com/google/ko@$(KO_VERSION)
+
 #########################################
 # Rules for local development scenarios #
 #########################################
@@ -78,6 +86,28 @@ docker-images:
 	@docker build --build-arg EFFECTIVE_VERSION=$(EFFECTIVE_VERSION) -t $(IMAGE_PREFIX)/$(NAME):$(VERSION)           -t $(IMAGE_PREFIX)/$(NAME):latest           -f Dockerfile -m 6g --target $(EXTENSION_PREFIX)-$(NAME)           .
 	@docker build --build-arg EFFECTIVE_VERSION=$(EFFECTIVE_VERSION) -t $(IMAGE_PREFIX)/$(ADMISSION_NAME):$(VERSION) -t $(IMAGE_PREFIX)/$(ADMISSION_NAME):latest -f Dockerfile -m 6g --target $(EXTENSION_PREFIX)-$(ADMISSION_NAME) .
 
+#################################################################
+# Rules related to binary build, Docker image build and release #
+#################################################################
+
+export PUSH ?= false
+
+.PHONY: images
+images: $(KO)
+	KO_DOCKER_REPO=$(REPO) $(KO) build --push=$(PUSH) \
+		--image-label org.opencontainers.image.source="https://github.com/ironcore-dev/gardener-extension-provider-ironcore" \
+		--sbom none -t $(TAG) --base-import-paths \
+		--platform linux/amd64,linux/arm64 \
+		./cmd/gardener-extension-provider-ironcore ./cmd/gardener-extension-admission-ironcore \
+		| tee images.txt
+
+.PHONY: artifacts-only
+artifacts-only: $(HELM) $(YQ)
+	hack/push-artifacts.sh
+
+.PHONY: artifacts
+artifacts: images artifacts-only
+
 #####################################################################
 # Rules for verification, formatting, linting, testing and cleaning #
 #####################################################################

hack/push-artifacts.sh

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+
+set -o errexit
+set -o nounset
+set -o pipefail
+
+charts=(
+  gardener-extension-provider-ironcore
+  gardener-extension-admission-ironcore/charts/application
+  gardener-extension-admission-ironcore/charts/runtime
+)
+
+helm_artifacts=artifacts/charts
+rm -rf "$helm_artifacts"
+mkdir -p "$helm_artifacts"
+cp -r charts/gardener-extension-* "$helm_artifacts"
+
+function image() {
+  grep "$1" images.txt
+}
+
+function image_repo() {
+  image "$1" | cut -d ':' -f 1
+}
+
+function image_tag() {
+  image "$1" | cut -d ':' -f 2-
+}
+
+function update_chart_values() {
+  for chart in charts/*; do
+    name=$(basename "$chart")
+    values_file="$helm_artifacts/$name/values.yaml"
+
+    if yq -e '. | has("image")' "$values_file" >/dev/null 2>&1; then
+      # update charts that have a ".image" field
+      yq -i "\
+        ( .image = \"$(image "$name")\" )\
+      " "$values_file"
+    elif yq -e '.global | has("image")' "$values_file" >/dev/null 2>&1; then
+      # update charts that have a ".global.image" field
+      yq -i "\
+        ( .global.image.repository = \"$(image_repo "$name")\" ) | \
+        ( .global.image.tag = \"$(image_tag "$name")\" )\
+      " "$values_file"
+    fi
+  done
+}
+
+# inject image references into chart values
+update_chart_values
+
+set -x
+# push to registry
+if [ "$PUSH" != "true" ] ; then
+  echo "Skip pushing artifacts because PUSH is not set to 'true'"
+  exit 0
+fi
+
+for chart in "${charts[@]}"; do
+  chart_name=$(yq -e .name "$helm_artifacts/$chart/Chart.yaml")
+  helm package "$helm_artifacts/$chart" --version "$TAG" -d "$helm_artifacts" >/dev/null 2>&1
+  helm push "$helm_artifacts/$chart_name-"* "oci://$REPO/charts"
+done