Release Process pt 1 (#35)

- Clean-up unnecessary assets from the repo generation template
 - Start of release process with goreleaser and github actions workflows

Author: bwagner5

.custom-gcl.yml

@@ -3,7 +3,7 @@
 # with all the plugins listed below.
 #
 # See: https://golangci-lint.run/plugins/module-plugins/
-version: v2.8.0
+version: v2.12.2
 plugins:
   # logcheck validates structured logging calls and parameters (e.g., balanced key-value pairs)
   - module: "sigs.k8s.io/logtools"

.devcontainer/devcontainer.json

@@ -0,0 +1,51 @@
+name: Release
+
+# Releases are cut from GitHub Actions only, triggered by pushing a vX.Y.Z tag.
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write # create the GitHub release
+  packages: write # push images to ghcr.io
+
+jobs:
+  release:
+    name: Run on Ubuntu
+    runs-on: ubuntu-latest
+    steps:
+      - name: Clone the code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 # GoReleaser needs full history and tags
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+          cache-dependency-path: |
+            go.sum
+            tools/go.sum
+
+      - name: Cache local tool binaries
+        uses: actions/cache@v4
+        with:
+          path: bin
+          key: tools-release-${{ runner.os }}-${{ hashFiles('Makefile', 'tools/go.sum') }}
+          restore-keys: |
+            tools-release-${{ runner.os }}-
+
+      # ko (run by GoReleaser) authenticates to the registry via the Docker
+      # config this writes; GITHUB_TOKEN carries packages:write from above.
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Release
+        run: make release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.devcontainer/post-install.sh

@@ -31,3 +31,6 @@ go.work
 
 # Test artifacts
 _artifacts/
+
+# Release artifacts (GoReleaser / build-installer output)
+dist/

.github/workflows/release.yml

@@ -45,6 +45,9 @@ linters:
           - dupl
           - lll
         path: internal/*
+      - linters:
+          - goconst
+        path: _test\.go
     paths:
       - third_party$
       - builtin$

.gitignore

@@ -0,0 +1,43 @@
+# GoReleaser configuration.
+# Cuts a GitHub release and publishes multi-arch (linux/amd64,linux/arm64)
+# container images to the ghcr repo. Runs in CI only; see
+# .github/workflows/release.yml. Test locally with `make release-snapshot`.
+#
+# Docs: https://goreleaser.com/customization/ko/
+version: 2
+
+# ko re-builds the binary itself using these settings (results are cached from
+# the build pipe). CGO is disabled so the image can run on the distroless base.
+builds:
+  - id: manager
+    main: ./cmd
+    binary: manager
+    env:
+      - CGO_ENABLED=0
+    flags:
+      - -trimpath
+    goos:
+      - linux
+    goarch:
+      - amd64
+      - arm64
+
+# Build and publish multi-arch images with ko. Auth comes from the CI env
+# (docker login to ghcr.io); the base image defaults to the distroless,
+# nonroot cgr.dev/chainguard/static.
+kos:
+  - build: manager
+    repositories:
+      - ghcr.io/oxidecomputer/cluster-api-provider-oxide
+    platforms:
+      - linux/amd64
+      - linux/arm64
+    tags:
+      - "{{ .Tag }}"
+      - latest
+    # Push to the bare repo (no import-path or MD5 suffix).
+    bare: true
+    preserve_import_paths: false
+    # Reproducible image/file timestamps from the release commit.
+    creation_time: "{{ .CommitTimestamp }}"
+    ko_data_creation_time: "{{ .CommitTimestamp }}"