[CHA-0] Publish forked KubeBlocks image + chart to GHCR (1.0.2-getstream.x baseline)#5
Merged
Merged
Conversation
Add a workflow_dispatch workflow that packages deploy/helm and pushes it to oci://ghcr.io/getstream/charts/kubeblocks at the given version. Keep that version in lockstep with the fork controller image tag (e.g. 1.0.2-serial.2); chat's rocky installer pins the operator chart by it. Stop ignoring crds/ in the chart's .helmignore: upstream excludes it and installs CRDs via kbcli, but we ship a self-contained OCI chart, so the fork's CRDs (including externallyManaged) must travel with the chart.
Rework the publish workflow to build+push the operator IMAGE and package+push the CHART under one workflow_dispatch version input, so the two never drift. Default to the org-namespaced baseline 1.0.2-getstream.1 (no feature word). Image tag == chart version; chat's rocky installer pins both by it. Existing serial.* artifacts are left untouched.
mogita
changed the title
Document the canonical scheme in the workflow header and enforce it with a validate job: <upstream-base>-getstream.<n> (e.g. 1.0.2-getstream.1). A feature-named or malformed tag now fails fast before any build. Bump <n> per build; move <upstream-base> only on a real upstream rebase.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Establishes a single, org-namespaced fork-publishing path so chat's
rockycan install the forked KubeBlocks operator via Helm. Pairs with GetStream/chat#14218.One workflow, one version input, image + chart in lockstep (
getstream-publish.yml,workflow_dispatch):image:make push-manager-image IMG=ghcr.io/getstream/kubeblocks VERSION=<v>(multi-arch amd64/arm64).chart(needsimage):helm package deploy/helm+helm push oci://ghcr.io/getstream/charts->oci://ghcr.io/getstream/charts/kubeblocks:<v>.Image tag == chart version by construction, so they can never drift. Default version
1.0.2-getstream.1.Baseline rename
The fork baseline is now
1.0.2-getstream.x, not the feature-named1.0.2-serial.2. The fork carries more than the serial-rollout change (alsoComponentSystemAccount.externallyManaged), so a feature word no longer describes the baseline. Existingserial.*artifacts are left untouched; this publishes new tags..helmignoreStop ignoring
crds/. Upstream excludes it (installs CRDs via kbcli), but we ship a self-contained OCI chart, so the fork CRDs (incl.externallyManaged) must travel with the chart. Verified locally: the package contains all CRDs with theexternallyManagedschema.Notes for review
imagejob is the first CI build of the fork operator image (the priorserial.*image was pushed manually); the multi-arch build viamake push-manager-image+ QEMU may need a first-run tweak (buildx builder / codegen). Thechartjob is straightforward.GITHUB_TOKENwithpackages: write. First push toghcr.io/getstream/kubeblocks/ghcr.io/getstream/chartsmay need Actions to be granted write on those org packages (one-time). If the packages stay private, chat's bootstrap host needshelm registry login+ akb-systempull secret (noted in chat#14218).How to release
Actions -> "Publish KubeBlocks (GetStream fork)" -> Run on
getstream-> version1.0.2-getstream.1.