Merge branch 'master' into e2e-tests-on-published-chart

Author: MaciejKaras

.evergreen-functions.yml

@@ -227,6 +227,9 @@ functions:
     type: setup
     params:
       working_dir: src/github.com/mongodb/mongodb-kubernetes
+      include_expansions_in_env:
+        - quay_prod_username
+        - quay_prod_robot_token
       add_to_path:
         - ${workdir}/bin
         - ${PROJECT_DIR}/bin
@@ -507,12 +510,12 @@ functions:
       params:
         working_dir: src/github.com/mongodb/mongodb-kubernetes
         binary: scripts/release/publish_helm_chart.sh
-        
+
   build_multi_cluster_binary:
     - command: subprocess.exec
       params:
         working_dir: src/github.com/mongodb/mongodb-kubernetes
-        binary: scripts/dev/run_python.sh scripts/release/kubectl-mongodb/python/build_kubectl_plugin.py
+        binary: scripts/dev/run_python.sh scripts/release/kubectl_mongodb/python/build_kubectl_plugin.py
 
   build_and_push_appdb_database:
     - command: subprocess.exec
@@ -542,50 +545,9 @@ functions:
         working_dir: src/github.com/mongodb/mongodb-kubernetes
         binary: scripts/release/pipeline.sh
         env:
-          IMAGE_NAME: ${IMAGE_NAME}
-          FLAGS: ${FLAGS}
-
-  pipeline_agent:
-    - command: subprocess.exec
-      retry_on_failure: true
-      type: setup
-      params:
-        shell: bash
-        <<: *e2e_include_expansions_in_env
-        working_dir: src/github.com/mongodb/mongodb-kubernetes
-        binary: scripts/release/pipeline_agent.sh
-        env:
-          FLAGS: ${FLAGS}
-
-  pipeline_ops_manager:
-    - command: subprocess.exec
-      retry_on_failure: true
-      type: setup
-      params:
-        shell: bash
-        <<: *e2e_include_expansions_in_env
-        working_dir: src/github.com/mongodb/mongodb-kubernetes
-        binary: scripts/release/pipeline_ops_manager.sh
-
-  pipeline_readiness_probe:
-    - command: subprocess.exec
-      retry_on_failure: true
-      type: setup
-      params:
-        shell: bash
-        <<: *e2e_include_expansions_in_env
-        working_dir: src/github.com/mongodb/mongodb-kubernetes
-        binary: scripts/release/pipeline_readiness_probe.sh
-
-  pipeline_version_upgrade_hook:
-    - command: subprocess.exec
-      retry_on_failure: true
-      type: setup
-      params:
-        shell: bash
-        <<: *e2e_include_expansions_in_env
-        working_dir: src/github.com/mongodb/mongodb-kubernetes
-        binary: scripts/release/pipeline_version_upgrade_hook.sh
+          IMAGE_NAME: ${image_name}
+          BUILD_SCENARIO_OVERRIDE: ${build_scenario}
+          FLAGS: ${flags}
 
   teardown_cloud_qa_all:
     - command: shell.exec
@@ -888,7 +850,7 @@ functions:
   release_kubectl_mongodb_plugin:
     - command: github.generate_token
       params:
-        expansion_name: generated_token
+        expansion_name: GH_TOKEN
     - command: shell.exec
       type: setup
       params:
@@ -911,10 +873,5 @@ functions:
           GOROOT: "/opt/golang/go1.24"
           MACOS_NOTARY_KEY: ${macos_notary_keyid}
           MACOS_NOTARY_SECRET: ${macos_notary_secret}
-        # shell.exec EVG Task doesn't have add_to_path, so we need to explicitly add the path export below.
-        script: |
-          set -Eeu pipefail
-          export GORELEASER_CURRENT_TAG=${OPERATOR_VERSION|*triggered_by_git_tag}
-          export PATH=$GOROOT/bin:$PATH
-          export GITHUB_TOKEN=${generated_token}
-          ${workdir}/goreleaser release --clean
+          GH_TOKEN: ${GH_TOKEN}
+        script: scripts/dev/run_python.sh scripts/release/kubectl_mongodb/python/promote_kubectl_plugin.py

.evergreen-release.yml

@@ -12,7 +12,7 @@ tasks:
       - func: build_multi_cluster_binary
       - func: pipeline
         vars:
-          IMAGE_NAME: meko-tests
+          image_name: meko-tests
 
   - name: release_operator
     tags: [ "image_release" ]
@@ -23,7 +23,7 @@ tasks:
       - func: quay_login
       - func: pipeline
         vars:
-          IMAGE_NAME: operator
+          image_name: operator
 
   # Releases init images to Quay
   - name: release_init_appdb
@@ -35,7 +35,7 @@ tasks:
       - func: quay_login
       - func: pipeline
         vars:
-          IMAGE_NAME: init-appdb
+          image_name: init-appdb
 
   - name: release_init_database
     tags: [ "image_release" ]
@@ -46,7 +46,7 @@ tasks:
       - func: quay_login
       - func: pipeline
         vars:
-          IMAGE_NAME: init-database
+          image_name: init-database
 
   - name: release_init_ops_manager
     tags: [ "image_release" ]
@@ -57,7 +57,7 @@ tasks:
       - func: quay_login
       - func: pipeline
         vars:
-          IMAGE_NAME: init-ops-manager
+          image_name: init-ops-manager
 
   - name: release_database
     tags: [ "image_release" ]
@@ -68,7 +68,7 @@ tasks:
       - func: quay_login
       - func: pipeline
         vars:
-          IMAGE_NAME: database
+          image_name: database
 
   - name: release_readiness_probe
     tags: [ "image_release" ]
@@ -77,7 +77,9 @@ tasks:
       - func: clone
       - func: setup_building_host
       - func: quay_login
-      - func: pipeline_readiness_probe
+      - func: pipeline
+        vars:
+          image_name: readiness-probe
 
   - name: release_version_upgrade_hook
     tags: [ "image_release" ]
@@ -86,7 +88,9 @@ tasks:
       - func: clone
       - func: setup_building_host
       - func: quay_login
-      - func: pipeline_version_upgrade_hook
+      - func: pipeline
+        vars:
+          image_name: upgrade-hook
 
   - name: prepare_and_upload_openshift_bundles
     tags: [ "openshift_bundles" ]
@@ -121,14 +125,25 @@ tasks:
       - func: clone
       - func: install_goreleaser
       - func: install_macos_notarization_service
+      - func: python_venv
       - func: release_kubectl_mongodb_plugin
-    
+
   - name: create_chart_release_pr
     tags: [ "helm_chart_release_pr" ]
     commands:
       - func: clone
       - func: python_venv
       - func: create_chart_release_pr
+  
+  - name: release_chart_to_oci_registry
+    tags: [ "release_chart_to_oci_registry" ]
+    commands:
+      - func: clone
+      - func: python_venv
+      - func: setup_kubectl
+      - func: setup_aws
+      - func: helm_registry_login
+      - func: publish_helm_chart
 
 ### Release build variants
 buildvariants:
@@ -255,3 +270,12 @@ buildvariants:
     allowed_requesters: [ "patch", "github_tag" ]
     tasks:
       - name: create_chart_release_pr
+
+  - name: release_chart_to_oci_registry
+    display_name: release_chart_to_oci_registry
+    tags: [ "release" ]
+    run_on:
+      - release-ubuntu2404-small # This is required for CISA attestation https://jira.mongodb.org/browse/DEVPROD-17780
+    allowed_requesters: [ "patch", "github_tag" ]
+    tasks:
+      - name: release_chart_to_oci_registry

.evergreen-tasks.yml

@@ -502,7 +502,7 @@ tasks:
     commands:
       - func: "e2e_test"
 
-  - name: e2e_disable_tls_scale_up
+  - name: e2e_disable_tls_and_scale
     tags: [ "patch-run" ]
     commands:
       - func: "e2e_test"