chore: update release

Author: migmartri

.github/workflows/release.yaml

@@ -7,9 +7,7 @@ on:
 
 jobs:
   test:
-    uses: chainloop-dev/bedrock-old/.github/workflows/test.yml@main
-    # secrets required to run the attestation on the testing job, otherwise the chainloop token is not available
-    secrets: inherit
+    uses: chainloop-dev/chainloop/.github/workflows/test.yml@main
 
   release:
     name: Release CLI and control-plane/artifact-cas container images
@@ -21,9 +19,9 @@ jobs:
       contents: write # required for goreleaser
     env:
       CHAINLOOP_VERSION: 0.8.89
-      CHAINLOOP_ROBOT_ACCOUNT: ${{ secrets.CHAINLOOP_WF_RELEASE }}
-      CONTAINER_IMAGE_CP: us-east1-docker.pkg.dev/bedrock-371810/chainloop/control-plane:${{ github.ref_name }}
-      CONTAINER_IMAGE_CAS: us-east1-docker.pkg.dev/bedrock-371810/chainloop/artifact-cas:${{ github.ref_name }}
+      CHAINLOOP_ROBOT_ACCOUNT: ${{ secrets.CHAINLOOP_ROBOT_ACCOUNT }}
+      CONTAINER_IMAGE_CP: ghcr.io/chainloop-dev/chainloop/control-plane:${{ github.ref_name }}
+      CONTAINER_IMAGE_CAS: ghcr.io/chainloop-dev/chainloop/artifact-cas:${{ github.ref_name }}
     steps:
       - name: Install Cosign
         uses: sigstore/cosign-installer@v2.5.0
@@ -45,25 +43,18 @@ jobs:
       - name: Initialize Attestation
         run: |
           chainloop attestation init
-      - name: Set up Go
-        uses: actions/setup-go@v3
-        with:
-          go-version: "1.20"
 
-      - name: "Configure Google Cloud credentials"
-        id: "auth-google"
-        uses: "google-github-actions/auth@v0"
+      - name: Docker login to Github Packages
+        uses: docker/login-action@v2
         with:
-          token_format: "access_token"
-          workload_identity_provider: projects/1044976554810/locations/global/workloadIdentityPools/chainloop-github-pool/providers/github-provider
-          service_account: chainloop-release-github@bedrock-371810.iam.gserviceaccount.com
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Login to GAR
-        uses: docker/login-action@v2
+      - name: Set up Go
+        uses: actions/setup-go@v3
         with:
-          registry: us-east1-docker.pkg.dev
-          username: oauth2accesstoken
-          password: ${{ steps.auth-google.outputs.access_token }}
+          go-version: "1.20"
 
       - name: Run GoReleaser
         id: release
@@ -130,71 +121,3 @@ jobs:
         if: ${{ cancelled() }}
         run: |
           chainloop attestation reset --trigger cancellation
-
-  deploy:
-    name: Deploy to Kubernetes
-    runs-on: ubuntu-latest
-    needs: release
-    strategy:
-      fail-fast: false
-      matrix:
-        app:
-          - controlplane
-          - frontend
-          - artifact-cas
-    if: github.ref_type == 'tag' # Guard to make sure we are releasing once
-    permissions:
-      id-token: write
-      contents: write
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-
-      - name: "Configure Google Cloud credentials"
-        id: "auth-google"
-        uses: "google-github-actions/auth@v0"
-        with:
-          token_format: "access_token"
-          workload_identity_provider: projects/1044976554810/locations/global/workloadIdentityPools/chainloop-github-pool/providers/github-provider
-          service_account: chainloop-release-github@bedrock-371810.iam.gserviceaccount.com
-
-      - name: "Get Google Kubernetes Engine credentials"
-        uses: "google-github-actions/get-gke-credentials@v1"
-        with:
-          cluster_name: "bedrock"
-          location: "us-central1"
-
-      - name: Check kubectl
-        run: kubectl cluster-info
-
-      - name: Check Helm version
-        run: helm version
-
-      - name: Bump Helm Chart
-        if: ${{ matrix.app == 'controlplane' || matrix.app == 'artifact-cas' }}
-        run: cd deployment && ./bump-chart-app-version.sh ${{ matrix.app }}/chart/Chart.yaml ${{ github.ref_name }}
-
-      - name: Bump Helm Chart Frontend
-        if: ${{ matrix.app == 'frontend' }}
-        run: |
-          # The frontend follows upstream frontend version instead
-          LATEST_FRONTEND=$(gh api repos/chainloop-dev/frontend/tags -q ".[0].name")
-          cd deployment && ./bump-chart-app-version.sh ${{ matrix.app }}/chart/Chart.yaml ${LATEST_FRONTEND}
-        env:
-          # PAT token with permissions to access the frontend private repository
-          GITHUB_TOKEN: ${{ secrets.PAT_FRONTEND_TAGS_LIST }}
-
-      - name: Deploy to production
-        run: make -C deployment/${{ matrix.app }} upgrade-prod
-
-      - name: Commit new Helm Chart
-        uses: stefanzweifel/git-auto-commit-action@v4
-        with:
-          commit_message: Bump ${{ matrix.app }} Chart Version to ${{github.ref_name}}
-          skip_checkout: false
-          file_pattern: "*/*/chart/Chart.yaml"
-          branch: main
-          commit_author: Chainloop bot <bot@chainloop.dev>
-          push_options: "--force"

.goreleaser.yml

@@ -35,10 +35,6 @@ archives:
     # Override default to not to include the readme nor license file
     files:
       - none*
-blobs:
-  - provider: gs
-    bucket: chainloop-releases-public
-    folder: "cli/{{ .Version }}"
 
 checksum:
   name_template: "checksums.txt"
@@ -66,14 +62,14 @@ dockers:
     ids:
       - control-plane
     image_templates:
-      - "us-east1-docker.pkg.dev/bedrock-371810/chainloop/control-plane:{{ .Tag }}"
-      - "us-east1-docker.pkg.dev/bedrock-371810/chainloop/control-plane:latest"
+      - "ghcr.io/chainloop-dev/chainloop/control-plane:{{ .Tag }}"
+      - "ghcr.io/chainloop-dev/chainloop/control-plane:latest"
   - dockerfile: app/artifact-cas/Dockerfile.goreleaser
     ids:
       - artifact-cas
     image_templates:
-      - "us-east1-docker.pkg.dev/bedrock-371810/chainloop/artifact-cas:{{ .Tag }}"
-      - "us-east1-docker.pkg.dev/bedrock-371810/chainloop/artifact-cas:latest"
+      - "ghcr.io/chainloop-dev/chainloop/artifact-cas:{{ .Tag }}"
+      - "ghcr.io/chainloop-dev/chainloop/artifact-cas:latest"
 
 release:
   extra_files: