The Kubernetes Windows GMSA project is released on an as-needed basis. The process is as follows:
-
An issue is created proposing a new release with a changelog since the last release using the Cut a release issue template
-
All OWNERS must LGTM this release issue
-
An OWNER runs
git tag -s $VERSION
frommaster
branch and pushes the tag withgit push $VERSION
-
An OWNER promotes the
gcr.io/k8s-staging-gmsa-webhook/k8s-gmsa-webhook
image built the tagged commit.-
Follow setup steps for
kpromo
from here if needed -
Manually tag the desired container image in the staging registry as
$VERSION
-
Run
kpromo pr
to open a pull request to have tagged container image promoted from staging to release registrieskpromo pr --project gmsa-webhook --tag $VERSION --reviewers "@jayunit100 @jsturtevant @marosset" --fork {your github username}
-
Review / merge image promotion PR
-
Verify the image is available using
docker pull registry.k8s.io/gmsa-webhook/k8s-gmsa-webhook:$VERSION
. The image is pushed to the release repository via the post submit which can take an hour or two to trigger. View results at https://testgrid.k8s.io/sig-k8s-infra-k8sio#post-k8sio-image-promo
-
-
An OWNER creates a release with by
-
Navigating to releases and clicking on
Draft a new release
-
Selecting the tag for the current release version
-
Setting the title of the release to the current release version
-
Clicking
Auto-generate release notes
button (and editing what was generated as appropriate) -
Adding instructions on how to deploy the current release to the top of the releaes notes with the following template:
To deploy:
K8S_GMSA_DEPLOY_DOWNLOAD_REV='$VERSION' \ ./deploy-gmsa-webhook.sh --file ./gmsa-manifests \ --image registry.k8s.io/gmsa-webhook/k8s-gmsa-webhook:$VERSION
-
Clicking on
Publish Release
-
-
Update
image.tag
incharts/gmsa/chart.yaml
to $VERSION and create new chart package:- Run
helm package charts/gmsa
. Make sure the resulting tgz file is in thecharts/repo
folder. - Run
helm repo index charts/repo/
to update the helm index
- Run
-
Update the IMAGE_NAME variable in
admission_webhook/deploy/deploy-gmsa-webhook.sh
to use the latest released image. -
The release issue is closed
-
An announcement email is sent to
[email protected]
with the subject[ANNOUNCE] Kubernetes SIG-Windows GMSA Webhook $VERSION is Released
-
An announcement is posted in
#SIG-windows
in the Kubernetes slack.