From ca0902773442cc5ab0e78dbd003b0db5d83275ca Mon Sep 17 00:00:00 2001
From: Rafal Foks <r.fok74@gmail.com>
Date: Fri, 24 May 2024 11:28:28 +0200
Subject: [PATCH] Semantic versionining in CM release images (#10769)

---
 .../kyma-project/compass-manager/build.yaml   | 55 ++++++++++++++++++-
 1 file changed, 54 insertions(+), 1 deletion(-)

diff --git a/prow/jobs/kyma-project/compass-manager/build.yaml b/prow/jobs/kyma-project/compass-manager/build.yaml
index 15c72e8b2c10..a19d99cfe2a1 100644
--- a/prow/jobs/kyma-project/compass-manager/build.yaml
+++ b/prow/jobs/kyma-project/compass-manager/build.yaml
@@ -2,7 +2,7 @@ postsubmits: # runs on main
   kyma-project/compass-manager:
     - name: post-main-compass-manager-build
       annotations:
-        description: "Build the component image"
+        description: "Build the CM component image"
         owner: framefrog
       labels:
         prow.k8s.io/pubsub.project: "sap-kyma-prow"
@@ -52,3 +52,56 @@ postsubmits: # runs on main
           - name: signify-secret
             secret:
               secretName: signify-dev-secret
+    - name: post-release-compass-manager-build
+      annotations:
+        description: "Build the CM release component image"
+        owner: framefrog
+      labels:
+        prow.k8s.io/pubsub.project: "sap-kyma-prow"
+        prow.k8s.io/pubsub.runID: "post-release-compass-manager-build"
+        prow.k8s.io/pubsub.topic: "prowjobs"
+        preset-sa-kyma-push-images: "true"
+        preset-signify-prod-secret: "true"
+      always_run: true
+      skip_report: false
+      decorate: true
+      cluster: trusted-workload
+      max_concurrency: 10
+      branches:
+        - ^\d+\.\d+\.\d+(?:-.*)?$
+      spec:
+        containers:
+          - image: "europe-docker.pkg.dev/kyma-project/prod/image-builder:v20240521-098832b4"
+            command:
+              - "/image-builder"
+            args:
+              - "--name=compass-manager"
+              - "--config=/config/kaniko-build-config.yaml"
+              - "--context=."
+              - "--dockerfile=Dockerfile"
+              - "--tag=$(PULL_BASE_REF)"
+            resources:
+              requests:
+                memory: 6Gi
+                cpu: 1
+              limits:
+                memory: 6Gi
+            volumeMounts:
+              - name: config
+                mountPath: /config
+                readOnly: true
+              - name: signify-secret
+                mountPath: /secret
+                readOnly: true
+            securityContext:
+              privileged: false
+              seccompProfile:
+                type: RuntimeDefault
+              allowPrivilegeEscalation: false
+        volumes:
+          - name: config
+            configMap:
+              name: kaniko-build-config
+          - name: signify-secret
+            secret:
+              secretName: signify-dev-secret
\ No newline at end of file