Merge pull request #9326 from gkurz/draft-release

Only tag and publish the release when it is fully ready

.github/workflows/release.yaml

@@ -6,16 +6,11 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout code
+      - name: Checkout repository
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
-      - name: Get the new release version
-        run: |
-          release_version=$(./tools/packaging/release/release.sh release-version)
-          echo "RELEASE_VERSION=$release_version" >> "$GITHUB_ENV"
-
       - name: Create a new release
         run: |
           ./tools/packaging/release/release.sh create-new-release
@@ -75,7 +70,7 @@ jobs:
           release_version=$(./tools/packaging/release/release.sh release-version)
           echo "KATA_DEPLOY_IMAGE_TAGS=$release_version latest" >> "$GITHUB_ENV"
 
-      - name: Push multi-arch manifest
+      - name: Publish multi-arch manifest on docker.io and quay.io
         run: |
           ./tools/packaging/release/release.sh publish-multiarch-manifest
         env:
@@ -85,51 +80,56 @@ jobs:
     needs: [build-and-push-assets-amd64, build-and-push-assets-arm64, build-and-push-assets-s390x, build-and-push-assets-ppc64le]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout repository
+        uses: actions/checkout@v4
 
       - name: Set KATA_STATIC_TARBALL env var
         run: |
           tarball=$(pwd)/kata-static.tar.xz
           echo "KATA_STATIC_TARBALL=${tarball}" >> "$GITHUB_ENV"
 
-      - name: download-artifacts-amd64
+      - name: Download amd64 artifacts
         uses: actions/download-artifact@v3
         with:
           name: kata-static-tarball-amd64
-      - name: push amd64 static tarball to github
+
+      - name: Upload amd64 static tarball to GitHub
         run: |
           ./tools/packaging/release/release.sh upload-kata-static-tarball
         env:
           GH_TOKEN: ${{ github.token }}
           ARCHITECTURE: amd64
 
-      - name: download-artifacts-arm64
+      - name: Download arm64 artifacts
         uses: actions/download-artifact@v3
         with:
           name: kata-static-tarball-arm64
-      - name: push arm64 static tarball to github
+
+      - name: Upload arm64 static tarball to GitHub
         run: |
           ./tools/packaging/release/release.sh upload-kata-static-tarball
         env:
           GH_TOKEN: ${{ github.token }}
           ARCHITECTURE: arm64
 
-      - name: download-artifacts-s390x
+      - name: Download s390x artifacts
         uses: actions/download-artifact@v3
         with:
           name: kata-static-tarball-s390x
-      - name: push s390x static tarball to github
+
+      - name: Upload s390x static tarball to GitHub
         run: |
           ./tools/packaging/release/release.sh upload-kata-static-tarball
         env:
           GH_TOKEN: ${{ github.token }}
           ARCHITECTURE: s390x
 
-      - name: download-artifacts-ppc64le
+      - name: Download ppc64le artifacts
         uses: actions/download-artifact@v3
         with:
           name: kata-static-tarball-ppc64le
-      - name: push ppc64le static tarball to github
+
+      - name: Upload ppc64le static tarball to GitHub
         run: |
           ./tools/packaging/release/release.sh upload-kata-static-tarball
         env:
@@ -140,8 +140,10 @@ jobs:
     needs: release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - name: upload versions.yaml
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Upload versions.yaml to GitHub
         run: |
           ./tools/packaging/release/release.sh upload-versions-yaml-file
         env:
@@ -151,8 +153,10 @@ jobs:
     needs: release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - name: generate-and-upload-tarball
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Generate and upload vendored code tarball
         run: |
           ./tools/packaging/release/release.sh upload-vendored-code-tarball
         env:
@@ -162,9 +166,24 @@ jobs:
     needs: release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - name: download-and-upload-tarball
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Download libseccomp tarball and upload it to GitHub
         run: |
           ./tools/packaging/release/release.sh upload-libseccomp-tarball
         env:
           GH_TOKEN: ${{ github.token }}
+
+  publish-release:
+    needs: [ build-and-push-assets-amd64, build-and-push-assets-arm64, build-and-push-assets-s390x, build-and-push-assets-ppc64le, publish-multi-arch-images, upload-multi-arch-static-tarball, upload-versions-yaml, upload-cargo-vendored-tarball, upload-libseccomp-tarball ]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Publish a release
+        run: |
+          ./tools/packaging/release/release.sh publish-release
+        env:
+          GH_TOKEN: ${{ github.token }}