use kaniko for image release

cicd/release-image-in-registry.yml

@@ -5,40 +5,34 @@ stages:
   - build
   - test
   - release
-  - cleanup
 
-variables:
-  DOCKER_TLS_CERTDIR: "/certs"
-  CONTAINER_TEST_IMAGE: $CI_REGISTRY_IMAGE/$SRC_PATH/test:$CI_COMMIT_REF_SLUG
-
-before_script:
-  - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
-
-build:
-  stage: build
-  script:
-    - docker build --build-arg tag=v${CI_PIPELINE_IID} --pull -t $CONTAINER_TEST_IMAGE ./$SRC_PATH
-    - docker push $CONTAINER_TEST_IMAGE
-
-############################################
-# TODO add integration tests to the test stage
-#integration-tests:
-#  stage: test
+#.release-images-template:
+#  stage: release
 #  script:
-#    - echo "add integration tests"
-############################################
+#    - docker pull $CONTAINER_TEST_IMAGE
+#    - docker tag $CONTAINER_TEST_IMAGE $CONTAINER_RELEASE_IMAGE
+#    - docker push $CONTAINER_RELEASE_IMAGE
 
 .release-images-template:
   stage: release
+  image:
+    name: gcr.io/kaniko-project/executor:debug
+    entrypoint: [""]
+  before_script:
+    - mkdir -p /kaniko/.docker
+    - echo "{\"auths\":{\"${CI_REGISTRY}\":{\"auth\":\"$(printf "%s:%s" "${CI_REGISTRY_USER}" "${CI_REGISTRY_PASSWORD}" | base64 | tr -d '\n')\"}}}" > /kaniko/.docker/config.json
   script:
-    - docker pull $CONTAINER_TEST_IMAGE
-    - docker tag $CONTAINER_TEST_IMAGE $CONTAINER_RELEASE_IMAGE
-    - docker push $CONTAINER_RELEASE_IMAGE
+    - >-
+      /kaniko/executor
+      --context "${CI_PROJECT_DIR}/${SRC_PATH}"
+      --dockerfile "${CI_PROJECT_DIR}/${SRC_PATH}/Dockerfile"
+      --destination "${CONTAINER_RELEASE_IMAGE}"
+  retry: 2
 
 release-versioned-images:
   extends: .release-images-template
   variables:
-    CONTAINER_RELEASE_IMAGE: $CI_REGISTRY_IMAGE/$SRC_PATH/stable:v$CI_PIPELINE_IID
+    CONTAINER_RELEASE_IMAGE: $CI_REGISTRY_IMAGE/$SRC_PATH/stable:$CI_COMMIT_SHORT_SHA
   only:
     refs:
       - main
@@ -58,18 +52,3 @@ release-latest-image:
   only:
     refs:
       - main
-
-cleanup-test-image:
-  stage: cleanup
-  variables:
-    REG_SHA256: ade837fc5224acd8c34732bf54a94f579b47851cc6a7fd5899a98386b782e228
-    REG_VERSION: 0.16.1
-  before_script:
-    - apk add --no-cache curl
-    - curl --fail --show-error --location "https://github.com/genuinetools/reg/releases/download/v$REG_VERSION/reg-linux-amd64" --output /usr/local/bin/reg
-    - echo "$REG_SHA256  /usr/local/bin/reg" | sha256sum -c -
-    - chmod a+x /usr/local/bin/reg
-  script:
-    - /usr/local/bin/reg rm -d --auth-url $CI_REGISTRY -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CONTAINER_TEST_IMAGE # deletes test images
-    - echo "TODO delete only test image"
-  when: always