# OKD/SCOS release procedure

## Validate
- Pick a nightly from https://origin-release.ci.openshift.org/#4.12.0-0.okd-scos (for 4.next, pick one from https://origin-release.ci.openshift.org/#4.13.0-0.okd-scos)
- Run the install with cluster-bot and ensure it's ready to be promoted; log in and check branding:

  launch registry.ci.openshift.org/origin/release-scos:<NIGHTLY>

- Export RELEASE env:

  export RELEASE="4.12.0-0.okd-scos-2022-10-22-232744"

- Check signatures:

  oc adm release info registry.ci.openshift.org/origin/release-scos:${RELEASE}

Copy `Digest` from output (taking away the `sha256:` prefix)

  ...
  Digest:    sha256:0132da68b7bc49ae27202585392ad1f6ee4951e0255627c15017775c6c9e33a6
  ...

Check signature:

  export DIGEST=<DIGEST>
  curl -Lvs https://storage.googleapis.com/openshift-ci-release/releases/signatures/openshift/release/sha256\=${DIGEST}/signature-1 | gpg -d

The output should look like:

  {
      "critical": {
      "type": "atomic container signature",
      "image": {
          "docker-manifest-digest": "sha256:874a0c414befe51f4e9040ebc139355122491eb76d15ccb964ccf3630e6ded1e"
      },
      "identity": {
          "docker-reference": "registry.ci.openshift.org/origin/release-scos:4.12.0-0.okd-scos-2022-10-22-232744"
      }
      },
      "optional": {
      "creator": "openshift release-controller",
      "timestamp": 1666481349
      }
  }

## Mirror
- Login to quay

  podman login quay.io

- Mirror the relase to quay:

  oc adm  release new --from-release registry.ci.openshift.org/origin/release-scos:${RELEASE} --mirror quay.io/okd/scos-content --to-image quay.io/okd/scos-release:${RELEASE} --name=${RELEASE}

- Test the release via cluster-bot

  launch quay.io/okd/scos-release:${RELEASE}

## Update release channel

- Login to https://console-openshift-console.apps.ci.l2s4.p1.openshiftapps.com/dashboards
- Switch to origin project

  oc project origin

- Tag quay image to the imagetag
For `4-scos-stable` releases, run:

  oc tag quay.io/okd/scos-release:${RELEASE} release-scos:${RELEASE}

For `4-scos-next` releases, run:

  oc tag quay.io/okd/scos-release:${RELEASE} release-scos-next:${RELEASE}

## Update GitHub releases
- Export tools

  oc adm release extract \
    --command-os='*' \
    --tools \
    --to=okd-scos-${RELEASE} \
    quay.io/okd/scos-release:${RELEASE}

- Sign binaries

  gpg -a -b okd-scos-${RELEASE}/sha256sum.txt

- Upload to GitHub

## Notify community
- Include links to GitHub release and OKD/SCOS release status page
- Send to okd-wg Google group
- Send to `#openshift-users` on kubernetes.slack.com