OKD/SCOS release procedure

Validate

• Pick a nightly from https://origin-release.ci.openshift.org/#4.12.0-0.okd-scos (for 4.next, pick one from https://origin-release.ci.openshift.org/#4.13.0-0.okd-scos)
• Run the install with cluster-bot and ensure it's ready to be promoted; log in and check branding:
  ​​launch registry.ci.openshift.org/origin/release-scos:<NIGHTLY>
  

• Export RELEASE env:
  ​​export RELEASE="4.12.0-0.okd-scos-2022-10-22-232744"
  

• Check signatures:
  ​​oc adm release info registry.ci.openshift.org/origin/release-scos:${RELEASE}
  

  Copy Digest from output (taking away the sha256: prefix)
  ​​...
  ​​Digest:    sha256:0132da68b7bc49ae27202585392ad1f6ee4951e0255627c15017775c6c9e33a6
  ​​...
  

  Check signature:
  ​​export DIGEST=<DIGEST>
  ​​curl -Lvs https://storage.googleapis.com/openshift-ci-release/releases/signatures/openshift/release/sha256\=${DIGEST}/signature-1 | gpg -d
  

  The output should look like:
  ​​{
  ​​    "critical": {
  ​​    "type": "atomic container signature",
  ​​    "image": {
  ​​        "docker-manifest-digest": "sha256:874a0c414befe51f4e9040ebc139355122491eb76d15ccb964ccf3630e6ded1e"
  ​​    },
  ​​    "identity": {
  ​​        "docker-reference": "registry.ci.openshift.org/origin/release-scos:4.12.0-0.okd-scos-2022-10-22-232744"
  ​​    }
  ​​    },
  ​​    "optional": {
  ​​    "creator": "openshift release-controller",
  ​​    "timestamp": 1666481349
  ​​    }
  ​​}
  

Mirror

• Login to quay

  ​​podman login quay.io
  

• Mirror the relase to quay:

  ​​oc adm  release new --from-release registry.ci.openshift.org/origin/release-scos:${RELEASE} --mirror quay.io/okd/scos-content --to-image quay.io/okd/scos-release:${RELEASE} --name=${RELEASE}
  

• Test the release via cluster-bot

  ​​launch quay.io/okd/scos-release:${RELEASE}
  

Update release channel

• Login to https://console-openshift-console.apps.ci.l2s4.p1.openshiftapps.com/dashboards
• Switch to origin project
  ​​oc project origin
  

• Tag quay image to the imagetag
  For 4-scos-stable releases, run:
  ​​oc tag quay.io/okd/scos-release:${RELEASE} release-scos:${RELEASE}
  

  For 4-scos-next releases, run:
  ​​oc tag quay.io/okd/scos-release:${RELEASE} release-scos-next:${RELEASE}
  

Update GitHub releases

• Export tools
  ​​oc adm release extract \
  ​​  --command-os='*' \
  ​​  --tools \
  ​​  --to=okd-scos-${RELEASE} \
  ​​  quay.io/okd/scos-release:${RELEASE}
  

• Sign binaries
  ​​gpg -a -b okd-scos-${RELEASE}/sha256sum.txt
  

• Upload to GitHub

Notify community

• Include links to GitHub release and OKD/SCOS release status page
• Send to okd-wg Google group
• Send to #openshift-users on kubernetes.slack.com