Publish containers in Ark after merging relevant changes to main

This should speed up the container promotion process by avoiding
container repository & distribution setup tasks.

Author: markgoddard

.github/workflows/container-publish.yml

@@ -0,0 +1,59 @@
+---
+name: Publish container repositories
+on:
+  push:
+    branches: [main]
+    paths:
+      - '.github/workflows/container-publish.yml'
+      - 'ansible/dev-pulp-container-publish.yml'
+      - 'ansible/inventory/group_vars/all/dev-pulp-containers'
+      - 'ansible/inventory/group_vars/all/kolla'
+  workflow_dispatch:
+    inputs:
+      filter:
+        description: Space-separated list of regular expressions matching images to publish
+        type: string
+        required: false
+        default: ""
+      distros:
+        description: Space-separated list of base distributions to publish
+        type: string
+        required: false
+        default: ""
+
+env:
+  ANSIBLE_FORCE_COLOR: True
+  ANSIBLE_VAULT_PASSWORD_FILE: ${{ github.workspace }}/vault-pass
+jobs:
+  container-publish:
+    name: Publish container repositories
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+
+    - name: Preparing Vault password file
+      run: |
+        echo "$ANSIBLE_VAULT_PASSWORD" > "$ANSIBLE_VAULT_PASSWORD_FILE"
+      env:
+        ANSIBLE_VAULT_PASSWORD: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
+
+    - name: Installing dependencies
+      run: |
+        sudo apt update &&
+        sudo apt install -y python3-venv &&
+        python3 -m venv venv &&
+        source venv/bin/activate &&
+        pip install -U pip && 
+        pip install -r requirements.txt &&
+        ansible-galaxy collection install -r requirements.yml -p ansible/collections
+
+    - name: Publish container repositories
+      run: |
+        source venv/bin/activate &&
+        ansible-playbook -i ansible/inventory \
+        ansible/dev-pulp-container-publish.yml \
+        -e kolla_container_image_filter="'$FILTER'" \
+        -e kolla_base_distros_override="'$DISTROS'"
+      env:
+        FILTER: ${{ github.event.inputs.filter }}
+        DISTROS: ${{ github.event.inputs.distros }}

ansible/dev-pulp-container-promote.yml

@@ -18,22 +18,6 @@
     - debug:
         msg: "Promoting tag {{ dev_pulp_repository_container_promotion_tag }}"
 
-    - import_role:
-        name: stackhpc.pulp.pulp_repository
-      vars:
-        pulp_url: "{{ dev_pulp_url }}"
-        pulp_username: "{{ dev_pulp_username }}"
-        pulp_password: "{{ dev_pulp_password }}"
-        pulp_repository_container_repos: "{{ dev_pulp_repository_container_repos_release }}"
-
-    - import_role:
-        name: stackhpc.pulp.pulp_distribution
-      vars:
-        pulp_url: "{{ dev_pulp_url }}"
-        pulp_username: "{{ dev_pulp_username }}"
-        pulp_password: "{{ dev_pulp_password }}"
-        pulp_distribution_container: "{{ dev_pulp_distribution_container_release }}"
-
     # Copy tags from stackhpc-dev to stackhpc repositories.
     - import_role:
         name: stackhpc.pulp.pulp_container_content

ansible/dev-pulp-container-publish.yml

@@ -2,7 +2,8 @@
 # Repositories in the stackhpc-dev namespace are container push repositories,
 # and are therefore automatically published following a push. This playbook
 # configures the associated distributions, in particular setting the private
-# flag and applying a content guard.
+# flag and applying a content guard. It also creates Pulp repositories and
+# distributions for the stackhpc namespace.
 
 - name: Configure development Pulp container distributions
   hosts: localhost
@@ -15,3 +16,23 @@
         pulp_username: "{{ dev_pulp_username }}"
         pulp_password: "{{ dev_pulp_password }}"
         pulp_distribution_container: "{{ dev_pulp_distribution_container_development }}"
+
+- name: Configure release Pulp container repositories and distributions
+  hosts: localhost
+  gather_facts: false
+  tasks:
+    - import_role:
+        name: stackhpc.pulp.pulp_repository
+      vars:
+        pulp_url: "{{ dev_pulp_url }}"
+        pulp_username: "{{ dev_pulp_username }}"
+        pulp_password: "{{ dev_pulp_password }}"
+        pulp_repository_container_repos: "{{ dev_pulp_repository_container_repos_release }}"
+
+    - import_role:
+        name: stackhpc.pulp.pulp_distribution
+      vars:
+        pulp_url: "{{ dev_pulp_url }}"
+        pulp_username: "{{ dev_pulp_username }}"
+        pulp_password: "{{ dev_pulp_password }}"
+        pulp_distribution_container: "{{ dev_pulp_distribution_container_release }}"