release_update_readme.yaml

---
name: update-readme-on-release
on:
  release:
    types: [released]
permissions:
  contents: read
jobs:
  update-readme:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
      with:
        ref: main
    - name: Import GPG key
      shell: bash
      env:
        BUILDBOT_GPG_KEY_B64: ${{ secrets.BUILDBOT_GPG_KEY_B64 }}
        BUILDBOT_GPG_KEY_ID: ${{ secrets.BUILDBOT_GPG_KEY_ID }}
      run: |
        echo "${BUILDBOT_GPG_KEY_B64}" | base64 --decode | gpg --no-tty --batch --import
        git config --global user.signingkey "${BUILDBOT_GPG_KEY_ID}"
        git config --global commit.gpgsign true
    - name: Import SSH key
      shell: bash
      env:
        BUILDBOT_SSH_KEY_B64: ${{ secrets.BUILDBOT_SSH_KEY_B64 }}
      run: |
        echo "${BUILDBOT_SSH_KEY_B64}" | base64 --decode > /tmp/ssh.key
        chmod 600 /tmp/ssh.key
    - name: Setup git
      shell: bash
      env:
        GIT_SSH_COMMAND: "ssh -i /tmp/ssh.key"
      run: |
        git config --global user.name 'pixie-io-buildbot'
        git config --global user.email 'build@pixielabs.ai'
        git remote add fork git@github.com:pixie-io-buildbot/pixie.git
    - name: Update readme locally
      shell: bash
      env:
        TAG_NAME: ${{ github.event.release.tag_name }}
        URL: ${{ github.event.release.html_url }}
      run: |
        export COMPONENT="$(echo "${TAG_NAME}" | cut -d'/' -f2)"
        export VERSION="$(echo "${TAG_NAME}" | cut -d'/' -f3)"
        ./ci/update_files_with_release_versions.sh "${COMPONENT}" "${VERSION}" "${URL}"
    - name: Create PR
      shell: bash
      env:
        TAG_NAME: ${{ github.event.release.tag_name }}
        GH_TOKEN: ${{ secrets.BUILDBOT_GH_API_TOKEN }}
        GIT_SSH_COMMAND: "ssh -i /tmp/ssh.key"
      run: |
        export VERSION="$(echo "${TAG_NAME}" | cut -d'/' -f3)"
        export BRANCH="${VERSION}-update-readme"
        git checkout -b "${BRANCH}"
        git add README.md
        git add k8s/cloud/public/base/artifact_tracker_versions.yaml
        git commit -s -m "$(cat pr_title)"
        git push -f fork "${BRANCH}"
        gh pr create --repo pixie-io/pixie \
          --head "pixie-io-buildbot:${BRANCH}" \
          --body "$(cat pr_body)" --title "$(cat pr_title)"