Merge branch 'master' into maciejk/ar-image-release-smoke-tests

# Conflicts:
#	.evergreen-functions.yml
#	.evergreen-release.yml
#	.evergreen.yml
#	scripts/release/argparse_utils.py
#	scripts/release/build/build_info.py
#	scripts/release/pipeline.py

Author: MaciejKaras

.evergreen-functions.yml

@@ -227,6 +227,9 @@ functions:
     type: setup
     params:
       working_dir: src/github.com/mongodb/mongodb-kubernetes
+      include_expansions_in_env:
+        - quay_prod_username
+        - quay_prod_robot_token
       add_to_path:
         - ${workdir}/bin
         - ${PROJECT_DIR}/bin
@@ -510,38 +513,20 @@ functions:
       params:
         working_dir: src/github.com/mongodb/mongodb-kubernetes
         binary: scripts/release/publish_helm_chart.sh
-        
+
   build_multi_cluster_binary:
     - command: subprocess.exec
       params:
         working_dir: src/github.com/mongodb/mongodb-kubernetes
-        binary: scripts/dev/run_python.sh scripts/release/kubectl-mongodb/python/build_kubectl_plugin.py
-  
-  build_and_push_appdb_database:
-    - command: subprocess.exec
-      params:
-        working_dir: src/github.com/mongodb/mongodb-kubernetes/docker/mongodb-kubernetes-appdb-database
-        binary: ./build_and_push_appdb_database_images.sh
-        add_to_path:
-          - ${workdir}/bin
-          - ${workdir}
+        binary: scripts/release/kubectl_mongodb/build_kubectl_plugin.sh
 
-  pipeline:
+  download_multi_cluster_binary:
     - command: subprocess.exec
-      retry_on_failure: true
-      type: setup
       params:
-        shell: bash
-        <<: *e2e_include_expansions_in_env
         working_dir: src/github.com/mongodb/mongodb-kubernetes
-        add_to_path:
-          - ${workdir}/bin
-        binary: scripts/release/pipeline.sh
-        env:
-          IMAGE_NAME: ${IMAGE_NAME}
-          FLAGS: ${FLAGS}
+        binary: scripts/release/kubectl_mongodb/download_kubectl_plugin.sh
 
-  pipeline_agent:
+  pipeline:
     - command: subprocess.exec
       retry_on_failure: true
       type: setup
@@ -551,45 +536,11 @@ functions:
         working_dir: src/github.com/mongodb/mongodb-kubernetes
         add_to_path:
           - ${workdir}/bin
-        binary: scripts/release/pipeline_agent.sh
+        binary: scripts/release/pipeline.sh
         env:
-          FLAGS: ${FLAGS}
-
-  pipeline_ops_manager:
-    - command: subprocess.exec
-      retry_on_failure: true
-      type: setup
-      params:
-        shell: bash
-        <<: *e2e_include_expansions_in_env
-        working_dir: src/github.com/mongodb/mongodb-kubernetes
-        add_to_path:
-          - ${workdir}/bin
-        binary: scripts/release/pipeline_ops_manager.sh
-
-  pipeline_readiness_probe:
-    - command: subprocess.exec
-      retry_on_failure: true
-      type: setup
-      params:
-        shell: bash
-        <<: *e2e_include_expansions_in_env
-        working_dir: src/github.com/mongodb/mongodb-kubernetes
-        add_to_path:
-          - ${workdir}/bin
-        binary: scripts/release/pipeline_readiness_probe.sh
-
-  pipeline_version_upgrade_hook:
-    - command: subprocess.exec
-      retry_on_failure: true
-      type: setup
-      params:
-        shell: bash
-        <<: *e2e_include_expansions_in_env
-        working_dir: src/github.com/mongodb/mongodb-kubernetes
-        add_to_path:
-          - ${workdir}/bin
-        binary: scripts/release/pipeline_version_upgrade_hook.sh
+          IMAGE_NAME: ${image_name}
+          BUILD_SCENARIO_OVERRIDE: ${build_scenario}
+          FLAGS: ${flags}
 
   teardown_cloud_qa_all:
     - command: shell.exec
@@ -843,22 +794,6 @@ functions:
         script: |
           ./scripts/code_snippets/tests/${task_name}
 
-  #
-  # kubectl mongodb plugin release functions
-  #
-  install_goreleaser:
-    - command: shell.exec
-      type: setup
-      include_expansions_in_env:
-        - goreleaser_pro_tar_gz
-      params:
-        script: |
-          set -Eeu pipefail
-          curl -fL "${goreleaser_pro_tar_gz}" --output goreleaser_Linux_x86_64.tar.gz
-          tar -xf goreleaser_Linux_x86_64.tar.gz
-          chmod 755 ./goreleaser
-          sudo cp goreleaser /usr/local/bin/
-
   install_macos_notarization_service:
     - command: shell.exec
       type: setup
@@ -892,8 +827,8 @@ functions:
   release_kubectl_mongodb_plugin:
     - command: github.generate_token
       params:
-        expansion_name: generated_token
-    - command: shell.exec
+        expansion_name: GH_TOKEN
+    - command: subprocess.exec
       type: setup
       params:
         working_dir: src/github.com/mongodb/mongodb-kubernetes
@@ -910,15 +845,7 @@ functions:
           - triggered_by_git_tag
           - OPERATOR_VERSION
         env:
-          XDG_CONFIG_HOME: ${go_base_path}${workdir}
-          GO111MODULE: "on"
-          GOROOT: "/opt/golang/go1.24"
           MACOS_NOTARY_KEY: ${macos_notary_keyid}
           MACOS_NOTARY_SECRET: ${macos_notary_secret}
-        # shell.exec EVG Task doesn't have add_to_path, so we need to explicitly add the path export below.
-        script: |
-          set -Eeu pipefail
-          export GORELEASER_CURRENT_TAG=${OPERATOR_VERSION|*triggered_by_git_tag}
-          export PATH=$GOROOT/bin:$PATH
-          export GITHUB_TOKEN=${generated_token}
-          ${workdir}/goreleaser release --clean
+          GH_TOKEN: ${GH_TOKEN}
+        binary: scripts/dev/run_python.sh scripts/release/kubectl_mongodb/promote_kubectl_plugin.py

.evergreen-release.yml

@@ -11,7 +11,7 @@ tasks:
       - func: quay_login
       - func: pipeline
         vars:
-          IMAGE_NAME: operator
+          image_name: operator
 
   # Releases init images to Quay
   - name: release_init_appdb
@@ -23,7 +23,7 @@ tasks:
       - func: quay_login
       - func: pipeline
         vars:
-          IMAGE_NAME: init-appdb
+          image_name: init-appdb
 
   - name: release_init_database
     tags: [ "image_release" ]
@@ -34,7 +34,7 @@ tasks:
       - func: quay_login
       - func: pipeline
         vars:
-          IMAGE_NAME: init-database
+          image_name: init-database
 
   - name: release_init_ops_manager
     tags: [ "image_release" ]
@@ -45,7 +45,7 @@ tasks:
       - func: quay_login
       - func: pipeline
         vars:
-          IMAGE_NAME: init-ops-manager
+          image_name: init-ops-manager
 
   - name: release_database
     tags: [ "image_release" ]
@@ -56,7 +56,7 @@ tasks:
       - func: quay_login
       - func: pipeline
         vars:
-          IMAGE_NAME: database
+          image_name: database
 
   - name: release_readiness_probe
     tags: [ "image_release" ]
@@ -65,7 +65,9 @@ tasks:
       - func: clone
       - func: setup_building_host
       - func: quay_login
-      - func: pipeline_readiness_probe
+      - func: pipeline
+        vars:
+          image_name: readiness-probe
 
   - name: release_version_upgrade_hook
     tags: [ "image_release" ]
@@ -74,7 +76,9 @@ tasks:
       - func: clone
       - func: setup_building_host
       - func: quay_login
-      - func: pipeline_version_upgrade_hook
+      - func: pipeline
+        vars:
+          image_name: upgrade-hook
 
   - name: prepare_and_upload_openshift_bundles
     tags: [ "openshift_bundles" ]
@@ -107,7 +111,7 @@ tasks:
     allowed_requesters: [ "patch", "github_tag" ]
     commands:
       - func: clone
-      - func: install_goreleaser
+      - func: python_venv
       - func: install_macos_notarization_service
       - func: release_kubectl_mongodb_plugin
 
@@ -118,6 +122,16 @@ tasks:
       - func: python_venv
       - func: create_chart_release_pr
 
+  - name: release_chart_to_oci_registry
+    tags: [ "release_chart_to_oci_registry" ]
+    commands:
+      - func: clone
+      - func: python_venv
+      - func: setup_kubectl
+      - func: setup_aws
+      - func: helm_registry_login
+      - func: publish_helm_chart
+
 ### Release build variants
 buildvariants:
 
@@ -228,8 +242,11 @@ buildvariants:
     max_hosts: -1
     tags: [ "release", "e2e_smoke_release_test_suite" ]
     run_on:
-      - release-ubuntu2204-arm64-small # This is required for CISA attestation https://jira.mongodb.org/browse/DEVPROD-17780
+      - release-ubuntu2404-small # This is required for CISA attestation https://jira.mongodb.org/browse/DEVPROD-17780
     allowed_requesters: [ "patch", "github_tag" ]
+    depends_on:
+      - name: release_kubectl_mongodb_plugin
+        variant: release_kubectl_mongodb_plugin
     tasks:
       - name: build_test_image_arm
 
@@ -368,3 +385,12 @@ buildvariants:
     allowed_requesters: [ "patch", "github_tag" ]
     tasks:
       - name: create_chart_release_pr
+
+  - name: release_chart_to_oci_registry
+    display_name: release_chart_to_oci_registry
+    tags: [ "release" ]
+    run_on:
+      - release-ubuntu2404-small # This is required for CISA attestation https://jira.mongodb.org/browse/DEVPROD-17780
+    allowed_requesters: [ "patch", "github_tag" ]
+    tasks:
+      - name: release_chart_to_oci_registry

.evergreen-snippets.yml

@@ -7,7 +7,7 @@ variables:
       - func: setup_mongosh
       - func: download_kube_tools
       - func: switch_context
-      - func: build_multi_cluster_binary
+      - func: download_multi_cluster_binary
     teardown_task:
       - func: upload_e2e_logs
       - func: upload_code_snippets_logs

.evergreen-tasks.yml

@@ -502,7 +502,7 @@ tasks:
     commands:
       - func: "e2e_test"
 
-  - name: e2e_disable_tls_scale_up
+  - name: e2e_disable_tls_and_scale
     tags: [ "patch-run" ]
     commands:
       - func: "e2e_test"