sync workflows, increase runner size (#7216)

* ci: sync workflows from release branch

* ci: switch publish-release to larger runner

Author: jharvey10

.github/workflows/main-ci.yml

@@ -8,7 +8,7 @@ permissions:
   contents: read
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
   cancel-in-progress: true
 
 jobs:
@@ -26,13 +26,3 @@ jobs:
 
   check-containers:
     uses: ./.github/workflows/check-containers.yml
-
-  publish-release:
-    needs: [test, test-crds, test-dashboards, crosscompile, check-containers]
-    uses: ./.github/workflows/publish-release.yml
-    with:
-      ref: ${{ github.ref_name }}
-      is_release: false
-    permissions:
-      contents: write
-      id-token: write

.github/workflows/publish-release.yml

@@ -1,17 +1,11 @@
 name: Publish Release
 
 on:
-  workflow_call:
-    inputs:
-      ref:
-        description: 'Git ref to build and publish'
-        required: true
-        type: string
-      is_release:
-        description: 'Whether this is a release build (affects artifact publishing)'
-        required: false
-        type: boolean
-        default: false
+  push:
+    tags:
+      - v*
+    branches:
+      - main
 
 permissions:
   contents: read
@@ -33,7 +27,6 @@ jobs:
       - name: Checkout code 🛎️
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
-          ref: ${{ inputs.ref }}
           fetch-depth: 0
           persist-credentials: false
 
@@ -45,6 +38,8 @@ jobs:
 
       - name: Publish container 🚀
         run: ./tools/ci/docker-containers ${{ matrix.container }}
+        env:
+          DRONE_TAG: ${{ github.ref_name }}
 
   publish-windows-containers:
     name: Publish Windows container (${{ matrix.container }})
@@ -62,20 +57,21 @@ jobs:
       - name: Checkout code 🛎️
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
-          ref: ${{ inputs.ref }}
           fetch-depth: 0
           persist-credentials: false
 
       - name: Build containers 🏗️
         run: |
           & "C:/Program Files/git/bin/bash.exe" ./tools/ci/docker-containers-windows ${{ matrix.container }}
         shell: powershell
+        env:
+          DRONE_TAG: ${{ github.ref_name }}
 
   publish-release:
     name: Publish release
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-8-cores
     needs: [publish-linux-containers, publish-windows-containers]
-    if: ${{ inputs.is_release }}
+    if: startsWith(github.ref, 'refs/tags/v')
     permissions:
       contents: write
       id-token: write
@@ -86,7 +82,6 @@ jobs:
       - name: Checkout code 🛎️
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
-          ref: ${{ inputs.ref }}
           fetch-depth: 0
           persist-credentials: false
 
@@ -103,13 +98,11 @@ jobs:
           cache: false
 
       - name: Build release artifacts 📦
-        run: make -j4 RELEASE_BUILD=1 VERSION=${GITHUB_REF_NAME} dist
-        env:
-          GITHUB_REF_NAME: ${{ inputs.ref }}
+        run: make -k -j4 RELEASE_BUILD=1 VERSION=${GITHUB_REF_NAME} dist
 
       - name: Publish release 🚀
         run: |
           VERSION=${GITHUB_REF_NAME} RELEASE_DOC_TAG=$(echo ${GITHUB_REF_NAME} | awk -F '.' '{print $1"."$2}') ./tools/release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GITHUB_REF_NAME: ${{ inputs.ref }}
+          GITHUB_REF_NAME: ${{ github.ref_name }}