Add the "publish" job

Add a new SSH-confirmed GitLab CI job that publishes a previously staged
release to a well-known URL.  The details of what specifically this
entails are controlled by the staging environment.

(cherry picked from commit a27b1954f21bb04d397ccda63cffd1a0843ef80d)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 65054269f7b0a8c8479206d85fba1c2142264ffd..737a3ea43adf9798b5eaff6e390ecdd6a2b786d4 100644 (file)
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1687,6 +1687,23 @@ publish-private:
   rules:
     - if: '$CI_COMMIT_TAG != null && ($CI_COMMIT_TAG =~ /-S/ || $RELEASE_TYPE == "security")'
 
+# Job copying a staged release to a well-known location
+
+publish:
+  <<: *signer_ssh_job
+  variables:
+    SSH_SCRIPT_CLIENT: |-
+      ssh "${STAGING_USER_ACTIONS}@${STAGING_HOST}" "publish ${CI_COMMIT_TAG}"
+  artifacts:
+    paths:
+      - publish-${CI_COMMIT_TAG}.log
+    expire_in: "1 month"
+  needs:
+    - job: staging
+      artifacts: false
+  rules:
+    - if: '$CI_COMMIT_TAG != null && $CI_COMMIT_TAG !~ /-S/'
+
 # Job creating the release announcement MR in Printing Press
 
 prepare-release-announcement: