Update publish and snapshot containers

Author: kwryankrattiger

.github/images.yml

@@ -36,7 +36,7 @@ images:
     image: ghcr.io/spack/ci-prune-buildcache:0.0.5
 
   - path: ./images/protected-publish
-    image: ghcr.io/spack/protected-publish:0.0.9
+    image: ghcr.io/spack/protected-publish:0.0.10
 
   - path: ./images/retry-trigger-jobs
     image: ghcr.io/spack/retry-trigger-jobs:0.0.2

images/protected-publish/Dockerfile

@@ -13,7 +13,8 @@ RUN uv pip install --system --no-cache-dir -r /srcs/requirements.txt
 
 COPY pkg /srcs/pkg
 COPY --chmod=755 migrate.sh /srcs/migrate.sh
+COPY --chmod=755 run.sh /srcs/run.sh
 
 ENV PYTHONUNBUFFERED=1
 WORKDIR /srcs
-ENTRYPOINT ["python", "-m", "pkg.publish"]
+ENTRYPOINT ["bash", "/srcs/run.sh"]

images/protected-publish/run.sh

@@ -0,0 +1,18 @@
+cmd=$1
+shift
+
+case "$cmd" in
+  *pub*)
+    py_cmd="pkg.publish";;
+  *mig*)
+    exec /srcs/migrate.sh;;
+  *snap*)
+    py_cmd="pkg.snapshot";;
+  *val*)
+    py_cmd="pkg.validate_index";;
+  *)
+    echo "Unknown command: $cmd"
+    exit 1;;
+esac
+
+python -m $py_cmd $@

k8s/production/custom/protected-publish/cron-jobs.yaml

@@ -17,7 +17,7 @@ spec:
           restartPolicy: Never
           containers:
           - name: protected-publish
-            image: ghcr.io/spack/protected-publish:0.0.9
+            image: ghcr.io/spack/protected-publish:0.0.10
             imagePullPolicy: IfNotPresent
             resources:
               requests:
@@ -28,6 +28,7 @@ spec:
               - configMapRef:
                   name: python-scripts-sentry-config
             args:
+              - "publish"
               - "--bucket"
               - "spack-binaries"
               - "--ref"

k8s/production/custom/snapshot-release-tags/cron-jobs.yaml

@@ -16,7 +16,7 @@ spec:
           restartPolicy: Never
           containers:
           - name: snapshot-release-tags
-            image: ghcr.io/spack/snapshot-release-tags:0.0.4
+            image: ghcr.io/spack/protected-publish:0.0.10
             imagePullPolicy: IfNotPresent
             resources:
               requests:
@@ -31,5 +31,8 @@ spec:
             envFrom:
               - configMapRef:
                   name: python-scripts-sentry-config
+            args:
+              - "snapshot"
+
           nodeSelector:
             spack.io/node-pool: base