test(release): Add release validation workflow

[SRodi]

Description

Add workflow to validate retina release. This workflow is dependent on successful run of images and helm release workflows. The job includes steps which validate the following:

1. All retina images can be pulled
2. Helm chart can be pulled
3. kubectl krew install retina works
4. go package version exist

Related Issue

If this pull request is related to any issue, please mention it here. Additionally, make sure that the issue is assigned to you before submitting this pull request.

Checklist

• I have read the contributing documentation.
• I signed and signed-off the commits (git commit -S -s ...). See this documentation on signing commits.
• I have correctly attributed the author(s) of the code.
• I have tested the changes locally.
• I have followed the project's style guidelines.
• I have updated the documentation, if necessary.
• I have added tests, if applicable.

Screenshots (if applicable) or Testing Completed

• I have tested the workflow dependency in my own fork
• I have tested every job step in my own fork using latest tag v0.0.26

Additional Notes

Add any additional notes or context about the pull request here.

---

Please refer to the CONTRIBUTING.md file for more information on how to contribute to this project.

[kamilprz]

Great to have automation for this, thanks for putting it together :)

[matmerr]

small idea, but while we're at it could potentially check binary version inside the image matches the version in the binary, docker run --rm ghcr.io/microsoft/$image:$TAG version == $TAG or something of the like

that way if people change dockerfiles or pipeline yamls at least the right binary is making it into the image

[SRodi]

small idea, but while we're at it could potentially check binary version inside the image matches the version in the binary, docker run --rm ghcr.io/microsoft/$image:$TAG version == $TAG or something of the like

that way if people change dockerfiles or pipeline yamls at least the right binary is making it into the image

@matmerr that is a good idea but we currently have no version command and/or flag for retina-agent , retina-operator and retina-init

retina/cmd/root.go

Lines 40 to 48 in e442712

	func init() {
	rootCmd.Flags().StringVar(&metricsAddr, "metrics-bind-address", ":18080", "The address the metric endpoint binds to.")
	rootCmd.Flags().StringVar(&probeAddr, "health-probe-bind-address", ":18081", "The address the probe endpoint binds to.")
	rootCmd.Flags().BoolVar(&enableLeaderElection, "leader-elect", false, "Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.")
	rootCmd.Flags().StringVar(&cfgFile, "config", configFileName, "config file")
	// this is read during GetConfigOrDie, not explicitly passed to any of our logic
	rootCmd.Flags().StringVar(&kubeConfigFileName, "kubeconfig", kubeConfigFileName, "noop we just need cobra to not check since controller runtime can use this flag")
	}

Example:

docker run -v /path/to/config.yaml:/retina/config/config.yaml -v /path/to/kubeconfig:/root/.kube/config ghcr.io/microsoft/retina/retina-agent:v0.0.26 help
Start Retina Agent

Usage:
  retina-agent [flags]
  retina-agent [command]

Available Commands:
  completion           Generate the autocompletion script for the specified shell
  help                 Help about any command
  hubble-control-plane Start Hubble control plane

Flags:
      --config string                      config file (default "/retina/config/config.yaml")
      --health-probe-bind-address string   The address the probe endpoint binds to. (default ":18081")
  -h, --help                               help for retina-agent
      --kubeconfig string                  noop we just need cobra to not check since controller runtime can use this flag
      --leader-elect                       Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
      --metrics-bind-address string        The address the metric endpoint binds to. (default ":18080")

Use "retina-agent [command] --help" for more information about a command.

---

We could create a GH issue to add a version flag and then implement this validation step, WDYT?

For now I will merge this PR given the suggestion is not a straightforward addition.