Make RGM the main pipeline for prerelease

scripts/drone/rgm.star

@@ -17,17 +17,29 @@ load(
     "scripts/drone/events/release.star",
     "verify_release_pipeline",
 )
+load(
+    "scripts/drone/pipelines/test_frontend.star",
+    "test_frontend",
+)
+load(
+    "scripts/drone/pipelines/test_backend.star",
+    "test_backend",
+)
+load(
+    "scripts/drone/pipelines/whats_new_checker.star",
+    "whats_new_checker_pipeline",
+)
 load(
     "scripts/drone/vault.star",
     "from_secret",
     "rgm_dagger_token",
     "rgm_destination",
-    "rgm_gcp_key_base64",
     "rgm_github_token",
+    "rgm_global_gcp_key_base64",
 )
 
 rgm_env_secrets = {
-    "GCP_KEY_BASE64": from_secret(rgm_gcp_key_base64),
+    "GCP_KEY_BASE64": from_secret(rgm_global_gcp_key_base64),
     "DESTINATION": from_secret(rgm_destination),
     "GITHUB_TOKEN": from_secret(rgm_github_token),
     "_EXPERIMENTAL_DAGGER_CLOUD_TOKEN": from_secret(rgm_dagger_token),
@@ -36,6 +48,31 @@ rgm_env_secrets = {
     "GPG_PASSPHRASE": from_secret("packages_gpg_passphrase"),
 }
 
+docs_paths = {
+    "exclude": [
+        "*.md",
+        "docs/**",
+        "packages/**/*.md",
+        "latest.json",
+    ],
+}
+
+tag_trigger = {
+    "event": {
+        "exclude": [
+            "promote",
+        ],
+    },
+    "ref": {
+        "include": [
+            "refs/tags/v*",
+        ],
+        "exclude": [
+            "refs/tags/*-cloud*",
+        ],
+    },
+}
+
 def rgm_build(script = "drone_publish_main.sh"):
     rgm_build_step = {
         "name": "rgm-build",
@@ -55,15 +92,6 @@ def rgm_build(script = "drone_publish_main.sh"):
         rgm_build_step,
     ]
 
-docs_paths = {
-    "exclude": [
-        "*.md",
-        "docs/**",
-        "packages/**/*.md",
-        "latest.json",
-    ],
-}
-
 def rgm_main():
     trigger = {
         "event": [
@@ -80,28 +108,12 @@ def rgm_main():
         depends_on = ["main-test-backend", "main-test-frontend"],
     )
 
-tag_trigger = {
-    "event": {
-        "exclude": [
-            "promote",
-        ],
-    },
-    "ref": {
-        "include": [
-            "refs/tags/v*",
-        ],
-        "exclude": [
-            "refs/tags/*-cloud*",
-        ],
-    },
-}
-
 def rgm_tag():
     return pipeline(
         name = "rgm-tag-prerelease",
         trigger = tag_trigger,
         steps = rgm_build(script = "drone_publish_tag_grafana.sh"),
-        depends_on = [],
+        depends_on = ["release-test-backend", "release-test-frontend"],
     )
 
 def rgm_windows():
@@ -111,7 +123,7 @@ def rgm_windows():
         steps = ignore_failure(
             get_windows_steps(
                 ver_mode = "release",
-                bucket = "grafana-prerelease-dev",
+                bucket = "grafana-prerelease",
             ),
         ),
         depends_on = ["rgm-tag-prerelease"],
@@ -120,13 +132,16 @@ def rgm_windows():
 
 def rgm():
     return [
+        whats_new_checker_pipeline(tag_trigger),
+        test_frontend(tag_trigger, "release"),
+        test_backend(tag_trigger, "release"),
         rgm_main(),
         rgm_tag(),
         rgm_windows(),
         verify_release_pipeline(
             trigger = tag_trigger,
             name = "rgm-tag-verify-prerelease-assets",
-            bucket = "grafana-prerelease-dev",
+            bucket = "grafana-prerelease",
             depends_on = [
                 "rgm-tag-prerelease",
                 "rgm-tag-prerelease-windows",

scripts/drone/vault.star

@@ -12,6 +12,7 @@ azure_sp_app_id = "azure_sp_app_id"
 azure_sp_app_pw = "azure_sp_app_pw"
 azure_tenant = "azure_tenant"
 
+rgm_global_gcp_key_base64 = "rgm_global_gcp_key_base64"
 rgm_gcp_key_base64 = "gcp_key_base64"
 rgm_destination = "destination"
 rgm_github_token = "github_token"
@@ -110,6 +111,11 @@ def secrets():
             "infra/data/ci/grafana-release-eng/rgm",
             "gcp_service_account_base64",
         ),
+        vault_secret(
+            rgm_global_gcp_key_base64,
+            "infra/data/ci/grafana-release-eng/rgm",
+            "gcp_global_service_account_base64",
+        ),
         vault_secret(
             rgm_destination,
             "infra/data/ci/grafana-release-eng/rgm",