Clean up release promotions (#8657)

Author: danudey

.semaphore/release/release.yml

@@ -10,16 +10,17 @@ execution_time_limit:
 
 blocks:
   - name: "Publish official release"
+    dependencies: []
     skip:
       # Only run on branches, not PRs.
       when: "branch !~ '.+'"
     task:
       secrets:
-      - name: quay-robot-calico+semaphoreci
-      - name: docker
-      - name: oss-release-secrets
-      - name: google-service-account-for-gce
-      - name: openstack-signing-publishing
+        - name: quay-robot-calico+semaphoreci
+        - name: docker
+        - name: oss-release-secrets
+        - name: google-service-account-for-gce
+        - name: openstack-signing-publishing
       prologue:
         commands:
         # Load the github access secrets.  First fix the permissions.
@@ -68,17 +69,44 @@ blocks:
         commands:
         - if [ -z "${SEMAPHORE_GIT_PR_NUMBER}" ]; then make GIT_BRANCH=${SEMAPHORE_GIT_BRANCH} release; fi
         - if [ -z "${SEMAPHORE_GIT_PR_NUMBER}" ]; then make GIT_BRANCH=${SEMAPHORE_GIT_BRANCH} release-publish; fi
-      - name: "Build Openstack Packages"
-        execution_time_limit:
-          minutes: 60
-        env_vars:
-        - name: SECRET_KEY
-          value: /home/semaphore/secrets/launchpad-gpg-key-dfox.key
-        - name: GCLOUD_ARGS
-          value: --zone us-east1-c --project tigera-wp-tcp-redirect
-        - name: HOST
-          value: ubuntu@binaries-projectcalico-org
+  - name: "Build Openstack Packages"
+    dependencies: ["Publish official release"]
+    skip:
+      when: "branch !~ '.+'"
+    task:
+      secrets:
+        - name: quay-robot-calico+semaphoreci
+        - name: docker
+        - name: oss-release-secrets
+        - name: google-service-account-for-gce
+        - name: openstack-signing-publishing
+      prologue:
         commands:
+        # Load the github access secrets.  First fix the permissions.
+        - chmod 0600 /home/semaphore/.keys/git_ssh_rsa
+        - ssh-add /home/semaphore/.keys/git_ssh_rsa
+        # Checkout the code and unshallow it.
+        - checkout
+        # Free up space on the build machine.
+        - sudo rm -rf ~/.kiex ~/.phpbrew ~/.rbenv ~/.nvm ~/.kerl ~/.sbt ~/.npm /usr/lib/jvm /opt/firefox* /opt/apache-maven* /opt/scala /usr/local/golang
+        # Install more tools
         - sudo apt update
         - sudo apt install -y moreutils patchelf
-        - make publish-openstack
+      jobs:
+        - name: "Build Openstack Packages"
+          execution_time_limit:
+            minutes: 60
+          env_vars:
+          - name: SECRET_KEY
+            value: /home/semaphore/secrets/launchpad-gpg-key-dfox.key
+          - name: GCLOUD_ARGS
+            value: --zone us-east1-c --project tigera-wp-tcp-redirect
+          - name: HOST
+            value: ubuntu@binaries-projectcalico-org
+          commands:
+            - if [ -z "${SEMAPHORE_GIT_PR_NUMBER}" ]; then make publish-openstack; fi
+      epilogue:
+        always:
+          commands:
+          - test -d hack/release/packaging/output  && mv -v hack/release/packaging/output hack/release/packaging/openstack
+          - artifact push workflow hack/release/packaging/openstack