add supply chain attestations and auto release for windows images

Author: 8naama

.github/workflows/auto-release-fluentd-windows.yaml

@@ -0,0 +1,68 @@
+name: Release flunetd windows docker image
+
+on:
+  push:
+    branches:
+      - master
+    paths:
+      - 'charts/fluend/docker_windows/fluentd_windows.dockerfile'
+      - 'charts/fluend/docker_windows/fluentd_windows2022.dockerfile'
+
+jobs:
+  release-docker-windows:
+    name: release fluentd windows 2019 docker image
+    runs-on: windows-2019
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Get new image version
+        id: extract_version
+        run: (for /f "tokens=2 delims==" %a in ('type "fluentd_windows.dockerfile" ^|findstr "version"') do @echo NEW_VERSION=%a) >> $GITHUB_ENV
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Build and push
+        uses: docker/build-push-action@v5
+        with:
+          push: true
+          platforms: windows/amd64
+          sbom: true
+          provenance: mode=max
+          tags: logzio/fluentd-windows:latest, logzio/fluentd-windows:${{ env.NEW_VERSION }}
+          context: charts/logzio-fluend/docker_windows
+          file: fluentd_windows.dockerfile
+
+  release-docker-windows2022:
+    name: release fluentd windows 2022 docker image
+    runs-on: windows-2022
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Get new image version
+        id: extract_version
+        run: (for /f "tokens=2 delims==" %a in ('type "fluentd_windows.dockerfile" ^|findstr "version"') do @echo NEW_VERSION=%a) >> $GITHUB_ENV
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Build and push
+        uses: docker/build-push-action@v5
+        with:
+          push: true
+          platforms: windows/amd64
+          sbom: true
+          provenance: mode=max
+          tags: logzio/fluentd-windows-2022:latest, logzio/fluentd-windows-2022:${{ env.NEW_VERSION }}
+          context: charts/logzio-fluend/docker_windows
+          file: fluentd_windows2022.dockerfile

.github/workflows/auto-release-kube-tools.yaml

@@ -31,5 +31,7 @@ jobs:
         with:
           push: true
           platforms: linux/amd64, linux/arm/v7, linux/arm/v8, linux/arm64
+          sbom: true
+          provenance: mode=max
           tags: logzio/kube-tools:latest, logzio/kube-tools:${{ env.NEW_VERSION }}
           context: charts/logzio-monitoring/plugins

charts/fluentd/docker_windows/fluentd_windows.dockerfile

@@ -1,4 +1,5 @@
 FROM fluent/fluentd:v1.18.0-windows-ltsc2019-1.0
+LABEL version=0.0.5-test
 RUN gem install fluent-plugin-detect-exceptions \
 && gem install fluent-plugin-logzio \
 && gem install fluent-plugin-concat \

charts/fluentd/docker_windows/fluentd_windows2022.dockerfile

@@ -0,0 +1,16 @@
+FROM fluent/fluentd:v1.18.0-windows-ltsc2022-1.0
+LABEL version=0.0.5-test
+RUN gem install fluent-plugin-detect-exceptions \
+&& gem install fluent-plugin-logzio \
+&& gem install fluent-plugin-concat \
+&& gem install fluent-plugin-record-modifier \
+&& gem install fluent-plugin-kubernetes_metadata_filter \
+&& gem install fluent-plugin-kubernetes \
+&& gem install fluent-plugin-systemd \
+&& gem install fluent-plugin-multi-format-parser \
+&& gem install fluent-plugin-windows-eventlog \
+&& gem install fluent-plugin-prometheus \
+&& gem install fluent-plugin-dedot_filter 
+COPY plugins /fluent/plugins
+
+ENTRYPOINT ["cmd", "/k" ,"fluentd", "--config", "C:\\fluent\\conf\\fluent.conf","-p","C:\\fluent\\plugins"]