teamcity: add new CI job for PUA

During each release, there is a need to run PUA.
This new CI job allows triggering the PUA workflow on an as-needed
basis for a specific release. The job generates a JSON file as output,
which is consumed by the benchmarking portal to display the results.

Epic: none

Release note: None

Author: shailendra-patel

build/teamcity/internal/cockroach/pua/pua_run.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+
+# Copyright 2025 The Cockroach Authors.
+#
+# Use of this software is governed by the CockroachDB Software License
+# included in the /LICENSE file.
+
+
+set -exuo pipefail
+
+dir="$(dirname $(dirname $(dirname $(dirname $(dirname "${0}")))))"
+
+source "$dir/teamcity-support.sh"  # For $root
+source "$dir/teamcity-bazel-support.sh"  # For run_bazel
+#
+BAZEL_SUPPORT_EXTRA_DOCKER_ARGS="-e LITERAL_ARTIFACTS_DIR=$root/artifacts -e GOOGLE_APPLICATION_CREDENTIALS_CONTENT -e GOOGLE_SERVICE_ACCOUNT" \
+			       run_bazel build/teamcity/internal/cockroach/pua/pua_run_impl.sh

build/teamcity/internal/cockroach/pua/pua_run_impl.sh

@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+
+# Copyright 2025 The Cockroach Authors.
+#
+# Use of this software is governed by the CockroachDB Software License
+# included in the /LICENSE file.
+
+
+set -exuo pipefail
+
+export ROACHPROD_DISABLED_PROVIDERS=aws,azure,ibm
+export ROACHPROD_DISABLE_UPDATE_CHECK=true
+export ROACHPROD_GCE_DEFAULT_SERVICE_ACCOUNT=$GOOGLE_SERVICE_ACCOUNT
+export ROACHPROD_GCE_DEFAULT_PROJECT=cockroach-ephemeral
+
+# build the binaries - roachprod, roachtest and drtprod
+build() {
+  config="crosslinux"
+  # Prepare the bin/ and lib/ directories.
+  mkdir -p bin
+  chmod o+rwx bin
+
+  # Array of arguments to be passed to bazel for the component.
+  bazel_args=()
+
+  # Array of build artifacts. Each item has format "src:dest"; src is relative to
+  # the bazel-bin directory, dst is relative to cwd.
+  artifacts=()
+
+  bazel_args+=(//pkg/cmd/roachtest)
+  artifacts+=("pkg/cmd/roachtest/roachtest_/roachtest:bin/roachtest")
+
+  bazel_args+=(//pkg/cmd/roachprod)
+  artifacts+=("pkg/cmd/roachprod/roachprod_/roachprod:bin/roachprod")
+
+  bazel_args+=(//pkg/cmd/drtprod)
+  artifacts+=("pkg/cmd/drtprod/drtprod_/drtprod:bin/drtprod")
+
+  bazel build --config $config -c opt "${bazel_args[@]}"
+  BAZEL_BIN=$(bazel info bazel-bin --config $config -c opt)
+  for artifact in "${artifacts[@]}"; do
+    src=${artifact%%:*}
+    dst=${artifact#*:}
+    cp "$BAZEL_BIN/$src" "$dst"
+    # Make files writable to simplify cleanup and copying (e.g., scp retry).
+    chmod a+w "$dst"
+  done
+
+  # add bin to path
+  export PATH=$PATH:$(pwd)/bin
+}
+
+# Set up Google credentials. Note that we need this for all clouds since we upload
+# perf artifacts to Google Storage at the end.
+if [[ "$GOOGLE_APPLICATION_CREDENTIALS_CONTENT" ]]; then
+  echo "$GOOGLE_APPLICATION_CREDENTIALS_CONTENT" > creds.json
+  gcloud auth activate-service-account --key-file=creds.json
+
+  # Set GOOGLE_APPLICATION_CREDENTIALS so that gcp go libraries can find it.
+  export GOOGLE_APPLICATION_CREDENTIALS="$(pwd)/creds.json"
+else
+  echo 'warning: GOOGLE_EPHEMERAL_CREDENTIALS not set' >&2
+  exit 1
+fi
+
+# Run the build function
+build
+#
+roachprod list
+#drtprod list