fix (and refactor) base-image-build

- switch back to Google-Artifact-Registry
- use reusable workflow for building OCI-Images

Author: ccwienk

.github/workflows/cc-job-image-base.yaml

@@ -5,52 +5,33 @@ on:
   workflow_dispatch:
 
 jobs:
-  build-and-push:
+  version:
+    outputs:
+      version: ${{ steps.version.outputs.version }}
     runs-on: ubuntu-latest
-    environment: build
     permissions:
       contents: read
-      packages: write
-    env:
-      platforms: linux/amd64,linux/arm64
     steps:
-      - uses: gardener/cc-utils/.github/actions/trusted-checkout@master
-        id: checkout
-        with:
-          auth-app-client-id: ${{ vars.GARDENER_GITHUB_ACTIONS_APP_ID }}
-          auth-app-private-key: ${{ secrets.GARDENER_GITHUB_ACTIONS_PRIVATE_KEY }}
-
-      - name: Setup Git Identity
-        uses: gardener/cc-utils/.github/actions/setup-git-identity@master
-
-      - name: Setup Docker-Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Setup QEMU
-        uses: docker/setup-qemu-action@v3
-        with:
-          platforms: ${{ env.platforms }}
-
-      - name: docker-auth
-        uses: docker/login-action@v3
-        with:
-          username: ${{ github.actor }}
-          password: ${{ steps.checkout.outputs.token }}
-          registry: ghcr.io
-
       - name: Read Version
-        id: read_version
+        id: version
         run: |
           version=$(cat JOB_IMAGE_BASE_VERSION)
           echo "version=$version" >> $GITHUB_OUTPUT
 
-      - name: Build and Push Base Image
-        uses: docker/build-push-action@v6
-        with:
-          push: true
-          platforms: linux/amd64,linux/arm64
-          tags: ghcr.io/${{ github.repository_owner }}/cc-utils/job-image-base:${{ steps.read_version.outputs.version }}
-          file: Dockerfile.job-image-base
+  build-and-push:
+    needs:
+      - version
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    with:
+      name: job-image-base
+      oci-registry: europe-docker.pkg.dev/gardener-project/releases
+      oci-repository: cicd/job-image-base
+      oci-platforms: 'linux/amd64,linux/arm64'
+      version: ${{ needs.version.outputs.version }}
+      dockerfile: Dockerfile.job-image-base
 
   update-base-image-version:
     runs-on: ubuntu-latest