Add staging registry authentication to mirror workflow (#1918)

* Add staging registry authentication to mirror workflow

Adds skopeo login for registry.stage.redhat.io to support resolving staging image references in the mirror external images workflow.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* Add staging registry to bundle generation workflow

Also adds registry.stage.redhat.io authentication to the gen-bundle-contents workflow to ensure staging image references can be resolved during bundle generation.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: dislbenn

.github/workflows/gen-bundle-contents-when-triggered.yaml

@@ -102,6 +102,11 @@ jobs:
         echo "${{ secrets.REGISTRY_REDHAT_IO_RGY_PASSWORD }}" \
            | docker login -u="${{ vars.REGISTRY_REDHAT_IO_RGY_USERNAME }}" --password-stdin registry.redhat.io
 
+        # Access to registry.stage.redhat.io needed to resolve staging image references:
+        echo "Doing Docker login to registry.stage.redhat.io"
+        echo "${{ secrets.REGISTRY_STAGE_REDHAT_IO_RGY_PASSWORD }}" \
+           | docker login -u="${{ vars.REGISTRY_STAGE_REDHAT_IO_RGY_USERNAME }}" --password-stdin registry.stage.redhat.io
+
         # Access to quay.iio/acm-d needed to resolve external image references (in-dev images):
         echo "Doing Docker login to quay.io (for acm-d)"
         echo "${{ secrets.QUAY_IO_ACMD_RGY_PASSWORD }}" \

.github/workflows/mirror-external-images-workflow.yaml

@@ -12,6 +12,7 @@ name: Mirror External Images
 # 5. If secrets are compromised, rotate immediately:
 #    - TOOLS_REPO_READER_PRIVATE_KEY
 #    - REGISTRY_REDHAT_IO_RGY_PASSWORD
+#    - REGISTRY_STAGE_REDHAT_IO_RGY_PASSWORD
 #    - QUAY_IO_ACMD_RGY_PASSWORD
 #    - SLACK_WEBHOOK_URL
 
@@ -136,6 +137,11 @@ jobs:
         echo "${{ secrets.REGISTRY_REDHAT_IO_RGY_PASSWORD }}" \
            | skopeo login -u="${{ vars.REGISTRY_REDHAT_IO_RGY_USERNAME }}" --password-stdin registry.redhat.io
 
+        # Access to registry.stage.redhat.io needed to resolve staging image references:
+        echo "Doing skopeo login to registry.stage.redhat.io"
+        echo "${{ secrets.REGISTRY_STAGE_REDHAT_IO_RGY_PASSWORD }}" \
+           | skopeo login -u="${{ vars.REGISTRY_STAGE_REDHAT_IO_RGY_USERNAME }}" --password-stdin registry.stage.redhat.io
+
         # Access to quay.io/acm-d needed to resolve external image references (in-dev images):
         echo "Doing skopeo login to quay.io (for acm-d)"
         echo "${{ secrets.QUAY_IO_ACMD_RGY_PASSWORD }}" \