ci(cluster-shield-release): open release pr for shield chart bump (#2491)

Author: francesco-furlan

.github/updatecli.d/config-cluster-shield-release.yaml

@@ -0,0 +1,57 @@
+name: update shield charts for new cluster-shield release
+
+scms:
+  github:
+    kind: "github"
+    spec:
+      user: "updatecli"
+      email: "[email protected]"
+      owner: "sysdiglabs"
+      repository: "charts"
+      token: '{{ requiredEnv "GITHUB_TOKEN" }}'
+      username: draios-jenkins
+      branch: "main"
+
+actions:
+  github:
+    kind: "github/pullrequest"
+    scmid: "github"
+    spec:
+      automerge: true
+      description: 'bump cluster-shield image tags for `shield` chart to {{ requiredEnv "CLUSTER_SHIELD_RELEASE" }}'
+      labels:
+        - "automated PR"
+      mergemethod: squash
+      title: 'feat(shield): release cluster-shield {{ requiredEnv "CLUSTER_SHIELD_RELEASE" }}'
+
+sources:
+  clusterShieldRelease:
+    kind: dockerimage
+    spec:
+      image: quay.io/sysdig/cluster-shield
+      tagfilter: '{{ requiredEnv "CLUSTER_SHIELD_RELEASE" }}'
+      versionfilter:
+        kind: regex
+        pattern: '[0-9]+\.[0-9]+\.[0-9]+$'
+
+targets:
+  updateShieldChart:
+    name: "update the shield chart"
+    kind: helmchart
+    scmid: github
+    spec:
+      name: "charts/shield"
+      file: values.yaml
+      key: "$.cluster.image.tag"
+      versionincrement: auto
+
+  updateShieldReadme:
+    name: "update the shield readme"
+    kind: shell
+    scmid: github
+    disablesourceinput: true
+    dependson:
+      - updateShieldChart
+    spec:
+      shell: /bin/bash
+      command: "sed -i 's/: # /:  # /g' charts/shield/values.yaml && make docs"

.github/workflows/cluster-shield-release.yaml

@@ -0,0 +1,33 @@
+---
+name: Update charts for Cluster Shield release
+
+on:
+  workflow_dispatch:
+    inputs:
+      release:
+        description: 'Cluster Shield Version'
+        required: true
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  cluster-shield-release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version: "1.24"
+
+      - name: Install Updatecli in the runner
+        uses: updatecli/[email protected]
+
+      - name: Run Updatecli in apply mode
+        run: "updatecli apply --config .github/updatecli.d/config-cluster-shield-release.yaml"
+        env:
+          CLUSTER_SHIELD_RELEASE: "${{ inputs.release }}"
+          GITHUB_TOKEN: "${{ secrets.TOOLS_JENKINS_ADMIN_ACCESS_GITHUB_TOKEN }}"