From 172ab3c7ab4f5420d457c09ca204fdb0ca26cd70 Mon Sep 17 00:00:00 2001
From: Thomas Carmet <8408330+tcarmet@users.noreply.github.com>
Date: Thu, 26 Feb 2026 11:05:26 -0800
Subject: [PATCH] CLDSRV-859: trigger scality-kms release workflow on
 cloudserver release

Add a new job to the release workflow that triggers the scality-kms release
workflow after a successful cloudserver release. This ensures the KMS server
image is built with the latest cloudserver base image.
---
 .github/workflows/release.yaml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e36f173073..7d33f770e6 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -88,3 +88,25 @@ jobs:
           tag_name: ${{ github.event.inputs.tag }}
           generate_release_notes: true
           target_commitish: ${{ github.sha }}
+
+  trigger-kms-release:
+    runs-on: ubuntu-latest
+    needs: release
+    if: github.repository_owner == 'scality'
+    steps:
+      - name: Generate GitHub App Token
+        uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.ACTIONS_APP_ID }}
+          private-key: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+
+      - name: Trigger scality-kms release workflow
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          gh workflow run release.yaml \
+            --repo scality/scality-kms \
+            --ref main \
+            --field tag=${{ github.event.inputs.tag }}