| name: Publish release artifacts and docs for new tags | 
 | on: | 
 |   push: | 
 |     tags: | 
 |       - "v*" | 
 | jobs: | 
 |   publish: | 
 |     runs-on: gha-trusted | 
 |     permissions: | 
 |       contents: "write" # Required for publishing release artifacts | 
 |       id-token: "write" | 
 |     steps: | 
 |       - uses: actions/checkout@v3 | 
 |       - id: auth | 
 |         name: Authenticate to GCP | 
 |         uses: google-github-actions/auth@v0.8.0 | 
 |         with: | 
 |           create_credentials_file: "true" | 
 |           workload_identity_provider: "projects/498345658902/locations/global/workloadIdentityPools/oidc-fed/providers/github-actions" | 
 |           service_account: "github-artifact-deploy@monogon-infra.iam.gserviceaccount.com" | 
 |       - name: Set up Cloud SDK | 
 |         uses: google-github-actions/setup-gcloud@v0 | 
 |       - name: Install Cloud SDK alpha commands | 
 |         run: gcloud --quiet components install alpha | 
 |       - name: Build artifacts | 
 |         run: bazel build -c opt //metropolis/node:bundle //metropolis/handbook //metropolis/cli/metroctl | 
 |       - name: Attach artifacts to Release | 
 |         uses: softprops/action-gh-release@v1 | 
 |         with: | 
 |           files: | | 
 |             bazel-bin/metropolis/node/bundle.zip | 
 |             bazel-bin/metropolis/cli/metroctl/metroctl_/metroctl | 
 |       - name: Upload to GCS | 
 |         run: |- | 
 |           gcloud alpha storage cp bazel-bin/metropolis/node/bundle.zip gs://monogon-release-artifacts/${GITHUB_REF##*/}/bundle.zip | 
 |           gcloud alpha storage cp bazel-bin/metropolis/cli/metroctl/metroctl_/metroctl gs://monogon-release-artifacts/${GITHUB_REF##*/}/metroctl | 
 |           gcloud alpha storage cp -r bazel-bin/metropolis/handbook/handbook gs://monogon-release-artifacts/${GITHUB_REF##*/}/handbook |