Xgboost migration - Add generate-release-spec and release-image steps to XGBoost SageMaker release workflow (#5862)

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 12
X-AI-Prompt: add these lines in release-sagemaker-xgboost to truigger # TODO: Remove push trigger after testing, keep only workflow_dispatch
push:
branches: [xgboost-release]

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 53
X-AI-Prompt: no this has made a mess now the pr contains only that changes of 2 lines

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 14
X-AI-Prompt: okay make chagne to xgbost-migration brnach not release since our branch is migration not release

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 9
X-AI-Prompt: yeah set it

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 37
X-AI-Prompt: Do not remove anything our changes are to just add the release image and generate release spec and the rest should not be changed what is in the main. i know previously we commented out the benchmark teests but recent chnages in repo already handled that so now we have to just add last 2 steps without changeing any thing

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 33
X-AI-Prompt: i want to test just the release logic comment the tests which might take hours to run

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 38
X-AI-Prompt: in the pr we have made changes to release-sagemkaker-xgboost.yml file to skip tests now revert them i want to run all the tests

* Human changes made during kiro-cli session after prompt completion.
---
X-AI-Tool: Human
X-AI-Prompt: the branch is again out of date

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 38
X-AI-Prompt: i want to test gamma release. skip the tests so that the release logic is tested

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 38
X-AI-Prompt: no i created a new GitHub environment preprod and now make changees to make it possible

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 13
X-AI-Prompt: change env to gamma i want to trigger

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 12
X-AI-Prompt: change back to preprod

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 28
X-AI-Prompt: change env to gamma from production

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 9
X-AI-Prompt: ok change the env to preprod

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 34
X-AI-Prompt: remove on push and revert force release

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 41
X-AI-Prompt: ok enable all the tests also

* AI changes made during Kiro-cli session
---
X-AI-Tool: Kiro-cli
X-AI-Handle-Time-Seconds: 12
X-AI-Prompt: also make release : false

---------

Co-authored-by: Bhanu Teja Goshikonda <bhanugk@amazon.com>

Author: bhanutejagk

.github/config/sagemaker-xgboost.yml

@@ -22,9 +22,9 @@ common:
 
 # Release configuration
 release:
-  release: true
+  release: false
   force_release: false
-  public_registry: true
+  public_registry: false
   private_registry: true
   enable_soci: false
-  environment: gamma
+  environment: preprod

.github/workflows/release-sagemaker-xgboost.yml

@@ -107,29 +107,24 @@ jobs:
     steps:
       - name: Checkout DLC source
         uses: actions/checkout@v5
-
       - name: Clone sagemaker-xgboost-container
         run: rm -rf /tmp/xgboost-unit && git clone --depth 1 ${{ env.XGBOOST_CONTAINER_REPO }} /tmp/xgboost-unit
-
       - name: ECR login
         uses: ./.github/actions/ecr-authenticate
         with:
           aws-account-id: ${{ vars.CI_AWS_ACCOUNT_ID }}
           aws-region: ${{ vars.AWS_REGION }}
           image-uri: ${{ needs.build-image.outputs.ci-image }}
-
       - name: Build test image
         run: |
           CI_IMAGE_URI="${{ needs.build-image.outputs.ci-image }}"
           cd /tmp/xgboost-unit
           printf "FROM ${CI_IMAGE_URI}\nADD . /app\nWORKDIR /app\nRUN python3 -m pip install .[test]" > Dockerfile.test
           docker build -t test-xgboost -f Dockerfile.test .
-
       - name: Run unit tests
         run: |
           docker run --rm test-xgboost sh -c \
             'python3 -m pytest --cov=sagemaker_xgboost_container --cov-fail-under=60 test/unit'
-
       - name: Run flake8
         run: |
           docker run --rm test-xgboost sh -c 'python3 -m flake8 setup.py src test'
@@ -157,4 +152,45 @@ jobs:
       aws-account-id: ${{ vars.CI_AWS_ACCOUNT_ID }}
       aws-region: ${{ vars.AWS_REGION }}
 
-  # TODO: Add generate-release-spec and release-image jobs when release is ready
+  generate-release-spec:
+    needs: [load-config, build-image, unit-test, security-test, xgboost-tests]
+    runs-on: ubuntu-latest
+    concurrency:
+      group: ${{ github.workflow }}-generate-release-spec-${{ github.run_id }}
+      cancel-in-progress: true
+    outputs:
+      release-spec: ${{ steps.generate.outputs.release-spec }}
+      should-release: ${{ steps.check-release.outputs.should-release }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+
+      - name: Check if release is enabled
+        id: check-release
+        run: |
+          echo '${{ needs.load-config.outputs.config }}' > config.json
+          RELEASE_ENABLED=$(jq -r '.release.release // false' config.json)
+          echo "Release enabled: ${RELEASE_ENABLED}"
+          echo "should-release=${RELEASE_ENABLED}" >> $GITHUB_OUTPUT
+
+      - name: Generate release spec
+        id: generate
+        if: steps.check-release.outputs.should-release == 'true'
+        uses: ./.github/actions/generate-release-spec
+        with:
+          config-json: ${{ needs.load-config.outputs.config }}
+
+  release-image:
+    needs: [load-config, build-image, generate-release-spec]
+    if: needs.generate-release-spec.outputs.should-release == 'true'
+    concurrency:
+      group: ${{ github.workflow }}-release-image-${{ github.run_id }}
+      cancel-in-progress: true
+    uses: ./.github/workflows/reusable-release-image.yml
+    with:
+      source-image-uri: ${{ needs.build-image.outputs.ci-image }}
+      release-spec: ${{ needs.generate-release-spec.outputs.release-spec }}
+      environment: ${{ fromJson(needs.load-config.outputs.config).release.environment }}
+      aws-region: ${{ vars.AWS_REGION }}
+      runner-fleet: default-runner
+    secrets: inherit

.github/workflows/reusable-release-image.yml

@@ -52,9 +52,9 @@ jobs:
           ENVIRONMENT="${{ inputs.environment }}"
 
           # Validate environment input
-          if [[ "${ENVIRONMENT}" != "gamma" && "${ENVIRONMENT}" != "production" ]]; then
+          if [[ "${ENVIRONMENT}" != "gamma" && "${ENVIRONMENT}" != "production" && "${ENVIRONMENT}" != "preprod" ]]; then
             echo "❌ ERROR: Invalid environment '${ENVIRONMENT}'"
-            echo "Valid environments: gamma, production"
+            echo "Valid environments: gamma, preprod, production"
             exit 1
           fi