CI: Make RGM the main pipeline for prerelease (#72295)

* Make RGM the main pipeline for prerelease

* Use grafana/grafana-build:dev-bd41660

* Use grafana/grafana-build:dev-fda506a

* Fix destination url

* Update vault secrets

* Move bucket path to environment

* Use grafana/grafana-build:dev-2f36afa

* Revert to grafana/grafana-build:main

* Add repo to rgm_main trigger

scripts/drone/rgm.star

@@ -17,6 +17,18 @@ load(
     "scripts/drone/events/release.star",
     "verify_release_pipeline",
 )
+load(
+    "scripts/drone/pipelines/test_frontend.star",
+    "test_frontend",
+)
+load(
+    "scripts/drone/pipelines/test_backend.star",
+    "test_backend",
+)
+load(
+    "scripts/drone/pipelines/whats_new_checker.star",
+    "whats_new_checker_pipeline",
+)
 load(
     "scripts/drone/vault.star",
     "from_secret",
@@ -36,6 +48,31 @@ rgm_env_secrets = {
     "GPG_PASSPHRASE": from_secret("packages_gpg_passphrase"),
 }
 
+docs_paths = {
+    "exclude": [
+        "*.md",
+        "docs/**",
+        "packages/**/*.md",
+        "latest.json",
+    ],
+}
+
+tag_trigger = {
+    "event": {
+        "exclude": [
+            "promote",
+        ],
+    },
+    "ref": {
+        "include": [
+            "refs/tags/v*",
+        ],
+        "exclude": [
+            "refs/tags/*-cloud*",
+        ],
+    },
+}
+
 def rgm_build(script = "drone_publish_main.sh"):
     rgm_build_step = {
         "name": "rgm-build",
@@ -55,15 +92,6 @@ def rgm_build(script = "drone_publish_main.sh"):
         rgm_build_step,
     ]
 
-docs_paths = {
-    "exclude": [
-        "*.md",
-        "docs/**",
-        "packages/**/*.md",
-        "latest.json",
-    ],
-}
-
 def rgm_main():
     trigger = {
         "event": [
@@ -71,6 +99,9 @@ def rgm_main():
         ],
         "branch": "main",
         "paths": docs_paths,
+        "repo": [
+            "grafana/grafana",
+        ],
     }
 
     return pipeline(
@@ -80,28 +111,12 @@ def rgm_main():
         depends_on = ["main-test-backend", "main-test-frontend"],
     )
 
-tag_trigger = {
-    "event": {
-        "exclude": [
-            "promote",
-        ],
-    },
-    "ref": {
-        "include": [
-            "refs/tags/v*",
-        ],
-        "exclude": [
-            "refs/tags/*-cloud*",
-        ],
-    },
-}
-
 def rgm_tag():
     return pipeline(
         name = "rgm-tag-prerelease",
         trigger = tag_trigger,
         steps = rgm_build(script = "drone_publish_tag_grafana.sh"),
-        depends_on = [],
+        depends_on = ["release-test-backend", "release-test-frontend"],
     )
 
 def rgm_windows():
@@ -111,7 +126,7 @@ def rgm_windows():
         steps = ignore_failure(
             get_windows_steps(
                 ver_mode = "release",
-                bucket = "grafana-prerelease-dev",
+                bucket = "grafana-prerelease",
             ),
         ),
         depends_on = ["rgm-tag-prerelease"],
@@ -120,13 +135,16 @@ def rgm_windows():
 
 def rgm():
     return [
+        whats_new_checker_pipeline(tag_trigger),
+        test_frontend(tag_trigger, "release"),
+        test_backend(tag_trigger, "release"),
         rgm_main(),
         rgm_tag(),
         rgm_windows(),
         verify_release_pipeline(
             trigger = tag_trigger,
             name = "rgm-tag-verify-prerelease-assets",
-            bucket = "grafana-prerelease-dev",
+            bucket = "grafana-prerelease",
             depends_on = [
                 "rgm-tag-prerelease",
                 "rgm-tag-prerelease-windows",

scripts/drone/vault.star

@@ -108,12 +108,12 @@ def secrets():
         vault_secret(
             rgm_gcp_key_base64,
             "infra/data/ci/grafana-release-eng/rgm",
-            "gcp_service_account_base64",
+            "gcp_service_account_prod_base64",
         ),
         vault_secret(
             rgm_destination,
             "infra/data/ci/grafana-release-eng/rgm",
-            "destination",
+            "destination_prod",
         ),
         vault_secret(
             rgm_dagger_token,