OCM-24478 | ci: add ROSA changelog tag job

ci-operator/config/openshift/rosa/openshift-rosa-master.yaml

@@ -59,6 +59,21 @@ tests:
   secret:
     mount_path: /tmp/secret
     name: rosa-codecov-token
+- as: changelog-history
+  commands: |
+    unset GOFLAGS
+    export GITHUB_TOKEN=$(cat /tmp/github/oauth)
+    if ! command -v jq >/dev/null 2>&1; then
+      echo "jq not found, installing..." >&2
+      dnf install -y jq || { echo "ERROR: failed to install jq" >&2; exit 1; }
+    fi
+    make changelog-pr
+  container:
+    from: src
+  postsubmit: true
+  secret:
+    mount_path: /tmp/github
+    name: github-credentials-openshift-ci-robot-private-git-cloner
 zz_generated_metadata:
   branch: master
   org: openshift

ci-operator/jobs/openshift/rosa/openshift-rosa-master-postsubmits.yaml

@@ -1,5 +1,75 @@
 postsubmits:
   openshift/rosa:
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^master$
+    cluster: build05
+    decorate: true
+    decoration_config:
+      skip_cloning: true
+    labels:
+      ci.openshift.io/generator: prowgen
+    max_concurrency: 1
+    name: branch-ci-openshift-rosa-master-changelog-history
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --oauth-token-path=/usr/local/github-credentials/oauth
+        - --report-credentials-file=/etc/report/credentials
+        - --secret-dir=/secrets/github-credentials-openshift-ci-robot-private-git-cloner
+        - --target=changelog-history
+        command:
+        - ci-operator
+        env:
+        - name: HTTP_SERVER_IP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.podIP
+        image: quay-proxy.ci.openshift.org/openshift/ci:ci_ci-operator_latest
+        imagePullPolicy: Always
+        name: ""
+        ports:
+        - containerPort: 8080
+          name: http
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /usr/local/github-credentials
+          name: github-credentials-openshift-ci-robot-private-git-cloner
+          readOnly: true
+        - mountPath: /secrets/github-credentials-openshift-ci-robot-private-git-cloner
+          name: github-credentials-openshift-ci-robot-private-git-cloner
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: github-credentials-openshift-ci-robot-private-git-cloner
+        secret:
+          secretName: github-credentials-openshift-ci-robot-private-git-cloner
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
   - agent: kubernetes
     always_run: true
     branches: