Feat(gitlab-ci,docker,release-management): Run pipeline for docker and releases

- Add release stage to existing Gitlab pipeline
- Add docker build and push job
- Add create release job

.gitlab-ci.yml

@@ -4,6 +4,14 @@ variables:
   GOPATH: "$CI_PROJECT_DIR/.gopath"
   GOFLAGS: -mod=readonly
 
+.release-rules: &release-rules
+  # rule to run job on a tag-reference which has the form number.number.number (semantic versioning)
+  # or number.number.number-text (semantic versioning + release-name)
+  # and where a Dockerfile exists
+  - if: $CI_COMMIT_TAG =~ /^\d+[.]\d+[.]\d+$/ || $CI_COMMIT_TAG =~ /^\d+[.]\d+[.]\d+[-]\S+$/
+    exists:
+      - Dockerfile
+
 cache:
   paths:
     - .gopath/
@@ -15,7 +23,7 @@ stages:
   - prepare
   - test
   - build
-
+  - release
 
 prepare:
   stage: prepare
@@ -75,3 +83,47 @@ docker:
     - /kaniko/executor --context $CI_PROJECT_DIR --dockerfile $CI_PROJECT_DIR/Dockerfile --destination $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_NAME
   only:
     - master
+
+docker-hub-push:
+  # Use the official docker image.
+  image: docker:latest
+  stage: release
+  variables:
+    # the name of the image without version
+    AURA_IMAGE_NAME: "autoradio/tank"
+  services:
+    - docker:dind
+  before_script:
+    # default repo is docker.io (aka docker hub)
+    - docker login -u "$DOCKER_ID" -p "$DOCKER_HUB_AUTH"
+  script:
+    # every commit on main branch should build image as unstable
+    # else it is from a tag (enforced by gitlab-ci rules)
+    # hint: tags are references independent of branches
+    - |
+      if [ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]
+        then docker build -t $AURA_IMAGE_NAME:unstable .
+        else docker build -t $AURA_IMAGE_NAME -t $AURA_IMAGE_NAME:$CI_COMMIT_TAG .
+      fi
+    # TODO: maybe isolate docker build and docker push
+    - docker push "$AURA_IMAGE_NAME" --all-tags
+  rules: 
+    - *release-rules
+    # every commit on master/main branch should trigger a push to docker-hub as unstable without a release
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH 
+      exists:
+        - Dockerfile
+
+release_job:
+  stage: release
+  needs: 
+    - docker-push
+  image: registry.gitlab.com/gitlab-org/release-cli:latest
+  rules: *release-rules
+  script:
+    - echo "this will be a release when there is a tag, but tags should be protected to be only createable by maintainers."
+  release:
+    name: 'Release $CI_COMMIT_TAG'
+    description: ./CHANGELOG
+    tag_name: '$CI_COMMIT_TAG'
+    ref: '$CI_COMMIT_TAG'