Semantic versioning in Compass Manager release images

prow/jobs/kyma-project/compass-manager/build.yaml

@@ -2,7 +2,7 @@ postsubmits: # runs on main
   kyma-project/compass-manager:
     - name: post-main-compass-manager-build
       annotations:
-        description: "Build the component image"
+        description: "Build the CM component image"
         owner: framefrog
       labels:
         prow.k8s.io/pubsub.project: "sap-kyma-prow"
@@ -52,3 +52,56 @@ postsubmits: # runs on main
           - name: signify-secret
             secret:
               secretName: signify-dev-secret
+    - name: post-release-compass-manager-build
+      annotations:
+        description: "Build the CM release component image"
+        owner: framefrog
+      labels:
+        prow.k8s.io/pubsub.project: "sap-kyma-prow"
+        prow.k8s.io/pubsub.runID: "post-release-compass-manager-build"
+        prow.k8s.io/pubsub.topic: "prowjobs"
+        preset-sa-kyma-push-images: "true"
+        preset-signify-prod-secret: "true"
+      always_run: true
+      skip_report: false
+      decorate: true
+      cluster: trusted-workload
+      max_concurrency: 10
+      branches:
+        - ^\d+\.\d+\.\d+(?:-.*)?$
+      spec:
+        containers:
+          - image: "europe-docker.pkg.dev/kyma-project/prod/image-builder:v20240521-098832b4"
+            command:
+              - "/image-builder"
+            args:
+              - "--name=compass-manager"
+              - "--config=/config/kaniko-build-config.yaml"
+              - "--context=."
+              - "--dockerfile=Dockerfile"
+              - "--tag=$(PULL_BASE_REF)"
+            resources:
+              requests:
+                memory: 6Gi
+                cpu: 1
+              limits:
+                memory: 6Gi
+            volumeMounts:
+              - name: config
+                mountPath: /config
+                readOnly: true
+              - name: signify-secret
+                mountPath: /secret
+                readOnly: true
+            securityContext:
+              privileged: false
+              seccompProfile:
+                type: RuntimeDefault
+              allowPrivilegeEscalation: false
+        volumes:
+          - name: config
+            configMap:
+              name: kaniko-build-config
+          - name: signify-secret
+            secret:
+              secretName: signify-dev-secret