Complete open sourcing

[isegall-da]

Enable CI on Splice

• Complete re-implementation of CI in GHA
• Confirm that all that is required for GHA exists already in the daily dumps
• Review current diff between internal repo and Splice, and decide what to do with everything there
• Setup self-hosted runners for Splice
• Configure secrets
• Enable CI

Docs

Currently, the docs are maintained internally at DA, in the same repo as the Splice code. In the initial milestone, these docs will move as-is to GSF, and Splice docs will be empty.

• move docs out of the DA-internal Splice repo. Initially, copy them in when cutting a release, to reuse the existing release process. (update: we have decided to clone the GSF docs in Splice initially, and clean this a bit later in order to expedite the open sourcing)

Splice repo setup

• Sort out permissions and open-source processes in Splice, e.g. a process for adding CONTRIBUTORS.
• Migrate all issues from DA-internal repo to Splice. Update cross-references, and references from code, accordingly

.

Move active development from DA-internal to Splice

Post-migration actions

• Stop making dumps from internal repo to Splice
• Docs:
  • docs: do not conflate the generic amulet with the Canton Coin instance #376
  • docs: do not duplicate Canton docs in Splice #377
• Make the GSF rebuild docs from Splice
• Cleanup submodule checkout (see issue 17437 in DA-internal repo)
• Remove GSF-specific terms from recently added code
• Move GHCR from DA to LFDT
• Move releases to GHA in Splice
• Cleanup contributor READMEs in Splice
• Implement and document support for a small k8s-based test on k3s/k3d
  • Consider including also as a mandatory CI test if this is low-resource enough
  • Or at least an opt-in one if it’s too expensive to run on every PR
• Contribute our Pulumi code to Splice, and sort out all issues around things that are prod-only, and ability to easily make private temporary changes
• Support a full cluster test from a PR in Splice directly on a vCluster
• Add support to easily push/pull images to a configurable repo
• Support deploying and testing a CI cluster from Splice GHA (See issue 17839 in DA-internal repo)
• Migrate deployment of CIDaily to GHA in Splice (including migration to isolated services e.g. Auth0 tenant, dedicated GCP projects&secrets, etc)
• Migrate periodic testing (preflights) of CIDaily to GHA in Splice
• Migrate alerts and failures from CIDaily to a public channel/repo/whatever
• Migrate tests on CIMain, CIUpgrade, CIPeriodic to GHA in Splice (including migration to isolated services e.g. Auth0 tenant, dedicated GCP projects&secrets, etc)
• Migrate alerts and failures from CImain, CIupgrade and CIPeriodic to a public channel/repo/whatever
• Resolve access to test artifacts.
  • Probably initially just grant access on-demand to GCP logs, and avoid granting access to clusters directly.