build arm image on main, test latest features

.github/workflows/build-and-push-hawk-server-arm64.yaml

@@ -0,0 +1,56 @@
+name: Build and push ARM64 image for iris-mpc-cpu
+
+on:
+  push:
+    branches:
+      - main
+  release:
+    types:
+      - 'published'
+
+concurrency:
+  group: '${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}'
+  cancel-in-progress: true
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: "${{ github.repository }}-cpu"
+
+jobs:
+  docker:
+    timeout-minutes: 40
+    runs-on:
+      labels: arm64-ubuntu-22.04-16core
+    permissions:
+      packages: write
+      contents: read
+      attestations: write
+      id-token: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435
+      - name: Log in to the Container registry
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build and Push
+        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83
+        with:
+          context: .
+          push: true
+          tags: |
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}-arm64
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest-arm64
+            ${{ github.event.release.tag_name && format('{0}/{1}:{2}', env.REGISTRY, env.IMAGE_NAME, github.event.release.tag_name) || '' }}
+          platforms: linux/arm64
+          build-args: |
+            ARCHITECTURE=aarch64
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          file: Dockerfile.arm64.hawk

.github/workflows/temp-branch-build-and-push-hawk-arm64.yaml

@@ -3,7 +3,7 @@ name: Branch - Hawk Build and push docker image ARM64
 on:
   push:
     branches:
-      - "profiling-server-v2"
+      - "test/latest-features-numa"
 
 concurrency:
   group: "${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"

deploy/stage/common-values-ampc-hnsw.yaml

@@ -1,5 +1,4 @@
-#image: "ghcr.io/worldcoin/iris-mpc-cpu:b044465ffd6d9c6f8677f314c6482eb31934a5e1"
-image: "ghcr.io/worldcoin/iris-mpc-cpu:10fd0e9e3bf1927e4015c8a803753dd586470161"
+image: "ghcr.io/worldcoin/iris-mpc-cpu:4a447230e4852349b6842298a09613824fc52b68-arm64"
 
 environment: stage
 replicaCount: 1
@@ -56,11 +55,11 @@ startupProbe:
 
 resources:
   limits:
-    cpu: 124
-    memory: 3720Gi
+    cpu: 188
+    memory: 2720Gi
   requests:
-    cpu: 124
-    memory: 3720Gi
+    cpu: 188
+    memory: 2720Gi
 
 imagePullSecrets:
   - name: github-secret
@@ -69,9 +68,9 @@ podAnnotations:
   karpenter.sh/do-not-disrupt: "true"
 
 nodeSelector:
-  kubernetes.io/arch: amd64
+  kubernetes.io/arch: arm64
   karpenter.sh/capacity-type: on-demand
-  node.kubernetes.io/instance-type: "x2iedn.32xlarge"
+  node.kubernetes.io/instance-type: "x8g.48xlarge"
 
 podSecurityContext:
   runAsUser: 65534