[GitHub Request] Allow tag update for opensearch-api-specification repo

[Hailong-am]

What is the type of request?

GitHub Action

Details of the request

The release flow of opensearch-api-specification has been broken due to the CI can't update existing tag anymore.

Attempting to create or update release tag "main-latest"
  Could not create new tag "refs/tags/main-latest" (Reference update failed) therefore updating existing tag "tags/main-latest"
  Error: Repository rule violations found

https://github.com/opensearch-project/opensearch-api-specification/actions/workflows/build.yml

Additional information to support your request

opensearch clients are depends on the spec to generate code, without this client can't get latest spec changes.

When does this request need to be completed?

Enable the tag update for this spec workflow/repo

Notes

Track the progress of your request here: Engineering Effectiveness Board (view).
Member of @opensearch-project/admin will take a look at the request soon.
Thanks!

[Hailong-am]

@peterzhuamazon could you help to take a look at this?

[peterzhuamazon]

Will discuss with Hailong offline in solution as we are currently talking with another maintainer on potential solutions. We will not enable tag creation by GitHub actions as that is the measure to avoid creation by non admins for potential malicious alternation.

Thanks.

[peterzhuamazon]

Need this to be merged to next step:

• Update api publish, deploy jekyll with automatic gh pages action, update remote vs. local yaml location on index.html opensearch-api-specification#1200
• Show the download links of yaml, zip, txt to index.html opensearch-api-specification#1203
• Update OpenSearch OpenAPI spec URL to api-spec.opensearch.org (opensearch-build) opensearch-build#6443

https://github.com/opensearch-project/opensearch-api-specification/releases/tag/main-latest Updated as well.

[peterzhuamazon]

https://api-spec.opensearch.org/