19
19
DOCKER_HUB_PASSWORD : ${{secrets.OHAI_DOCKER_HUB_PASSWORD}}
20
20
21
21
packaging-amd64 :
22
- needs : [unit-test, proxy-tests]
22
+ # needs: [unit-test, proxy-tests]
23
23
uses : ./.github/workflows/component_linux_packaging.yml
24
24
secrets :
25
25
DOCKER_HUB_ID : ${{secrets.OHAI_DOCKER_HUB_ID}}
33
33
ARCH : ' amd64'
34
34
35
35
packaging-amd64-fips :
36
- needs : [unit-test, proxy-tests]
36
+ # needs: [unit-test, proxy-tests]
37
37
uses : ./.github/workflows/component_linux_packaging.yml
38
38
secrets :
39
39
DOCKER_HUB_ID : ${{secrets.OHAI_DOCKER_HUB_ID}}
48
48
FIPS : true
49
49
50
50
packaging-arm :
51
- needs : [unit-test, proxy-tests]
51
+ # needs: [unit-test, proxy-tests]
52
52
uses : ./.github/workflows/component_linux_packaging.yml
53
53
secrets :
54
54
DOCKER_HUB_ID : ${{secrets.OHAI_DOCKER_HUB_ID}}
62
62
ARCH : ' arm'
63
63
64
64
packaging-arm64 :
65
- needs : [unit-test, proxy-tests]
65
+ # needs: [unit-test, proxy-tests]
66
66
uses : ./.github/workflows/component_linux_packaging.yml
67
67
secrets :
68
68
DOCKER_HUB_ID : ${{secrets.OHAI_DOCKER_HUB_ID}}
76
76
ARCH : ' arm64'
77
77
78
78
packaging-arm64-fips :
79
- needs : [unit-test, proxy-tests]
79
+ # needs: [unit-test, proxy-tests]
80
80
uses : ./.github/workflows/component_linux_packaging.yml
81
81
secrets :
82
82
DOCKER_HUB_ID : ${{secrets.OHAI_DOCKER_HUB_ID}}
91
91
FIPS : true
92
92
93
93
packaging-legacy :
94
- needs : [unit-test, proxy-tests]
94
+ # needs: [unit-test, proxy-tests]
95
95
uses : ./.github/workflows/component_linux_packaging.yml
96
96
secrets :
97
97
DOCKER_HUB_ID : ${{secrets.OHAI_DOCKER_HUB_ID}}
@@ -104,25 +104,25 @@ jobs:
104
104
TAG : ${{ github.event.release.tag_name }}
105
105
ARCH : ' legacy'
106
106
107
- packaging-docker :
108
- needs : [unit-test, proxy-tests]
109
- uses : ./.github/workflows/component_docker_packaging.yml
110
- secrets :
111
- DOCKER_HUB_ID : ${{secrets.OHAI_DOCKER_HUB_ID}}
112
- DOCKER_HUB_PASSWORD : ${{secrets.OHAI_DOCKER_HUB_PASSWORD}}
113
-
114
- GPG_PASSPHRASE : ${{ secrets.OHAI_GPG_PASSPHRASE }}
115
- GPG_PRIVATE_KEY_BASE64 : ${{ secrets.OHAI_GPG_PRIVATE_KEY_BASE64 }} # base64 encoded
116
- GH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
117
- with :
118
- TAG : ${{ github.event.release.tag_name }}
119
-
120
- docker-trivy-critical :
121
- needs : [packaging-docker]
122
- uses : ./.github/workflows/component_trivy.yml
123
- with :
124
- tag : " ${{ github.event.release.tag_name }}-rc"
125
- severity : " CRITICAL"
107
+ # packaging-docker:
108
+ # needs: [unit-test, proxy-tests]
109
+ # uses: ./.github/workflows/component_docker_packaging.yml
110
+ # secrets:
111
+ # DOCKER_HUB_ID: ${{secrets.OHAI_DOCKER_HUB_ID}}
112
+ # DOCKER_HUB_PASSWORD: ${{secrets.OHAI_DOCKER_HUB_PASSWORD}}
113
+
114
+ # GPG_PASSPHRASE: ${{ secrets.OHAI_GPG_PASSPHRASE }}
115
+ # GPG_PRIVATE_KEY_BASE64: ${{ secrets.OHAI_GPG_PRIVATE_KEY_BASE64 }} # base64 encoded
116
+ # GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
117
+ # with:
118
+ # TAG: ${{ github.event.release.tag_name }}
119
+ #
120
+ # docker-trivy-critical:
121
+ # needs: [packaging-docker]
122
+ # uses: ./.github/workflows/component_trivy.yml
123
+ # with:
124
+ # tag: "${{ github.event.release.tag_name }}-rc"
125
+ # severity: "CRITICAL"
126
126
127
127
publishing-to-s3 :
128
128
# point to staging after tests
@@ -140,7 +140,9 @@ jobs:
140
140
AWS_ROLE_SESSION_NAME : ${{ secrets.OHAI_AWS_ROLE_SESSION_NAME_STAGING }}
141
141
with :
142
142
ACCESS_POINT_HOST : " staging"
143
- SCHEMA_BRANCH : " master"
143
+ # TODO: modify to master after testing
144
+ # SCHEMA_BRANCH: "master"
145
+ SCHEMA_BRANCH : " NR_351326_linux_prerelease_fips"
144
146
RUN_ID : ${{ github.run_id }}
145
147
TAG : ${{ github.event.release.tag_name }}
146
148
AWS_S3_BUCKET_NAME : " nr-downloads-ohai-staging"
@@ -152,49 +154,49 @@ jobs:
152
154
needs : [publishing-to-s3]
153
155
with :
154
156
TAG : ${{ github.event.release.tag_name }}
155
- REPO_ENDPOINT : " http://nr-downloads-ohai-staging.s3-website-us-east-1.amazonaws.com/infrastructure_agent "
156
-
157
- test-prerelease-linux :
158
- needs : [molecule-packaging-tests]
159
- uses : ./.github/workflows/component_prerelease_testing.yml
160
- with :
161
- PLATFORM : " linux"
162
- TAG : ${{ github.event.release.tag_name }}
163
- TAG_OR_UNIQUE_NAME : " ${{ github.event.release.tag_name }}-linux"
164
- secrets :
165
- AWS_VPC_SUBNET : ${{secrets.AWS_VPC_SUBNET}}
166
- CROWDSTRIKE_CLIENT_ID : ${{secrets.CROWDSTRIKE_CLIENT_ID}}
167
- CROWDSTRIKE_CLIENT_SECRET : ${{secrets.CROWDSTRIKE_CLIENT_SECRET}}
168
- CROWDSTRIKE_CUSTOMER_ID : ${{secrets.CROWDSTRIKE_CUSTOMER_ID}}
169
-
170
- canaries-linux :
171
- needs : [test-prerelease-linux]
172
- uses : ./.github/workflows/component_canaries.yml
173
- with :
174
- PLATFORM : " linux"
175
- TAG : ${{ github.event.release.tag_name }}
176
- secrets :
177
- AWS_VPC_SUBNET : ${{secrets.AWS_VPC_SUBNET}}
178
- CROWDSTRIKE_CLIENT_ID : ${{secrets.CROWDSTRIKE_CLIENT_ID}}
179
- CROWDSTRIKE_CLIENT_SECRET : ${{secrets.CROWDSTRIKE_CLIENT_SECRET}}
180
- CROWDSTRIKE_CUSTOMER_ID : ${{secrets.CROWDSTRIKE_CUSTOMER_ID}}
181
-
182
- get_previous_tag :
183
- runs-on : ubuntu-latest
184
- outputs :
185
- previous_tag : ${{ steps.previous_tag_step.outputs.PREVIOUS_TAG }}
186
- steps :
187
- - uses : actions/checkout@v2
188
-
189
- - id : previous_tag_step
190
- run : ./.github/workflows/scripts/previous_version.sh ${{ github.event.release.tag_name }} >> "$GITHUB_OUTPUT"
191
-
192
- prune-previous-canaries-linux :
193
- needs : [canaries-linux, get_previous_tag]
194
- uses : ./.github/workflows/component_canaries_prune.yml
195
- with :
196
- PLATFORM : " linux"
197
- TAG : ${{ needs.get_previous_tag.outputs.previous_tag }}
198
- secrets :
199
- AWS_VPC_SUBNET : ${{secrets.AWS_VPC_SUBNET}}
157
+ REPO_ENDPOINT : " http://nr-downloads-ohai-staging.s3-website-us-east-1.amazonaws.com/acabanas_molecule_test_fips "
158
+
159
+ # test-prerelease-linux:
160
+ # needs: [molecule-packaging-tests]
161
+ # uses: ./.github/workflows/component_prerelease_testing.yml
162
+ # with:
163
+ # PLATFORM: "linux"
164
+ # TAG: ${{ github.event.release.tag_name }}
165
+ # TAG_OR_UNIQUE_NAME: "${{ github.event.release.tag_name }}-linux"
166
+ # secrets:
167
+ # AWS_VPC_SUBNET: ${{secrets.AWS_VPC_SUBNET}}
168
+ # CROWDSTRIKE_CLIENT_ID: ${{secrets.CROWDSTRIKE_CLIENT_ID}}
169
+ # CROWDSTRIKE_CLIENT_SECRET: ${{secrets.CROWDSTRIKE_CLIENT_SECRET}}
170
+ # CROWDSTRIKE_CUSTOMER_ID: ${{secrets.CROWDSTRIKE_CUSTOMER_ID}}
171
+ #
172
+ # canaries-linux:
173
+ # needs: [test-prerelease-linux]
174
+ # uses: ./.github/workflows/component_canaries.yml
175
+ # with:
176
+ # PLATFORM: "linux"
177
+ # TAG: ${{ github.event.release.tag_name }}
178
+ # secrets:
179
+ # AWS_VPC_SUBNET: ${{secrets.AWS_VPC_SUBNET}}
180
+ # CROWDSTRIKE_CLIENT_ID: ${{secrets.CROWDSTRIKE_CLIENT_ID}}
181
+ # CROWDSTRIKE_CLIENT_SECRET: ${{secrets.CROWDSTRIKE_CLIENT_SECRET}}
182
+ # CROWDSTRIKE_CUSTOMER_ID: ${{secrets.CROWDSTRIKE_CUSTOMER_ID}}
183
+ #
184
+ # get_previous_tag:
185
+ # runs-on: ubuntu-latest
186
+ # outputs:
187
+ # previous_tag: ${{ steps.previous_tag_step.outputs.PREVIOUS_TAG }}
188
+ # steps:
189
+ # - uses: actions/checkout@v2
190
+ #
191
+ # - id: previous_tag_step
192
+ # run: ./.github/workflows/scripts/previous_version.sh ${{ github.event.release.tag_name }} >> "$GITHUB_OUTPUT"
193
+ #
194
+ # prune-previous-canaries-linux:
195
+ # needs: [canaries-linux, get_previous_tag]
196
+ # uses: ./.github/workflows/component_canaries_prune.yml
197
+ # with:
198
+ # PLATFORM: "linux"
199
+ # TAG: ${{ needs.get_previous_tag.outputs.previous_tag }}
200
+ # secrets:
201
+ # AWS_VPC_SUBNET: ${{secrets.AWS_VPC_SUBNET}}
200
202
0 commit comments