Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add DRA FIPS artifacts to package pipeline #4574

Merged
merged 13 commits into from
Mar 25, 2025
Merged

Add DRA FIPS artifacts to package pipeline #4574

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
d85b344
Add DRA FIPS artifacts to package pipeline
michel-laterman Mar 12, 2025
1ac3c4e
Change artifact name from fleet-server-*-fips to fleet-server-fips-*
michel-laterman Mar 14, 2025
c438318
Fix e2e FIPS test path
michel-laterman Mar 17, 2025
0267fe6
Fix test-release and docker image
michel-laterman Mar 17, 2025
3e52f90
Fix fleet-server FIPS standalone image name
michel-laterman Mar 17, 2025
9873ce7
Review feedback
michel-laterman Mar 20, 2025
b9e740e
remove extra ref to FIPS env var
michel-laterman Mar 24, 2025
e503bb0
Use msft/go for FIPS packaging
michel-laterman Mar 24, 2025
5631ced
DRA FIPS builds only target single platform
michel-laterman Mar 24, 2025
858593d
export FIPS platforms
michel-laterman Mar 24, 2025
6550186
Add fips steps to hooks
michel-laterman Mar 24, 2025
920947c
Use false to resolve undefined var
michel-laterman Mar 24, 2025
7970f5b
Update .buildkite/scripts/common.sh
michel-laterman Mar 25, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 4 additions & 32 deletions .buildkite/pipeline.package.mbp.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -104,22 +104,10 @@ steps:
depends_on:
- step: "package-x86-64-snapshot"
allow_failure: false
- step: "package-arm-snapshot"
allow_failure: false

- label: "DRA FIPS snapshot"
if: "${FILE_EXISTS_IN_REPO} && build.env('VERSION_QUALIFIER') == null"
key: "dra-fips snapshot"
command: ".buildkite/scripts/dra_release.sh snapshot"
env:
FIPS: "true"
agents:
provider: "gcp"
image: "${IMAGE_UBUNTU_X86_64}"
machineType: "c2-standard-16"
depends_on:
- step: "package-fips-x86-64-snapshot"
allow_failure: false
- step: "package-arm-snapshot"
allow_failure: false
- step: "package-fips-arm-snapshot"
allow_failure: false

Expand All @@ -138,25 +126,9 @@ steps:
depends_on:
- step: "package-x86-64-staging"
allow_failure: false
- step: "package-arm-staging"
allow_failure: false

- label: "DRA FIPS release staging"
# we don't usually build staging from the main branch, but we exceptionally allow it for prereleases
# details in https://github.com/elastic/ingest-dev/issues/4855
if: "${FILE_EXISTS_IN_REPO} == true && (build.env('BUILDKITE_BRANCH') != 'main' || build.env('VERSION_QUALIFIER') != null)"
key: "dra-fips-staging"
command: |
source .buildkite/scripts/version_qualifier.sh
.buildkite/scripts/dra_release.sh staging
env:
FIPS: "true"
agents:
provider: "gcp"
image: "${IMAGE_UBUNTU_X86_64}"
machineType: "c2-standard-16"
depends_on:
- step: "package-fips-x86-64-staging"
allow_failure: false
- step: "package-arm-staging"
allow_failure: false
- step: "package-fips-arm-staging"
allow_failure: false
4 changes: 0 additions & 4 deletions .buildkite/scripts/dra_release.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,10 +41,6 @@ if [[ ${TYPE} == "snapshot" ]]; then
VERSION="${VERSION}-SNAPSHOT"
fi

if [[ ${FIPS} == "true" ]]; then
export FIPS=true
fi

mkdir -p ${BASE_DIR}/reports
./dev-tools/dependencies-report --csv ${BASE_DIR}/reports/dependencies-${VERSION}.csv
cd ${BASE_DIR}/reports && shasum -a 512 dependencies-${VERSION}.csv > dependencies-${VERSION}.csv.sha512
Expand Down
4 changes: 4 additions & 0 deletions .buildkite/scripts/package.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,10 @@ if [[ ${PLATFORM_TYPE} == "arm" || ${PLATFORM_TYPE} == "aarch64" ]]; then
PACKAGES="docker"
fi

if [[ ${FIPS} == "true" ]]; then
export FIPS=true
fi

add_bin_path
with_go
with_mage
Expand Down