282 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
resf-prow[bot]	ebedf766c9	Merge pull request #75 from NeilHanlon/security/golang ... bump golang to 1.18.9 for several CVEs	2022-12-08 23:16:44 +00:00
resf-prow[bot]	a2fb251227	Merge pull request #71 from mstg/yumrepofs-speedup ... Multiple changes related to build, modules and cloning	2022-12-08 06:23:43 +00:00
Neil Hanlon	ef70d3c41b	bump golang to 1.18.9 for several CVEs ... * net/http (CVE-2022-41717, CVE-2022-41720) * os (CVE-2022-41720) Signed-off-by: Neil Hanlon <neil@rockylinux.org>	2022-12-07 13:28:46 -05:00
Mustafa Gezen	9592fc297c	Properly delete excluded rpms after a catalog change	2022-11-23 23:48:55 +01:00
Mustafa Gezen	c6bec99698	Add support for deleting builds from yumrepofs	2022-11-21 00:58:14 +01:00
Mustafa Gezen	be2b871fff	Strictly use module side repo during module builds and target only current project setting branches	2022-11-19 22:51:16 +01:00
Mustafa Gezen	3319abf62b	Multiple changes related to build, modules and cloning ... * Dependencies are now installed with best=1 * rpmutils.NVR is now equal to srpmproc's rpmutils.Nvr * Add support for cloning a project and swapping target project builds on top * Side NVR repos are now faster to create * Module builds now support side NVRs * Side NVRs now support multiple builds of a certain version * ListBuilds now properly supports filters * yumrepofsupdater now runs on a better node pool * Upgrade srpmproc to v0.4.3 * kubernetes.jsonnet now supports node pool placements * Modulemds are now copied properly to avoid accidental pointer overrides that propagated back to unrelated Mds * rpmimport now properly imports SRPMs and doesn't fail randomly * Yumrepofs now properly adds module defaults in non-all repos * Yumrepofs now properly swaps older module artifacts * Yumrepofs now properly replaces non-project artifacts after a clone swap * Added additional logging to yumrepofs	2022-11-19 02:52:24 +01:00
resf-prow[bot]	8222ab2f43	Merge pull request #70 from mstg/module-debuginfo-fix ... Module mode now correctly replaces all artifacts	2022-11-14 15:31:22 +00:00
Mustafa Gezen	6e5a2ae2b6	Remove debug logs from yumrepofs	2022-11-14 11:08:54 +01:00
Mustafa Gezen	e0a043afb3	Module mode now correctly replaces all artifacts ... There was a bug in module mode where debuginfo+src would not get replaced correctly. That is now fixed. Additional changes to module artifact detection is also made after the build merge solution was implemented. Previously src.rpms could be collapsed because of multiple src.rpms in one build, leading to non-devel artifacts being placed in devel. That is also fixed with this.	2022-11-14 11:06:16 +01:00
resf-prow[bot]	4e9db547f6	Merge pull request #68 from mstg/active-in-repo-fix ... Peridot: Fix MakeActiveInRepo - Only set for current project	2022-11-07 13:42:46 +00:00
Mustafa Gezen	a143c18b94	Peridot: Fix MakeActiveInRepo - Only set for current project ... Current behavior sets active package version in repo for all projects even though yumrepofs is only updating for a specific project. This fixes it by only setting active package version in repo for that specific version in that specific project.	2022-11-07 14:33:44 +01:00
resf-prow[bot]	850c4b93bb	Merge pull request #67 from mstg/errata-keyword-fix-name ... Apollo: Keyword search now does pagination correctly	2022-11-07 13:30:45 +00:00
Mustafa Gezen	93304aca7b	Apollo: Keyword search now does pagination correctly ... Previously there was an outer query to further filter using CVEs and keyword, but that broke the pagination. All filtering is now moved to the inner layer and the outer layer has been removed. Also add search by advisory name.	2022-11-07 14:26:17 +01:00
resf-prow[bot]	ab5ae64ef8	Merge pull request #66 from mstg/hotfix-deploy-impacted ... Deploy objects with force_normal_tags should only apply	2022-11-07 13:06:46 +00:00
Mustafa Gezen	0eaaf4dbfe	Deploy objects with force_normal_tags should only apply	2022-11-07 14:03:24 +01:00
resf-prow[bot]	37a958bad0	Merge pull request #65 from mstg/hotfix-s3 ... s3.kube_env should default to RESF Peridot bucket	2022-11-07 12:55:45 +00:00
Mustafa Gezen	e6d319b8a2	s3.kube_env should default to RESF Peridot bucket	2022-11-07 13:52:22 +01:00
resf-prow[bot]	70056dedd5	Merge pull request #64 from mstg/vre-detection-fixes ... Upgrade srpmproc to v0.4.2	2022-11-07 01:09:51 +00:00
resf-prow[bot]	d3e50d4e1d	Merge pull request #63 from mstg/errata-skip-fix ... Fix Apollo skipping errata if failure happens after updating last sync	2022-11-07 01:09:45 +00:00
resf-prow[bot]	96d2a2d736	Merge pull request #62 from mstg/keykeeper-fix ... Import RPM key to verify signature and stop blocking on failure	2022-11-07 01:00:46 +00:00
Mustafa Gezen	5f06ed99d0	Upgrade srpmproc to v0.4.2 ... Earlier srpmproc versions have a bug with VRE matching. The regex used to match the NVR was actually formed to match NVRA. This is generally not harmful, but NVRs that has an extra dot something in Release can throw off this regex into thinking that the dist is actually the arch.	2022-11-06 04:59:44 +01:00
Mustafa Gezen	e23a83e859	Fix Apollo skipping errata if failure happens after updating last sync ... When polling RH Errata, Apollo sets the last sync date to the first advisory we process (advisories are synced in descending order). If a failure happens while processing newer advisories, the sync is already set and the system skips over advisories it has NOT yet processed. This PR sets the mirror state in a parent transaction, then commits that transaction if no failures occur. Skipping advisories when an error occurs is also reworked, where the first failure fails the workflow. The workflow will retry on its normal schedule.	2022-11-06 04:39:28 +01:00
Mustafa Gezen	6e77412823	Import RPM key to verify signature and stop blocking on failure ... Previously Keykeeper had a faulty verify check, where `rpm --checksig` didn't actually work because the RPM key was never imported. This would normally be caught but the TaskSignature creation was done after every signature without a transaction. That led to the activity succeeding next launch with either a faulty signed RPM or a correctly signed RPM. We caught all instances of this by verifying signature of all artifacts during compose, but it was an annoying problem that we would run into occasionally. This should fix that.	2022-11-05 18:32:58 +01:00
resf-prow[bot]	6e752a3704	Merge pull request #61 from mstg/module-v3-support ... Module v3 support and misc fixes	2022-11-04 02:46:43 +00:00
Mustafa Gezen	41e81718d8	Add .envrc.local to gitignore	2022-11-04 03:30:10 +01:00
Mustafa Gezen	d57186510f	Go.mod upgrades (srpmproc and aws-sdk-go)	2022-11-04 03:30:10 +01:00
Mustafa Gezen	0eeb8395e4	Rpm-import is now simpler	2022-11-04 03:30:10 +01:00
Mustafa Gezen	8d2116dfeb	Fix dev mode for yumrepofs	2022-11-04 03:30:10 +01:00
Mustafa Gezen	26ab9cbdb2	Support changing local domain	2022-11-04 03:30:10 +01:00
Mustafa Gezen	d62a16923f	Support modulemd v3 and module sync	2022-11-04 03:30:10 +01:00
Mustafa Gezen	e7173cbe9b	Default copyright profile	2022-11-04 03:30:09 +01:00
Mustafa Gezen	ba014228bd	Vendor	2022-11-04 03:30:09 +01:00
Mustafa Gezen	aeca22b751	Add support for .envrc.local	2022-11-04 03:30:09 +01:00
resf-prow[bot]	e37a5bac58	Merge pull request #58 from TheTedAdams/product-errata-header-fix ... Fix header wrapping in safari. Add tooltip to type/severity row icons	2022-11-02 17:45:19 +00:00
Ted Adams	d778d5843c	Fix header wrapping in safari. Add tooltip to type/severity row icons	2022-11-02 09:09:13 -07:00
resf-prow[bot]	67fb8751fd	Merge pull request #60 from mstg/add-mergecommitblocker-to-prow ... Prow should block PRs with merge commits	2022-11-01 23:01:19 +00:00
Mustafa Gezen	59585e7e78	Block PRs with merge commits	2022-11-01 23:57:35 +01:00
resf-prow[bot]	5f39d45b2d	Merge pull request #59 from mstg/deploy-impacted-fix ... Fix impacted deploy (postsubmit)	2022-11-01 20:36:18 +00:00
Mustafa Gezen	5ab7151dd6	Fetch all refs, then use HEAD~ to get previous merge, then checkout back to current commit	2022-11-01 21:30:06 +01:00
resf-prow[bot]	d21a8a3f37	Merge pull request #57 from mstg/deploy-test-5 ... Obsidian: Explain callbackForwarder	2022-11-01 03:55:18 +00:00
Mustafa Gezen	34748f5c33	Obsidian: Explain callbackForwarder	2022-11-01 04:49:59 +01:00
Mustafa Gezen	a15e184cf3	Fix resfdeploy deployment	2022-11-01 04:45:12 +01:00
Mustafa Gezen	6f9ad97063	It's "-w 0" and not "-b 0"	2022-11-01 04:33:44 +01:00
Mustafa Gezen	8b2c65990a	Try "-b 0" for docker base64	2022-11-01 04:31:21 +01:00
Mustafa Gezen	aea228f816	Actually base64 credentials for docker	2022-11-01 04:29:54 +01:00
Mustafa Gezen	8fdc60cc52	Remove dead code (deploy test 4)	2022-11-01 04:27:24 +01:00
Mustafa Gezen	a3fb219ed8	Use reverse postsubmit for impact detection	2022-11-01 04:24:51 +01:00
Mustafa Gezen	e9f7e34810	Target should be current merge	2022-11-01 04:18:29 +01:00
resf-prow[bot]	257644f533	Merge pull request #56 from mstg/config-change-bump ... Bump image version to v0.3.19 (Prow)	2022-11-01 03:15:18 +00:00