Commit Graph

183 Commits

Author SHA1 Message Date
b22060dd52
support modular enable/disable for scoped packages
Signed-off-by: Neil Hanlon <neil@rockylinux.org>
2022-12-19 15:51:49 -05:00
resf-prow[bot]
ebedf766c9
Merge pull request #75 from NeilHanlon/security/golang
bump golang to 1.18.9 for several CVEs
2022-12-08 23:16:44 +00:00
resf-prow[bot]
a2fb251227
Merge pull request #71 from mstg/yumrepofs-speedup
Multiple changes related to build, modules and cloning
2022-12-08 06:23:43 +00:00
ef70d3c41b
bump golang to 1.18.9 for several CVEs
* net/http (CVE-2022-41717, CVE-2022-41720)
* os (CVE-2022-41720)

Signed-off-by: Neil Hanlon <neil@rockylinux.org>
2022-12-07 13:28:46 -05:00
Mustafa Gezen
9592fc297c
Properly delete excluded rpms after a catalog change 2022-11-23 23:48:55 +01:00
Mustafa Gezen
c6bec99698
Add support for deleting builds from yumrepofs 2022-11-21 00:58:14 +01:00
Mustafa Gezen
be2b871fff
Strictly use module side repo during module builds and target only current project setting branches 2022-11-19 22:51:16 +01:00
Mustafa Gezen
3319abf62b
Multiple changes related to build, modules and cloning
* Dependencies are now installed with best=1
* rpmutils.NVR is now equal to srpmproc's rpmutils.Nvr
* Add support for cloning a project and swapping target project builds on top
* Side NVR repos are now faster to create
* Module builds now support side NVRs
* Side NVRs now support multiple builds of a certain version
* ListBuilds now properly supports filters
* yumrepofsupdater now runs on a better node pool
* Upgrade srpmproc to v0.4.3
* kubernetes.jsonnet now supports node pool placements
* Modulemds are now copied properly to avoid accidental pointer overrides that propagated back to unrelated Mds
* rpmimport now properly imports SRPMs and doesn't fail randomly
* Yumrepofs now properly adds module defaults in non-all repos
* Yumrepofs now properly swaps older module artifacts
* Yumrepofs now properly replaces non-project artifacts after a clone swap
* Added additional logging to yumrepofs
2022-11-19 02:52:24 +01:00
resf-prow[bot]
8222ab2f43
Merge pull request #70 from mstg/module-debuginfo-fix
Module mode now correctly replaces all artifacts
2022-11-14 15:31:22 +00:00
Mustafa Gezen
6e5a2ae2b6
Remove debug logs from yumrepofs 2022-11-14 11:08:54 +01:00
Mustafa Gezen
e0a043afb3
Module mode now correctly replaces all artifacts
There was a bug in module mode where debuginfo+src would not get replaced correctly. That is now fixed. Additional changes to module artifact detection is also made after the build merge solution was implemented. Previously src.rpms could be collapsed because of multiple src.rpms in one build, leading to non-devel artifacts being placed in devel. That is also fixed with this.
2022-11-14 11:06:16 +01:00
resf-prow[bot]
4e9db547f6
Merge pull request #68 from mstg/active-in-repo-fix
Peridot: Fix MakeActiveInRepo - Only set for current project
2022-11-07 13:42:46 +00:00
Mustafa Gezen
a143c18b94
Peridot: Fix MakeActiveInRepo - Only set for current project
Current behavior sets active package version in repo for all projects even though yumrepofs is only updating for a specific project. This fixes it by only setting active package version in repo for that specific version in that specific project.
2022-11-07 14:33:44 +01:00
resf-prow[bot]
850c4b93bb
Merge pull request #67 from mstg/errata-keyword-fix-name
Apollo: Keyword search now does pagination correctly
2022-11-07 13:30:45 +00:00
Mustafa Gezen
93304aca7b
Apollo: Keyword search now does pagination correctly
Previously there was an outer query to further filter using CVEs and keyword, but that broke the pagination. All filtering is now moved to the inner layer and the outer layer has been removed. Also add search by advisory name.
2022-11-07 14:26:17 +01:00
resf-prow[bot]
ab5ae64ef8
Merge pull request #66 from mstg/hotfix-deploy-impacted
Deploy objects with force_normal_tags should only apply
2022-11-07 13:06:46 +00:00
Mustafa Gezen
0eaaf4dbfe
Deploy objects with force_normal_tags should only apply 2022-11-07 14:03:24 +01:00
resf-prow[bot]
37a958bad0
Merge pull request #65 from mstg/hotfix-s3
s3.kube_env should default to RESF Peridot bucket
2022-11-07 12:55:45 +00:00
Mustafa Gezen
e6d319b8a2
s3.kube_env should default to RESF Peridot bucket 2022-11-07 13:52:22 +01:00
resf-prow[bot]
70056dedd5
Merge pull request #64 from mstg/vre-detection-fixes
Upgrade srpmproc to v0.4.2
2022-11-07 01:09:51 +00:00
resf-prow[bot]
d3e50d4e1d
Merge pull request #63 from mstg/errata-skip-fix
Fix Apollo skipping errata if failure happens after updating last sync
2022-11-07 01:09:45 +00:00
resf-prow[bot]
96d2a2d736
Merge pull request #62 from mstg/keykeeper-fix
Import RPM key to verify signature and stop blocking on failure
2022-11-07 01:00:46 +00:00
Mustafa Gezen
5f06ed99d0
Upgrade srpmproc to v0.4.2
Earlier srpmproc versions have a bug with VRE matching. The regex used to match the NVR was actually formed to match NVRA. This is generally not harmful, but NVRs that has an extra dot something in Release can throw off this regex into thinking that the dist is actually the arch.
2022-11-06 04:59:44 +01:00
Mustafa Gezen
e23a83e859
Fix Apollo skipping errata if failure happens after updating last sync
When polling RH Errata, Apollo sets the last sync date to the first advisory we process (advisories are synced in descending order). If a failure happens while processing newer advisories, the sync is already set and the system skips over advisories it has NOT yet processed.

This PR sets the mirror state in a parent transaction, then commits that transaction if no failures occur. Skipping advisories when an error occurs is also reworked, where the first failure fails the workflow. The workflow will retry on its normal schedule.
2022-11-06 04:39:28 +01:00
Mustafa Gezen
6e77412823
Import RPM key to verify signature and stop blocking on failure
Previously Keykeeper had a faulty verify check, where `rpm --checksig` didn't actually work because the RPM key was never imported. This would normally be caught but the TaskSignature creation was done after every signature without a transaction. That led to the activity succeeding next launch with either a faulty signed RPM or a correctly signed RPM.

We caught all instances of this by verifying signature of all artifacts during compose, but it was an annoying problem that we would run into occasionally. This should fix that.
2022-11-05 18:32:58 +01:00
resf-prow[bot]
6e752a3704
Merge pull request #61 from mstg/module-v3-support
Module v3 support and misc fixes
2022-11-04 02:46:43 +00:00
Mustafa Gezen
41e81718d8
Add .envrc.local to gitignore 2022-11-04 03:30:10 +01:00
Mustafa Gezen
d57186510f
Go.mod upgrades (srpmproc and aws-sdk-go) 2022-11-04 03:30:10 +01:00
Mustafa Gezen
0eeb8395e4
Rpm-import is now simpler 2022-11-04 03:30:10 +01:00
Mustafa Gezen
8d2116dfeb
Fix dev mode for yumrepofs 2022-11-04 03:30:10 +01:00
Mustafa Gezen
26ab9cbdb2
Support changing local domain 2022-11-04 03:30:10 +01:00
Mustafa Gezen
d62a16923f
Support modulemd v3 and module sync 2022-11-04 03:30:10 +01:00
Mustafa Gezen
e7173cbe9b
Default copyright profile 2022-11-04 03:30:09 +01:00
Mustafa Gezen
ba014228bd
Vendor 2022-11-04 03:30:09 +01:00
Mustafa Gezen
aeca22b751
Add support for .envrc.local 2022-11-04 03:30:09 +01:00
resf-prow[bot]
e37a5bac58
Merge pull request #58 from TheTedAdams/product-errata-header-fix
Fix header wrapping in safari. Add tooltip to type/severity row icons
2022-11-02 17:45:19 +00:00
Ted Adams
d778d5843c Fix header wrapping in safari. Add tooltip to type/severity row icons 2022-11-02 09:09:13 -07:00
resf-prow[bot]
67fb8751fd
Merge pull request #60 from mstg/add-mergecommitblocker-to-prow
Prow should block PRs with merge commits
2022-11-01 23:01:19 +00:00
Mustafa Gezen
59585e7e78
Block PRs with merge commits 2022-11-01 23:57:35 +01:00
resf-prow[bot]
5f39d45b2d
Merge pull request #59 from mstg/deploy-impacted-fix
Fix impacted deploy (postsubmit)
2022-11-01 20:36:18 +00:00
Mustafa Gezen
5ab7151dd6
Fetch all refs, then use HEAD~ to get previous merge, then checkout back to current commit 2022-11-01 21:30:06 +01:00
resf-prow[bot]
d21a8a3f37
Merge pull request #57 from mstg/deploy-test-5
Obsidian: Explain callbackForwarder
2022-11-01 03:55:18 +00:00
Mustafa Gezen
34748f5c33
Obsidian: Explain callbackForwarder 2022-11-01 04:49:59 +01:00
Mustafa Gezen
a15e184cf3
Fix resfdeploy deployment 2022-11-01 04:45:12 +01:00
Mustafa Gezen
6f9ad97063
It's "-w 0" and not "-b 0" 2022-11-01 04:33:44 +01:00
Mustafa Gezen
8b2c65990a
Try "-b 0" for docker base64 2022-11-01 04:31:21 +01:00
Mustafa Gezen
aea228f816
Actually base64 credentials for docker 2022-11-01 04:29:54 +01:00
Mustafa Gezen
8fdc60cc52
Remove dead code (deploy test 4) 2022-11-01 04:27:24 +01:00
Mustafa Gezen
a3fb219ed8
Use reverse postsubmit for impact detection 2022-11-01 04:24:51 +01:00
Mustafa Gezen
e9f7e34810
Target should be current merge 2022-11-01 04:18:29 +01:00