Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: tag 1.71.7 #773

Merged
merged 12 commits into from
Oct 3, 2024
Merged

chore: tag 1.71.7 #773

merged 12 commits into from
Oct 3, 2024

Conversation

pjenvey
Copy link
Member

@pjenvey pjenvey commented Oct 3, 2024

and rebuild Cargo.lock, resolve cherry-picking/merge conflicts

pjenvey and others added 12 commits August 29, 2024 10:44
I took a stab at updating the CircleCI config to push images to GAR
after they're pushed to Docker Hub. This approach requires the
[circleci/gcp-gcr
orb](https://circleci.com/developer/orbs/orb/circleci/gcp-gcr).

Requirements:

- [x] New environment variables added to CircleCI project
- [x] Workload Identity configured for service account
- [ ] New workflows tested
This value was defaulting to `false`, causing the orb to expect a
service account key to be present.

---------

Co-authored-by: JR Conlin <jr+git@mozilla.com>
#762)

I was accidentally using the GAR project ID for both OIDC and GAR. I
updated this workflow to:

- Use the correct values for each respective project ID
- Rename the environment variables so their scopes are clearer (GAR vs
OIDC)

I already updated the corresponding environment variables on CircleCI.
I was not passing in a necessary parameter for OIDC authentication. It
turns out the orb differentiates between the project ID (project to make
changes against) and project number (OIDC Workload Identity
authorization).
This now mounts the workspace so we can load the built image from that.
Also, I fixed the image name in the `gcp-gcr/push-image` step.

This was tested successfully in
https://app.circleci.com/pipelines/github/mozilla-services/autopush-rs/2873/workflows/9adebe2f-13e8-4e5d-a853-e78b7f6ca368
@pjenvey pjenvey requested review from jrconlin and taddes October 3, 2024 18:45
Copy link
Contributor

@taddes taddes left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@pjenvey pjenvey merged commit a6db959 into master Oct 3, 2024
1 check passed
@pjenvey pjenvey deleted the release/1.71.7-merge branch October 3, 2024 23:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants