|
1 | | -#check-ci-visibility-label: |
2 | | -# stage: publish |
3 | | -# image: registry.ddbuild.io/images/dd-octo-sts-ci-base:2025.06-1 |
4 | | -# tags: [ "arch:amd64" ] |
5 | | -# needs: [ publish-artifacts-to-s3 ] |
6 | | -# id_tokens: |
7 | | -# DDOCTOSTS_ID_TOKEN: |
8 | | -# aud: dd-octo-sts |
9 | | -# rules: |
10 | | -# # - if: '$POPULATE_CACHE' |
11 | | -# # when: never |
12 | | -# # - if: '$CI_COMMIT_BRANCH && $CI_COMMIT_BRANCH !~ /^(master|release\/)/' |
13 | | -# # when: on_success |
14 | | -# - when: never |
15 | | -# before_script: |
16 | | -# - dd-octo-sts version |
17 | | -# - dd-octo-sts debug --scope DataDog/dd-trace-java --policy self.gitlab.github-access.read |
18 | | -# - dd-octo-sts token --scope DataDog/dd-trace-java --policy self.gitlab.github-access.read > github-token.txt |
19 | | -# - gh auth login --with-token < github-token.txt |
20 | | -# script: |
21 | | -# - | |
22 | | -# # Source utility functions |
23 | | -# source .gitlab/ci_visibility_utils.sh |
24 | | -# |
25 | | -# # Get PR number |
26 | | -# if ! PR_NUMBER=$(get_pr_number "${CI_COMMIT_BRANCH}"); then |
27 | | -# echo "No open PR found for branch ${CI_COMMIT_BRANCH}" |
28 | | -# exit 1 |
29 | | -# fi |
30 | | -# |
31 | | -# echo "Found PR #${PR_NUMBER}" |
32 | | -# |
33 | | -# # Check if PR has the CI visibility label |
34 | | -# if pr_has_label "$PR_NUMBER" "comp: ci visibility"; then |
35 | | -# echo "PR_NUMBER=${PR_NUMBER}" > pr.env |
36 | | -# echo "PR #${PR_NUMBER} detected as CI Visibility PR" |
37 | | -# exit 0 |
38 | | -# else |
39 | | -# echo "PR #${PR_NUMBER} not a CI Visibility PR, ignoring trigger" |
40 | | -# exit 1 |
41 | | -# fi |
42 | | -# after_script: |
43 | | -# - dd-octo-sts revoke -t $(cat github-token.txt) || true |
44 | | -# artifacts: |
45 | | -# reports: |
46 | | -# dotenv: pr.env |
47 | | -# allow_failure: true |
48 | | -# retry: |
49 | | -# max: 2 |
50 | | -# when: always |
51 | | -# |
52 | | -#run-ci-visibility-test-environment: |
53 | | -# stage: ci-visibility-tests |
54 | | -# needs: |
55 | | -# - job: check-ci-visibility-label |
56 | | -# artifacts: true |
57 | | -# rules: |
58 | | -# - if: '$POPULATE_CACHE' |
59 | | -# when: never |
60 | | -# - if: '$CI_COMMIT_BRANCH && $CI_COMMIT_BRANCH !~ /^(master|release\/)/' |
61 | | -# when: on_success |
62 | | -# trigger: |
63 | | -# project: DataDog/apm-reliability/test-environment |
64 | | -# branch: main |
65 | | -# strategy: depend |
66 | | -# variables: |
67 | | -# UPSTREAM_PACKAGE_JOB: build |
68 | | -# UPSTREAM_PROJECT_ID: $CI_PROJECT_ID |
69 | | -# UPSTREAM_PROJECT_NAME: $CI_PROJECT_NAME |
70 | | -# UPSTREAM_PIPELINE_ID: $CI_PIPELINE_ID |
71 | | -# UPSTREAM_BRANCH: $CI_COMMIT_BRANCH |
72 | | -# UPSTREAM_TAG: $CI_COMMIT_TAG |
73 | | -# UPSTREAM_COMMIT_AUTHOR: $CI_COMMIT_AUTHOR |
74 | | -# UPSTREAM_COMMIT_SHORT_SHA: $CI_COMMIT_SHORT_SHA |
75 | | -# TRACER_LANG: java |
76 | | -# JAVA_TRACER_REF_TO_TEST: $CI_COMMIT_BRANCH |
77 | | -# JAVA_TRACER_PR_TO_TEST: $PR_NUMBER |
| 1 | +ci-visibility-tests-check: |
| 2 | + stage: ci-visibility-tests |
| 3 | + image: registry.ddbuild.io/images/dd-octo-sts-ci-base:2025.06-1 |
| 4 | + tags: [ "arch:amd64" ] |
| 5 | + needs: [ publish-artifacts-to-s3 ] |
| 6 | + id_tokens: |
| 7 | + DDOCTOSTS_ID_TOKEN: |
| 8 | + aud: dd-octo-sts |
| 9 | + rules: |
| 10 | + - if: '$POPULATE_CACHE' |
| 11 | + when: never |
| 12 | + - if: '$CI_COMMIT_BRANCH && $CI_COMMIT_BRANCH !~ /^(master|release\/)/' |
| 13 | + when: on_success |
| 14 | + - when: never |
| 15 | + before_script: |
| 16 | + - dd-octo-sts version |
| 17 | + - dd-octo-sts debug --scope DataDog/dd-trace-java --policy self.gitlab.github-access.read |
| 18 | + - dd-octo-sts token --scope DataDog/dd-trace-java --policy self.gitlab.github-access.read > github-token.txt |
| 19 | + - gh auth login --with-token < github-token.txt |
| 20 | + script: |
| 21 | + - .gitlab/ci_visibility_generate_job.sh |
| 22 | + after_script: |
| 23 | + - dd-octo-sts revoke -t $(cat github-token.txt) || true |
| 24 | + artifacts: |
| 25 | + paths: |
| 26 | + - ci-visibility-test-environment.yml |
| 27 | + retry: |
| 28 | + max: 2 |
| 29 | + when: always |
| 30 | + |
| 31 | +ci-visibility-tests-trigger: |
| 32 | + stage: ci-visibility-tests |
| 33 | + needs: [ci-visibility-tests-check] |
| 34 | + rules: |
| 35 | + - if: '$POPULATE_CACHE' |
| 36 | + when: never |
| 37 | + - if: '$CI_COMMIT_BRANCH && $CI_COMMIT_BRANCH !~ /^(master|release\/)/' |
| 38 | + when: on_success |
| 39 | + - when: never |
| 40 | + trigger: |
| 41 | + include: |
| 42 | + - artifact: ci-visibility-test-environment.yml |
| 43 | + job: ci-visibility-tests-check |
| 44 | + strategy: depend |
0 commit comments