Add DRA FIPS artifacts to package pipeline#4574
Add DRA FIPS artifacts to package pipeline#4574michel-laterman merged 13 commits intoelastic:mainfrom
Conversation
|
This pull request does not have a backport label. Could you fix it @michel-laterman? 🙏
|
|
@michel-laterman please do not merge https://github.com/elastic/infra/pull/42160 before this gets merged/backported or you'll block the unified release. The same happened to @pchila |
|
@michel-laterman could you please test this PR on buildkite to see if all the artifacts are correctly generated? BRANCH="main"
BUILDKITE_PULL_REQUEST="true"ref. |
|
FIPS DRA attempt: https://buildkite.com/elastic/fleet-server-package-mbp/builds/1739 |
|
Currently the FIPS dra is failing as the package step uses |
There was a problem hiding this comment.
The FIPS artifact builds are now completing, however it is havin issues authenticating with GCP at the end to upload
.buildkite/scripts/common.sh: line 112: PRIVATE_CI_GCS_CREDENTIALS_SECRET: unbound variable
https://buildkite.com/elastic/fleet-server-package-mbp/builds/1743
My next commit fixed this issue, successful build available: https://buildkite.com/elastic/fleet-server-package-mbp/builds/1744
02cac91 to
6550186
Compare
|
Thanks a @v1v I changed all our |
pchila
left a comment
There was a problem hiding this comment.
A couple of nitpicks mostly on the PATH env var building.
No blockers.
Co-authored-by: Paolo Chilà <paolo.chila@elastic.co>
|
Add FIPS="true" env flag to packageing pipeline. Packaging pipline uses microsoft/go instead of golang/go to build DRA artifacts for FIPS. Change package name from fleet-server-*-fips to fleet-server-fips-*. (cherry picked from commit 8bb8c74)
Add FIPS="true" env flag to packageing pipeline. Packaging pipline uses microsoft/go instead of golang/go to build DRA artifacts for FIPS. Change package name from fleet-server-*-fips to fleet-server-fips-*. (cherry picked from commit 8bb8c74) Co-authored-by: Michel Laterman <82832767+michel-laterman@users.noreply.github.com>
|
@Mergifyio backport 9.0 |
✅ Backports have been createdDetails
|
Add FIPS="true" env flag to packageing pipeline. Packaging pipline uses microsoft/go instead of golang/go to build DRA artifacts for FIPS. Change package name from fleet-server-*-fips to fleet-server-fips-*. (cherry picked from commit 8bb8c74)





What is the problem this PR solves?
Provide FIPS dra artifacts.
How does this PR solve the problem?
Add
FIPS="true"env flag to packageing pipeline.Packaging pipline uses microsoft/go instead of golang/go to build DRA artifacts for FIPS.
Change package name from
fleet-server-*-fipstofleet-server-fips-*.Design Checklist
I have ensured my design is stateless and will work when multiple fleet-server instances are behind a load balancer.I have or intend to scale test my changes, ensuring it will work reliably with 100K+ agents connected.I have included fail safe mechanisms to limit the load on fleet-server: rate limiting, circuit breakers, caching, load shedding, etc.Checklist
I have made corresponding change to the default configuration filesI have added tests that prove my fix is effective or that my feature worksI have added an entry in./changelog/fragmentsusing the changelog toolRelated issues