release: decouple test_plan/test_apply from Terraform Registry indexing#531
Merged
Conversation
Switch test_plan and sonar_poc_cli post-release jobs to use in-repo modules instead of the Terraform Registry. The GitHub → Terraform Registry webhook can be delayed or dropped, as happened in release 1.7.35 where tags were pushed to all per-module repos but never indexed, causing test_plan to fail with "Unresolvable module version constraint". Also add scripts/check_registry_versions.sh to verify that a given release tag has been indexed on the registry for every per-module repo, with guidance to manually trigger a resync when needed.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release 1.7.35 was blocked because the GitHub → Terraform Registry webhook didn't index the new tag for 21 of 25 modules (had to be manually resynced one-by-one in the registry UI by the sole publisher account). Since
test_plan/test_applyranterraform initagainst the registry, they failed withUnresolvable module version constraint, which blocked the rest of the release flow.This PR makes the release self-contained:
test_planandtest_applynow consume the in-repo modules (the same codedeploy_modulespublishes to the per-module repos), so the registry indexing delay can no longer block a release. Customers continue to consume fromimperva/dsf-*/awsetc. as before — registry indexing runs as a separate concern.Also adds
scripts/check_registry_versions.shwhich lists which modules are still behind a given version on the registry and prints clickable resync URLs.