Skip to content

Commit 10701bb

Browse files
committed
[CI] issue: HPCINFRA-3388 Run all CI steps on containers
Today we have a few CI pipelines that still use nodeLabel: 'master' in their matrix file, causing some steps to run on the master node. This is a security risk and we should run only on containers, the master node will be taken down in the future not allowing this type of run. Replace master agent definition with docker definition Signed-off-by: NirWolfer <[email protected]>
1 parent 594c2d2 commit 10701bb

File tree

1 file changed

+12
-6
lines changed

1 file changed

+12
-6
lines changed

.ci/pipeline/dr_weekly_matrix.yaml

Lines changed: 12 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,18 @@ job: LIBXLIO-dr-weekly-launcher
33
failFast: false
44
timeout_minutes: 120
55

6-
runs_on_agents:
7-
- {nodeLabel: 'master', category: 'base'}
6+
kubernetes:
7+
cloud: il-ipp-blossom-prod
8+
namespace: swx-media
9+
limits: '{memory: 1Gi, cpu: 500m}'
10+
requests: '{memory: 1Gi, cpu: 500m}'
11+
arch_table:
12+
x86_64:
13+
nodeSelector: 'kubernetes.io/arch=amd64'
14+
jnlpImage: 'nbu-harbor.gtm.nvidia.com/toolbox/c3po-jnlp:latest'
15+
16+
runs_on_dockers:
17+
- { name: "groovy", url: "nbu-harbor.gtm.nvidia.com/toolbox/c3po-jnlp:latest", arch: 'x86_64'}
818

919
env:
1020
MAIL_FROM: [email protected]
@@ -26,8 +36,6 @@ pipeline_start:
2636
2737
steps:
2838
- name: Determine release_tag
29-
agentSelector:
30-
- "{category: 'base'}"
3139
shell: action
3240
module: groovy
3341
run: |
@@ -75,8 +83,6 @@ steps:
7583
pipeline_stop:
7684
shell: action
7785
module: groovy
78-
agentSelector:
79-
- "{category: 'base'}"
8086
run: |
8187
if (!params.MAIL_TO.isEmpty()) {
8288
mail from: "${MAIL_FROM}",

0 commit comments

Comments
 (0)