Merge pull request #1605 from JunAr7112/added_nspect_to_pipeline

Added NSPECT to pipeline

Author: cdesiniotis

.nvidia-ci.yml

@@ -116,30 +116,60 @@ scan:gpu-operator-arm64:
   needs:
     - scan:gpu-operator-amd64
 
-# Define the external release steps for NGC and Dockerhub
-.release:ngc:
-  extends: .release:external
+.ngc-publish-variables:
+  before_script:
+    - |
+      if [ -n "${CI_COMMIT_TAG}" ]; then
+        echo "${CI_COMMIT_SHORT_SHA} ${CI_COMMIT_TAG}" > build-info-${CI_PIPELINE_ID}.txt
+      else
+        echo "${CI_COMMIT_SHORT_SHA} ${CI_COMMIT_SHORT_SHA}" > build-info-${CI_PIPELINE_ID}.txt 
+      fi
+
+.update-nspect:
+  stage: ngc-publish
+  needs:
+    - job: release:staging-gpu-operator
+  extends:
+    - .ngc-publish-variables
+  image: 
+    name: "${CNT_NGC_PUBLISH_IMAGE}"
+    pull_policy: always
   variables:
-    OUT_REGISTRY_USER: "${NGC_REGISTRY_USER}"
-    OUT_REGISTRY_TOKEN: "${NGC_REGISTRY_TOKEN}"
-    OUT_REGISTRY: "${NGC_REGISTRY}"
+    PROJECT_NAME: "gpu-operator"
+    REPO_URL: "https://github.com/NVIDIA/gpu-operator.git"
   script:
-    - echo "${VERSION} ${OUT_IMAGE_VERSION}" > build-info-${CI_PIPELINE_ID}.txt
-    - echo "Printing source and target image tags"
-    - cat build-info-${CI_PIPELINE_ID}.txt
-  artifacts:
-    paths:
-      - build-info-${CI_PIPELINE_ID}.txt
+    - |
+      cnt-ngc-publish nspect --versions-file "build-info-${CI_PIPELINE_ID}.txt"
 
-release:ngc-gpu-operator:
+# Update the nspect staging environment to test the nspect publishing logic
+update-nspect-staging:
   extends:
-    - .release:ngc
-    - .target-gpu-operator
+    - .update-nspect
+  except:
+    - tags
+  variables:
+    ENV: "stage"
+    RELEASE_VERSION: "test"
+    NSPECT_CLIENT_ID: "${NSPECT_STAGING_CLIENT_ID}" 
+    NSPECT_CLIENT_SECRET: "${NSPECT_STAGING_CLIENT_SECRET}"
 
-raise-publishing-merge-request:
-  stage: ngc-publish
+# Update the nspect production environment with the new release
+update-nspect:
+  extends:
+    - .update-nspect
   rules:
     - if: $CI_COMMIT_TAG
+  variables:
+    OSRB_BUG_ID: "${OSRB_BUG_ID}"
+    ENV: "prod"
+    RELEASE_VERSION: "${CI_COMMIT_TAG}"
+    NSPECT_CLIENT_ID: "${NSPECT_PROD_CLIENT_ID}" 
+    NSPECT_CLIENT_SECRET: "${NSPECT_PROD_CLIENT_SECRET}"
+
+.publish-images:
+  stage: ngc-publish
+  extends:
+    - .ngc-publish-variables
   image:
     name: "${CNT_NGC_PUBLISH_IMAGE}"
     pull_policy: always
@@ -149,6 +179,28 @@ raise-publishing-merge-request:
     - cnt-ngc-publish render --project-name "gpu-operator" --versions-file "build-info-${CI_PIPELINE_ID}.txt" --output gpu-operator.yaml
     - cnt-ngc-publish merge-request --files "gpu-operator.yaml"
 
+# Raise an MR to publish the image to NGC
+ngc-image-publish:
+  extends:
+    - .publish-images
+  rules:
+    - if: $CI_COMMIT_TAG
+  needs:
+    - job: update-nspect
+  variables:
+    NGC_PUBLISHING_PROJECT_PATH: "${NGC_PUBLISHING_PROD_PROJECT_PATH}"
+
+# Create a dummy MR that exercises the publishing logic
+mock-image-publish:
+  extends:
+    - .publish-images
+  except:
+    - tags
+  needs:
+    - job: update-nspect-staging
+  variables:
+    NGC_PUBLISHING_PROJECT_PATH: "${NGC_PUBLISHING_TEST_PROJECT_PATH}"
+
 .schedule_defaults:
   rules:
   - if: $CI_PIPELINE_SOURCE == "schedule"