Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(STONEINTG-1078): Combine all FBC validation tasks into one #1534

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

arewm
Copy link
Member

@arewm arewm commented Oct 24, 2024

This change combines the inspect-image, fbc-validate, and fbc-related-image-check into a single task. It depends on functionality that needs to be added to EC to parse the produced trusted artifact in order to assess whether the related images are valid.

All of the old tasks will be deprecated and the required tasks need to be updated to require only

- [fbc-related-image-check, validate-fbc]

This will ensure that users can still be guaranteed to have a valid FBC fragment and appropriate related images.

EDIT: In order to merge this PR quicker, the functionality for moving the related image check was backed out. In a future PR, we can update the task to output the list of related images and have EC check them for validity.

@arewm arewm force-pushed the fbc-pipeline-tech-debt branch 3 times, most recently from c278ac7 to 55ff684 Compare November 12, 2024 22:56
@arewm arewm force-pushed the fbc-pipeline-tech-debt branch 5 times, most recently from 0cd30a4 to 01adb6b Compare November 12, 2024 23:26
@arewm arewm marked this pull request as ready for review November 12, 2024 23:26
@arewm arewm requested review from 14rcole and dirgim November 12, 2024 23:27
@arewm
Copy link
Member Author

arewm commented Nov 12, 2024

@yashvardhannanavati @grokspawn , I cannot assign you as reviewers, but can you double check this PR? It is a big PR but the content should be largely unchanged from when it was separated into three tasks.

@arewm arewm changed the title Combine all FBC validation tasks into one feat(STONEINTG-1078): Combine all FBC validation tasks into one Nov 12, 2024
approvers:
- integration-team
reviewers:
- integration-team
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

probably doesn't matter, but do you need a newline here?

This change combines the inspect-image, fbc-validate, and
fbc-related-image-check into a single task.

All of the old tasks will be deprecated and the required tasks need to
be updated to require only

```
- [fbc-related-image-check, validate-fbc]
```

This will ensure that users can still be guaranteed to have a valid FBC
fragment and appropriate related images.

The following items were deferred from this task update:
* make this task multi-arch aware.
* make this task fail if a bundle is an image index reference
* change the related-image check to be done in EC by exporting the set of related images

Signed-off-by: arewm <[email protected]>
@grokspawn
Copy link
Contributor

@yashvardhannanavati @grokspawn , I cannot assign you as reviewers, but can you double check this PR? It is a big PR but the content should be largely unchanged from when it was separated into three tasks.

Just ran across the gh notification now. I'll take a look. I also couldn't assign me. 😞

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants