Skip to content

Trigger release-environment pipeline from security stable branches

Jenny Kim requested to merge jennykim/release-environment-trigger-from-security into master

Currently, commits and commit tags on canonical stable branches trigger a downstream release-environments pipeline, like so.

This MR adds similar support for the security mirror's stable branches, so that we can build and test before security releases.

  • Creates downstream pipeline in release-environments repository
    • Sends to the downstream pipeline variable ENVIRONMENT appended with -security, so that it can be deployed to the respective security environment on release-environments
  • Creates downstream pipeline in security images repository
  • Builds QA images for security repository stable branches, similar to how it currently builds for canonical repository's stable branches for release-environments.
  • Perform authentication before pulling QA images in security mirror
  • The downstream pipeline trigger should happen in both canonical and security repositories

Addresses: gitlab-com/gl-infra/delivery#20285 (closed), https://gitlab.com/gitlab-com/gl-infra/delivery/-/issues/20303, gitlab-com/gl-infra/delivery#20327

Draft mode until testing is finished

gitlab-org/security/gitlab testing stable branch 0-0-stable-ee has been created: https://gitlab.com/gitlab-org/security/gitlab/-/commits/0-0-stable-ee

Edited by Dat Tang

Merge request reports