unkin-agent
0b159dad90
Packer-built almalinux9-gobuilder is retiring. Moves test and pre-commit steps to artifactapi docker-internal/gobuilder 0.1.2-alma9 (estate CA, go1.26.7, go-cache-plugin baked in). - Repoint both steps at the new image, quoted (has a colon) - Drop curl/sha256sum bootstrap for go-cache-plugin; it's on PATH now - Set GOCACHEPROG as a static env var instead of a conditional export - Verified build/test still pass with unreachable/invalid S3 creds — best-effort degrade is a plugin runtime property, unaffected Reviewed-on: #127 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>
35 lines
1.2 KiB
YAML
35 lines
1.2 KiB
YAML
when:
|
|
- event: pull_request
|
|
|
|
steps:
|
|
- name: pre-commit
|
|
# gobuilder trusts the internal CA, which the S3 build cache endpoint needs.
|
|
# go-cache-plugin is baked into the image; S3 errors degrade to cache misses.
|
|
image: "artifactapi.k8s.syd1.au.unkin.net/docker-internal/gobuilder:0.1.2-alma9"
|
|
commands:
|
|
- uvx pre-commit run --all-files
|
|
environment:
|
|
# golib lives on Gitea; skip the public proxy/sum db.
|
|
GOPRIVATE: git.unkin.net
|
|
GOCACHEPROG: "go-cache-plugin --cache-dir=/tmp/gocache"
|
|
GOCACHE_S3_BUCKET: gocache
|
|
# Explicit region skips a GetBucketLocation probe RGW handles poorly.
|
|
GOCACHE_S3_REGION: us-east-1
|
|
GOCACHE_S3_ENDPOINT_URL: "https://s3.ceph.unkin.net"
|
|
GOCACHE_S3_PATH_STYLE: "true"
|
|
GOCACHE_KEY_PREFIX: ci-artifactapi
|
|
AWS_ACCESS_KEY_ID:
|
|
from_secret: GOCACHE_AWS_ACCESS_KEY_ID
|
|
AWS_SECRET_ACCESS_KEY:
|
|
from_secret: GOCACHE_AWS_SECRET_ACCESS_KEY
|
|
backend_options:
|
|
kubernetes:
|
|
serviceAccountName: default
|
|
resources:
|
|
requests:
|
|
memory: 512Mi
|
|
cpu: 1
|
|
limits:
|
|
memory: 2Gi
|
|
cpu: 2
|