From 2db4952c3935186bbcc0b35db8f3156faba033ba Mon Sep 17 00:00:00 2001 From: codex Date: Sun, 19 Apr 2026 21:29:56 -0300 Subject: [PATCH] jenkins(sonar): wire defaults and observe-mode toggles --- Jenkinsfile | 6 ++++-- ci/Jenkinsfile.titan-iac | 6 ++++-- services/jenkins/deployment.yaml | 4 ++++ services/logging/Jenkinsfile.data-prepper | 6 ++++-- 4 files changed, 16 insertions(+), 6 deletions(-) diff --git a/Jenkinsfile b/Jenkinsfile index 12c391ab..e48eb087 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -25,9 +25,11 @@ spec: PYTHONUNBUFFERED = '1' SUITE_NAME = 'titan_iac' PUSHGATEWAY_URL = 'http://platform-quality-gateway.monitoring.svc.cluster.local:9091' - QUALITY_GATE_SONARQUBE_ENFORCE = '1' + SONARQUBE_HOST_URL = 'http://sonarqube.quality.svc.cluster.local:9000' + SONARQUBE_PROJECT_KEY = 'titan_iac' + QUALITY_GATE_SONARQUBE_ENFORCE = '0' QUALITY_GATE_SONARQUBE_REPORT = 'build/sonarqube-quality-gate.json' - QUALITY_GATE_IRONBANK_ENFORCE = '1' + QUALITY_GATE_IRONBANK_ENFORCE = '0' QUALITY_GATE_IRONBANK_REQUIRED = '0' QUALITY_GATE_IRONBANK_REPORT = 'build/ironbank-compliance.json' } diff --git a/ci/Jenkinsfile.titan-iac b/ci/Jenkinsfile.titan-iac index ade27452..cb2626f2 100644 --- a/ci/Jenkinsfile.titan-iac +++ b/ci/Jenkinsfile.titan-iac @@ -24,9 +24,11 @@ spec: PYTHONUNBUFFERED = '1' SUITE_NAME = 'titan_iac' PUSHGATEWAY_URL = 'http://platform-quality-gateway.monitoring.svc.cluster.local:9091' - QUALITY_GATE_SONARQUBE_ENFORCE = '1' + SONARQUBE_HOST_URL = 'http://sonarqube.quality.svc.cluster.local:9000' + SONARQUBE_PROJECT_KEY = 'titan_iac' + QUALITY_GATE_SONARQUBE_ENFORCE = '0' QUALITY_GATE_SONARQUBE_REPORT = 'build/sonarqube-quality-gate.json' - QUALITY_GATE_IRONBANK_ENFORCE = '1' + QUALITY_GATE_IRONBANK_ENFORCE = '0' QUALITY_GATE_IRONBANK_REQUIRED = '0' QUALITY_GATE_IRONBANK_REPORT = 'build/ironbank-compliance.json' } diff --git a/services/jenkins/deployment.yaml b/services/jenkins/deployment.yaml index 8357a8d0..b1dfabb5 100644 --- a/services/jenkins/deployment.yaml +++ b/services/jenkins/deployment.yaml @@ -52,6 +52,10 @@ spec: ARIADNE_JENKINS_API_USER={{ .Data.data.username }} ARIADNE_JENKINS_API_TOKEN={{ .Data.data.token }} {{ end }} + {{ with secret "kv/data/atlas/quality/sonarqube-oidc" }} + SONARQUBE_TOKEN={{ .Data.data.sonarqube_exporter_token }} + {{ end }} + SONARQUBE_HOST_URL=http://sonarqube.quality.svc.cluster.local:9000 bstein.dev/restarted-at: "2026-04-13T06:35:00Z" spec: serviceAccountName: jenkins diff --git a/services/logging/Jenkinsfile.data-prepper b/services/logging/Jenkinsfile.data-prepper index c39a9c2d..88086d21 100644 --- a/services/logging/Jenkinsfile.data-prepper +++ b/services/logging/Jenkinsfile.data-prepper @@ -34,9 +34,11 @@ spec: environment { SUITE_NAME = 'data_prepper' PUSHGATEWAY_URL = 'http://platform-quality-gateway.monitoring.svc.cluster.local:9091' - QUALITY_GATE_SONARQUBE_ENFORCE = '1' + SONARQUBE_HOST_URL = 'http://sonarqube.quality.svc.cluster.local:9000' + SONARQUBE_PROJECT_KEY = 'data_prepper' + QUALITY_GATE_SONARQUBE_ENFORCE = '0' QUALITY_GATE_SONARQUBE_REPORT = 'build/sonarqube-quality-gate.json' - QUALITY_GATE_IRONBANK_ENFORCE = '1' + QUALITY_GATE_IRONBANK_ENFORCE = '0' QUALITY_GATE_IRONBANK_REQUIRED = '1' QUALITY_GATE_IRONBANK_REPORT = 'build/ironbank-compliance.json' }