titan/atlas-iac
3
0
Fork 0
Code Issues Pull Requests 9 Actions Packages Projects Releases Wiki Activity

fix(jenkins): persist Hermes release parameters

Browse Source
This commit is contained in:
jenkins 2026-08-23 13:53:21 -03:00
parent c0b806e5d2
commit 41233f94a9
4 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
services/jenkins/configmap-jcasc.yaml
View File

@ -656,6 +656,11 @@ data:
disabled(false)
description('Bounded daemonless Kaniko release for the latest atlas/titan-iac main containing a reviewed commit. Archives exact evidence, then publishes an immutable tag for Flux deployment.')
authenticationToken(System.getenv('HERMES_AGENT_IMAGE_BUILD_TOKEN'))
parameters {
booleanParam('PUBLISH_IMAGE', false, 'Publish the reviewed Hermes agent image.')
stringParam('EXPECTED_SOURCE_REVISION', '', 'Full reviewed commit that must be contained by atlas/titan-iac main.')
stringParam('CONFIRM_PUBLISH', '', 'Exact confirmation: PUBLISH HERMES AGENT')
}
definition {
cpsScm {
scm {
@ -675,6 +680,11 @@ data:
disabled(false)
description('Bounded daemonless Kaniko release for the latest atlas/titan-iac main containing a reviewed commit. Archives exact evidence, then publishes an immutable tag for Flux deployment.')
authenticationToken(System.getenv('HERMES_AGENT_IMAGE_BUILD_TOKEN'))
parameters {
booleanParam('PUBLISH_IMAGE', false, 'Publish the reviewed Hermes WebUI image.')
stringParam('EXPECTED_SOURCE_REVISION', '', 'Full reviewed commit that must be contained by atlas/titan-iac main.')
stringParam('CONFIRM_PUBLISH', '', 'Exact confirmation: PUBLISH HERMES WEBUI')
}
definition {
cpsScm {
scm {

2
services/jenkins/deployment.yaml
View File

@ -68,7 +68,7 @@ spec:
{{ with secret "kv/data/atlas/hermes/developer-jenkins" }}
HERMES_AGENT_IMAGE_BUILD_TOKEN={{ .Data.data.build_token }}
{{ end }}
bstein.dev/restarted-at: "2026-08-23T16:40:25Z"
bstein.dev/restarted-at: "2026-08-23T16:53:00Z"
spec:
serviceAccountName: jenkins
priorityClassName: scavenger

3
testing/tests/test_hermes_image_builder.py
View File

@ -182,6 +182,9 @@ def test_jenkins_job_is_manual_and_reads_pipeline_from_main() -> None:
assert (
"authenticationToken(System.getenv('HERMES_AGENT_IMAGE_BUILD_TOKEN'))" in block
)
assert "booleanParam('PUBLISH_IMAGE', false" in block
assert "stringParam('EXPECTED_SOURCE_REVISION', ''" in block
assert "stringParam('CONFIRM_PUBLISH', ''" in block
assert "pipelineTriggers" not in block
assert "scmTrigger" not in block

3
testing/tests/test_hermes_webui_release.py
View File

@ -86,6 +86,9 @@ def test_webui_job_is_independent_bounded_and_main_only() -> None:
assert (
"authenticationToken(System.getenv('HERMES_AGENT_IMAGE_BUILD_TOKEN'))" in block
)
assert "booleanParam('PUBLISH_IMAGE', false" in block
assert "stringParam('EXPECTED_SOURCE_REVISION', ''" in block
assert "stringParam('CONFIRM_PUBLISH', ''" in block
def test_pipeline_builds_latest_main_containing_reviewed_anchor() -> None: