titan/atlas-iac
3
0
Fork 0
Code Issues Pull Requests 9 Actions Packages Projects Releases Wiki Activity

fix(hermes): reuse authenticated image checkout

Browse Source
This commit is contained in:
jenkins 2026-08-23 13:58:10 -03:00
parent 41233f94a9
commit ad487b5e1c
4 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ci/Jenkinsfile.hermes-agent-image
View File

@ -152,8 +152,6 @@ spec:
;; ;;
esac esac
test "${#EXPECTED_SOURCE_REVISION}" -eq 40 test "${#EXPECTED_SOURCE_REVISION}" -eq 40
git fetch --no-tags origin main
git checkout --detach origin/main
actual_revision="$(git rev-parse HEAD)" actual_revision="$(git rev-parse HEAD)"
test "${actual_revision}" = "$(git rev-parse origin/main)" test "${actual_revision}" = "$(git rev-parse origin/main)"
git merge-base --is-ancestor "${EXPECTED_SOURCE_REVISION}" "${actual_revision}" git merge-base --is-ancestor "${EXPECTED_SOURCE_REVISION}" "${actual_revision}"

2
ci/Jenkinsfile.hermes-webui-image
View File

@ -152,8 +152,6 @@ spec:
;; ;;
esac esac
test "${#EXPECTED_SOURCE_REVISION}" -eq 40 test "${#EXPECTED_SOURCE_REVISION}" -eq 40
git fetch --no-tags origin main
git checkout --detach origin/main
actual_revision="$(git rev-parse HEAD)" actual_revision="$(git rev-parse HEAD)"
test "${actual_revision}" = "$(git rev-parse origin/main)" test "${actual_revision}" = "$(git rev-parse origin/main)"
git merge-base --is-ancestor "${EXPECTED_SOURCE_REVISION}" "${actual_revision}" git merge-base --is-ancestor "${EXPECTED_SOURCE_REVISION}" "${actual_revision}"

2
testing/tests/test_hermes_image_builder.py
View File

@ -99,6 +99,8 @@ def test_pipeline_requires_reviewed_main_and_runtime_credentials() -> None:
assert 'test "${PUBLISH_IMAGE}" = "true"' in source assert 'test "${PUBLISH_IMAGE}" = "true"' in source
assert 'test "${CONFIRM_PUBLISH}" = "PUBLISH HERMES AGENT"' in source assert 'test "${CONFIRM_PUBLISH}" = "PUBLISH HERMES AGENT"' in source
assert "git rev-parse origin/main" in source assert "git rev-parse origin/main" in source
assert "git fetch --no-tags origin main" not in source
assert 'git merge-base --is-ancestor "${EXPECTED_SOURCE_REVISION}"' in source
assert "credentialsId: 'harbor-robot'" in source assert "credentialsId: 'harbor-robot'" in source
assert "set +x" in source assert "set +x" in source
assert "umask 077" in source assert "umask 077" in source

1
testing/tests/test_hermes_webui_release.py
View File

@ -96,6 +96,7 @@ def test_pipeline_builds_latest_main_containing_reviewed_anchor() -> None:
source = PIPELINE.read_text(encoding="utf-8") source = PIPELINE.read_text(encoding="utf-8")
assert 'test "${CONFIRM_PUBLISH}" = "PUBLISH HERMES WEBUI"' in source assert 'test "${CONFIRM_PUBLISH}" = "PUBLISH HERMES WEBUI"' in source
assert 'test "${actual_revision}" = "$(git rev-parse origin/main)"' in source assert 'test "${actual_revision}" = "$(git rev-parse origin/main)"' in source
assert "git fetch --no-tags origin main" not in source
assert 'git merge-base --is-ancestor "${EXPECTED_SOURCE_REVISION}"' in source assert 'git merge-base --is-ancestor "${EXPECTED_SOURCE_REVISION}"' in source
assert "dockerfiles/Dockerfile.hermes-webui" in source assert "dockerfiles/Dockerfile.hermes-webui" in source
assert "ci/scripts/hermes_webui_release.py" in source assert "ci/scripts/hermes_webui_release.py" in source