a152d97e3c
Harbormaster can send a request in url encoded form while buildkite expects a POST request with json. Instead of modifying harbormastar or buildkite this adds a simple proxy that accepts url encoded form and creates a request that buildkite expects. To avoid potential abuse, nginx asks for simple http auth credentials stored in harbormaster. All build parameters passed by proxy are put into build metadata and as ph_* env variables available during the build. Secrets involved: - harbormastert knows http-auth to proxy (stored in privatly and in k8 buildkite/http-auth as auth file); - proxy knows buildkite api token (mine atm); - build agent knows conduit API token (mine atm), and SSH key of llvm-premerge-tests-bot (in k8 buildkite/github-ssh). Sample build: https://reviews.llvm.org/harbormaster/build/64828/8/ https://buildkite.com/llvm-project/premerge/builds/48
14 lines
No EOL
582 B
Docker
14 lines
No EOL
582 B
Docker
FROM gcr.io/llvm-premerge-checks/base-debian:latest
|
|
|
|
RUN echo 'install buildkite' ;\
|
|
apt-get install -y apt-transport-https gnupg;\
|
|
sh -c 'echo deb https://apt.buildkite.com/buildkite-agent stable main > /etc/apt/sources.list.d/buildkite-agent.list' ;\
|
|
apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 32A37959C2FA5C3C99EFBC32A79206696452D198 ;\
|
|
apt-get update ;\
|
|
apt-get install -y buildkite-agent; \
|
|
apt-get clean;
|
|
|
|
COPY *.sh /usr/local/bin/
|
|
RUN chmod og+rx /usr/local/bin/*.sh
|
|
ENV CCACHE_PATH=/mnt/disks/ssd0/ccache
|
|
CMD ["start_agent.sh"] |