Merge pull request #3882 from bcgov/NDT-728-Add-CBC-zone-data-to-xls-… #11346
ccbc-service-accountmain.yaml
on: push
Matrix: build / build-and-push-image
install-env
/
install-test-env
43s
test-db
/
reverts
1m 53s
test-db
/
pgtap
1m 12s
test-checks
/
trivy-scan-code
26s
test-checks
/
cocogitto
30s
test-checks
/
gitleaks
29s
test-checks
/
check_immutable_sqitch_files
27s
test-checks
/
check_deleted_sqitch_tags
32s
rebase-feature-pr
42s
is-tagged-release
30s
Matrix: test-checks / codeql-scan
setup-s3-backup
/
deploy-s3-secret-to-dev
26s
setup-s3-backup
/
deploy-s3-secret-to-test
23s
setup-s3-backup
/
deploy-s3-secret-to-prod
23s
has-merge-conflict
/
check_merge_conflicts
1m 54s
cleanup_feature
/
clean-feature-env
test-checks
/
lint-chart
19s
test-containers
/
trivy-scan-app
50s
test-containers
/
trivy-scan-db
21s
test-zap
/
zap-owasp-full
5m 27s
test-code
/
jest
8m 10s
test-code
/
eslint
1m 24s
test-code
/
schema
1m 26s
deploy
/
ensure-sqitch-plan-ends-with-tag
6s
deploy
/
...
/
export-secrets
11s
deploy-feature
/
deploy-feature-to-openshift-development
test-containers
/
renovate
41s
deploy
/
...
/
export-secrets
8s
deploy-feature
/
update-jira-issue
Matrix: test-e2e / run-tests
deploy
/
...
/
export-secrets
12s
deploy
/
create-release
33s
deploy
/
...
/
create_hotfix_branch
41s
test-e2e
/
yarn-test-e2e-finalize
37s
Deployment protection rules
Reviewers, timers, and other rules protecting deployments in this run
| Event | Environments |
|---|---|
rafasdc
approved
|
production |
|
rafasdc
approved
|
production |
Annotations
3 errors and 14 warnings
|
deploy / backup-secrets-dev / export-secrets
Process completed with exit code 2.
|
|
deploy / backup-secrets-test / export-secrets
Process completed with exit code 2.
|
|
deploy / backup-secrets-prod / export-secrets
Process completed with exit code 2.
|
|
setup-s3-backup / deploy-s3-secret-to-prod
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.18.1.tar.gz, openshift-client-linux-amd64-rhel8-4.18.1.tar.gz, openshift-client-linux-amd64-rhel9-4.18.1.tar.gz, openshift-client-linux-arm64-4.18.1.tar.gz, openshift-client-linux-arm64-rhel8-4.18.1.tar.gz, openshift-client-linux-arm64-rhel9-4.18.1.tar.gz, openshift-client-linux-ppc64le-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel8-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel9-4.18.1.tar.gz, openshift-client-linux-s390x-rhel8-4.18.1.tar.gz, openshift-client-linux-s390x-rhel9-4.18.1.tar.gz. Selecting the first one.
|
|
setup-s3-backup / deploy-s3-secret-to-test
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.18.1.tar.gz, openshift-client-linux-amd64-rhel8-4.18.1.tar.gz, openshift-client-linux-amd64-rhel9-4.18.1.tar.gz, openshift-client-linux-arm64-4.18.1.tar.gz, openshift-client-linux-arm64-rhel8-4.18.1.tar.gz, openshift-client-linux-arm64-rhel9-4.18.1.tar.gz, openshift-client-linux-ppc64le-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel8-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel9-4.18.1.tar.gz, openshift-client-linux-s390x-rhel8-4.18.1.tar.gz, openshift-client-linux-s390x-rhel9-4.18.1.tar.gz. Selecting the first one.
|
|
test-checks / lint-chart
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.18.1.tar.gz, openshift-client-linux-amd64-rhel8-4.18.1.tar.gz, openshift-client-linux-amd64-rhel9-4.18.1.tar.gz, openshift-client-linux-arm64-4.18.1.tar.gz, openshift-client-linux-arm64-rhel8-4.18.1.tar.gz, openshift-client-linux-arm64-rhel9-4.18.1.tar.gz, openshift-client-linux-ppc64le-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel8-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel9-4.18.1.tar.gz, openshift-client-linux-s390x-rhel8-4.18.1.tar.gz, openshift-client-linux-s390x-rhel9-4.18.1.tar.gz. Selecting the first one.
|
|
setup-s3-backup / deploy-s3-secret-to-dev
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.18.1.tar.gz, openshift-client-linux-amd64-rhel8-4.18.1.tar.gz, openshift-client-linux-amd64-rhel9-4.18.1.tar.gz, openshift-client-linux-arm64-4.18.1.tar.gz, openshift-client-linux-arm64-rhel8-4.18.1.tar.gz, openshift-client-linux-arm64-rhel9-4.18.1.tar.gz, openshift-client-linux-ppc64le-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel8-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel9-4.18.1.tar.gz, openshift-client-linux-s390x-rhel8-4.18.1.tar.gz, openshift-client-linux-s390x-rhel9-4.18.1.tar.gz. Selecting the first one.
|
|
Sensitive data should not be used in the ARG or ENV commands:
local_setup/unit_tests/Dockerfile#L5
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "POSTGRES_PASSWORD")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|
|
deploy / deploy-to-openshift-development
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.18.1.tar.gz, openshift-client-linux-amd64-rhel8-4.18.1.tar.gz, openshift-client-linux-amd64-rhel9-4.18.1.tar.gz, openshift-client-linux-arm64-4.18.1.tar.gz, openshift-client-linux-arm64-rhel8-4.18.1.tar.gz, openshift-client-linux-arm64-rhel9-4.18.1.tar.gz, openshift-client-linux-ppc64le-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel8-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel9-4.18.1.tar.gz, openshift-client-linux-s390x-rhel8-4.18.1.tar.gz, openshift-client-linux-s390x-rhel9-4.18.1.tar.gz. Selecting the first one.
|
|
deploy / deploy-to-openshift-development
Unexpected input(s) 'openshift_app_namespace', 'openshift_metabase_namespace', 'openshift_metabase_prod_namespace', 'next_public_growthbook_api_key', 'aws_s3_bucket', 'aws_s3_region', 'aws_s3_key', 'aws_s3_secret_key', 'aws_role_arn', 'aws_clam_s3_bucket', 'metabase_site_url', 'metabase_embed_secret', 'cert', 'cert_key', 'cert_ca', 'pgbackrest_s3_bucket', 'session_secret', valid inputs are ['openshift_server_url', 'openshift_token', 'openshift_username', 'openshift_password', 'insecure_skip_tls_verify', 'certificate_authority_data', 'namespace', 'reveal_cluster_name']
|
|
deploy / deploy-to-openshift-development
Unexpected input(s) 'keycloak_host', 'sa_client_secret', 'sa_client_id', 'pgbackrest_s3_key', 'pgbackrest_s3_key_secret', valid inputs are ['openshift_server_url', 'openshift_token', 'openshift_app_namespace', 'openshift_metabase_namespace', 'openshift_metabase_prod_namespace', 'tag', 'client_secret', 'secure_route', 'next_public_growthbook_api_key', 'aws_s3_bucket', 'aws_clam_s3_bucket', 'aws_s3_region', 'aws_s3_key', 'aws_s3_secret_key', 'aws_role_arn', 'certbot_email', 'certbot_server', 'environment', 'enable_load_test', 'metabase_site_url', 'metabase_embed_secret', 'cert', 'cert_key', 'cert_ca', 'sp_sa_user', 'sp_sa_password', 'sp_site', 'sp_doc_library', 'sp_ms_file_name', 'sp_list_name', 'ches_url', 'ches_client', 'ches_client_secret', 'ches_to', 'ches_keycloak_host', 'pgbackrest_s3_bucket', 'er_file', 'rd_file', 'coverages_file', 'session_secret']
|
|
deploy / deploy-to-openshift-test
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.18.1.tar.gz, openshift-client-linux-amd64-rhel8-4.18.1.tar.gz, openshift-client-linux-amd64-rhel9-4.18.1.tar.gz, openshift-client-linux-arm64-4.18.1.tar.gz, openshift-client-linux-arm64-rhel8-4.18.1.tar.gz, openshift-client-linux-arm64-rhel9-4.18.1.tar.gz, openshift-client-linux-ppc64le-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel8-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel9-4.18.1.tar.gz, openshift-client-linux-s390x-rhel8-4.18.1.tar.gz, openshift-client-linux-s390x-rhel9-4.18.1.tar.gz. Selecting the first one.
|
|
deploy / deploy-to-openshift-test
Unexpected input(s) 'openshift_app_namespace', 'openshift_metabase_namespace', 'openshift_metabase_prod_namespace', 'next_public_growthbook_api_key', 'aws_s3_bucket', 'aws_s3_region', 'aws_s3_key', 'aws_s3_secret_key', 'aws_role_arn', 'aws_clam_s3_bucket', 'metabase_site_url', 'metabase_embed_secret', 'cert', 'cert_key', 'cert_ca', 'pgbackrest_s3_bucket', 'session_secret', valid inputs are ['openshift_server_url', 'openshift_token', 'openshift_username', 'openshift_password', 'insecure_skip_tls_verify', 'certificate_authority_data', 'namespace', 'reveal_cluster_name']
|
|
deploy / deploy-to-openshift-test
Unexpected input(s) 'keycloak_host', 'sa_client_secret', 'sa_client_id', valid inputs are ['openshift_server_url', 'openshift_token', 'openshift_app_namespace', 'openshift_metabase_namespace', 'openshift_metabase_prod_namespace', 'tag', 'client_secret', 'secure_route', 'next_public_growthbook_api_key', 'aws_s3_bucket', 'aws_clam_s3_bucket', 'aws_s3_region', 'aws_s3_key', 'aws_s3_secret_key', 'aws_role_arn', 'certbot_email', 'certbot_server', 'environment', 'enable_load_test', 'metabase_site_url', 'metabase_embed_secret', 'cert', 'cert_key', 'cert_ca', 'sp_sa_user', 'sp_sa_password', 'sp_site', 'sp_doc_library', 'sp_ms_file_name', 'sp_list_name', 'ches_url', 'ches_client', 'ches_client_secret', 'ches_to', 'ches_keycloak_host', 'pgbackrest_s3_bucket', 'er_file', 'rd_file', 'coverages_file', 'session_secret']
|
|
deploy / deploy-to-openshift-production
Multiple files were found for oc that matched the current OS and architecture: openshift-client-linux-4.18.1.tar.gz, openshift-client-linux-amd64-rhel8-4.18.1.tar.gz, openshift-client-linux-amd64-rhel9-4.18.1.tar.gz, openshift-client-linux-arm64-4.18.1.tar.gz, openshift-client-linux-arm64-rhel8-4.18.1.tar.gz, openshift-client-linux-arm64-rhel9-4.18.1.tar.gz, openshift-client-linux-ppc64le-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel8-4.18.1.tar.gz, openshift-client-linux-ppc64le-rhel9-4.18.1.tar.gz, openshift-client-linux-s390x-rhel8-4.18.1.tar.gz, openshift-client-linux-s390x-rhel9-4.18.1.tar.gz. Selecting the first one.
|
|
deploy / deploy-to-openshift-production
Unexpected input(s) 'openshift_app_namespace', 'openshift_metabase_namespace', 'openshift_metabase_prod_namespace', 'next_public_growthbook_api_key', 'aws_s3_bucket', 'aws_s3_region', 'aws_s3_key', 'aws_s3_secret_key', 'aws_role_arn', 'aws_clam_s3_bucket', 'metabase_site_url', 'metabase_embed_secret', 'cert', 'cert_key', 'cert_ca', 'pgbackrest_s3_bucket', 'session_secret', valid inputs are ['openshift_server_url', 'openshift_token', 'openshift_username', 'openshift_password', 'insecure_skip_tls_verify', 'certificate_authority_data', 'namespace', 'reveal_cluster_name']
|
|
deploy / deploy-to-openshift-production
Unexpected input(s) 'keycloak_host', 'sa_client_secret', 'sa_client_id', valid inputs are ['openshift_server_url', 'openshift_token', 'openshift_app_namespace', 'openshift_metabase_namespace', 'openshift_metabase_prod_namespace', 'tag', 'client_secret', 'secure_route', 'next_public_growthbook_api_key', 'aws_s3_bucket', 'aws_clam_s3_bucket', 'aws_s3_region', 'aws_s3_key', 'aws_s3_secret_key', 'aws_role_arn', 'certbot_email', 'certbot_server', 'environment', 'enable_load_test', 'metabase_site_url', 'metabase_embed_secret', 'cert', 'cert_key', 'cert_ca', 'sp_sa_user', 'sp_sa_password', 'sp_site', 'sp_doc_library', 'sp_ms_file_name', 'sp_list_name', 'ches_url', 'ches_client', 'ches_client_secret', 'ches_to', 'ches_keycloak_host', 'pgbackrest_s3_bucket', 'er_file', 'rd_file', 'coverages_file', 'session_secret']
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
bcgov~CONN-CCBC-portal~DUH6I9.dockerbuild
|
44.1 KB |
|
|
bcgov~CONN-CCBC-portal~HOJFOV.dockerbuild
|
42.5 KB |
|
|
bcgov~CONN-CCBC-portal~U69BEP.dockerbuild
|
80.5 KB |
|
|
bcgov~CONN-CCBC-portal~ZNUIEX.dockerbuild
|
33.1 KB |
|
|
zap_scan
|
362 KB |
|