diff options
| author | Scott Wittenburg <scott.wittenburg@kitware.com> | 2023-07-26 09:16:15 -0600 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-07-26 09:16:15 -0600 |
| commit | 2c74b433aad521c3dc8b38234a8948351ecad54c (patch) | |
| tree | 065a5a18503935004a23bda69ce727b57ef9aeac /share | |
| parent | 8bdfaf4ae58668a45cbcb483e76ac995da54e31e (diff) | |
| download | spack-2c74b433aad521c3dc8b38234a8948351ecad54c.tar.gz spack-2c74b433aad521c3dc8b38234a8948351ecad54c.tar.bz2 spack-2c74b433aad521c3dc8b38234a8948351ecad54c.tar.xz spack-2c74b433aad521c3dc8b38234a8948351ecad54c.zip | |
ci: Make signing requirement explicit (#38995)
Instead of inferring whether to sign binaries, make it explicit,
and fail rebuild jobs early if signing is required but cannot be
accomplished.
Diffstat (limited to 'share')
| -rw-r--r-- | share/spack/gitlab/cloud_pipelines/.gitlab-ci.yml | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/share/spack/gitlab/cloud_pipelines/.gitlab-ci.yml b/share/spack/gitlab/cloud_pipelines/.gitlab-ci.yml index fa5faf8665..4b927a04ae 100644 --- a/share/spack/gitlab/cloud_pipelines/.gitlab-ci.yml +++ b/share/spack/gitlab/cloud_pipelines/.gitlab-ci.yml @@ -67,6 +67,7 @@ default: variables: SPACK_PIPELINE_TYPE: "spack_protected_branch" SPACK_COPY_BUILDCACHE: "s3://spack-binaries/${CI_COMMIT_REF_NAME}" + SPACK_REQUIRE_SIGNING: "True" AWS_ACCESS_KEY_ID: ${PROTECTED_MIRRORS_AWS_ACCESS_KEY_ID} AWS_SECRET_ACCESS_KEY: ${PROTECTED_MIRRORS_AWS_SECRET_ACCESS_KEY} - if: $CI_COMMIT_REF_NAME =~ /^releases\/v.*/ @@ -77,6 +78,7 @@ default: SPACK_COPY_BUILDCACHE: "s3://spack-binaries/${CI_COMMIT_REF_NAME}" SPACK_PRUNE_UNTOUCHED: "False" SPACK_PRUNE_UP_TO_DATE: "False" + SPACK_REQUIRE_SIGNING: "True" AWS_ACCESS_KEY_ID: ${PROTECTED_MIRRORS_AWS_ACCESS_KEY_ID} AWS_SECRET_ACCESS_KEY: ${PROTECTED_MIRRORS_AWS_SECRET_ACCESS_KEY} - if: $CI_COMMIT_TAG =~ /^develop-[\d]{4}-[\d]{2}-[\d]{2}$/ || $CI_COMMIT_TAG =~ /^v.*/ @@ -797,6 +799,7 @@ deprecated-ci-build: when: always variables: SPACK_PIPELINE_TYPE: "spack_protected_branch" + SPACK_REQUIRE_SIGNING: "True" - if: $CI_COMMIT_REF_NAME =~ /^pr[\d]+_.*$/ # Pipelines on PR branches rebuild only what's missing, and do extra pruning when: always |