chore: we do not push fips layers from gitlab but we do check their size

Author: apiarian-datadog

.gitlab/datasources/flavors.yaml

@@ -37,19 +37,17 @@ flavors:
     arch: amd64
     alpine: 0
     fips: 1
-    needs_layer_publish: true
+    needs_layer_publish: false
     suffix: amd64-fips
-    layer_name_base_suffix: "-FIPS"
     max_layer_compressed_size_mb: 21
     max_layer_uncompressed_size_mb: 56
 
   - name: arm64, fips
     arch: arm64
     alpine: 0
     fips: 1
-    needs_layer_publish: true
+    needs_layer_publish: false
     suffix: arm64-fips
-    layer_name_base_suffix: "-FIPS-ARM"
     max_layer_compressed_size_mb: 19
     max_layer_uncompressed_size_mb: 52
 

.gitlab/templates/pipeline.yaml.tpl

@@ -105,7 +105,7 @@ layer ({{ $flavor.name }}):
   script:
     - .gitlab/scripts/build_layer.sh
 
-{{ if $flavor.needs_layer_publish }}
+{{ if and (index $flavor "max_layer_compressed_size_mb") (index $flavor "max_layer_uncompressed_size_mb") }}
 
 check layer size ({{ $flavor.name }}):
   stage: build
@@ -120,7 +120,11 @@ check layer size ({{ $flavor.name }}):
     MAX_LAYER_COMPRESSED_SIZE_MB: {{ $flavor.max_layer_compressed_size_mb }}
     MAX_LAYER_UNCOMPRESSED_SIZE_MB: {{ $flavor.max_layer_uncompressed_size_mb }}
   script:
-    - .gitlab/scripts/check_layer_size.sh
+    - .gitlab/scripts/check_layer_size.s
+
+{{ end }} # end max_layer_compressed_size_mb
+
+{{ if $flavor.needs_layer_publish }}
 
 sign layer ({{ $flavor.name }}):
   stage: sign