Skip to content

Commit 5a290f2

Browse files
committed
Merge remote-tracking branch 'origin/release/v10.8.1' into release/v10.8.1
2 parents a372e3d + 743fb19 commit 5a290f2

28 files changed

Lines changed: 829 additions & 126 deletions

.github/workflows/principal-installer-release.yml renamed to .github/workflows/v10-principal-installer-release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
name: Installer Release
1+
name: Installer Release v10
22

33
on:
44
release:

.github/workflows/principal-multi-env.yml renamed to .github/workflows/v10-principal-multi-env.yml

Lines changed: 1 addition & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -125,7 +125,7 @@ jobs:
125125
fail-fast: false
126126
matrix:
127127
service: ['aws', 'backend', 'correlation', 'frontend', 'bitdefender', 'mutate', 'office365', 'log-auth-proxy', 'soc-ai', 'sophos', 'user-auditor', 'web-pdf']
128-
uses: ./.github/workflows/used-runner.yml
128+
uses: ./.github/workflows/v10-used-runner.yml
129129
with:
130130
microservice: ${{ matrix.service }}
131131
environment: ${{ needs.setup_deployment.outputs.tag }}
@@ -161,11 +161,6 @@ jobs:
161161
run: |
162162
sudo ./installer
163163
164-
- name: Open ports
165-
working-directory: /home/utmstack
166-
run: |
167-
sudo docker service update --publish-add 9200:9200 utmstack_node1 & docker service update --publish-add 5432:5432 utmstack_postgres
168-
169164
deploy_qa:
170165
name: Deploy to v10-qa environment
171166
needs: [build_agent, runner_release, setup_deployment]
@@ -225,5 +220,3 @@ jobs:
225220
working-directory: /home/utmstack
226221
run: |
227222
sudo ./installer
228-
229-
File renamed without changes.
File renamed without changes.
File renamed without changes.
Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
name: Basic deployment
4444
needs: prepare_deployment
4545
if: ${{ needs.prepare_deployment.outputs.tech == 'basic' }}
46-
uses: ./.github/workflows/used-docker-basic.yml
46+
uses: ./.github/workflows/v10-used-docker-basic.yml
4747
with:
4848
image_name: ${{ inputs.microservice }}
4949
environment: ${{inputs.environment}}
@@ -52,7 +52,7 @@ jobs:
5252
name: Frontend deployment
5353
needs: prepare_deployment
5454
if: ${{ needs.prepare_deployment.outputs.tech == 'frontend' }}
55-
uses: ./.github/workflows/used-docker-frontend.yml
55+
uses: ./.github/workflows/v10-v11-used-docker-frontend.yml
5656
with:
5757
image_name: ${{ inputs.microservice }}
5858
environment: ${{inputs.environment}}
@@ -61,7 +61,7 @@ jobs:
6161
name: Golang deployment
6262
needs: prepare_deployment
6363
if: ${{ needs.prepare_deployment.outputs.tech == 'golang' }}
64-
uses: ./.github/workflows/used-docker-golang.yml
64+
uses: ./.github/workflows/v10-used-docker-golang.yml
6565
with:
6666
image_name: ${{ inputs.microservice }}
6767
environment: ${{inputs.environment}}
@@ -70,7 +70,7 @@ jobs:
7070
name: Java 11 deployment
7171
needs: prepare_deployment
7272
if: ${{ needs.prepare_deployment.outputs.tech == 'java-11' }}
73-
uses: ./.github/workflows/used-docker-java-11.yml
73+
uses: ./.github/workflows/v10-used-docker-java-11.yml
7474
with:
7575
image_name: ${{ inputs.microservice }}
7676
environment: ${{inputs.environment}}
@@ -79,7 +79,7 @@ jobs:
7979
name: Java deployment
8080
needs: prepare_deployment
8181
if: ${{ needs.prepare_deployment.outputs.tech == 'java' }}
82-
uses: ./.github/workflows/used-docker-java.yml
82+
uses: ./.github/workflows/v10-v11-used-docker-java.yml
8383
with:
8484
image_name: ${{ inputs.microservice }}
8585
environment: ${{inputs.environment}}
File renamed without changes.
File renamed without changes.
Lines changed: 81 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,81 @@
1+
name: "Alpha Deployment"
2+
3+
on:
4+
workflow_dispatch:
5+
inputs:
6+
version_tag:
7+
description: "Version to deploy."
8+
required: true
9+
event_processor_tag:
10+
description: "Event processor version to use for this deployment."
11+
required: true
12+
13+
jobs:
14+
validations:
15+
name: Validate permissions
16+
runs-on: ubuntu-24.04
17+
steps:
18+
- name: Check permissions
19+
run: |
20+
echo "Checking permissions..."
21+
22+
if [[ "${{ github.event.inputs.version_tag }}" =~ ^v[0-9]+\.[0-9]+\.[0-9]+-alpha\.[0-9]+$ ]]; then
23+
echo "✅ Version tag format is correct."
24+
25+
if [[ "${{ github.ref }}" =~ ^refs/heads/(release/|feature/) ]]; then
26+
echo "✅ Base branch ${{ github.ref }} is valid."
27+
else
28+
echo "⛔ ERROR: Base branch ${{ github.ref }} is not valid. It should be release/ or feature/."
29+
exit 1
30+
fi
31+
32+
echo "Validating user permissions..."
33+
RESPONSE=$(curl -s -H "Authorization: Bearer ${{ secrets.API_SECRET }}" \
34+
-H "Accept: application/vnd.github.json" \
35+
"https://api.github.com/orgs/utmstack/teams/integration-developers/memberships/${{ github.actor }}")
36+
37+
if echo "$RESPONSE" | grep -q '"state": "active"'; then
38+
echo "✅ User ${{ github.actor }} is a member of the integration-developers team."
39+
else
40+
RESPONSE=$(curl -s -H "Authorization: Bearer ${{ secrets.API_SECRET }}" \
41+
-H "Accept: application/vnd.github.json" \
42+
"https://api.github.com/orgs/utmstack/teams/core-developers/memberships/${{ github.actor }}")
43+
44+
if echo "$RESPONSE" | grep -q '"state": "active"'; then
45+
echo "✅ User ${{ github.actor }} is a member of the core-developers team."
46+
else
47+
echo "⛔ ERROR: User ${{ github.actor }} is not a member of the core-developers or integration-developers team."
48+
echo $RESPONSE
49+
exit 1
50+
fi
51+
fi
52+
53+
else
54+
echo "⛔ Version tag format is incorrect. It should be in the format vX.Y.Z-alpha.N."
55+
exit 1
56+
fi
57+
58+
deploy:
59+
name: Deploy to Alpha
60+
needs: validations
61+
uses: ./.github/workflows/v11-used-build.yml
62+
with:
63+
version_tag: ${{ github.event.inputs.version_tag }}
64+
event_processor_tag: ${{ github.event.inputs.event_processor_tag }}
65+
environment: alpha
66+
secrets:
67+
AGENT_SECRET_PREFIX: ${{ secrets.AGENT_SECRET_PREFIX }}
68+
SIGN_KEY: ${{ secrets.SIGN_KEY }}
69+
SIGN_CONTAINER: ${{ secrets.SIGN_CONTAINER }}
70+
CM_AUTH: ${{ secrets.CM_AUTH_ALPHA }}
71+
72+
schedule:
73+
name: Schedule release to alpha
74+
needs: deploy
75+
runs-on: signing
76+
steps:
77+
- name: Run publisher
78+
run: |
79+
Start-Process "C:\dependencies\alpha\version-publisher.exe" -ArgumentList '43cb25b3-1426-4c77-8bbe-b2e0b491ce08', '${{ github.event.inputs.version_tag }}' -Wait -NoNewWindow
80+
echo "Scheduled release to alpha for version ${{ github.event.inputs.version_tag }}."
81+
Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
name: "Beta Deployment"
2+
3+
on:
4+
workflow_dispatch:
5+
inputs:
6+
version_tag:
7+
description: "Version to deploy."
8+
required: true
9+
event_processor_tag:
10+
description: "Event processor version to use for this deployment."
11+
required: true
12+
13+
jobs:
14+
validations:
15+
name: Validate permissions
16+
runs-on: ubuntu-24.04
17+
steps:
18+
- name: Check permissions
19+
run: |
20+
echo "Checking permissions..."
21+
22+
if [[ "${{ github.event.inputs.version_tag }}" =~ ^v[0-9]+\.[0-9]+\.[0-9]+-beta\.[0-9]+$ ]]; then
23+
echo "✅ Version tag format is correct."
24+
25+
if [[ "${{ github.ref }}" =~ ^refs/heads/(release/|feature/) ]]; then
26+
echo "✅ Base branch ${{ github.ref }} is valid."
27+
else
28+
echo "⛔ ERROR: Base branch ${{ github.ref }} is not valid. It should be release/ or feature/."
29+
exit 1
30+
fi
31+
32+
echo "Validating user permissions..."
33+
RESPONSE=$(curl -s -H "Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" \
34+
-H "Accept: application/vnd.github.json" \
35+
"https://api.github.com/orgs/utmstack/teams/core-developers/memberships/${{ github.actor }}")
36+
37+
if echo "$RESPONSE" | grep -q '"state": "active"'; then
38+
echo "✅ User ${{ github.actor }} is a member of the core-developers team."
39+
else
40+
echo "⛔ ERROR: User ${{ github.actor }} is not a member of the core-developers team."
41+
exit 1
42+
fi
43+
44+
else
45+
echo "⛔ Version tag format is incorrect. It should be in the format vX.Y.Z-beta.N."
46+
exit 1
47+
fi
48+
49+
deploy:
50+
name: Deploy to Beta
51+
needs: validations
52+
uses: ./.github/workflows/v11-used-build.yml
53+
with:
54+
version_tag: ${{ github.event.inputs.version_tag }}
55+
event_processor_tag: ${{ github.event.inputs.event_processor_tag }}
56+
environment: beta
57+
secrets:
58+
AGENT_SECRET_PREFIX: ${{ secrets.AGENT_SECRET_PREFIX }}
59+
SIGN_KEY: ${{ secrets.SIGN_KEY }}
60+
SIGN_CONTAINER: ${{ secrets.SIGN_CONTAINER }}
61+
CM_AUTH: ${{ secrets.CM_AUTH_ALPHA }}
62+

0 commit comments

Comments
 (0)