Merge 5.0.0 into main - #1410
Merged
Merged
Conversation
Bump 5.0.0 branch
* Migrate GitHub runners to AWS runners * Refactor runner naming format in workflow files for consistency * Update revision retrieval method in build workflow to use package.json * Add non-root build user and update bootstrap command for permissions * Refactor runner naming format in workflow files to use format function and create non-root build user in plugin build workflow * Update build commands to run as non-root user for improved security * Fix artifact renaming path in build workflow for consistency * Add installation of zip utility for packaging plugins * Refactor artifact paths in build workflow to use github.workspace for consistency * Install zip utility conditionally for arm64 architecture in build workflow * Add workarounds for AWS CodeBuild runners to handle missing tools and permissions * Add Docker Hub login step and conditional Docker daemon start for AWS CodeBuild * Improve Docker daemon startup process in build workflow for ARM architecture * Add Docker Hub login and start Docker daemon for AWS CodeBuild runners * Add workarounds for AWS CodeBuild runners to handle systemd service management * Refactor DEB package testing to use systemd-enabled container and streamline upgrade checks * Add workaround to install pip3 for AWS CodeBuild ARM runners * Add missing apt-get update before package installation in deb-test scripts * Add workaround for AWS CodeBuild ARM runners to install pip3 and openssh-client * Refactor GitHub Actions workflows to use formatted runner names for AWS CodeBuild runners * Refactor GitHub Actions workflows to use updated runner names for AWS CodeBuild
* feat: improve error formatting in check flyout and not ready yet callouts * chore(changelog): add entry --------- Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
* chore: remove anomalyDetectionDashboard build references * chore: add changelog entry
* Remove references to the Sample Data App in getNoItemsMessage * Remove all references to the Sample Data App in getNoItemsMessage tests
* Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format(...-{0}-{1}, github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>
* Enhance AWS S3 integration in build workflows by adding execution repository input and updating artifact upload processes * Inherit secrets in build jobs for improved security and access management * Fix S3 upload commands in build workflow to remove redundant 's3://' prefix * Add logging for downloaded artifacts in S3 workflow * Fix S3 artifact download path by adding trailing slash to bucket URL * Upgrade AWS CLI configuration to use version 6 in dashboard workflows * Migrate artifact downloads to S3 in dashboard workflows and update package paths in test scripts * Fix package path in SCP command for RPM installation in dashboard build workflow * Update execution repository references to version 5 in dashboard workflows
…1407) fix(workflow): empty variable interpolation on uploading sha512 file
* Migrate artifact handling to S3 in dashboard workflows (#1397) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: migrate artifact handling to S3 in dashboard workflows * Commit to test * feat: remove AWS secrets from dashboard build workflow * feat: remove AWS IAM role and region secrets from dashboard build workflow * feat: inherit secrets in the build job for dashboard package workflow * feat: add workflow_name input to plugin workflows in dashboard package build * feat: migrate artifact handling to use EXECUTION_REPOSITORY for S3 uploads * feat: update AWS CLI configuration to use v6 and assume role for S3 uploads * feat: update AWS role for artifact handling in dashboard workflow * feat: update CI_DEV_INTERNAL_BUCKET to use secrets and inherit secrets for plugin builds * feat: update CI_DEV_INTERNAL_BUCKET to use secrets for improved security * feat: add id-token permission for plugin build jobs in dashboard workflow * feat: update workflow references to version 4.14.6 for dashboard and plugins * Commit to test * Revert commit to test --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> * Merge 4.14.6 into 4.14.7 (#1408) * Adds changelog entries for versions 4.10.2–4.10.5 (#1312) * Refactor Allocator instance/composite names and add custom AWS tagging for better resource management 4x (#1284) * feat: refactor AWS instance creation with custom tags in build workflow * Refactor AWS instance creation to streamline custom tagging and improve resource management * feat: bump 4.14.6 * Revert "Bump 4.14.6 branch" * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1318) chore(tag-reference): change tag reference for 4.14.6 * Fixes changelog entry order in RPM spec (#1320) * Fixes changelog entry order in RPM spec * Updates workflow refs to v4.14.6-rc1 * Updates workflow refs 4.14.6 (#1321) * Migrate dashboard package-building workflow runners to AWS CodeBuild (#1374) * Migrate dashboard package-building workflow runners to AWS CodeBuild Replace the self-hosted `wz-linux-amd64` / `wz-linux-arm64` runners in the 4.x package build workflows with AWS CodeBuild runners (codebuild-github-actions-codebuild-runner-dashboard-<arch>-<run_id>-<run_attempt>), backporting the runner migration done in #1372. - 4_builderpackage_dashboard.yml: setup-variables and validate-job to the amd runner; build-package, test-package and upload-package to the arch-conditional runner. - 4_builderpackage_dashboard_core.yml: build job to the arch-conditional runner (inputs.ARCHITECTURE). - build_base.yml / build_wazuh_dashboard_with_plugins.yml: route arm builds to CodeBuild, keep amd on GitHub-hosted runners (mirrors #1372). Closes opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use format() for conditional CodeBuild runners and run core build as non-root Align with #1372 to avoid runtime errors on the migrated CodeBuild runners: - Conditional `runs-on` expressions cannot nest `${{ }}` inside a string literal (the inner expression is not interpolated, so the runner label would contain the literal text and never match a runner). Replace them with `format('...-{0}-{1}', github.run_id, github.run_attempt)`. - CodeBuild runners execute as root and the OpenSearch Dashboards build tooling misbehaves as root. In 4_builderpackage_dashboard_core.yml run `yarn osd bootstrap` and `yarn build-platform` as a non-root `builduser`, mirroring the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use relative path when renaming the core build artifact The "Rename artifact" step used an absolute GitHub-hosted path (/home/runner/work/wazuh-dashboard/wazuh-dashboard/artifacts/target/...), which does not exist on the AWS CodeBuild runners and makes the `mv` fail. Since the job already sets `working-directory: ./artifacts`, use the relative `target/...` path so it works on any runner. Mirrors the fix applied to the 5.x core workflow in #1372. Refs opensearch-project#5246 Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> * Use github.workspace instead of a shared CURRENT_DIR output for artifact paths * test° * Make package build/test work on AWS CodeBuild runners * Guard systemctl calls so DEB package tests run without systemd * Migrate DEB package tests to use systemd-enabled container and streamline installation scripts * Add workarounds for missing zip, pip3, and openssh-client on AWS CodeBuild ARM runners * Pin reusable workflow refs to 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> * Migrate GitHub runners to aws runners (#1380) * Add DockerHub secrets and create non-root build user in package build workflow * Commit to test * Add Docker Hub credentials for build user to pull authenticated images * Revert commit to test * feat: bump 4.14.6 * Change tag reference for 4.14.6 (#1388) chore(tag-reference): change tag reference for 4.14.6 * feat: bump 4.14.6 --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com> --------- Signed-off-by: jcorredor-spec <juli.ricar0413@gmail.com> Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com> Co-authored-by: Juan Felipe Gonzalez Ortiz <53414652+felipegonzalezmv@users.noreply.github.com> Co-authored-by: wazuhci <22834044+wazuhci@users.noreply.github.com> Co-authored-by: Julia Magán <80041853+juliamagan@users.noreply.github.com> Co-authored-by: jcorredor-spec <juli.ricar0413@gmail.com>
… merge-5.0.0-into-main
6 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
7 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Merge 5.0.0 into main