Buildkit merge requestshttps://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests2024-03-18T15:31:41Zhttps://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/56.gitlab-ci.yml: Stop building the rootless image2024-03-18T15:31:41ZAhmon Dancy.gitlab-ci.yml: Stop building the rootless image
Stop building the wmf-production-rootless image since we don't use it.
Stop building the wmf-production-rootless image since we don't use it.https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/54Use new Gitlab JWT mechanism2024-02-07T17:54:07ZAhmon DancyUse new Gitlab JWT mechanism
Bug: T337474
Bug: T337474https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/50wmf/build.sh: Remove default --opt target2024-02-07T17:10:49ZAhmon Dancywmf/build.sh: Remove default --opt target
Instead, require the caller to provide it.
---
Related MRs:
* !50 (This MR)
* !52
* _wmf/v0.12_
Depends-On: https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/52
Instead, require the caller to provide it.
---
Related MRs:
* !50 (This MR)
* !52
* _wmf/v0.12_
Depends-On: https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/52https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/53Revert "temporary: Build and publish image using gitlab-cloud-runners (again)"2024-02-05T17:11:57ZAhmon DancyRevert "temporary: Build and publish image using gitlab-cloud-runners (again)"This reverts commit 24f0711f4f380ad2196dfac62447a77decd00fdc.
Change-Id: I369a1e6b2aa1bd873d60ea8444d3e14e0a0a7c40This reverts commit 24f0711f4f380ad2196dfac62447a77decd00fdc.
Change-Id: I369a1e6b2aa1bd873d60ea8444d3e14e0a0a7c40Ahmon DancyAhmon Dancyhttps://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/52wmf/Dockerfile: Change base image from bullseye to bookmark2024-02-02T23:00:49ZAhmon Dancywmf/Dockerfile: Change base image from bullseye to bookmark
Mainly to get a newer version of the "runc" package.
Bug: T356418
---
Related MRs:
* !50
* !52 (This MR)
* _wmf/v0.12_
Mainly to get a newer version of the "runc" package.
Bug: T356418
---
Related MRs:
* !50
* !52 (This MR)
* _wmf/v0.12_https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/51temporary: Build and publish image using gitlab-cloud-runners (again)2024-02-02T22:03:08ZAhmon Dancytemporary: Build and publish image using gitlab-cloud-runners (again)
Temporarily build and publish image using gitlab-cloud-runners so that
we can get a fix out to the most-used runners while waiting for
https://gerrit.wikimedia.org/r/c/operations/puppet/+/995343 to be
deployed.
---
Related...
Temporarily build and publish image using gitlab-cloud-runners so that
we can get a fix out to the most-used runners while waiting for
https://gerrit.wikimedia.org/r/c/operations/puppet/+/995343 to be
deployed.
---
Related MRs:
* !50
* !51 (This MR)
* _wmf/v0.12_https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/49Revert "temporary: Build and publish image using gitlab-cloud-runners"2024-02-02T21:55:06ZAhmon DancyRevert "temporary: Build and publish image using gitlab-cloud-runners"
This reverts commit d07535d3968e53939dd18b3518f3bd3f055cd0a5 since
https://gerrit.wikimedia.org/r/c/operations/puppet/+/995103 was
merged.
---
Related MRs:
* !50
* !49 (This MR)
* _wmf/v0.12_
This reverts commit d07535d3968e53939dd18b3518f3bd3f055cd0a5 since
https://gerrit.wikimedia.org/r/c/operations/puppet/+/995103 was
merged.
---
Related MRs:
* !50
* !49 (This MR)
* _wmf/v0.12_https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/48temporary: Build and publish image using gitlab-cloud-runners2024-02-02T17:01:45ZAhmon Dancytemporary: Build and publish image using gitlab-cloud-runners
Temporarily build and publish image using gitlab-cloud-runners so that
we can get a fix out to the most-used runners while waiting for
https://gerrit.wikimedia.org/r/c/operations/puppet/+/995103 to be
deployed.
Temporarily build and publish image using gitlab-cloud-runners so that
we can get a fix out to the most-used runners while waiting for
https://gerrit.wikimedia.org/r/c/operations/puppet/+/995103 to be
deployed.https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/46buildkitd: Add ability to restrict frontends and gateway sources2024-02-01T19:15:32ZAhmon Dancybuildkitd: Add ability to restrict frontends and gateway sources
When building images on trusted runners we want to ensure that only
the Blubber frontend is used. This commit adds the ability to
restrict the frontends and gateway sources in buildkitd.
buildkit.toml entries that will be us...
When building images on trusted runners we want to ensure that only
the Blubber frontend is used. This commit adds the ability to
restrict the frontends and gateway sources in buildkitd.
buildkit.toml entries that will be used on trusted runners:
allowed-frontends = ["gateway.v0"]
allowed-gateway-sources = ["docker-registry.wikimedia.org/repos/releng/blubber/buildkit"]
Bug: T329220
---
Related MRs:
* !46 (This MR)
* !47
* _wmf/v0.12_
Depends-On: https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/47https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/47Import WMF modifications from wmf/v0.11 branch2024-02-01T19:15:12ZAhmon DancyImport WMF modifications from wmf/v0.11 branch
This includes
* A modification to util/resolver/pool.go to Isolate the token cache
to each client session
* Gitlab CI pipeline definitions
* A Blubber file for generating a customized buildkitd image
* Helm chart for deplo...
This includes
* A modification to util/resolver/pool.go to Isolate the token cache
to each client session
* Gitlab CI pipeline definitions
* A Blubber file for generating a customized buildkitd image
* Helm chart for deploying buildkitd (used by gitlab runners)
---
Related MRs:
* !46
* !47 (This MR)
* _wmf/v0.12_https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/45Chart 0.5.1: Point pod autoscaler at the StatefuleSet2023-09-29T14:53:24ZAhmon DancyChart 0.5.1: Point pod autoscaler at the StatefuleSetChange the target kind of the HorizontalPodAutoscaler from Deployment
to StatefulSet.
This is a followup to !43
Change-Id: I77649b619b597995a19820beb5ac14a44a2f57a0Change the target kind of the HorizontalPodAutoscaler from Deployment
to StatefulSet.
This is a followup to !43
Change-Id: I77649b619b597995a19820beb5ac14a44a2f57a0Ahmon DancyAhmon Dancyhttps://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/43Chart 0.5.0: Convert from Deployment to StatefulSet2023-09-29T14:52:50ZAhmon DancyChart 0.5.0: Convert from Deployment to StatefulSetto support using a PersistentVolumeClaim for /var/lib/buildkit.to support using a PersistentVolumeClaim for /var/lib/buildkit.https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/40buildkitd: Add ability to restrict frontends and gateway sources2023-07-17T21:00:59ZAhmon Dancybuildkitd: Add ability to restrict frontends and gateway sourcesWhen building images on trusted runners we want to ensure that only
the Blubber frontend is used. This commit adds the ability to
restrict the frontends and gateway sources in buildkitd.
buildkit.toml entries that would be use on trust...When building images on trusted runners we want to ensure that only
the Blubber frontend is used. This commit adds the ability to
restrict the frontends and gateway sources in buildkitd.
buildkit.toml entries that would be use on trusted runners:
allowed-frontends = ["gateway.v0"]
allowed-gateway-sources = ["docker-registry.wikimedia.org/repos/releng/blubber/buildkit"]
Bug: T329220Ahmon DancyAhmon Dancyhttps://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/39Merge upstream changes from v0.11 into wmf/v0.112023-06-05T16:03:37ZDduvallMerge upstream changes from v0.11 into wmf/v0.11DduvallDduvallhttps://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/37Install destinationrule via helm chart2023-03-22T21:02:23ZJeena HuneidiInstall destinationrule via helm chartIt makes the most sense to bundle this with our chart, plus allows us to avoid using `kubernetes_manifest` in Terraform.It makes the most sense to bundle this with our chart, plus allows us to avoid using `kubernetes_manifest` in Terraform.https://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/36Chart.yaml: appVersion: "wmf-v0.11-6"2023-03-01T19:17:07ZDduvallChart.yaml: appVersion: "wmf-v0.11-6"DduvallDduvallhttps://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/35Revert "Add workaround for Istio/buildkitd network conflict"2023-03-01T19:12:19ZDduvallRevert "Add workaround for Istio/buildkitd network conflict"This reverts commit d8320ac9633fb0d76b6691e3ec4305b3dfe407af.This reverts commit d8320ac9633fb0d76b6691e3ec4305b3dfe407af.DduvallDduvallhttps://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/34Chart.yaml: appVersion: "wmf-v0.11-5"2023-02-23T21:24:48ZAhmon DancyChart.yaml: appVersion: "wmf-v0.11-5"Ahmon DancyAhmon Dancyhttps://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/33Add workaround for Istio/buildkitd network conflict2023-02-23T21:15:14ZAhmon DancyAdd workaround for Istio/buildkitd network conflictBug: T330433Bug: T330433Ahmon DancyAhmon Dancyhttps://gitlab.wikimedia.org/repos/releng/buildkit/-/merge_requests/32helm: Do not suggest enabling macspoofchk2023-02-21T19:58:16ZDduvallhelm: Do not suggest enabling macspoofchkNOTE this option was not in the buildkitd referenced configuration. I
added it after reading the CNI reference but didn't realize it required
an additional nft binary to be present.
failed to setup spoof-check: failed to execute nft n...NOTE this option was not in the buildkitd referenced configuration. I
added it after reading the CNI reference but didn't realize it required
an additional nft binary to be present.
failed to setup spoof-check: failed to execute nft nft -j -f
/tmp/spoofcheck-3647386428: exec: "nft": executable file not found
in $PATH
Bug: T329213DduvallDduvall