Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use Service Connection instead of SAS for source index stage 1 upload #14750

Merged
merged 3 commits into from
May 6, 2024

Conversation

directhex
Copy link
Contributor

@directhex directhex commented May 2, 2024

This PR replaces our use of a SAS in a keyvault with a service connection. It is needed for Safe Secrets compliance.

Following arcade updates, this will cause the following repos to need the new service connection to be approved:

Private run: https://dev.azure.com/dnceng/internal/_build/results?buildId=2443766&view=results

@directhex directhex merged commit 9e4ce37 into dotnet:main May 6, 2024
11 checks passed
@directhex
Copy link
Contributor Author

/backport to release/8.0

Copy link
Contributor

Started backporting to release/8.0: https://github.com/dotnet/arcade/actions/runs/9079639796

Copy link
Contributor

@directhex backporting to release/8.0 failed, the patch most likely resulted in conflicts:

$ git am --3way --ignore-whitespace --keep-non-patch changes.patch

Applying: SAS-free upload of stage 1 source index data
Using index info to reconstruct a base tree...
M	.vault-config/product-builds-netsourceindexvault.yaml
A	eng/common/core-templates/job/source-index-stage1.yml
Falling back to patching base and 3-way merge...
Auto-merging eng/common/templates-official/job/source-index-stage1.yml
CONFLICT (content): Merge conflict in eng/common/templates-official/job/source-index-stage1.yml
CONFLICT (modify/delete): .vault-config/product-builds-netsourceindexvault.yaml deleted in SAS-free upload of stage 1 source index data and modified in HEAD. Version HEAD of .vault-config/product-builds-netsourceindexvault.yaml left in tree.
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
Patch failed at 0001 SAS-free upload of stage 1 source index data
When you have resolved this problem, run "git am --continue".
If you prefer to skip this patch, run "git am --skip" instead.
To restore the original branch and stop patching, run "git am --abort".
Error: The process '/usr/bin/git' failed with exit code 128

Please backport manually!

Copy link
Contributor

@directhex an error occurred while backporting to release/8.0, please check the run log for details!

Error: git am failed, most likely due to a merge conflict.

directhex added a commit to directhex/arcade that referenced this pull request May 14, 2024
directhex added a commit that referenced this pull request May 14, 2024
…stage 1 upload (#14766)

Manual backport of #14750 to release/8.0

Needed for Spring Grove.

The only repo using Arcade 8.0 but publishing to Source Index is maintenance-packages.
mmitche pushed a commit to mmitche/arcade that referenced this pull request Jun 21, 2024
…dotnet#14766)

Manual backport of dotnet#14750 to release/8.0

Needed for Spring Grove.

The only repo using Arcade 8.0 but publishing to Source Index is maintenance-packages.
mmitche pushed a commit to mmitche/arcade that referenced this pull request Jun 21, 2024
…dotnet#14766)

Manual backport of dotnet#14750 to release/8.0

Needed for Spring Grove.

The only repo using Arcade 8.0 but publishing to Source Index is maintenance-packages.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants