Skip to content

ci: Include FIPS openssl in rockcraft parts, Build ARM on LXD #28

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Aug 26, 2025
Merged

ci: Include FIPS openssl in rockcraft parts, Build ARM on LXD #28

Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
b06e1ee
ci: Include FIPS openssl in rockcraft parts, Build ARM on LXD
HomayoonAlimohammadi Aug 25, 2025
28cd10e
ci: trigger
HomayoonAlimohammadi Aug 25, 2025
65d0f00
chore: Make snapshot-controller FIPS-enabled as well
HomayoonAlimohammadi Aug 25, 2025
73baf9a
test: Run tests from tmate-session branch
HomayoonAlimohammadi Aug 26, 2025
5e693cb
test: Update versions to FIPS compliant ones
HomayoonAlimohammadi Aug 26, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 1 addition & 2 deletions .github/workflows/pull_request.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,8 +17,7 @@ jobs:
arch-skipping-maximize-build-space: '["arm64"]'
platform-labels: '{"arm64": ["self-hosted", "Linux", "ARM64", "jammy"]}'
enabled-ubuntu-pro-features: "fips-updates"
multipass-image: "22.04"
rockcraft-revisions: '{"amd64": "3494"}'
rockcraft-revisions: '{"amd64": "3494", "arm64": "3547"}'
secrets:
UBUNTU_PRO_TOKEN: ${{ secrets.UBUNTU_PRO_TOKEN }}
run-tests:
Expand Down
9 changes: 5 additions & 4 deletions csi-node-driver-registrar/2.11.1/rockcraft.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,11 @@ services:
entrypoint-service: csi-node-driver-registrar

parts:
openssl:
plugin: nil
stage-packages:
- openssl-fips-module-3 # a Pro only FIPS package for openssl
- openssl # now automatically selected from fips-preview
build-csi-node-driver-registrar:
plugin: go
source: https://github.com/kubernetes-csi/node-driver-registrar.git
Expand All @@ -48,10 +53,6 @@ parts:
source-depth: 1
build-snaps:
- go/1.23-fips/stable
stage-snaps:
- core22/fips-updates/stable
stage:
- -bin
build-environment:
- CGO_ENABLED: 1
- GOOS: linux
Expand Down
9 changes: 5 additions & 4 deletions csi-provisioner/5.0.2/rockcraft.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,6 +37,11 @@ services:
entrypoint-service: csi-provisioner

parts:
openssl:
plugin: nil
stage-packages:
- openssl-fips-module-3 # a Pro only FIPS package for openssl
- openssl # now automatically selected from fips-preview
build-csi-provisioner:
plugin: go
source: https://github.com/kubernetes-csi/external-provisioner.git
Expand All @@ -45,10 +50,6 @@ parts:
source-depth: 1
build-snaps:
- go/1.23-fips/stable
stage-snaps:
- core22/fips-updates/stable
stage:
- -bin
build-environment:
- CGO_ENABLED: 1
- GOOS: linux
Expand Down
9 changes: 5 additions & 4 deletions csi-resizer/1.11.2/rockcraft.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,6 +37,11 @@ services:
entrypoint-service: csi-resizer

parts:
openssl:
plugin: nil
stage-packages:
- openssl-fips-module-3 # a Pro only FIPS package for openssl
- openssl # now automatically selected from fips-preview
build-csi-resizer:
plugin: go
source: https://github.com/kubernetes-csi/external-resizer.git
Expand All @@ -45,10 +50,6 @@ parts:
source-depth: 1
build-snaps:
- go/1.23-fips/stable
stage-snaps:
- core22/fips-updates/stable
stage:
- -bin
build-environment:
- CGO_ENABLED: 1
- GOOS: linux
Expand Down
9 changes: 5 additions & 4 deletions csi-snapshotter/8.0.2/rockcraft.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,11 @@ services:
entrypoint-service: csi-snapshotter

parts:
openssl:
plugin: nil
stage-packages:
- openssl-fips-module-3 # a Pro only FIPS package for openssl
- openssl # now automatically selected from fips-preview
build-csi-snapshotter:
plugin: go
source: https://github.com/kubernetes-csi/external-snapshotter.git
Expand All @@ -40,10 +45,6 @@ parts:
source-depth: 1
build-snaps:
- go/1.23-fips/stable
stage-snaps:
- core22/fips-updates/stable
stage:
- -bin
build-environment:
- CGO_ENABLED: 1
- GOOS: linux
Expand Down
13 changes: 10 additions & 3 deletions snapshot-controller/6.3.3/rockcraft.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,21 +32,28 @@ services:
entrypoint-service: snapshot-controller

parts:
openssl:
plugin: nil
stage-packages:
- openssl-fips-module-3 # a Pro only FIPS package for openssl
- openssl # now automatically selected from fips-preview
build-snapshot-controller:
plugin: go
source: https://github.com/kubernetes-csi/external-snapshotter.git
source-type: git
source-tag: v${CRAFT_PROJECT_VERSION}
source-depth: 1
build-snaps:
- go/1.20/stable
- go/1.20-fips/stable
build-environment:
- CGO_ENABLED: 0
- CGO_ENABLED: 1
- GOOS: linux
- GOARCH: $CRAFT_ARCH_BUILD_FOR
- VERSION: $CRAFT_PROJECT_VERSION
- GOTOOLCHAIN: local
- GOEXPERIMENT: opensslcrypto
- LDFLAGS: >
-X main.version=${VERSION} -extldflags "-static"
-X main.version=${VERSION}
go-buildtags:
- "mod=vendor"
go-generate:
Expand Down
Loading