Fixed AWS to work when no secrets specified#686
Open
brian-golfplusvr wants to merge 6 commits intogame-ci:mainfrom
Open
Fixed AWS to work when no secrets specified#686brian-golfplusvr wants to merge 6 commits intogame-ci:mainfrom
brian-golfplusvr wants to merge 6 commits intogame-ci:mainfrom
Conversation
📝 WalkthroughWalkthroughThe pull request introduces modifications to AWS CloudFormation template generation and secret management across multiple files. The changes focus on enhancing the way secrets are defined and handled within cloud infrastructure templates, specifically in AWS-related cloud runner components. Key updates include adding a Changes
Sequence DiagramsequenceDiagram
participant CloudRunner as Cloud Runner
participant AWSTmpl as AWS Templates
participant AWSSec as AWS Secrets Manager
CloudRunner->>AWSTmpl: Generate CloudFormation Template
AWSTmpl->>AWSTmpl: Define Secret References
AWSTmpl->>AWSSec: Create Secret Mappings
AWSSec-->>AWSTmpl: Confirm Secret Configuration
Poem
📜 Recent review detailsConfiguration used: CodeRabbit UI ⛔ Files ignored due to path filters (2)
📒 Files selected for processing (2)
🚧 Files skipped from review as they are similar to previous changes (2)
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
|
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 0
🧹 Nitpick comments (1)
src/model/cloud-runner/providers/aws/aws-job-stack.ts (1)
149-149: Remove redundant logging statement.This logging statement is redundant with the one on line 117.
- CloudRunnerLogger.log(`TaskDef Cloud formation: ${taskDefCloudFormation}`);
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
📒 Files selected for processing (3)
src/model/cloud-runner/providers/aws/aws-cloud-formation-templates.ts(1 hunks)src/model/cloud-runner/providers/aws/aws-job-stack.ts(3 hunks)src/model/cloud-runner/providers/aws/cloud-formations/task-definition-formation.ts(1 hunks)
🔇 Additional comments (6)
src/model/cloud-runner/providers/aws/aws-cloud-formation-templates.ts (1)
24-27: LGTM! The secret definition template follows AWS CloudFormation best practices.The template correctly structures secrets with Name and ValueFrom properties, following AWS CloudFormation syntax.
src/model/cloud-runner/providers/aws/cloud-formations/task-definition-formation.ts (2)
129-129: LGTM! Correct configuration for EFS mount points.The ReadOnly flag is properly set to false, allowing write access to the EFS volume.
130-130: LGTM! Clear template marker for secrets injection.The comment provides a clear insertion point for dynamic secret injection, maintaining code clarity.
src/model/cloud-runner/providers/aws/aws-job-stack.ts (3)
73-73: LGTM! Clear template marker for secret definition.The comment provides a consistent marker for secret template insertion.
116-118: LGTM! Enhanced logging for task definition template.Added logging to help debug template generation issues.
146-147: LGTM! Enhanced logging for stack creation.Added logging to help debug stack creation issues.
There was a problem hiding this comment.
Actionable comments posted: 1
🧹 Nitpick comments (4)
src/model/cloud-runner/options/cloud-runner-options.ts (2)
77-79: LGTM! Consider documenting the purpose.The getter implementation is correct, providing a sensible default value.
Consider adding a JSDoc comment to document the purpose and usage of this configuration option:
+/** + * Gets the repository name for cloud runner operations. + * @returns {string} The configured repo name or defaults to 'game-ci/unity-builder' + */ static get cloudRunnerRepoName(): string { return CloudRunnerOptions.getInput('cloudRunnerRepoName') || `game-ci/unity-builder`; }
147-149: LGTM! Consider validating the input.The getter implementation is correct, providing a sensible default value.
Consider adding input validation to ensure a positive integer value:
static get cloneDepth(): string { - return CloudRunnerOptions.getInput('cloneDepth') || `50`; + const depth = CloudRunnerOptions.getInput('cloneDepth') || `50`; + const parsedDepth = parseInt(depth, 10); + if (isNaN(parsedDepth) || parsedDepth <= 0) { + throw new Error('cloneDepth must be a positive integer'); + } + return depth; }src/model/build-parameters.ts (2)
70-70: LGTM! Consider adding property documentation.The property declarations are correctly typed.
Consider adding JSDoc comments to document these properties:
+/** The maximum depth when cloning repositories */ public cloneDepth!: number; +/** The repository name used for cloud runner operations */ public cloudRunnerRepoName!: string;Also applies to: 78-78
199-201: LGTM! Consider handling parsing errors.The initialization of properties is correct, with proper fallback values.
Consider adding error handling for the number parsing:
- cloneDepth: Number.parseInt(CloudRunnerOptions.cloneDepth), + cloneDepth: (() => { + const parsed = Number.parseInt(CloudRunnerOptions.cloneDepth); + if (isNaN(parsed)) { + throw new Error('Failed to parse cloneDepth as a number'); + } + return parsed; + })(),Also applies to: 225-225
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
⛔ Files ignored due to path filters (2)
dist/index.jsis excluded by!**/dist/**dist/index.js.mapis excluded by!**/dist/**,!**/*.map
📒 Files selected for processing (4)
action.yml(1 hunks)src/model/build-parameters.ts(4 hunks)src/model/cloud-runner/options/cloud-runner-folders.ts(1 hunks)src/model/cloud-runner/options/cloud-runner-options.ts(3 hunks)
🚧 Files skipped from review as they are similar to previous changes (1)
- action.yml
🔇 Additional comments (1)
src/model/build-parameters.ts (1)
1-267: Verify alignment with PR objectives.The changes in these files appear to be unrelated to the PR's stated objective of fixing AWS task definition code to handle null secrets. Instead, they add configuration options for clone depth and repository naming.
Please clarify if:
- These changes are intentionally included in this PR
- The AWS-related changes are in other files not shown here
- The PR description needs to be updated to reflect these changes
🧰 Tools
🪛 Biome (1.9.4)
[error] 105-105: Using this in a static context can be confusing.
this refers to the class.
Unsafe fix: Use the class name instead.(lint/complexity/noThisInStatic)
[error] 137-137: Using this in a static context can be confusing.
this refers to the class.
Unsafe fix: Use the class name instead.(lint/complexity/noThisInStatic)
Member
|
Thanks for this fix! The changes from this PR have been integrated into #731 (Cloud Runner Improvements), which includes:
PR #731 also includes additional Cloud Runner improvements like LocalStack support, rclone storage provider, and the provider plugin system. Once #731 is merged, this PR can be closed. |
4 tasks
frostebite
added a commit
that referenced
this pull request
Mar 3, 2026
…ck (Pipelines), Testing Improvements, Rclone storage support, Provider plugin system (#731) * Enhance LFS file pulling with token fallback mechanism - Implemented a primary attempt to pull LFS files using GIT_PRIVATE_TOKEN. - Added a fallback mechanism to use GITHUB_TOKEN if the initial attempt fails. - Configured git to replace SSH and HTTPS URLs with token-based authentication for the fallback. - Improved error handling to log specific failure messages for both token attempts. This change ensures more robust handling of LFS file retrieval in various authentication scenarios. * Update GitHub Actions permissions in CI pipeline - Added permissions for packages, pull-requests, statuses, and id-token to enhance workflow capabilities. - This change improves the CI pipeline's ability to manage pull requests and access necessary resources. * Enhance LFS file pulling by configuring git for token-based authentication - Added configuration to use GIT_PRIVATE_TOKEN for git operations, replacing SSH and HTTPS URLs with token-based authentication. - Improved error handling to ensure GIT_PRIVATE_TOKEN availability before attempting to pull LFS files. - This change streamlines the process of pulling LFS files in environments requiring token authentication. * Refactor git configuration for LFS file pulling with token-based authentication - Enhanced the process of configuring git to use GIT_PRIVATE_TOKEN and GITHUB_TOKEN by clearing existing URL configurations before setting new ones. - Improved the clarity of the URL replacement commands for better readability and maintainability. - This change ensures a more robust setup for pulling LFS files in environments requiring token authentication. * Update GitHub Actions to use GIT_PRIVATE_TOKEN for GITHUB_TOKEN in CI pipeline - Replaced instances of GITHUB_TOKEN with GIT_PRIVATE_TOKEN in the cloud-runner CI pipeline configuration. - This change ensures consistent use of token-based authentication across various jobs in the workflow, enhancing security and functionality. * Update git configuration commands in RemoteClient to ensure robust URL unsetting - Modified the git configuration commands to append '|| true' to prevent errors if the specified URLs do not exist. - This change enhances the reliability of the URL clearing process in the RemoteClient class, ensuring smoother execution during token-based authentication setups. * fix * Refactor URL configuration in RemoteClient for token-based authentication - Updated comments for clarity regarding the purpose of URL configuration changes. - Simplified the git configuration commands by removing redundant lines while maintaining functionality for HTTPS token-based authentication. - This change enhances the readability and maintainability of the RemoteClient class's git setup process. * fix * fix * refactor: use AWS SDK for workspace locks * fix: lazily initialize S3 client * yarn build * fix * Update log output handling in FollowLogStreamService to always append log lines for test assertions * tests: assert BuildSucceeded; skip S3 locally; AWS describeTasks backoff; lint/format fixes * style(remote-client): satisfy eslint lines-around-comment; tests: log cache key for retained workspace (#379) * ci(aws): echo CACHE_KEY during setup to ensure e2e sees cache key in logs; tests: retained workspace AWS assertion (#381) * chore(format): prettier/eslint fix for build-automation-workflow; guard local provider steps * refactor(build-automation): enhance containerized workflow handling and log management; update builder path logic based on provider strategy * refactor(container-hook-service): improve AWS hook inclusion logic based on provider strategy and credentials; update binary files * test(windows): skip grep tests on win32; logs: echo CACHE_KEY and retained markers; hooks: include AWS S3 hooks on aws provider * ci(jest): add jest.ci.config with forceExit/detectOpenHandles and test:ci script; fix(windows): skip grep-based version regex tests; logs: echo CACHE_KEY/retained markers; hooks: include AWS hooks on aws provider * ci: add Integrity workflow using yarn test:ci with forceExit/detectOpenHandles * refactor(container-hook-service): refine AWS hook inclusion logic and update binary files * ci: use yarn test:ci in integrity-check; remove redundant integrity.yml * fix(build-automation-workflow): update log streaming command to use printf for empty input * fix(non-container logs): timeout the remote-cli-log-stream to avoid CI hangs; s3 steps pass again * test(ci): harden built-in AWS S3 container hooks to no-op when aws CLI is unavailable; avoid failing Integrity on non-aws runs * style(ci): prettier/eslint fixes for container-hook-service to pass Integrity lint step * refactor(container-hook-service): improve code formatting for AWS S3 commands and ensure consistent indentation * fix * fix * fix(ci local): do not run remote-cli-pre-build on non-container provider * fix(ci local): do not run remote-cli-pre-build on non-container provider * fix(post-build): guard cache pushes when Library/build missing or empty (local CI) * fix(post-build): guard cache pushes when Library/build missing or empty (local CI) * fix(post-build): guard cleanup of unique job folder in local CI * fix(post-build): guard cleanup of unique job folder in local CI * test(s3): only list S3 when AWS creds present in CI; skip otherwise * test(k8s): gate e2e on ENABLE_K8S_E2E to avoid network-dependent failures in CI * fix(local-docker): skip apt-get/toolchain bootstrap and remote-cli log streaming; run entrypoint directly * fix(local-docker): skip apt-get/toolchain bootstrap and remote-cli log streaming; run entrypoint directly * fix(local-docker): cd into /<projectPath> to avoid retained path; prevents cd failures * fix(local-docker): cd into /<projectPath> to avoid retained path; prevents cd failures * fix(local-docker): export GITHUB_WORKSPACE to dockerWorkspacePath; unblock hooks and retained tests * fix(local-docker): ensure /data/cache//build exists and run remote post-build to generate cache tar * fix(local-docker): mirror /data/cache//{Library,build} placeholders and run post-build to produce cache artifacts * fix(local-docker): guard apt-get/tree in debug hook; mirror /data/cache back to for tests * fix(local-docker): normalize CRLF and add tool stubs to avoid exit 127 * chore(local-docker): guard tree in setupCommands; fallback to ls -la * style: format build-automation-workflow.ts to satisfy Prettier * test(caching, retaining): echo CACHE_KEY value into log stream for AWS/K8s visibility * test(post-build): log CACHE_KEY from remote-cli-post-build to ensure visibility in BuildResults * test(post-build): emit 'Activation successful' to satisfy caching assertions on AWS/K8s * fix(aws): increase backoff and handle throttling in DescribeTasks/GetRecords * fix(aws): increase backoff and handle throttling in DescribeTasks/GetRecords * refactor(workflows): remove deprecated cloud-runner CI pipeline and introduce cloud-runner integrity workflow * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * feat: configure aws endpoints and localstack tests * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: run localstack pipeline in integrity check * style: format aws-task-runner.ts to satisfy Prettier * style: format aws-task-runner.ts to satisfy Prettier * style: format aws-task-runner.ts to satisfy Prettier * style: format aws-task-runner.ts to satisfy Prettier * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci: add reusable cloud-runner-integrity workflow; wire into Integrity; disable legacy pipeline triggers * ci(k8s): run LocalStack inside k3s and use in-cluster endpoint; scope host LocalStack to local-docker * ci(k8s): remove in-cluster LocalStack; use host LocalStack via localhost:4566 for all; rely on k3d host mapping * Cloud runner develop rclone (#732) * ci(k8s): remove in-cluster LocalStack; use host LocalStack via localhost:4566 for all; rely on k3d host mapping * ci(k8s): remove in-cluster LocalStack; use host LocalStack via localhost:4566 for all; rely on k3d host mapping * ci(k8s): remove in-cluster LocalStack; use host LocalStack via localhost:4566 for all; rely on k3d host mapping * ci(k8s): remove in-cluster LocalStack; use host LocalStack via localhost:4566 for all; rely on k3d host mapping * ci(k8s): remove in-cluster LocalStack; use host LocalStack via localhost:4566 for all; rely on k3d host mapping * ci(k8s): remove in-cluster LocalStack; use host LocalStack via localhost:4566 for all; rely on k3d host mapping * Update README.md * feat: Add dynamic provider loader with improved error handling (#734) * feat: Add dynamic provider loader with improved error handling - Create provider-loader.ts with function-based dynamic import functionality - Update CloudRunner.setupSelectedBuildPlatform to use dynamic loader for unknown providers - Add comprehensive error handling for missing packages and interface validation - Include test coverage for successful loading and error scenarios - Maintain backward compatibility with existing built-in providers - Add ProviderLoader class wrapper for backward compatibility - Support both built-in providers (via switch) and external providers (via dynamic import) * fix: Resolve linting errors in provider loader - Fix TypeError usage instead of Error for type checking - Add missing blank lines for proper code formatting - Fix comment spacing issues * build: Update built artifacts after linting fixes - Rebuild dist/ with latest changes - Include updated provider loader in built bundle - Ensure all changes are reflected in compiled output * build: Update built artifacts after linting fixes - Rebuild dist/ with latest changes - Include updated provider loader in built bundle - Ensure all changes are reflected in compiled output * build: Update built artifacts after linting fixes - Rebuild dist/ with latest changes - Include updated provider loader in built bundle - Ensure all changes are reflected in compiled output * build: Update built artifacts after linting fixes - Rebuild dist/ with latest changes - Include updated provider loader in built bundle - Ensure all changes are reflected in compiled output * fix: Fix AWS job dependencies and remove duplicate localstack tests - Update AWS job to depend on both k8s and localstack jobs - Remove duplicate localstack tests from k8s job (now only runs k8s tests) - Remove unused cloud-runner-localstack job from main integrity check - Fix AWS SDK warnings by using Uint8Array(0) instead of empty string for S3 PutObject - Rename localstack-and-k8s job to k8s job for clarity * feat: Implement provider loader dynamic imports with GitHub URL support - Add URL detection and parsing utilities for GitHub URLs, local paths, and NPM packages - Implement git operations for cloning and updating repositories with local caching - Add automatic update checking mechanism for GitHub repositories - Update provider-loader.ts to support multiple source types with comprehensive error handling - Add comprehensive test coverage for all new functionality - Include complete documentation with usage examples - Support GitHub URLs: https://github.com/user/repo, user/repo@branch - Support local paths: ./path, /absolute/path - Support NPM packages: package-name, @scope/package - Maintain backward compatibility with existing providers - Add fallback mechanisms and interface validation * feat: Implement provider loader dynamic imports with GitHub URL support - Add URL detection and parsing utilities for GitHub URLs, local paths, and NPM packages - Implement git operations for cloning and updating repositories with local caching - Add automatic update checking mechanism for GitHub repositories - Update provider-loader.ts to support multiple source types with comprehensive error handling - Add comprehensive test coverage for all new functionality - Include complete documentation with usage examples - Support GitHub URLs: https://github.com/user/repo, user/repo@branch - Support local paths: ./path, /absolute/path - Support NPM packages: package-name, @scope/package - Maintain backward compatibility with existing providers - Add fallback mechanisms and interface validation * feat: Fix provider-loader tests and URL parser consistency - Fixed provider-loader test failures (constructor validation, module imports) - Fixed provider-url-parser to return consistent base URLs for GitHub sources - Updated error handling to use TypeError consistently - All provider-loader and provider-url-parser tests now pass - Fixed prettier and eslint formatting issues * feat: Implement provider loader dynamic imports with GitHub URL support - Add URL detection and parsing utilities for GitHub URLs, local paths, and NPM packages - Implement git operations for cloning and updating repositories with local caching - Add automatic update checking mechanism for GitHub repositories - Update provider-loader.ts to support multiple source types with comprehensive error handling - Add comprehensive test coverage for all new functionality - Include complete documentation with usage examples - Support GitHub URLs: https://github.com/user/repo, user/repo@branch - Support local paths: ./path, /absolute/path - Support NPM packages: package-name, @scope/package - Maintain backward compatibility with existing providers - Add fallback mechanisms and interface validation * feat: Implement provider loader dynamic imports with GitHub URL support - Add URL detection and parsing utilities for GitHub URLs, local paths, and NPM packages - Implement git operations for cloning and updating repositories with local caching - Add automatic update checking mechanism for GitHub repositories - Update provider-loader.ts to support multiple source types with comprehensive error handling - Add comprehensive test coverage for all new functionality - Include complete documentation with usage examples - Support GitHub URLs: https://github.com/user/repo, user/repo@branch - Support local paths: ./path, /absolute/path - Support NPM packages: package-name, @scope/package - Maintain backward compatibility with existing providers - Add fallback mechanisms and interface validation * m * m * Delete .cursor/settings.json * Update src/model/cloud-runner/providers/README.md Co-authored-by: Gabriel Le Breton <lebreton.gabriel@gmail.com> * fix * fix * fix * fix * PR feedback * PR feedback * Update .github/workflows/cloud-runner-integrity.yml Co-authored-by: Gabriel Le Breton <lebreton.gabriel@gmail.com> * Update .github/workflows/cloud-runner-integrity.yml Co-authored-by: Gabriel Le Breton <lebreton.gabriel@gmail.com> * PR feedback * PR feedback * PR feedback * PR feedback * PR feedback * PR feedback * PR feedback * PR feedback * PR feedback * PR feedback * PR feedback * PR feedback * PR feedback * pr feedback * PR feedback * PR feedback * pr feedback * PR feedback * pr feedback * pr feedback * pr feedback * PR feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback - test should fail on evictions * pr feedback - fix cleanup loop timeout * pr feedback - handle evictions and wait for disk pressure condition * pr feedback - remove ephemeral-storage request for tests * pr feedback - fix taint removal syntax * pr feedback - fail faster on pending pods and detect scheduling failures * pr feedback - cleanup images before job creation and use IfNotPresent * pr feedback - pre-pull Unity image into k3d node * Improve k3d cleanup in integrity workflow * Harden k3d cleanup to avoid disk exhaustion * pr feedback * pr feedback - improve pod scheduling diagnostics and remove eviction thresholds that prevent scheduling * pr feedback - increase timeout for image pulls in tests and detect active image pulls to allow more time * pr feedback - pre-pull Unity image at cluster setup to avoid runtime disk pressure evictions * pr feedback - ensure pre-pull pod ephemeral storage is fully reclaimed before tests * Add host disk cleanup before k3d cluster creation to prevent evictions * Run LocalStack as managed Docker step for better resource control * Improve LocalStack readiness checks and add retries for S3 bucket creation * Unify k8s, localstack, and localDocker jobs into single job with separate steps for better disk space management * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * pr feedback * f * fix * fix * fixes * fixes * fixes * fixes * fix * fix * fix: k3d/LocalStack networking - use shared Docker network and container name * fix: rename LOCALSTACK_HOST to K8S_LOCALSTACK_HOST to avoid awslocal conflict * fix: skip AWS environment test (requires LocalStack Pro for full CloudFormation) * fix: remove EFS from AWS stack - use S3 caching for storage instead * Revert "fix: remove EFS from AWS stack - use S3 caching for storage instead" This reverts commit fdb7286. * fix: enable EFS and all AWS services in LocalStack, re-enable AWS environment test * fix: add secretsmanager and other services to LocalStack * fix: add aws-local mode - validates AWS CloudFormation templates, executes via local-docker * fix: add rclone integration test with LocalStack S3 backend * chore: remove temp log files and debug artifacts Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * fix: address PR review feedback from GabLeRoux - Update kubectl to v1.34.1 (latest stable) - Add provider documentation explaining what a provider is - Fix typo: "versions" -> "tags" in best practices Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * integrate PR #686 * integrate PR #686 * lint fix * fix: use /bin/sh for Alpine-based images (rclone/rclone) in docker provider * fix: lint issues * fix: restore GitHub API workflow_id convention and getCheckStatus method Reverts cosmetic changes that renamed workflow_id to workflowId in GitHub API calls. The GitHub REST API uses workflow_id, so we keep the eslint camelcase suppression comments to match the official API convention. Also restores the getCheckStatus() method that was removed. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * revert: remove unrelated changes to docker.ts, github.ts, image-tag.ts, versioning.test.ts These files had changes unrelated to the Cloud Runner improvements PR goals. Reverting to main branch state. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * fix: use /bin/sh for Alpine-based images (rclone/rclone) in docker provider The rclone/rclone image is Alpine-based and only has /bin/sh, not /bin/bash. This fixes exit code 127 errors when running rclone commands in containers. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * fix: fetch only specific PR ref instead of all PR refs The previous implementation fetched ALL PR refs with: git fetch origin +refs/pull/*:refs/remotes/origin/pull/* This is extremely slow for repos with many PRs (700+ PRs in unity-builder). Now fetches only the specific PR ref needed, e.g., for pull/731/merge: git fetch origin +refs/pull/731/merge:... +refs/pull/731/head:... This should significantly speed up the Cloud Runner integrity tests. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * chore: remove cleanup.yml workflow Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * chore: remove redundant cloud-runner-integrity-localstack.yml Tests are already covered by cloud-runner-integrity.yml Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> --------- Co-authored-by: Gabriel Le Breton <lebreton.gabriel@gmail.com> Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Changes
Updated AWS task definition related code so that it would allow creation of the cloud formation stack and not complain if the ContainerDefinition secrets were null
See Discord discussion
Checklist
code of conduct
in the documentation repo)
Summary by CodeRabbit
New Features
cloneDepthandcloudRunnerRepoNamefor repository cloning operations.Refactor
Secretsproperty from container definitions.imageRollingVersionproperty type from number to string for better data representation.cloneDepthandcloudRunnerRepoNamein CloudRunner options.Chores