Commit Graph

64 Commits

Author SHA1 Message Date
Deirdre Connolly 56361654c6
Fix CD workflow using cloudbuild.yaml (#637)
* Fix variable substitutions in CD workflow and gcloud build config

* Docker needs everything lowercase

* Store container image in GCR

* Don't use GITHUB_REPOSITORY
2020-07-10 07:37:54 -04:00
Deirdre Connolly e0a71c229d
Trigger Google Cloud Builds via GitHub App integration (#614)
Use cloudbuild.yaml for all invocations including via gcloud cli and github build triggers
2020-07-09 14:22:56 -04:00
Deirdre Connolly 2cd58c8325
Add RedJubjub signature verifier service (#460)
Using tower-batch-based async pattern.

Now the Verifier is agnostic of redjubjub SigTypes.  Updated tests to
generate sigs of both types and batch verifies the whole batch.

Resolves #407
2020-07-08 17:23:00 -04:00
Jane Lusby 959f029457
make clippy warnings errors in CI (#605)
* make clippy warnings errors in CI

* Apply fixes from cargo clippy --all-features --all-targets -- -D warnings

* Resolve merge conflicts

Co-authored-by: Deirdre Connolly <deirdre@zfnd.org>
2020-07-07 16:26:22 -07:00
Deirdre Connolly a267030d7b Adjust coverage job to only trigger on changes to *.rs files
Moves it to its own workflow. Also pulls in latest tarpaulin release every time. 🤞
2020-07-02 15:38:20 -04:00
dependabot[bot] de08f66b33 Bump codecov/codecov-action from v1.0.7 to v1.0.10
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from v1.0.7 to v1.0.10.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Commits](https://github.com/codecov/codecov-action/compare/v1.0.7...f3570723ef743f6942b6a480461ed0cd6c0f9baa)

Signed-off-by: dependabot[bot] <support@github.com>
2020-07-02 06:44:39 -04:00
Deirdre Connolly eff8a3889e Revert "Sign container images for later binary authorization"
This reverts commit 0bb8b2b059.
2020-06-25 17:03:07 -04:00
Deirdre Connolly 038a09ad36 Revert "Use gcloud sdk latest stable in actions; use --quiet for alpha commands"
This reverts commit 8367c765a0.
2020-06-25 17:03:07 -04:00
Deirdre Connolly 839d4ab9fb Revert "Move --quiet around"
This reverts commit 01e6d01d9b.
2020-06-25 17:03:07 -04:00
Deirdre Connolly e8ff7a1dd8 Revert "Verify that the attestation was created"
This reverts commit c1f97e21c9.
2020-06-25 17:03:07 -04:00
Deirdre Connolly c1f97e21c9 Verify that the attestation was created 2020-06-25 16:47:29 -04:00
Deirdre Connolly 01e6d01d9b Move --quiet around 2020-06-25 16:47:29 -04:00
Deirdre Connolly 8367c765a0 Use gcloud sdk latest stable in actions; use --quiet for alpha commands 2020-06-25 16:47:29 -04:00
Deirdre Connolly 0bb8b2b059 Sign container images for later binary authorization 2020-06-25 16:47:29 -04:00
dependabot[bot] 5c0df915f1 Bump w9jds/firebase-action from v1.3.1 to v1.5.0
Bumps [w9jds/firebase-action](https://github.com/w9jds/firebase-action) from v1.3.1 to v1.5.0.
- [Release notes](https://github.com/w9jds/firebase-action/releases)
- [Commits](https://github.com/w9jds/firebase-action/compare/v1.3.1...6d1a577caffa15dfad8cc3d95e8ea2ac7ff51f7f)

Signed-off-by: dependabot[bot] <support@github.com>
2020-06-22 11:55:43 -04:00
Deirdre Connolly 2bdd07c1bc
Create instance group if it doesn't exist, update it if it does (#513)
* Deploy instance group if it doesn't exist, update it if it does

* Rename push.yml to cd.yml

* Rename some CD steps
2020-06-21 04:39:47 -04:00
Deirdre Connolly 2f87a9a9f6 Update existing managed instance groups on deploy 2020-06-19 03:46:09 -04:00
Deirdre Connolly 509f0763ad Scope deploys to main, gcloud branches; shorten initial delay 2020-06-19 03:46:09 -04:00
Deirdre Connolly c901b42c75 Shorten health check delay from 3 minutes to 1 2020-06-19 03:46:09 -04:00
Deirdre Connolly c85acde18f Add 'zebrad' tags to instance templates
And add 'one time' commands commented out for managing firewall rules.
2020-06-19 03:46:09 -04:00
Deirdre Connolly f95e7d5595 Add health check 2020-06-19 03:46:09 -04:00
Deirdre Connolly 4aabadc67d Remove zone param 2020-06-19 03:46:09 -04:00
Deirdre Connolly 621a14abe9 Managed group of size 1 seems to reliably work 🙃 2020-06-19 03:46:09 -04:00
Deirdre Connolly c7046eb6f5 Create instance group in one specified zone 2020-06-19 03:46:09 -04:00
Deirdre Connolly 20e0e4bef0 Go back to project default machine type for now 2020-06-19 03:46:09 -04:00
Deirdre Connolly cae9df9169 Remove --base-instance-name, redundant 2020-06-19 03:46:09 -04:00
Deirdre Connolly c50e9a5bee Add region 2020-06-19 03:46:09 -04:00
Deirdre Connolly e2c30e7bd2 Type n1-highmem-8 2020-06-19 03:46:09 -04:00
Deirdre Connolly 14a62bf9bb Remove region; highmem is constrainted 2020-06-19 03:46:09 -04:00
Deirdre Connolly 7742bb4dbd Bump memory on instance template 2020-06-19 03:46:09 -04:00
Deirdre Connolly 30f01c6ff0 Use updated 'zebrad seed' command, move binary to root, no workdir 2020-06-19 03:46:09 -04:00
Deirdre Connolly 65bd05932e Remove cloudbuild.yml, tidy gcloud deploy workflow 2020-06-19 03:46:09 -04:00
Deirdre Connolly 0ccf167125 gcloud workflow to deploy containers via managed instance group
Also default command to 'zebrad connect' until 'start' is fleshed out.
2020-06-19 03:46:09 -04:00
Deirdre Connolly dab3eeca3c Go back to stable clippy-check
The experimental one duplicates outputs X however many github checks run, rust or not.
2020-06-16 17:14:27 -04:00
Deirdre Connolly a577303329 Create zbot.yml 2020-06-13 06:15:20 -04:00
dependabot[bot] 32d1b9c4f9 Bump codecov/codecov-action from v1 to v1.0.7
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from v1 to v1.0.7.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Commits](https://github.com/codecov/codecov-action/compare/v1...f532c3a1452359a7f96c37efc741537b80555c74)

Signed-off-by: dependabot[bot] <support@github.com>
2020-06-09 17:47:18 -04:00
dependabot[bot] 3666db7a42 Bump w9jds/firebase-action from v1.1.0 to v1.3.1
Bumps [w9jds/firebase-action](https://github.com/w9jds/firebase-action) from v1.1.0 to v1.3.1.
- [Release notes](https://github.com/w9jds/firebase-action/releases)
- [Commits](https://github.com/w9jds/firebase-action/compare/v1.1.0...92e616d7667df9bd5c7d9c6a1ff50e9f79861a65)

Signed-off-by: dependabot[bot] <support@github.com>
2020-06-09 17:47:00 -04:00
Deirdre Connolly 1f28e535ec Label github action updates as 'infrastructure' 2020-06-09 17:46:33 -04:00
dependabot-preview[bot] 78f09c5360 Create Dependabot config file 2020-06-09 17:00:32 -04:00
Deirdre Connolly d61cf27d74
Turn off the project workflow, reorg some CI jobs (#451)
* Remove 'assign to project' workflow

Doesn't work with external PRs.

* Reorg CI jobs a bit

* Also upgrade gcloud sdk to version 295.0.0
2020-06-08 21:03:51 -04:00
Deirdre Connolly b263489af6
Export ed25519 zebra (#445)
And use that one, and our similar redjubjub export, everywhere.

Fixes #405

* Move PRs to 'In Progress' column on project board when created
2020-06-06 18:10:32 -04:00
Deirdre Connolly 123ba3674f
Update assign-to-project.yml to use a scoped personal access toke (#441)
* Update assign-to-project.yml

* Rename project?

* Rename workflow & job
2020-06-06 14:39:46 -04:00
Deirdre Connolly d54c83ead5
Add assign to project workflow (#438) 2020-06-05 19:21:20 -04:00
Jane Lusby 4a2d2a359c
add cargo fmt to ci (#403)
* add cargo fmt to ci

* rebase on main

* switch to stable

Co-authored-by: Jane Lusby <jane@zfnd.org>
2020-05-27 19:12:25 -07:00
Deirdre Connolly cdc1f38e72 Try new unstable Clippy action, update PR job logic 2020-05-15 23:46:21 -04:00
Deirdre Connolly 796eddfb25 Only run gcloud build when it's a push 2020-05-15 23:46:21 -04:00
Deirdre Connolly 77b42d2048 Try actions-rs build+test, gcloud build is an app not an action 2020-05-15 23:46:21 -04:00
Deirdre Connolly 6a09187a8b Trigger CI workflow on push to main or PR opened against main
To support PRs from forks.
2020-05-13 16:32:49 -04:00
Deirdre Connolly d53d69aa6e
Tweak coverage job (#364)
* Add step ids, better names

* Split out Clippy to its own job

* If coverage goes down, don't fail the build

* Go back to tarpaulin

* bump version of tarpaulin

* config tarpaulin
2020-04-21 04:51:05 -04:00
Deirdre Connolly df7ed7ae81
Move note encryption types around (#362)
* Move around and dedupe note *Cipertext types

* Bump code coverage test timeout to 5 minutes

* Try uploading coverage to codecov.io
2020-04-19 14:45:25 -04:00