Skip to content

feat: go proxy for STIG SRIOV config daemon CI via group level variable#141

Merged
maze88 merged 1 commit intoMellanox:network-operator-26.1.xfrom
maze88:network-operator-26.1.x
Jan 22, 2026
Merged

feat: go proxy for STIG SRIOV config daemon CI via group level variable#141
maze88 merged 1 commit intoMellanox:network-operator-26.1.xfrom
maze88:network-operator-26.1.x

Conversation

@maze88
Copy link
Collaborator

@maze88 maze88 commented Jan 21, 2026

backport #140 from master to release branch

@github-actions
Copy link

Thanks for your PR,
To run vendors CIs, Maintainers can use one of:

  • /test-all: To run all tests for all vendors.
  • /test-e2e-all: To run all E2E tests for all vendors.
  • /test-e2e-nvidia-all: To run all E2E tests for NVIDIA vendor.

To skip the vendors CIs, Maintainers can use one of:

  • /skip-all: To skip all tests for all vendors.
  • /skip-e2e-all: To skip all E2E tests for all vendors.
  • /skip-e2e-nvidia-all: To skip all E2E tests for NVIDIA vendor.
    Best regards.

@greptile-apps
Copy link

greptile-apps bot commented Jan 21, 2026

Greptile Summary

  • Adds GOPROXY support to GitLab CI STIG DOCA pipeline by incorporating it as a required group-level variable for Go proxy configuration in restricted environments
  • Updates variable validation to include GOPROXY and passes it as a Docker build argument during STIG container builds
  • Backports changes from master branch PR feat: go proxy for STIG SRIOV config daemon CI via group level variable #140 to the network-operator-26.1.x release branch for improved dependency management

Important Files Changed

Filename Overview
.gitlab-ci.yml Added GOPROXY variable validation and Docker build argument for STIG builds

Confidence score: 5/5

  • This PR is safe to merge with minimal risk as it only adds Go proxy configuration without changing existing functionality
  • Score reflects simple, well-understood changes that improve build reliability by adding proper dependency management for STIG-compliant builds
  • No files require special attention as the changes are straightforward additions to CI configuration

Sequence Diagram

sequenceDiagram
    participant User
    participant GitLab as "GitLab CI"
    participant Docker as "Docker Registry"
    participant Artifactory
    participant GitHub as "GitHub Repository"
    participant PulseScan as "Pulse Scanner"

    User->>GitLab: "Push to network-operator branch or create tag"
    GitLab->>GitLab: "Validate environment variables"
    GitLab->>Artifactory: "Authenticate with credentials"
    GitLab->>Docker: "Authenticate with NVCR registry"
    GitLab->>GitLab: "Clone STIG scripts repository"
    GitLab->>GitLab: "Build STIG-hardened Docker image"
    GitLab->>Docker: "Push image to registry"
    GitLab->>GitHub: "Clone network-operator repository"
    GitLab->>GitHub: "Update component version in release files"
    GitLab->>GitHub: "Create pull request with version update"
    GitLab->>PulseScan: "Run OSS security scan"
    GitLab->>PulseScan: "Run STIG compliance scan"
Loading

Signed-off-by: Michael Zeevi <mzeevi@nvidia.com>
@maze88 maze88 force-pushed the network-operator-26.1.x branch from ab15f20 to eb891ef Compare January 21, 2026 13:46
@maze88 maze88 changed the title feat: go proxy for STIG DOCA CI via group level variable feat: go proxy for STIG SRIOV config daemon CI via group level variable Jan 21, 2026
@maze88 maze88 merged commit c9ab089 into Mellanox:network-operator-26.1.x Jan 22, 2026
10 of 13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants