mirror of
https://github.com/rustfs/rustfs.git
synced 2026-10-31 16:22:06 +00:00
Compare commits
3 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 overtrue
|
4480d7efca | ||
|
overtrue
|
dcf63411f0 | ||
|
overtrue
|
8adc1a3082 |
@@ -1,2 +1,2 @@
|
||||
sha256-darwin=7c705942d3a9e583ebaa85845daa21c4f81fdbf36def24db931aaef38636c53e
|
||||
sha256-linux=5c33dc395233671cb77452f8fb12900ecdbeb368632222b96835d310bce1aab8
|
||||
sha256-darwin=5d4509d69c3106c1b8a6c353d123440d6b4dbe5dd42612e42dcb864946beae6c
|
||||
sha256-linux=414e1dae735e6d14821a992cebc09a545576e9a77e10a5e0ed671ab07b89df98
|
||||
|
||||
@@ -1 +1 @@
|
||||
sha256=00f8a56b75990b487a594b97c36610b94476a6944ba00473e37187ea654d42bf
|
||||
sha256=e9dc896774122a304e2b8b90f28c82d4d4e0af8ded36a82b147b30945ec994e3
|
||||
|
||||
@@ -1,77 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"plan_id": "rustfs-release-validation",
|
||||
"description": "Versioned certification plan for every public RustFS release exit (rustfs/backlog#2662, R01). preview, prerelease and stable all require this explicit plan. Scripts/release/release_gate.py fail-closes publication on any missing, duplicate, stale, substituted or non-PASS required item.",
|
||||
"release_types": ["preview", "prerelease", "stable"],
|
||||
"targets": [
|
||||
{"os": "linux", "arch": "x86_64", "abi": "musl"},
|
||||
{"os": "linux", "arch": "aarch64", "abi": "musl"},
|
||||
{"os": "linux", "arch": "x86_64", "abi": "gnu"},
|
||||
{"os": "linux", "arch": "aarch64", "abi": "gnu"},
|
||||
{"os": "macos", "arch": "aarch64", "abi": "none"},
|
||||
{"os": "windows", "arch": "x86_64", "abi": "msvc"}
|
||||
],
|
||||
"targets_basis": "Platform matrix of .github/workflows/build.yml (prepare-platform-matrix). gnu and macOS targets build with the pyroscope feature; musl and Windows targets build with no extra features.",
|
||||
"features": ["pyroscope"],
|
||||
"trusted_workflows": [
|
||||
{"repository": "rustfs/s3chaos", "workflow_id": "release-gate.yml"}
|
||||
],
|
||||
"trusted_workflows_basis": "The shared evidence envelope producer lives in rustfs/s3chaos (G01, fault/release_gate.rs) and its plan/live split workflow is .github/workflows/release-gate.yml there. Only results from these identities may enter a release certification; PR-uploaded JSON never gains release authority. R02 must extend this list when additional verifier workflows land, never widen it to untrusted sources.",
|
||||
"lanes": [
|
||||
{
|
||||
"lane": "identity",
|
||||
"harness_repository": "rustfs/s3chaos",
|
||||
"harness_sha": "9a48f55c1d6d58ce63a8fb1ea7317e024f32f11d",
|
||||
"harness_basis": "Fixed G01 evidence-envelope producer revision (rustfs/s3chaos PR #102 head recorded in rustfs/backlog#2658). R02 re-pins this when the live verifier ships.",
|
||||
"timeout_seconds": 1800,
|
||||
"environment_capabilities": ["process-exec"],
|
||||
"cases": ["artifact-identity", "startup"],
|
||||
"applies_to": {
|
||||
"release_types": ["preview", "prerelease", "stable"],
|
||||
"platforms": "all"
|
||||
},
|
||||
"applies_basis": "Artifact identity and startup checks are mandatory for every release type, preview included, on every shipped target (rustfs/backlog#2662 frozen design item 5)."
|
||||
},
|
||||
{
|
||||
"lane": "upgrade",
|
||||
"harness_repository": "rustfs/s3chaos",
|
||||
"harness_sha": "9a48f55c1d6d58ce63a8fb1ea7317e024f32f11d",
|
||||
"harness_basis": "Same fixed envelope producer as the identity lane; the workflow SHA and the product build SHA are bound separately and need not be equal.",
|
||||
"timeout_seconds": 5400,
|
||||
"environment_capabilities": ["process-exec", "previous-release-artifact"],
|
||||
"cases": [
|
||||
"direct-upgrade",
|
||||
"mixed-version-upgrade",
|
||||
"bucket-config-upgrade",
|
||||
"bucket-config-rollback",
|
||||
"multipart-layout-upgrade",
|
||||
"multipart-layout-baseline"
|
||||
],
|
||||
"cases_basis": "Case IDs of the pinned previous-release matrix in .github/workflows/e2e-upgrade.yml (source.version/asset/sha256 and the case list mapped there).",
|
||||
"applies_to": {
|
||||
"release_types": ["prerelease", "stable"],
|
||||
"platforms": [{"os": "linux", "arch": "x86_64", "abi": "gnu"}]
|
||||
},
|
||||
"applies_basis": "preview releases use the pre-declared smaller set (identity lane only). The upgrade lane is only exercised on linux-x86_64-gnu, the platform of the pinned source assets."
|
||||
}
|
||||
],
|
||||
"upgrade_sources": {
|
||||
"basis": "Exactly the two previous-release sources pinned in .github/workflows/e2e-upgrade.yml are exercised today (source.version / source.asset / source.sha256). No other N-1/N-2 compatibility is claimed, and these digests are not inferred from tags.",
|
||||
"sources": [
|
||||
{
|
||||
"version": "1.0.1",
|
||||
"role": "N-1",
|
||||
"artifact_name": "rustfs-linux-x86_64-gnu-v1.0.1.zip",
|
||||
"artifact_sha256": "9742e183cb0dfb0d48fa909797af572fe47b7f827569036baa4156e0d3958ee5"
|
||||
},
|
||||
{
|
||||
"version": "1.0.0-rc.5",
|
||||
"role": "N-2",
|
||||
"artifact_name": "rustfs-linux-x86_64-gnu-v1.0.0-rc.5.zip",
|
||||
"artifact_sha256": "3ee8df71e8edcfada533be452c4135868f697bc515460ae97b027313eade7a3d"
|
||||
}
|
||||
],
|
||||
"rollback_supported": false,
|
||||
"rollback_basis": "Only the bucket-config-rollback case (rollback_to_previous_release_reads_current_bucket_metadata) is exercised. Full data-plane rollback is not certified and is never a default claim."
|
||||
}
|
||||
}
|
||||
+5
-311
@@ -814,18 +814,13 @@ jobs:
|
||||
export AWS_SECRET_ACCESS_KEY="$R2_SECRET_ACCESS_KEY"
|
||||
export AWS_DEFAULT_REGION="auto"
|
||||
|
||||
# Determine upload path based on build type. Release and prerelease
|
||||
# builds only stage their bytes here: the official
|
||||
# artifacts/rustfs/release/ path is written solely by the
|
||||
# certification-gated promote-release-artifacts job, from these same
|
||||
# staged objects. Development builds keep the uncertified dev channel
|
||||
# and never touch official or latest channels.
|
||||
# Determine upload path based on build type
|
||||
if [[ "$BUILD_TYPE" == "development" ]]; then
|
||||
R2_PATH="s3://${R2_BUCKET}/artifacts/rustfs/dev/"
|
||||
echo "📤 Uploading development build to R2 dev directory"
|
||||
else
|
||||
R2_PATH="s3://${R2_BUCKET}/artifacts/rustfs/staging/${GITHUB_RUN_ID}/${GITHUB_RUN_ATTEMPT}/"
|
||||
echo "📤 Staging release build for certification-gated promotion"
|
||||
R2_PATH="s3://${R2_BUCKET}/artifacts/rustfs/release/"
|
||||
echo "📤 Uploading release build to R2 release directory"
|
||||
fi
|
||||
|
||||
# Upload all rustfs zip files to R2 using S3-compatible API
|
||||
@@ -874,221 +869,6 @@ jobs:
|
||||
echo "This run does not trigger Docker publishing."
|
||||
fi
|
||||
|
||||
# Aggregate the parent candidate batch. This job always collects results and
|
||||
# retains its evidence, including on failure, and every publication job
|
||||
# below requires its success. Missing, stale, substituted or non-PASS
|
||||
# evidence fails closed here: only the trusted verification sources
|
||||
# (rustfs/s3chaos release-gate envelopes, rustfs/backlog#2658) can satisfy
|
||||
# it, so a PR-uploaded JSON set never gains release authority.
|
||||
release-certification:
|
||||
name: Release Certification
|
||||
needs: [ build-check, build-rustfs ]
|
||||
if: ${{ !cancelled() && needs.build-check.outputs.should_publish == 'true' && startsWith(github.ref, 'refs/tags/') }}
|
||||
runs-on: ubuntu-latest # gh CLI required; the sm-standard-2 fleet does not ship it
|
||||
timeout-minutes: 30
|
||||
permissions:
|
||||
contents: read
|
||||
actions: read
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@f548e57e544e1ff5a4c46bf1e1b8685f8e4a348a # v7
|
||||
with:
|
||||
persist-credentials: false
|
||||
|
||||
- name: Download all build artifacts
|
||||
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
|
||||
with:
|
||||
path: ./artifacts
|
||||
pattern: rustfs-*
|
||||
merge-multiple: true
|
||||
|
||||
- name: Write candidate and collect trusted validation results
|
||||
env:
|
||||
# Cross-repo read of the trusted verification run. Falls back to the
|
||||
# workflow token, which cannot read rustfs/s3chaos; a missing token
|
||||
# therefore fail-closes instead of certifying.
|
||||
GH_TOKEN: ${{ secrets.RELEASE_VALIDATION_TOKEN || github.token }}
|
||||
PRODUCT_COMMIT: ${{ github.sha }}
|
||||
VERSION: ${{ needs.build-check.outputs.version }}
|
||||
BUILD_TYPE: ${{ needs.build-check.outputs.build_type }}
|
||||
FEATURES: ${{ needs.build-check.outputs.build_type == 'development' && '' || 'pyroscope' }}
|
||||
shell: bash
|
||||
run: |
|
||||
set -euo pipefail
|
||||
|
||||
mkdir -p results release-gate-output
|
||||
PLAN_SHA256=$(python3 -c "import hashlib,json,sys; sys.path.insert(0,'scripts/release'); import release_gate; print(release_gate.canonical_sha256(json.load(open('.config/release-validation-plan.json'))))")
|
||||
|
||||
python3 - "$PLAN_SHA256" > candidate.json <<'PY'
|
||||
import hashlib, json, os, sys, zipfile
|
||||
|
||||
plan_sha256 = sys.argv[1]
|
||||
profile = {"release": "stable", "prerelease": "prerelease", "preview": "preview"}.get(os.environ["BUILD_TYPE"])
|
||||
if profile is None:
|
||||
raise SystemExit("release certification only covers preview, prerelease and stable builds")
|
||||
|
||||
def sha256(path):
|
||||
digest = hashlib.sha256()
|
||||
with open(path, "rb") as handle:
|
||||
for chunk in iter(lambda: handle.read(1024 * 1024), b""):
|
||||
digest.update(chunk)
|
||||
return digest.hexdigest()
|
||||
|
||||
deliverables = []
|
||||
for name in sorted(os.listdir("artifacts")):
|
||||
if not name.startswith("rustfs-") or not name.endswith(".zip"):
|
||||
continue
|
||||
path = os.path.join("artifacts", name)
|
||||
members = zipfile.ZipFile(path).namelist()
|
||||
binary_name = "rustfs.exe" if "rustfs.exe" in members else "rustfs"
|
||||
with zipfile.ZipFile(path) as archive:
|
||||
binary_bytes = archive.read(binary_name)
|
||||
import tempfile
|
||||
with tempfile.NamedTemporaryFile() as handle:
|
||||
handle.write(binary_bytes)
|
||||
handle.flush()
|
||||
binary_sha = sha256(handle.name)
|
||||
deliverables.append({
|
||||
"kind": "zip",
|
||||
"name": name,
|
||||
"location": "https://github.com/rustfs/rustfs/releases/download/{}/{}".format(os.environ["VERSION"], name),
|
||||
"sha256": sha256(path),
|
||||
"size": os.path.getsize(path),
|
||||
"binary_sha256": binary_sha,
|
||||
})
|
||||
if not deliverables:
|
||||
raise SystemExit("no built deliverables found to certify")
|
||||
candidate = {
|
||||
"schema_version": 1,
|
||||
"product_commit": os.environ["PRODUCT_COMMIT"],
|
||||
"version": os.environ["VERSION"],
|
||||
"release_profile": profile,
|
||||
"features": [f for f in os.environ.get("FEATURES", "").split(",") if f],
|
||||
"plan_sha256": plan_sha256,
|
||||
"validation_batch": {"run_id": os.environ["GITHUB_RUN_ID"], "run_attempt": int(os.environ["GITHUB_RUN_ATTEMPT"])},
|
||||
"deliverables": deliverables,
|
||||
}
|
||||
json.dump(candidate, sys.stdout, indent=2, sort_keys=True)
|
||||
print()
|
||||
PY
|
||||
|
||||
# Trusted verification evidence only: the release-gate envelopes of
|
||||
# rustfs/s3chaos for this exact product commit. Absence blocks below.
|
||||
TRUSTED_REPO="rustfs/s3chaos"
|
||||
TRUSTED_WORKFLOW="release-gate.yml"
|
||||
TRUSTED_RUN=$(gh api "repos/${TRUSTED_REPO}/actions/workflows/${TRUSTED_WORKFLOW}/runs?head_sha=${PRODUCT_COMMIT}&status=success&per_page=1" --jq '.workflow_runs[0].id // empty' || true)
|
||||
if [[ -z "$TRUSTED_RUN" ]]; then
|
||||
echo "❌ No trusted verification run of ${TRUSTED_REPO}/${TRUSTED_WORKFLOW} for ${PRODUCT_COMMIT}; refusing to certify" >&2
|
||||
else
|
||||
gh run download "$TRUSTED_RUN" -R "$TRUSTED_REPO" -n release-validation-evidence -D results || \
|
||||
echo "❌ Trusted verification run ${TRUSTED_RUN} published no release-validation-evidence artifact" >&2
|
||||
fi
|
||||
|
||||
python3 scripts/release/release_gate.py validate \
|
||||
--plan .config/release-validation-plan.json \
|
||||
--candidate candidate.json \
|
||||
--results results \
|
||||
--output release-gate-output
|
||||
|
||||
- name: Upload certification evidence
|
||||
if: always()
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: release-certification
|
||||
path: |
|
||||
candidate.json
|
||||
results/
|
||||
release-gate-output/
|
||||
if-no-files-found: warn
|
||||
retention-days: 30
|
||||
|
||||
# The only writer of the official R2 release path. Promotion re-checks the
|
||||
# exact bytes about to be published against the passed certification list
|
||||
# and copies the staged objects byte-for-byte: no rebuild-after-verify.
|
||||
promote-release-artifacts:
|
||||
name: Promote Release Artifacts
|
||||
needs: [ build-check, build-rustfs, release-certification ]
|
||||
# Target-channel lock for the official R2 release path.
|
||||
concurrency:
|
||||
group: release-channel-r2-release
|
||||
cancel-in-progress: false
|
||||
if: needs.build-check.outputs.should_publish == 'true' && startsWith(github.ref, 'refs/tags/') && (needs.build-check.outputs.build_type == 'release' || needs.build-check.outputs.build_type == 'prerelease')
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 30
|
||||
permissions:
|
||||
contents: read
|
||||
actions: read
|
||||
env:
|
||||
R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }}
|
||||
R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
|
||||
R2_ENDPOINT: ${{ secrets.R2_ENDPOINT }}
|
||||
R2_BUCKET: ${{ secrets.R2_BUCKET }}
|
||||
AWS_EC2_METADATA_DISABLED: true
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@f548e57e544e1ff5a4c46bf1e1b8685f8e4a348a # v7
|
||||
with:
|
||||
persist-credentials: false
|
||||
|
||||
- name: Download build and certification artifacts
|
||||
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
|
||||
with:
|
||||
path: ./artifacts
|
||||
pattern: rustfs-*
|
||||
merge-multiple: true
|
||||
|
||||
- name: Download certification evidence
|
||||
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
|
||||
with:
|
||||
name: release-certification
|
||||
path: ./certification
|
||||
|
||||
- name: Verify and promote staged release artifacts
|
||||
shell: bash
|
||||
run: |
|
||||
set -euo pipefail
|
||||
|
||||
if [[ -z "$R2_ACCESS_KEY_ID" || -z "$R2_SECRET_ACCESS_KEY" || -z "$R2_ENDPOINT" || -z "$R2_BUCKET" ]]; then
|
||||
echo "❌ R2 credentials missing; refusing to promote to the official channel" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
for zip_file in artifacts/rustfs-*.zip; do
|
||||
[[ -f "$zip_file" ]] || continue
|
||||
name="$(basename "$zip_file")"
|
||||
python3 scripts/release/release_gate.py verify-promotion \
|
||||
--plan .config/release-validation-plan.json \
|
||||
--candidate certification/candidate.json \
|
||||
--summary certification/release-gate-output \
|
||||
--artifact "$zip_file" \
|
||||
--artifact-name "$name"
|
||||
done
|
||||
|
||||
if ! command -v aws >/dev/null 2>&1; then
|
||||
sudo apt-get update && sudo apt-get install -y awscli
|
||||
fi
|
||||
export AWS_ACCESS_KEY_ID="$R2_ACCESS_KEY_ID"
|
||||
export AWS_SECRET_ACCESS_KEY="$R2_SECRET_ACCESS_KEY"
|
||||
export AWS_DEFAULT_REGION="auto"
|
||||
|
||||
STAGING_PATH="s3://${R2_BUCKET}/artifacts/rustfs/staging/${GITHUB_RUN_ID}/${GITHUB_RUN_ATTEMPT}/"
|
||||
RELEASE_PATH="s3://${R2_BUCKET}/artifacts/rustfs/release/"
|
||||
for zip_file in artifacts/rustfs-*.zip; do
|
||||
[[ -f "$zip_file" ]] || continue
|
||||
name="$(basename "$zip_file")"
|
||||
staged="$(mktemp)"
|
||||
aws s3 cp "${STAGING_PATH}${name}" "$staged" --endpoint-url "$R2_ENDPOINT" --only-show-errors
|
||||
staged_sha="$(sha256sum "$staged" | awk '{print $1}')"
|
||||
built_sha="$(sha256sum "$zip_file" | awk '{print $1}')"
|
||||
if [[ "$staged_sha" != "$built_sha" ]]; then
|
||||
echo "❌ Staged object ${name} does not match the verified bytes" >&2
|
||||
exit 1
|
||||
fi
|
||||
aws s3 cp "$staged" "${RELEASE_PATH}${name}" --endpoint-url "$R2_ENDPOINT" --only-show-errors
|
||||
rm -f "$staged"
|
||||
echo "✅ Promoted ${name} (${built_sha})"
|
||||
done
|
||||
|
||||
# Create GitHub Release for every valid release tag, including previews
|
||||
create-release:
|
||||
name: Create GitHub Release
|
||||
@@ -1248,10 +1028,6 @@ jobs:
|
||||
update-latest-version:
|
||||
name: Update Latest Version
|
||||
needs: [ build-check, publish-release ]
|
||||
# Target-channel lock for the latest.json version pointer.
|
||||
concurrency:
|
||||
group: release-channel-oss-latest
|
||||
cancel-in-progress: false
|
||||
if: needs.build-check.outputs.should_publish == 'true' && startsWith(github.ref, 'refs/tags/') && (needs.build-check.outputs.build_type == 'release' || needs.build-check.outputs.build_type == 'prerelease')
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 30
|
||||
@@ -1292,45 +1068,6 @@ jobs:
|
||||
rm -rf "$OSSUTIL_DIR" "$OSSUTIL_ZIP"
|
||||
chmod +x "$OSSUTIL_BIN"
|
||||
|
||||
# Candidate/pointer ordering: an older candidate must never overwrite
|
||||
# a newer pointer, even if its promotion job finishes later.
|
||||
CURRENT_LATEST="${RUNNER_TEMP}/current-latest.json"
|
||||
if "$OSSUTIL_BIN" cp oss://rustfs-version/latest.json "$CURRENT_LATEST" 2>/dev/null; then
|
||||
python3 - "$CURRENT_LATEST" "$VERSION" <<'PY'
|
||||
import json
|
||||
import re
|
||||
import sys
|
||||
|
||||
def key(version):
|
||||
match = re.match(r"^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$", version)
|
||||
if not match:
|
||||
raise SystemExit(3)
|
||||
core = tuple(int(part) for part in match.groups()[:3])
|
||||
prerelease = match.group(4)
|
||||
if prerelease is None:
|
||||
return core + (1,)
|
||||
return core + (0, tuple(int(p) if p.isdigit() else p for p in re.split(r"[.-]", prerelease)))
|
||||
|
||||
try:
|
||||
current = json.load(open(sys.argv[1], encoding="utf-8")).get("version", "")
|
||||
proposed = sys.argv[2]
|
||||
if current and key(current) > key(proposed):
|
||||
raise SystemExit(1)
|
||||
except SystemExit:
|
||||
raise
|
||||
except (OSError, ValueError, TypeError):
|
||||
raise SystemExit(3)
|
||||
PY
|
||||
guard_status=$?
|
||||
if [[ "$guard_status" -eq 1 ]]; then
|
||||
echo "Current latest.json points at a newer version; refusing to downgrade" >&2
|
||||
exit 0
|
||||
elif [[ "$guard_status" -ne 0 ]]; then
|
||||
echo "Existing latest.json is unparsable; refusing to overwrite it blindly" >&2
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
# Create latest.json
|
||||
cat > latest.json << EOF
|
||||
{
|
||||
@@ -1347,59 +1084,16 @@ jobs:
|
||||
|
||||
echo "✅ Updated latest.json for ${RELEASE_TYPE} release $VERSION"
|
||||
|
||||
# Publish release (remove draft status). Requires the release-certification
|
||||
# aggregate: without a complete legal success there is no public write.
|
||||
# Publish release (remove draft status)
|
||||
publish-release:
|
||||
name: Publish Release
|
||||
needs: [ build-check, create-release, upload-release-assets, release-certification ]
|
||||
# Target-channel lock: concurrent releases serialize on this channel so an
|
||||
# older candidate cannot interleave its publish with a newer one.
|
||||
concurrency:
|
||||
group: release-channel-github-release
|
||||
cancel-in-progress: false
|
||||
needs: [ build-check, create-release, upload-release-assets ]
|
||||
if: needs.build-check.outputs.should_publish == 'true' && startsWith(github.ref, 'refs/tags/') && (needs.build-check.outputs.build_type == 'preview' || needs.build-check.outputs.build_type == 'release' || needs.build-check.outputs.build_type == 'prerelease')
|
||||
runs-on: ubuntu-latest # gh CLI required; the sm-standard-2 fleet does not ship it
|
||||
timeout-minutes: 30
|
||||
permissions:
|
||||
contents: write
|
||||
actions: read
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@f548e57e544e1ff5a4c46bf1e1b8685f8e4a348a # v7
|
||||
with:
|
||||
persist-credentials: false
|
||||
|
||||
- name: Download certification evidence
|
||||
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
|
||||
with:
|
||||
name: release-certification
|
||||
path: ./certification
|
||||
|
||||
- name: Verify release assets against certification
|
||||
env:
|
||||
GH_TOKEN: ${{ github.token }}
|
||||
shell: bash
|
||||
run: |
|
||||
set -euo pipefail
|
||||
TAG="${{ needs.build-check.outputs.version }}"
|
||||
mkdir -p "$RUNNER_TEMP/promotion-assets"
|
||||
gh release download "$TAG" --dir "$RUNNER_TEMP/promotion-assets" --pattern '*.zip'
|
||||
found=0
|
||||
for zip_file in "$RUNNER_TEMP"/promotion-assets/*.zip; do
|
||||
[[ -f "$zip_file" ]] || continue
|
||||
found=1
|
||||
python3 scripts/release/release_gate.py verify-promotion \
|
||||
--plan .config/release-validation-plan.json \
|
||||
--candidate certification/candidate.json \
|
||||
--summary certification/release-gate-output \
|
||||
--artifact "$zip_file" \
|
||||
--artifact-name "$(basename "$zip_file")"
|
||||
done
|
||||
if [[ "$found" -ne 1 ]]; then
|
||||
echo "No release zip assets to verify against the certification" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
- name: Publish release
|
||||
env:
|
||||
GH_TOKEN: ${{ github.token }}
|
||||
|
||||
@@ -329,75 +329,13 @@ jobs:
|
||||
echo " - Create latest: $create_latest"
|
||||
echo " - Source ref: $source_ref"
|
||||
|
||||
# Consume the trusted release certification for the exact version this
|
||||
# workflow wraps and verify the certified input digests. A manual dispatch
|
||||
# without that certification fails here and pushes no official tag; only
|
||||
# results from the trusted verification sources carry release authority.
|
||||
release-certification:
|
||||
name: Release Certification
|
||||
needs: build-check
|
||||
if: needs.build-check.outputs.should_build == 'true'
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 30
|
||||
permissions:
|
||||
contents: read
|
||||
actions: read
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@f548e57e544e1ff5a4c46bf1e1b8685f8e4a348a # v7
|
||||
with:
|
||||
persist-credentials: false
|
||||
ref: ${{ needs.build-check.outputs.source_ref }}
|
||||
|
||||
- name: Download and verify release certification
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.RELEASE_VALIDATION_TOKEN || github.token }}
|
||||
TRIGGERING_RUN_ID: ${{ github.event.workflow_run.id }}
|
||||
VERSION: ${{ needs.build-check.outputs.version }}
|
||||
shell: bash
|
||||
run: |
|
||||
set -euo pipefail
|
||||
mkdir -p certification
|
||||
run_id="$TRIGGERING_RUN_ID"
|
||||
if [[ -z "$run_id" ]]; then
|
||||
run_id="$(gh api --method GET \
|
||||
"repos/${GITHUB_REPOSITORY}/actions/workflows/build.yml/runs" \
|
||||
-f branch="$VERSION" -f status=success -F per_page=1 \
|
||||
--jq '.workflow_runs[0].id // empty' || true)"
|
||||
fi
|
||||
if [[ -z "$run_id" ]]; then
|
||||
echo "No certified Build and Release run found for ${VERSION}; failing closed" >&2
|
||||
exit 1
|
||||
fi
|
||||
if ! gh run download "$run_id" -n release-certification -D certification; then
|
||||
echo "Build run ${run_id} published no release-certification artifact; failing closed" >&2
|
||||
exit 1
|
||||
fi
|
||||
python3 scripts/release/release_gate.py verify-promotion \
|
||||
--plan .config/release-validation-plan.json \
|
||||
--candidate certification/candidate.json \
|
||||
--summary certification/release-gate-output \
|
||||
--artifact-sha256 "$(jq -r '.deliverables[0].sha256' certification/candidate.json)" \
|
||||
--artifact-name "$(jq -r '.deliverables[0].name' certification/candidate.json)"
|
||||
|
||||
# Input digest binding: every zip this image wraps must be the
|
||||
# certified byte-for-byte content, never a mutable latest pointer.
|
||||
while IFS=$'\t' read -r name location expected; do
|
||||
echo "Verifying certified input ${name}"
|
||||
actual="$(curl -fsSL "$location" | sha256sum | awk '{print $1}')"
|
||||
if [[ "$actual" != "$expected" ]]; then
|
||||
echo "Certified input ${name} does not match its recorded digest" >&2
|
||||
exit 1
|
||||
fi
|
||||
done < <(jq -r '.deliverables[] | select(.name | contains("linux")) | [.name, .location, .sha256] | @tsv' certification/candidate.json)
|
||||
|
||||
# Build multi-arch Docker images
|
||||
# Strategy: Build images using pre-built binaries from dl.rustfs.com
|
||||
# Supports both release and dev channel binaries based on build context
|
||||
# Only runs when should_build is true (which includes workflow success check)
|
||||
build-docker:
|
||||
name: Build Docker Images
|
||||
needs: [ build-check, release-certification ]
|
||||
needs: build-check
|
||||
if: needs.build-check.outputs.should_build == 'true'
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 60
|
||||
@@ -505,14 +443,6 @@ jobs:
|
||||
# Output tags
|
||||
echo "tags=$TAGS" >> "$GITHUB_OUTPUT"
|
||||
|
||||
# Staging identity for this run's promotion: official tags are only
|
||||
# created after the staged image verifies against the certification,
|
||||
# and they point at this same digest (no rebuild-after-verify).
|
||||
STAGING_TAG="staging-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}${VARIANT_SUFFIX}"
|
||||
STAGING_TAGS="${{ env.REGISTRY_DOCKERHUB }}:${STAGING_TAG},${{ env.REGISTRY_GHCR }}:${STAGING_TAG},${{ env.REGISTRY_QUAY }}:${STAGING_TAG}"
|
||||
echo "staging_tags=$STAGING_TAGS" >> "$GITHUB_OUTPUT"
|
||||
echo "staging_tag=$STAGING_TAG" >> "$GITHUB_OUTPUT"
|
||||
|
||||
# Generate labels
|
||||
LABELS="org.opencontainers.image.title=RustFS"
|
||||
LABELS="$LABELS,org.opencontainers.image.description=RustFS distributed object storage system"
|
||||
@@ -537,9 +467,7 @@ jobs:
|
||||
file: ${{ matrix.file }}
|
||||
platforms: ${{ env.DOCKER_PLATFORMS }}
|
||||
push: ${{ needs.build-check.outputs.should_push == 'true' }}
|
||||
# Push to staging tags only: official tags are created by the
|
||||
# certification-gated promotion step below from this same digest.
|
||||
tags: ${{ steps.meta.outputs.staging_tags }}
|
||||
tags: ${{ steps.meta.outputs.tags }}
|
||||
labels: ${{ steps.meta.outputs.labels }}
|
||||
# No layer cache. This build compiles nothing — it downloads a
|
||||
# release zip and runs apk/apt — so the cache could only save the
|
||||
@@ -565,114 +493,6 @@ jobs:
|
||||
no-cache: false
|
||||
pull: true
|
||||
|
||||
# A later-built wrapper: the staged image must complete this platform's
|
||||
# own binary identity verification before any official tag is written.
|
||||
# It may not inherit an unverified package's conclusion.
|
||||
- name: Verify staged image against certification
|
||||
if: needs.build-check.outputs.should_push == 'true'
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.RELEASE_VALIDATION_TOKEN || github.token }}
|
||||
TRIGGERING_RUN_ID: ${{ github.event.workflow_run.id }}
|
||||
VERSION: ${{ needs.build-check.outputs.version }}
|
||||
shell: bash
|
||||
run: |
|
||||
set -euo pipefail
|
||||
mkdir -p certification
|
||||
run_id="$TRIGGERING_RUN_ID"
|
||||
if [[ -z "$run_id" ]]; then
|
||||
run_id="$(gh api --method GET \
|
||||
"repos/${GITHUB_REPOSITORY}/actions/workflows/build.yml/runs" \
|
||||
-f branch="$VERSION" -f status=success -F per_page=1 \
|
||||
--jq '.workflow_runs[0].id // empty' || true)"
|
||||
fi
|
||||
gh run download "$run_id" -n release-certification -D certification
|
||||
|
||||
STAGING_REF="${{ env.REGISTRY_DOCKERHUB }}:staging-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}${{ matrix.suffix }}"
|
||||
case "${{ matrix.variant }}" in
|
||||
musl) libc="musl" ;;
|
||||
glibc) libc="gnu" ;;
|
||||
esac
|
||||
for platform in linux/amd64 linux/arm64; do
|
||||
case "$platform" in
|
||||
linux/amd64) arch_sub="x86_64" ;;
|
||||
linux/arm64) arch_sub="aarch64" ;;
|
||||
esac
|
||||
docker pull --platform "$platform" "$STAGING_REF"
|
||||
container="$(docker create --platform "$platform" "$STAGING_REF")"
|
||||
docker cp "$container:/usr/bin/rustfs" "$RUNNER_TEMP/staged-rustfs"
|
||||
docker rm "$container" >/dev/null
|
||||
actual="$(sha256sum "$RUNNER_TEMP/staged-rustfs" | awk '{print $1}')"
|
||||
expected="$(jq -r --arg needle "linux-${arch_sub}-${libc}" \
|
||||
'[.deliverables[] | select(.name | contains($needle)) | .binary_sha256][0] // empty' \
|
||||
certification/candidate.json)"
|
||||
if [[ -z "$expected" || "$actual" != "$expected" ]]; then
|
||||
echo "Staged image binary for ${platform} does not match the certified binary digest" >&2
|
||||
exit 1
|
||||
fi
|
||||
python3 scripts/release/release_gate.py verify-promotion \
|
||||
--plan .config/release-validation-plan.json \
|
||||
--candidate certification/candidate.json \
|
||||
--summary certification/release-gate-output \
|
||||
--artifact "$RUNNER_TEMP/staged-rustfs" \
|
||||
--artifact-role binary
|
||||
done
|
||||
|
||||
- name: Promote staged image to official tags
|
||||
if: needs.build-check.outputs.should_push == 'true'
|
||||
shell: bash
|
||||
run: |
|
||||
set -euo pipefail
|
||||
STAGING_REF="${{ env.REGISTRY_DOCKERHUB }}:staging-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}${{ matrix.suffix }}"
|
||||
IFS=',' read -r -a official_tags <<< "${{ steps.meta.outputs.tags }}"
|
||||
for tag in "${official_tags[@]}"; do
|
||||
docker buildx imagetools create -t "$tag" "$STAGING_REF"
|
||||
echo "Promoted $tag -> $STAGING_REF"
|
||||
done
|
||||
|
||||
# Downstream consumers (Helm) verify this record instead of inheriting
|
||||
# an unverified wrapper's conclusion.
|
||||
- name: Record image promotion
|
||||
if: needs.build-check.outputs.should_push == 'true'
|
||||
shell: bash
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.RELEASE_VALIDATION_TOKEN || github.token }}
|
||||
TRIGGERING_RUN_ID: ${{ github.event.workflow_run.id }}
|
||||
VERSION: ${{ needs.build-check.outputs.version }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
mkdir -p certification
|
||||
run_id="$TRIGGERING_RUN_ID"
|
||||
if [[ -z "$run_id" ]]; then
|
||||
run_id="$(gh api --method GET \
|
||||
"repos/${GITHUB_REPOSITORY}/actions/workflows/build.yml/runs" \
|
||||
-f branch="$VERSION" -f status=success -F per_page=1 \
|
||||
--jq '.workflow_runs[0].id // empty' || true)"
|
||||
fi
|
||||
gh run download "$run_id" -n release-certification -D certification
|
||||
STAGING_REF="${{ env.REGISTRY_DOCKERHUB }}:staging-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}${{ matrix.suffix }}"
|
||||
digest="$(docker buildx imagetools inspect "$STAGING_REF" --format '{{json .Manifest}}' | jq -r '.digest')"
|
||||
candidate_sha="$(python3 -c "import json,hashlib,sys; sys.path.insert(0,'scripts/release'); import release_gate; print(release_gate.canonical_sha256(json.load(open('certification/candidate.json'))))")"
|
||||
jq -n \
|
||||
--arg version "$VERSION" \
|
||||
--arg digest "$digest" \
|
||||
--arg staging_ref "$STAGING_REF" \
|
||||
--arg candidate_sha256 "$candidate_sha" \
|
||||
--arg tags "${{ steps.meta.outputs.tags }}" \
|
||||
--slurpfile candidate certification/candidate.json \
|
||||
'{schema_version: 1, version: $version, image_digest: $digest, staging_ref: $staging_ref,
|
||||
promoted_tags: ($tags | split(",")), candidate_sha256: $candidate_sha256,
|
||||
binary_sha256s: ($candidate[0].deliverables | map(.binary_sha256) | unique)}' \
|
||||
> image-promotion-record.json
|
||||
|
||||
- name: Upload image promotion record
|
||||
if: needs.build-check.outputs.should_push == 'true'
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: image-promotion-record${{ matrix.suffix }}
|
||||
path: image-promotion-record.json
|
||||
if-no-files-found: error
|
||||
retention-days: 30
|
||||
|
||||
# Note: Manifest creation is no longer needed as we only build one variant
|
||||
# Multi-arch manifests are automatically created by docker/build-push-action
|
||||
|
||||
|
||||
@@ -30,102 +30,9 @@ permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
# Consume the same trusted release certification as every other publication
|
||||
# exit and verify the image promotion record of the Docker workflow. The
|
||||
# chart wraps no binary of its own, so it may only reference an image whose
|
||||
# platform verification already passed; it must not inherit an unverified
|
||||
# package's conclusion. A run without that evidence fails closed here and
|
||||
# never reaches the chart repository.
|
||||
release-certification:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 30
|
||||
permissions:
|
||||
contents: read
|
||||
actions: read
|
||||
outputs:
|
||||
version: ${{ steps.version.outputs.raw_tag }}
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@f548e57e544e1ff5a4c46bf1e1b8685f8e4a348a # v7
|
||||
with:
|
||||
persist-credentials: false
|
||||
|
||||
- name: Normalize release version
|
||||
id: version
|
||||
env:
|
||||
RAW_INPUT: ${{ github.event.inputs.version }}
|
||||
RAW_BRANCH: ${{ github.event.workflow_run.head_branch }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
|
||||
RAW="$RAW_INPUT"
|
||||
else
|
||||
RAW="$RAW_BRANCH"
|
||||
fi
|
||||
case "$RAW" in
|
||||
refs/tags/*) RAW_TAG="${RAW#refs/tags/}" ;;
|
||||
*) RAW_TAG="$RAW" ;;
|
||||
esac
|
||||
echo "raw_tag=$RAW_TAG" >> "$GITHUB_OUTPUT"
|
||||
|
||||
- name: Download and verify release certification and image record
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.RELEASE_VALIDATION_TOKEN || github.token }}
|
||||
TRIGGERING_RUN_ID: ${{ github.event.workflow_run.id }}
|
||||
RAW_TAG: ${{ steps.version.outputs.raw_tag }}
|
||||
shell: bash
|
||||
run: |
|
||||
set -euo pipefail
|
||||
mkdir -p certification image-record
|
||||
|
||||
build_run="$TRIGGERING_RUN_ID"
|
||||
if [[ -z "$build_run" ]]; then
|
||||
build_run="$(gh api --method GET \
|
||||
"repos/${GITHUB_REPOSITORY}/actions/workflows/build.yml/runs" \
|
||||
-f branch="$RAW_TAG" -f status=success -F per_page=1 \
|
||||
--jq '.workflow_runs[0].id // empty' || true)"
|
||||
fi
|
||||
if [[ -z "$build_run" ]]; then
|
||||
echo "No certified Build and Release run found for ${RAW_TAG}; failing closed" >&2
|
||||
exit 1
|
||||
fi
|
||||
if ! gh run download "$build_run" -n release-certification -D certification; then
|
||||
echo "Build run ${build_run} published no release-certification artifact; failing closed" >&2
|
||||
exit 1
|
||||
fi
|
||||
python3 scripts/release/release_gate.py verify-promotion \
|
||||
--plan .config/release-validation-plan.json \
|
||||
--candidate certification/candidate.json \
|
||||
--summary certification/release-gate-output \
|
||||
--artifact-sha256 "$(jq -r '.deliverables[0].sha256' certification/candidate.json)" \
|
||||
--artifact-name "$(jq -r '.deliverables[0].name' certification/candidate.json)"
|
||||
|
||||
docker_run="$(gh api --method GET \
|
||||
"repos/${GITHUB_REPOSITORY}/actions/workflows/docker.yml/runs" \
|
||||
-f branch="$RAW_TAG" -f status=success -F per_page=1 \
|
||||
--jq '.workflow_runs[0].id // empty' || true)"
|
||||
if [[ -z "$docker_run" ]] || ! gh run download "$docker_run" -n image-promotion-record -D image-record; then
|
||||
echo "No image promotion record for ${RAW_TAG}; a chart may not wrap an unverified image" >&2
|
||||
exit 1
|
||||
fi
|
||||
candidate_sha="$(python3 -c "import json,hashlib,sys; sys.path.insert(0,'scripts/release'); import release_gate; print(release_gate.canonical_sha256(json.load(open('certification/candidate.json'))))")"
|
||||
record_sha="$(jq -r '.candidate_sha256 // empty' image-record/image-promotion-record.json)"
|
||||
if [[ "$record_sha" != "$candidate_sha" ]]; then
|
||||
echo "Image promotion record does not belong to this certification" >&2
|
||||
exit 1
|
||||
fi
|
||||
overlap="$(jq -r --slurpfile candidate certification/candidate.json \
|
||||
'[.binary_sha256s[]] - ($candidate[0].deliverables | map(.binary_sha256)) | length' \
|
||||
image-record/image-promotion-record.json)"
|
||||
if [[ "$overlap" -ne 0 ]]; then
|
||||
echo "Image promotion record carries binary digests outside the certification" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
build-helm-package:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 30
|
||||
needs: [ release-certification ]
|
||||
if: |
|
||||
(github.event_name == 'workflow_dispatch' && !contains(github.event.inputs.version, '-preview')) ||
|
||||
(
|
||||
|
||||
+14
-210
@@ -225,57 +225,10 @@ jobs:
|
||||
echo " Build run ID: $BUILD_RUN_ID"
|
||||
echo " Build run number: $RUN_NUMBER"
|
||||
|
||||
# Consume the trusted release certification of the resolved build run and
|
||||
# verify the certified input digests before any package is wrapped. A run
|
||||
# without that certification fails closed here; packages built later must
|
||||
# complete their own verification and cannot inherit an unverified
|
||||
# conclusion.
|
||||
release-certification:
|
||||
name: Release Certification
|
||||
needs: resolve
|
||||
if: needs.resolve.result == 'success'
|
||||
runs-on: ubuntu-latest # gh CLI required; the sm-standard-2 fleet does not ship it
|
||||
timeout-minutes: 30
|
||||
permissions:
|
||||
contents: read
|
||||
actions: read
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@f548e57e544e1ff5a4c46bf1e1b8685f8e4a348a # v7
|
||||
with:
|
||||
persist-credentials: false
|
||||
|
||||
- name: Download and verify release certification
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.RELEASE_VALIDATION_TOKEN || github.token }}
|
||||
BUILD_RUN_ID: ${{ needs.resolve.outputs.build_run_id }}
|
||||
BUILD_TYPE: ${{ needs.resolve.outputs.build_type }}
|
||||
shell: bash
|
||||
run: |
|
||||
set -euo pipefail
|
||||
mkdir -p certification
|
||||
if [[ "$BUILD_TYPE" == "development" ]]; then
|
||||
# Development artifacts are explicitly uncertified and never touch
|
||||
# official or latest channels; only the staging/dev paths remain.
|
||||
jq -n '{schema_version: 1, certified: false, reason: "development artifacts are explicitly uncertified"}' \
|
||||
> certification/development-uncertified.json
|
||||
exit 0
|
||||
fi
|
||||
if ! gh run download "$BUILD_RUN_ID" -n release-certification -D certification; then
|
||||
echo "Build run ${BUILD_RUN_ID} published no release-certification artifact; failing closed" >&2
|
||||
exit 1
|
||||
fi
|
||||
python3 scripts/release/release_gate.py verify-promotion \
|
||||
--plan .config/release-validation-plan.json \
|
||||
--candidate certification/candidate.json \
|
||||
--summary certification/release-gate-output \
|
||||
--artifact-sha256 "$(jq -r '.deliverables[0].sha256' certification/candidate.json)" \
|
||||
--artifact-name "$(jq -r '.deliverables[0].name' certification/candidate.json)"
|
||||
|
||||
# Build DEB and RPM packages for each architecture and libc variant
|
||||
package:
|
||||
name: Package (${{ matrix.arch }}-${{ matrix.libc }})
|
||||
needs: [ resolve, release-certification ]
|
||||
needs: resolve
|
||||
runs-on: ubuntu-latest # gh CLI required; the sm-standard-2 fleet does not ship it
|
||||
timeout-minutes: 30
|
||||
strategy:
|
||||
@@ -541,55 +494,6 @@ jobs:
|
||||
echo "rpm_file=$RPM_FILE" >> "$GITHUB_OUTPUT"
|
||||
echo "✅ RPM built: $RPM_FILE"
|
||||
|
||||
- name: Download certification evidence
|
||||
if: needs.resolve.outputs.build_type != 'development'
|
||||
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
|
||||
with:
|
||||
name: release-certification
|
||||
path: ./certification
|
||||
|
||||
# Later-built wrapper verification: the binary inside each package must
|
||||
# match the certified binary digest for this platform before anything is
|
||||
# uploaded, and the package itself stays on staging until promotion.
|
||||
- name: Verify wrapped binary against certification
|
||||
if: needs.resolve.outputs.build_type != 'development'
|
||||
shell: bash
|
||||
env:
|
||||
DEB_FILE: ${{ steps.deb.outputs.deb_file }}
|
||||
RPM_FILE: ${{ steps.rpm.outputs.rpm_file }}
|
||||
ARTIFACT_NAME: ${{ matrix.artifact_name }}
|
||||
run: |
|
||||
set -euo pipefail
|
||||
expected="$(jq -r --arg needle "$ARTIFACT_NAME" \
|
||||
'[.deliverables[] | select(.name | contains($needle)) | .binary_sha256][0] // empty' \
|
||||
certification/candidate.json)"
|
||||
if [[ -z "$expected" ]]; then
|
||||
echo "No certified binary digest recorded for ${ARTIFACT_NAME}" >&2
|
||||
exit 1
|
||||
fi
|
||||
if ! command -v rpm2cpio >/dev/null 2>&1; then
|
||||
sudo apt-get update && sudo apt-get install -y rpm2cpio
|
||||
fi
|
||||
if ! command -v cpio >/dev/null 2>&1; then
|
||||
sudo apt-get update && sudo apt-get install -y cpio
|
||||
fi
|
||||
for package_file in "$DEB_FILE" "$RPM_FILE"; do
|
||||
case "$package_file" in
|
||||
*.deb)
|
||||
dpkg-deb --fsys-tarfile "$package_file" | tar -xOf - ./usr/bin/rustfs > "$RUNNER_TEMP/wrapped-rustfs"
|
||||
;;
|
||||
*.rpm)
|
||||
rpm2cpio "$package_file" | cpio -i --to-stdout ./usr/bin/rustfs > "$RUNNER_TEMP/wrapped-rustfs"
|
||||
;;
|
||||
esac
|
||||
python3 scripts/release/release_gate.py verify-promotion \
|
||||
--plan .config/release-validation-plan.json \
|
||||
--candidate certification/candidate.json \
|
||||
--summary certification/release-gate-output \
|
||||
--artifact "$RUNNER_TEMP/wrapped-rustfs" \
|
||||
--artifact-role binary
|
||||
done
|
||||
|
||||
- name: Upload packages to artifacts
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
@@ -627,14 +531,10 @@ jobs:
|
||||
export AWS_SECRET_ACCESS_KEY="$R2_SECRET_ACCESS_KEY"
|
||||
export AWS_DEFAULT_REGION="auto"
|
||||
|
||||
# Build-phase writes stay on staging for release types: the official
|
||||
# packages/release and packages/latest paths are written only by the
|
||||
# certification-gated promote-packages job, from these same staged
|
||||
# objects. Development packages keep the uncertified dev channel.
|
||||
if [[ "$BUILD_TYPE" == "development" ]]; then
|
||||
R2_PREFIX="artifacts/rustfs/packages/dev"
|
||||
else
|
||||
R2_PREFIX="artifacts/rustfs/packages/staging/${GITHUB_RUN_ID}/${GITHUB_RUN_ATTEMPT}"
|
||||
R2_PREFIX="artifacts/rustfs/packages/release"
|
||||
fi
|
||||
R2_PATH="s3://${R2_BUCKET}/${R2_PREFIX}/"
|
||||
|
||||
@@ -649,6 +549,18 @@ jobs:
|
||||
|
||||
echo "✅ Upload complete"
|
||||
|
||||
# Also upload as latest for release/prerelease
|
||||
if [[ "$BUILD_TYPE" == "release" || "$BUILD_TYPE" == "prerelease" ]]; then
|
||||
LATEST_PATH="s3://${R2_BUCKET}/artifacts/rustfs/packages/latest/"
|
||||
for f in "$DEB_FILE" "$RPM_FILE"; do
|
||||
if [[ -n "$f" && -f "$f" ]]; then
|
||||
echo "Uploading latest: $(basename "$f")"
|
||||
aws s3 cp "$f" "$LATEST_PATH" --endpoint-url "$R2_ENDPOINT" --only-show-errors
|
||||
fi
|
||||
done
|
||||
echo "✅ Latest packages updated"
|
||||
fi
|
||||
|
||||
- name: Upload packages to GitHub Release
|
||||
if: needs.resolve.outputs.tag != ''
|
||||
env:
|
||||
@@ -702,114 +614,6 @@ jobs:
|
||||
|
||||
echo "✅ GitHub release assets updated"
|
||||
|
||||
# The only writer of the official packages/release and packages/latest R2
|
||||
# paths. Promotion re-checks each package's wrapped binary against the
|
||||
# passed certification list and copies the staged objects byte-for-byte:
|
||||
# no rebuild-after-verify, no mutable latest resolution downstream.
|
||||
promote-packages:
|
||||
name: Promote Packages
|
||||
needs: [ resolve, package, release-certification ]
|
||||
# Target-channel lock for the official package paths.
|
||||
concurrency:
|
||||
group: release-channel-r2-packages
|
||||
cancel-in-progress: false
|
||||
if: needs.resolve.outputs.tag != '' && (needs.resolve.outputs.build_type == 'release' || needs.resolve.outputs.build_type == 'prerelease')
|
||||
runs-on: ubuntu-latest # gh CLI required; the sm-standard-2 fleet does not ship it
|
||||
timeout-minutes: 30
|
||||
permissions:
|
||||
contents: read
|
||||
actions: read
|
||||
env:
|
||||
R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }}
|
||||
R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
|
||||
R2_ENDPOINT: ${{ secrets.R2_ENDPOINT }}
|
||||
R2_BUCKET: ${{ secrets.R2_BUCKET }}
|
||||
AWS_EC2_METADATA_DISABLED: true
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@f548e57e544e1ff5a4c46bf1e1b8685f8e4a348a # v7
|
||||
with:
|
||||
persist-credentials: false
|
||||
|
||||
- name: Download packages and certification
|
||||
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
|
||||
with:
|
||||
path: ./packages
|
||||
pattern: packages-*
|
||||
merge-multiple: true
|
||||
|
||||
- name: Download certification evidence
|
||||
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
|
||||
with:
|
||||
name: release-certification
|
||||
path: ./certification
|
||||
|
||||
- name: Verify and promote staged packages
|
||||
shell: bash
|
||||
run: |
|
||||
set -euo pipefail
|
||||
|
||||
if [[ -z "$R2_ACCESS_KEY_ID" || -z "$R2_SECRET_ACCESS_KEY" || -z "$R2_ENDPOINT" || -z "$R2_BUCKET" ]]; then
|
||||
echo "❌ R2 credentials missing; refusing to promote to the official channel" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
STAGING_PREFIX="s3://${R2_BUCKET}/artifacts/rustfs/packages/staging/${GITHUB_RUN_ID}/${GITHUB_RUN_ATTEMPT}/"
|
||||
RELEASE_PATH="s3://${R2_BUCKET}/artifacts/rustfs/packages/release/"
|
||||
LATEST_PATH="s3://${R2_BUCKET}/artifacts/rustfs/packages/latest/"
|
||||
|
||||
if ! command -v aws >/dev/null 2>&1; then
|
||||
sudo apt-get update && sudo apt-get install -y awscli
|
||||
fi
|
||||
export AWS_ACCESS_KEY_ID="$R2_ACCESS_KEY_ID"
|
||||
export AWS_SECRET_ACCESS_KEY="$R2_SECRET_ACCESS_KEY"
|
||||
export AWS_DEFAULT_REGION="auto"
|
||||
|
||||
if ! command -v rpm2cpio >/dev/null 2>&1; then
|
||||
sudo apt-get install -y rpm2cpio
|
||||
fi
|
||||
if ! command -v cpio >/dev/null 2>&1; then
|
||||
sudo apt-get install -y cpio
|
||||
fi
|
||||
|
||||
promoted=0
|
||||
for package_file in packages/*.deb packages/*.rpm; do
|
||||
[[ -f "$package_file" ]] || continue
|
||||
name="$(basename "$package_file")"
|
||||
case "$package_file" in
|
||||
*.deb)
|
||||
dpkg-deb --fsys-tarfile "$package_file" | tar -xOf - ./usr/bin/rustfs > "$RUNNER_TEMP/wrapped-rustfs"
|
||||
;;
|
||||
*.rpm)
|
||||
rpm2cpio "$package_file" | cpio -i --to-stdout ./usr/bin/rustfs > "$RUNNER_TEMP/wrapped-rustfs"
|
||||
;;
|
||||
esac
|
||||
python3 scripts/release/release_gate.py verify-promotion \
|
||||
--plan .config/release-validation-plan.json \
|
||||
--candidate certification/candidate.json \
|
||||
--summary certification/release-gate-output \
|
||||
--artifact "$RUNNER_TEMP/wrapped-rustfs" \
|
||||
--artifact-role binary
|
||||
|
||||
staged="$(mktemp)"
|
||||
aws s3 cp "${STAGING_PREFIX}${name}" "$staged" --endpoint-url "$R2_ENDPOINT" --only-show-errors
|
||||
staged_sha="$(sha256sum "$staged" | awk '{print $1}')"
|
||||
built_sha="$(sha256sum "$package_file" | awk '{print $1}')"
|
||||
if [[ "$staged_sha" != "$built_sha" ]]; then
|
||||
echo "❌ Staged package ${name} does not match the verified bytes" >&2
|
||||
exit 1
|
||||
fi
|
||||
aws s3 cp "$staged" "${RELEASE_PATH}${name}" --endpoint-url "$R2_ENDPOINT" --only-show-errors
|
||||
aws s3 cp "$staged" "${LATEST_PATH}${name}" --endpoint-url "$R2_ENDPOINT" --only-show-errors
|
||||
rm -f "$staged"
|
||||
promoted=$((promoted + 1))
|
||||
echo "✅ Promoted ${name} (${built_sha})"
|
||||
done
|
||||
if [[ "$promoted" -eq 0 ]]; then
|
||||
echo "No staged packages found to promote" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Summary
|
||||
summary:
|
||||
name: Summary
|
||||
|
||||
@@ -16,193 +16,8 @@
|
||||
mod tests {
|
||||
use crate::common::{RustFSTestEnvironment, init_logging};
|
||||
use aws_sdk_s3::Client;
|
||||
use aws_sdk_s3::config::http::HttpResponse;
|
||||
use aws_sdk_s3::error::{ProvideErrorMetadata, SdkError};
|
||||
use aws_sdk_s3::primitives::ByteStream;
|
||||
use aws_sdk_s3::types::{BucketVersioningStatus, CompletedMultipartUpload, CompletedPart, VersioningConfiguration};
|
||||
|
||||
fn assert_not_found<E: ProvideErrorMetadata + std::fmt::Debug>(error: &SdkError<E, HttpResponse>) {
|
||||
assert_eq!(error.raw_response().map(|r| r.status().as_u16()), Some(404), "{error:?}");
|
||||
assert_eq!(
|
||||
error.as_service_error().and_then(ProvideErrorMetadata::code),
|
||||
Some("NoSuchKey"),
|
||||
"{error:?}"
|
||||
);
|
||||
}
|
||||
|
||||
#[tokio::test]
|
||||
async fn conditional_writes_cannot_replace_delete_marker_with_if_match() {
|
||||
init_logging();
|
||||
let mut env = RustFSTestEnvironment::new().await.expect("create test environment");
|
||||
env.start_rustfs_server(vec![]).await.expect("start RustFS");
|
||||
let client = env.create_s3_client();
|
||||
let bucket = "conditional-delete-marker-proof";
|
||||
create_versioned_bucket(&client, bucket).await;
|
||||
client
|
||||
.put_object()
|
||||
.bucket(bucket)
|
||||
.key("source")
|
||||
.body(ByteStream::from_static(b"source"))
|
||||
.send()
|
||||
.await
|
||||
.expect("write copy source");
|
||||
|
||||
for operation in ["put", "copy", "multipart"] {
|
||||
let old = client
|
||||
.put_object()
|
||||
.bucket(bucket)
|
||||
.key(operation)
|
||||
.body(ByteStream::from_static(b"old"))
|
||||
.send()
|
||||
.await
|
||||
.expect("write historical version");
|
||||
let old_etag = old.e_tag().expect("historical ETag");
|
||||
let marker = client
|
||||
.delete_object()
|
||||
.bucket(bucket)
|
||||
.key(operation)
|
||||
.send()
|
||||
.await
|
||||
.expect("create delete marker");
|
||||
let marker_id = marker.version_id().expect("delete marker version");
|
||||
|
||||
let (upload_id, completed) = if operation == "multipart" {
|
||||
let upload = client
|
||||
.create_multipart_upload()
|
||||
.bucket(bucket)
|
||||
.key(operation)
|
||||
.send()
|
||||
.await
|
||||
.expect("initiate multipart upload");
|
||||
let upload_id = upload.upload_id().expect("upload ID").to_owned();
|
||||
let part = client
|
||||
.upload_part()
|
||||
.bucket(bucket)
|
||||
.key(operation)
|
||||
.upload_id(&upload_id)
|
||||
.part_number(1)
|
||||
.body(ByteStream::from_static(b"new"))
|
||||
.send()
|
||||
.await
|
||||
.expect("upload part");
|
||||
let completed = CompletedMultipartUpload::builder()
|
||||
.parts(
|
||||
CompletedPart::builder()
|
||||
.part_number(1)
|
||||
.set_e_tag(part.e_tag().map(str::to_owned))
|
||||
.build(),
|
||||
)
|
||||
.build();
|
||||
(Some(upload_id), Some(completed))
|
||||
} else {
|
||||
(None, None)
|
||||
};
|
||||
|
||||
for etag in [old_etag, "\"00000000000000000000000000000000\""] {
|
||||
match operation {
|
||||
"put" => {
|
||||
let err = client
|
||||
.put_object()
|
||||
.bucket(bucket)
|
||||
.key(operation)
|
||||
.if_match(etag)
|
||||
.body(ByteStream::from_static(b"new"))
|
||||
.send()
|
||||
.await
|
||||
.expect_err("If-Match must reject marker");
|
||||
assert_not_found(&err);
|
||||
}
|
||||
"copy" => {
|
||||
let err = client
|
||||
.copy_object()
|
||||
.bucket(bucket)
|
||||
.key(operation)
|
||||
.copy_source(format!("{bucket}/source"))
|
||||
.if_match(etag)
|
||||
.send()
|
||||
.await
|
||||
.expect_err("If-Match copy must reject marker");
|
||||
assert_not_found(&err);
|
||||
}
|
||||
_ => {
|
||||
let err = client
|
||||
.complete_multipart_upload()
|
||||
.bucket(bucket)
|
||||
.key(operation)
|
||||
.upload_id(upload_id.as_deref().expect("upload ID"))
|
||||
.multipart_upload(completed.clone().expect("completed parts"))
|
||||
.if_match(etag)
|
||||
.send()
|
||||
.await
|
||||
.expect_err("If-Match completion must reject marker");
|
||||
assert_not_found(&err);
|
||||
}
|
||||
}
|
||||
let versions = client
|
||||
.list_object_versions()
|
||||
.bucket(bucket)
|
||||
.prefix(operation)
|
||||
.send()
|
||||
.await
|
||||
.expect("list versions after rejected write");
|
||||
assert_eq!(versions.versions().len(), 1, "{operation}: failed write created a version");
|
||||
assert_eq!(versions.delete_markers().len(), 1);
|
||||
assert_eq!(versions.delete_markers()[0].version_id(), Some(marker_id));
|
||||
assert_eq!(versions.delete_markers()[0].is_latest(), Some(true));
|
||||
}
|
||||
|
||||
match operation {
|
||||
"put" => {
|
||||
client
|
||||
.put_object()
|
||||
.bucket(bucket)
|
||||
.key(operation)
|
||||
.if_none_match("*")
|
||||
.body(ByteStream::from_static(b"new"))
|
||||
.send()
|
||||
.await
|
||||
.expect("If-None-Match PUT over marker");
|
||||
}
|
||||
"copy" => {
|
||||
client
|
||||
.copy_object()
|
||||
.bucket(bucket)
|
||||
.key(operation)
|
||||
.copy_source(format!("{bucket}/source"))
|
||||
.if_none_match("*")
|
||||
.send()
|
||||
.await
|
||||
.expect("If-None-Match copy over marker");
|
||||
}
|
||||
_ => {
|
||||
client
|
||||
.complete_multipart_upload()
|
||||
.bucket(bucket)
|
||||
.key(operation)
|
||||
.upload_id(upload_id.as_deref().expect("upload ID"))
|
||||
.multipart_upload(completed.expect("completed parts"))
|
||||
.if_none_match("*")
|
||||
.send()
|
||||
.await
|
||||
.expect("If-None-Match completion over marker");
|
||||
}
|
||||
}
|
||||
let current = client
|
||||
.get_object()
|
||||
.bucket(bucket)
|
||||
.key(operation)
|
||||
.send()
|
||||
.await
|
||||
.expect("read successful conditional write")
|
||||
.body
|
||||
.collect()
|
||||
.await
|
||||
.expect("read object body")
|
||||
.into_bytes();
|
||||
let expected: &[u8] = if operation == "copy" { b"source" } else { b"new" };
|
||||
assert_eq!(current.as_ref(), expected, "{operation}: unexpected current object");
|
||||
}
|
||||
}
|
||||
use aws_sdk_s3::types::{BucketVersioningStatus, VersioningConfiguration};
|
||||
|
||||
async fn create_versioned_bucket(client: &Client, bucket: &str) {
|
||||
client
|
||||
|
||||
@@ -2146,4 +2146,3 @@ mod tests {
|
||||
);
|
||||
}
|
||||
}
|
||||
// event-drill: isolated harness-only change
|
||||
|
||||
@@ -1901,15 +1901,6 @@ impl BucketMetadataSys {
|
||||
self.api.upgrade()
|
||||
}
|
||||
|
||||
/// Whether the backing `ECStore` has been dropped.
|
||||
///
|
||||
/// Used by `InstanceContext::clear_bucket_metadata_sys_if_stale` during
|
||||
/// `ECStore::drop` so a shared bootstrap context does not retain a
|
||||
/// `BucketMetadataSys` whose weak handle is dangling.
|
||||
pub(crate) fn is_store_stale(&self) -> bool {
|
||||
self.api.upgrade().is_none()
|
||||
}
|
||||
|
||||
fn metadata_publish_lock(&self, bucket: &str) -> Arc<Mutex<MetadataPublishLockState>> {
|
||||
Self::bucket_lock_in(&self.metadata_publish_locks, bucket)
|
||||
}
|
||||
|
||||
@@ -941,32 +941,6 @@ impl InstanceContext {
|
||||
.clone()
|
||||
}
|
||||
|
||||
/// Remove the `BucketMetadataSys` when its backing `ECStore` is gone.
|
||||
///
|
||||
/// Called from `ECStore::drop`. When test fixtures share the bootstrap
|
||||
/// context, the `BucketMetadataSys` stores a `Weak<ECStore>` to prevent a
|
||||
/// reference cycle; once the store drops the weak is dangling and any
|
||||
/// `object_store()` call panics. Clearing the slot here lets the next
|
||||
/// fixture install a fresh `BucketMetadataSys` without hitting the stale one.
|
||||
pub fn clear_bucket_metadata_sys_if_stale(&self) {
|
||||
let mut guard = self.bucket_metadata_sys.lock().expect("bucket_metadata_sys lock poisoned");
|
||||
if let Some(sys) = guard.as_ref() {
|
||||
// `read()` may block briefly; the async RwLock is acceptable here
|
||||
// because Drop is sync and the lock is held only long enough to
|
||||
// check the weak reference.
|
||||
let is_stale = {
|
||||
let s = sys.try_read();
|
||||
match s {
|
||||
Ok(s) => s.is_store_stale(),
|
||||
Err(_) => true, // contended: treat as stale-safe to clear
|
||||
}
|
||||
};
|
||||
if is_stale {
|
||||
*guard = None;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/// Set this instance's background-services cancellation token (once).
|
||||
pub fn init_background_cancel_token(&self, token: CancellationToken) -> Result<(), CancellationToken> {
|
||||
self.background_cancel_token.set(token)
|
||||
|
||||
@@ -6737,7 +6737,9 @@ impl SetDisks {
|
||||
object,
|
||||
);
|
||||
}
|
||||
if should_prevent_write(&oi, http_preconditions.if_none_match_value(), http_preconditions.if_match_value())
|
||||
let if_none_match = http_preconditions.if_none_match_value().map(str::to_owned);
|
||||
let if_match = http_preconditions.if_match_value().map(str::to_owned);
|
||||
if should_prevent_write(&oi, if_none_match, if_match)
|
||||
&& !crate::data_movement::can_replace_stale_data_movement_target(&oi, opts)
|
||||
{
|
||||
return Some(StorageError::PreconditionFailed);
|
||||
|
||||
@@ -120,6 +120,7 @@ use bytesize::ByteSize;
|
||||
use futures::future::join_all;
|
||||
use http::HeaderMap;
|
||||
use md5::{Digest as Md5Digest, Md5};
|
||||
use regex::Regex;
|
||||
use rustfs_config::MI_B;
|
||||
use rustfs_filemeta::metadata_keys;
|
||||
use rustfs_filemeta::{
|
||||
@@ -8035,29 +8036,16 @@ fn parts_after_marker(part_numbers: &[usize], part_number_marker: usize) -> Opti
|
||||
Some(&part_numbers[index..])
|
||||
}
|
||||
|
||||
fn canonicalized_etag(etag: &str) -> Cow<'_, str> {
|
||||
// Preserve the legacy suffix-matching behavior for embedded quotes.
|
||||
let trimmed = etag.trim_end_matches('"');
|
||||
let Some(last_quote) = trimmed.rfind('"') else {
|
||||
return Cow::Borrowed(trimmed);
|
||||
};
|
||||
let prefix = trimmed[..last_quote].trim_end_matches('"');
|
||||
let suffix = &trimmed[last_quote + 1..];
|
||||
if prefix.is_empty() {
|
||||
Cow::Borrowed(suffix)
|
||||
} else {
|
||||
let mut result = String::with_capacity(prefix.len() + suffix.len());
|
||||
result.push_str(prefix);
|
||||
result.push_str(suffix);
|
||||
Cow::Owned(result)
|
||||
}
|
||||
pub fn canonicalize_etag(etag: &str) -> String {
|
||||
let re = Regex::new("\"*?([^\"]*?)\"*?$").unwrap();
|
||||
re.replace_all(etag, "$1").to_string()
|
||||
}
|
||||
|
||||
pub fn e_tag_matches(etag: &str, condition: &str) -> bool {
|
||||
if condition.trim() == "*" {
|
||||
return true;
|
||||
}
|
||||
canonicalized_etag(etag) == canonicalized_etag(condition)
|
||||
canonicalize_etag(etag) == canonicalize_etag(condition)
|
||||
}
|
||||
|
||||
fn weak_etag_matches(etag: &str, condition: &str) -> bool {
|
||||
@@ -8072,12 +8060,15 @@ fn weak_etag_matches(etag: &str, condition: &str) -> bool {
|
||||
.or_else(|| trimmed.strip_prefix("w/"))
|
||||
.unwrap_or(trimmed)
|
||||
}
|
||||
canonicalized_etag(strip_weak(etag)) == canonicalized_etag(strip_weak(condition))
|
||||
canonicalize_etag(strip_weak(etag)) == canonicalize_etag(strip_weak(condition))
|
||||
}
|
||||
|
||||
pub fn should_prevent_write(oi: &ObjectInfo, if_none_match: Option<&str>, if_match: Option<&str>) -> bool {
|
||||
let if_none_match = if_none_match.map(str::trim).filter(|condition| !condition.is_empty());
|
||||
let if_match = if_match.map(str::trim).filter(|condition| !condition.is_empty());
|
||||
pub fn should_prevent_write(oi: &ObjectInfo, if_none_match: Option<String>, if_match: Option<String>) -> bool {
|
||||
let if_none_match = if_none_match
|
||||
.as_deref()
|
||||
.map(str::trim)
|
||||
.filter(|condition| !condition.is_empty());
|
||||
let if_match = if_match.as_deref().map(str::trim).filter(|condition| !condition.is_empty());
|
||||
|
||||
match &oi.etag {
|
||||
Some(etag) => {
|
||||
@@ -13781,22 +13772,6 @@ mod tests {
|
||||
assert!(result2.iter().all(|d| d.is_none()));
|
||||
}
|
||||
|
||||
#[test]
|
||||
fn canonicalized_etag_preserves_legacy_regex_semantics() {
|
||||
let regex = regex::Regex::new("\"*?([^\"]*?)\"*?$").expect("valid legacy ETag pattern");
|
||||
let alphabet = ['a', '"', '\n', 'é', '\0'];
|
||||
for length in 0..=6_u32 {
|
||||
for mut number in 0..alphabet.len().pow(length) {
|
||||
let mut input = String::new();
|
||||
for _ in 0..length {
|
||||
input.push(alphabet[number % alphabet.len()]);
|
||||
number /= alphabet.len();
|
||||
}
|
||||
assert_eq!(canonicalized_etag(&input), regex.replace_all(&input, "$1"), "input: {input:?}");
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
#[test]
|
||||
fn test_etag_matches() {
|
||||
assert!(e_tag_matches("abc", "abc"));
|
||||
@@ -14372,61 +14347,61 @@ mod tests {
|
||||
etag: Some("abc".to_string()),
|
||||
..Default::default()
|
||||
};
|
||||
let if_none_match = Some("abc");
|
||||
let if_none_match = Some("abc".to_string());
|
||||
let if_match = None;
|
||||
assert!(should_prevent_write(&oi, if_none_match, if_match));
|
||||
|
||||
let if_none_match = Some("*");
|
||||
let if_none_match = Some("*".to_string());
|
||||
let if_match = None;
|
||||
assert!(should_prevent_write(&oi, if_none_match, if_match));
|
||||
|
||||
let if_none_match = None;
|
||||
let if_match = Some("def");
|
||||
let if_match = Some("def".to_string());
|
||||
assert!(should_prevent_write(&oi, if_none_match, if_match));
|
||||
|
||||
let if_none_match = None;
|
||||
let if_match = Some("*");
|
||||
let if_match = Some("*".to_string());
|
||||
assert!(!should_prevent_write(&oi, if_none_match, if_match));
|
||||
|
||||
let if_none_match = Some("def");
|
||||
let if_none_match = Some("def".to_string());
|
||||
let if_match = None;
|
||||
assert!(!should_prevent_write(&oi, if_none_match, if_match));
|
||||
|
||||
let if_none_match = Some("def");
|
||||
let if_match = Some("*");
|
||||
let if_none_match = Some("def".to_string());
|
||||
let if_match = Some("*".to_string());
|
||||
assert!(!should_prevent_write(&oi, if_none_match, if_match));
|
||||
|
||||
let if_none_match = Some("def");
|
||||
let if_match = Some("\"abc\"");
|
||||
let if_none_match = Some("def".to_string());
|
||||
let if_match = Some("\"abc\"".to_string());
|
||||
assert!(!should_prevent_write(&oi, if_none_match, if_match));
|
||||
|
||||
let if_none_match = Some("*");
|
||||
let if_match = Some("\"abc\"");
|
||||
let if_none_match = Some("*".to_string());
|
||||
let if_match = Some("\"abc\"".to_string());
|
||||
assert!(should_prevent_write(&oi, if_none_match, if_match));
|
||||
|
||||
let oi = ObjectInfo {
|
||||
etag: None,
|
||||
..Default::default()
|
||||
};
|
||||
let if_none_match = Some("*");
|
||||
let if_match = Some("\"abc\"");
|
||||
let if_none_match = Some("*".to_string());
|
||||
let if_match = Some("\"abc\"".to_string());
|
||||
assert!(should_prevent_write(&oi, if_none_match, if_match));
|
||||
|
||||
let if_none_match = None;
|
||||
let if_match = None;
|
||||
assert!(!should_prevent_write(&oi, if_none_match, if_match));
|
||||
|
||||
let if_none_match = Some("");
|
||||
let if_match = Some(" ");
|
||||
let if_none_match = Some(String::new());
|
||||
let if_match = Some(" ".to_string());
|
||||
assert!(!should_prevent_write(&oi, if_none_match, if_match));
|
||||
|
||||
let oi = ObjectInfo {
|
||||
etag: Some("abc".to_string()),
|
||||
..Default::default()
|
||||
};
|
||||
assert!(should_prevent_write(&oi, Some("W/\"abc\""), None));
|
||||
assert!(!should_prevent_write(&oi, Some("W/\"def\""), None));
|
||||
assert!(should_prevent_write(&oi, None, Some("W/\"abc\"")));
|
||||
assert!(should_prevent_write(&oi, Some("W/\"abc\"".to_string()), None));
|
||||
assert!(!should_prevent_write(&oi, Some("W/\"def\"".to_string()), None));
|
||||
assert!(should_prevent_write(&oi, None, Some("W/\"abc\"".to_string())));
|
||||
}
|
||||
|
||||
#[test]
|
||||
|
||||
@@ -5340,203 +5340,6 @@ mod tests {
|
||||
shutdown.cancel();
|
||||
}
|
||||
|
||||
#[cfg(feature = "test-util")]
|
||||
#[tokio::test]
|
||||
#[serial_test::serial(storage_class_env)]
|
||||
async fn conditional_multipart_must_not_commit_against_an_older_readable_pool() {
|
||||
use crate::storage_api_contracts::multipart::CompletePart;
|
||||
use crate::storage_api_contracts::object::HTTPPreconditions;
|
||||
|
||||
let temp_dir = tempfile::tempdir().expect("create conditional multipart test directory");
|
||||
let (_ctx, store, shutdown) =
|
||||
without_storage_class_env(build_isolated_test_store(temp_dir.path(), "conditional-mpu-unreadable", &[4, 4])).await;
|
||||
crate::bucket::metadata_sys::init_bucket_metadata_sys(store.clone(), Vec::new()).await;
|
||||
let bucket = format!("conditional-mpu-{}", uuid::Uuid::new_v4().simple());
|
||||
let object = "object";
|
||||
store
|
||||
.make_bucket(&bucket, &MakeBucketOptions::default())
|
||||
.await
|
||||
.expect("create conditional multipart test bucket");
|
||||
let mut old_body = PutObjReader::from_vec(b"older-pool".to_vec());
|
||||
let old = store.pools[0]
|
||||
.put_object(
|
||||
&bucket,
|
||||
object,
|
||||
&mut old_body,
|
||||
&ObjectOptions {
|
||||
mod_time: Some(OffsetDateTime::UNIX_EPOCH + time::Duration::seconds(1)),
|
||||
..Default::default()
|
||||
},
|
||||
)
|
||||
.await
|
||||
.expect("write old object to staging pool");
|
||||
let upload = store.pools[0]
|
||||
.new_multipart_upload(&bucket, object, &ObjectOptions::default())
|
||||
.await
|
||||
.expect("create multipart upload in pool 0");
|
||||
let mut part_body = PutObjReader::from_vec(b"stale-writer".to_vec());
|
||||
let part = store.pools[0]
|
||||
.put_object_part(&bucket, object, &upload.upload_id, 1, &mut part_body, &ObjectOptions::default())
|
||||
.await
|
||||
.expect("stage multipart part in pool 0");
|
||||
let mut new_body = PutObjReader::from_vec(b"newer-pool".to_vec());
|
||||
let new = store.pools[1]
|
||||
.put_object(
|
||||
&bucket,
|
||||
object,
|
||||
&mut new_body,
|
||||
&ObjectOptions {
|
||||
mod_time: Some(OffsetDateTime::UNIX_EPOCH + time::Duration::seconds(2)),
|
||||
..Default::default()
|
||||
},
|
||||
)
|
||||
.await
|
||||
.expect("write newer object to pool 1");
|
||||
let old_etag = old.etag.clone().expect("old object must have an ETag");
|
||||
let before = store.get_object_info(&bucket, object, &ObjectOptions::default()).await;
|
||||
|
||||
let mut metadata = Vec::new();
|
||||
for disk_index in 0..4 {
|
||||
let path = temp_dir
|
||||
.path()
|
||||
.join(format!("pool1/set0/disk{disk_index}/{bucket}/{object}/xl.meta"));
|
||||
let original = tokio::fs::read(&path)
|
||||
.await
|
||||
.expect("save original object metadata before fault injection");
|
||||
metadata.push((path, original));
|
||||
}
|
||||
let mut fault_error = None;
|
||||
for (path, _) in &metadata {
|
||||
if let Err(err) = tokio::fs::write(path, b"invalid object metadata").await {
|
||||
fault_error = Some(err);
|
||||
break;
|
||||
}
|
||||
}
|
||||
let mut fault_contents = Vec::new();
|
||||
if fault_error.is_none() {
|
||||
for (path, _) in &metadata {
|
||||
fault_contents.push(tokio::fs::read(path).await);
|
||||
}
|
||||
store.pools[1]
|
||||
.get_disks_by_key(object)
|
||||
.invalidate_get_object_metadata_cache(&bucket, object)
|
||||
.await;
|
||||
}
|
||||
let unreadable = if fault_error.is_none() {
|
||||
Some(
|
||||
store.pools[1]
|
||||
.get_object_info(
|
||||
&bucket,
|
||||
object,
|
||||
&ObjectOptions {
|
||||
no_lock: true,
|
||||
metadata_cache_safe: false,
|
||||
suppress_read_repair: true,
|
||||
..Default::default()
|
||||
},
|
||||
)
|
||||
.await,
|
||||
)
|
||||
} else {
|
||||
None
|
||||
};
|
||||
let completed = if fault_error.is_none() {
|
||||
let completion_store = Arc::clone(&store);
|
||||
let completion_bucket = bucket.clone();
|
||||
let upload_id = upload.upload_id.clone();
|
||||
let part_etag = part.etag.clone();
|
||||
Some(
|
||||
tokio::spawn(async move {
|
||||
completion_store
|
||||
.complete_multipart_upload(
|
||||
&completion_bucket,
|
||||
object,
|
||||
&upload_id,
|
||||
vec![CompletePart {
|
||||
part_num: 1,
|
||||
etag: part_etag,
|
||||
..Default::default()
|
||||
}],
|
||||
&ObjectOptions {
|
||||
http_preconditions: Some(HTTPPreconditions {
|
||||
if_match: Some(old_etag),
|
||||
..Default::default()
|
||||
}),
|
||||
..Default::default()
|
||||
},
|
||||
)
|
||||
.await
|
||||
})
|
||||
.await,
|
||||
)
|
||||
} else {
|
||||
None
|
||||
};
|
||||
let mut restore_error = None;
|
||||
for (path, original) in &metadata {
|
||||
if let Err(err) = tokio::fs::write(path, original).await {
|
||||
restore_error = Some(err);
|
||||
}
|
||||
}
|
||||
store.pools[1]
|
||||
.get_disks_by_key(object)
|
||||
.invalidate_get_object_metadata_cache(&bucket, object)
|
||||
.await;
|
||||
let after = store.get_object_info(&bucket, object, &ObjectOptions::default()).await;
|
||||
let recovered_body = match store
|
||||
.get_object_reader(&bucket, object, None, HeaderMap::new(), &ObjectOptions::default())
|
||||
.await
|
||||
{
|
||||
Ok(mut reader) => {
|
||||
let mut body = Vec::new();
|
||||
let result = reader
|
||||
.read_to_end(&mut body)
|
||||
.await
|
||||
.map(|_| body)
|
||||
.map_err(|err| err.to_string());
|
||||
drop(reader);
|
||||
result
|
||||
}
|
||||
Err(err) => Err(err.to_string()),
|
||||
};
|
||||
let parts = store
|
||||
.list_object_parts(&bucket, object, &upload.upload_id, None, 100, &ObjectOptions::default())
|
||||
.await;
|
||||
shutdown.cancel();
|
||||
|
||||
assert!(fault_error.is_none(), "failed to inject metadata fault: {fault_error:?}");
|
||||
assert!(restore_error.is_none(), "failed to restore metadata: {restore_error:?}");
|
||||
assert_eq!(fault_contents.len(), 4, "all four pool 1 metadata files must be inspected");
|
||||
for observed in fault_contents {
|
||||
assert_eq!(
|
||||
observed.expect("read injected metadata"),
|
||||
b"invalid object metadata",
|
||||
"each pool 1 metadata file must contain the injected corruption"
|
||||
);
|
||||
}
|
||||
assert_eq!(before.expect("latest object before fault").etag, new.etag);
|
||||
assert_ne!(old.etag, new.etag, "fixture bodies must produce different ETags");
|
||||
let read_error = unreadable
|
||||
.expect("metadata fault should have been injected")
|
||||
.expect_err("the newer pool must fail its object metadata read during the fault");
|
||||
assert!(
|
||||
!crate::error::is_err_object_not_found(&read_error) && !crate::error::is_err_version_not_found(&read_error),
|
||||
"corrupt metadata must produce a non-not-found read error: {read_error:?}"
|
||||
);
|
||||
let completed = completed
|
||||
.expect("completion should have been attempted")
|
||||
.expect("completion task should not panic");
|
||||
let Err(completion_error) = completed else {
|
||||
panic!("stale If-Match must not commit while the newer object's metadata is unreadable");
|
||||
};
|
||||
assert_eq!(completion_error, read_error, "completion must propagate the unreadable pool's error");
|
||||
assert_eq!(after.expect("newer object after recovery").etag, new.etag);
|
||||
assert_eq!(recovered_body.expect("newer body after recovery"), b"newer-pool");
|
||||
let parts = parts.expect("failed completion must leave the upload retryable");
|
||||
assert_eq!(parts.parts.len(), 1);
|
||||
assert_eq!(parts.parts[0].etag, part.etag);
|
||||
}
|
||||
|
||||
async fn migrate_versioned_decommission_test_object(
|
||||
store: &Arc<crate::store::ECStore>,
|
||||
bucket: &str,
|
||||
|
||||
@@ -498,17 +498,6 @@ pub struct ECStore {
|
||||
pub(crate) bucket_fence_registry: Arc<bucket_fence::BucketFenceRegistry>,
|
||||
}
|
||||
|
||||
impl Drop for ECStore {
|
||||
/// Clear the instance context's `BucketMetadataSys` when its backing store
|
||||
/// is dropped. Without this, the shared bootstrap context retains a
|
||||
/// `BucketMetadataSys` whose `Weak<ECStore>` is dangling after the store
|
||||
/// goes away (e.g. between sequential test fixtures that share the
|
||||
/// bootstrap), and the next `object_store()` call panics.
|
||||
fn drop(&mut self) {
|
||||
self.ctx.clear_bucket_metadata_sys_if_stale();
|
||||
}
|
||||
}
|
||||
|
||||
const METRIC_SCANNER_DATA_MOVEMENT_PAUSED: &str = "rustfs_scanner_data_movement_paused";
|
||||
const METRIC_SCANNER_DATA_MOVEMENT_PAUSE_DURATION_SECONDS: &str = "rustfs_scanner_data_movement_pause_duration_seconds";
|
||||
const METRIC_SCANNER_DATA_MOVEMENT_BACKLOG_WORK_ITEMS: &str = "rustfs_scanner_data_movement_backlog_work_items";
|
||||
|
||||
@@ -612,7 +612,7 @@ impl ECStore {
|
||||
}
|
||||
if opts.http_preconditions.is_some()
|
||||
&& !opts.data_movement
|
||||
&& let Some(err) = self.check_write_precondition(bucket, object, &opts, false).await
|
||||
&& let Some(err) = self.check_write_precondition(bucket, object, &opts).await
|
||||
{
|
||||
return Err(err);
|
||||
}
|
||||
@@ -1154,33 +1154,12 @@ impl ECStore {
|
||||
Ok(())
|
||||
}
|
||||
|
||||
async fn check_write_precondition(
|
||||
&self,
|
||||
bucket: &str,
|
||||
object: &str,
|
||||
opts: &ObjectOptions,
|
||||
require_all_pools: bool,
|
||||
) -> Option<StorageError> {
|
||||
async fn check_write_precondition(&self, bucket: &str, object: &str, opts: &ObjectOptions) -> Option<StorageError> {
|
||||
let mut lookup_opts = opts.clone();
|
||||
let http_preconditions = lookup_opts.http_preconditions?;
|
||||
lookup_opts.http_preconditions = None;
|
||||
lookup_opts.no_lock = true;
|
||||
let oi = if require_all_pools {
|
||||
lookup_opts.metadata_cache_safe = false;
|
||||
lookup_opts.suppress_read_repair = true;
|
||||
if let Err(err) = check_object_args(bucket, object) {
|
||||
return Some(err);
|
||||
}
|
||||
let encoded_object = encode_dir_object(object);
|
||||
self.get_latest_object_info_for_conditional_write(bucket, &encoded_object, &lookup_opts)
|
||||
.await
|
||||
.and_then(|(info, _)| {
|
||||
lookup_opts.precondition_check(&info)?;
|
||||
Ok(info)
|
||||
})
|
||||
} else {
|
||||
self.get_object_info_for_delete(bucket, object, &lookup_opts).await
|
||||
};
|
||||
let oi = self.get_object_info_for_delete(bucket, object, &lookup_opts).await;
|
||||
crate::set_disk::SetDisks::evaluate_write_precondition(oi, &http_preconditions, bucket, object, opts)
|
||||
}
|
||||
|
||||
@@ -1207,13 +1186,11 @@ impl ECStore {
|
||||
.await;
|
||||
return enqueue_transition_after_write(self.as_ref(), result, LcEventSrc::S3CompleteMultipartUpload, opts).await;
|
||||
}
|
||||
if opts.http_preconditions.is_some() && !opts.data_movement {
|
||||
// Preserve explicitly scoped internal reads and borrowed-lock callers.
|
||||
let require_all_pools =
|
||||
!opts.replication_request && !opts.no_lock && !opts.skip_decommissioned && !opts.skip_rebalancing;
|
||||
if let Some(err) = self.check_write_precondition(bucket, object, opts, require_all_pools).await {
|
||||
return Err(err);
|
||||
}
|
||||
if opts.http_preconditions.is_some()
|
||||
&& !opts.data_movement
|
||||
&& let Some(err) = self.check_write_precondition(bucket, object, opts).await
|
||||
{
|
||||
return Err(err);
|
||||
}
|
||||
|
||||
let result = match self.multipart_upload_pool_idx(bucket, object, upload_id, opts).await {
|
||||
|
||||
@@ -837,29 +837,7 @@ impl ECStore {
|
||||
object: &str,
|
||||
opts: &ObjectOptions,
|
||||
) -> Result<(ObjectInfo, usize)> {
|
||||
self.get_latest_object_info_with_pool_policy(bucket, object, opts, false)
|
||||
.await
|
||||
}
|
||||
|
||||
/// Observe every pool for a conditional-write preflight. This does not
|
||||
/// hold the namespace locks needed to prove a condition at publication.
|
||||
pub(super) async fn get_latest_object_info_for_conditional_write(
|
||||
&self,
|
||||
bucket: &str,
|
||||
object: &str,
|
||||
opts: &ObjectOptions,
|
||||
) -> Result<(ObjectInfo, usize)> {
|
||||
self.get_latest_object_info_with_pool_policy(bucket, object, opts, true).await
|
||||
}
|
||||
|
||||
async fn get_latest_object_info_with_pool_policy(
|
||||
&self,
|
||||
bucket: &str,
|
||||
object: &str,
|
||||
opts: &ObjectOptions,
|
||||
require_all_pools: bool,
|
||||
) -> Result<(ObjectInfo, usize)> {
|
||||
let suspended_pools = if opts.skip_decommissioned && !require_all_pools {
|
||||
let suspended_pools = if opts.skip_decommissioned {
|
||||
let pool_meta = self.pool_meta.read().await;
|
||||
Some(
|
||||
(0..self.pools.len())
|
||||
@@ -875,7 +853,7 @@ impl ECStore {
|
||||
continue;
|
||||
}
|
||||
|
||||
if opts.skip_rebalancing && !require_all_pools && self.is_pool_rebalancing(idx).await {
|
||||
if opts.skip_rebalancing && self.is_pool_rebalancing(idx).await {
|
||||
continue;
|
||||
}
|
||||
|
||||
@@ -895,9 +873,6 @@ impl ECStore {
|
||||
});
|
||||
}
|
||||
Err(e) => {
|
||||
if require_all_pools && !is_err_object_not_found(&e) && !is_err_version_not_found(&e) {
|
||||
return Err(e);
|
||||
}
|
||||
candidates.push(LatestObjectInfoCandidate {
|
||||
info: None,
|
||||
idx,
|
||||
|
||||
@@ -33,8 +33,8 @@ Run URLs are `https://github.com/rustfs/rustfs/actions/runs/<id>`. Re-open the r
|
||||
| `workflow_dispatch` | manual full validation | [41152382212](https://github.com/rustfs/rustfs/actions/runs/41152382212) | full suite set ran and the aggregate accepted the complete plan (85 min) |
|
||||
| `workflow_run` | `Scheduled Validation Watchdog` | [41161431618](https://github.com/rustfs/rustfs/actions/runs/41161431618) | independent filter/monitor path executed against the registry |
|
||||
| `merge_group` | first queued candidate after queue enablement | see below | live evidence attached after the first queue entry completes |
|
||||
| Documentation-only PR | PR #9088, this document's own PR | [41162871854](https://github.com/rustfs/rustfs/actions/runs/41162871854) | `docs` mode: `Select CI scope` recorded `mode: docs`; `Test and Lint` accepted in 8 s with every expensive job required **skipped** |
|
||||
| Isolated E2E PR | PR #9089, comment-only change under `crates/e2e_test/src/` | [41163203959](https://github.com/rustfs/rustfs/actions/runs/41163203959) | `e2e` mode: Connect boundary, serial ILM, rio-v2/protocol lanes and real io_uring required **skipped**; workspace build, E2E and both S3 lanes retained |
|
||||
| Documentation-only PR | this document's own PR | see below | `docs` mode: expensive jobs required **skipped** |
|
||||
| Isolated E2E PR | drill branch confined to `crates/e2e_test/src/` | see below | `e2e` mode: Connect/ILM/protocol lanes required **skipped** |
|
||||
|
||||
## Repeating a drill
|
||||
|
||||
|
||||
@@ -117,40 +117,18 @@ Functional-chain health runs on a hosted runner independently of the lab fleet.
|
||||
|
||||
## Release validation
|
||||
|
||||
Post-merge and tag-driven; not a substitute for a PR gate. Every public publication exit consumes the release certification described here; this certification path is separate from the reusable CI artifact contract in [verification plans](ci-verification-pipeline.md), whose archives expire after one day and are never used as release certification.
|
||||
|
||||
The versioned plan is `.config/release-validation-plan.json` (`schema_version=1`): release types, target OS/arch/ABI, supported features, a fixed harness SHA per lane, required case IDs, environment capabilities, timeouts, applicability conditions, and an explicit `upgrade_sources` list carrying the real artifact digests of the supported N-1/N-2 sources plus a stated rollback basis — compatibility and rollback are never invented or defaulted. `scripts/release/release_gate.py validate` expands and freezes `plan_sha256` and the required case set before reading results, then binds that plan, a `candidate.json` (product 40-character SHA, version, release profile, features, immutable deliverable locations with SHA256 and wrapped-binary SHA256, image digest) and the shared G01 evidence-envelope set (rustfs/backlog#2658) of one parent candidate batch, and writes machine JSON, JUnit and a summary. Within a batch the unique key is `(lane, platform{os,arch,abi}, case_id)`; the top-level run/attempt is the parent batch and the nested workflow run/attempt is the child workflow identity, and both are validated separately (workflow SHA and product build SHA are bound independently and need not be equal). Missing, duplicate or extra cases, stale attempts, wrong digests, wrong platforms, wrong harness SHAs, zero tests, cancellation, timeout, untrusted sources and any non-PASS required item block with classified errors; only a complete legal success returns 0. `verify-promotion` re-checks the exact bytes about to be published against the passed list and fails on a swapped package or an edited plan after verification. preview, prerelease and stable all require an explicit plan; preview may use the plan's smaller pre-declared set but never bypasses artifact identity and startup checks. development artifacts are explicitly uncertified and never touch official or latest channels.
|
||||
Post-merge and tag-driven; not a substitute for a PR gate.
|
||||
|
||||
| Trigger | Workflow / job | Result |
|
||||
|---|---|---|
|
||||
| Nightly schedule, dispatch | `build.yml` `build-rustfs` (development build over the full platform matrix) | build artifacts and the uncertified dev download channel; no release publication |
|
||||
| Valid release or preview tag | `build.yml` `build-rustfs`, `release-certification`, `create-release`, `upload-release-assets`, `publish-release`, `promote-release-artifacts` | staged binaries, draft release, checksummed assets, then certified publish and promotion of the same bytes |
|
||||
| Successful non-preview release-tag build (`workflow_run`) | `docker.yml` `release-certification`, `build-docker`, `scan-docker-image` | multi-architecture images staged, verified against the certification and promoted, plus vulnerability report |
|
||||
| Successful release-tag build (`workflow_run`) | `package.yml` `release-certification`, `package`, `promote-packages` | DEB/RPM packages with wrapped-binary verification, staged then promoted with checksums |
|
||||
| Successful non-preview release-tag build (`workflow_run`) | `helm-package.yml` `release-certification`, `build-helm-package`, `publish-helm-package` | versioned chart and repository index, only over a certified image promotion record |
|
||||
| Nightly schedule, dispatch | `build.yml` `build-rustfs` (development build over the full platform matrix) | build artifacts and the dev download channel; no release publication |
|
||||
| Valid release or preview tag | `build.yml` `build-rustfs`, `create-release`, `upload-release-assets`, `publish-release` | draft release, checksummed assets, publish |
|
||||
| Successful non-preview release-tag build (`workflow_run`) | `docker.yml` `build-docker`, `scan-docker-image` | multi-architecture images and vulnerability report |
|
||||
| Successful release-tag build (`workflow_run`) | `package.yml` `package` | DEB/RPM packages and checksums uploaded to the release |
|
||||
| Successful non-preview release-tag build (`workflow_run`) | `helm-package.yml` `build-helm-package`, `publish-helm-package` | versioned chart and repository index |
|
||||
| Final tag's release published | `build.yml` `cleanup-preview-releases` | deletes every `<target>-preview.<N>` Release for that target; the tags are kept |
|
||||
|
||||
Publication exits and their gate:
|
||||
|
||||
| Exit | Writer | Certification consumed |
|
||||
|---|---|---|
|
||||
| GitHub Release draft → public | `build.yml` `publish-release` | `release-certification` success and per-asset `verify-promotion` |
|
||||
| Official R2 binary path `artifacts/rustfs/release/` | `build.yml` `promote-release-artifacts` | `release-certification` plus `verify-promotion`; the build job itself only writes `artifacts/rustfs/staging/<run>/<attempt>/` |
|
||||
| `latest.json` version pointer | `build.yml` `update-latest-version` | transitively through `publish-release` |
|
||||
| Image channels (Docker Hub, GHCR, Quay tags) | `docker.yml` `build-docker` promotion step | certified input digests, staged image binary identity and `verify-promotion`, then promotion of the same digest with `imagetools create` |
|
||||
| Official R2 package paths `packages/release` and `packages/latest` | `package.yml` `promote-packages` | `release-certification` and wrapped-binary `verify-promotion`; the package job only stages |
|
||||
| GitHub release package assets | `package.yml` `package` | `release-certification` and wrapped-binary `verify-promotion` before upload |
|
||||
| Helm chart repository (`rustfs/helm` push) | `helm-package.yml` `publish-helm-package` | `release-certification` plus the Docker workflow's image-promotion record bound to the same candidate |
|
||||
|
||||
Downstream workflows fail closed when the trusted certification is absent: a manual dispatch without certification fails and pushes no official tag. Only results from the trusted verification sources listed in the plan (currently the `rustfs/s3chaos` `release-gate.yml` envelope runs) carry release authority; a PR-uploaded JSON set cannot certify a release. Retries reuse the same candidate, only the staged bytes are promoted (no rebuild-after-verify), and no downstream step re-resolves a mutable `latest`.
|
||||
|
||||
Use an exact preview tag for an end-to-end release rehearsal. Manual dispatches are backfill/debug paths and do not prove the automatic `workflow_run` chain. The committed fixtures under `testdata/release-gate/` and the commands below are contract rehearsals of this orchestration; they are explicitly not product release evidence and not live verifier results.
|
||||
|
||||
```bash
|
||||
python3 -m unittest discover -s scripts/release -p 'test_release_gate.py'
|
||||
python3 scripts/release/release_gate.py validate --plan testdata/release-gate/plan.json --candidate testdata/release-gate/candidate.json --results testdata/release-gate/pass --output target/release-gate-check
|
||||
bash scripts/security/check_preview_release_workflow.sh
|
||||
```
|
||||
Use an exact preview tag for an end-to-end release rehearsal. Manual dispatches are backfill/debug paths and do not prove the automatic `workflow_run` chain.
|
||||
|
||||
## Change checklist
|
||||
|
||||
|
||||
@@ -1,72 +0,0 @@
|
||||
# CI timing sample 2026-10-31 (backlog #2963 CI01 measurement)
|
||||
|
||||
Operational measurement of ordinary-code PR feedback and runner occupancy against the CI01 experimental targets (feedback median 15–20 min, P95 ≤ 30 min, paid occupancy median 50–60 runner minutes). Methodology: [ci-timing.md](ci-timing.md) and [ci-resource-accounting.md](ci-resource-accounting.md). Raw snapshots: `/tmp/ci-timing.json` (limit 30 reproduction), `/tmp/ci-timing-200.json` (analysis sample), `/tmp/ci-acc-w{1,3}.json`. Nothing in this report is an acceptance result; the targets are **not met** by the measured sample.
|
||||
|
||||
## Sample window and n
|
||||
|
||||
| Item | Value |
|
||||
|---|---|
|
||||
| Collection time | 2026-10-31 ~02:50–03:15 UTC |
|
||||
| Window | completed `pull_request` runs of `ci.yml` created in the last 7 days |
|
||||
| Runs sampled | 30 (reproduction) and 200 (analysis, script max) |
|
||||
| Successful-code runs (classifier) | 1 of 30; **39 of 200** |
|
||||
| Other outcomes in 200-run sample | 68 cancelled (34 %), 36 failed, remainder non-code greens/closure handlers |
|
||||
| Lane shapes in sample | 24 combined-lane runs (`Workspace Test and Lint`), 15 split-lane runs (`Workspace Lint and Build` + `Workspace tests` + `Core contract`) |
|
||||
|
||||
The limit-30 reproduction reports median wall 76.85 min and median job-sum 133.33 runner-min on n=1 (per methodology, an absent/small median is not zero). All medians/P95 below are from the n=39 analysis sample. Two of the 39 are rerun continuations (run_attempt > 1, wall 7.0 and 22.6 min re-executing only failed jobs under the rerun-start convention); they do not move the median.
|
||||
|
||||
## Measured feedback and occupancy (ordinary successful code runs, n=39)
|
||||
|
||||
| Metric | Median | P90 | P95 | Max |
|
||||
|---|---|---|---|---|
|
||||
| Wall feedback (created/rerun-start → last job end) | **76.3 min** | 94.5 | **97.0** | 103.2 |
|
||||
| Runner-minute job sum per run | **179.5** | 206.5 | **213.6** | 220.4 |
|
||||
|
||||
Independent accounting cross-check (`scripts/ci/actions_cost_report.py`, 2026-10-30T00–12Z window, 547 attempts, collection **incomplete** — see gaps): successful-code PR feedback median 88.34 min (n=12), runner_sum median 199.68 min (n=12). A complete half-day window (2026-10-31T00–12Z, 78 attempts) shows total known runner occupancy 1379.72 min with 42 jobs of unknown occupancy; queue wait summed 28.43 min, so queueing is not the dominant cost.
|
||||
|
||||
## Per-job critical path breakdown
|
||||
|
||||
Execution minutes across the 39 runs (known only):
|
||||
|
||||
| Job | n | Median | P95 |
|
||||
|---|---|---|---|
|
||||
| Workspace Test and Lint (combined lane) | 24 | 63.6 | 73.9 |
|
||||
| Connect Feature Boundaries | 38 | 53.5 | 70.4 |
|
||||
| Workspace Lint and Build (split lane) | 15 | 43.3 | 56.5 |
|
||||
| Workspace tests (split lane) | 15 | 29.2 | 43.0 |
|
||||
| Build RustFS Debug Binary | 39 | 18.5 | 24.9 |
|
||||
| End-to-End Tests | 39 | 11.4 | 16.7 |
|
||||
| S3 Implemented Tests | 39 | 9.8 | 11.1 |
|
||||
| io_uring Integration (real) | 39 | 7.7 | 8.8 |
|
||||
| Quick Checks | 39 | 7.2 | 9.2 |
|
||||
|
||||
Per-run chain timeline (start = attempt start; see `/tmp/per-run-jobs.json`):
|
||||
|
||||
- Split lane (15 runs): `Quick Checks` (~7–10) → `Workspace Lint and Build` (ends ~46–67) → `Workspace tests` (ends ~71–103) → shard evidence → aggregator `Test and Lint`/`required-checks`. The lint→tests chain sets the wall in most split runs.
|
||||
- Combined lane (24 runs): `Quick Checks` → `Workspace Test and Lint` alone runs 63–86 min and sets the wall.
|
||||
- `Connect Feature Boundaries` (median 53.5, P95 70.4) runs parallel to the lint chain and occasionally becomes the tail (e.g. runs 41021787700, 40750122159: connect end within 0.2 min of wall).
|
||||
- `Build RustFS Debug Binary` → E2E/Core-contract/S3 chain finishes with 30–60 min of slack in every sampled run.
|
||||
- The required-check aggregator `Test and Lint` (`required-checks`, `ci_gate.py verify`) finishes last by construction (~0.2 min).
|
||||
|
||||
## Against the CI01 targets
|
||||
|
||||
| Target | Measured | Verdict |
|
||||
|---|---|---|
|
||||
| Feedback median 15–20 min | 76.3 min (n=39) | **not met** (~3.8–5× over) |
|
||||
| Feedback P95 ≤ 30 min | 97.0 min | **not met** (~3.2× over) |
|
||||
| Occupancy median 50–60 runner-min | 179.5 runner-min | **not met** (~3–3.6× over) |
|
||||
|
||||
These are the experimental-target measurements. The full merge-lifecycle cost is separate and was not established here (the accounting PR-allocation buckets were empty in the partial window; see gaps).
|
||||
|
||||
## Bottlenecks (honest list)
|
||||
|
||||
1. **Workspace lint+test compile/test chain (critical path):** combined `Workspace Test and Lint` median 63.6 min, or split `Workspace Lint and Build` 43.3 + `Workspace tests` 29.2 ≈ 72.5 min after Quick Checks. This is the wall clock.
|
||||
2. **Connect Feature Boundaries (parallel near-critical):** median 53.5 min on its own lane with `CARGO_BUILD_JOBS: "2"` limiting build concurrency on the credential-test step; becomes the tail when the lint chain is fast.
|
||||
3. **Duplicate compilation across lanes:** `Workspace Lint and Build` builds workspace test binaries; `Build RustFS Debug Binary` separately builds the debug binary + E2E binaries on another runner; Connect builds again. `cache-save-if: 'false'` on the Connect lane means that lane never warms the shared `ci-dev` cache.
|
||||
4. Runner queueing is small (28.43 queue-min vs 1379.72 runner-min in the complete half-day window) — not the bottleneck.
|
||||
|
||||
## Gaps and caveats
|
||||
|
||||
- Accounting windows: 2026-10-30T00–12Z collected 547 attempts but is flagged incomplete; 2026-10-30T12–24Z collection did not finish (timeout) and has no report; 2026-10-31T12–24Z was empty at collection time. Occupancy figures are per-window partial sums and must not be summed as a bill.
|
||||
- No CI workflow or selection change was made in this pass; strict gate semantics unchanged. No savings are claimed. Candidate fixes (build-artifact reuse between lanes, enabling cache save on the Connect lane, finer affected-selection granularity in shadow mode per ci-timing.md) are **unmeasured proposals**, not results.
|
||||
- Timing data alone does not establish functional coverage or escaped-regression rate; the 15–20 min target remains an experiment that currently misses by a wide margin.
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1,376 +0,0 @@
|
||||
#!/usr/bin/env python3
|
||||
# Copyright 2024 RustFS Team
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
"""Contract tests for scripts/release/release_gate.py (rustfs/backlog#2662).
|
||||
|
||||
Every fixture under testdata/release-gate/ is a contract rehearsal only: these
|
||||
tests prove the gate's fail-closed orchestration and must never be read as
|
||||
product release evidence or as R02 live verification results.
|
||||
"""
|
||||
|
||||
import json
|
||||
import re
|
||||
import subprocess
|
||||
import sys
|
||||
import tempfile
|
||||
import unittest
|
||||
from pathlib import Path
|
||||
|
||||
ROOT = Path(__file__).resolve().parents[2]
|
||||
GATE = ROOT / "scripts" / "release" / "release_gate.py"
|
||||
FIXTURES = ROOT / "testdata" / "release-gate"
|
||||
PLAN = FIXTURES / "plan.json"
|
||||
CANDIDATE = FIXTURES / "candidate.json"
|
||||
ARTIFACT = FIXTURES / "artifacts" / "rustfs-linux-x86_64-gnu-v9.9.9-fixture.zip"
|
||||
ARTIFACT_NAME = "rustfs-linux-x86_64-gnu-v9.9.9-fixture.zip"
|
||||
REAL_PLAN = ROOT / ".config" / "release-validation-plan.json"
|
||||
|
||||
|
||||
def run_gate(*arguments):
|
||||
result = subprocess.run(
|
||||
[sys.executable, str(GATE), *map(str, arguments)],
|
||||
cwd=ROOT,
|
||||
text=True,
|
||||
capture_output=True,
|
||||
check=False,
|
||||
)
|
||||
return result
|
||||
|
||||
|
||||
def run_validate(results, output, plan=PLAN, candidate=CANDIDATE):
|
||||
return run_gate(
|
||||
"validate",
|
||||
"--plan", plan,
|
||||
"--candidate", candidate,
|
||||
"--results", results,
|
||||
"--output", output,
|
||||
)
|
||||
|
||||
|
||||
def run_promote(output, plan=PLAN, candidate=CANDIDATE, summary=None, artifact=ARTIFACT,
|
||||
artifact_name=ARTIFACT_NAME, artifact_sha256=None):
|
||||
arguments = [
|
||||
"verify-promotion",
|
||||
"--plan", plan,
|
||||
"--candidate", candidate,
|
||||
"--summary", summary or output,
|
||||
]
|
||||
if artifact is not None:
|
||||
arguments += ["--artifact", artifact]
|
||||
if artifact_name is not None:
|
||||
arguments += ["--artifact-name", artifact_name]
|
||||
if artifact_sha256 is not None:
|
||||
arguments += ["--artifact-sha256", artifact_sha256]
|
||||
if output is not None:
|
||||
arguments += ["--output", output]
|
||||
return run_gate(*arguments)
|
||||
|
||||
|
||||
def load_summary(output):
|
||||
return json.loads((Path(output) / "release-gate-summary.json").read_text())
|
||||
|
||||
|
||||
def finding_codes(summary):
|
||||
return {finding["code"] for finding in summary["findings"]}
|
||||
|
||||
|
||||
class GateFixtureTests(unittest.TestCase):
|
||||
"""Assertion matrix rows from rustfs/backlog#2662 exercised on the fixtures."""
|
||||
|
||||
def setUp(self):
|
||||
self._temporary = tempfile.TemporaryDirectory(prefix="release-gate-test.")
|
||||
self.addCleanup(self._temporary.cleanup)
|
||||
self.output = Path(self._temporary.name)
|
||||
|
||||
def validate_fixture(self, name, expect):
|
||||
output = self.output / name
|
||||
result = run_validate(FIXTURES / name, output)
|
||||
self.assertEqual(result.returncode, expect, result.stderr)
|
||||
return result, load_summary(output)
|
||||
|
||||
def test_all_required_pass_and_identity_consistent(self):
|
||||
# Matrix: all required PASS and identity consistent -> validate and
|
||||
# verify-promotion return 0.
|
||||
result, summary = self.validate_fixture("pass", 0)
|
||||
self.assertEqual(summary["state"], "pass")
|
||||
self.assertTrue(summary["publish_allowed"])
|
||||
self.assertEqual(len(summary["required_cases"]), 5)
|
||||
self.assertEqual(len(summary["observed"]), 5)
|
||||
self.assertEqual(summary["findings"], [])
|
||||
expansion = json.loads((self.output / "pass" / "plan-expansion.json").read_text())
|
||||
self.assertEqual(len(expansion["required_cases"]), 5)
|
||||
promote = run_promote(self.output / "pass")
|
||||
self.assertEqual(promote.returncode, 0, promote.stderr)
|
||||
|
||||
def test_cross_platform_same_case_and_split_shas_accepted(self):
|
||||
# Matrix: the same case name on two platforms, and a workflow SHA that
|
||||
# differs from the (legally bound) product SHA, must not be rejected.
|
||||
result, summary = self.validate_fixture("cross-platform", 0)
|
||||
self.assertEqual(summary["state"], "pass")
|
||||
product_commit = json.loads(CANDIDATE.read_text())["product_commit"]
|
||||
workflows = []
|
||||
for name in sorted((FIXTURES / "cross-platform").glob("*.json")):
|
||||
if name.name == "batch.json":
|
||||
continue
|
||||
envelope = json.loads(name.read_text())
|
||||
workflows.append(envelope["workflow"]["workflow_sha"])
|
||||
self.assertNotEqual(envelope["workflow"]["workflow_sha"], product_commit)
|
||||
self.assertEqual(len(workflows), 5)
|
||||
case_names = [entry["case_id"] for entry in summary["observed"]]
|
||||
self.assertEqual(case_names.count("startup"), 2)
|
||||
self.assertEqual(case_names.count("artifact-identity"), 2)
|
||||
|
||||
def test_missing_case_names_the_case(self):
|
||||
result, summary = self.validate_fixture("missing-case", 1)
|
||||
self.assertIn("missing_case", finding_codes(summary))
|
||||
missing = [f for f in summary["findings"] if f["code"] == "missing_case"]
|
||||
self.assertTrue(any(f.get("case_id") == "startup" for f in missing), missing)
|
||||
self.assertFalse(summary["publish_allowed"])
|
||||
|
||||
def test_duplicate_key_names_the_case(self):
|
||||
result, summary = self.validate_fixture("duplicate-key", 1)
|
||||
self.assertIn("duplicate_key", finding_codes(summary))
|
||||
duplicates = [f for f in summary["findings"] if f["code"] == "duplicate_key"]
|
||||
self.assertTrue(any(f.get("case_id") == "startup" for f in duplicates), duplicates)
|
||||
self.assertFalse(summary["publish_allowed"])
|
||||
|
||||
def test_extra_unplanned_case_names_the_case(self):
|
||||
result, summary = self.validate_fixture("extra-case", 1)
|
||||
self.assertIn("extra_case", finding_codes(summary))
|
||||
extra = [f for f in summary["findings"] if f["code"] == "extra_case"]
|
||||
self.assertTrue(any(f.get("case_id") == "surprise-case" for f in extra), extra)
|
||||
self.assertFalse(summary["publish_allowed"])
|
||||
|
||||
def test_non_pass_required_items_block(self):
|
||||
# Matrix: any skipped / infra_error / quarantined required item blocks
|
||||
# and no official publish write is allowed.
|
||||
for name in ("non-pass-skipped", "non-pass-infra-error", "non-pass-quarantined"):
|
||||
with self.subTest(name=name):
|
||||
result, summary = self.validate_fixture(name, 1)
|
||||
self.assertIn("non_pass", finding_codes(summary))
|
||||
self.assertFalse(summary["publish_allowed"])
|
||||
|
||||
def test_child_workflow_cancellation_blocks(self):
|
||||
result, summary = self.validate_fixture("child-cancelled", 1)
|
||||
self.assertIn("cancelled", finding_codes(summary))
|
||||
self.assertFalse(summary["publish_allowed"])
|
||||
|
||||
def test_batch_timeout_blocks(self):
|
||||
result, summary = self.validate_fixture("timeout", 1)
|
||||
self.assertIn("timeout", finding_codes(summary))
|
||||
self.assertFalse(summary["publish_allowed"])
|
||||
|
||||
def test_same_tag_different_bytes_is_rejected(self):
|
||||
result, summary = self.validate_fixture("same-tag-different-bytes", 1)
|
||||
self.assertIn("digest_mismatch", finding_codes(summary))
|
||||
self.assertFalse(summary["publish_allowed"])
|
||||
|
||||
def test_stale_attempt_cannot_be_reused(self):
|
||||
result, summary = self.validate_fixture("stale-attempt", 1)
|
||||
self.assertIn("stale_attempt", finding_codes(summary))
|
||||
self.assertFalse(summary["publish_allowed"])
|
||||
|
||||
def test_wrong_platform_is_rejected(self):
|
||||
result, summary = self.validate_fixture("wrong-platform", 1)
|
||||
self.assertIn("platform_mismatch", finding_codes(summary))
|
||||
self.assertFalse(summary["publish_allowed"])
|
||||
|
||||
def test_wrong_harness_sha_cannot_be_reused(self):
|
||||
result, summary = self.validate_fixture("wrong-harness", 1)
|
||||
self.assertIn("harness_mismatch", finding_codes(summary))
|
||||
self.assertFalse(summary["publish_allowed"])
|
||||
|
||||
def test_zero_tests_block(self):
|
||||
result, summary = self.validate_fixture("zero-tests", 1)
|
||||
self.assertIn("zero_tests", finding_codes(summary))
|
||||
self.assertFalse(summary["publish_allowed"])
|
||||
|
||||
def test_untrusted_source_blocks(self):
|
||||
# A PR-uploaded or foreign JSON set must never gain release authority.
|
||||
result, summary = self.validate_fixture("untrusted-source", 1)
|
||||
self.assertIn("untrusted_source", finding_codes(summary))
|
||||
self.assertFalse(summary["publish_allowed"])
|
||||
|
||||
def test_swapped_package_after_verification_fails_promotion(self):
|
||||
# Matrix: swapping a published package after verification must fail
|
||||
# verify-promotion.
|
||||
output = self.output / "certified"
|
||||
self.assertEqual(run_validate(FIXTURES / "pass", output).returncode, 0)
|
||||
promote = run_promote(
|
||||
output,
|
||||
artifact=FIXTURES / "promotion-swap" / ARTIFACT_NAME,
|
||||
summary=output,
|
||||
)
|
||||
self.assertEqual(promote.returncode, 1, promote.stdout)
|
||||
self.assertIn("artifact_mismatch", promote.stderr)
|
||||
report = json.loads((output / "promotion-check.json").read_text())
|
||||
self.assertEqual(report["state"], "blocked")
|
||||
self.assertEqual(finding_codes(report), {"artifact_mismatch"})
|
||||
|
||||
def test_edited_plan_after_verification_fails_promotion(self):
|
||||
# Matrix: editing the plan after verification must fail
|
||||
# verify-promotion; the old certification cannot be reused.
|
||||
output = self.output / "certified"
|
||||
self.assertEqual(run_validate(FIXTURES / "pass", output).returncode, 0)
|
||||
promote = run_promote(
|
||||
output,
|
||||
plan=FIXTURES / "promotion-edit" / "plan.json",
|
||||
summary=output,
|
||||
)
|
||||
self.assertEqual(promote.returncode, 1, promote.stdout)
|
||||
self.assertIn("plan_edited", promote.stderr)
|
||||
|
||||
def test_promotion_without_certification_fails(self):
|
||||
output = self.output / "blocked"
|
||||
self.assertEqual(run_validate(FIXTURES / "missing-case", output).returncode, 1)
|
||||
promote = run_promote(output, summary=output)
|
||||
self.assertEqual(promote.returncode, 1, promote.stdout)
|
||||
self.assertIn("certification_missing", promote.stderr)
|
||||
|
||||
def test_summary_junit_and_expansion_are_written(self):
|
||||
output = self.output / "pass"
|
||||
self.assertEqual(run_validate(FIXTURES / "pass", output).returncode, 0)
|
||||
summary = load_summary(output)
|
||||
self.assertEqual(summary["plan_sha256"], json.loads(CANDIDATE.read_text())["plan_sha256"])
|
||||
junit = (output / "release-gate.junit.xml").read_text()
|
||||
self.assertIn("release-gate", junit)
|
||||
self.assertIn("identity/linux-x86_64-gnu/startup", junit)
|
||||
markdown = (output / "release-gate-summary.md").read_text()
|
||||
self.assertIn("state: pass", markdown)
|
||||
|
||||
def test_error_messages_carry_no_credentials(self):
|
||||
for name in ("missing-case", "stale-attempt", "untrusted-source", "zero-tests"):
|
||||
output = self.output / name
|
||||
run_validate(FIXTURES / name, output)
|
||||
text = output.joinpath("release-gate-summary.json").read_text()
|
||||
text += (output / "release-gate-summary.md").read_text()
|
||||
lowered = text.lower()
|
||||
for marker in ("secret", "password", "access_key", "akia", "bearer "):
|
||||
self.assertNotIn(marker, lowered, f"{name} leaked a credential-shaped string")
|
||||
|
||||
|
||||
class PlanContractTests(unittest.TestCase):
|
||||
def test_real_plan_is_explicit_about_sources_and_rollback(self):
|
||||
sys.path.insert(0, str(GATE.parent))
|
||||
import release_gate
|
||||
|
||||
plan = json.loads(REAL_PLAN.read_text())
|
||||
info = release_gate.validate_plan(plan)
|
||||
sources = info["upgrade_sources"]
|
||||
self.assertGreaterEqual(len(sources["sources"]), 1)
|
||||
self.assertFalse(sources["rollback_supported"])
|
||||
self.assertTrue(sources["basis"].strip())
|
||||
self.assertTrue(sources["rollback_basis"].strip())
|
||||
for source in sources["sources"]:
|
||||
self.assertEqual(len(source["artifact_sha256"]), 64)
|
||||
|
||||
def test_plan_requires_trusted_workflows_and_frozen_harness(self):
|
||||
sys.path.insert(0, str(GATE.parent))
|
||||
import release_gate
|
||||
|
||||
plan = json.loads(REAL_PLAN.read_text())
|
||||
plan["trusted_workflows"] = []
|
||||
with self.assertRaises(release_gate.GateError):
|
||||
release_gate.validate_plan(plan)
|
||||
plan = json.loads(REAL_PLAN.read_text())
|
||||
plan["lanes"][0]["harness_sha"] = "not-a-sha"
|
||||
with self.assertRaises(release_gate.GateError):
|
||||
release_gate.validate_plan(plan)
|
||||
plan = json.loads(REAL_PLAN.read_text())
|
||||
plan["upgrade_sources"].pop("rollback_supported")
|
||||
with self.assertRaises(release_gate.GateError):
|
||||
release_gate.validate_plan(plan)
|
||||
|
||||
def test_plan_sha256_is_semantic_and_detects_required_set_edits(self):
|
||||
sys.path.insert(0, str(GATE.parent))
|
||||
import release_gate
|
||||
|
||||
plan = json.loads(PLAN.read_text())
|
||||
baseline = release_gate.canonical_sha256(plan)
|
||||
self.assertEqual(release_gate.canonical_sha256(json.loads(json.dumps(plan))), baseline)
|
||||
edited = json.loads(PLAN.read_text())
|
||||
edited["lanes"][0]["cases"] = ["artifact-identity"]
|
||||
self.assertNotEqual(release_gate.canonical_sha256(edited), baseline)
|
||||
|
||||
|
||||
class PublicationWiringTests(unittest.TestCase):
|
||||
"""Static checks that the real publication exits consume the gate."""
|
||||
|
||||
def read(self, relative):
|
||||
return (ROOT / relative).read_text()
|
||||
|
||||
def job_block(self, workflow, job):
|
||||
match = re.search(
|
||||
rf"^ {re.escape(job)}:\n(.*?)(?=^ [A-Za-z#])",
|
||||
workflow,
|
||||
re.S | re.M,
|
||||
)
|
||||
self.assertIsNotNone(match, f"job {job} not found")
|
||||
return match.group(1)
|
||||
|
||||
def test_build_publish_requires_certification(self):
|
||||
workflow = self.read(".github/workflows/build.yml")
|
||||
self.assertIn("\n release-certification:", workflow)
|
||||
publish_block = self.job_block(workflow, "publish-release")
|
||||
self.assertIn("release-certification", publish_block)
|
||||
self.assertIn("release_gate.py validate", workflow)
|
||||
self.assertIn("release_gate.py verify-promotion", workflow)
|
||||
|
||||
def test_build_time_official_r2_writes_are_staged(self):
|
||||
workflow = self.read(".github/workflows/build.yml")
|
||||
self.assertIn("artifacts/rustfs/staging/", workflow)
|
||||
release_writes = [
|
||||
line for line in workflow.splitlines()
|
||||
if "artifacts/rustfs/release/" in line
|
||||
]
|
||||
# Only the certification-gated promotion job may write the official path.
|
||||
self.assertTrue(release_writes, "the promotion job must write the official R2 path")
|
||||
promotion_block = self.job_block(workflow, "promote-release-artifacts")
|
||||
self.assertIn("verify-promotion", promotion_block)
|
||||
self.assertIn("artifacts/rustfs/release/", promotion_block)
|
||||
build_block = self.job_block(workflow, "build-rustfs")
|
||||
self.assertNotIn('R2_PATH="s3://${R2_BUCKET}/artifacts/rustfs/release/"', build_block)
|
||||
|
||||
def test_downstream_workflows_verify_certification(self):
|
||||
docker = self.read(".github/workflows/docker.yml")
|
||||
self.assertIn("\n release-certification:", docker)
|
||||
build_docker_block = self.job_block(docker, "build-docker")
|
||||
self.assertIn("release-certification", build_docker_block)
|
||||
self.assertIn("verify-promotion", docker)
|
||||
package = self.read(".github/workflows/package.yml")
|
||||
self.assertIn("\n release-certification:", package)
|
||||
package_block = self.job_block(package, "package")
|
||||
self.assertIn("release-certification", package_block)
|
||||
helm = self.read(".github/workflows/helm-package.yml")
|
||||
self.assertIn("\n release-certification:", helm)
|
||||
helm_block = self.job_block(helm, "build-helm-package")
|
||||
self.assertIn("release-certification", helm_block)
|
||||
|
||||
def test_manual_downstream_dispatch_without_certification_fails(self):
|
||||
# Every downstream certification job must fail closed when the trusted
|
||||
# certification artifact is absent (e.g. a manual dispatch without one).
|
||||
for relative in (
|
||||
".github/workflows/docker.yml",
|
||||
".github/workflows/package.yml",
|
||||
".github/workflows/helm-package.yml",
|
||||
):
|
||||
workflow = self.read(relative)
|
||||
certification_block = self.job_block(workflow, "release-certification")
|
||||
self.assertIn("fail", certification_block.lower(), relative)
|
||||
self.assertIn("release-certification", certification_block, relative)
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
unittest.main()
|
||||
@@ -27,7 +27,7 @@ cleanup() {
|
||||
}
|
||||
trap cleanup EXIT INT TERM
|
||||
|
||||
for command in curl docker python3 aws; do
|
||||
for command in curl docker python3 awscurl; do
|
||||
command -v "${command}" >/dev/null || {
|
||||
echo "missing required command: ${command}" >&2
|
||||
exit 1
|
||||
@@ -192,19 +192,12 @@ print("\t".join(values[field] for field in ("AccessKeyId", "SecretAccessKey", "S
|
||||
PY
|
||||
)
|
||||
|
||||
# Sign with the STS session to prove the web-identity credentials are usable.
|
||||
# The AWS CLI replaces awscurl here: the functional fleet's system Python is
|
||||
# PEP 668 managed, so the live gate must not require pip-installed tools. The
|
||||
# security suite already requires the AWS CLI. Strip proxy env explicitly
|
||||
# (the runners define it) so this localhost request never leaves the host.
|
||||
env -u http_proxy -u https_proxy -u HTTP_PROXY -u HTTPS_PROXY \
|
||||
AWS_ACCESS_KEY_ID="${STS_ACCESS_KEY}" \
|
||||
AWS_SECRET_ACCESS_KEY="${STS_SECRET_KEY}" \
|
||||
AWS_SESSION_TOKEN="${STS_SESSION_TOKEN}" \
|
||||
AWS_EC2_METADATA_DISABLED=true \
|
||||
aws --endpoint-url "${RUSTFS_ORIGIN}" --region us-east-1 \
|
||||
s3api list-buckets --output json >"${WORK_DIR}/list-buckets.json"
|
||||
grep -q '"Buckets"' "${WORK_DIR}/list-buckets.json"
|
||||
awscurl --fail-with-body --service s3 --region us-east-1 \
|
||||
--access_key "${STS_ACCESS_KEY}" \
|
||||
--secret_key "${STS_SECRET_KEY}" \
|
||||
--security_token "${STS_SESSION_TOKEN}" \
|
||||
"${RUSTFS_ORIGIN}/" >"${WORK_DIR}/list-buckets.xml"
|
||||
grep -q '<ListAllMyBucketsResult' "${WORK_DIR}/list-buckets.xml"
|
||||
|
||||
TAMPERED_TOKEN="$(python3 - "${GOOD_TOKEN}" <<'PY'
|
||||
import sys
|
||||
|
||||
Vendored
-29
@@ -1,29 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"version": "9.9.9-fixture",
|
||||
"release_profile": "stable",
|
||||
"features": [
|
||||
"pyroscope"
|
||||
],
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"validation_batch": {
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2
|
||||
},
|
||||
"deliverables": [
|
||||
{
|
||||
"kind": "zip",
|
||||
"name": "rustfs-linux-x86_64-gnu-v9.9.9-fixture.zip",
|
||||
"location": "https://example.invalid/artifacts/runs/fixture-batch-1/2/rustfs-linux-x86_64-gnu-v9.9.9-fixture.zip",
|
||||
"sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"size": 36,
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa"
|
||||
}
|
||||
],
|
||||
"image": {
|
||||
"ref": "example.invalid/rustfs:9.9.9-fixture",
|
||||
"digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa"
|
||||
}
|
||||
}
|
||||
@@ -1,6 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"status": "completed"
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:02:00Z",
|
||||
"finished_at": "2026-09-26T10:02:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-aarch64-gnu.json",
|
||||
"sha256": "fa138d5891e5098b97137b0edbb4779c4350285fdc76cec7e6214809b34b3075",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:03:00Z",
|
||||
"finished_at": "2026-09-26T10:03:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-aarch64-gnu.json",
|
||||
"sha256": "314b19c4fee5f406cbf7ee0d6a436059115f1ff06f6864830045f9d452ab91c9",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:00:00Z",
|
||||
"finished_at": "2026-09-26T10:00:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-x86_64-gnu.json",
|
||||
"sha256": "37e58ec3fc6fe3ac7ff2fcbeebdb62f6a6aaaa34ec771a0f3306c821da0336f7",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,43 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "infra_error",
|
||||
"reason_code": "child-cancelled",
|
||||
"reason_class": "ENV",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111",
|
||||
"status": "cancelled"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "upgrade",
|
||||
"case_id": "upgrade-smoke",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "2222222222222222222222222222222222222222",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:04:00Z",
|
||||
"finished_at": "2026-09-26T10:04:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/upgrade/upgrade-smoke-linux-x86_64-gnu.json",
|
||||
"sha256": "c1ce56808b52859d2590b34b5990aed7bf560b134e44bd0c09f1873c9f764b38",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-upgrade-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "2222222222222222222222222222222222222222"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,6 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"status": "completed"
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:02:00Z",
|
||||
"finished_at": "2026-09-26T10:02:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-aarch64-gnu.json",
|
||||
"sha256": "fa138d5891e5098b97137b0edbb4779c4350285fdc76cec7e6214809b34b3075",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-cross-identity-linux-aarch64-gnu-artifact-identity",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "4444444444444444444444444444444444444444"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:03:00Z",
|
||||
"finished_at": "2026-09-26T10:03:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-aarch64-gnu.json",
|
||||
"sha256": "314b19c4fee5f406cbf7ee0d6a436059115f1ff06f6864830045f9d452ab91c9",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-cross-identity-linux-aarch64-gnu-startup",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "4444444444444444444444444444444444444444"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:00:00Z",
|
||||
"finished_at": "2026-09-26T10:00:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-x86_64-gnu.json",
|
||||
"sha256": "37e58ec3fc6fe3ac7ff2fcbeebdb62f6a6aaaa34ec771a0f3306c821da0336f7",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-cross-identity-linux-x86_64-gnu-artifact-identity",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "4444444444444444444444444444444444444444"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-cross-identity-linux-x86_64-gnu-startup",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "4444444444444444444444444444444444444444"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "upgrade",
|
||||
"case_id": "upgrade-smoke",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "2222222222222222222222222222222222222222",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:04:00Z",
|
||||
"finished_at": "2026-09-26T10:04:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/upgrade/upgrade-smoke-linux-x86_64-gnu.json",
|
||||
"sha256": "c1ce56808b52859d2590b34b5990aed7bf560b134e44bd0c09f1873c9f764b38",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-cross-upgrade-linux-x86_64-gnu-upgrade-smoke",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "4444444444444444444444444444444444444444"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,6 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"status": "completed"
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:02:00Z",
|
||||
"finished_at": "2026-09-26T10:02:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-aarch64-gnu.json",
|
||||
"sha256": "fa138d5891e5098b97137b0edbb4779c4350285fdc76cec7e6214809b34b3075",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:03:00Z",
|
||||
"finished_at": "2026-09-26T10:03:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-aarch64-gnu.json",
|
||||
"sha256": "314b19c4fee5f406cbf7ee0d6a436059115f1ff06f6864830045f9d452ab91c9",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:00:00Z",
|
||||
"finished_at": "2026-09-26T10:00:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-x86_64-gnu.json",
|
||||
"sha256": "37e58ec3fc6fe3ac7ff2fcbeebdb62f6a6aaaa34ec771a0f3306c821da0336f7",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "upgrade",
|
||||
"case_id": "upgrade-smoke",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "2222222222222222222222222222222222222222",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:04:00Z",
|
||||
"finished_at": "2026-09-26T10:04:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/upgrade/upgrade-smoke-linux-x86_64-gnu.json",
|
||||
"sha256": "c1ce56808b52859d2590b34b5990aed7bf560b134e44bd0c09f1873c9f764b38",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-upgrade-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "2222222222222222222222222222222222222222"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-6
@@ -1,6 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"status": "completed"
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:02:00Z",
|
||||
"finished_at": "2026-09-26T10:02:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-aarch64-gnu.json",
|
||||
"sha256": "fa138d5891e5098b97137b0edbb4779c4350285fdc76cec7e6214809b34b3075",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:03:00Z",
|
||||
"finished_at": "2026-09-26T10:03:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-aarch64-gnu.json",
|
||||
"sha256": "314b19c4fee5f406cbf7ee0d6a436059115f1ff06f6864830045f9d452ab91c9",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:00:00Z",
|
||||
"finished_at": "2026-09-26T10:00:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-x86_64-gnu.json",
|
||||
"sha256": "37e58ec3fc6fe3ac7ff2fcbeebdb62f6a6aaaa34ec771a0f3306c821da0336f7",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "surprise-case",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:05:00Z",
|
||||
"finished_at": "2026-09-26T10:05:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/surprise-case-linux-x86_64-gnu.json",
|
||||
"sha256": "f82eedac16c983bd426ca24a6cbf3acfa032dc722e9c4a5ed7ef21c7eff0bcb1",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "upgrade",
|
||||
"case_id": "upgrade-smoke",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "2222222222222222222222222222222222222222",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:04:00Z",
|
||||
"finished_at": "2026-09-26T10:04:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/upgrade/upgrade-smoke-linux-x86_64-gnu.json",
|
||||
"sha256": "c1ce56808b52859d2590b34b5990aed7bf560b134e44bd0c09f1873c9f764b38",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-upgrade-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "2222222222222222222222222222222222222222"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,6 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"status": "completed"
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:02:00Z",
|
||||
"finished_at": "2026-09-26T10:02:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-aarch64-gnu.json",
|
||||
"sha256": "fa138d5891e5098b97137b0edbb4779c4350285fdc76cec7e6214809b34b3075",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:00:00Z",
|
||||
"finished_at": "2026-09-26T10:00:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-x86_64-gnu.json",
|
||||
"sha256": "37e58ec3fc6fe3ac7ff2fcbeebdb62f6a6aaaa34ec771a0f3306c821da0336f7",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "upgrade",
|
||||
"case_id": "upgrade-smoke",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "2222222222222222222222222222222222222222",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:04:00Z",
|
||||
"finished_at": "2026-09-26T10:04:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/upgrade/upgrade-smoke-linux-x86_64-gnu.json",
|
||||
"sha256": "c1ce56808b52859d2590b34b5990aed7bf560b134e44bd0c09f1873c9f764b38",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-upgrade-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "2222222222222222222222222222222222222222"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,6 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"status": "completed"
|
||||
}
|
||||
Vendored
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:02:00Z",
|
||||
"finished_at": "2026-09-26T10:02:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-aarch64-gnu.json",
|
||||
"sha256": "fa138d5891e5098b97137b0edbb4779c4350285fdc76cec7e6214809b34b3075",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:03:00Z",
|
||||
"finished_at": "2026-09-26T10:03:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-aarch64-gnu.json",
|
||||
"sha256": "314b19c4fee5f406cbf7ee0d6a436059115f1ff06f6864830045f9d452ab91c9",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
Vendored
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:00:00Z",
|
||||
"finished_at": "2026-09-26T10:00:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-x86_64-gnu.json",
|
||||
"sha256": "37e58ec3fc6fe3ac7ff2fcbeebdb62f6a6aaaa34ec771a0f3306c821da0336f7",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "infra_error",
|
||||
"reason_code": "fixture-infra_error",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "upgrade",
|
||||
"case_id": "upgrade-smoke",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "2222222222222222222222222222222222222222",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:04:00Z",
|
||||
"finished_at": "2026-09-26T10:04:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/upgrade/upgrade-smoke-linux-x86_64-gnu.json",
|
||||
"sha256": "c1ce56808b52859d2590b34b5990aed7bf560b134e44bd0c09f1873c9f764b38",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-upgrade-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "2222222222222222222222222222222222222222"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,6 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"status": "completed"
|
||||
}
|
||||
Vendored
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:02:00Z",
|
||||
"finished_at": "2026-09-26T10:02:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-aarch64-gnu.json",
|
||||
"sha256": "fa138d5891e5098b97137b0edbb4779c4350285fdc76cec7e6214809b34b3075",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:03:00Z",
|
||||
"finished_at": "2026-09-26T10:03:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-aarch64-gnu.json",
|
||||
"sha256": "314b19c4fee5f406cbf7ee0d6a436059115f1ff06f6864830045f9d452ab91c9",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
Vendored
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:00:00Z",
|
||||
"finished_at": "2026-09-26T10:00:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-x86_64-gnu.json",
|
||||
"sha256": "37e58ec3fc6fe3ac7ff2fcbeebdb62f6a6aaaa34ec771a0f3306c821da0336f7",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "quarantined",
|
||||
"reason_code": "fixture-quarantined",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "upgrade",
|
||||
"case_id": "upgrade-smoke",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "2222222222222222222222222222222222222222",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:04:00Z",
|
||||
"finished_at": "2026-09-26T10:04:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/upgrade/upgrade-smoke-linux-x86_64-gnu.json",
|
||||
"sha256": "c1ce56808b52859d2590b34b5990aed7bf560b134e44bd0c09f1873c9f764b38",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-upgrade-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "2222222222222222222222222222222222222222"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,6 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"status": "completed"
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:02:00Z",
|
||||
"finished_at": "2026-09-26T10:02:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-aarch64-gnu.json",
|
||||
"sha256": "fa138d5891e5098b97137b0edbb4779c4350285fdc76cec7e6214809b34b3075",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:03:00Z",
|
||||
"finished_at": "2026-09-26T10:03:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-aarch64-gnu.json",
|
||||
"sha256": "314b19c4fee5f406cbf7ee0d6a436059115f1ff06f6864830045f9d452ab91c9",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:00:00Z",
|
||||
"finished_at": "2026-09-26T10:00:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-x86_64-gnu.json",
|
||||
"sha256": "37e58ec3fc6fe3ac7ff2fcbeebdb62f6a6aaaa34ec771a0f3306c821da0336f7",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "skipped",
|
||||
"reason_code": "fixture-skipped",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "upgrade",
|
||||
"case_id": "upgrade-smoke",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "2222222222222222222222222222222222222222",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:04:00Z",
|
||||
"finished_at": "2026-09-26T10:04:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/upgrade/upgrade-smoke-linux-x86_64-gnu.json",
|
||||
"sha256": "c1ce56808b52859d2590b34b5990aed7bf560b134e44bd0c09f1873c9f764b38",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-upgrade-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "2222222222222222222222222222222222222222"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-6
@@ -1,6 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"status": "completed"
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:02:00Z",
|
||||
"finished_at": "2026-09-26T10:02:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-aarch64-gnu.json",
|
||||
"sha256": "fa138d5891e5098b97137b0edbb4779c4350285fdc76cec7e6214809b34b3075",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:03:00Z",
|
||||
"finished_at": "2026-09-26T10:03:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-aarch64-gnu.json",
|
||||
"sha256": "314b19c4fee5f406cbf7ee0d6a436059115f1ff06f6864830045f9d452ab91c9",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:00:00Z",
|
||||
"finished_at": "2026-09-26T10:00:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-x86_64-gnu.json",
|
||||
"sha256": "37e58ec3fc6fe3ac7ff2fcbeebdb62f6a6aaaa34ec771a0f3306c821da0336f7",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "upgrade",
|
||||
"case_id": "upgrade-smoke",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "2222222222222222222222222222222222222222",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:04:00Z",
|
||||
"finished_at": "2026-09-26T10:04:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/upgrade/upgrade-smoke-linux-x86_64-gnu.json",
|
||||
"sha256": "c1ce56808b52859d2590b34b5990aed7bf560b134e44bd0c09f1873c9f764b38",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-upgrade-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "2222222222222222222222222222222222222222"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
Vendored
-53
@@ -1,53 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"plan_id": "testdata-release-gate",
|
||||
"description": "Contract fixtures for scripts/release/release_gate.py (rustfs/backlog#2662). Rehearsal data only: these files are never product release evidence and cannot certify a real candidate.",
|
||||
"release_types": ["preview", "prerelease", "stable"],
|
||||
"targets": [
|
||||
{"os": "linux", "arch": "x86_64", "abi": "gnu"},
|
||||
{"os": "linux", "arch": "aarch64", "abi": "gnu"}
|
||||
],
|
||||
"features": ["pyroscope"],
|
||||
"trusted_workflows": [
|
||||
{"repository": "rustfs/s3chaos", "workflow_id": "release-gate.yml"}
|
||||
],
|
||||
"lanes": [
|
||||
{
|
||||
"lane": "identity",
|
||||
"harness_repository": "rustfs/s3chaos",
|
||||
"harness_sha": "1111111111111111111111111111111111111111",
|
||||
"timeout_seconds": 1800,
|
||||
"environment_capabilities": ["process-exec"],
|
||||
"cases": ["artifact-identity", "startup"],
|
||||
"applies_to": {
|
||||
"release_types": ["preview", "prerelease", "stable"],
|
||||
"platforms": "all"
|
||||
}
|
||||
},
|
||||
{
|
||||
"lane": "upgrade",
|
||||
"harness_repository": "rustfs/s3chaos",
|
||||
"harness_sha": "2222222222222222222222222222222222222222",
|
||||
"timeout_seconds": 3600,
|
||||
"environment_capabilities": ["process-exec", "previous-release-artifact"],
|
||||
"cases": ["upgrade-smoke"],
|
||||
"applies_to": {
|
||||
"release_types": ["prerelease", "stable"],
|
||||
"platforms": [{"os": "linux", "arch": "x86_64", "abi": "gnu"}]
|
||||
}
|
||||
}
|
||||
],
|
||||
"upgrade_sources": {
|
||||
"basis": "Fixture-only synthetic source. Product plans must cite the real pinned digests of the exercised upgrade sources and must not invent compatibility.",
|
||||
"sources": [
|
||||
{
|
||||
"version": "0.0.1",
|
||||
"role": "N-1",
|
||||
"artifact_name": "fixture-upgrade-source.zip",
|
||||
"artifact_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
||||
}
|
||||
],
|
||||
"rollback_supported": false,
|
||||
"rollback_basis": "The fixture certifies no rollback support; rollback is never a default claim."
|
||||
}
|
||||
}
|
||||
-92
@@ -1,92 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"plan_id": "testdata-release-gate",
|
||||
"description": "Contract fixtures for scripts/release/release_gate.py (rustfs/backlog#2662). Rehearsal data only: these files are never product release evidence and cannot certify a real candidate.",
|
||||
"release_types": [
|
||||
"preview",
|
||||
"prerelease",
|
||||
"stable"
|
||||
],
|
||||
"targets": [
|
||||
{
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
{
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
}
|
||||
],
|
||||
"features": [
|
||||
"pyroscope"
|
||||
],
|
||||
"trusted_workflows": [
|
||||
{
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml"
|
||||
}
|
||||
],
|
||||
"lanes": [
|
||||
{
|
||||
"lane": "identity",
|
||||
"harness_repository": "rustfs/s3chaos",
|
||||
"harness_sha": "1111111111111111111111111111111111111111",
|
||||
"timeout_seconds": 1800,
|
||||
"environment_capabilities": [
|
||||
"process-exec"
|
||||
],
|
||||
"cases": [
|
||||
"artifact-identity"
|
||||
],
|
||||
"applies_to": {
|
||||
"release_types": [
|
||||
"preview",
|
||||
"prerelease",
|
||||
"stable"
|
||||
],
|
||||
"platforms": "all"
|
||||
}
|
||||
},
|
||||
{
|
||||
"lane": "upgrade",
|
||||
"harness_repository": "rustfs/s3chaos",
|
||||
"harness_sha": "2222222222222222222222222222222222222222",
|
||||
"timeout_seconds": 3600,
|
||||
"environment_capabilities": [
|
||||
"process-exec",
|
||||
"previous-release-artifact"
|
||||
],
|
||||
"cases": [
|
||||
"upgrade-smoke"
|
||||
],
|
||||
"applies_to": {
|
||||
"release_types": [
|
||||
"prerelease",
|
||||
"stable"
|
||||
],
|
||||
"platforms": [
|
||||
{
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
],
|
||||
"upgrade_sources": {
|
||||
"basis": "Fixture-only synthetic source. Product plans must cite the real pinned digests of the exercised upgrade sources and must not invent compatibility.",
|
||||
"sources": [
|
||||
{
|
||||
"version": "0.0.1",
|
||||
"role": "N-1",
|
||||
"artifact_name": "fixture-upgrade-source.zip",
|
||||
"artifact_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
||||
}
|
||||
],
|
||||
"rollback_supported": false,
|
||||
"rollback_basis": "The fixture certifies no rollback support; rollback is never a default claim."
|
||||
}
|
||||
}
|
||||
-1
@@ -1 +0,0 @@
|
||||
swapped package bytes
|
||||
@@ -1,6 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"status": "completed"
|
||||
}
|
||||
Vendored
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:02:00Z",
|
||||
"finished_at": "2026-09-26T10:02:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-aarch64-gnu.json",
|
||||
"sha256": "fa138d5891e5098b97137b0edbb4779c4350285fdc76cec7e6214809b34b3075",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:03:00Z",
|
||||
"finished_at": "2026-09-26T10:03:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-aarch64-gnu.json",
|
||||
"sha256": "314b19c4fee5f406cbf7ee0d6a436059115f1ff06f6864830045f9d452ab91c9",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
Vendored
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:00:00Z",
|
||||
"finished_at": "2026-09-26T10:00:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-x86_64-gnu.json",
|
||||
"sha256": "37e58ec3fc6fe3ac7ff2fcbeebdb62f6a6aaaa34ec771a0f3306c821da0336f7",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "upgrade",
|
||||
"case_id": "upgrade-smoke",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "2222222222222222222222222222222222222222",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:04:00Z",
|
||||
"finished_at": "2026-09-26T10:04:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/upgrade/upgrade-smoke-linux-x86_64-gnu.json",
|
||||
"sha256": "c1ce56808b52859d2590b34b5990aed7bf560b134e44bd0c09f1873c9f764b38",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-upgrade-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "2222222222222222222222222222222222222222"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,6 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"status": "completed"
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 1,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:02:00Z",
|
||||
"finished_at": "2026-09-26T10:02:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-aarch64-gnu.json",
|
||||
"sha256": "fa138d5891e5098b97137b0edbb4779c4350285fdc76cec7e6214809b34b3075",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 1,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:03:00Z",
|
||||
"finished_at": "2026-09-26T10:03:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-aarch64-gnu.json",
|
||||
"sha256": "314b19c4fee5f406cbf7ee0d6a436059115f1ff06f6864830045f9d452ab91c9",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 1,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:00:00Z",
|
||||
"finished_at": "2026-09-26T10:00:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-x86_64-gnu.json",
|
||||
"sha256": "37e58ec3fc6fe3ac7ff2fcbeebdb62f6a6aaaa34ec771a0f3306c821da0336f7",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 1,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 1,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "upgrade",
|
||||
"case_id": "upgrade-smoke",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "2222222222222222222222222222222222222222",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:04:00Z",
|
||||
"finished_at": "2026-09-26T10:04:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/upgrade/upgrade-smoke-linux-x86_64-gnu.json",
|
||||
"sha256": "c1ce56808b52859d2590b34b5990aed7bf560b134e44bd0c09f1873c9f764b38",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-upgrade-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "2222222222222222222222222222222222222222"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-6
@@ -1,6 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"status": "timed_out"
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:02:00Z",
|
||||
"finished_at": "2026-09-26T10:02:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-aarch64-gnu.json",
|
||||
"sha256": "fa138d5891e5098b97137b0edbb4779c4350285fdc76cec7e6214809b34b3075",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-aarch64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "aarch64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:03:00Z",
|
||||
"finished_at": "2026-09-26T10:03:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-aarch64-gnu.json",
|
||||
"sha256": "314b19c4fee5f406cbf7ee0d6a436059115f1ff06f6864830045f9d452ab91c9",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-aarch64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
-42
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "artifact-identity",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:00:00Z",
|
||||
"finished_at": "2026-09-26T10:00:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/artifact-identity-linux-x86_64-gnu.json",
|
||||
"sha256": "37e58ec3fc6fe3ac7ff2fcbeebdb62f6a6aaaa34ec771a0f3306c821da0336f7",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "identity",
|
||||
"case_id": "startup",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "1111111111111111111111111111111111111111",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:01:00Z",
|
||||
"finished_at": "2026-09-26T10:01:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/identity/startup-linux-x86_64-gnu.json",
|
||||
"sha256": "8b8774175c55c400b337610a89fe725ad2637af8fcc4973a82ab218f9182b80d",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-identity-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "1111111111111111111111111111111111111111"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"evidence_profile": "release-artifact",
|
||||
"run_id": "fixture-batch-1",
|
||||
"run_attempt": 2,
|
||||
"plan_sha256": "578bb57e65df8ba7a63e40aafc254fa644163270b7ec288fe3368bcd7c10ff86",
|
||||
"tier": "release-certification",
|
||||
"lane": "upgrade",
|
||||
"case_id": "upgrade-smoke",
|
||||
"product_commit": "3333333333333333333333333333333333333333",
|
||||
"harness_commit": "2222222222222222222222222222222222222222",
|
||||
"target_fingerprint": "rustfs-9.9.9-fixture-linux-x86_64-gnu",
|
||||
"platform": {
|
||||
"os": "linux",
|
||||
"arch": "x86_64",
|
||||
"abi": "gnu"
|
||||
},
|
||||
"started_at": "2026-09-26T10:04:00Z",
|
||||
"finished_at": "2026-09-26T10:04:30Z",
|
||||
"state": "pass",
|
||||
"reason_code": "ok",
|
||||
"reason_class": "NOT_APPLICABLE",
|
||||
"evidence": [
|
||||
{
|
||||
"path": "cases/upgrade/upgrade-smoke-linux-x86_64-gnu.json",
|
||||
"sha256": "c1ce56808b52859d2590b34b5990aed7bf560b134e44bd0c09f1873c9f764b38",
|
||||
"size": 64
|
||||
}
|
||||
],
|
||||
"workflow": {
|
||||
"repository": "rustfs/s3chaos",
|
||||
"workflow_id": "release-gate.yml",
|
||||
"run_id": "child-upgrade-linux-x86_64-gnu",
|
||||
"run_attempt": 1,
|
||||
"workflow_sha": "2222222222222222222222222222222222222222"
|
||||
},
|
||||
"artifact": {
|
||||
"archive_sha256": "ea3ac1fb0ec4aa8fbec650f64ccdbc2543843c8d5734c3915d1b57d7cbb92ec8",
|
||||
"binary_sha256": "7b77e78cc7b8f63a60f8a7101bebed6502f82e03016f4d4e11450f927e0a52fa",
|
||||
"container_image_digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
|
||||
}
|
||||
}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user