Skip to content

Commit 3efa50e

Browse files
weizijunweizijun
committed
Merge branch 'main' into rollup-support-cancel
* main: (1300 commits) update c2id/c2id-server-demo docker image to support ARM (elastic#91144) Allow legacy index settings on legacy indices (elastic#90264) Skip prevoting if single-node discovery (elastic#91255) Chunked encoding for snapshot status API (elastic#90801) Allow different decay values depending on the score function (elastic#91195) Fix handling indexed envelopes crossing the dateline in mvt API (elastic#91105) Ensure cleanups succeed in JoinValidationService (elastic#90601) Add overflow behaviour test for RecyclerBytesStreamOutput (elastic#90638) More actionable error for ancient indices (elastic#91243) Fix APM configuration file delete (elastic#91058) Clean up handshake test class (elastic#90966) Improve H3#hexRing logic and add H3#areNeighborCells method (elastic#91140) Restrict direct use of `ApplicationPrivilege` constructor (elastic#91176) [ML] Allow NLP truncate option to be updated when span is set (elastic#91224) Support multi-intersection for FieldPermissions (elastic#91169) Support intersecting multi-sets of queries with DocumentPermissions (elastic#91151) Ensure TermsEnum action works correctly with API keys (elastic#91170) Fix NPE in auditing authenticationSuccess for non-existing run-as user (elastic#91171) Ensure PKI's delegated_by_realm metadata respect run-as (elastic#91173) [ML] Update API documentation for anomaly score explanation (elastic#91177) ... # Conflicts: # x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/XPackClientPlugin.java # x-pack/plugin/rollup/src/main/java/org/elasticsearch/xpack/downsample/RollupShardIndexer.java # x-pack/plugin/rollup/src/main/java/org/elasticsearch/xpack/downsample/TransportRollupIndexerAction.java # x-pack/plugin/rollup/src/test/java/org/elasticsearch/xpack/rollup/v2/RollupActionSingleNodeTests.java
2 parents d15cb1c + cc6bbc2 commit 3efa50e

File tree

5,181 files changed

+193362
-64742
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

5,181 files changed

+193362
-64742
lines changed

‎.backportrc.json

Lines changed: 7 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,9 @@
11
{
2-
"upstream": "elastic/elasticsearch",
3-
"targetBranchChoices": [
4-
"master",
5-
"8.3",
6-
"8.2",
7-
"8.1",
8-
"8.0",
9-
"7.17",
10-
"6.8"
11-
],
12-
"targetPRLabels": ["backport"],
13-
"branchLabelMapping": {
14-
"^v8.4.0$": "master",
15-
"^v(\\d+).(\\d+).\\d+(?:-(?:alpha|beta|rc)\\d+)?$": "$1.$2"
2+
"upstream" : "elastic/elasticsearch",
3+
"targetBranchChoices" : [ "main", "8.5", "8.4", "8.3", "8.2", "8.1", "8.0", "7.17", "6.8" ],
4+
"targetPRLabels" : [ "backport" ],
5+
"branchLabelMapping" : {
6+
"^v8.6.0$" : "main",
7+
"^v(\\d+).(\\d+).\\d+(?:-(?:alpha|beta|rc)\\d+)?$" : "$1.$2"
168
}
17-
}
9+
}

‎.ci/bwcVersions

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,8 @@ BWC_VERSION:
5555
- "7.17.4"
5656
- "7.17.5"
5757
- "7.17.6"
58+
- "7.17.7"
59+
- "7.17.8"
5860
- "8.0.0"
5961
- "8.0.1"
6062
- "8.1.0"
@@ -70,3 +72,9 @@ BWC_VERSION:
7072
- "8.3.2"
7173
- "8.3.3"
7274
- "8.4.0"
75+
- "8.4.1"
76+
- "8.4.2"
77+
- "8.4.3"
78+
- "8.5.0"
79+
- "8.5.1"
80+
- "8.6.0"

‎.ci/jobs.t/defaults.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -56,8 +56,8 @@
5656
COMPOSE_HTTP_TIMEOUT=120
5757
JOB_BRANCH=%BRANCH%
5858
HOME=$JENKINS_HOME
59-
GRADLEW=./gradlew --parallel --scan --build-cache -Dorg.elasticsearch.build.cache.url=https://gradle-enterprise.elastic.co/cache/
60-
GRADLEW_BAT=./gradlew.bat --parallel --scan --build-cache -Dorg.elasticsearch.build.cache.url=https://gradle-enterprise.elastic.co/cache/
59+
GRADLEW=./gradlew --parallel --scan --build-cache --no-watch-fs -Dorg.elasticsearch.build.cache.url=https://gradle-enterprise.elastic.co/cache/
60+
GRADLEW_BAT=./gradlew.bat --parallel --scan --build-cache --no-watch-fs -Dorg.elasticsearch.build.cache.url=https://gradle-enterprise.elastic.co/cache/
6161
publishers:
6262
# Disable Junit publisher for now since it's causing OOME on our Jenkins instance
6363
# - junit:

‎.ci/jobs.t/elastic+elasticsearch+intake+multijob+part3.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
jjbb-template: generic-gradle-unix.yml
3+
vars:
4+
- job-name: elastic+elasticsearch+%BRANCH%+intake+multijob+part3
5+
- job-display-name: "elastic / elasticsearch # %BRANCH% - intake part 3"
6+
- job-description: Elasticsearch %BRANCH% branch intake check part 3.
7+
- gradle-args: "-Dbwc.checkout.align=true -Dorg.elasticsearch.build.cache.push=true -Dignore.tests.seed -Dscan.capture-task-input-files checkPart3"

‎.ci/jobs.t/elastic+elasticsearch+intake.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,10 @@
4242
kill-phase-on: NEVER
4343
current-parameters: true
4444
git-revision: true
45+
- name: elastic+elasticsearch+%BRANCH%+intake+multijob+part3
46+
kill-phase-on: NEVER
47+
current-parameters: true
48+
git-revision: true
4549
- name: elastic+elasticsearch+%BRANCH%+intake+multijob+bwc-snapshots
4650
kill-phase-on: NEVER
4751
current-parameters: true

‎.ci/jobs.t/elastic+elasticsearch+multijob+platform-support-unix.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,8 @@
1414
name: os
1515
values:
1616
- "centos-7&&immutable"
17-
- "amazon&&immutable"
17+
- "amazon-2&&immutable"
18+
- "amazon-2022&&immutable"
1819
- "debian-10&&immutable"
1920
- "debian-11&&immutable"
2021
- "opensuse-15-1&&immutable"

‎.ci/jobs.t/elastic+elasticsearch+multijob+platform-support-windows.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,7 @@
2727
values:
2828
- 'checkPart1'
2929
- 'checkPart2'
30+
- 'checkPart3'
3031
- 'bwcTestSnapshots'
3132
- 'checkRestCompat'
3233
builders:

‎.ci/jobs.t/elastic+elasticsearch+periodic+ear.yml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,6 @@
11
---
22
- job:
33
name: elastic+elasticsearch+%BRANCH%+periodic+ear
4-
workspace: /dev/shm/elastic+elasticsearch+%BRANCH%+periodic+ear
54
display-name: "elastic / elasticsearch # %BRANCH% - encryption at rest"
65
description: "The Elasticsearch %BRANCH% branch encryption at rest compatibility tests.\n\n"
76
node: packaging-large

‎.ci/jobs.t/elastic+elasticsearch+periodic+java-fips-matrix.yml

Lines changed: 41 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,42 @@
11
---
2-
jjbb-template: matrix-gradle-unix.yml
3-
vars:
4-
- job-name: elastic+elasticsearch+%BRANCH%+periodic+java-fips-matrix
5-
- job-display-name: "elastic / elasticsearch # %BRANCH% - java fips compatibility matrix"
6-
- job-description: "Testing of the Elasticsearch %BRANCH% branch java FIPS compatibility matrix.\n"
7-
- matrix-yaml-file: ".ci/matrix-runtime-javas-fips.yml"
8-
- matrix-variable: ES_RUNTIME_JAVA
9-
- gradle-args: "-Dbwc.checkout.align=true -Dtests.fips.enabled=true check"
2+
- job:
3+
name: "elastic+elasticsearch+%BRANCH%+periodic+java-fips-matrix"
4+
display-name: "elastic / elasticsearch # %BRANCH% - java fips compatibility matrix"
5+
description: "Testing of the Elasticsearch %BRANCH% branch java FIPS compatibility matrix.\n"
6+
project-type: matrix
7+
child-workspace: /dev/shm/elastic+elasticsearch+%BRANCH%+periodic+java-fips-matrix
8+
node: master
9+
scm:
10+
- git:
11+
wipe-workspace: false
12+
axes:
13+
- axis:
14+
type: slave
15+
name: nodes
16+
values:
17+
- "general-purpose"
18+
- axis:
19+
type: yaml
20+
filename: ".ci/matrix-runtime-javas-fips.yml"
21+
name: "ES_RUNTIME_JAVA"
22+
# We shred out these jobs to avoid running out of memory given since we use a ramdisk workspace
23+
- axis:
24+
type: user-defined
25+
name: GRADLE_TASK
26+
values:
27+
- 'checkPart1'
28+
- 'checkPart2'
29+
- 'checkPart3'
30+
- 'bwcTestSnapshots'
31+
- 'checkRestCompat'
32+
builders:
33+
- inject:
34+
properties-file: '.ci/java-versions.properties'
35+
properties-content: |
36+
JAVA_HOME=$HOME/.java/$ES_BUILD_JAVA
37+
RUNTIME_JAVA_HOME=$HOME/.java/$ES_RUNTIME_JAVA
38+
JAVA11_HOME=$HOME/.java/java11
39+
JAVA16_HOME=$HOME/.java/openjdk16
40+
- shell: |
41+
#!/usr/local/bin/runbld --redirect-stderr
42+
$WORKSPACE/.ci/scripts/run-gradle.sh -Dbwc.checkout.align=true -Dtests.fips.enabled=true $GRADLE_TASK

‎.ci/jobs.t/elastic+elasticsearch+periodic+java-matrix.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,7 @@
2626
values:
2727
- 'checkPart1'
2828
- 'checkPart2'
29+
- 'checkPart3'
2930
- 'bwcTestSnapshots'
3031
- 'checkRestCompat'
3132
builders:

‎.ci/jobs.t/elastic+elasticsearch+periodic+java-preview-features-trigger.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
---
2+
jjbb-template: periodic-trigger-lgc.yml
3+
vars:
4+
- periodic-job: elastic+elasticsearch+%BRANCH%+periodic+java-preview-features
5+
- lgc-job: elastic+elasticsearch+%BRANCH%+intake
6+
- cron: "H H/12 * * *"

‎.ci/jobs.t/elastic+elasticsearch+periodic+java-preview-features.yml

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
---
2+
- job:
3+
name: "elastic+elasticsearch+%BRANCH%+periodic+java-preview-features"
4+
display-name: "elastic / elasticsearch # %BRANCH% - java preview features"
5+
description: "Testing of the Elasticsearch %BRANCH% branch with java preview features enabled.\n"
6+
project-type: matrix
7+
child-workspace: /dev/shm/elastic+elasticsearch+%BRANCH%+periodic+java-preview-features
8+
node: master
9+
scm:
10+
- git:
11+
wipe-workspace: false
12+
axes:
13+
- axis:
14+
type: slave
15+
name: nodes
16+
values:
17+
- "general-purpose"
18+
# We shred out these jobs to avoid running out of memory given since we use a ramdisk workspace
19+
- axis:
20+
type: user-defined
21+
name: GRADLE_TASK
22+
values:
23+
- 'checkPart1'
24+
- 'checkPart2'
25+
- 'checkPart3'
26+
- 'bwcTestSnapshots'
27+
- 'checkRestCompat'
28+
builders:
29+
- inject:
30+
properties-file: '.ci/java-versions.properties'
31+
properties-content: |
32+
JAVA_HOME=$HOME/.java/$ES_BUILD_JAVA
33+
RUNTIME_JAVA_HOME=$HOME/.java/openjdk19
34+
JAVA11_HOME=$HOME/.java/java11
35+
JAVA16_HOME=$HOME/.java/openjdk16
36+
- shell: |
37+
#!/usr/local/bin/runbld --redirect-stderr
38+
$WORKSPACE/.ci/scripts/run-gradle.sh -Dtests.jvm.argline="--enable-preview" -Dbwc.checkout.align=true $GRADLE_TASK

‎.ci/jobs.t/elastic+elasticsearch+periodic+release-tests.yml

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22,8 +22,14 @@
2222
export BEATS_DIR=$(pwd)/distribution/docker/build/artifacts/beats
2323
2424
mkdir -p ${BEATS_DIR}
25-
curl -o "${BEATS_DIR}/metricbeat-${ES_VERSION}-linux-x86_64.tar.gz" https://snapshots-no-kpi.elastic.co/downloads/beats/metricbeat/metricbeat-${ES_VERSION}-SNAPSHOT-linux-x86_64.tar.gz
26-
curl -o "${BEATS_DIR}/filebeat-${ES_VERSION}-linux-x86_64.tar.gz" https://snapshots-no-kpi.elastic.co/downloads/beats/filebeat/filebeat-${ES_VERSION}-SNAPSHOT-linux-x86_64.tar.gz
25+
curl --fail -o "${BEATS_DIR}/metricbeat-${ES_VERSION}-linux-x86_64.tar.gz" https://artifacts-snapshot.elastic.co/beats/${ES_VERSION}-SNAPSHOT/downloads/beats/metricbeat/metricbeat-${ES_VERSION}-SNAPSHOT-linux-x86_64.tar.gz
26+
curl --fail -o "${BEATS_DIR}/filebeat-${ES_VERSION}-linux-x86_64.tar.gz" https://artifacts-snapshot.elastic.co/beats/${ES_VERSION}-SNAPSHOT/downloads/beats/filebeat/filebeat-${ES_VERSION}-SNAPSHOT-linux-x86_64.tar.gz
2727
28-
$WORKSPACE/.ci/scripts/run-gradle.sh -Dbwc.checkout.align=true -Dbuild.snapshot=false \
28+
# Fetch ML artifacts
29+
export ML_IVY_REPO=$(mktemp -d)
30+
mkdir -p ${ML_IVY_REPO}/maven/org/elasticsearch/ml/ml-cpp/${ES_VERSION}
31+
curl --fail -o "${ML_IVY_REPO}/maven/org/elasticsearch/ml/ml-cpp/${ES_VERSION}/ml-cpp-${ES_VERSION}-deps.zip" https://artifacts-snapshot.elastic.co/ml-cpp/${ES_VERSION}-SNAPSHOT/downloads/ml-cpp/ml-cpp-${ES_VERSION}-SNAPSHOT-deps.zip
32+
curl --fail -o "${ML_IVY_REPO}/maven/org/elasticsearch/ml/ml-cpp/${ES_VERSION}/ml-cpp-${ES_VERSION}-nodeps.zip" https://artifacts-snapshot.elastic.co/ml-cpp/${ES_VERSION}-SNAPSHOT/downloads/ml-cpp/ml-cpp-${ES_VERSION}-SNAPSHOT-nodeps.zip
33+
34+
$WORKSPACE/.ci/scripts/run-gradle.sh -Dbwc.checkout.align=true -Dbuild.snapshot=false -Dbuild.ml_cpp.repo=file://${ML_IVY_REPO} \
2935
-Dtests.jvm.argline=-Dbuild.snapshot=false -Dlicense.key=${WORKSPACE}/x-pack/license-tools/src/test/resources/public.key -Dbuild.id=deadbeef build

‎.ci/jobs.t/elastic+elasticsearch+periodic+single-processor-node-tests.yml

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
---
2+
- job:
3+
name: elastic+elasticsearch+%BRANCH%+periodic+single-processor-node-tests
4+
display-name: "elastic / elasticsearch # %BRANCH% - single processor node tests"
5+
description: "Testing with node.processors set to '1' for the Elasticsearch %BRANCH% branch.\n"
6+
node: "general-purpose && docker"
7+
builders:
8+
- inject:
9+
properties-file: '.ci/java-versions.properties'
10+
properties-content: |
11+
JAVA_HOME=$HOME/.java/$ES_BUILD_JAVA
12+
RUNTIME_JAVA_HOME=$HOME/.java/$ES_RUNTIME_JAVA
13+
JAVA11_HOME=$HOME/.java/java11
14+
- shell: |
15+
#!/usr/local/bin/runbld --redirect-stderr
16+
$WORKSPACE/.ci/scripts/run-gradle.sh -Dbwc.checkout.align=true -Dtests.configure_test_clusters_with_one_processor=true check

‎.ci/jobs.t/elastic+elasticsearch+periodic+single-processor-tests-trigger.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
---
2+
jjbb-template: periodic-trigger-lgc.yml
3+
vars:
4+
- periodic-job: elastic+elasticsearch+%BRANCH%+periodic+single-processor-node-tests
5+
- lgc-job: elastic+elasticsearch+%BRANCH%+intake
6+
- cron: "H H/12 * * *"

‎.ci/jobs.t/elastic+elasticsearch+periodic+snyk-dependency-monitoring-trigger.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
---
2+
jjbb-template: periodic-trigger-lgc.yml
3+
vars:
4+
- periodic-job: elastic+elasticsearch+%BRANCH%+snyk-dependency-monitoring
5+
- lgc-job: elastic+elasticsearch+%BRANCH%+intake
6+
- cron: "H H * * *"

‎.ci/jobs.t/elastic+elasticsearch+periodic+snyk-dependency-monitoring.yml

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
---
2+
- job:
3+
name: elastic+elasticsearch+%BRANCH%+snyk-dependency-monitoring
4+
workspace: /dev/shm/elastic+elasticsearch+%BRANCH%+snyk-dependency-monitoring
5+
display-name: "elastic / elasticsearch # %BRANCH% - snyk dependency monitoring"
6+
description: "Publishing of the Elasticsearch %BRANCH% dependencies graph to snyk dependency monitoring"
7+
builders:
8+
- inject:
9+
properties-file: '.ci/java-versions.properties'
10+
properties-content: |
11+
JAVA_HOME=$HOME/.java/$ES_BUILD_JAVA
12+
RUNTIME_JAVA_HOME=$HOME/.java/$ES_RUNTIME_JAVA
13+
- shell: |
14+
#!/usr/local/bin/runbld --redirect-stderr
15+
set -euo pipefail
16+
set +x
17+
VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id=$VAULT_ROLE_ID secret_id=$VAULT_SECRET_ID)
18+
export VAULT_TOKEN
19+
export SNYK_TOKEN=$(vault read -field=token secret/elasticsearch-ci/snyk)
20+
unset VAULT_TOKEN
21+
set -x
22+
$WORKSPACE/.ci/scripts/run-gradle.sh uploadSnykDependencyGraph

‎.ci/jobs.t/elastic+elasticsearch+pull-request+bwc-snapshots.yml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,8 +25,6 @@
2525
black-list-labels:
2626
- '>test-mute'
2727
- 'test-full-bwc'
28-
black-list-target-branches:
29-
- feature/desired-balance-allocator
3028
axes:
3129
- axis:
3230
type: slave

‎.ci/jobs.t/elastic+elasticsearch+pull-request+docs-check.yml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,8 +22,6 @@
2222
- ^docs/.*
2323
black-list-labels:
2424
- '>test-mute'
25-
black-list-target-branches:
26-
- feature/desired-balance-allocator
2725
builders:
2826
- inject:
2927
properties-file: '.ci/java-versions.properties'

‎.ci/jobs.t/elastic+elasticsearch+pull-request+eql-correctness.yml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,6 @@
2020
cancel-builds-on-update: true
2121
black-list-target-branches:
2222
- 6.8
23-
- feature/desired-balance-allocator
2423
excluded-regions:
2524
- ^docs/.*
2625
black-list-labels:

‎.ci/jobs.t/elastic+elasticsearch+pull-request+example-plugins.yml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,8 +23,6 @@
2323
- build-tools/.*
2424
- build-tools-internal/.*
2525
- plugins/examples/.*
26-
black-list-target-branches:
27-
- feature/desired-balance-allocator
2826
builders:
2927
- inject:
3028
properties-file: '.ci/java-versions.properties'

‎.ci/jobs.t/elastic+elasticsearch+pull-request+packaging-tests-unix-sample.yml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,6 @@
2121
cancel-builds-on-update: true
2222
black-list-target-branches:
2323
- 6.8
24-
- feature/desired-balance-allocator
2524
excluded-regions:
2625
- ^docs/.*
2726
black-list-labels:
@@ -32,7 +31,7 @@
3231
type: label-expression
3332
name: os
3433
values:
35-
- rocky-linux-8-packaging
34+
- rhel-8-packaging
3635
- ubuntu-20.04-packaging
3736
- axis:
3837
type: user-defined

‎.ci/jobs.t/elastic+elasticsearch+pull-request+packaging-tests-windows-sample.yml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,6 @@
2424
black-list-target-branches:
2525
- 7.17
2626
- 7.16
27-
- feature/desired-balance-allocator
2827
excluded-regions:
2928
- ^docs/.*
3029
black-list-labels:

‎.ci/jobs.t/elastic+elasticsearch+pull-request+packaging-upgrade-tests.yml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,6 @@
2222
cancel-builds-on-update: true
2323
black-list-target-branches:
2424
- 6.8
25-
- feature/desired-balance-allocator
2625
excluded-regions:
2726
- ^docs/.*
2827
white-list-labels:

‎.ci/jobs.t/elastic+elasticsearch+pull-request+part-3-fips.yml

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
---
2+
- job:
3+
name: "elastic+elasticsearch+pull-request+part-3-fips"
4+
display-name: "elastic / elasticsearch - pull request part-3 fips"
5+
description: "Testing of Elasticsearch pull requests - part-3 fips"
6+
workspace: "/dev/shm/elastic+elasticsearch+pull-request+part-3-fips"
7+
scm:
8+
- git:
9+
refspec: "+refs/pull/${ghprbPullId}/*:refs/remotes/origin/pr/${ghprbPullId}/*"
10+
branches:
11+
- "${ghprbActualCommit}"
12+
triggers:
13+
- github-pull-request:
14+
org-list:
15+
- elastic
16+
allow-whitelist-orgs-as-admins: true
17+
trigger-phrase: '.*run\W+elasticsearch-ci/part-3-fips.*'
18+
github-hooks: true
19+
status-context: elasticsearch-ci/part-3-fips
20+
cancel-builds-on-update: true
21+
black-list-target-branches:
22+
- 6.8
23+
- 7.17
24+
excluded-regions:
25+
- ^docs/.*
26+
white-list-labels:
27+
- 'Team:Security'
28+
black-list-labels:
29+
- '>test-mute'
30+
builders:
31+
- inject:
32+
# Use FIPS-specific Java versions
33+
properties-file: '.ci/java-versions-fips.properties'
34+
properties-content: |
35+
JAVA_HOME=$HOME/.java/$ES_BUILD_JAVA
36+
RUNTIME_JAVA_HOME=$HOME/.java/$ES_RUNTIME_JAVA
37+
JAVA16_HOME=$HOME/.java/openjdk16
38+
- shell: |
39+
#!/usr/local/bin/runbld --redirect-stderr
40+
$WORKSPACE/.ci/scripts/run-gradle.sh -Dignore.tests.seed -Dtests.fips.enabled=true checkPart3

0 commit comments

Comments
 (0)