Skip to content

DUPLO-42774 Update GitHub Actions workflows and add NetworkAgent files for Amazon Linux 2023#44

Open
duplodavid wants to merge 1 commit into
masterfrom
DUPLO-42774
Open

DUPLO-42774 Update GitHub Actions workflows and add NetworkAgent files for Amazon Linux 2023#44
duplodavid wants to merge 1 commit into
masterfrom
DUPLO-42774

Conversation

@duplodavid

Copy link
Copy Markdown
Contributor

Summary

DUPLO-42774 Update GitHub Actions workflows and add NetworkAgent files for Amazon Linux 2023

GitHub Actions

  • Updated action versions in build-image.yaml and lint.yaml: actions/checkout to v6,
    google-github-actions/auth to v3, aws-actions/configure-aws-credentials to v6,
    actions/upload-artifact to v7, actions/download-artifact to v7,
    peter-evans/create-pull-request to v8.
  • Added an if: condition to the GCP auth step so it runs only when a GCP builder is
    in scope.
  • Changed the commercial Packer AWS Role step to use OIDC (role-to-assume and
    aws-region), removing the access-key, secret-access-key, and session-token inputs.

NetworkAgent (Amazon Linux 2023)

  • Added AgentAmazonLinux2023/NetworkAgent.service (systemd unit).
  • Added AgentAmazonLinux2023/NetworkAgentV2.py (network tunnel and configuration
    management).
  • Added AgentAmazonLinux2023/Setup.sh (installs dependencies and configures the
    NetworkAgent service).

Packer

  • aws.pkr.hcl: enabled the amazonlinux-2023 and amazonlinux-2023-arm64 sources, set
    their name/tag family suffix to amazonlinux2023, and set the source AMI filter to
    al2023-ami-2023.*-kernel-6.1-{x86_64,arm64}.
  • main.pkr.hcl: added the AL2023 sources to the build, and added yum-update and
    Setup.sh install provisioners scoped to the AL2023 builders.
  • gen-native-images.sh: changed the BuiltInNativeImages.json merge to match by Name so
    a scoped build replaces only the rows it rebuilt, preserving the remaining rows.

…s for Amazon Linux 2023

- Bumped GitHub Actions to latest in build-image.yaml and lint.yaml: actions/checkout
  (v6), google-github-actions/auth (v3), aws-actions/configure-aws-credentials (v6),
  actions/upload-artifact (v7), actions/download-artifact (v7), peter-evans/create-pull-request (v8).
- Gated the GCP auth step behind an `if:` so it only runs when a GCP builder is in
  scope, and switched the commercial Packer AWS Role step to OIDC (role-to-assume +
  aws-region), dropping the static access-key/secret/session-token inputs.
- Added NetworkAgent files for Amazon Linux 2023: NetworkAgent.service (systemd unit),
  NetworkAgentV2.py (network tunnel/config management), and Setup.sh (installs
  dependencies and configures the NetworkAgent service).
- Enabled the Amazon Linux 2023 builders in Packer:
  - aws.pkr.hcl: uncommented the amazonlinux-2023 and amazonlinux-2023-arm64 sources,
    renamed them to use the `amazonlinux2023` family suffix, and pinned the source AMI
    filter to `al2023-ami-2023.*` to avoid the ECS/minimal variants.
  - main.pkr.hcl: added the AL2023 sources to the build and wired up yum-update and
    Setup.sh install provisioners scoped to the AL2023 builders.
- Reworked packer/gen-native-images.sh to merge BuiltInNativeImages.json by Name, so a
  scoped build (e.g. only_builders=AL2023) only replaces the rows it rebuilt instead of
  wholesale-replacing every Docker-Duplo row, preserving AL2/Ubuntu/GovCloud rows.
@sonarqubecloud

sonarqubecloud Bot commented Jun 3, 2026

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
8 Security Hotspots
69.0% Duplication on New Code (required ≤ 3%)
E Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant