UNCLASSIFIED - NO CUI

replace vault with gitlab CI variables (see NOTE)

General MR

Summary

this MR removes vault from use as a secrets engine serving anchore and twistlock licenses.

there is also refactoring in the deployment scripting in order to reduce repeated code.

Relevant logs/screenshots

anchore accepting license: image

twistlock accepting license: image

anchore accepting license in package pipeline: image

regular package pipeline using only sonarqube (for null test): https://repo1.dso.mil/big-bang/pipeline-templates/package-validation/-/jobs/45261145

full umbrella pipeline all packages: https://repo1.dso.mil/big-bang/pipeline-templates/package-validation/-/jobs/45234885

umbrella using anchore + twistlock: https://repo1.dso.mil/big-bang/pipeline-templates/package-validation/-/jobs/45262452/viewer#L214

intentional fail to show error message on helm upgrade -i command: https://repo1.dso.mil/big-bang/pipeline-templates/package-validation/-/jobs/45232362#L5662

fips-enabled umbrella test: https://repo1.dso.mil/big-bang/pipeline-templates/package-validation/-/jobs/45263247

package pipeline w/anchore enabled: https://repo1.dso.mil/big-bang/pipeline-templates/package-validation/-/jobs/45263242#L264

Linked Issue

#681 (closed)

Upgrade Notices

NOTE!!

CI vars will need to be created in the bigbang group which matches what has been implemented in the validation repository. these CI vars are ANCHORE_LICENSE and TWISTLOCK_LICENSE respectively.

Edited by Rob McCarthy

Merge request reports

Loading