Repository navigation
Conversation
|
Congratulations on your first Pull Request and welcome to the Apache CloudStack community! If you have any issues or are unsure about any anything please check our Contribution Guide (https://github.com/apache/cloudstack/blob/main/CONTRIBUTING.md)
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #9167 +/- ##
=========================================
Coverage 20.21% 20.21%
+ Complexity 20750 20747 -3
=========================================
Files 6426 6426
Lines 580181 580181
Branches 71033 71033
=========================================
+ Hits 117287 117289 +2
+ Misses 450180 450178 -2
Partials 12714 12714
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
a565234 to
2601328
Compare
|
@ribafish, thanks for the PR; it was nice to meet you at the conference. Now we will run the tests and, as soon we meet the requirements, we will merge the PR. |
|
@blueorangutan package |
|
@GutoVeronezi a [SL] Jenkins job has been kicked to build packages. It will be bundled with KVM, XenServer and VMware SystemVM templates. I'll keep you posted as I make progress. |
|
Packaging result [SF]: ✔️ el7 ✔️ el8 ✔️ el9 ✔️ debian ✔️ suse15. SL-JID 9793 |
|
@GutoVeronezi what is your intention with this? Are you proposing to base some policy on this? Also, |
The main goal is to identify slow and flaky tests, so we can improve our code and workflow. Having those metrics can also help us to identify other problems that might be there and we are not seeing.
Not sure if more, but well structured. |
@GutoVeronezi , my communication skill are way below par. I meant to ask if we need more testing on this PR. You are absolutely right in your reply and it is valid with repect to the question I posed, just not to the one I intended ;) |
I see hehe It should not affect the system itself; however, I would run it just for sanity. |
|
@ribafish Thanks for PR. I don't remember exactly, but there was some issue related to security in github actions resulting in leaking of secrets. One of the reasons we disabled sonar on PRs from forks. |
It was because of target in the github actions. I think this pr doesn't have the issue. |
|
Hi @vishesh92 and @weizhouapache This PR enables you to push build scans to Apache Develocity at ge.apache.org. These capture metadata about your build, which can then be used to monitor and improve the build performance, test times and fix flaky tests. It is also a prerequisite for other build performance improvements, such as using local and remote build cache, test distribution or predictive test selection (not part of this PR). Develocity supports multiple build tools; there are also several Apache projects built with Maven that use it already, such as Camel, Pulsar, Creadur RAT, etc. -> you can see their build scans at ge.apache.org with the Maven filter applied. The information captured includes the execution plan and timings, tests executed, dependencies and their versions, etc., but it does not include information such as the full list of env vars or the full cli command used to start a build unless added explicitly via custom values. |
@ribafish do we need to ask ASF infra to add the secret |
|
It is set up that any authenticated build will get published - at the moment, only CI jobs are authenticated and ASF infra already added |
cool, thanks @ribafish I've got an access key via command |
|
@ribafish |
|
@weizhouapache - an admin can do this. Are you referring to the 4 local build scans from this project? If so, I can ensure this happens |
@clayburn |
|
Done |
|
@blueorangutan package |
|
@DaanHoogland a [SL] Jenkins job has been kicked to build packages. It will be bundled with KVM, XenServer and VMware SystemVM templates. I'll keep you posted as I make progress. |
|
@ribafish , sorry to start looking at the changes without context. I like the premise and would see this merged. I think I ran into a github glitch (in the matrix) meaning you can ignore my prior two comments. |
There was a problem hiding this comment.
Warning
Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.
Copilot review overview
3 open findings
The#{{ ... }}syntax looks malformed for Develocity's expression interpolation (typically `#{… · New SettingDEVELOCITY_ACCESS_KEYat the workflow level makes the secret available to every step in… · New The sameenv: DEVELOCITY_ACCESS_KEYblock is duplicated across several workflows in this PR. To… · New
1 resolved since last review
🧠 Review effort: Lite
There was a problem hiding this comment.
Warning
Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.
Copilot review overview
7 open findings
The value expression syntax on<ipAddresses>appears invalid (#{{ ... }}). Develocity Maven… · New The#{{ ... }}syntax looks malformed for Develocity's expression interpolation (typically `#{… SettingDEVELOCITY_ACCESS_KEYat workflow scope makes it available to all jobs/steps (including… · New The PR description says a build scan is published for every CI build, butonlyIfset to… · New With<remote><enabled>false</enabled>, the<storeEnabled>setting is ineffective and may be… · New SettingDEVELOCITY_ACCESS_KEYat the workflow level makes the secret available to every step in… The sameenv: DEVELOCITY_ACCESS_KEYblock is duplicated across several workflows in this PR. To…
🧠 Review effort: Lite
Signed-off-by: Gasper Kojek <gkojek@gradle.com>
* origin/main: (156 commits) Upgrade Netris SDK version to 1.1.0 since 24.0 (apache#14365) feature: instance boot group and readiness rules (apache#13907) dont show unathorized notification for prelogin (apache#14054) .github: Upgrade docker/login-action to fix ASF Allowlist failure (apache#14276) virtual router: Add route-maps to BGP peers for Routed Mode (apache#9964) Add pre-commit hook to validate dependabot.yml (apache#14107) Add the ASF Allowlist check workflow (apache#14113) Revert "VMware to KVM: cold (VDDK) and warm (CBT) migration into Ceph/RBD and Linstor, plus importVm adoption of existing RBD root volumes and Linstor root/data volumes (apache#13656)" VMware to KVM: cold (VDDK) and warm (CBT) migration into Ceph/RBD and Linstor, plus importVm adoption of existing RBD root volumes and Linstor root/data volumes (apache#13656) engine-schema: upgrade path for 24.0.0 (apache#14033) xenserver/xcpng: do not bypass secondary storage when copy volumes between pools (apache#13750) backport: Incremental NAS backup support for KVM (apache#13074) (apache#13877) storage: KVM - enable RBD/Ceph volume encryption support (apache#13556) backup: remove the powered-off precondition for all backup providers (apache#14094) Nas backup: Fix mount/unmount error handling and timeout in LibvirtRestoreBackupCommandWrapper (apache#14006) kvm: apply rbd_default_data_pool when creating volumes from templates on RBD (apache#13361) server: copy template details to vm instance details when import VM (apache#12793) marvin: use pycryptodome instead of PyCrypt (apache#13594) Packaging: accept normalized Marvin archive names (apache#13793) SharedFS: fix NPE when accessing systemvm templates for unsupported hypervisors (apache#13930) ...
|
Hi @DaanHoogland and @GutoVeronezi, it was nice meeting you today. This is the open PR for connecting CloudStack to Develocity as discussed. Note there is one action required: please open a ticket with ASF Infra to request access to the GitHub Actions secret to publish Build Scans to Develocity. They will be able to add your repo to the allowlist, which will then allow Build Scan publication to work. |
There was a problem hiding this comment.
Warning
Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.
Copilot review overview
3 open findings
The expression syntax here (#{{...}}) is inconsistent with the other Develocity expressions in… · New With<enabled>false</enabled>, the remote build cache is disabled, sostoreEnabledis either… · NewDEVELOCITY_ACCESS_KEYis being repeated across multiple steps/workflows. To reduce duplication… · New
7 resolved since last review
The value expression syntax on<ipAddresses>appears invalid (#{{ ... }}). Develocity Maven… The#{{ ... }}syntax looks malformed for Develocity's expression interpolation (typically `#{… With<remote><enabled>false</enabled>, the<storeEnabled>setting is ineffective and may be… The PR description says a build scan is published for every CI build, butonlyIfset to… SettingDEVELOCITY_ACCESS_KEYat workflow scope makes it available to all jobs/steps (including… SettingDEVELOCITY_ACCESS_KEYat the workflow level makes the secret available to every step in… The sameenv: DEVELOCITY_ACCESS_KEYblock is duplicated across several workflows in this PR. To…
🧠 Review effort: Lite
There was a problem hiding this comment.
Warning
Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.
Copilot review overview
5 open findings
DEVELOCITY_ACCESS_KEYis being injected into steps that don't invoke Maven (including a step that… · NewDEVELOCITY_ACCESS_KEYis being injected into steps that don't invoke Maven (including a step that… · NewDEVELOCITY_ACCESS_KEYis being injected into steps that don't invoke Maven (including a step that… · New The expression syntax#{{'0.0.0.0'}}is likely invalid for Develocity/Maven configuration… · New With<enabled>false</enabled>, the remote build cache is disabled, so<storeEnabled>will never… · New
3 resolved since last review
🧠 Review effort: Lite
| - name: Setup Simulator Prerequisites | ||
| env: | ||
| DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }} |
| - name: Start CloudStack Management Server with Simulator | ||
| env: | ||
| DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }} |
| - name: Run Integration Tests with Simulator | ||
| env: | ||
| DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }} |
| <buildScan> | ||
| <backgroundBuildScanUpload>#{isFalse(env['GITHUB_ACTIONS'])}</backgroundBuildScanUpload> | ||
| <obfuscation> | ||
| <ipAddresses>#{{'0.0.0.0'}}</ipAddresses> |
| </local> | ||
| <remote> | ||
| <enabled>false</enabled> | ||
| <storeEnabled>#{isTrue(env['GITHUB_ACTIONS'])}</storeEnabled> |
|
@GutoVeronezi , the token is created by infra, can you review/merge? DEVELOCITY_ACCESS_KEY is created. |
|
@GutoVeronezi - please note in your testing that this PR cannot access the secret as it is from a fork. You would need to push my branch to |
Hello @clayburn, I just created PR #14394 with the changes in the official repo |
|
Closing in favor of #14394 |



@GutoVeronezi, it was nice meeting you at Community over Code today. This PR will enable you to publish Build Scans to develocity.apache.org as discussed.
Description
This PR publishes a build scan for every (authenticated) CI build and for every local build from an authenticated Apache committer. The build will not fail if publishing fails. Local and remote caching was left disabled on this PR by design so that the build is not affected by this change.
The build scans of the Apache Cloudstack project are published to the Develocity instance at develocity.apache.org, hosted by the Apache Software Foundation and run in partnership between the ASF and Gradle. This Develocity instance has all features and extensions enabled and is freely available for use by the Apache Cloudstack project and all other Apache projects.
On this Develocity instance, Apache Cloudstack will have access not only to all of the published build scans but other aggregate data features such as:
Please let me know if there are any questions about the value of Develocity or the changes in this pull request and I’d be happy to address them.
Types of changes