forked from wazuh/wazuh-docker
Add dev flag to parse revision beta1
This commit is contained in:
@@ -26,6 +26,11 @@ on:
|
|||||||
- single-node
|
- single-node
|
||||||
- multi-node
|
- multi-node
|
||||||
- both
|
- both
|
||||||
|
patch_beta_images:
|
||||||
|
description: 'Patch image tags to use pre-release suffix (-beta1-latest). Disable once release images are published.'
|
||||||
|
required: false
|
||||||
|
default: true
|
||||||
|
type: boolean
|
||||||
|
|
||||||
permissions:
|
permissions:
|
||||||
id-token: write
|
id-token: write
|
||||||
@@ -267,8 +272,34 @@ jobs:
|
|||||||
"
|
"
|
||||||
|
|
||||||
# -----------------------------------------------------------------------
|
# -----------------------------------------------------------------------
|
||||||
# Deploy: copy wazuh-docker and start the stack
|
# Deploy: optionally patch image tags, copy wazuh-docker and start the stack
|
||||||
# -----------------------------------------------------------------------
|
# -----------------------------------------------------------------------
|
||||||
|
- name: Patch image tags for pre-release
|
||||||
|
run: |
|
||||||
|
DEPLOYMENT="${{ matrix.deployment_type }}"
|
||||||
|
# Use input when available; hardcoded true otherwise (e.g. dispatched from main
|
||||||
|
# which does not yet define patch_beta_images).
|
||||||
|
PATCH="${{ inputs.patch_beta_images }}"
|
||||||
|
[ -z "$PATCH" ] && PATCH=true
|
||||||
|
if [ "$PATCH" != "true" ]; then
|
||||||
|
echo "patch_beta_images=false — skipping image tag patching"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
VERSION=$(python3 -c "import json; d=json.load(open('wazuh-docker/VERSION.json')); print(d['version'])")
|
||||||
|
STAGE=$(python3 -c "import json; d=json.load(open('wazuh-docker/VERSION.json')); print(d.get('stage',''))")
|
||||||
|
if [ -z "$STAGE" ]; then
|
||||||
|
echo "VERSION.json has no stage field — release image, no patching needed"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
IMAGE_TAG="${VERSION}-${STAGE}-latest"
|
||||||
|
COMPOSE="wazuh-docker/${DEPLOYMENT}/docker-compose.yml"
|
||||||
|
echo "Patching ${COMPOSE}: image tag → ${IMAGE_TAG}"
|
||||||
|
sed -i -E "s|(image: wazuh/wazuh-[^:]+:)[^ ]+|\1${IMAGE_TAG}|g" "$COMPOSE"
|
||||||
|
echo "=== Patched image lines ==="
|
||||||
|
grep 'image:' "$COMPOSE"
|
||||||
|
|
||||||
- name: Copy wazuh-docker to VM
|
- name: Copy wazuh-docker to VM
|
||||||
run: |
|
run: |
|
||||||
scp ${{ env.SCP_OPTS }} -r wazuh-docker "${{ env.REMOTE }}:/tmp/wazuh-docker"
|
scp ${{ env.SCP_OPTS }} -r wazuh-docker "${{ env.REMOTE }}:/tmp/wazuh-docker"
|
||||||
@@ -343,15 +374,21 @@ jobs:
|
|||||||
set -e
|
set -e
|
||||||
cd /tmp/wazuh-docker/${DEPLOYMENT}
|
cd /tmp/wazuh-docker/${DEPLOYMENT}
|
||||||
|
|
||||||
echo '=== Extracting Wazuh version ==='
|
echo '=== Extracting Wazuh version and stage ==='
|
||||||
WAZUH_VERSION=\$(grep '^WAZUH_VERSION=' /tmp/wazuh-docker/.env | cut -d= -f2)
|
VERSION=\$(python3 -c \"import json; d=json.load(open('/tmp/wazuh-docker/VERSION.json')); print(d['version'])\")
|
||||||
MAJOR_MINOR=\$(echo \"\$WAZUH_VERSION\" | cut -d. -f1-2)
|
STAGE=\$(python3 -c \"import json; d=json.load(open('/tmp/wazuh-docker/VERSION.json')); print(d.get('stage',''))\")
|
||||||
echo \"Version: \$WAZUH_VERSION (packages path: \$MAJOR_MINOR)\"
|
MAJOR_MINOR=\$(echo \"\$VERSION\" | cut -d. -f1-2)
|
||||||
|
echo \"Version: \$VERSION Stage: \$STAGE\"
|
||||||
|
|
||||||
echo ''
|
echo ''
|
||||||
echo '=== Downloading wazuh-certs-tool.sh ==='
|
echo '=== Downloading wazuh-certs-tool.sh ==='
|
||||||
curl -fsSL -o wazuh-certs-tool.sh \
|
if [ -n \"\$STAGE\" ]; then
|
||||||
\"https://packages.wazuh.com/\${MAJOR_MINOR}/wazuh-certs-tool-\${WAZUH_VERSION}-1.sh\"
|
CERT_TOOL_URL=\"https://packages-staging.xdrsiem.wazuh.info/pre-release/\${MAJOR_MINOR}.x/installation-assistant/wazuh-certs-tool-\${VERSION}-\${STAGE}.sh\"
|
||||||
|
else
|
||||||
|
CERT_TOOL_URL=\"https://packages.wazuh.com/\${MAJOR_MINOR}/wazuh-certs-tool-\${VERSION}-1.sh\"
|
||||||
|
fi
|
||||||
|
echo \"URL: \$CERT_TOOL_URL\"
|
||||||
|
curl -fsSL -o wazuh-certs-tool.sh \"\$CERT_TOOL_URL\"
|
||||||
chmod +x wazuh-certs-tool.sh
|
chmod +x wazuh-certs-tool.sh
|
||||||
echo 'Downloaded OK'
|
echo 'Downloaded OK'
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user