Skip to content

ci: Add containerized bzlmod verification - #10

Open
phlax wants to merge 3 commits into
envoyproxy:mainfrom
phlax:ci-verify
Open

ci: Add containerized bzlmod verification#10
phlax wants to merge 3 commits into
envoyproxy:mainfrom
phlax:ci-verify

Conversation

@phlax

@phlax phlax commented Aug 12, 2026

Copy link
Copy Markdown
Member

No description provided.

phlax added 2 commits August 12, 2026 16:37
Signed-off-by: Ryan Northey <ryan@synca.io>
Signed-off-by: Ryan Northey <ryan@synca.io>
- Add ENVOY_CI_IMAGE digest-pinned constant (shared between local container
  and RBE exec platform so they cannot drift apart)
- Add ENGFLOW_CREDENTIAL_HELPER constant (****** via GITHUB_TOKEN)
- Replace write_bazelrc() with RBE/local-only mutually exclusive logic:
  RBE off: disk cache + --jobs=8; RBE on: remote cache/exec, jobs=200, no disk cache
- Add _write_rbe_config() with full EngFlow bazelrc lines; intentionally
  omits --experimental_remote_downloader (comment explains why)
- Add --rbe flag to parse_args() (also honoured via RBE=1 env var)
- Replace verify.sh: use pinned Envoy CI image, bind-mount verify_module.py,
  pass GITHUB_TOKEN for RBE, pass --rbe to container
- Remove verify/Dockerfile (superseded by Envoy CI worker image)
- Add WriteBazelrcTest covering RBE on/off, no disk cache under RBE,
  exec platform image pinning, credential helper script, and the
  deliberate absence of --experimental_remote_downloader

Co-authored-by: phlax <454682+phlax@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants