NVIDIA / nodewright / 40623271985
84%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 59
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 83.996% (+0.1%) from 83.857%
40623271985

push

github

web-flow 
ci: stage operator, agent and chart releases to NGC alongside GHCR (#896)

Every operator/*, agent/* and chart/* release tag now also stages its
artifact in NGC (nvcr.io/1070195845945670/nodewright), from where NVIDIA's
internal release process promotes it to the public catalog.

Images are copied from GHCR by digest with `oras cp -r`, so the signature,
provenance and per-platform SBOM and VEX travel with them instead of being
produced a second time; the NGC job checks the digest matches GHCR and
verifies the copy, and holds no signing identity. The chart is uploaded with
the NGC CLI from the exact package pushed to GHCR, with a provenance
attestation on the file. All NGC jobs run in the ngc-publish environment,
which holds NGC_API_KEY and admits only release tags.

The release-policy tests gain TestMirroredImagesCarryTheirEvidence, which
pins the copy-with-referrers and verify wiring of the NGC jobs, and the
evidence golden is now sectioned per job.

docs/operations/artifact-locations.md lists every place the images, chart
and CLI have been published over the project's history (the frozen
skyhook GHCR paths, the public NGC images and Helm repository, and the
current nodewright paths), with which registry each chart version
defaults to.

Operator CI and Agent CI also restore the inotify limits before creating
kind clusters: ubuntu-26.04 runners no longer apply the image's
/etc/sysctl.conf (actions/runner-images#15108), so the 16-node
deployment-policy cluster ran out of inotify instances and its API server
never started, failing ci-gate on every PR (#898).

Signed-off-by: Brian Lockwood <lockwobr@gmail.com>

10219 of 12166 relevant lines covered (84.0%)

7.62 hits per line

Jobs
ID Job ID Ran Files Coverage
1 40623271985.1 59
84.0
GitHub Action Run
Source Files on build 40623271985