gitlab-ci: update ci-fairy minio to latest upstream
authorBenjamin Tissoires <benjamin.tissoires@gmail.com>
Tue, 7 Jul 2020 12:44:33 +0000 (14:44 +0200)
committerBenjamin Tissoires <benjamin.tissoires@gmail.com>
Thu, 9 Jul 2020 17:26:45 +0000 (19:26 +0200)
the new ci-fairy minio on ci-templates can copy
data to/from the MinIO server with much less permissions.

Upgrading mesa to this commit will allow us to restrict the
git-cache bucket permission to only "fetch" objects, i.e.
not allow anybody to walk through the tree of any repo.

Reviewed-by: Michel Dänzer <mdaenzer@redhat.com>
Signed-off-by: Benjamin Tissoires <benjamin.tissoires@gmail.com>
Part-of: <https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/5804>

.gitlab-ci.yml

index 5e1f49c8413ab489977cb1925c11a53e144f26bb..ff6d665b9dda92fb1f9d3e2fb04a9cbebf4bf49f 100644 (file)
@@ -403,10 +403,10 @@ git_archive:
     - schedules
   variables:
     FDO_REPO_SUFFIX: &git-archive-suffix "alpine/git_archive"
-    FDO_DISTRIBUTION_EXEC: 'pip3 install git+http://gitlab.freedesktop.org/freedesktop/ci-templates@52dd4a94044449c8481d18dcdc221a3c636366d2'
+    FDO_DISTRIBUTION_EXEC: 'pip3 install git+http://gitlab.freedesktop.org/freedesktop/ci-templates@6f5af7e5574509726c79109e3c147cee95e81366'
     # no need to pull the whole repo to build the container image
     GIT_STRATEGY: none
-    FDO_DISTRIBUTION_TAG: &git-archive-tag "2020-07-02"
+    FDO_DISTRIBUTION_TAG: &git-archive-tag "2020-07-07"
     FDO_DISTRIBUTION_PACKAGES: git py3-pip