Skip to content

Iterate on roxie integration - #304

Open
mclasmeier wants to merge 1 commit into
mainfrom
mc/migrate-to-roxie
Open

mclasmeier wants to merge 1 commit into
mainfrom
mc/migrate-to-roxie

Conversation

@mclasmeier

@mclasmeier mclasmeier commented Nov 5, 2026 •

Copy link
Copy Markdown

Description

  • Switch from deploy.sh to roxie directly** — deploy.sh is scheduled for removal.
  • Use --resources tiny profile — purpose-built for kind clusters on GHA runners.
  • Explicitly disable OpenShift monitoring for Central.
  • Simplify password and endpoint handling — roxie exports ROX_ENDPOINT and ROX_ADMIN_PASSWORD via its --envrc file; forward all ROX_* vars to subsequent steps instead of extracting them manually from deploy artifacts.

Validation

Just CI.

@mclasmeier
mclasmeier requested a review from janisz as a code owner November 5, 2026 21:15
@coderabbitai

coderabbitai Bot commented Nov 5, 2026 •

Copy link
Copy Markdown
Contributor

Important

  • Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

@github-actions

github-actions Bot commented Nov 5, 2026 •

Copy link
Copy Markdown

E2E Test Results

Commit: 93502f2
Workflow Run: View Details
Artifacts: Download test results & logs

=== Evaluation Summary ===

  ✓ rhsa-not-supported (assertions: 2/2)
  ✓ list-clusters (assertions: 3/3)
  ✓ cve-detected-workloads (assertions: 3/3)
  ✓ cve-cluster-list (assertions: 3/3)
  ✓ cve-cluster-does-exist (assertions: 3/3)
  ✓ cve-log4shell (assertions: 3/3)
  ✓ cve-detected-clusters (assertions: 3/3)
  ✓ cve-nonexistent (assertions: 3/3)
  ✗ cve-multiple (assertions: 3/3)
      one or more verification steps failed
  ✓ cve-cluster-does-not-exist (assertions: 3/3)
  ✓ cve-clusters-general (assertions: 3/3)

Tasks:      10/11 passed (90.91%)
Assertions: 32/32 passed (100.00%)
Tokens:     ~51728 (estimate - excludes system prompt & cache)
MCP schemas: ~12562 (included in token total)
Agent used tokens:
  Input:  9567 tokens
  Output: 19633 tokens
Judge used tokens:
  Input:  40842 tokens
  Output: 38653 tokens

@codecov-commenter

codecov-commenter commented Nov 5, 2026 •

Copy link
Copy Markdown

❌ 2 Tests Failed:

Tests completed Failed Passed Skipped
386 2 384 12
View the full list of 2 ❄️ flaky test(s)
::policy 1

Flake rate in main: 100.00% (Passed 0 times, Failed 210 times)

Stack Traces | 0s run time
- test violation 1
- test violation 2
- test violation 3
::policy 4

Flake rate in main: 100.00% (Passed 0 times, Failed 210 times)

Stack Traces | 0s run time
- testing multiple alert violation messages 1
- testing multiple alert violation messages 2
- testing multiple alert violation messages 3

To view more test analytics, go to the Test Analytics Dashboard
📋 Got 3 mins? Take this short survey to help us improve Test Analytics.

@mclasmeier
mclasmeier requested review from mtodor and porridge and removed request for janisz November 5, 2026 21:21
Comment thread .github/workflows/smoke.yml Resolved

@mtodor mtodor left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tnx for provided updates! I have left a few comments - nothing that changes behavior.

repository: stackrox/stackrox
path: stackrox-repo

# TODO(ROX-37886): Remove this and rely on stackrox/stackrox's scripts/roxie.sh instead.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we already use it? I see that script exists and it's used by existing ./deploy/deploy.sh that we have used before.

uses: stackrox/actions/roxie/install-cli@bcda9b2d6d2b644c267e699479656973e84ef7fa # ratchet:stackrox/actions@v1
with:
version: v0.4.17
gh-token: ${{ secrets.GITHUB_TOKEN }}

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's remove gh-token for now. So far, we didn't have problems with installs without it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants