Skip to content

ci(rest): post-migration cleanup #2153

Merged
ajf merged 8 commits into
NVIDIA:mainfrom
lachen-nv:chore/rest-ci-cleanup
Jun 4, 2026
Merged

ci(rest): post-migration cleanup #2153
ajf merged 8 commits into
NVIDIA:mainfrom
lachen-nv:chore/rest-ci-cleanup

Conversation

@lachen-nv

@lachen-nv lachen-nv commented Jun 3, 2026

Copy link
Copy Markdown
Contributor

Follow-up to the REST CI migration, addressing @thossain-nv's CI/CD suggestions.

Changes (3 commits)

  1. Move REST CI build/test/helm jobs to IPP-managed runners — REST jobs mostly ran on ubuntu-latest (GitHub-hosted); core uses the linux-amd64-cpu4. Aligned the REST build/test/lint/helm jobs onto linux-amd64-cpu4 for consistency + speed. The two trivial jobs (changes gate + rest-ci-pass aggregator) intentionally stay on ubuntu-latest.
  2. Remove dead rest-api/.github/ — leftover from the subtree merge; GitHub only executes workflows from the repo-root .github/, so these never ran. CODEOWNERS entries there are already covered by the root .github/CODEOWNERS, so nothing to migrate.
  3. Rename workflow Carbide CINICo Core CI (+ notify-build-status default label + a stale comment). Cosmetic — branch protection keys off the job name core-ci-pass, not the workflow display name, and no workflow_run trigger depends on the old name, so nothing breaks.

Notes

  • promotion.yaml / release.yaml (Carbide *) left as-is to keep scope tight; can rebrand later.

@lachen-nv lachen-nv requested review from a team as code owners June 3, 2026 03:56
@coderabbitai

coderabbitai Bot commented Jun 3, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 53247466-4a25-4d6b-be4b-e083878420a5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions

github-actions Bot commented Jun 3, 2026

Copy link
Copy Markdown

🔐 TruffleHog Secret Scan

No secrets or credentials found!

Your code has been scanned for 700+ types of secrets and credentials. All clear! 🎉

🔗 View scan details

🕐 Last updated: 2026-06-03 03:58:47 UTC | Commit: 8eef038

@github-actions

github-actions Bot commented Jun 3, 2026

Copy link
Copy Markdown

🔍 Container Scan Summary

Service Total Critical High Medium Low Other
nico-flow 116 13 50 39 4 10
nico-nsm 133 11 45 64 11 2
nico-psm 118 13 52 39 4 10
nico-rest-api 182 16 84 63 7 12
nico-rest-cert-manager 95 5 47 30 3 10
nico-rest-db 116 13 50 39 4 10
nico-rest-site-agent 115 13 50 39 3 10
nico-rest-site-manager 102 6 48 35 3 10
nico-rest-workflow 118 13 52 39 4 10
TOTAL 1095 103 478 387 43 84

Per-CVE detail lives in the per-service grype-* artifacts (JSON + SARIF). Severity counts only — no CVE IDs published here.

@lachen-nv lachen-nv changed the title ci(rest): post-migration cleanup — IPP runners, drop dead rest-api/.github, rename Carbide CI ci(rest): post-migration cleanup Jun 3, 2026

@thossain-nv thossain-nv left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, thank you @lachen-nv

@github-actions

github-actions Bot commented Jun 4, 2026

Copy link
Copy Markdown

# Conflicts:
#	rest-api/.github/ISSUE_TEMPLATE/bug_report_form.yml
#	rest-api/.github/ISSUE_TEMPLATE/config.yml
#	rest-api/.github/ISSUE_TEMPLATE/documentation_request_correction.yml
#	rest-api/.github/ISSUE_TEMPLATE/documentation_request_new.yml
#	rest-api/.github/ISSUE_TEMPLATE/feature_request_form.yml
@ajf ajf enabled auto-merge (squash) June 4, 2026 17:49

@nv-dmendoza nv-dmendoza left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also LGTM, thanks @lachen-nv !

@ajf ajf merged commit a9d0aac into NVIDIA:main Jun 4, 2026
113 of 115 checks passed
ericpretzel pushed a commit to ericpretzel/infra-controller that referenced this pull request Jun 4, 2026
Follow-up to the REST CI migration, addressing @thossain-nv's CI/CD
suggestions.

## Changes (3 commits)
1. **Move REST CI build/test/helm jobs to IPP-managed runners** — REST
jobs mostly ran on `ubuntu-latest` (GitHub-hosted); core uses the
`linux-amd64-cpu4`. Aligned the REST build/test/lint/helm jobs onto
`linux-amd64-cpu4` for consistency + speed. The two trivial jobs
(`changes` gate + `rest-ci-pass` aggregator) intentionally stay on
`ubuntu-latest`.
2. **Remove dead `rest-api/.github/`** — leftover from the subtree
merge; GitHub only executes workflows from the repo-root `.github/`, so
these never ran. CODEOWNERS entries there are already covered by the
root `.github/CODEOWNERS`, so nothing to migrate.
3. **Rename workflow `Carbide CI` → `NICo Core CI`** (+
`notify-build-status` default label + a stale comment). Cosmetic —
branch protection keys off the job name `core-ci-pass`, not the workflow
display name, and no `workflow_run` trigger depends on the old name, so
nothing breaks.

## Notes
- `promotion.yaml` / `release.yaml` (`Carbide *`) left as-is to keep
scope tight; can rebrand later.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants