asf-tooling commented on issue #613:
URL: 
https://github.com/apache/tooling-trusted-releases/issues/613#issuecomment-4404189423

   <!-- gofannon-issue-triage-bot v2 -->
   
   **Automated triage** — analyzed at `main@837830e8`
   
   **Type:** `discussion`  •  **Classification:** `no_action`  •  
**Confidence:** `high`
   **Application domain(s):** `distribution_publishing`, `shared_infrastructure`
   
   ### Summary
   This issue is an infrastructure planning ticket for deploying self-hosted 
GitHub Action runners to work with Nexus 3 repository.apache.org. @alitheg 
concluded that m5.xlarge (4 vCPU, 16GB RAM) is appropriate, with Java 17 
(Temurin), Maven 3.9, jq, curl, bash, and rsync installed. Labeling should 
include ATR plus Java/Maven versions. The next step is filing JIRA INFRA issues 
to request the runner from ASF Infrastructure. No code changes are required in 
this repository—the work is about external infrastructure provisioning and 
would affect workflow configuration in the `apache/tooling-actions` repository.
   
   ### Where this lives in the code today
   
   #### `atr/get/distribution.py` — `_render_distribution_tasks` (lines 309-320)
   _currently does this_
   Shows distribution workflow task tracking in the UI, which is the feature 
that depends on GitHub Actions runners being available.
   
   ```python
   def _render_distribution_tasks(
       tasks: Sequence[sql.Task], block: htm.Block, project_key: 
safe.ProjectKey, version_key: safe.VersionKey
   ):
       failed_tasks = [
           t for t in tasks if (t.status == sql.TaskStatus.FAILED) or 
(t.workflow and (t.workflow.status == "failed"))
       ]
       in_progress_tasks = [
           t
           for t in tasks
           if (t.status in [sql.TaskStatus.QUEUED, sql.TaskStatus.ACTIVE])
           or (t.workflow and (t.workflow.status not in ["completed", 
"success", "failed"]))
       ]
   ```
   
   #### `atr/get/distribution.py` — `automate` (lines 38-49)
   _currently does this_
   The distribution automation endpoint that triggers GitHub Actions workflows 
which would run on the self-hosted runners.
   
   ```python
   @get.typed
   async def automate(
       session: web.Committer,
       _distribution: Literal["distribution/automate"],
       project_key: safe.ProjectKey,
       version_key: safe.VersionKey,
   ) -> str:
       """
       URL: /distribution/automate/<project_key>/<version>
       """
       await session.prevent_confusing_ui_display(project_key)
       return await _automate_form_page(project_key, version_key, staging=False)
   ```
   
   ### Proposed approach
   This issue does not require code changes in this repository. It is an 
infrastructure planning ticket whose conclusions have been reached in the 
discussion: m5.xlarge instances with Java 17 (Temurin), Maven 3.9, jq, curl, 
bash, and rsync, labeled with ATR and Java/Maven versions. The next actionable 
step is filing JIRA INFRA issues with ASF Infrastructure to provision the 
runners, and then configuring them in the `apache/tooling-actions` repository's 
workflow files with appropriate `runs-on` labels. The security note from 
@alitheg about not running PR-triggered builds should be documented in the 
workflow configuration.
   
   ### Open questions
   - Have the JIRA INFRA issues been filed yet to request the runner 
provisioning?
   - What specific runner labels will be used in the `apache/tooling-actions` 
workflow files (e.g., 'self-hosted,atr,java17,maven3.9')?
   - Is there a tracking issue or PR in `apache/tooling-actions` for updating 
the workflow `runs-on` configuration once runners are available?
   
   _The agent reviewed this issue and is not proposing patches in this run. 
Review the existing-code citations and open questions above before deciding 
next steps._
   
   ### Files examined
   - `.asf.yaml`
   - `Dockerfile.alpine`
   - `Makefile`
   - `atr/get/announce.py`
   - `atr/get/distribution.py`
   - `atr/mail.py`
   - `atr/manager.py`
   - `atr/merge.py`
   
   ---
   *Draft from a triage agent. A human reviewer should validate before merging 
any change. The agent did not run tests or verify diffs apply.*


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to