Skip to content

Repository navigation

Read Socket Firewall credentials from the shared CI context #628

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
looneym merged 1 commit into from
Nov 10, 2026
Merged

Read Socket Firewall credentials from the shared CI context #628

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 15 additions & 12 deletions .circleci/config.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,19 +10,20 @@ jobs:
name: Route Bundler through the Socket Firewall registry
command: |
set -euo pipefail
if [ -z "${SOCKET_GEM_URL:-}" ]; then
if [ -z "${SOCKET_FIREWALL_TOKEN:-}" ]; then
# CircleCI does not share context credentials with forked PRs, so a
# fork cannot be routed. Say so rather than failing the contributor.
if [ -n "${CIRCLE_PR_REPONAME:-}" ]; then
echo "Forked PR: no Socket Firewall credentials available, gems will come from rubygems.org."
exit 0
fi
echo "FATAL: SOCKET_GEM_URL is required (provided by the socket-firewall context)"
echo "FATAL: SOCKET_FIREWALL_TOKEN is required (provided by the muster-dev-secrets context)"
exit 1
fi
# Legacy two-argument form: these images ship Bundler 1.x, where
# `bundle config set --global` does not exist and silently no-ops.
bundle config mirror.https://rubygems.org "$SOCKET_GEM_URL"
bundle config mirror.https://rubygems.org https://socket-firewall-registry.corporate.intercom.io/rubygems
bundle config socket-firewall-registry.corporate.intercom.io "intercom-socket:${SOCKET_FIREWALL_TOKEN}"
bundle config mirror.https://rubygems.org | grep -q socket-firewall-registry \
|| { echo "FAIL: bundler mirror not pointing at Socket Firewall"; exit 1; }
- run: bundle install
Expand All @@ -37,15 +38,16 @@ jobs:
name: Route Bundler through the Socket Firewall registry
command: |
set -euo pipefail
if [ -z "${SOCKET_GEM_URL:-}" ]; then
if [ -z "${SOCKET_FIREWALL_TOKEN:-}" ]; then
if [ -n "${CIRCLE_PR_REPONAME:-}" ]; then
echo "Forked PR: no Socket Firewall credentials available, gems will come from rubygems.org."
exit 0
fi
echo "FATAL: SOCKET_GEM_URL is required (provided by the socket-firewall context)"
echo "FATAL: SOCKET_FIREWALL_TOKEN is required (provided by the muster-dev-secrets context)"
exit 1
fi
bundle config mirror.https://rubygems.org "$SOCKET_GEM_URL"
bundle config mirror.https://rubygems.org https://socket-firewall-registry.corporate.intercom.io/rubygems
bundle config socket-firewall-registry.corporate.intercom.io "intercom-socket:${SOCKET_FIREWALL_TOKEN}"
bundle config mirror.https://rubygems.org | grep -q socket-firewall-registry \
|| { echo "FAIL: bundler mirror not pointing at Socket Firewall"; exit 1; }
- run: bundle install
Expand All @@ -60,15 +62,16 @@ jobs:
name: Route Bundler through the Socket Firewall registry
command: |
set -euo pipefail
if [ -z "${SOCKET_GEM_URL:-}" ]; then
if [ -z "${SOCKET_FIREWALL_TOKEN:-}" ]; then
if [ -n "${CIRCLE_PR_REPONAME:-}" ]; then
echo "Forked PR: no Socket Firewall credentials available, gems will come from rubygems.org."
exit 0
fi
echo "FATAL: SOCKET_GEM_URL is required (provided by the socket-firewall context)"
echo "FATAL: SOCKET_FIREWALL_TOKEN is required (provided by the muster-dev-secrets context)"
exit 1
fi
bundle config mirror.https://rubygems.org "$SOCKET_GEM_URL"
bundle config mirror.https://rubygems.org https://socket-firewall-registry.corporate.intercom.io/rubygems
bundle config socket-firewall-registry.corporate.intercom.io "intercom-socket:${SOCKET_FIREWALL_TOKEN}"
bundle config mirror.https://rubygems.org | grep -q socket-firewall-registry \
|| { echo "FAIL: bundler mirror not pointing at Socket Firewall"; exit 1; }
- run: bundle install
Expand All @@ -80,12 +83,12 @@ workflows:
- test-ruby-2-4:
name: "Test against Ruby 2.4"
context:
- socket-firewall
- muster-dev-secrets
- test-ruby-2-5:
name: "Test against Ruby 2.5"
context:
- socket-firewall
- muster-dev-secrets
- test-ruby-2-6:
name: "Test against Ruby 2.6"
context:
- socket-firewall
- muster-dev-secrets
Loading