Skip to content

Deploy stackrox with roxie - #621

Merged
mclasmeier merged 6 commits into
mainfrom
mc/migrate-to-roxie
Nov 10, 2026
Merged

mclasmeier merged 6 commits into
mainfrom
mc/migrate-to-roxie

Conversation

@mclasmeier

@mclasmeier mclasmeier commented Oct 28, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Migrate the e2e workflow from legacy deploy-local.sh script to using roxie for deploying Central
  • Remove the manual hostname setup, certificate extraction/trust steps, and hardcoded env vars (ROX_HOST, ROX_PORT) in favor of roxie-provided environment (ROX_ENDPOINT, ROX_ADMIN_PASSWORD, ROX_CA_CERT_FILE, ROX_BASE_URL)
  • Use --resolve with curl instead of /etc/hosts manipulation for TLS certificate hostname matching

Test plan

  • Verify the e2e workflow passes on this branch
  • Confirm Central deploys successfully via roxie with the tiny resource profile
  • Confirm M2M auth config, central-login action, and roxctl central whoami all work end-to-end

@mclasmeier
mclasmeier requested a review from a team as a code owner October 28, 2026 20:08
@coderabbitai

coderabbitai Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

Important

  • Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Central YAML (base), Organization UI (inherited)
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 56a96b6b-7dcf-408b-9503-a23ef7f01257

@mclasmeier mclasmeier closed this Nov 3, 2026
@mclasmeier mclasmeier reopened this Nov 3, 2026
@mclasmeier
mclasmeier force-pushed the mc/migrate-to-roxie branch 5 times, most recently from 691e478 to 67cddf4 Compare November 3, 2026 14:52
@mclasmeier
mclasmeier force-pushed the mc/migrate-to-roxie branch 2 times, most recently from 8a25705 to aca96d1 Compare November 5, 2026 06:59
Comment thread .github/workflows/e2e.yml Resolved
Comment thread .github/workflows/e2e.yml Resolved
Comment thread .github/workflows/e2e.yml Outdated
central-endpoint: ${{ env.ROX_URL }}
central-endpoint: ${{ env.ROX_BASE_URL }}
central-token: ${{ env.ROX_API_TOKEN }}
skip-tls-verify: true # The action doesn't support providing certs. Doing the whole update-tls dance just for this seems unnecessary.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No idea about this. Someone went through the pains of coding the Install and trust Central certificate step so simply removing it seems a bit rough...

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the reason why I did that was that roxie provides us a file with the central certificate that we could directly use (hook into curl).
I saw that as a simplification.
BUt I can revert that part.

Co-authored-by: Marcin Owsiany <marcin@owsiany.pl>
@mclasmeier
mclasmeier requested a review from porridge November 5, 2026 11:54
@mclasmeier
mclasmeier merged commit 7cc05c2 into main Nov 10, 2026
4 checks passed
@mclasmeier
mclasmeier deleted the mc/migrate-to-roxie branch November 10, 2026 06:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants