cloudbeat/catalog-info.yaml at main · elastic/cloudbeat · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
---
# yaml-language-server: $schema=https://gist.githubusercontent.com/elasticmachine/988b80dae436cafea07d9a4a460a011d/raw/e57ee3bed7a6f73077a3f55a38e76e40ec87a7cf/rre.schema.json
apiVersion: backstage.io/v1alpha1
kind: Resource
metadata:
  name: buildkite-pipeline-cloudbeat
  description: Buildkite Pipeline for cloudbeat
  links:
    - title: Pipeline
      url: https://buildkite.com/elastic/cloudbeat

spec:
  type: buildkite-pipeline
  owner: group:cloudbeat
  system: buildkite
  implementation:
    apiVersion: buildkite.elastic.dev/v1
    kind: Pipeline
    metadata:
      name: cloudbeat
    spec:
      repository: elastic/cloudbeat
      pipeline_file: ".buildkite/pipeline.yml"
      provider_settings:
        build_branches: true
        build_tags: false
        build_pull_requests: false
        filter_enabled: true
        filter_condition: build.branch == "main" || build.branch =~ /^[0-9]+\.[0-9x]+$$/
      teams:
        contextual-security:
          access_level: MANAGE_BUILD_AND_READ
        cloud-security-posture:
          access_level: MANAGE_BUILD_AND_READ
        everyone:
          access_level: READ_ONLY
---
# yaml-language-server: $schema=https://gist.githubusercontent.com/elasticmachine/988b80dae436cafea07d9a4a460a011d/raw/e57ee3bed7a6f73077a3f55a38e76e40ec87a7cf/rre.schema.json
apiVersion: backstage.io/v1alpha1
kind: Resource
metadata:
  name: cloudbeat-version-bump
  description: Buildkite pipeline for cloudbeat Version Bump
  links:
    - title: Pipeline
      url: https://buildkite.com/elastic/cloudbeat-version-bump
spec:
  type: buildkite-pipeline
  owner: group:cloudbeat
  system: buildkite
  implementation:
    apiVersion: buildkite.elastic.dev/v1
    kind: Pipeline
    metadata:
      name: cloudbeat-version-bump
      description: Buildkite pipeline for cloudbeat Version Bump
    spec:
      repository: elastic/cloudbeat
      pipeline_file: ".buildkite/version-bump-pipeline.yml"
      branch_configuration: "main"
      cancel_intermediate_builds: false
      skip_intermediate_builds: false
      provider_settings:
        trigger_mode: none
      teams:
        contextual-security:
          access_level: MANAGE_BUILD_AND_READ
        cloud-security-posture:
          access_level: MANAGE_BUILD_AND_READ
        release-eng:
          access_level: BUILD_AND_READ
        everyone:
          access_level: READ_ONLY
---
# yaml-language-server: $schema=https://gist.githubusercontent.com/elasticmachine/988b80dae436cafea07d9a4a460a011d/raw/e57ee3bed7a6f73077a3f55a38e76e40ec87a7cf/rre.schema.json
apiVersion: backstage.io/v1alpha1
kind: Resource
metadata:
  name: buildkite-pipeline-cloudbeat-dra-scheduler
  description: Weekly scheduler that triggers cloudbeat DRA on Mergify-maintained branches
  links:
    - title: Pipeline
      url: https://buildkite.com/elastic/cloudbeat-dra-scheduler
spec:
  type: buildkite-pipeline
  owner: group:cloudbeat
  system: buildkite
  implementation:
    apiVersion: buildkite.elastic.dev/v1
    kind: Pipeline
    metadata:
      name: cloudbeat-dra-scheduler
      description: ":alarm_clock: Weekly DRA refresh for maintained cloudbeat branches"
    spec:
      repository: elastic/cloudbeat
      pipeline_file: ".buildkite/dra-scheduler-pipeline.yml"
      branch_configuration: "main"
      schedules:
        weekly-dra-refresh:
          cronline: "0 6 * * 1"
          branch: main
          message: "Weekly DRA refresh — prevent snapshot expiry"
          enabled: true
      provider_settings:
        trigger_mode: none
      teams:
        contextual-security:
          access_level: MANAGE_BUILD_AND_READ
        cloud-security-posture:
          access_level: MANAGE_BUILD_AND_READ
        everyone:
          access_level: READ_ONLY
---
# yaml-language-server: $schema=https://gist.githubusercontent.com/elasticmachine/988b80dae436cafea07d9a4a460a011d/raw/e57ee3bed7a6f73077a3f55a38e76e40ec87a7cf/rre.schema.json
apiVersion: backstage.io/v1alpha1
kind: Resource
metadata:
  name: buildkite-pipeline-cloudbeat-vulnerability-scan
  description: Snyk monitor scan for maintained cloudbeat branches
  links:
    - title: Pipeline
      url: https://buildkite.com/elastic/cloudbeat-vulnerability-scan
spec:
  type: buildkite-pipeline
  owner: group:cloudbeat
  system: buildkite
  implementation:
    apiVersion: buildkite.elastic.dev/v1
    kind: Pipeline
    metadata:
      name: cloudbeat-vulnerability-scan
      description: ":mag: Snyk vulnerability scan for cloudbeat"
    spec:
      repository: elastic/cloudbeat
      pipeline_file: ".buildkite/vulnerability-scan-pipeline.yml"
      schedules:
        daily-vuln-scan:
          cronline: "0 6 * * *"
          branch: main
          message: "Daily vulnerability scan — Snyk monitor"
          enabled: true
      provider_settings:
        build_branches: true
        build_tags: false
        build_pull_requests: false
        filter_enabled: true
        filter_condition: build.branch == "main" || build.branch =~ /^[0-9]+\.[0-9x]+$$/
        trigger_mode: none
      teams:
        contextual-security:
          access_level: MANAGE_BUILD_AND_READ
        cloud-security-posture:
          access_level: MANAGE_BUILD_AND_READ
        everyone:
          access_level: READ_ONLY