Skip to content

feat: switch ares-golden-image to local source and bump warpgate to v4.7.0#265

Merged
l50 merged 2 commits intofeat/warpgate-azure-templatefrom
feat/golden-image-local-source
May 8, 2026
Merged

feat: switch ares-golden-image to local source and bump warpgate to v4.7.0#265
l50 merged 2 commits intofeat/warpgate-azure-templatefrom
feat/golden-image-local-source

Conversation

@l50
Copy link
Copy Markdown
Contributor

@l50 l50 commented May 8, 2026

Key Changes:

  • Replace git-based source for ares-golden-image with a warpgate local source pointing at the in-repo ansible/ tree, eliminating GITHUB_TOKEN usage and branch ref drift at build time
  • Bump WARPGATE_VERSION from v4.6.0 to v4.7.0 across all three template workflows so CI uses a binary that supports the local source type
  • Adjust the in-VM collection copy path to match the new source layout (/tmp/nimbus_range/. instead of /tmp/nimbus_range/ansible/.)

Changed:

  • Switch warpgate-templates/templates/ares-golden-image/warpgate.yaml from a git source (cloning dreadnode/ares.git@feat/more-attack-cov via GITHUB_TOKEN) to a local source at ../../../ansible, so builds always match the working copy and ship only the ansible tree
  • Update the post-copy provisioner shell step to cp -r /tmp/nimbus_range/. /root/.ansible/collections/ansible_collections/dreadnode/nimbus_range/ to reflect that the local source is rooted at ansible/ rather than the full repo
  • Bump WARPGATE_VERSION to v4.7.0 in .github/workflows/build-and-push-templates.yaml, .github/workflows/test-template-builds.yaml, and .github/workflows/validate-templates.yaml, since the local source type was added in feat: add support for local directory sources in template sources CowDogMoo/warpgate#1841 and released in v4.7.0
  • Refresh the inline comments in warpgate.yaml to describe the local-source setup instead of the prior secure-clone behavior

l50 added 2 commits May 7, 2026 20:43
…rift

**Changed:**

- Switched ares source from remote git repository to local ansible/ path to ensure builds match the working copy and avoid branch drift or GITHUB_TOKEN requirements
- Updated file copy step to reference the local source directory structure, simplifying the ansible collection installation process
- Improved documentation in comments to clarify the rationale for using local sources and updated context for maintainers
**Changed:**

- Bump WARPGATE_VERSION from v4.6.0 to v4.7.0 in build-and-push-templates, test-template-builds, and validate-templates workflows to ensure use of the latest Warpgate release
@l50 l50 merged commit f2eaf58 into feat/warpgate-azure-template May 8, 2026
@l50 l50 deleted the feat/golden-image-local-source branch May 8, 2026 03:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant