Pass environment variables along better

JuliaCI · Mar 8, 2022 · 9e510eb · 9e510eb
1 parent 651098a
commit 9e510eb
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 2 deletions.
diff --git a/pipelines/main/launch_signed_jobs.yml b/pipelines/main/launch_signed_jobs.yml
@@ -6,7 +6,7 @@ steps:
           version: ".buildkite-external-version"
           repo_url: "https://github.com/JuliaCI/julia-buildkite"
     commands: |
-      # Explicitly pass along the cryptic token
+      # Explicitly pass along the cryptic token to child pipelines
       export BUILDKITE_PLUGIN_CRYPTIC_BASE64_SIGNED_JOB_ID_SECRET
 
       # Determine the julia version
@@ -16,6 +16,9 @@ steps:
       bash .buildkite/utilities/arches_pipeline_upload.sh \
            .buildkite/pipelines/main/platforms/build_linux.arches \
            .buildkite/pipelines/main/platforms/upload_linux.yml
+
+      # Don't share this with buildkite's env display
+      unset BUILDKITE_PLUGIN_CRYPTIC_BASE64_SIGNED_JOB_ID_SECRET
     agents:
       queue: "julia"
     env:

diff --git a/pipelines/main/launch_signed_jobs.yml.signature b/pipelines/main/launch_signed_jobs.yml.signature
diff --git a/pipelines/main/platforms/upload_linux.yml b/pipelines/main/platforms/upload_linux.yml
@@ -41,3 +41,6 @@ steps:
       # Only run on `sandbox.jl` machines (not `docker`-isolated ones) since we need nestable sandboxing
       sandbox_capable: "true"
       os: "linux"
+    env:
+      # Receive cryptic token from parent job
+      BUILDKITE_PLUGIN_CRYPTIC_BASE64_SIGNED_JOB_ID_SECRET: ${BUILDKITE_PLUGIN_CRYPTIC_BASE64_SIGNED_JOB_ID_SECRET?}
diff --git a/pipelines/scheduled/coverage/coverage_linux64.yml.signature b/pipelines/scheduled/coverage/coverage_linux64.yml.signature
@@ -1 +1,2 @@
-Salted__�)0պD����j>�!��V��!R����p�VX�;dV�a��k0�Ѝ^x�Y zC���5���T@$F�q��m2�0yev�N��Z�U��
+Salted__|�A��5��Je*a�Úؑ��R��5����b�
+���&&��uEbX�n%�ͦ[i�.�����$��7�A�F�#��8~���.�Nޫ�