CI Variables

omnibus-gitlab CI pipelines use variables provided by the CI environment to change build behavior between mirrors and keep sensitive data out of the repositories.

Check the table below for more information about the various CI variables used in the pipelines.

Build variables

Required:

These variables are required to build packages in the pipeline.

Environment Variable	Description
AWS_SECRET_ACCESS_KEY	Account secret to read/write the build package to a S3 location.
AWS_ACCESS_KEY_ID	Account ID to read/write the build package to a S3 location.

Available:

These additional variables are available to override or enable different build behavior.

Environment Variable	Description
AWS_MAX_ATTEMPTS	Maximum number of times an S3 command should retry.
USE_S3_CACHE	Set to any value and Omnibus will cache fetched software sources in an s3 bucket. Upstream documentation.
CACHE_AWS_ACCESS_KEY_ID	Account ID to read/write from the s3 bucket containing the s3 software fetch cache.
CACHE_AWS_SECRET_ACCESS_KEY	Account secret to read/write from the s3 bucket containing the s3 software fetch cache.
CACHE_AWS_BUCKET	S3 bucket name for the software fetch cache.
CACHE_AWS_S3_REGION	S3 bucket region to write/read the software fetch cache.
CACHE_AWS_S3_ENDPOINT	The HTTP or HTTPS endpoint to send requests to, when using s3 compatible service.
CACHE_S3_ACCELERATE	Setting any value enables the s3 software fetch cache to pull using s3 accelerate.
SECRET_AWS_SECRET_ACCESS_KEY	Account secret to read the gpg private package signing key from a secure s3 bucket.
SECRET_AWS_ACCESS_KEY_ID	Account ID to read the gpg private package signing key from a secure s3 bucket.
GPG_PASSPHRASE	The passphrase needed to use the gpg private package signing key.
CE_MAX_PACKAGE_SIZE_MB	The max package size in MB allowed for CE packages before we alert the team and investigate.
EE_MAX_PACKAGE_SIZE_MB	The max package size in MB allowed for EE packages before we alert the team and investigate.
DEV_GITLAB_SSH_KEY	SSH private key for an account able to read repositories from `dev.gitlab.org`. Used for SSH Git fetch.
BUILDER_IMAGE_REGISTRY	Registry to pull the CI Job images from.
BUILD_LOG_LEVEL	Omnibus build log level.
ALTERNATIVE_SOURCES	Switch to the custom sources listed in `https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/.custom_sources.yml` Defaults to `true`.
OMNIBUS_GEM_SOURCE	Non-default remote URI to clone the omnibus gem from.
QA_BUILD_TARGET	Build specified QA image. See this MR for details. Defaults to `qa`.
GITLAB_ASSETS_TAG	Tag of the assets image built by the `build-assets-image` job in the `gitlab-org/gitlab` pipelines. Defaults to `$GITLAB_REF_SLUG` or the `gitlab-rails` version.

Test variables

Environment Variable	Description
RAT_REFERENCE_ARCHITECTURE	Reference architecture template used in pipeline triggered by RAT job.
RAT_FIPS_REFERENCE_ARCHITECTURE	Reference architecture template used in pipeline triggered by RAT:FIPS job.
RAT_PACKAGE_URL	URL to fetch regular package - for RAT pipeline triggered by RAT job.
RAT_FIPS_PACKAGE_URL	URL to fetch FIPS package - for RAT pipeline triggered by RAT job.
RAT_TRIGGER_TOKEN	Trigger token for the RAT pipeline.
RAT_PROJECT_ACCESS_TOKEN	Project access token for trigerring a RAT pipeline.
OMNIBUS_GITLAB_MIRROR_PROJECT_ACCESS_TOKEN	Project access token for building a test package.
CI_SLACK_WEBHOOK_URL	Webhook URL for Slack failure notifications.
DANGER_GITLAB_API_TOKEN	GitLab API token for dangerbot to post comments to MRs.
DEPS_GITLAB_TOKEN	Token used by dependencies.io to create MRs.
DEPS_TOKEN	Token used by CI to auth to dependencies.io.
DOCS_API_TOKEN

Release variables