Adopt IRS Tractus-X repo as main repository

[jzbmw]

The Tractus-X IRS repository should be our main repository. This is the one that will prevail, even after the consortia time ends.

Link

• child of https://github.com/eclipse-tractusx/sig-release/issues/212

To make this our main repository, we need to identify all things that need to be adapted for the switch.

Hints / Details

• ...

Outcome / Acceptance Criteria

Outcome

• [ ] Feature branches will be created from the Tractus-X main branch.
• [ ] Pull Requests must be opened directly to Tractus-X main, not to Catena-X.
• [ ] The Catena-X main branch will NOT be synced back to Tractus-X, only the other way around.
• [ ] The Catena-X main branch may differ from the Tractus-X branch and contain CX-specific stuff.
• [ ] The IRS docker image will only be published on Tractus-X / DockerHub and pulled from there. 
• [ ] The IRS docker image may be pushed into the Catena-X GHCR for testing purposes.
• [ ] Releases / tags must be created on Tractus-X only.
• [ ] Workflows that need the Catena-X ArgoCD environment can only run on catenax-ng.
• [ ] Workflows need to be updated so that they can be green even on external contributions (secrets not available)
• [ ] Docker images for PRs are not supposed to be pushed into DockerHub. If a Docker image needs to be available in a PR workflow,

Acceptance Criteria

• [ ] Define the new development workflow (update existing one) which uses TractusX first
• [ ] Identify things that need to be changed for the new workflow
  • [ ] Fix directly if possible
  • [ ] If not feasible, create tasks in Jira and link them here
• [ ] Update the team on the workflow changes

Out of Scope

• ...

[dsmf]

Outcome

• [x] Feature branches will be created from the Tractus-X main branch.

• [x] Pull Requests must be opened directly to Tractus-X main, not to Catena-X.

• [x] The Catena-X main branch will NOT be synced back to Tractus-X, only the other way around.

• [x] The Catena-X main branch may differ from the Tractus-X branch and contain CX-specific stuff.

• [x] The IRS docker image will only be published on Tractus-X / DockerHub and pulled from there. (The IRS docker image may be pushed into the Catena-X GHCR for testing purposes.)

• [x] Releases / tags must be created on Tractus-X only.

• [x] Workflows that need the Catena-X ArgoCD environment can only run on catenax-ng -- cleaned up here https://github.com/eclipse-tractusx/item-relationship-service/issues/371#issuecomment-1959789258

• [x] Workflows need to be updated so that they can be green even on external contributions (secrets not available)
  -> check if secrets available and skip respective steps if not

  • Build:
  • [x] irs-build.yml:
    • [x] OK: with sonar configured: https://github.com/dsmf/tx-item-relationship-service/actions/runs/9654985828/job/26630131918 (just failed because I don't know the config values for sonar)
    • [x] OK: without sonar configured: https://github.com/dsmf/tx-item-relationship-service/actions/runs/9655077945
  • Deploy:
  • [x] OK: maven-deploy.yaml - Upload to Central Maven Registry - green, publish skipped due to missing credentials -> ok
  • Documentation:
  • [x] OK: publish-documentation.yaml - Lint and Publish documentation:
    • https://github.com/dsmf/tx-item-relationship-service/actions/runs/9675704087
    • Update GitHub pages and deployment of Swagger UI to GitHub pages skipped because only on main
  • QA Checks:
  • [x] OK: dependencies-update.yaml - Update DEPENDENCIES file
    • no change
    • only executed for when push to main
  • [x] OK: changelog-changes.yaml - Check if CHANGELOG file was modified in PR
    • [x] OK with CHANGELOG file modified: https://github.com/dsmf/tx-item-relationship-service/actions/runs/9660652660
    • [x] OK without CHANGELOG file modified: https://github.com/dsmf/tx-item-relationship-service/pull/6
  • [x] codeql.yml - CodeQL code analysis:
    • [x] OK: from branch https://github.com/dsmf/tx-item-relationship-service/actions/runs/9658649638
    • [x] OK: PR to own main: https://github.com/dsmf/tx-item-relationship-service/actions/runs/9658970783/job/26641297447?pr=3
  • [x] OK: owasp.yml - OWASP dependency scanner
    • no change
    • executes on push to main and daily by schedule
    • currently reports connector-core-0.6.0.jar: CVE-2024-4536(6.8)
  • [x] OK: spectral.yaml: https://github.com/dsmf/tx-item-relationship-service/actions/runs/9655090542 -
    • the reported error is on main too -> ok
  • [x] OK: kics.yml - KICS security and vulnerability scanner: https://github.com/dsmf/tx-item-relationship-service/actions/runs/9659965466
  • [x] OK: eclipse-dash.yml - Eclipse DASH IP Check: https://github.com/dsmf/tx-item-relationship-service/actions/runs/9655635064
  • [x] OK: quality-checks.yaml - Quality Checks (Release Guidelines): https://github.com/dsmf/tx-item-relationship-service/actions/runs/9660476425
  • [x] OK: trivy-docker-hub-scan.yml - Trivy vulnerability scanner for Docker Hub Image, https://github.com/dsmf/tx-item-relationship-service/actions/runs/9683075188
  • [x] OK: trivy-image-scan.yml - trivy vulnerability scanner for image: https://github.com/dsmf/tx-item-relationship-service/actions/runs/9672217771/job/26684158076
  • Test:
  • [x] OK: helm-test.yaml - Lint and Test Charts: https://github.com/dsmf/tx-item-relationship-service/actions/runs/9660085797
  • [x] OK: swagger-editor-validate.yml - Validate OpenAPI definition:
    • https://github.com/dsmf/tx-item-relationship-service/actions/runs/9659293316
  • [x] OK: tavern.yml - Tavern IRS API test on DEV: https://github.com/dsmf/tx-item-relationship-service/actions/runs/9659997421, 56 tests, 40 green, 16 failed
  • [x] OK: helm-test-backwards-compatability.yaml - Test k8s version compatability: https://github.com/dsmf/tx-item-relationship-service/actions/runs/9676433215
  • Smoke tests:
  • [x] OK: int-test-automation.yml - IRS smoke tests:
    • [x] OK: int-test-automation.yml renamed to smoketest.yml (in order to avoid confusion with the cucumber tests): https://github.com/dsmf/tx-item-relationship-service/actions/runs/9681311815
  • Integration tests:
  • [x] optimized: in each integration test workflow secrets are checked and message is output if any of the required secrets are missing
  • [x] OK: cucumber-integration-test.yaml - IRS Cucumber Integration Test execution (used by integration-test-DEV.yaml)
    • no longer fails if cucumber token not defined in secrets
  • [x] OK: integration-test-DEV.yaml - IRS DEV Cucumber Integration test execution
    • [x] optimized: for integration-test-DEV it is possible to change the execution filter now (to allow executing specific tests)
    • [x] renamed to cucumber-integration-test-DEV.yaml to be consistent with the INT, DIL workflow naming
  • [x] OK: cucumber-integration-test-INT.yaml - IRS INT Cucumber Integration test execution
  • check for required secrets added with speaking message if missing
  • [x] NA: cucumber-integration-test-DIL.yaml - IRS DIL Cucumber Integration test execution
  • cannot test, outdated
  • Load test:
  • [x] OK: irs-load-test.yaml - IRS Load Test - how to run - added check for missing secrets in irs-load-test.yaml
  • Release Workflows:
  • no changes here, fully automating release is work in progress => wait
  • [x] release.yaml - Release IRS
  • [x] publish-swagger-hub.yml - Publish OpenAPI to Swaggerhub (used in release.yaml)
  • [x] helm-chart-release.yaml - Release Helm Charts
  • [x] update-docs-for-release.yml - Update docs for IRS release
  • Other:
  • [x] OK: helm-upgrade.yaml - Upgrade Charts: https://github.com/dsmf/tx-item-relationship-service/actions/runs/9676768737
  • [x] OK: update-registry-library.yaml - Update irs-registry-client Version, https://github.com/dsmf/tx-item-relationship-service/actions/runs/9695359096
  • [x] DELETED: int-setup-testdata.yml - Integration testdata setup -- deleted because no longer used / outdated / obsolete

• [x] Docker images for PRs are not supposed to be pushed into DockerHub. If a Docker image needs to be available in a PR workflow, manually trigger, adapt workflow

  • seems to be skipped already, see PR-725 (was built but not pushed to dockerhub)

[dsmf]

PR

https://github.com/eclipse-tractusx/item-relationship-service/pull/735

[ds-kgassner]

• Lint and Publish documentation WF runs successfully (/)
• Update DEPENDENCIES file WF runs successfully (/)
• CHANGELOG file modified WF runs successfully (/)
• CodeQL code analysis
• OWASP dependency scanner WF runs successfully (/)
• Analyze API with Spectral WF runs successfully (/)
• KICS security and vulnerability scanner WF runs successfully (/)
• Eclipse DASH IP Check WF runs successfully (/)
• Quality Checks (Release Guidelines) WF runs successfully (/)
• Trivy vulnerability scanner for Docker Hub Image WF runs successfully (/)
• Trivy vulnerability scanner for image (/)
• Validate OpenAPI definition (/)
• Tavern IRS API test on DEV WF runs failed (X)
• Test k8s version compatability
• IRS smoke tests
• IRS Build WF runs with issues --> Build with Maven, Post Cache maven packages (x)

[dsmf]

Seems like this broke image build step and image push. => PR for fix: https://github.com/eclipse-tractusx/item-relationship-service/pull/762