.gitlab-ci.yml

---
image: cincproject/omnibus-debian

stages:
  - patch
  - package
  - test
  - cleanup
  - deploy
  - publish

variables:
  ORIGIN: https://github.com/chef/chef.git
  REF: main
  CHANNEL: unstable
  CINC_PRODUCT: cinc
  CINC_FOUNDATION_VERSION: "3.2.8"
  OMNIBUS_FIPS_MODE: "true"
  GIT_CACHE: "false"
  HAB_ORIGIN: cinc
  HAB_NONINTERACTIVE: "true"
  OMNIBUS_LOG_LEVEL: "info"

workflow:
  rules:
    # Run if we trigger a pipeline from the web
    - if: $CI_PIPELINE_SOURCE == "web"
    # Run if we trigger a pipeline from another project (i.e. upstream/chef)
    - if: $CI_PIPELINE_SOURCE == "pipeline"
    # Run if this is a merge request
    - if: $CI_MERGE_REQUEST_ID

include:
  - local: .gitlab/package.yml
  - local: .gitlab/test.yml

patch:
  stage: patch
  tags:
    - docker-x86_64
  script:
    - ./patch.sh
  artifacts:
    expire_in: 1mo
    paths:
      - chef/

.bio_setup:
  before_script:
    - scripts/install-biome.sh

# Package stage

package:source:
  stage: package
  needs:
    - patch
  tags:
    - docker-x86_64
  script:
    - ./build-source.sh cinc chef
  artifacts:
    expire_in: 1mo
    paths:
      - source/*

package:bio:linux:
  stage: package
  extends:
    - .bio_setup
  allow_failure: true
  tags:
    - docker-x86_64
  needs:
    - patch
  script:
    - bio pkg build ./chef
  artifacts:
    paths:
      - results/*.hart

package:amazonlinux-2023:x86_64:
  extends: .package:amazonlinux
  image: cincproject/omnibus-amazonlinux:2023
  cache:
    key: amazonlinux:2023:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "2023"

package:amazonlinux-2023:aarch64:
  extends: .package:amazonlinux
  image: cincproject/omnibus-amazonlinux:2023
  cache:
    key: amazonlinux:2023:aarch64
  tags:
    - docker-aarch64-v8.2-a
  variables:
    PLATFORM_VER: "2023"
    OMNIBUS_FIPS_MODE: "false"

package:centos-8:x86_64:
  extends: .package:centos
  image: cincproject/omnibus-almalinux:8
  cache:
    key: centos-stream:8:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "8"

package:centos-8:aarch64:
  extends: .package:centos
  image: cincproject/omnibus-almalinux:8
  cache:
    key: centos-stream:8:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "8"
    OMNIBUS_FIPS_MODE: "false"

package:centos-8:ppc64le:
  extends: .package:centos
  image: cincproject/omnibus-almalinux:8
  cache:
    key: centos-stream:8:ppc64le
  tags:
    - docker-ppc64le
  variables:
    PLATFORM_VER: "8"

package:centos-8:s390x:
  extends: .package:centos
  image: cincproject/omnibus-almalinux:8
  cache:
    key: centos:8:s390x
  tags:
    - docker-s390x
  needs:
    - patch
  variables:
    PLATFORM_VER: "8"

package:centos-9:x86_64:
  extends: .package:centos
  image: cincproject/omnibus-almalinux:9
  cache:
    key: centos-stream:9:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "9"

package:centos-9:aarch64:
  extends: .package:centos
  image: cincproject/omnibus-almalinux:9
  cache:
    key: centos-stream:9:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "9"
    OMNIBUS_FIPS_MODE: "false"

package:centos-9:ppc64le:
  extends: .package:centos
  image: cincproject/omnibus-almalinux:9
  cache:
    key: centos-stream:9:ppc64le
  tags:
    - docker-ppc64le-p9
  variables:
    PLATFORM_VER: "9"

package:centos-9:s390x:
  extends: .package:centos
  image: cincproject/omnibus-almalinux:9
  cache:
    key: centos:9:s390x
  tags:
    - docker-s390x
  needs:
    - patch
  variables:
    PLATFORM_VER: "9"

package:debian-11:x86_64:
  extends: .package:debian
  image: cincproject/omnibus-debian:11
  cache:
    key: debian:11:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "11"

package:debian-11:aarch64:
  extends: .package:debian
  image: cincproject/omnibus-debian:11
  cache:
    key: debian:11:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "11"
    OMNIBUS_FIPS_MODE: "false"

package:debian-12:x86_64:
  extends: .package:debian
  image: cincproject/omnibus-debian:12
  cache:
    key: debian:12:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "12"

package:debian-12:aarch64:
  extends: .package:debian
  image: cincproject/omnibus-debian:12
  cache:
    key: debian:12:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "12"
    OMNIBUS_FIPS_MODE: "false"

package:macos-11:
  extends: .package:macos
  cache:
    key: macos:11
  tags:
    - macos-11
  variables:
    PLATFORM_VER: "11"
    OMNIBUS_FIPS_MODE: "false"

package:macos-12:
  extends: .package:macos
  cache:
    key: macos:12
  tags:
    - macos-12
  variables:
    PLATFORM_VER: "12"
    OMNIBUS_FIPS_MODE: "false"

package:macos-12:aarch64:
  extends: .package:macos
  cache:
    key: macos:12:aarch64
  tags:
    - macos-12-aarch64
  variables:
    PLATFORM_VER: "12"
    OMNIBUS_FIPS_MODE: "false"

package:macos-13:
  extends: .package:macos
  cache:
    key: macos:13
  tags:
    - macos-13
  variables:
    PLATFORM_VER: "13"
    OMNIBUS_FIPS_MODE: "false"

package:macos-13:aarch64:
  extends: .package:macos
  cache:
    key: macos:13:aarch64
  tags:
    - macos-13-aarch64
  variables:
    PLATFORM_VER: "13"
    OMNIBUS_FIPS_MODE: "false"

package:opensuse-15:x86_64:
  extends: .package:opensuse
  image: cincproject/omnibus-opensuse:15.2
  cache:
    key: opensuse:15:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "15"

package:opensuse-15:aarch64:
  extends: .package:opensuse
  image: cincproject/omnibus-opensuse:15.2
  cache:
    key: opensuse:15:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "15"
    OMNIBUS_FIPS_MODE: "false"

package:windows-2012r2:
  extends: .package:windows
  cache:
    key: windows-2012r2
  tags:
    - windows-x64-ucrt64
  variables:
    PLATFORM_VER: "2012r2"
    # https://discourse.chef.io/t/chef-infra-client-18-0-169-released/21570#known-issues-5
    OMNIBUS_FIPS_MODE: "false"

package:ubuntu-18.04:x86_64:
  extends: .package:ubuntu
  image: cincproject/omnibus-ubuntu:18.04
  cache:
    key: ubuntu:18.04:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "18.04"

package:ubuntu-18.04:aarch64:
  extends: .package:ubuntu
  image: cincproject/omnibus-ubuntu:18.04
  cache:
    key: ubuntu:18.04:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "18.04"
    OMNIBUS_FIPS_MODE: "false"

package:rockylinux-8:x86_64:
  extends: .package:rockylinux
  image: cincproject/omnibus-rockylinux:8
  cache:
    key: rockylinux:8:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "8"

package:rockylinux-8:aarch64:
  extends: .package:rockylinux
  image: cincproject/omnibus-rockylinux:8
  cache:
    key: rockylinux:8:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "8"
    OMNIBUS_FIPS_MODE: "false"

package:rockylinux-9:x86_64:
  extends: .package:rockylinux
  image: cincproject/omnibus-rockylinux:9
  cache:
    key: rockylinux:9:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "9"

package:rockylinux-9:aarch64:
  extends: .package:rockylinux
  image: cincproject/omnibus-rockylinux:9
  cache:
    key: rockylinux:9:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "9"
    OMNIBUS_FIPS_MODE: "false"

package:ubuntu-20.04:x86_64:
  extends: .package:ubuntu
  image: cincproject/omnibus-ubuntu:20.04
  cache:
    key: ubuntu:20.04:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "20.04"

package:ubuntu-20.04:aarch64:
  extends: .package:ubuntu
  image: cincproject/omnibus-ubuntu:20.04
  cache:
    key: ubuntu:20.04:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "20.04"
    OMNIBUS_FIPS_MODE: "false"

package:ubuntu-22.04:x86_64:
  extends: .package:ubuntu
  image: cincproject/omnibus-ubuntu:22.04
  cache:
    key: ubuntu:22.04:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "22.04"

package:ubuntu-22.04:aarch64:
  extends: .package:ubuntu
  image: cincproject/omnibus-ubuntu:22.04
  cache:
    key: ubuntu:22.04:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "22.04"
    OMNIBUS_FIPS_MODE: "false"

# Test stage
test:bio:linux:
  stage: test
  extends:
    - .bio_setup
  allow_failure: true
  tags:
    - docker-x86_64
  needs:
    - package:bio:linux
  script:
    - bio install results/*.hart --binlink
    - export CINC_PATH=$(bio pkg path cincproject/cinc-client)
    - export GEM_PATH=${CINC_PATH}/vendor:$GEM_PATH
    - ln -s $CINC_PATH /opt/cinc
    - mkdir /opt/cinc/embedded
    - ln -s /opt/cinc/bin /opt/cinc/embedded/bin
    - ln -s $(bio pkg path core/ruby31)/bin/ruby /opt/cinc/embedded/bin/ruby
    - cinc-auditor exec test/integration/cinc-tests --no-distinct-exit --reporter cli junit:junit.xml
  artifacts:
    reports:
      junit: junit.xml
  variables:
    APPBUNDLER_ALLOW_RVM: "true"
    HAB_TEST: "true"

test:amazonlinux-2023:x86_64:
  extends: .test:amazonlinux
  image: cincproject/omnibus-amazonlinux:2023
  needs:
    - package:amazonlinux-2023:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "2023"

test:amazonlinux-2023:aarch64:
  extends: .test:amazonlinux
  image: cincproject/omnibus-amazonlinux:2023
  needs:
    - package:amazonlinux-2023:aarch64
  tags:
    - docker-aarch64-v8.2-a
  variables:
    PLATFORM_VER: "2023"

test:centos-8:x86_64:
  extends: .test:centos
  image: cincproject/omnibus-almalinux:8
  needs:
    - package:centos-8:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "8"

test:centos-8:aarch64:
  extends: .test:centos
  image: cincproject/omnibus-almalinux:8
  needs:
    - package:centos-8:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "8"

test:centos-8:ppc64le:
  extends: .test:centos
  image: cincproject/omnibus-almalinux:8
  needs:
    - package:centos-8:ppc64le
  tags:
    - docker-ppc64le
  variables:
    PLATFORM_VER: "8"

test:centos-8:s390x:
  extends: .test:centos
  image: cincproject/omnibus-almalinux:8
  needs:
    - package:centos-8:s390x
  tags:
    - docker-s390x
  variables:
    PLATFORM_VER: "8"

test:centos-9:x86_64:
  extends: .test:centos
  image: cincproject/omnibus-almalinux:9
  needs:
    - package:centos-9:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "9"

test:centos-9:aarch64:
  extends: .test:centos
  image: cincproject/omnibus-almalinux:9
  needs:
    - package:centos-9:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "9"

test:centos-9:ppc64le:
  extends: .test:centos
  image: cincproject/omnibus-almalinux:9
  needs:
    - package:centos-9:ppc64le
  tags:
    - docker-ppc64le-p9
  variables:
    PLATFORM_VER: "9"

test:centos-9:s390x:
  extends: .test:centos
  image: cincproject/omnibus-almalinux:9
  needs:
    - package:centos-9:s390x
  tags:
    - docker-s390x
  variables:
    PLATFORM_VER: "9"

test:debian-11:x86_64:
  extends: .test:debian
  image: cincproject/omnibus-debian:11
  needs:
    - package:debian-11:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "11"

test:debian-11:aarch64:
  extends: .test:debian
  image: cincproject/omnibus-debian:11
  needs:
    - package:debian-11:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "11"

test:debian-12:x86_64:
  extends: .test:debian
  image: cincproject/omnibus-debian:12
  needs:
    - package:debian-12:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "12"

test:debian-12:aarch64:
  extends: .test:debian
  image: cincproject/omnibus-debian:12
  needs:
    - package:debian-12:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "12"

test:macos-11:
  extends: .test:macos
  needs:
    - package:macos-11
  tags:
    - macos-11
  variables:
    PLATFORM_VER: "11"

test:macos-12:
  extends: .test:macos
  needs:
    - package:macos-12
  tags:
    - macos-12
  variables:
    PLATFORM_VER: "12"

test:macos-12:aarch64:
  extends: .test:macos
  needs:
    - package:macos-12:aarch64
  tags:
    - macos-12-aarch64
  variables:
    PLATFORM_VER: "12"

test:macos-13:
  extends: .test:macos
  needs:
    - package:macos-13
  tags:
    - macos-13
  variables:
    PLATFORM_VER: "13"

test:macos-13:aarch64:
  extends: .test:macos
  needs:
    - package:macos-13:aarch64
  tags:
    - macos-13-aarch64
  variables:
    PLATFORM_VER: "13"

test:opensuse-15:x86_64:
  extends: .test:opensuse
  image: cincproject/omnibus-opensuse:15
  needs:
    - package:opensuse-15:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "15"

test:opensuse-15:aarch64:
  extends: .test:opensuse
  image: cincproject/omnibus-opensuse:15
  needs:
    - package:opensuse-15:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "15"

test:rockylinux-8:x86_64:
  extends: .test:rockylinux
  image: cincproject/omnibus-rockylinux:8
  needs:
    - package:rockylinux-8:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "8"

test:rockylinux-8:aarch64:
  extends: .test:rockylinux
  image: cincproject/omnibus-rockylinux:8
  needs:
    - package:rockylinux-8:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "8"

test:rockylinux-9:x86_64:
  extends: .test:rockylinux
  image: cincproject/omnibus-rockylinux:9
  needs:
    - package:rockylinux-9:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "9"

test:rockylinux-9:aarch64:
  extends: .test:rockylinux
  image: cincproject/omnibus-rockylinux:9
  needs:
    - package:rockylinux-9:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "9"

test:ubuntu-18.04:x86_64:
  extends: .test:ubuntu
  image: cincproject/omnibus-ubuntu:18.04
  needs:
    - package:ubuntu-18.04:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "18.04"

test:ubuntu-18.04:aarch64:
  extends: .test:ubuntu
  image: cincproject/omnibus-ubuntu:18.04
  needs:
    - package:ubuntu-18.04:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "18.04"

test:ubuntu-20.04:x86_64:
  extends: .test:ubuntu
  image: cincproject/omnibus-ubuntu:20.04
  needs:
    - package:ubuntu-20.04:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "20.04"

test:ubuntu-20.04:aarch64:
  extends: .test:ubuntu
  image: cincproject/omnibus-ubuntu:20.04
  needs:
    - package:ubuntu-20.04:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "20.04"

test:ubuntu-22.04:x86_64:
  extends: .test:ubuntu
  image: cincproject/omnibus-ubuntu:22.04
  needs:
    - package:ubuntu-22.04:x86_64
  tags:
    - docker-x86_64
  variables:
    PLATFORM_VER: "22.04"

test:ubuntu-22.04:aarch64:
  extends: .test:ubuntu
  image: cincproject/omnibus-ubuntu:22.04
  needs:
    - package:ubuntu-22.04:aarch64
  tags:
    - docker-aarch64
  variables:
    PLATFORM_VER: "22.04"

test:sources:
  image: cincproject/docker-auditor
  stage: test
  needs:
    - package:source
  tags:
    - docker-x86_64
  script:
    - apk add bash outils-sha256
    - cinc-auditor exec test/integration/cinc-sources --no-distinct-exit --reporter cli junit:junit.xml
  artifacts:
    reports:
      junit: junit.xml

test:windows-2012r2:
  extends: .test:windows
  needs:
    - package:windows-2012r2
  tags:
    - windows-x64-ucrt64
  variables:
    PLATFORM_VER: "2012r2"

# Deploy stage

.ssh-setup:
  before_script:
    - eval $(ssh-agent -s)
    - echo "${SSH_PRIVATE_KEY}" | tr -d '\r' | ssh-add - > /dev/null
    - mkdir -p ~/.ssh
    - chmod 700 ~/.ssh
    - echo "${SSH_KNOWN_HOSTS}" > ~/.ssh/known_hosts
    - chmod 644 ~/.ssh/known_hosts

deploy:
  allow_failure: false
  stage: deploy
  extends: .ssh-setup
  # Only run if this is triggered from the web
  rules:
    - if: $CI_PIPELINE_SOURCE == "web"
      when: manual
    - when: never
  tags:
    - docker-x86_64
  dependencies:
    - package:source
    - package:amazonlinux-2023:x86_64
    - package:amazonlinux-2023:aarch64
    - package:centos-8:aarch64
    - package:centos-8:ppc64le
    - package:centos-8:x86_64
    - package:centos-8:s390x
    - package:centos-9:aarch64
    - package:centos-9:ppc64le
    - package:centos-9:x86_64
    - package:centos-9:s390x
    - package:debian-11:aarch64
    - package:debian-11:x86_64
    - package:debian-12:aarch64
    - package:debian-12:x86_64
    - package:macos-11
    - package:macos-12
    - package:macos-12:aarch64
    - package:macos-13
    - package:macos-13:aarch64
    - package:opensuse-15:aarch64
    - package:opensuse-15:x86_64
    - package:rockylinux-8:aarch64
    - package:rockylinux-8:x86_64
    - package:rockylinux-9:aarch64
    - package:rockylinux-9:x86_64
    - package:ubuntu-18.04:aarch64
    - package:ubuntu-18.04:x86_64
    - package:ubuntu-20.04:aarch64
    - package:ubuntu-20.04:x86_64
    - package:ubuntu-22.04:aarch64
    - package:ubuntu-22.04:x86_64
    - package:windows-2012r2
  script:
    - ssh cinc@${DOWNLOADS_HOST} "mkdir -p /data/incoming/files/${CHANNEL}/cinc/$(cat VERSION)"
    - ssh cinc@${DOWNLOADS_HOST} "mkdir -p /data/incoming/source/${CHANNEL}/cinc/"
    - rsync -avH --delete data/ cinc@${DOWNLOADS_HOST}:/data/incoming/files/${CHANNEL}/cinc/$(cat VERSION)/
    - rsync -avH --delete source/ cinc@${DOWNLOADS_HOST}:/data/incoming/source/${CHANNEL}/cinc/
    - ssh cinc@${DOWNLOADS_HOST} "chmod 755 /data/incoming/files/${CHANNEL}/cinc/$(cat VERSION)/"

deploy:bio:linux:
  stage: deploy
  allow_failure: true
  rules:
    - if: $CI_PIPELINE_SOURCE == "web"
      when: manual
    - when: never
  extends:
    - .bio_setup
  tags:
    - docker-x86_64
  needs:
    - package:bio:linux
    - test:bio:linux
  script:
    - bio pkg upload results/*.hart

# Publish stage

publish:
  stage: publish
  extends: .ssh-setup
  dependencies: []
  # Only run if this is triggered from the web
  rules:
    - if: $CI_PIPELINE_SOURCE == "web"
      when: on_success
    - when: never
  tags:
    - downloads
  script:
    - sudo mkdir -p /data/mirror/{files,source}/${CHANNEL}/cinc
    - sudo /usr/bin/rsync -avH /data/incoming/files/${CHANNEL}/cinc/ /data/mirror/files/${CHANNEL}/cinc/
    - sudo /usr/bin/rsync -avH /data/incoming/source/${CHANNEL}/cinc/ /data/mirror/source/${CHANNEL}/cinc/
    - sudo -E -u cinc /usr/local/bin/update-cinc-api
    - ssh -q cinc@${MIRROR_HOST} "~/sync-from-master"

publish-gems:
  stage: publish
  # Only run if this is triggered from the web
  rules:
    - if: $CI_PIPELINE_SOURCE == "web"
      when: on_success
    - when: never
  tags:
    - docker-x86_64
  dependencies:
    - patch
  script:
    - ./publish-gems.sh

publish-docker:
  image: docker:latest
  services:
    - docker:dind
  stage: publish
  # Only run if this is triggered from the web
  rules:
    - if: $CI_PIPELINE_SOURCE == "web"
      when: on_success
    - if: $CHANNEL == "unstable"
      when: never
    - when: never
  tags:
    - docker-x86_64
  dependencies:
    - patch
  # binaries required for script
  before_script:
    - apk add curl bash
  script:
    - bash docker.sh
  variables:
    DOCKER_TLS_CERTDIR: "/certs"

publish:bio:linux:
  needs:
    - package:bio:linux
    - deploy:bio:linux
  extends:
    - .bio_setup
  allow_failure: true
  stage: publish
  tags:
    - docker-x86_64
  rules:
    - if: $CI_PIPELINE_SOURCE == "web"
      when: on_success
    - when: never
  script:
    - bio pkg install core/jq-static -b
    - export PKG=$(bio pkg info results/*.hart -j | jq -r '[.origin,.name,.version,.release] | join("/")')
    - bio pkg promote $PKG $CHANNEL

.cleanup:
  stage: cleanup
  dependencies: []
  variables:
    GIT_CHECKOUT: "false"
  when: always
  script:
    - sudo rm -rf chef/
    - sudo rm -rf ${CI_PROJECT_DIR}/cinc-project/distribution/client/

cleanup:macos-11:
  extends: .cleanup
  tags:
    - macos-11

cleanup:macos-12:
  extends: .cleanup
  tags:
    - macos-12

cleanup:macos-12-aarch64:
  extends: .cleanup
  tags:
    - macos-12-aarch64

cleanup:macos-13:
  extends: .cleanup
  tags:
    - macos-13

cleanup:macos-13-aarch64:
  extends: .cleanup
  tags:
    - macos-13-aarch64