fix(ci): drop the RBE-fragile binary-size make gate from addon_build_gates (#3425) #3509

Merged
mfreeman451 merged 3 commits from fix/addon-build-gates-drop-fragile-binary-size into staging 2026-06-01 21:16:40 +00:00
Owner

What

The native add-on publish keeps failing in make addon_build_gates:

error: artifact not found: bazel-out/.../{netprobe,bumblebee_scan,sample}_addon_bundle_*
binary-size regression gate FAILED  (Makefile check_addon_binary_size_bazel, exit 2)

check_addon_binary_size_bazel does bazel build //build/native_addons:all_binaries then a separate bazel cquery --output=files | stat. Under RBE (--remote_download_minimal) the cross-config (ST-hash) outputs aren't reliably materialized at the cquery paths locally → stat fails. --remote_download_outputs=all (#3506) didn't fix it (build/cquery config skew).

It's redundant: //build/native_addons:build_gates_test (the workflow's "Run hermetic native add-on gate fixtures" step) already includes binary_size_test, which is RBE-correct (binaries delivered as test runfiles; REQUIRE_GSA=0 after #3506).

Fix

Drop check_addon_binary_size_bazel from addon_build_gates's prerequisites — binary-size stays covered by the Bazel test. The make target remains for local use. Aligns with add-hermetic-native-addon-builds (moving gates to Bazel tests).

🤖 Generated with Claude Code

## What The native add-on publish keeps failing in `make addon_build_gates`: ``` error: artifact not found: bazel-out/.../{netprobe,bumblebee_scan,sample}_addon_bundle_* binary-size regression gate FAILED (Makefile check_addon_binary_size_bazel, exit 2) ``` `check_addon_binary_size_bazel` does `bazel build //build/native_addons:all_binaries` then a **separate** `bazel cquery --output=files | stat`. Under RBE (`--remote_download_minimal`) the cross-config (ST-hash) outputs aren't reliably materialized at the cquery paths locally → `stat` fails. `--remote_download_outputs=all` (#3506) didn't fix it (build/cquery config skew). It's **redundant**: `//build/native_addons:build_gates_test` (the workflow's "Run hermetic native add-on gate fixtures" step) already includes `binary_size_test`, which is RBE-correct (binaries delivered as test **runfiles**; `REQUIRE_GSA=0` after #3506). ## Fix Drop `check_addon_binary_size_bazel` from `addon_build_gates`'s prerequisites — binary-size stays covered by the Bazel test. The make target remains for local use. Aligns with `add-hermetic-native-addon-builds` (moving gates to Bazel tests). 🤖 Generated with [Claude Code](https://claude.com/claude-code)
spec: add endpoint sbom inventory proposal
Some checks failed
Golang Tests / test-go (push) Successful in 1m7s
lint / lint (push) Successful in 1m39s
Secret Scan / gitleaks (pull_request) Successful in 22s
lint / lint (pull_request) Successful in 1m28s
CI / build (pull_request) Failing after 2m25s
2697953073
feat(agent): add endpoint software inventory collector
Some checks failed
Secret Scan / gitleaks (pull_request) Successful in 28s
lint / lint (pull_request) Failing after 59s
lint / lint (push) Failing after 1m19s
Golang Tests / test-go (push) Successful in 1m48s
CI / build (pull_request) Failing after 2m50s
1a64e69bb6
fix(ci): drop the RBE-fragile binary-size make gate from addon_build_gates (#3425)
Some checks failed
Helm Lint / Helm Lint (pull_request) Successful in 30s
lint / lint (push) Failing after 1m3s
Secret Scan / gitleaks (pull_request) Successful in 50s
lint / lint (pull_request) Failing after 1m15s
Golang Tests / test-go (push) Successful in 2m27s
CI / build (pull_request) Failing after 3m48s
81901c4e6a
The native add-on publish keeps failing in `make addon_build_gates`:

    error: artifact not found: bazel-out/.../{netprobe,bumblebee_scan,sample}_addon_bundle_*
    binary-size regression gate FAILED  (Makefile:259 check_addon_binary_size_bazel, exit 2)

`check_addon_binary_size_bazel` does `bazel build //build/native_addons:all_binaries`
then a SEPARATE `bazel cquery --output=files | stat`. Under RBE (`--remote_download_minimal`)
the cross-config (ST-hash) outputs aren't reliably materialized at the cquery paths locally,
so the stat fails. Adding `--remote_download_outputs=all` (#3506) did not fix it — the
build/cquery config skew remains.

It's also redundant: `//build/native_addons:build_gates_test` (run by the workflow's
"Run hermetic native add-on gate fixtures" step) already includes `binary_size_test`, which
is RBE-correct because it receives the binaries as test runfiles (and is REQUIRE_GSA=0 after
#3506). So drop `check_addon_binary_size_bazel` from `addon_build_gates`'s prerequisites; the
binary-size gate stays covered by the Bazel test. (The make target is kept for local use.)

This aligns with add-hermetic-native-addon-builds (moving gates to Bazel tests).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
mfreeman451 left a comment

lgtm

lgtm
mfreeman451 deleted branch fix/addon-build-gates-drop-fragile-binary-size 2026-06-01 21:16:40 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
carverauto/serviceradar!3509
No description provided.