feat: allow overrides of installed components in case of embargoed CVEs

.pipelines/.vsts-vhd-builder-release.yaml

@@ -8,8 +8,15 @@ variables:
 pool:
   name: $(POOL_NAME)
 
-
 parameters:
+  - name: useOverrides
+    displayName: Use component overrides
+    type: boolean
+    default: false
+  - name: overrideBranch
+    displayName: Branch in aks-rp to use for overrides
+    type: string
+    default: master
   - name: build1804containerd
     displayName: Build 1804 containerd
     type: boolean
@@ -185,6 +192,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 1804-containerd
       - job: build1804gen2containerd
         condition: eq('${{ parameters.build1804gen2containerd }}', true)
@@ -209,6 +218,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 1804-gen2-containerd
       - job: build1804gpucontainerd
         condition: eq('${{ parameters.build1804gpucontainerd }}', true)
@@ -233,6 +244,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 1804-gpu-containerd
       - job: build1804gen2gpucontainerd
         condition: eq('${{ parameters.build1804gen2gpucontainerd }}', true)
@@ -257,6 +270,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 1804-gen2-gpu-containerd
       - job: buildMarinerV2gen1
         condition: eq('${{ parameters.buildMarinerV2gen1 }}', true)
@@ -283,6 +298,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: marinerv2-gen1
       - job: buildAzureLinuxV2gen1
         condition: eq('${{ parameters.buildAzureLinuxV2gen1 }}', true)
@@ -309,6 +326,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: azurelinuxv2-gen1
       - job: buildMarinerV2gen2
         condition: eq('${{ parameters.buildMarinerV2gen2 }}', true)
@@ -335,6 +354,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: marinerv2-gen2
       - job: buildAzureLinuxV2gen2
         condition: eq('${{ parameters.buildAzureLinuxV2gen2 }}', true)
@@ -361,6 +382,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: azurelinuxv2-gen2
       - job: buildMarinerV2gen1fips
         condition: eq('${{ parameters.buildMarinerV2gen1fips }}', true)
@@ -387,6 +410,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: marinerv2-gen1-fips
       - job: buildAzureLinuxV2gen1fips
         condition: eq('${{ parameters.buildAzureLinuxV2gen1fips }}', true)
@@ -413,6 +438,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: azurelinuxv2-gen1-fips
       - job: buildMarinerV2gen2fips
         condition: eq('${{ parameters.buildMarinerV2gen2fips }}', true)
@@ -439,6 +466,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: marinerv2-gen2-fips
       - job: buildAzureLinuxV2gen2fips
         condition: eq('${{ parameters.buildAzureLinuxV2gen2fips }}', true)
@@ -465,6 +494,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: azurelinuxv2-gen2-fips
       - job: buildMarinerV2ARM64
         condition: eq('${{ parameters.buildMarinerV2ARM64 }}', true)
@@ -491,6 +522,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: marinerv2-gen2-arm64
       - job: buildAzureLinuxV2ARM64
         condition: eq('${{ parameters.buildAzureLinuxV2ARM64 }}', true)
@@ -517,6 +550,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: azurelinuxv2-gen2-arm64
       - job: buildMarinerV2gen2kata
         condition: eq('${{ parameters.buildMarinerV2gen2kata }}', true)
@@ -543,6 +578,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: marinerv2-gen2-kata
       - job: buildAzureLinuxV2gen2kata
         condition: eq('${{ parameters.buildAzureLinuxV2gen2kata }}', true)
@@ -569,6 +606,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: azurelinuxv2-gen2-kata
       - job: buildMarinerV2gen2TrustedLaunch
         condition: eq('${{ parameters.buildMarinerV2gen2TrustedLaunch }}', true)
@@ -595,6 +634,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: marinerv2-gen2-trustedlaunch
       - job: buildAzureLinuxV2gen2TrustedLaunch
         condition: eq('${{ parameters.buildAzureLinuxV2gen2TrustedLaunch }}', true)
@@ -621,6 +662,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: azurelinuxv2-gen2-trustedlaunch
       - job: buildMarinerV2gen2kataTrustedLaunch
         condition: eq('${{ parameters.buildMarinerV2gen2kataTrustedLaunch }}', true)
@@ -647,6 +690,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: marinerv2-gen2-kata-trustedlaunch
       - job: buildAzureLinuxV2gen2kataTrustedLaunch
         condition: eq('${{ parameters.buildAzureLinuxV2gen2kataTrustedLaunch }}', true)
@@ -673,6 +718,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: azurelinuxv2-gen2-kata-trustedlaunch
       - job: build1804fipscontainerd
         condition: eq('${{ parameters.build1804fipscontainerd }}', true)
@@ -698,6 +745,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 1804-fips-containerd
       - job: build1804fipsgen2containerd
         condition: eq('${{ parameters.build1804fipsgen2containerd }}', true)
@@ -723,6 +772,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 1804-fips-gen2-containerd
       - job: build2004fipscontainerd
         condition: eq('${{ parameters.build2004fipscontainerd }}', true)
@@ -748,6 +799,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2004-fips-containerd
       - job: build2004fipsgen2containerd
         condition: eq('${{ parameters.build2004fipsgen2containerd }}', true)
@@ -773,6 +826,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2004-fips-gen2-containerd
       - job: build2204fipscontainerd
         condition: eq('${{ parameters.build2204fipscontainerd }}', true)
@@ -799,6 +854,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2204-fips-containerd
       - job: build2204fipsgen2containerd
         condition: eq('${{ parameters.build2204fipsgen2containerd }}', true)
@@ -825,6 +882,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2204-fips-gen2-containerd
       - job: build2204arm64gen2containerd
         condition: eq('${{ parameters.build2204arm64gen2containerd }}', true)
@@ -850,6 +909,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2204-arm64-gen2-containerd
       - job: build2404arm64gen2containerd
         condition: eq('${{ parameters.build2404arm64gen2containerd }}', true)
@@ -876,6 +937,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2404-arm64-gen2-containerd
       - job: build2204containerd
         condition: eq('${{ parameters.build2204containerd }}', true)
@@ -900,6 +963,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2204-containerd
       - job: build2204gen2containerd
         condition: eq('${{ parameters.build2204gen2containerd }}', true)
@@ -924,6 +989,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2204-gen2-containerd
       - job: build2404containerd
         condition: eq('${{ parameters.build2404containerd }}', true)
@@ -948,6 +1015,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2404-containerd
       - job: build2404gen2containerd
         condition: eq('${{ parameters.build2404gen2containerd }}', true)
@@ -972,6 +1041,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2404-gen2-containerd
       - job: build2004cvmgen2containerd
         condition: eq('${{ parameters.build2004cvmgen2containerd }}', true)
@@ -996,6 +1067,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2004-cvm-gen2-containerd
       - job: build2204tlgen2containerd
         condition: eq('${{ parameters.build2204tlgen2containerd }}', true)
@@ -1020,6 +1093,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2204-tl-gen2-containerd
       - job: build2204minimalgen1containerd
         condition: eq('${{ parameters.build2204minimalgen1containerd }}', true)
@@ -1044,6 +1119,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2204-minimal-gen1-containerd
       - job: build2204minimalgen2containerd
         condition: eq('${{ parameters.build2204minimalgen2containerd }}', true)
@@ -1068,6 +1145,8 @@ stages:
             displayName: Setup Build Variables
           - template: ./templates/.builder-release-template.yaml
             parameters:
+              useOverrides: ${{ parameters.useOverrides }}
+              overrideBranch: ${{ parameters.overrideBranch }}
               artifactName: 2204-minimal-gen2-containerd
   - stage: Run_E2E_Tests
     condition: and(ne(variables.SKIP_E2E_TESTS, 'true'), eq('${{ parameters.dryrun }}', false))