Skip to content

Conversation

@andrew-anyscale
Copy link
Contributor

@andrew-anyscale andrew-anyscale commented Jan 30, 2026

For the Wanda version of building each Ray Image, we want to selectively upload to DockerHub only in certain postsubmit cases. Rather than calling on 'buildkite:copy_files --destination docker_login' separately, this refactor pushes the auth setup to a central library that can be called on certain conditions.

Without this, logic would need to be pushed into the Rayci step itself, since current login is gated on a per-Pipeline-ID basis.

Topic: auth-refactor
Relative: multiplat-support
Labels: draft
Signed-off-by: andrew andrew@anyscale.com

@andrew-anyscale
Copy link
Contributor Author

andrew-anyscale commented Jan 30, 2026

Reviews in this chain:
#60614 [ci] refactor auth out of copy_files

@andrew-anyscale
Copy link
Contributor Author

andrew-anyscale commented Jan 30, 2026

# head base diff date summary
0 68188ccb 2195731c diff Jan 30 10:19 AM 6 files changed, 103 insertions(+), 48 deletions(-)
1 7452f4cf 2195731c diff Jan 30 10:46 AM 1 file changed, 23 insertions(+), 8 deletions(-)
2 54061a8c e8e58b5f rebase Jan 30 10:58 AM 0 files changed
3 9fc08d89 26fe1233 diff Jan 30 10:59 AM 0 files changed
4 aa87d9de 26fe1233 diff Jan 30 12:22 PM 1 file changed, 2 insertions(+), 1 deletion(-)
5 c6a71b7e 60f859bc rebase Jan 30 13:28 PM 0 files changed
6 86e7fb92 557b8d7e rebase Jan 30 13:31 PM 0 files changed
7 c77beb56 aa0695a8 diff Jan 30 13:58 PM 1 file changed, 5 deletions(-)
8 c77beb56 aa0695a8 diff Jan 30 13:59 PM 0 files changed
9 ecb0349d 2b490725 diff Jan 30 14:21 PM 2 files changed, 17 insertions(+), 3 deletions(-)
10 89c38347 44aa52e6 rebase Jan 30 15:13 PM 0 files changed
11 44f98a48 3e40294d diff Jan 30 17:26 PM 0 files changed
Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request refactors authentication logic into a new centralized library, ci/ray_ci/rayci_auth.py, which is a great improvement for code organization and reusability. The new implementation for Docker Hub login also enhances security by using --password-stdin, preventing password exposure in the process list. My review focuses on the new rayci_auth.py file, offering suggestions to improve its robustness, maintainability, and error handling.

@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/auth-refactor branch from 68188cc to 7452f4c Compare January 30, 2026 18:46
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/upload-guards branch from 2195731 to e8e58b5 Compare January 30, 2026 18:58
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/auth-refactor branch 2 times, most recently from 54061a8 to 9fc08d8 Compare January 30, 2026 18:59
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/upload-guards branch from e8e58b5 to 26fe123 Compare January 30, 2026 18:59
@andrew-anyscale andrew-anyscale marked this pull request as ready for review January 30, 2026 18:59
@andrew-anyscale andrew-anyscale requested a review from a team as a code owner January 30, 2026 18:59
Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

@ray-gardener ray-gardener bot added the devprod label Jan 30, 2026
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/auth-refactor branch 2 times, most recently from aa87d9d to c6a71b7 Compare January 30, 2026 21:28
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/upload-guards branch from 26fe123 to 60f859b Compare January 30, 2026 21:28
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/auth-refactor branch from c6a71b7 to 86e7fb9 Compare January 30, 2026 21:31
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/upload-guards branch 2 times, most recently from 557b8d7 to 99cf7b7 Compare January 30, 2026 21:58
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/auth-refactor branch from 86e7fb9 to 6f67b57 Compare January 30, 2026 21:58
@andrew-anyscale andrew-anyscale changed the base branch from andrew/revup/master/upload-guards to andrew/revup/master/multiplat-support January 30, 2026 21:58
@andrew-anyscale andrew-anyscale marked this pull request as draft January 30, 2026 21:58
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/auth-refactor branch from 6f67b57 to c77beb5 Compare January 30, 2026 21:59
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/multiplat-support branch from f43d7b0 to aa0695a Compare January 30, 2026 21:59
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/auth-refactor branch from c77beb5 to ecb0349 Compare January 30, 2026 22:21
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/multiplat-support branch from aa0695a to 2b49072 Compare January 30, 2026 22:21
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/auth-refactor branch from ecb0349 to 89c3834 Compare January 30, 2026 23:13
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/multiplat-support branch from 2b49072 to 44aa52e Compare January 30, 2026 23:13
Base automatically changed from andrew/revup/master/multiplat-support to master January 31, 2026 00:56
For the Wanda version of building each Ray Image, we want to selectively upload to DockerHub only in certain postsubmit cases. Rather than calling on 'buildkite:copy_files --destination docker_login' separately, this refactor pushes the auth setup to a central library that can be called on certain conditions.

Without this, logic would need to be pushed into the Rayci step itself, since current login is gated on a per-Pipeline-ID basis.

Topic: auth-refactor
Relative: multiplat-support
Labels: draft
Signed-off-by: andrew <andrew@anyscale.com>
@andrew-anyscale andrew-anyscale force-pushed the andrew/revup/master/auth-refactor branch from 89c3834 to 44f98a4 Compare January 31, 2026 01:26
Copy link
Collaborator

@aslonnie aslonnie left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why is this in draft? is this ready for review?

Comment on lines +545 to +550
mock_config,
mock_exists,
mock_copy,
mock_ecr_login,
mock_ci_init,
mock_docker_login,
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

these are a lot of mocks.. we probably need to talk about this in person..

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

3 participants