Test selfhosted runner workflow

.circleci/config.yml

@@ -6,7 +6,7 @@ jobs:
   build_frontend:
     working_directory: ~/opencti
     docker:
-      - image: nikolaik/python-nodejs:python3.10-nodejs18
+      - image: nikolaik/python-nodejs:python3.11-nodejs22
     resource_class: large
     steps:
       - run:
@@ -35,7 +35,7 @@ jobs:
   build_platform:
     working_directory: ~/opencti
     docker:
-      - image: nikolaik/python-nodejs:python3.10-nodejs18
+      - image: nikolaik/python-nodejs:python3.11-nodejs22
     resource_class: medium+
     steps:
       - run:
@@ -61,7 +61,7 @@ jobs:
   build_platform_rolling:
     working_directory: ~/opencti
     docker:
-      - image: nikolaik/python-nodejs:python3.10-nodejs18
+      - image: nikolaik/python-nodejs:python3.11-nodejs22
     resource_class: medium+
     steps:
       - run:
@@ -90,7 +90,7 @@ jobs:
   build_platform_prerelease:
     working_directory: ~/opencti
     docker:
-      - image: nikolaik/python-nodejs:python3.10-nodejs18
+      - image: nikolaik/python-nodejs:python3.11-nodejs22
     resource_class: medium+
     steps:
       - run:
@@ -119,7 +119,7 @@ jobs:
   build_platform_musl:
     working_directory: ~/opencti_musl
     docker:
-      - image: nikolaik/python-nodejs:python3.10-nodejs18-alpine
+      - image: nikolaik/python-nodejs:python3.11-nodejs22-alpine
     resource_class: medium+
     steps:
       - run:
@@ -145,7 +145,7 @@ jobs:
   build_platform_musl_rolling:
     working_directory: ~/opencti_musl
     docker:
-      - image: nikolaik/python-nodejs:python3.10-nodejs18-alpine
+      - image: nikolaik/python-nodejs:python3.11-nodejs22-alpine
     resource_class: medium+
     steps:
       - run:
@@ -174,7 +174,7 @@ jobs:
   build_platform_musl_prerelease:
     working_directory: ~/opencti_musl
     docker:
-      - image: nikolaik/python-nodejs:python3.10-nodejs18-alpine
+      - image: nikolaik/python-nodejs:python3.11-nodejs22-alpine
     resource_class: medium+
     steps:
       - run:

.drone.yml

@@ -47,10 +47,7 @@ steps:
       RABBITMQ__HOSTNAME: rabbitmq
       EXPIRATION_SCHEDULER__ENABLED: false
       SUBSCRIPTION_SCHEDULER__ENABLED: false
-      SMTP__HOSTNAME: smtp.ethereal.email
-      SMTP__PORT: 587
-      SMTP__USERNAME: jennyfer.mraz@ethereal.email
-      SMTP__PASSWORD: frhJ2mSPTfaEutpbug
+      SMTP__ENABLED: false
       PYTHONUNBUFFERED: 1
     commands:
       - apk add build-base git libffi-dev cargo
@@ -97,7 +94,7 @@ steps:
       - NODE_OPTIONS=--max_old_space_size=8192 yarn test
 
   - name: frontend-e2e-tests
-    image: node:22.16.0
+    image: node:22.18.0
     volumes:
     - name: cache-node-frontend-e2e
       path: /drone/src/opencti-platform/opencti-front/node_modules
@@ -118,7 +115,7 @@ steps:
       - frontend-tests
 
   - name: upload-build-artefact
-    image: node:22.16.0
+    image: node:22.18.0
     failure: ignore
     when:
       status:
@@ -150,7 +147,7 @@ steps:
       - api-tests
 
   - name: frontend-verify-translation
-    image: node:22.16.0
+    image: node:22.18.0
     commands:
       - cd opencti-platform/opencti-front
       - node script/verify-translation.js
@@ -206,21 +203,21 @@ steps:
 
 services:
   - name: redis
-    image: redis:8.0.0
+    image: redis:8.0.3
   - name: elastic
-    image: docker.elastic.co/elasticsearch/elasticsearch:8.18.2
+    image: docker.elastic.co/elasticsearch/elasticsearch:8.19.2
     environment:
       discovery.type: single-node
       xpack.security.enabled: false
       ES_JAVA_OPTS: -Xms2g -Xmx2g
   - name: minio
-    image: minio/minio:RELEASE.2023-07-07T07-13-57Z
+    image: minio/minio:RELEASE.2025-06-13T11-33-47Z
     environment:
       MINIO_ROOT_USER: ChangeMe
       MINIO_ROOT_PASSWORD: ChangeMe
     command: [server, /data]
   - name: rabbitmq
-    image: rabbitmq:4.1-management
+    image: rabbitmq:4.1.4-management
 
   - name: opencti-raw-start
     image: nikolaik/python-nodejs:python3.11-nodejs22-alpine
@@ -247,6 +244,7 @@ services:
       RABBITMQ__QUEUE_PREFIX: raw-start
       EXPIRATION_SCHEDULER__ENABLED: false
       SUBSCRIPTION_SCHEDULER__ENABLED: false
+      SMTP__ENABLED: false
     commands:
       - sleep 10
       - ls -lart
@@ -285,6 +283,7 @@ services:
       RABBITMQ__QUEUE_PREFIX: live-start
       EXPIRATION_SCHEDULER__ENABLED: false
       SUBSCRIPTION_SCHEDULER__ENABLED: false
+      SMTP__ENABLED: false
     commands:
       - sleep 10
       - apk add build-base git libffi-dev cargo
@@ -322,6 +321,7 @@ services:
       RABBITMQ__QUEUE_PREFIX: direct-start
       EXPIRATION_SCHEDULER__ENABLED: false
       SUBSCRIPTION_SCHEDULER__ENABLED: false
+      SMTP__ENABLED: false
     commands:
       - sleep 10
       - apk add build-base git libffi-dev cargo
@@ -398,6 +398,7 @@ services:
       RABBITMQ__QUEUE_PREFIX: restore-start
       EXPIRATION_SCHEDULER__ENABLED: false
       SUBSCRIPTION_SCHEDULER__ENABLED: false
+      SMTP__ENABLED: false
     commands:
       - sleep 10
       - apk add build-base git libffi-dev cargo
@@ -436,6 +437,7 @@ services:
       EXPIRATION_SCHEDULER__ENABLED: false
       SUBSCRIPTION_SCHEDULER__ENABLED: false
       PUBLISHER_MANAGER__ENABLED: false
+      SMTP__ENABLED: false
     commands:
       - sleep 10
       - apk add build-base git libffi-dev cargo
@@ -495,3 +497,6 @@ volumes:
   - name: cache-node-frontend-e2e
     host:
       path: /tmp/cache-node-frontend-e2e
+
+image_pull_secrets:
+  - dockerconfigjson

.github/ISSUE_TEMPLATE/feature_request.md

@@ -2,8 +2,9 @@
 name: Feature request
 about: Ask for a new feature to be implemented in OpenCTI
 title: ''
-labels: feature, needs triage
+labels: needs triage
 assignees: ''
+type: feature
 
 ---
 

.github/actions/k8s-run-pod-opencti/action.yml

@@ -0,0 +1,51 @@
+name: "Run Kubernetes Pod with Custom Command"
+description: "Starts a pod with a custom command and optionally exposes it"
+inputs:
+  name:
+    description: "Pod and service name"
+    required: true
+  image:
+    description: "Container image"
+    required: true
+  command:
+    description: "Custom command"
+    required: true
+  args:
+    description: "Arguments to the command (space-separated)"
+    required: false
+  port:
+    description: "Port to expose"
+    required: false
+  expose:
+    description: "Whether to expose via a Service"
+    default: "false"
+    required: false
+runs:
+  using: "composite"
+  steps:
+    - shell: bash
+      run: |
+        set -e
+
+        # Clean any existing pod or service
+        kubectl delete pod ${{ inputs.name }} --ignore-not-found
+        if [ "${{ inputs.expose }}" = "true" ]; then
+          kubectl delete service ${{ inputs.name }} --ignore-not-found
+        fi
+
+        # Create pod with custom command
+        kubectl run ${{ inputs.name }} \
+          --image=${{ inputs.image }} \
+          --restart=Never \
+          --command -- ${{ inputs.command }} ${{ inputs.args }}
+
+        # Optional: expose as service
+        if [ "${{ inputs.expose }}" = "true" ] && [ -n "${{ inputs.port }}" ]; then
+          kubectl expose pod ${{ inputs.name }} \
+            --port=${{ inputs.port }} \
+            --target-port=${{ inputs.port }} \
+            --name=${{ inputs.name }}
+        fi
+
+        # Wait for pod to be ready
+        kubectl wait --for=condition=Ready pod/${{ inputs.name }} --timeout=60s