From 9fc18227c787b2ef8761f331bb83fd109e040273 Mon Sep 17 00:00:00 2001 From: Ray CI Test Date: Wed, 19 Aug 2026 08:05:56 +0000 Subject: [PATCH] [ecosystem CI] pass BUILDKITE_ANALYTICS_TOKEN into test job containers Ecosystem CI test jobs run under the docker plugin with propagate-environment: false and an explicit environment allowlist, so pipeline-level env vars are dropped at the container boundary. Allowlist BUILDKITE_ANALYTICS_TOKEN (name only; the value is set as pipeline-level env in the Buildkite UI) so Test Engine collectors inside the test suites can report results. The token matches the agent's *_TOKEN redaction pattern, and analytics tokens are write-only (test-result uploads for a single suite). Signed-off-by: Ray CI Test --- ecosystem_ci/step.json | 1 + 1 file changed, 1 insertion(+) diff --git a/ecosystem_ci/step.json b/ecosystem_ci/step.json index 83ca5ba2..3ae0353f 100644 --- a/ecosystem_ci/step.json +++ b/ecosystem_ci/step.json @@ -47,6 +47,7 @@ "BUILDKITE_PARALLEL_JOB_COUNT", "BUILDKITE_MESSAGE", "BUILDKITE_BUILD_NUMBER", + "BUILDKITE_ANALYTICS_TOKEN", "PS4", "DOCKER_TLS_CERTDIR=/certs", "DOCKER_HOST=tcp://docker:2376",