- job:
    concurrent: true
    description: |
      Mbed TLS release job on a chosen branch of <tt>mbedtls-test</tt>.
      <p>
      Check at least one of the <tt>RUN_</tt> parameters!
      Otherwise not much will happen.
      <p>
      Choose the branch of <tt>mbedtls-test</tt> under <tt>TEST_BRANCH</tt>.
    disabled: false
    name: mbedtls-release-ci-testing
    parameters:
    - string:
        default: ssh://git@github.com/Mbed-TLS/mbedtls.git
        description: Mbed TLS repo/fork
        name: MBED_TLS_REPO
        trim: true
    - string:
        default: development
        description: Branch or commit to test
        name: MBED_TLS_BRANCH
        trim: true
    - string:
        default: ssh://git@github.com/Mbed-TLS/mbedtls-framework.git
        description: Framework repo/fork
        name: FRAMEWORK_REPO
        trim: true
    - string:
        default: ''
        description: Enter Framework branch/sha to override the sha specified in the Mbed TLS branch.
        name: FRAMEWORK_BRANCH
        trim: true
    - string:
        default: ssh://git@github.com/Mbed-TLS/TF-PSA-Crypto.git
        description: TF PSA Crypto repo/fork
        name: TF_PSA_CRYPTO_REPO
        trim: true
    - string:
        default: ''
        description: Enter TF PSA Crypto branch/sha to override the sha specified in the Mbed TLS branch.
        name: TF_PSA_CRYPTO_BRANCH
        trim: true
    - bool:
        default: false
        description: Run basic-build-test.sh (test coverage measurement)
        name: RUN_BASIC_BUILD_TEST
    - bool:
        default: false
        description: Run all.sh (complete) on Linux
        name: RUN_ALL_SH
    - bool:
        default: false
        description: Run a selection of all.sh on FreeBSD
        name: RUN_FREEBSD
    - bool:
        default: false
        description: Run Windows tests
        name: RUN_WINDOWS_TEST
    - bool:
        default: false
        description: |
          Run TF-PSA-Crypto all.sh tests - Only enable if both TF_PSA_CRYPTO_REPO and TF_PSA_CRYPTO_BRANCH are set!
          Otherwise the test run will fail during BranchInfo gathering.
        name: RUN_TF_PSA_CRYPTO_ALL_SH
    - bool:
        default: false
        description: Push head to coverity branch, triggering a scan (only done for the development branch)
        name: PUSH_COVERITY
    - string:
        name: TEST_BRANCH
        description: Branch or tag in https://github.com/Mbed-TLS/mbedtls-test.git (forks are not supported)
        default: main
        trim: true
    - string:
        name: TEST_PASS_EMAIL_ADDRESS
        description: E-mail addresses (delimited by ,) that a report should be sent to when the test run passes
        default: ''
        trim: true
    - string:
        name: TEST_FAIL_EMAIL_ADDRESS
        description: E-mail addresses (delimited by ,) that a report should be sent to when the test run fails
        default: ''
        trim: true
    pipeline-scm:
      lightweight-checkout: true
      scm:
      - git:
          branches:
          - ${TEST_BRANCH}
          credentials-id: mbedtls-github-ssh
          shallow-clone: true
          do-not-fetch-tags: true
          honor-refspec: true
          url: ssh://git@github.com/Mbed-TLS/mbedtls-test.git
      script-path: vars/mbedtls-release-Jenkinsfile
    project-type: pipeline
    properties:
    - speed-durability:
        hint: performance-optimized
    - build-blocker:
        block-level: GLOBAL
        blocking-jobs: []
        queue-scanning: DISABLED
        use-build-blocker: false
    - build-discarder:
        artifact-days-to-keep: -1
        artifact-num-to-keep: -1
        days-to-keep: 60
        num-to-keep: 30
    - github:
        url: https://github.com/Mbed-TLS/mbedtls
    - inject:
        enabled: true
        keep-build-variables: true
        keep-system-variables: true
        load-from-master: false
        override-build-parameters: false
        properties-content: |-
          GIT_CREDENTIALS_ID=mbedtls-github-ssh