Kong · curiositycasualty · Aug 8, 2024 · Aug 13, 2024
diff --git a/.github/workflows/add-release-pongo.yml b/.github/workflows/add-release-pongo.yml
@@ -9,6 +9,7 @@ jobs:
   set_vars:
     name: Set Vars
     runs-on: ubuntu-latest-kong
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     outputs:
       code_base: ${{ steps.define_vars.outputs.CODE_BASE }}
       tag_version: ${{ steps.define_vars.outputs.TAG_VERSION }}
@@ -33,6 +34,7 @@ jobs:
   add_release_to_pongo:
     name: Add Release to Pongo
     runs-on: ubuntu-latest-kong
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     needs:
     - set_vars
     env:

diff --git a/.github/workflows/auto-assignee.yml b/.github/workflows/auto-assignee.yml
@@ -7,6 +7,7 @@ permissions:
 jobs:
   assign-author:
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     steps:
       - name: assign-author
         # ignore the pull requests opened from PR because token is not correct

diff --git a/.github/workflows/autodocs.yml b/.github/workflows/autodocs.yml
@@ -20,6 +20,7 @@ jobs:
   build:
     name: Build dependencies
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
 
     env:
       DOWNLOAD_ROOT: $HOME/download-root
@@ -71,6 +72,7 @@ jobs:
           make dev
   autodoc:
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     needs: [build]
     steps:
       - name: Set environment variables

diff --git a/.github/workflows/backport-fail-bot.yml b/.github/workflows/backport-fail-bot.yml
@@ -7,6 +7,7 @@ on:
 jobs:
   check_comment:
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     if: github.event.issue.pull_request != null && contains(github.event.comment.body, 'cherry-pick the changes locally and resolve any conflicts')
 
     steps:

diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
@@ -10,6 +10,7 @@ jobs:
   backport:
     name: Backport
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     if: github.event.pull_request.merged
     steps:
       - uses: actions/checkout@v4

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -17,6 +17,7 @@ jobs:
   build:
     name: Build dependencies
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
 
     outputs:
       cache-key: ${{ steps.cache-key.outputs.cache-key }}

diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
@@ -44,6 +44,7 @@ jobs:
   lint-and-doc-tests:
     name: Lint and Doc tests
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     needs: build
 
     steps:
@@ -93,6 +94,7 @@ jobs:
   schedule:
     name: Schedule busted tests to run
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     needs: build
 
     env:
@@ -137,6 +139,7 @@ jobs:
   busted-tests:
     name: Busted test runner ${{ matrix.runner }}
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     needs: [build,schedule]
 
     strategy:
@@ -340,6 +343,7 @@ jobs:
   pdk-tests:
     name: PDK tests
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     needs: build
 
     steps:
@@ -413,6 +417,7 @@ jobs:
     name: Cleanup and Luacov stats aggregator
     if: ${{ always() && (inputs.coverage == true || github.event_name == 'schedule') }}
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
 
     steps:
     - name: Checkout source code

diff --git a/.github/workflows/buildifier.yml b/.github/workflows/buildifier.yml
@@ -22,6 +22,7 @@ jobs:
   autoformat:
     name: Auto-format and Check
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
 
     steps:
       - name: Check out code

diff --git a/.github/workflows/changelog-requirement.yml b/.github/workflows/changelog-requirement.yml
@@ -14,6 +14,7 @@ jobs:
     if: ${{ !contains(github.event.*.labels.*.name, 'skip-changelog') }}
     name: Requires changelog
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     steps:
       - uses: actions/checkout@v4
         with:

diff --git a/.github/workflows/changelog-validation.yml b/.github/workflows/changelog-validation.yml
@@ -8,6 +8,7 @@ jobs:
   validate-changelog:
     name: Validate changelog
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     steps:
       - uses: actions/checkout@v4
 

diff --git a/.github/workflows/cherry-picks.yml b/.github/workflows/cherry-picks.yml
@@ -11,6 +11,7 @@ jobs:
   cross-repo-cherrypick:
     name: Cherry pick to remote repository
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     # Only run when pull request is merged, or labeled
     # or when a comment containing `/cherry-pick` is created
     # and the author is a member, collaborator or owner

diff --git a/.github/workflows/community-stale.yml b/.github/workflows/community-stale.yml
@@ -6,6 +6,7 @@ on:
 jobs:
   close-issues:
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     permissions:
       issues: write
       pull-requests: write

diff --git a/.github/workflows/deck-integration.yml b/.github/workflows/deck-integration.yml
@@ -31,8 +31,8 @@ jobs:
   deck-integration:
     name: Gateway decK integration tests
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     needs: build
-    timeout-minutes: 5
 
     services:
       postgres:

diff --git a/.github/workflows/label-check.yml b/.github/workflows/label-check.yml
@@ -6,6 +6,7 @@ jobs:
   check-labels:
     name: prevent merge labels
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
 
     steps:
     - name: backport master label found

diff --git a/.github/workflows/label-community-pr.yml b/.github/workflows/label-community-pr.yml
@@ -10,6 +10,7 @@ permissions:
 jobs:
   check_author:
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     defaults:
       run:
         shell: bash

diff --git a/.github/workflows/label-schema.yml b/.github/workflows/label-schema.yml
@@ -6,6 +6,7 @@ jobs:
   schema-change-labels:
     if: "${{ contains(github.event.*.labels.*.name, 'schema-change-noteworthy') }}"
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     steps:
     - name: Schema change label found
       uses: rtCamp/action-slack-notify@v2

diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
@@ -8,5 +8,6 @@ jobs:
       contents: read
       pull-requests: write
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     steps:
     - uses: actions/labeler@v5
diff --git a/.github/workflows/openresty-patches-companion.yml b/.github/workflows/openresty-patches-companion.yml
@@ -7,6 +7,7 @@ on:
 jobs:
   create-pr:
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     steps:
       - name: Dispatch the workflow
         if: ${{ github.repository_owner == 'Kong' }}

diff --git a/.github/workflows/perf.yml b/.github/workflows/perf.yml
@@ -18,6 +18,7 @@ jobs:
   build-packages:
     name: Build dependencies
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     if: |
       github.event_name == 'schedule' ||
       (github.event_name == 'pull_request' && startsWith(github.event.pull_request.title, 'perf(')) ||
@@ -81,6 +82,7 @@ jobs:
   perf:
     name: RPS, latency and flamegraphs
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     needs: build-packages
 
     permissions:

diff --git a/.github/workflows/release-and-tests-fail-bot.yml b/.github/workflows/release-and-tests-fail-bot.yml
@@ -13,6 +13,7 @@ on:
 jobs:
   notify_failure:
     runs-on: ubuntu-latest
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     if: ${{ github.event.workflow_run.conclusion == 'failure' && github.event.workflow_run.event != 'schedule' }}
     steps:
     - name: Fetch mapping file

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -44,6 +44,7 @@ jobs:
   metadata:
     name: Metadata
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     outputs:
       kong-version: ${{ steps.build-info.outputs.kong-version }}
       prerelease-docker-repository: ${{ env.PRERELEASE_DOCKER_REPOSITORY }}
@@ -109,6 +110,7 @@ jobs:
         include: "${{ fromJSON(needs.metadata.outputs.matrix)['build-packages'] }}"
 
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     container:
       image: ${{ matrix.image }}
       options: --privileged
@@ -266,6 +268,7 @@ jobs:
     needs: [metadata, build-packages]
     name: Verify Manifest - Package ${{ matrix.label }}
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
 
     strategy:
       fail-fast: false
@@ -298,6 +301,7 @@ jobs:
     name: Build Images - ${{ matrix.label }}
     needs: [metadata, build-packages]
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
 
     permissions:
       # create comments on commits for docker images needs the `write` permission
@@ -402,6 +406,7 @@ jobs:
     needs: [metadata, build-images]
     name: Verify Manifest - Image ${{ matrix.label }}
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     if: github.event_name != 'pull_request' || (github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]')
 
     strategy:
@@ -436,6 +441,7 @@ jobs:
     name: Scan Images - ${{ matrix.label }}
     needs: [metadata, build-images]
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     if: |-
       always()
       && fromJSON(needs.metadata.outputs.matrix)['scan-vulnerabilities'] != ''
@@ -500,8 +506,8 @@ jobs:
     name: Release Packages - ${{ matrix.label }} - ${{ needs.metadata.outputs.release-desc }}
     needs: [metadata, build-packages, build-images]
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     if: fromJSON(needs.metadata.outputs.matrix)['release-packages'] != ''
-    timeout-minutes: 5 # PULP takes a while to publish
     environment: release
 
     strategy:
@@ -565,6 +571,7 @@ jobs:
     name: Release Images - ${{ matrix.label }} - ${{ needs.metadata.outputs.release-desc }}
     needs: [metadata, build-images]
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     if: fromJSON(needs.metadata.outputs.matrix)['release-images'] != ''
 
     strategy:

diff --git a/.github/workflows/update-ngx-wasm-module.yml b/.github/workflows/update-ngx-wasm-module.yml
@@ -9,6 +9,7 @@ on:
 jobs:
   update:
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
 
     permissions:
       # required to create a branch and push commits

diff --git a/.github/workflows/update-test-runtime-statistics.yml b/.github/workflows/update-test-runtime-statistics.yml
@@ -12,6 +12,7 @@ jobs:
   process-statistics:
     name: Download statistics from GitHub and combine them
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     steps:
       - name: Checkout source code
         uses: actions/checkout@v4

diff --git a/.github/workflows/upgrade-tests.yml b/.github/workflows/upgrade-tests.yml
@@ -36,6 +36,7 @@ jobs:
   upgrade-test:
     name: Run migration tests
     runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(vars.GHA_DEFAULT_TIMEOUT) }}
     needs: build
 
     steps: