Commit Graph

3105 Commits (3c8072d0e6c3809af226880a866e22c5d76964ad)
 

Author SHA1 Message Date
Stefan Prodan 72d90b5692
Merge pull request from fluxcd/build-go1.19
Build with Go 1.19
Stefan Prodan d7dadb4425
e2e: Update bootstrap test to Kubernetes 1.25.2
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Stefan Prodan 348408e16e
Build with Go 1.19
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Stefan Prodan 04de52044a
Merge pull request from carlosonunez-vmw/main
Maintain original scheme when using --token-auth
Carlos Nunez 45a00a0170
Maintain original scheme when using --token-auth
If you're using an HTTP-based Git server with Flux, you need to provide `--token-auth` to avoid triggering an SSH host key check (see [here](https://github.com/fluxcd/flux2/issues/2825#issuecomment-1151355914)). Unfortunately, doing this forces the URL in the `GitRepository` resource created during bootstrapping to always use `https`. This will cause Kustomization reconcile errors for servers that do not have HTTPS enabled or do not have the appropriate certs installed or available.

This pull request fixes this by keeping the repository URL scheme intact when using `--token-auth`.

Signed-off-by: Carlos Nunez <75340335+carlosonunez-vmw@users.noreply.github.com>
Stefan Prodan 1ac380a7f9
Merge pull request from fluxcd/component-label
Add component label for controllers and their CRDs
Stefan Prodan 2971d34a13
Add component label for controllers and their CRDs
Label each controller deployment, service, service account and CRDs with `app.kubernetes.io/component: <controller-name>`.

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Stefan Prodan 90f0d81532
Merge pull request from fluxcd/oci-insecure-flag
Add `--insecure` flag to `flux create source oci`
Stefan Prodan d5262404f3
Add insecure flag to `flux create source oci`
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Stefan Prodan 03c3cb860a
Update Azure e2e dependencies
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Stefan Prodan a1faa1d965
Merge pull request from fluxcd/update-components
Update toolkit components
fluxcdbot c40d290e46 Update toolkit components
- helm-controller to v0.24.0
  https://github.com/fluxcd/helm-controller/blob/v0.24.0/CHANGELOG.md
- kustomize-controller to v0.28.0
  https://github.com/fluxcd/kustomize-controller/blob/v0.28.0/CHANGELOG.md
- source-controller to v0.29.0
  https://github.com/fluxcd/source-controller/blob/v0.29.0/CHANGELOG.md
- notification-controller to v0.26.0
  https://github.com/fluxcd/notification-controller/blob/v0.26.0/CHANGELOG.md
- image-reflector-controller to v0.21.0
  https://github.com/fluxcd/image-reflector-controller/blob/v0.21.0/CHANGELOG.md
- image-automation-controller to v0.25.0
  https://github.com/fluxcd/image-automation-controller/blob/v0.25.0/CHANGELOG.md

Signed-off-by: GitHub <noreply@github.com>
Stefan Prodan 5106a71e6a
Merge pull request from ManoManoTech/push-autologin
Support autologin when pushing OCI artifacts
Adrien Fillon 491acf57ad
Setup CodeQL CI job with Go 1.18
Signed-off-by: Adrien Fillon <adrien.fillon@manomano.com>
Adrien Fillon 0694a9582f
Support logging in directly to the provider when pushing OCI artifacts
I've noticed during CI, that the current command
already expected a configured Docker client to
push artifacts to authenticated registries.

Some users might not want to have the Docker client
in their process (like a CI job) or build an handcrafted
config.json file.

This would allow this kind of behavior:

```
flux push artifact oci://my-registry.dev/foo:v1 \
  --source xxx \
  --revision xxx \
  --path . \
  --creds $TOKEN # Authenticate via "Bearer $TOKEN" Authorization header
```

Or via Autologin:

```
flux push artifact oci://012345678901.dkr.ecr.us-east-1.amazonaws.com/foo:v1 \
  --source xxx \
  --revision xxx \
  --path . \
  --provider aws
```

This has been implemented for:

* flux push artifact
* flux list artifact
* flux tag artifact
* flux pull artifact

This will require another PR in https://github.com/fluxcd/pkg/pull/352

Signed-off-by: Adrien Fillon <adrien.fillon@manomano.com>
Stefan Prodan 0c817378cf
Merge pull request from souleb/reconcile-repository
[bootstrap] Make sure we reconcile with the right reconciliation method
Soule BA ec2aa13165
Make sure we reconcile with the right reconciliation method
Signed-off-by: Soule BA <soule@weave.works>
Stefan Prodan c921cf0d54
Merge pull request from somtochiama/notify-finalize
Remove finalizers for notification controllers
Somtochi Onyekwere 11dd0d918c remove finalizers for notification controllers
Signed-off-by: Somtochi Onyekwere <somtochionyekwere@gmail.com>
Stefan Prodan 467969de0f
Merge pull request from fluxcd/flux-manifests
Publish the install manifests to GHCR and DockerHub as OCI artifacts
Stefan Prodan bdc5ae4573
Publish install manifests to GHCR and DockerHub as OCI artifacts
Add workflow to build and push the install manifests to:
- ghcr.io/fluxcd/flux-manifests
- docker.io/fluxcd/flux-manifests
The OCI artifacts are signed with Cosign and GitHub OIDC (keyless).
The manifests pushed to GHCR have the container images set to ghcr.io/fluxcd/<controller-name> while the manifests pushed to DockerHub have the controller images set to docker.io/fluxcd/<controller-name>.

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Stefan Prodan 1eb4b67013
Merge pull request from fluxcd/uninstall-oci-repos
Remove finalizers for OCI repositories on uninstall
Stefan Prodan e777947539
Remove finalizers for OCI repositories on uninstall
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Stefan Prodan 70b906cae2
Merge pull request from dholbach/revert-3034-fix/broken-edit-page-links-2203
Revert "Fix broken "edit this page" links in Flux CLI section"
Daniel Holbach c57afa1e56 Revert "Fix broken "edit this page" links in Flux CLI section"
Signed-off-by: Daniel Holbach <daniel@weave.works>
Stefan Prodan 73668d19d9
Merge pull request from acondrat/patch-1
Filter out non-running pods in Prometheus
Arcadie Condrat 82f847e21d
Filter out non-running pods in Prometheus
Prometheus job generated by the PodMonitor does not exclude non-running pods. All the "completed" Pods are still going to be  listed as targets in Prometheus and marked as down. This issue is related to PodMonitor implementation and is discussed in 

Signed-off-by: Arcadie Condrat <arcadie.condrat@gmail.com>
Stefan Prodan 753b2e6eda
Merge pull request from somtochiama/update-runtime
Update `flux logs` to accomodate the new format
Somtochi Onyekwere 7b95e90a33 Update flux logs to accomodate the new format
Signed-off-by: Somtochi Onyekwere <somtochionyekwere@gmail.com>
Stefan Prodan 7824229d7b
Merge pull request from dholbach/update-flux-docs-structure
update to new doc links structure
Daniel Holbach 20557f9f15 update to new doc links structure
Signed-off-by: Daniel Holbach <daniel@weave.works>
Stefan Prodan 6430f2b4b0
Merge pull request from fluxcd/azure-e2e-updates
Update packages in Azure e2e tests
Stefan Prodan 92e136ed54 Update packages in Azure e2e tests
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Signed-off-by: Philip Laine <philip.laine@gmail.com>
Stefan Prodan e79b008878
Merge pull request from fluxcd/oci-rfc-updates
Status update for RFC-0002 and RFC-0003
Stefan Prodan 43cdea01d6
Status update for RFC-0002 and RFC-0003
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Stefan Prodan 6ddaedb4fc
Merge pull request from fluxcd/kube-1.25
Update Kubernetes dependencies to v1.25.0
Stefan Prodan b4fef0a6b9
Update Kubernetes dependencies to v1.25.0
- update `k8s.io` packages to match the Kubernetes v1.25.0 release
- update `kubectl` to v1.25.0 in the flux-cli container image
- update `go.mod` to Go 1.18

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Stefan Prodan 735ebd3336
Merge pull request from fluxcd/update-components
Update toolkit components
Stefan Prodan a5a9158a24
Add provider to Helm OCI tests
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
fluxcdbot 93fdd795da Update toolkit components
- helm-controller to v0.23.1
  https://github.com/fluxcd/helm-controller/blob/v0.23.1/CHANGELOG.md
- kustomize-controller to v0.27.1
  https://github.com/fluxcd/kustomize-controller/blob/v0.27.1/CHANGELOG.md
- source-controller to v0.28.0
  https://github.com/fluxcd/source-controller/blob/v0.28.0/CHANGELOG.md
- notification-controller to v0.25.2
  https://github.com/fluxcd/notification-controller/blob/v0.25.2/CHANGELOG.md
- image-reflector-controller to v0.20.1
  https://github.com/fluxcd/image-reflector-controller/blob/v0.20.1/CHANGELOG.md
- image-automation-controller to v0.24.2
  https://github.com/fluxcd/image-automation-controller/blob/v0.24.2/CHANGELOG.md

Signed-off-by: GitHub <noreply@github.com>
Stefan Prodan 18c944d18a
Merge pull request from snebel29/fix/broken-edit-page-links-2203
Fix broken "edit this page" links in Flux CLI section 
Sven Nebel 2c9ef85f6d Fix broken "edit this page" links in Flux CLI section
Signed-off-by: Sven Nebel <nebel.sven@gmail.com>
Stefan Prodan 80669d71ef
Merge pull request from snebel29/update/terraform-exec-dep
Update tests/azure github.com/hashicorp/terraform-exec to v0.16.1
Sven Nebel b993d17148 Update tests/azure dependency
- Update "github.com/hashicorp/terraform-exec" to v0.16.1
- Replace "github.com/hashicorp/terraform-exec/tfinstall" with "github.com/hashicorp/hc-install"
- Fix typos and wording in README.md

Signed-off-by: Sven Nebel <nebel.sven@gmail.com>
Stefan Prodan c454dd481b
Merge pull request from fluxcd/rfc-0002-auth
[RFC-0002] Add auth specification for Helm OCI
Stefan Prodan 07de9d9ffe
[RFC-0002] Add auth specification for Helm OCI
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Stefan Prodan 9f26b09a06
Merge pull request from somtochiama/get-cmd
Improve error message in get cmd
Somtochi Onyekwere ad0f3373b6 Improve error message in get cmd
Signed-off-by: Somtochi Onyekwere <somtochionyekwere@gmail.com>
Stefan Prodan f880cce4f9
Merge pull request from fluxcd/validate-version
Add version validation to install commands
Stefan Prodan 8a0fd6ddf9
Add version validation to install commands
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>