Paulo Gomes
d0e6fcad3f
build: Pin GitHub Actions
...
The main benefit of pinning GitHub actions is the determinism it brings
in terms of what version of a given action will be executed. This is
a step towards having hermetic builds.
Once pinned to a commit, dependabot will automatically issue PRs to update
to newer versions.
Pinned versions is the only security metric from OpenSSF scorecard that
this repository currently have a zero score.
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2 years ago
Paulo Gomes
d4ba6c4f44
Merge pull request #3299 from aryan9600/use-pkg-git
...
Refactor bootstrap process to use `fluxcd/pkg/git`
2 years ago
Sanskar Jaiswal
35e1b5cbb9
add aws codecommit example and validation; azure devops example
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Sanskar Jaiswal
f8da3a1b44
make gpg signing more robust for bootstrap
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Sanskar Jaiswal
4ea253220a
use fluxcd/go-git instead of go-git/go-git directly
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Sanskar Jaiswal
0a5048a56b
refactor bootstrap process to use fluxcd/pkg/git
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Hidde Beydals
a06652a374
Merge pull request #3233 from fluxcd/rfc-artifact-revision-fmt
...
RFC-0005: Artifact `Revision` format and introduction of `Digest`
2 years ago
Hidde Beydals
86e3991998
RFC: change 0005 status to implementable
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
d9102150cf
RFC: address more nits
...
- Properly refer to OCI repository name
- Ensure checksum examples are unique to help distinguish difference
between Revision and Digest
- Slightly change proposal wordings to explicitly mention deprecation
of `Checksum` field
- Add reference to OCI digests spec
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
fd08bae1c7
RFC: reword summary
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
4b2af2ede2
RFC: address review nits
...
Various typo and structural fixes.
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
c6be0b9389
RFC: add assigned reference number (0005)
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
6ccdfa074f
RFC: wording nit
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
8801029d95
RFC: avoid overlap between calculation and config
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
5faf6ebadc
RFC: add design details artifact digest
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
f92d708051
RFC: add design details artifact revision
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
76c31c6303
RFC: outline design details
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
cf8ac4dd0e
RFC: document alternatives
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
879041677c
RFC: write down user stories
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
cac36365ae
RFC: add additional user story about algo config
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
2c12385344
RFC: add revision format example for Buckets
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Hidde Beydals
fa217b8775
RFC: draft proposal for artifact revision fmt
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
2 years ago
Stefan Prodan
6f7cdde1ba
Merge pull request #3324 from fluxcd/kubectl-1.25.4
...
Update kubectl and remove nsswitch.conf in flux-cli image
2 years ago
Stefan Prodan
da9cc00a56
Update kubectl and remove nsswitch.conf in flux-cli image
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
Stefan Prodan
161c90eb8f
Merge pull request #3317 from souleb/update-pkg-kustomize
...
Add a dry-run mode to flux build kustomization
2 years ago
Soule BA
ad5daee004
Add a dry-run mode to flux build kustomization
...
If implemented user will be able to use `flux build kustomization`
without any connection to the cluster.
Signed-off-by: Soule BA <soule@weave.works>
2 years ago
Soule BA
35ea91c111
Revert MakeSecureFSOnDisk to MakeFSOnDisk
...
The reason to this is because MakeSecureFSOnDisk is not consistent
between OS.
Signed-off-by: Soule BA <soule@weave.works>
2 years ago
Stefan Prodan
6763490ef6
Merge pull request #3288 from fluxcd/dependabot/github_actions/hashicorp/setup-terraform-2.0.3
...
Bump hashicorp/setup-terraform from 2.0.2 to 2.0.3
2 years ago
dependabot[bot]
93382f65bb
Bump hashicorp/setup-terraform from 2.0.2 to 2.0.3
...
Bumps [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform ) from 2.0.2 to 2.0.3.
- [Release notes](https://github.com/hashicorp/setup-terraform/releases )
- [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/setup-terraform/compare/v2.0.2...v2.0.3 )
---
updated-dependencies:
- dependency-name: hashicorp/setup-terraform
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Stefan Prodan
190c732c3a
Merge pull request #3303 from fluxcd/e2e-arm64-flux-monitoring
...
monitoring: Use kube-prometheus-stack signed OCI Helm chart
2 years ago
Stefan Prodan
8bd13edc75
Add the monitoring stack to e2e tests
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
Stefan Prodan
98e0774f56
Use kube-prometheus-stack signed OCI Helm chart
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
Philip Laine
c3a44e890d
Merge pull request #3249 from fluxcd/bootstrap/files
...
Remove file reading from bootstrap package
2 years ago
Philip Laine
a4734d7e30
Remove file reading from bootstrap package
...
Signed-off-by: Philip Laine <philip.laine@gmail.com>
2 years ago
Stefan Prodan
2c267c95e5
Merge pull request #3281 from fluxcd/e2e-arm64-refactoring
...
Refactor ARM64 e2e test suite
2 years ago
Stefan Prodan
78f9a6214c
Refactor ARM64 e2e test suite
...
- Migrate the GitHub runners to Equinix c3.large.arm64 instances
- Run the test suite on all supported Kubernetes versions
- Add multi-tenancy smoke test
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
Paulo Gomes
7ee90a34e5
Merge pull request #3269 from fluxcd/dependabot/github_actions/actions/setup-go-3
...
Bump actions/setup-go from 2 to 3
2 years ago
dependabot[bot]
1a6b09afb4
Bump actions/setup-go from 2 to 3
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 2 to 3.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Stefan Prodan
c7e158aaa7
Merge pull request #3081 from aryan9600/rfc-insecure-http
...
RFC-0004: Block insecure HTTP connections across Flux
2 years ago
Sanskar Jaiswal
98c7afd69c
add last updated date and mark as implementable
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Sanskar Jaiswal
f3da59e5af
fix markdown formatting and update status conditions
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Sanskar Jaiswal
a17210f387
add implementation history section
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Sanskar Jaiswal
443212d3da
rename flag and propose renaming insecure-kubeconfig-tls
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Sanskar Jaiswal
7a5f60e23f
address concerns about kustomize and helm controller
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Sanskar Jaiswal
7a1d978339
add details about CLI in insecure HTTP RFC
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Sanskar Jaiswal
6c7ef96354
add design details for insecure HTTP RFC
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Sanskar Jaiswal
d2e7a37eb4
add user stories and alternatives for insecure HTTP RFC
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Sanskar Jaiswal
1d8105247a
add RFC for blocking insecure HTTP connections across Flux
...
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2 years ago
Stefan Prodan
6d110cdfb1
Merge pull request #3229 from fluxcd/rfc-0002-cosign
...
RFC-0002: Add Cosign verification for Helm OCI charts
2 years ago
Stefan Prodan
d015895caa
RFC-0002: Add Cosign verification for Helm OCI charts
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago