4eda5a7ccd
Bump peter-evans/create-pull-request from 4.2.2 to 4.2.3
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 4.2.2 to 4.2.3.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](331d02c7e2...2b011faafd
2 years ago
882fb35601
Bump snyk/actions
...
Bumps [snyk/actions](https://github.com/snyk/actions ) from a8dd587d8a94f5663fa3d67d51abd0cc66aff244 to 1cc9026f51d822442cb4b872d8d7ead8cc69a018.
- [Release notes](https://github.com/snyk/actions/releases )
- [Commits](a8dd587d8a...1cc9026f51
2 years ago
2c35880cbf
Bump actions/setup-go from 3.3.1 to 3.4.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 3.3.1 to 3.4.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](c4a742cab1...d0a58c1c4d
2 years ago
f89525f8bd
Bump github/codeql-action from 2.1.33 to 2.1.35
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.1.33 to 2.1.35.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](678fc3afe2...b2a92eb56d
2 years ago
9db661ae63
Bump peter-evans/create-pull-request from 4.2.0 to 4.2.2
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 4.2.0 to 4.2.2.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](b4d51739f9...331d02c7e2
2 years ago
3b7c40bbb3
e2e: Refactor Azure test suite to use go-git
...
Signed-off-by: Somtochi Onyekwere <somtochionyekwere@gmail.com>
2 years ago
d0e6fcad3f
build: Pin GitHub Actions
...
The main benefit of pinning GitHub actions is the determinism it brings
in terms of what version of a given action will be executed. This is
a step towards having hermetic builds.
Once pinned to a commit, dependabot will automatically issue PRs to update
to newer versions.
Pinned versions is the only security metric from OpenSSF scorecard that
this repository currently have a zero score.
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2 years ago
93382f65bb
Bump hashicorp/setup-terraform from 2.0.2 to 2.0.3
...
Bumps [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform ) from 2.0.2 to 2.0.3.
- [Release notes](https://github.com/hashicorp/setup-terraform/releases )
- [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/setup-terraform/compare/v2.0.2...v2.0.3 )
---
updated-dependencies:
- dependency-name: hashicorp/setup-terraform
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
8bd13edc75
Add the monitoring stack to e2e tests
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
78f9a6214c
Refactor ARM64 e2e test suite
...
- Migrate the GitHub runners to Equinix c3.large.arm64 instances
- Run the test suite on all supported Kubernetes versions
- Add multi-tenancy smoke test
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
1a6b09afb4
Bump actions/setup-go from 2 to 3
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 2 to 3.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
bb1078d610
ci: Refactor GitHub workflows
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
73692df272
Additional workflow permissions tweaks
...
Signed-off-by: Eddie Knight <knight@linux.com>
2 years ago
2abf932ee4
Updated scan & update permissions
...
Signed-off-by: Eddie Knight <knight@linux.com>
2 years ago
939a75115c
Adjusted workflow permissions
...
Signed-off-by: Eddie Knight <knight@linux.com>
2 years ago
4a51b111e6
Bump peter-evans/create-pull-request from 3 to 4
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 3 to 4.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
c31367909e
Bump hashicorp/setup-terraform from 1 to 2.0.2
...
Bumps [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform ) from 1 to 2.0.2.
- [Release notes](https://github.com/hashicorp/setup-terraform/releases )
- [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/setup-terraform/compare/v1...v2.0.2 )
---
updated-dependencies:
- dependency-name: hashicorp/setup-terraform
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
09cbf348a7
Bump github/codeql-action from 1 to 2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
65a2ceec5c
Only run e2e tests for Dependabot PRs
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
4ea70765af
Enable Dependabot for GitHub Actions
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
4680abe951
Update libgit2 version in Azure e2e tests
...
Signed-off-by: Philip Laine <philip.laine@gmail.com>
2 years ago
d7dadb4425
e2e: Update bootstrap test to Kubernetes 1.25.2
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
348408e16e
Build with Go 1.19
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
491acf57ad
Setup CodeQL CI job with Go 1.18
...
Signed-off-by: Adrien Fillon <adrien.fillon@manomano.com>
2 years ago
bdc5ae4573
Publish install manifests to GHCR and DockerHub as OCI artifacts
...
Add workflow to build and push the install manifests to:
- ghcr.io/fluxcd/flux-manifests
- docker.io/fluxcd/flux-manifests
The OCI artifacts are signed with Cosign and GitHub OIDC (keyless).
The manifests pushed to GHCR have the container images set to ghcr.io/fluxcd/<controller-name> while the manifests pushed to DockerHub have the controller images set to docker.io/fluxcd/<controller-name>.
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
92e136ed54
Update packages in Azure e2e tests
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Signed-off-by: Philip Laine <philip.laine@gmail.com>
2 years ago
8049634e4d
Add `oci://` prefix
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
30e5389d02
Run e2e tests for PRs against oci branch
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
b6a78f42ea
Update SC with OCI semver support
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
e4fb8e75f9
Add e2e tests for artifact commands
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
2d8db4f20d
Implement OCIRepository commands
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2 years ago
f01911d0e2
AUR: further solve `.SRCINFO` issues
...
Due to the release CI job running on an Ubuntu machine, we do not have
easy access to `makepkg` to generate the `.SRCINFO` using `--printsrcinfo`
as this is a `pacman` specific utility, and instead we maintain a
template.
Historically seen, something went wrong here while the `PKGBUILD` file
became more complex and certain fields added there were not _also_
included in the `.SRCINFO` template.
This commit ensures everything is restored to working state, and
provides the proper fix for what was attempted in #2917 . In addition,
checksums are now included in the file.
Signed-off-by: Hidde Beydals <hello@hidde.co>
3 years ago
ca212ac592
AUR: ensure `pkgname` is bottom entry in .SRCINFO
...
Signed-off-by: Hidde Beydals <hello@hidde.co>
3 years ago
cbecd8ab56
SRCINFO: consistent style
...
Signed-off-by: Ciaran Moran <ciaran@weave.works>
3 years ago
feaab54f70
SRCINFO: fix path
...
Signed-off-by: Ciaran Moran <ciaran@weave.works>
3 years ago
9aee262054
e2e: Update ARM64 runners to Kubernetes 1.24
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
3 years ago
0b9e3d24ef
Update GitHub actions
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
3 years ago
b795e612f7
Update Go to v1.18
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
3 years ago
b5c0ae9d5a
build: update various CI dependencies
...
- kind to v0.12.0
- kubectl to v1.23.6
- helm to v3.8.2
- runner to v2.291.1
Signed-off-by: Hidde Beydals <hello@hidde.co>
3 years ago
775891fc88
build: ensure component update runs with make tidy
...
This to include the `-compat` flag.
Signed-off-by: Hidde Beydals <hello@hidde.co>
3 years ago
9e7018383a
Add pkg-config to arm runners
...
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
3 years ago
f154326391
Set minimum supported version to Kubernetes 1.20.6
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
3 years ago
e44a58cba0
ci: Fix release notes generator
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
3 years ago
a402461f9c
Sign the release artifacts checksums and images
...
- add the Flux manifests and API schemas to checksums
- sign the checksum.txt with Cosign and GitHub OIDC
- sign the flux-cli container images with Cosign and GitHub OIDC
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
3 years ago
11296cd94f
Publish Flux Software Bill of Materials (SBOM) in SPDX format
...
- generate SBOM for Flux Go modules with Syft
- publish the SBOM SPDX JSON files to GitHub releases with GoReleaser
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
3 years ago
8e7b957164
Fix Archlinux PKGBUILD check() run on ARM
...
The check() run started to fail after #2288 since ENVTEST_ARCH was not
set correctly on ARM/ARM64. This should fix the problem for the flux-go
and flux-scm AUR packages.
Signed-off-by: Aurel Canciu <aurelcanciu@gmail.com>
3 years ago
62755b4b75
Wait 60s for image automation before failing the test
...
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
3 years ago
dcfb745b1f
Improve the bootstrap e2e cleanup
...
Delete the repository regardless of the bootstrap test exit code.
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
3 years ago
192978125f
build/aur: fix the make target for the manifests
...
Signed-off-by: Tom Alexander <tom@fizz.buzz>
3 years ago
b4b3551e39
build/aur: add Git as flux-scm build dependency
...
Without git installed, makepkg fails to fetch the source. This breaks
the build for people who build their aur packages inside temporary
containers (for example aurutils with the -c flag).
Signed-off-by: Tom Alexander <tom@fizz.buzz>
3 years ago
dependabot[bot]
Somtochi Onyekwere
Paulo Gomes
Stefan Prodan
Eddie Knight
Philip Laine
Adrien Fillon
Hidde Beydals
Ciaran Moran
Aurel Canciu
Tom Alexander