You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

History

Matheus Pimenta 8229ffb674 Pin cosign to v2.6.1 xref: https://github.com/fluxcd/source-controller/issues/1923 Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>		4 days ago
..
README.md	ci: Refactor GitHub workflows	3 years ago
action.yaml	build(deps): bump the ci group across 1 directory with 10 updates	2 months ago
backport.yaml	Restore GitHub PAT for backports	2 weeks ago
conformance.yaml	build(deps): bump the ci group with 6 updates	1 month ago
e2e-azure.yaml	build(deps): bump the ci group with 6 updates	1 month ago
e2e-bootstrap.yaml	build(deps): bump the ci group with 6 updates	1 month ago
e2e-gcp.yaml	build(deps): bump the ci group across 1 directory with 3 updates	3 weeks ago
e2e.yaml	build(deps): bump the ci group with 6 updates	1 month ago
ossf.yaml	build(deps): bump the ci group across 1 directory with 3 updates	3 weeks ago
release.yaml	Pin cosign to v2.6.1	4 days ago
scan.yaml	build(deps): bump the ci group with 6 updates	1 month ago
sync-labels.yaml	build(deps): bump the ci group with 6 updates	1 month ago
update.yaml	ci: remove cron schedule from update	4 weeks ago

README.md

Flux GitHub Workflows

End-to-end Testing

The e2e workflows run a series of tests to ensure that the Flux CLI and the GitOps Toolkit controllers work well all together. The tests are written in Go, Bash, Make and Terraform.

Workflow	Jobs	Runner	Role
e2e.yaml	e2e-amd64-kubernetes	GitHub Ubuntu	integration testing with Kubernetes Kind
e2e-arm64.yaml	e2e-arm64-kubernetes	Equinix Ubuntu	integration testing with Kubernetes Kind
e2e-bootstrap.yaml	e2e-boostrap-github	GitHub Ubuntu	integration testing with GitHub API
e2e-azure.yaml	e2e-amd64-aks	GitHub Ubuntu	integration testing with Azure API
scan.yaml	scan-fossa	GitHub Ubuntu	license scanning
scan.yaml	scan-snyk	GitHub Ubuntu	vulnerability scanning
scan.yaml	scan-codeql	GitHub Ubuntu	vulnerability scanning

Components Update

The components update workflow scans the GitOps Toolkit controller repositories for new releases, amd when it finds a new controller version, the workflow performs the following steps:

Updates the controller API package version in go.mod.
Patches the controller CRDs version in the manifests/crds overlay.
Patches the controller Deployment version in manifests/bases overlay.
Opens a Pull Request against the main branch.
Triggers the e2e test suite to run for the opened PR.

Workflow	Jobs	Runner	Role
update.yaml	update-components	GitHub Ubuntu	update the GitOps Toolkit APIs and controllers

Release

The release workflow is triggered by a semver Git tag and performs the following steps:

Generates the Flux install manifests (YAML).
Generates the OpenAPI validation schemas for the GitOps Toolkit CRDs (JSON).
Generates a Software Bill of Materials (SPDX JSON).
Builds the Flux CLI binaries and the multi-arch container images.
Pushes the container images to GitHub Container Registry and DockerHub.
Signs the sbom, the binaries checksum and the container images with Cosign and GitHub OIDC.
Uploads the sbom, binaries, checksums and install manifests to GitHub Releases.
Pushes the install manifests as OCI artifacts to GitHub Container Registry and DockerHub.
Signs the OCI artifacts with Cosign and GitHub OIDC.

Workflow	Jobs	Runner	Role
release.yaml	release-flux-cli	GitHub Ubuntu	build, push and sign the CLI release artifacts
release.yaml	release-flux-manifests	GitHub Ubuntu	build, push and sign the Flux install manifests