Commit Graph

1167 Commits

Author SHA1 Message Date
Paulo Gomes a53cae97ac
Set go version to 1.16
make verify is failing 'go mod tidy: go.mod file indicates go 1.16, but maximum supported version is 1.15' which indicates that the default go version on the runner is 1.15.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-13 10:16:12 +00:00
Paulo Gomes f371eb3035
Fix static build for armv7
Leverage libraries installed in base-debian11 (glibc, libssl and openssl)
therefore refrain from linking libc/libdl and ignore unresolved symbols
at build time.
Libssl had to be kept as the behaviour without it is not consistent across
all supported architectures.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-13 10:16:11 +00:00
Paulo Gomes 7abe7591f4
Add make verify
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-13 10:16:10 +00:00
Paulo Gomes 0c9078c5d1
Bump LIBGIT2_TAG to libgit2-1.1.1-2
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-13 10:16:09 +00:00
Paulo Gomes e47739353c
Add curl timeout for attributions
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-13 10:16:08 +00:00
Paulo Gomes 42e4455100
Make Attributions markdown friendly
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-13 10:16:07 +00:00
Paulo Gomes f6029ab0f6
Set MINIO tag that supports arm64
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-13 10:16:06 +00:00
Paulo Gomes 7608449c3b
Add arm64 test ci tests
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-13 10:16:06 +00:00
Paulo Gomes a76cef6bde
Extract e2e tests from github actions
Enable users to run the exact same tests locally as they would be executed
as part of their PRs.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-13 10:16:05 +00:00
Paulo Gomes 97d7a6ad22
Use gcr.io/distroless/base-debian11
The statically linked binary has lingering dependencing to glibc, which
leads to errors at runtime when using distroless/static. One key culprit is libnss,
which is not available in static form through package managers.

In order to support distroless/static, glibc would have to be recompiled using
the --enable-static-nss flag, and the resulting libnss_{dns,files}.a would need
to be linked during the build process.

Due to the unnecessary complexity mentioned above, distroless/base is being used
instead.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-13 10:16:04 +00:00
Paulo Gomes 6ab959d6fb
Add copyright attributions
Adds an initial ATTRIBUTIONS.md file containing the open source
components that source-controller depends on, and their copyright
information.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-13 10:16:03 +00:00
Paulo Gomes 7f886f0bcf
Statically build source-controller into distroless image
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-13 10:16:02 +00:00
Hidde Beydals 05b980cb5c
Merge pull request #540 from fluxcd/helm-repo-index-err-fix 2022-01-13 11:12:15 +01:00
Hidde Beydals 8aad5520b6 helm: remove temp file name from index cache err
Due to the temporary file having a random suffix, it would result in
the notification-controller not rate limiting the messages as they
are "unique".

For the close error (which also makes use of the name), we keep the
information as it might be of importance to figure out why the close
failed.

Signed-off-by: Hidde Beydals <hello@hidde.co>
2022-01-13 10:54:37 +01:00
Stefan Prodan d2eec330aa
Merge pull request #538 from tomhuang12/fix-defer-close
Update file close operation to not use defer and add test case for CopyFromPath
2022-01-12 14:19:00 +02:00
Tom Huang 5bb428349e
proper file close operation based on feedback
Signed-off-by: Tom Huang <tom.huang@weave.works>
2022-01-11 15:50:25 -05:00
Tom Huang 8868d3938a
Update file close operation to not use defer and add test case for CopyFromPath
Signed-off-by: Tom Huang <tom.huang@weave.works>
2022-01-11 13:23:17 -05:00
Stefan Prodan 07d1a4f599
Merge pull request #534 from fluxcd/release-v0.20.1
Release v0.20.1
2022-01-07 11:17:14 +02:00
Stefan Prodan 9b6726cc19
Release v0.20.1
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-07 11:00:29 +02:00
Stefan Prodan 4b14870e08
Merge pull request #533 from fluxcd/log-tmp-cleanup-error
Log the error when tmp cleanup fails
2022-01-07 10:56:15 +02:00
Stefan Prodan eacabe23a1
Log the error when tmp cleanup fails
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-07 10:37:06 +02:00
Stefan Prodan 8b6965be81
Merge pull request #532 from fluxcd/continerd-CVE-2021-43816-patch
Update containerd to v1.5.9 (fix CVE-2021-43816)
2022-01-07 10:36:32 +02:00
Stefan Prodan 641aac496c
Update containerd to v1.5.9 (fix CVE-2021-43816)
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-07 10:03:18 +02:00
Stefan Prodan 553d116eb8
Merge pull request #530 from fluxcd/release-v0.20.0
Release v0.20.0
2022-01-05 16:51:08 +02:00
Stefan Prodan c1ad3aade5
Release v0.20.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-05 16:30:03 +02:00
Stefan Prodan 7d7ad40dbf
Merge pull request #529 from fluxcd/containerd-v1.5.8
Update containerd to v1.5.8 (fix GHSA-5j5w-g665-5m35)
2022-01-05 16:05:54 +02:00
Stefan Prodan 509a0dd983
Update containerd to v1.5.8 (fix GHSA-5j5w-g665-5m35)
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-05 15:47:29 +02:00
Stefan Prodan bd6fc92f1c
Merge pull request #473 from fluxcd/go-v1.17
Update Go to v1.17
2022-01-05 15:34:04 +02:00
Aurel Canciu 22d0880e4d
Update flux pkg components
Signed-off-by: Aurel Canciu <aurelcanciu@gmail.com>
2021-12-20 14:47:44 +01:00
Aurel Canciu 27ef5c10d8
Remove mod replaces
The mod replaces are no longer required since helm v3.7.1.

Signed-off-by: Aurel Canciu <aurelcanciu@gmail.com>
2021-12-20 13:11:21 +01:00
Aurel Canciu e3d04b31bc
Update Go to v1.17
Signed-off-by: Aurel Canciu <aurelcanciu@gmail.com>
2021-12-20 13:11:21 +01:00
Hidde Beydals 1475ecaa9b
Merge pull request #505 from pjbgf/doc-dev.md 2021-12-17 16:08:28 +01:00
Paulo Gomes 49f4262f90
docs: extend development documentation
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2021-12-17 13:47:37 +00:00
Stefan Prodan f9e308238c
Merge pull request #515 from aryan9600/aryan9600/apple-silicon
Fix potentially broken support for macOS
2021-12-13 12:37:26 +02:00
Sanskar Jaiswal d174bc9449 fix potentially broken support for macos
macOS support is broken for users who rely on the Makefile to install
libgit2 for them. libgit2.1.1.dylib could not be dynamically linked at runtime
because it couldn't be found. This patch makes the following changes to
the Makefile:
1) Respects the user's PKG_CONFIG_PATH present in the env so that both
   libgit2.pc and openssl.pc are discoverable.
2) Embeds the required rpath in the binary at compile time, so that
   libgit2.1.1.dylib can be found at runtime. For more info see:
   https://github.com/fluxcd/source-controller/pull/515#discussion_r764245029
Signed-off-by: Sanskar Jaiswal <sanskar.jaiswal@weave.works>
2021-12-13 15:28:13 +05:30
Hidde Beydals 3f5da113ae
Merge pull request #520 from fluxcd/update-build-deps 2021-12-10 14:30:54 +01:00
Hidde Beydals dd091a00ae build: update tonistiigi/xx to v1.1.0
https://github.com/tonistiigi/xx/releases/tag/v1.1.0

Signed-off-by: Hidde Beydals <hello@hidde.co>
2021-12-10 12:25:14 +01:00
Hidde Beydals 16320c73f1 build: update Go to 1.16.12
Signed-off-by: Hidde Beydals <hello@hidde.co>
2021-12-10 12:24:34 +01:00
Hidde Beydals 9ee4377746
Merge pull request #519 from fluxcd/release-v0.19.2 2021-12-09 15:31:12 +01:00
Hidde Beydals 981d457d97 Release v0.19.2
Signed-off-by: Hidde Beydals <hello@hidde.co>
2021-12-09 15:11:12 +01:00
Hidde Beydals ddad549828
Merge pull request #517 from cwyl02/default-observed-generation 2021-12-09 14:49:03 +01:00
York Chen 9eab99fe00 crds: set default observedGeneration to -1
This ensures the resources aren't marked as Healthy prematurely
by tools as e.g. kstatus. Which will now report a status of
`InProgress` instead of `Ready`.

Signed-off-by: York Chen <ychen@d2iq.com>
2021-12-09 14:19:09 +01:00
Stefan Prodan bb6794cf34
Merge pull request #518 from pjbgf/security-advisories
Update github.com/opencontainers/runc to v1.0.3 (fix CVE-2021-43784)
2021-12-09 12:57:54 +02:00
Paulo Gomes 058788b623
Bump dependencies to patch security advisories
Advisories fixed:
github.com/opencontainers/runc: CVE-2021-43784 GO-2021-0085 GO-2021-0087

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2021-12-09 10:11:34 +00:00
Stefan Prodan cfa72ad526
Merge pull request #514 from jonathan-innis/change-bucket-jsonpath
Change bucket JSONPath from URL to endpoint
2021-12-05 09:48:12 +02:00
Jonathan Innis 8870a0b3af Change bucket JSONPath from url to endpoint
Signed-off-by: Jonathan Innis <jonathan.innis.ji@gmail.com>
2021-12-04 15:15:49 -08:00
Hidde Beydals e08f091ad2
Merge pull request #511 from fluxcd/release-v0.19.1 2021-12-03 13:56:28 +01:00
Hidde Beydals 865523a077 Release v0.19.1
Signed-off-by: Hidde Beydals <hello@hidde.co>
2021-12-03 13:40:09 +01:00
Hidde Beydals 50f930a11b
Merge pull request #507 from fluxcd/chart-meta-short-sha 2021-12-03 09:35:53 +01:00
Hidde Beydals 5ddeb0934f controllers: use short SHA in chart SemVer meta
As the full version can be used as a label value, the full SHA from the
reference takes up too much space from the 63 characters available in
total.

To mitigate against this, we now take a "short" version of the first 12
characters, which was still unique for the Linux kernel in 2019 with
875.000 commits:
http://git-scm.com/book/en/v2/Git-Tools-Revision-Selection#Short-SHA-1

This should be sufficient to safely detect all changes within the
context of operations.

Signed-off-by: Hidde Beydals <hello@hidde.co>
2021-12-02 22:28:18 +01:00