Commit Graph

1124 Commits

Author SHA1 Message Date
Hidde Beydals 657f80bf6c
Merge pull request #572 from pjbgf/new-fuzz 2022-02-09 11:39:55 +01:00
Paulo Gomes cd6d33c101
Increase gingko timeout to 60s
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-08 17:49:51 +00:00
Paulo Gomes d8da814d2e
Initial fuzzing tests
This PR refactors and supersedes: https://github.com/fluxcd/source-controller/pull/443

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
Co-authored-by: Sanskar Jaiswal <sanskar.jaiswal@weave.works>
Co-authored-by: AdamKorcz <adam@adalogics.com>
2022-02-08 17:49:34 +00:00
Hidde Beydals e0d034440a
Merge pull request #562 from pjbgf/test-alpine 2022-02-08 13:21:33 +01:00
Paulo Gomes 80e1d243e6
Upgrade to libgit2-1.1.1-6
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-08 10:51:20 +00:00
Paulo Gomes c5e2e5e30b
Add make test execution for macos-10.15
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-07 18:36:18 +00:00
Paulo Gomes fa00ec8fc7
Migrate from deprecated ginkgo async testing
https://github.com/onsi/ginkgo/blob/ver2/docs/MIGRATING_TO_V2.md\#removed-async-testing

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-07 15:08:03 +00:00
Paulo Gomes 21e71c3750
Set u+w to envtest folders
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-07 13:00:58 +00:00
Paulo Gomes 60c98b5471
Update libgit2 to 1.1.1-6
Fix issues developing in amd64, arm64 and apple silicon

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-07 13:00:57 +00:00
Paulo Gomes 62928217a0
Optimise cross compilation time
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-07 13:00:56 +00:00
Paulo Gomes 990b4a361b
Use static libraries from built image
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-07 13:00:55 +00:00
Stefan Prodan ddc6cfeba0
Merge pull request #571 from fluxcd/release-v0.21.2
Release v0.21.2
2022-02-07 12:12:23 +02:00
Stefan Prodan e3e9deb3fd
Release v0.21.2
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-02-07 11:50:32 +02:00
Stefan Prodan 5aec67b7f1
Merge pull request #570 from fluxcd/default-timeout
Increase default timeout to 60s
2022-02-07 11:43:55 +02:00
Stefan Prodan fb45c9caf6
Increase default timeout to 60s
Increase the default timeout from 20s to 60s for Git repository cloning and Bucket download

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-02-07 10:29:43 +02:00
Hidde Beydals f1e69d1f26
Merge pull request #563 from fluxcd/release-0.21.1 2022-01-27 11:51:58 +01:00
Hidde Beydals 01946f22a3 Release v0.21.1
Signed-off-by: Hidde Beydals <hello@hidde.co>
2022-01-27 11:16:21 +01:00
Hidde Beydals 93c636e42c
Merge pull request #561 from pjbgf/fix-host 2022-01-26 18:56:29 +01:00
Paulo Gomes 9479d04779
Fix host mismatch in libgit2
Depending on libgit2 version or from its dependencies, the hostname may or may not contain ports

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-26 17:25:18 +00:00
Stefan Prodan 4aad17445b
Merge pull request #553 from fluxcd/release-0.21.0
Release v0.21.0
2022-01-26 16:24:59 +02:00
Stefan Prodan 2049246adf
Release v0.21.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-26 15:38:10 +02:00
Hidde Beydals 1441af5853
Merge pull request #560 from pjbgf/pin-alpine 2022-01-26 14:36:36 +01:00
Paulo Gomes ac3870c80b
Pin target image to alpine:3.15
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-26 13:06:22 +00:00
Stefan Prodan c37562775f
Merge pull request #558 from pjbgf/musl-tool-chain
Statically build using musl toolchain and target alpine
2022-01-26 14:39:07 +02:00
Paulo Gomes d163ebae14
Statically build using musl toolchain and target alpine
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-26 12:11:49 +00:00
Stefan Prodan 1c2ee2907a
Merge pull request #555 from yiannistri/dev-docs
Update dev docs
2022-01-25 17:49:35 +02:00
Yiannis ba2299307d Update dev docs
Signed-off-by: Yiannis <yiannis.triantafyllopoulos@gmail.com>
2022-01-25 15:09:47 +00:00
Stefan Prodan ce594e92ab
Merge pull request #556 from mvoitko/fix/missing-port-protocol-in-manager-config
Fix the missing protocol for the first port in manager config
2022-01-25 10:45:04 +02:00
Maksym Voitko 44836641a8 Fix the missing protocol for the first port in manager config
Signed-off-by: Maksym Voitko <max.voitko@gmail.com>
2022-01-25 00:43:35 +02:00
Stefan Prodan e25d191b89
Merge pull request #554 from fluxcd/update-git2go-v31.7.6
Update git2go to v31.7.6
2022-01-21 13:36:45 +02:00
Sunny c40e6829ec
Update git2go to v31.7.6
Keeping the git2go version the same as in image-automation-controller.

Signed-off-by: Sunny <darkowlzz@protonmail.com>
2022-01-21 16:39:16 +05:30
Stefan Prodan e1655b6b47
Merge pull request #551 from souleb/token-permissions
Add Permissions to github Workflows
2022-01-20 20:06:29 +02:00
Soule BA 53fa1f9e3e
Add Permissions to github Workflows
Imrove GITHUB_TOKEN permissions in the workflows.

Signed-off-by: Soule BA <soule@weave.works>
2022-01-20 18:01:49 +01:00
Hidde Beydals d1ab4d7c8e
Merge pull request #543 from bigkevmcd/include-directories 2022-01-20 16:05:31 +01:00
Kevin McDermott c397ff902b Ensure that directories are included.
This avoids skipping the directories when generating the archive
tarball.

This makes it easier to scan directory trees.

Signed-off-by: Kevin McDermott <kevin@weave.works>

Ensure that directories are included.

This avoids skipping the directories when generating the archive
tarball.

This makes it easier to scan directory trees.

Signed-off-by: Kevin McDermott <kevin@weave.works>
2022-01-20 13:58:44 +00:00
Stefan Prodan 636884cbf1
Merge pull request #550 from fluxcd/cosign-and-sbom
Publish SBOM and sign release artifacts
2022-01-20 14:35:32 +02:00
Stefan Prodan b992afd2c7
Publish SBOM and sign release artifacts
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-20 13:49:36 +02:00
Stefan Prodan d1d54e08fd
Merge pull request #547 from darkowlzz/docs-git-proxy
docs: Add git proxy support docs
2022-01-20 13:15:29 +02:00
Sunny 017207d99e
docs: Add git proxy support docs
Signed-off-by: Sunny <darkowlzz@protonmail.com>
2022-01-20 15:21:49 +05:30
Stefan Prodan c99d0039d2
Merge pull request #549 from pjbgf/fix-test
e2e: Set timeout to fix intermittent errors
2022-01-20 10:54:36 +02:00
Paulo Gomes 1c06b3f0c0
Set timeout to fix intermittent errors
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-20 08:23:43 +00:00
Stefan Prodan e84031ae60
Merge pull request #521 from pjbgf/main
security: Drop capabilities, set userid and enable seccomp
2022-01-20 08:55:05 +02:00
Paulo Gomes 9ba76a1f94
Enforce runAsNonRoot
BREAKING CHANGE: the controller container is now executed under 65534:65534 (userid:groupid). This change may break deployments that hard-coded the user name 'controller' in their PodSecurityPolicy.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-19 14:57:26 +00:00
Paulo Gomes 7b04b44706
security: Drop capabilities and enable seccomp
Further restricts the SecurityContext that the controller runs under, by enabling the default seccomp profile and dropping all linux capabilities.
This was set at container-level to ensure backwards compatibility with
use cases in which sidecars are injected into the source-controller pod
without setting less restrictive settings.

BREAKING CHANGE: The use of new seccomp API requires Kubernetes 1.19.

Co-authored-by: Sanskar Jaiswal <sanskar.jaiswal@weave.works>
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-01-19 14:57:25 +00:00
Hidde Beydals 3ca05e1986
Merge pull request #524 from racdev/libgit2-proxy-support 2022-01-19 12:00:34 +01:00
Robert Clarke 3d276b679b libgit2: Configured libgit2 clone ProxyOptions
This configures ProxyOptions for all libgit2 Checkout functions when
cloning and configures the options based on current environment
settings using the git2go.ProxyTypeAuto option.

Refs: #131
Signed-off-by: Robert Clarke <rob@robertandrewclarke.com>
Co-authored-by: Aurélien GARNIER <aurelien.garnier@atos.net>
2022-01-18 19:35:47 +00:00
Hidde Beydals be575864e1
Merge pull request #545 from bigkevmcd/fix-failure-default-branch 2022-01-17 16:02:06 +01:00
Kevin McDermott 4029241b3b Don't assume master is the default branch.
This introduces a quick lookup of the default branch rather than
assuming "master".

Signed-off-by: Kevin McDermott <kevin@weave.works>
2022-01-17 14:25:05 +00:00
Stefan Prodan 382e812a47
Merge pull request #542 from fluxcd/patch-finalizers
Use patch instead of update when adding finalizers
2022-01-13 18:43:06 +02:00
Stefan Prodan 5be33770e8
Use patch instead of update when adding finalizers
This is needed to prevent source-controller from managing all the fields under `.spec`.

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-01-13 18:18:32 +02:00