Commit Graph

2198 Commits

Author SHA1 Message Date
Hidde Beydals 9dfc010734
Add changelog entry for v1.0.0
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-07-03 18:09:48 +02:00
Hidde Beydals 34e5dc7849
Merge pull request #1149 from fluxcd/ci-release-workflows
ci: various workflow changes
2023-07-03 16:35:17 +02:00
Hidde Beydals f402e2125a
ci: change release workflow dispatch tag
From "rc" (reserved for tag releases) to "preview".

Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-07-03 16:12:20 +02:00
Hidde Beydals bb2ab59d5c
ci: enable workflows for `release/**` branches
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-07-03 16:11:46 +02:00
Hidde Beydals f2857e69dc
Merge pull request #1147 from fluxcd/update-go-deps
Update Go dependencies
2023-07-03 14:26:07 +02:00
Hidde Beydals 24d37a8e77
gcp: update recognized mock storage server path
This is a candidate for a refactoring / merge together with `mock/gcs`,
but this deals with the issue for now.

Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-07-03 14:09:58 +02:00
Hidde Beydals b2ae5124bf
Update Go dependencies
- cloud.google.com/go/storage v1.30.1 -> v1.31.0
- github.com/distribution/distribution/v3 v3.0.0-20230621170613-87b280718d38 -> v3.0.0-20230629214736-bac7f02e02a1
- github.com/fluxcd/pkg/git/gogit v0.12.0 -> v0.12.1
- github.com/fluxcd/pkg/runtime v0.39.0 -> v0.40.0
- github.com/minio/minio-go/v7 v7.0.58 -> v7.0.59
- google.golang.org/api v0.128.0 -> v0.129.0

Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-07-03 13:18:31 +02:00
Hidde Beydals 43ee040984
Merge pull request #1146 from fluxcd/ci-bump-kind
ci: update kind to v0.19.0
2023-07-03 13:16:44 +02:00
Hidde Beydals 33865a711f
ci: update kind to v0.19.0
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-07-03 13:04:25 +02:00
Hidde Beydals 93a6231c35
Merge pull request #1145 from fluxcd/bump-gogit
Update go-git to unreleased v5.8.0
2023-07-03 12:37:12 +02:00
Hidde Beydals 995cab57d4
Revert "Disable "empty repository" Git test"
This reverts commit 60571c08f1.

Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-07-03 12:18:33 +02:00
Hidde Beydals d4e8d54d58
Update go-git to unreleased v5.8.0
To improve support for Git >=v2.41.0.

Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-07-03 12:18:32 +02:00
Sanskar Jaiswal c09e25b647
Merge pull request #1144 from fluxcd/rm-proxy-docs
gitrepo: remove obsolete proxy docs
2023-07-03 15:02:01 +05:30
Sanskar Jaiswal 64439cd15d
gitrepo: remove obsolete proxy docs
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2023-07-03 12:14:51 +05:30
Hidde Beydals 4aba1fd00d
Merge pull request #1143 from fluxcd/fix-label-descriptions
Change label descriptions to be uniform
2023-06-30 16:12:56 +02:00
Hidde Beydals ed6a7a4204
Change label descriptions to be uniform
Signed-off-by: Hidde Beydals <hiddeco@users.noreply.github.com>
2023-06-30 16:04:13 +02:00
Hidde Beydals 44a311e485
Merge pull request #1139 from fluxcd/dependabot/github_actions/docker/setup-buildx-action-2.8.0
build(deps): bump docker/setup-buildx-action from 2.7.0 to 2.8.0
2023-06-30 14:35:53 +02:00
dependabot[bot] 3998db4784
build(deps): bump docker/setup-buildx-action from 2.7.0 to 2.8.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](ecf95283f0...16c0bc4a6e)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-30 12:09:24 +00:00
Hidde Beydals 41a63db143
Merge pull request #1140 from fluxcd/dependabot/github_actions/sigstore/cosign-installer-3.1.1 2023-06-30 14:08:47 +02:00
dependabot[bot] a2717f7106
build(deps): bump sigstore/cosign-installer from 3.1.0 to 3.1.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](d13028333d...6e04d228eb)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-30 11:59:00 +00:00
Hidde Beydals c24208668a
Merge pull request #1142 from fluxcd/update-backport-workflow
Rename backport job to align with other workflows
2023-06-30 13:58:19 +02:00
Hidde Beydals c40a93300b
Rename backport job to align with other workflows
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-06-30 13:41:01 +02:00
Hidde Beydals 2b13f2b733
Merge pull request #1141 from fluxcd/use-standard-labels
Use standard labels from `fluxcd/community`
2023-06-30 13:40:07 +02:00
Hidde Beydals c0752c2a06
Use standard labels from `fluxcd/community`
Plus tweak the colors a tiny bit to ensure they are more distinctive.

Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-06-30 13:28:58 +02:00
Hidde Beydals ac4261e60e
Merge pull request #1138 from fluxcd/backport-automation
Add backport GitHub Action workflow
2023-06-30 12:20:16 +02:00
Hidde Beydals 32be110719
Standardize workflow names to lowercase
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-06-30 12:02:26 +02:00
Hidde Beydals db623b7535
Declaratively define (and sync) labels
This adds a GitHub Action workflow to sync the labels from a YAML file
in `.github/labels.yaml`.

Some of the labels have been changed for consistency, and an `aliases`
list has been defined to ensure they're renamed properly.

In terms of colors, I am still trying to figure out what looks best.
But this should be a good start to at least kick things off.

Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-06-30 12:00:23 +02:00
Hidde Beydals c32e96ab33
Add backport GitHub Action workflow
This workflow automatically backports pull requests labeled with
`backport:<release series branch>`.

For example, `backport:release/v1.0.x` to backport the pull request
to a `release/v1.0.x` branch.

Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-06-30 10:40:25 +02:00
Stefan Prodan 5fd4079058
Merge pull request #1136 from bigkevmcd/gitrepository-verification-key
Add the verification key to the GitRepository verified status condition
2023-06-28 11:46:10 +03:00
Kevin McDermott c159d260db Add verification key to repository verified status
This adds the ID of the key that was successful to the verified status
for GitRepository resources.

Signed-off-by: Kevin McDermott <kevin@weave.works>
2023-06-28 09:28:02 +01:00
Stefan Prodan 01ced04389
Merge pull request #1135 from fluxcd/cosign-v2.1.1
Update Cosign to v2.1.1
2023-06-27 17:59:29 +03:00
Stefan Prodan bbecb7c337
Update Cosign to v2.1.1
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-06-27 16:17:32 +03:00
Stefan Prodan 85a93d8c21
Merge pull request #1134 from fluxcd/go.mod-1.20
Align `go.mod` version with Kubernetes (Go 1.20)
2023-06-27 08:33:54 +03:00
Stefan Prodan 626611958a
Install Go 1.20 for oss-fuzz
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-06-26 18:40:43 +03:00
Stefan Prodan 2928480a9a
Align go.mod version with Kubernetes
Bump Go to 1.20 in go.mod

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-06-26 16:22:06 +03:00
Stefan Prodan 9cc18cf66c
Merge pull request #1132 from fluxcd/cosign-2.1
Update Cosign to v2.1.0
2023-06-26 12:53:24 +03:00
Stefan Prodan 9b78bc6612
Update Cosign to v2.1.0
Adapt tests to match Cosign 2.1 error messages

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-06-26 12:33:20 +03:00
Hidde Beydals 5cd936d227
Merge pull request #1130 from fluxcd/dependabot/github_actions/anchore/sbom-action-0.14.3
build(deps): bump anchore/sbom-action from 0.14.2 to 0.14.3
2023-06-26 09:58:04 +02:00
dependabot[bot] 8079cd2f18
build(deps): bump anchore/sbom-action from 0.14.2 to 0.14.3
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.14.2 to 0.14.3.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](4d571ad103...78fc58e266)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-26 07:38:39 +00:00
Hidde Beydals 3b7798dfd7
Merge pull request #1129 from fluxcd/dependabot/github_actions/sigstore/cosign-installer-3.1.0
build(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0
2023-06-26 09:37:57 +02:00
dependabot[bot] 8a2b22a828
build(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.0.5 to 3.1.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](dd6b2e2b61...d13028333d)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-26 07:25:19 +00:00
Hidde Beydals e3c6a1a294
Merge pull request #1128 from fluxcd/dependabot/github_actions/github/codeql-action-2.20.1
build(deps): bump github/codeql-action from 2.20.0 to 2.20.1
2023-06-26 09:24:31 +02:00
dependabot[bot] 06ffda1801
build(deps): bump github/codeql-action from 2.20.0 to 2.20.1
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.20.0 to 2.20.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](6c089f53dd...f6e388ebf0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-26 03:01:54 +00:00
Stefan Prodan 05e2db020f
Merge pull request #1127 from fluxcd/k8s-1.27.3
Update dependencies
2023-06-23 20:57:40 +03:00
Stefan Prodan 18980f6e7e
Update dependencies
- github.com/fluxcd/pkg/apis/event v0.5.1
- github.com/fluxcd/pkg/apis/meta v1.1.1
- github.com/fluxcd/pkg/git v0.12.3
- github.com/fluxcd/pkg/ssh v0.8.0
- github.com/fluxcd/pkg/oci v0.28.0
- github.com/fluxcd/pkg/runtime v0.39.0
- k8s.io/* v0.27.3
- helm.sh/helm/v3 v3.12.1
- golang.org/x/crypto v0.10.0
- golang.org/x/sync v0.3.0

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-06-23 20:05:18 +03:00
Stefan Prodan b24e973cdc
Merge pull request #1125 from fluxcd/slsa3
Add SLSA3 generators to release workflow
2023-06-23 18:33:31 +03:00
Stefan Prodan 91bd086607
Add SLSA3 generators to release workflow
Generate SLSA level 3 provenance attestations for the controller release assets and for the multi-arch container images.

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-06-23 18:13:14 +03:00
Stefan Prodan bade8c9ea7
Merge pull request #1126 from fluxcd/fix-optimized-clone
Re-instantiate non-optimized clone fallback
2023-06-23 18:12:38 +03:00
Hidde Beydals 60571c08f1
Disable "empty repository" Git test
This is required because the test fails with Git >=v2.41.0 due to
changes to commands used by the Git test server. Causing the server to
return an error when cloning an empty repository, instead of yielding
an empty object.

Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-06-23 16:58:05 +02:00
Hidde Beydals 2f4b200571
Re-instantiate non-optimized clone fallback
This adds a bit back which got removed in
69f567bdc7, as there are reasons for the
controller to perform a non-optimized clone.

However, we always want to attempt the optimized version first without
it being put behind a feature gate. Which was the original intent of
the referenced commit.

Signed-off-by: Hidde Beydals <hidde@hhh.computer>
2023-06-23 15:53:11 +02:00