Commit Graph

1614 Commits

Author SHA1 Message Date
Paulo Gomes c12a56a8a7
build: disable matrix fail-fast
Intermittent issues are causing the test matrix to fail
and whenever that happens, all other matrix options are
automatically cancelled. This increases the amount of
retries needed in order to get all tests to pass.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-20 12:10:23 +01:00
Paulo Gomes 377ae169bf
Merge pull request #829 from pjbgf/release-v0.25.10
Release v0.25.10
2022-07-15 15:08:07 +01:00
Paulo Gomes eb079de5be
Release v0.25.10
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-15 12:20:56 +01:00
Paulo Gomes 8cff49f2c9
Merge pull request #834 from fluxcd/libgit2-1.3.2
Update libgit2 to v1.3.2
2022-07-15 08:31:51 +01:00
Paulo Gomes 9c21f8a7a1
tests: fix error message for invalid x509 in darwin
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-14 19:02:45 +01:00
Paulo Gomes aeaeec881e
Update libgit2 to v1.3.2
Updates golang-with-libgit2-all to v0.1.2 which contains libgit2-1.3.2.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-14 12:24:26 +01:00
Stefan Prodan 0bf9de319d
Merge pull request #832 from souleb/issue-830
Fix Panic when no artifact in source
2022-07-14 14:20:23 +03:00
Soule BA f3ab2e0d46
Fix Panic when no artifact in source
If implemented, the helmrepository type will be used to decide whether a
reconciliation can continue in the absence of source artifact, instead
of url.

Signed-off-by: Soule BA <soule@weave.works>
2022-07-14 10:57:22 +02:00
Stefan Prodan 6868ff14b2
Merge pull request #833 from souleb/update-helm-dep
Bump Helm to v3.9.1
2022-07-14 10:03:06 +03:00
Soule BA 3717f02d46
Bump Helm to v3.9.1
Signed-off-by: Soule BA <soule@weave.works>
2022-07-14 01:18:27 +02:00
Stefan Prodan 4536554611
Merge pull request #827 from souleb/issue-815
Fix SIGSEGV when resolving charts dependencies
2022-07-13 16:32:21 +03:00
Soule BA e4209dba8a
Fix SIGSEGV when resolving charts dependencies
If implemented, this make sure than we clear only referenced
downloaders.

It is also checked if the repository url is supported.

Signed-off-by: Soule BA <soule@weave.works>
2022-07-13 14:59:38 +02:00
Paulo Gomes 7b4ba69c00
Merge pull request #823 from pjbgf/update-deps
build: provenance and tampering checks for libgit2
2022-07-13 11:11:23 +01:00
Paulo Gomes afd02d3cfc
build: provenance and tampering checks for libgit2
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-13 10:10:42 +01:00
Paulo Gomes 73ce792414
Fix github.com/emicklei/go-restful (CVE-2022-1996)
This addresses CVE-2022-1996, due to v2.16.0 including
emicklei/go-restful@9266625.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-13 09:49:18 +01:00
Paulo Gomes 02f5b94baf
Update to golang-with-libgit2-all image
This dependency now releases two different images, one
containing the entire dependency chain for libgit2, and
another containing just the library itself. The latter
will be later used once Managed Transport is completely
removed from source controller.

As part of this update, the image now follows a new tag
format which is semver based and starts at 0.1.0.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-08 09:39:06 +01:00
Paulo Gomes 0633c57629
Update dependencies
- cloud.google.com/go/storage to version 1.23.0.
- github.com/ProtonMail/go-crypto to version 0.0.0-20220623141421-5afb4c282135.
- github.com/distribution/distribution/v3 to version 3.0.0-20220702071910-8857a1948739.
- github.com/minio/minio-go/v7 to version 7.0.31.
- golang.org/x/crypto to version 0.0.0-20220622213112-05595931fe9d.
- golang.org/x/net to version 0.0.0-20220706163947-c90051bbdb60.
- google.golang.org/api to version 0.86.0.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-07 17:23:22 +01:00
Paulo Gomes 22c9e2e85f
Merge pull request #818 from pjbgf/fs-perms
Decrease fs perms to 0o700
2022-07-07 10:42:20 +01:00
Paulo Gomes 60e46d139c
Decrease fs perms to 0o700
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-07 09:57:51 +01:00
Sunny 0219905036
Merge pull request #770 from souleb/oci-for-deps-manager
Enable Umbrella Chart with dependencies from OCI repositories
2022-07-06 23:16:27 +05:30
Soule BA 361b975bf4
Enable remote dependencies from OCI repositories
If implemented, the source controller will be able to resolve charts
dependencies from OCI repositories.

The remote builder has been refactored as part of this work.

Signed-off-by: Soule BA <soule@weave.works>
2022-07-06 19:11:01 +02:00
Soule BA b402e546bc
Refactor repository logic
Signed-off-by: Soule BA <soule@weave.works>
2022-07-06 19:11:00 +02:00
Paulo Gomes f7006e91dd
Merge pull request #817 from pjbgf/expand-macos
build: run darwin tests on macos 10.15, 11 and 12
2022-07-06 15:38:28 +01:00
Paulo Gomes 3635f44b5b
build: run darwin tests on macos 10.15, 11 and 12
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-06 13:52:53 +01:00
Sunny 15b6fedbd0
Merge pull request #812 from fluxcd/comments-update
Minor comment updates
2022-07-05 18:58:32 +05:30
Sunny e345e71eca
Minor comment updates
- Update the comments around artifact retention fields in Storage.
- Update the comments around reconcileStorage regarding artifact
  retention and garbage collection.

Signed-off-by: Sunny <darkowlzz@protonmail.com>
2022-07-04 19:58:26 +05:30
Paulo Gomes 665d43c7e7
Merge pull request #811 from pjbgf/speed-up-pr
Split GitHub workflows
2022-07-04 10:09:20 +01:00
Paulo Gomes 6981eba031
build: split GitHub workflows
By splitting workflows we can get the overall time
for all the checks to be decreased.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-01 11:58:08 +01:00
Paulo Gomes 3cbb9ca5f4
Merge pull request #801 from pjbgf/ssh-password
docs: Add password-protected SSH keys information
2022-07-01 11:36:13 +01:00
Paulo Gomes 87fba45aa2
docs: Add password-protected SSH keys information
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-01 11:19:41 +01:00
Paulo Gomes 02567049e6
Merge pull request #804 from fluxcd/go-yaml-v3.0.1
Update go-yaml to v3.0.1
2022-06-30 10:21:32 +01:00
Sunny f941f5ce24
Update go-yaml to v3.0.1
Fix CVE-2022-28948

Signed-off-by: Sunny <darkowlzz@protonmail.com>
2022-06-30 00:21:59 +05:30
Stefan Prodan d1f0d239e1
Merge pull request #803 from fluxcd/release-v0.25.9
Release v0.25.9
2022-06-29 15:23:19 +03:00
Stefan Prodan 295c0b9804
Release v0.25.9
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-06-29 15:02:48 +03:00
Stefan Prodan 5356f72b03
Merge pull request #799 from souleb/issue-787
[helm-oci] disable cache in oci registry client
2022-06-29 14:56:50 +03:00
Soule BA 988fd1fba9
disable cache in oci registry client
If implemented, the oci registry client is created with cache disabled.

Signed-off-by: Soule BA <soule@weave.works>
2022-06-29 12:47:40 +02:00
Sunny baf79889e7
Merge pull request #792 from somtochiama/trailing-slash
Remove trailing slash in `spec.url` when getting tags for oci repository
2022-06-29 15:53:22 +05:30
Somtochi Onyekwere 35a7ea1efa Remove trailing slash
Signed-off-by: Somtochi Onyekwere <somtochionyekwere@gmail.com>
2022-06-29 11:05:08 +01:00
Sunny 3dcb142076
Merge pull request #795 from aryan9600/release-v0.25.8
Release v0.25.8
2022-06-24 16:34:48 +05:30
Sanskar Jaiswal 3896911adb
Release v0.25.8
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2022-06-24 16:12:04 +05:30
Stefan Prodan 60cf11a0d1
Merge pull request #796 from fluxcd/libgit2-req-incomplete-auth-test
libgit2/managed/http: test for incomplete creds
2022-06-24 13:16:47 +03:00
Sunny 7325430bc9
libgit2/managed/http: test for incomplete creds
Add test for createClientRequest() where the credentials are incomplete.

Signed-off-by: Sunny <darkowlzz@protonmail.com>
2022-06-23 15:31:46 +05:30
Hidde Beydals bc28ad5d1b
Merge pull request #794 from aryan9600/fix-bitbucket-auth 2022-06-23 11:44:59 +02:00
Sanskar Jaiswal 7a708ac6d2 set request auth if both username and password are non empty
BitBucket servers don't accept a username with an empty password, so a
secret with no http auth creds will result in a 401, since we
fall back to "git" for the username and used to set basic auth with that
username without a password.

Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
2022-06-23 14:44:57 +05:30
Sunny 7c07b7a03f
Merge pull request #789 from fluxcd/release-v0.25.7
Release v0.25.7
2022-06-22 15:51:10 +05:30
Sunny 56ae4d247c
Release v0.25.7
Signed-off-by: Sunny <darkowlzz@protonmail.com>
2022-06-22 15:23:26 +05:30
Sunny ea516d8037
Merge pull request #783 from pjbgf/known_hosts_error
libgit2: improve known_hosts error messages
2022-06-22 14:54:03 +05:30
Paulo Gomes b490a6aae8 libgit2: improve known_hosts error messages
Known hosts can be a difficult problem to troubleshoot.
To make it easier for end users, the generic message has
now been changed with a much more user friendly one.

Now if a known_host is not set, an error message will be
returned, instead of it simply being ignored.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-06-21 20:01:29 +05:30
Sunny 22951347dd
Merge pull request #785 from fluxcd/mutexless
libgit2: remove deadlock
2022-06-21 19:51:23 +05:30
Sunny a530c5dee2
libgit2/ssh: Embed connection fields in Subtransport
The connection type was created to group the connection related fields
and use mutex to prevent race conditions. Since that's no longer the
case, this puts back those fields in sshSmartSubtransport.

Signed-off-by: Sunny <darkowlzz@protonmail.com>
2022-06-21 17:55:21 +05:30