1
0
mirror of https://github.com/siderolabs/kres.git synced 2026-02-05 09:45:35 +01:00

75 Commits

Author SHA1 Message Date
Utku Ozdemir
dc032d7a4f fix: fix helm-docs and do various helm improvements
- Add valuesFiles option to HelmTemplate config for passing additional values files to helm template command
- Remove redundant -f values.yaml flag from helm template (chart's default values.yaml is used automatically)
- Remove --template-files flag with typo from helm-docs (default README.md.gotmpl is correct)
- Add buildx setup step to helm workflow to fix CI hang (was missing remote buildkit driver)
- Extract SetupBuildxStep() to avoid code duplication
- Add test helm chart to validate helm CI flow
- Fix the workdir of helm-docs

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>
2026-01-30 12:14:44 +01:00
Noel Georgi
0e8da31df6 chore: bump dependencies
Bump dependencies and rekres.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-01-08 12:19:35 +05:30
Andrey Smirnov
26be706c3c feat: update dependencies
Update actions, go modules, etc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-17 15:22:07 +04:00
Andrey Smirnov
9fb16fe451 feat: update dependencies
Update to the latest versions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-05 19:37:20 +04:00
Andrey Smirnov
571923f1bc chore: setup renovate to track refs/digests of actions
Update renovate expressions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-02 15:17:29 +04:00
Andrey Smirnov
a1a34ff9f1 feat: update dependencies, pin actions
Pin actions to the specific hash matching a release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-01 14:12:22 +04:00
Edward Sammut Alessi
cd5a93870c chore: update node to latest LTS
Upgrade node version to the latest LTS version 24.11.0

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-10-29 11:05:46 +01:00
Noel Georgi
97ccf82705 fix: upload .bundle files from cosign
Upload `.bundle` files from Cosign instead of `.sig`

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-10-07 16:43:33 +05:30
Noel Georgi
e329305180 fix: cosign generated bundle
Fixes: #580

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-10-07 16:27:45 +05:30
Mateusz Urbanek
df5079ad7d feat: add dispatchable actions
Allow defining GH Action Workflow jobs as dispatchable
meaning they will run only on a workflow_dispatch event.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-09-29 13:33:57 +02:00
Edward Sammut Alessi
fdbc9fcb3a chore: fix invalid version scheme for node version
Fix invalid version scheme for node version

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-22 13:00:32 +02:00
Edward Sammut Alessi
24989ad5c7 chore: only use lts node
Only use LTS versions of node

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-21 21:30:19 +02:00
Noel Georgi
ce14887199 feat: support workflow dispatch
Support `workflow_dispatch` trigger for GitHub actions.
Allow overriding `on` for custom jobs.

Also bump dependencies.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-09-16 23:19:34 +05:30
Andrey Smirnov
d1c95db095 feat: support parallel job runs for some steps
For example: linting, unit-tests, etc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-11 17:06:14 +04:00
Noel Georgi
953994cf35 feat: use runner groups
Use runner groups for GitHub action to work with GHA runner scale sets.

Support `string`, `array` and `object` types for `runs-on` github action workflow syntax.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-09-11 14:02:00 +05:30
Oguz Kilcan
62621167f5 fix: rollack actions-system-info GH action to previous version
Rollback `kenchan0130/actions-system-info` to v1.3.1 from v1.4.0.
Reason for this is: with v1.4.0 this action started using `node` 24 and this was causing intermittent issues on CI runs.

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-08-21 09:58:51 +02:00
Oguz Kilcan
8d5a3f68b4 chore: bump deps
Bump deps:
- Go to 1.25.0
- golangci-lint to 2.4.0
- goimports to 0.36.0
- node container image to 24-alpine
- oven/bun container image to 1.2.20-alpine
- google.golang.org/protobuf/cmd/protoc-gen-go to v1.36.7
- golang.org/x/mod to v0.27.0
- github.com/siderolabs/deep-copy to v0.5.8
- github.com/siderolabs/gen to v0.8.5
- github.com/siderolabs/pkgs to v1.11.0
- actions/checkout to v5
- kenchan0130/actions-system-info to v1.4.0

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-08-18 11:06:51 +02:00
Oguz Kilcan
7f1d58a53f feat: report failed CI runs to a slack channel
* Report failed CI runs for main and scheduled jobs to a customizable slack channel
* Validate slack notify payload structure
* kres self

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-08-05 11:16:55 +02:00
Andrey Smirnov
5fb5b9007f fix: attempt to fix Slack payload
Wrong level for the fields.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-07-30 14:34:43 +04:00
Andrey Smirnov
f1c42d7d34 fix: notify Slack formatting
Use a custom emoji as an icon, fix fallback text used in notifications.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-07-30 14:14:21 +04:00
Andrey Smirnov
b7f8f49454 feat: move notifications to different Slack instance
Change channel name as well.

Part of #357

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-07-29 18:35:42 +04:00
Andrey Smirnov
4c6b4c05c6 fix: checksum sign step
There was a missing `cd _out` which breaks it.

Also use `--output-signature` flag, as `--output` got deprecated.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-07-22 20:30:06 +04:00
Utku Ozdemir
c691b839ee chore: bump go, tools, deps and re-kres, satisfy linters
Bump everything.

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>
2025-07-11 17:26:38 +02:00
Caleb Woodbine
880678f5a4 feat: sign with cosign checksums for release
produce signatures for verifying checksums

Signed-off-by: Caleb Woodbine <caleb.woodbine@siderolabs.com>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-07-02 18:46:41 +05:30
Andrey Smirnov
81550cddc9 feat: add support for stale/lock workflows
Borrow the configuration/flow from Talos repo, where these flows run for
a long time and pretty successfully manage stale issues/discussions/PRs.

To disable it, use the following in `.kres.yaml`:

```yaml
kind: common.Repository
spec:
  skipStaleWorkflow: true
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-06-09 13:30:49 +04:00
Andrey Smirnov
b711b5e71a feat: update dependencies
```

| Package | Type | Update | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|---|---|
| docker |  | minor | `28.1-dind` -> `28.2-dind` | [![age](https://developer.mend.io/api/mc/badges/age/docker/docker/28.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/docker/docker/28.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/docker/docker/28.1/28.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/docker/28.1/28.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) |
| [docker/dockerfile-upstream](https://redirect.github.com/moby/buildkit) |  | minor | `1.15.1-labs` -> `1.16.0-labs` | [![age](https://developer.mend.io/api/mc/badges/age/docker/docker%2fdockerfile-upstream/1.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/docker/docker%2fdockerfile-upstream/1.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/docker/docker%2fdockerfile-upstream/1.15.1/1.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/docker%2fdockerfile-upstream/1.15.1/1.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) |
| [github.com/google/go-github/v71](https://redirect.github.com/google/go-github) | require | major | `v71.0.0` -> `v72.0.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogle%2fgo-github%2fv71/v72.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fgoogle%2fgo-github%2fv71/v72.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fgoogle%2fgo-github%2fv71/v71.0.0/v72.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogle%2fgo-github%2fv71/v71.0.0/v72.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) |
| [kenchan0130/actions-system-info](https://redirect.github.com/kenchan0130/actions-system-info) |  | patch | `v1.3.0` -> `v1.3.1` | [![age](https://developer.mend.io/api/mc/badges/age/github-releases/kenchan0130%2factions-system-info/v1.3.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/github-releases/kenchan0130%2factions-system-info/v1.3.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/github-releases/kenchan0130%2factions-system-info/v1.3.0/v1.3.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/kenchan0130%2factions-system-info/v1.3.0/v1.3.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) |
| [oven/bun](https://redirect.github.com/oven-sh/bun) |  | patch | `1.2.13-alpine` -> `1.2.15-alpine` | [![age](https://developer.mend.io/api/mc/badges/age/docker/oven%2fbun/1.2.15?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/docker/oven%2fbun/1.2.15?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/docker/oven%2fbun/1.2.13/1.2.15?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/oven%2fbun/1.2.13/1.2.15?slim=true)](https://docs.renovatebot.com/merge-confidence/) |
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-06-02 18:43:50 +04:00
Noel Georgi
6def37e35a feat: migrate renovate config
Use new `managerFilePatterns`.
Also update deps.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-05-20 17:51:26 +05:30
Noel Georgi
f194a5a628 fix: set BUILDKIT_MULTI_PLATFORM only for image
Only set `BUILDKIT_MULTI_PLATFORM` when an image is being generated.
Revert all other hacks.

Also fix renovate config to ignore github action yamls and `Dockerfile`
since it's managed by kres.

Signed-off-by: Noel Georgi <git@frezbo.dev>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-14 14:54:46 +04:00
Noel Georgi
b9507d6997 fix: renovate preamble
Also add `allowedVersions` field.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-12-17 19:58:08 +05:30
Noel Georgi
a0f541bc83 chore: add more renovate config options
Add more renovate config options.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-12-16 21:09:19 +05:30
Noel Georgi
f05fefd4cd chore: add more renovate config fields
Add more renovate config fields.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-12-16 19:49:05 +05:30
Noel Georgi
071772c4e9 feat: support renovate config
Support managing renovate via kres so updates are easier.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-12-16 18:30:57 +05:30
Andrey Smirnov
232fe63e11 fix: slack notification, take 2
Add method.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-25 19:48:54 +04:00
Andrey Smirnov
38efbcb1bb fix: slack notify job
Things changed for v2 plugin.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-25 19:25:30 +04:00
Andrey Smirnov
b9ed228cd6 feat: update kres depenencies
Buildkit, bun, github actions, etc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-25 12:21:00 +04:00
Noel Georgi
faf91e3cb6 chore: checksum files remove artifacts directory prefix
Remove artifacts directory prefix from checksum files.

Also bump deps.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-07-23 17:57:54 +05:30
Noel Georgi
1ba3ec6f1a chore: support printing system info
Support printing system info.

Also fix step conditions for artifact steps.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-05-23 15:08:23 +05:30
Noel Georgi
0290180375 chore: use existing amd64 buildx
Use existing amd64 buildx runners.
Also support overriding default runners.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-05-21 14:48:01 +05:30
Noel Georgi
48517a9e1b feat: add support for gh workflow only kres
Support managing only GitHub workflows.

This still handles SOPS, conform and repository checks.

Can be enabled with:

```yaml
---
kind: auto.CI
spec:
  compileGHWorkflowsOnly: true
```

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-05-15 18:32:20 +05:30
Andrey Smirnov
1e986af8ef feat: update Go to 1.22.3
Update other dependencies.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-05-08 14:36:49 +04:00
Noel Georgi
d15226ef12 fix: codecov upload
Use the official codecov action, since the bash script is deprecated.
Also set a timeout on upload so we don't block other steps for too long.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-04-30 16:29:17 +05:30
Noel Georgi
ebc009dce3 fix: fail pipeline on yq error
Fail pipeline if secrets cannot be used.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-04-20 22:11:38 +05:30
Andrey Smirnov
e4c6337c2a fix: run GHA push-latest only from 'main' branch
Avoids pushing latest from e.g. release branches.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-04-11 14:57:34 +04:00
Andrey Smirnov
bff9c81e8e fix: split TAG and IMAGE_TAG veriables
This fixes the version of the `:latest` image not to be `latest`, but
a proper matching version.

See https://github.com/siderolabs/omni/issues/131

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-04-11 14:31:40 +04:00
Dmitriy Matrenichev
19215c6fb9 chore: bump stuff
- buildkit to v0.13.1
- github.com/siderolabs/gen to v0.4.8
- golangci-lint to v1.57.0
- run golangci-lint config verify before linting to ensure that we have proper schema
- fix sections in .golangci.yml
  - remove `skip-***` from `run` section
  - redo `run.format` to `run.formats`
  - removed disabled linters configuration
  - fix `gci` configuration
  - fix `unused` configuration
- small fixes

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2024-03-20 20:13:08 +03:00
Utku Ozdemir
2d306c9daa feat: bump gh actions buildx setup timeout minutes
One minute can be too short, so bump it to 10 minutes.

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>
2024-03-12 13:42:46 +01:00
Noel Georgi
a0c4cf2a31 fix: buildx setup
Looking logs I suspect this is just something to do with IPv6. So
explicitly use IPv4 address when connecting.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-03-11 02:16:34 +05:30
Noel Georgi
5724eac540 chore: bump deps
Bump deps and fix preamble checking for `Dockerfile`.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-03-06 15:51:59 +05:30
Utku Ozdemir
e87aefd320 feat: set 1 minute timeout to buildx setup gh action step
The GH action step "Set up Docker Buildx" sometimes hangs. As it is either instantaneous or hangs forever, better fail if it does not complete in 1 minute.

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>
2024-02-05 11:58:38 +01:00
Noel Georgi
7b5b0d2673 chore: bump deps
Address runc CVE's and bump deps.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-02-02 21:26:55 +05:30