1
0
mirror of https://github.com/siderolabs/kres.git synced 2026-02-05 09:45:35 +01:00

310 Commits

Author SHA1 Message Date
Utku Ozdemir
dc032d7a4f fix: fix helm-docs and do various helm improvements
- Add valuesFiles option to HelmTemplate config for passing additional values files to helm template command
- Remove redundant -f values.yaml flag from helm template (chart's default values.yaml is used automatically)
- Remove --template-files flag with typo from helm-docs (default README.md.gotmpl is correct)
- Add buildx setup step to helm workflow to fix CI hang (was missing remote buildkit driver)
- Extract SetupBuildxStep() to avoid code duplication
- Add test helm chart to validate helm CI flow
- Fix the workdir of helm-docs

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>
2026-01-30 12:14:44 +01:00
Oguz Kilcan
4879152364 feat: update helm docs disable flag to cover enforcing doc generation
Just removing helm docs step is not enough to stop enforcement of helm doc generation. Add schema generation and check dirty steps as well for full coverage.

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2026-01-30 08:46:59 +01:00
Oguz Kilcan
b12955ed04 feat: allow disabling helm docs step on gh workflows
Add configuration setting `docsDisabled` to `auto.Helm` kres definition to disable creation of helm docs on GitHub Workflows.

Normally creation of helm docs step goes hand in hand with `Check dirty` step to ensure helm docs were created beforehand. However, there is an issue with this step, causing CI to hang.

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2026-01-29 23:34:52 +01:00
Mateusz Urbanek
1b0dcb3913 fix: fix issues found by copilot
Fixing issues found by copilot.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-01-28 16:16:17 +01:00
Mateusz Urbanek
c0e89fb2ac fix: separate helm toolchain
Previously helm tools were added to base. This splits them
into separate stage, with proper separation.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-01-27 20:23:08 +01:00
Mateusz Urbanek
49ba5d2bab feat: add helm docs and schema gen
Add Helm docs and Helm JSON Schema generation.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-01-27 15:44:29 +01:00
Mateusz Urbanek
f1896499a1 feat: extend helm support
Extend helm support for running unit tests, and
passing extra arguments for templating.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-01-26 14:36:51 +01:00
Oguz Kilcan
1ffefb6cb0 chore: bump go and other deps
Bump:
  * go: 1.25..5 => 1.25.6
  * golangci-lint: 2.7.2 => 2.8.0
  * goimports: 0.40.1 => 0.41.0
  * bun container image: 1.3.5-alpine => 1.3.6-alpine

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2026-01-16 09:58:18 +01:00
Andrey Smirnov
6f7b97a2b5 feat: add support for specifying build tags for golangci
This allows to lint parts of the code under a build tag.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-01-15 19:38:30 +04:00
Oguz Kilcan
6f4634361c feat: support skipping save artifacts and setting custom make targets
On github action workflows:
 * Allow skipping default step `save-artifacts` while respecting `additionalArtifacts`.
 * Allow using custom make targets instead of using specified makefile target.

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2026-01-14 15:40:29 +01:00
Oguz Kilcan
8b6181bc88 feat: support setting condition for extra jobs under gh workflow
Support setting condition for extra jobs under gh workflow

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2026-01-13 20:17:10 +01:00
Noel Georgi
0e8da31df6 chore: bump dependencies
Bump dependencies and rekres.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-01-08 12:19:35 +05:30
Noel Georgi
6592a3a47f feat: support environment variables for image
Support setting environment variables for image.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-01-08 12:03:44 +05:30
Noel Georgi
8a4aebfb00 feat: support buildx debug build
Support build debug builds.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-12-31 14:59:43 +05:30
Edward Sammut Alessi
4b09af78f7 chore: include frontend e2e folder for linting
Copy the the frontend e2e folder to the docker container so that it is also checked with linters

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-12-09 13:26:53 +01:00
Andrey Smirnov
4c99abe35f feat: implement TAG_SUFFIX
Allow to customize image tag via a suffix, e.g. to push different
versions of the image.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-08 21:28:07 +04:00
Andrey Smirnov
5e26a1d61a feat: support custom build tags
Refactor make variables for build tags to allow multiple tags to be
enabled in the Makefile.

Allow custom build tags to be defined with respective make variables.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-08 19:56:32 +04:00
Andrey Smirnov
9fb16fe451 feat: update dependencies
Update to the latest versions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-05 19:37:20 +04:00
Andrey Smirnov
a1a34ff9f1 feat: update dependencies, pin actions
Pin actions to the specific hash matching a release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-01 14:12:22 +04:00
Laura Brehm
e1d6dac313 chore: set default for Repository.ConformMaximumOfOneCommit to false
This patch changes the default value of
`common.Repository.ConformMaximumOfOneCommit` from `false` to `true`.

Signed-off-by: Laura Brehm <laurabrehm@hey.com>
2025-11-13 16:22:52 +01:00
Noel Georgi
911d166ce5 feat: bump deps
Bump dependencies.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-11-07 14:25:54 +05:30
Noel Georgi
4ba9b0cf54 fix: docker annoying warnings
By setting a default as `scratch` we silence the docker annoying warnings, this also ensures that an override is set from makefile.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-11-05 19:08:18 +05:30
Utku Ozdemir
46e133df28 feat: allow overriding needs of custom gh action jobs
Using `needsOverride`, we can now define a custom dependency graph in the gh workflow jobs of custom steps.

An example: an integration test takes a long time, occupies a build runner: do not run them in parallel with `unit-tests` and `lint`, and make it depend on them instead.

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>
2025-10-16 22:26:24 +02:00
Noel Georgi
97ccf82705 fix: upload .bundle files from cosign
Upload `.bundle` files from Cosign instead of `.sig`

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-10-07 16:43:33 +05:30
Noel Georgi
e329305180 fix: cosign generated bundle
Fixes: #580

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-10-07 16:27:45 +05:30
Edward Sammut Alessi
bc281a97f2 chore: update kres to include .gitignore and .storybook
Update kres to include .gitignore and .storybook for linting use

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-30 18:36:10 +02:00
Mateusz Urbanek
301c24dcd8 feat: add inputs to gh_workflow
Allow defining inputs by name in the dispatchable workflows.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-09-29 16:06:00 +02:00
Mateusz Urbanek
df5079ad7d feat: add dispatchable actions
Allow defining GH Action Workflow jobs as dispatchable
meaning they will run only on a workflow_dispatch event.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-09-29 13:33:57 +02:00
Edward Sammut Alessi
24989ad5c7 chore: only use lts node
Only use LTS versions of node

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-21 21:30:19 +02:00
Edward Sammut Alessi
d7ffba2b0e chore: add frontend/msw directory to docker
Add the frontend/msw directory to docker containers

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-21 20:44:14 +02:00
Edward Sammut Alessi
80c0e43bab chore: remove frontend test dir
Remove frontend test dir as tests will be co-located

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-19 16:37:33 +02:00
Noel Georgi
065ec4ca67 fix: make sure sops steps are added for parallel jobs if enabled
Make sure to insert the SOPS steps only once if enabled.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-09-18 20:38:32 +05:30
Noel Georgi
ce14887199 feat: support workflow dispatch
Support `workflow_dispatch` trigger for GitHub actions.
Allow overriding `on` for custom jobs.

Also bump dependencies.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-09-16 23:19:34 +05:30
Oguz Kilcan
bcd0935be6 fix: always retrieve PR labels on default job
Always retrieve PR labels on default job

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-09-16 11:42:17 +02:00
Andrey Smirnov
06e6a5f4fb feat: implement update-checksums flow for pkgs
Based on https://github.com/siderolabs/bldr/pull/207, provide a simple
make target to quickly update checksums.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-15 20:45:35 +04:00
Andrey Smirnov
7918c5de44 fix: don't enforce lint context always
It might be that we create the target, but never consume it.

Ensure that the context is only enforced if lint is active.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-15 20:01:25 +04:00
Andrey Smirnov
d1c95db095 feat: support parallel job runs for some steps
For example: linting, unit-tests, etc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-11 17:06:14 +04:00
Noel Georgi
953994cf35 feat: use runner groups
Use runner groups for GitHub action to work with GHA runner scale sets.

Support `string`, `array` and `object` types for `runs-on` github action workflow syntax.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-09-11 14:02:00 +05:30
Andrey Smirnov
ba566731c8 fix: make JS frontend target attach to the build
Previously it was attached to the `base`, so it got into steps like
`golangci-lint` which don't care about it, but also it gets exported
back to the source tree via `make lint-golangci-lint-fmt`.

Re-attach it to the build step (where we actually need it).

Another solution is to make it part of `make generate` and keep it part
of the source tree.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-09 16:55:40 +04:00
Andrey Smirnov
83a9eb6f70 feat: add lint-fmt target
It runs all linters which can format code in a row.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-09 15:58:10 +04:00
Edward Sammut Alessi
9ebde93969 chore: add lint-eslint-fmt command to makefile/docker
Add lint-eslint-fmt command to makefile/docker to auto-fix issues

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-09-09 14:35:31 +04:00
Andrey Smirnov
cc456116f7 feat: update bldr to generate package dependencies in SVG
Also bump bldr to v0.5.3 enable build args.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-04 20:45:04 +04:00
Mikhail Chichvarin
784fa1ff0d feat: add support for non-GitHub remotes in DetectGit
Extend remote URL regex to handle generic git hosts, not only github.com.
Now DetectGit works for any host with a standard URL format,
while still restricting config generation to GitHub repos when required.

Signed-off-by: Misha Chichvarin <desertfury@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-08-28 18:14:50 +04:00
Andrey Smirnov
4a927f766c fix: disable ML-KEM/X25519 in FIPS-140 strict mode
See https://github.com/golang/go/issues/75166

This is a workaround for now with Go 1.25, a proper fix might come from
the Go side.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-08-27 18:38:07 +04:00
Andrey Smirnov
058c60fe06 fix: generate hack/govulncheck.sh always
Fix logical error with early exit.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-08-27 14:25:59 +04:00
Oguz Kilcan
18c31cfe2c chore: remove default synctest value from GOEXPERIMENT
Remove default synctest value from GOEXPERIMENT

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-08-20 10:44:29 +02:00
Oguz Kilcan
d1ef7680f0 fix: update dockerfile instruction order for govulncheck
Update dockerfile instruction order for govulncheck.sh

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-08-19 12:23:02 +02:00
Oguz Kilcan
ff3b493042 chore: update deps
Bump deps:
- github.com/uber-go/mock to v0.6.0
- github.com/google/go-github/v72 to github.com/google/go-github/v74

Rollback deps:
- Node container image to 22-alpine (LTS)

Signed-off-by: Oguz Kilcan <oguz.kilcan@siderolabs.com>
2025-08-19 10:50:24 +02:00
Mateusz Urbanek
696c7c7796 feat: add govulncheck wrapper
This wrapper enables excluding vulnerabilities to pass scans, if we are unaffected.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-08-14 12:05:16 +02:00
Andrey Smirnov
9f63e23bda feat: add a target to run golangci-lint formatter and linter
Allows to easily fix up files in the working directory.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
Co-authored-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2025-08-12 21:09:08 +04:00