Daniel Holbach
b340cd53e9
add CodeQL cron job
...
Signed-off-by: Daniel Holbach <daniel@weave.works >
2022-10-12 21:02:59 +02:00
Daniel Holbach
3aad30974a
Merge pull request #664 from kubereboot/dependabot/go_modules/github.com/spf13/cobra-1.6.0
...
build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
2022-10-11 20:28:41 +02:00
dependabot[bot]
87ef8296b2
build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
...
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra ) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/spf13/cobra/releases )
- [Commits](https://github.com/spf13/cobra/compare/v1.5.0...v1.6.0 )
---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-10-11 17:57:56 +00:00
dependabot[bot]
e3442b164b
build(deps): bump gotest.tools/v3 from 3.3.0 to 3.4.0 ( #663 )
...
Bumps [gotest.tools/v3](https://github.com/gotestyourself/gotest.tools ) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/gotestyourself/gotest.tools/releases )
- [Commits](https://github.com/gotestyourself/gotest.tools/compare/v3.3.0...v3.4.0 )
---
updated-dependencies:
- dependency-name: gotest.tools/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-08 08:47:33 +02:00
Daniel Holbach
47f0b244fe
Merge pull request #662 from dholbach/update-meeting
...
update meeting day
2022-10-04 07:59:05 +02:00
Daniel Holbach
6ee5fa8636
update meeting day
...
Signed-off-by: Daniel Holbach <daniel@weave.works >
2022-10-04 07:21:18 +02:00
Christian Kotzbauer
6b757de2ee
fix: fix spdx-sbom-handling ( #661 )
...
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
2022-10-03 18:25:45 +02:00
Christian Kotzbauer
ba1328ca12
feat: Integrate GoReleaser, Cosign and Syft ( #595 )
...
* build: integrate goreleaser, syft and cosign
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: chmod for all binaries
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: version-env
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: remove prefix
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: remove prefix
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: schellcheck
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: shellcheck
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: several script updates
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
* fix: remove main-prefix
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
2022-10-02 15:25:17 +02:00
Daniel Holbach
8cabfb7d75
Merge pull request #629 from dholbach/fix-625
...
Update to k8s 1.24
2022-09-28 10:38:59 +02:00
Daniel Holbach
5ac4f7ec86
Update to latest k8s
...
Fixes : #625
Signed-off-by: Daniel Holbach <daniel@weave.works >
2022-09-27 17:20:49 +02:00
Daniel Holbach
beecd839c2
Merge pull request #657 from kubereboot/dependabot/github_actions/actions/stale-6
...
build(deps): bump actions/stale from 5 to 6
2022-09-27 09:08:11 +02:00
Daniel Holbach
e70af373fc
Merge pull request #659 from kubereboot/dependabot/github_actions/helm/kind-action-1.4.0
...
build(deps): bump helm/kind-action from 1.3.0 to 1.4.0
2022-09-27 09:05:15 +02:00
dependabot[bot]
cb4eccb22e
build(deps): bump helm/kind-action from 1.3.0 to 1.4.0
...
Bumps [helm/kind-action](https://github.com/helm/kind-action ) from 1.3.0 to 1.4.0.
- [Release notes](https://github.com/helm/kind-action/releases )
- [Commits](https://github.com/helm/kind-action/compare/v1.3.0...v1.4.0 )
---
updated-dependencies:
- dependency-name: helm/kind-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-09-23 18:18:50 +00:00
dependabot[bot]
fe6bea8c29
build(deps): bump actions/stale from 5 to 6
...
Bumps [actions/stale](https://github.com/actions/stale ) from 5 to 6.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/stale/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-09-22 17:47:22 +00:00
Jean-Philippe Evrard
06fad838d4
Merge pull request #653 from kubereboot/dependabot/github_actions/docker/metadata-action-4.0.1
...
build(deps): bump docker/metadata-action from 3.3.0 to 4.0.1
2022-09-21 10:44:58 +02:00
dependabot[bot]
15d0492e23
build(deps): bump docker/metadata-action from 3.3.0 to 4.0.1
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 3.3.0 to 4.0.1.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md )
- [Commits](98669ae865...69f6fc9d46 )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-09-20 18:53:16 +00:00
Jean-Philippe Evrard
645c768001
Merge pull request #652 from evrardjp/fix-ds
...
Remove reference to dockerhub image
2022-09-20 17:31:01 +02:00
Jean-Philippe Evrard
1bbcbe93b7
Remove reference to dockerhub image
...
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2022-09-20 17:00:29 +02:00
Daniel Holbach
c828d27fb2
Merge pull request #650 from evrardjp/use_github_tokens
...
Use github token instead of bot accounts
2022-09-20 16:57:28 +02:00
Jean-Philippe Evrard
e34f1a0947
Use github token instead of bot accounts
...
This should be one credential less to manage.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2022-09-20 16:39:11 +02:00
Daniel Holbach
50d024c3f9
Merge pull request #644 from dholbach/move-to-kubereboot-org
...
Change organisation to kubereboot, drop Docker Hub build
2022-09-20 15:29:26 +02:00
Daniel Holbach
e36a43c57c
stop publishing to Docker Hub
...
Signed-off-by: Daniel Holbach <daniel@weave.works >
2022-09-20 13:18:57 +02:00
Daniel Holbach
bce0bac183
Changed weaveworks to kubereboot in many places
...
Areas I did not touch:
- bot name, secrets
- image name
- LICENSE (would need to ask how/if that gets changed...?)
- one mention in the Dev docs that we used to do some
pre-release smoke-testing on the Weave Dev cluster
Signed-off-by: Daniel Holbach <daniel@weave.works >
2022-09-20 13:17:55 +02:00
Daniel Holbach
d5217121ac
Merge pull request #645 from evrardjp/remove_charts_from_repo
...
Remove charts from repo
2022-09-20 13:17:11 +02:00
Jean-Philippe Evrard
82142f4d6a
Remove charts from repo
...
As we'll be extracting charts to the new repository, there
is no need to keep the current helm charts in this repository.
This allows us to have a cleaner code.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2022-09-20 12:52:33 +02:00
Daniel Holbach
796014ab80
Merge pull request #643 from dholbach/add-footer
...
Add footer to README
2022-09-20 10:51:19 +02:00
Daniel Holbach
e5867b9f87
Add footer to README
...
- Mention CNCF Sandbox status
- Mention LinuxFoundation trademark
Signed-off-by: Daniel Holbach <daniel@weave.works >
2022-09-20 09:14:40 +02:00
Jean-Philippe Evrard
8343ddd9c5
Merge pull request #638 from dholbach/add-dco
...
require DCO from now on
2022-09-19 13:18:30 +02:00
Daniel Holbach
92db607e89
Merge pull request #637 from weaveworks/prepare-for-move
...
Add a warning to inform users about move
2022-09-19 13:17:04 +02:00
Daniel Holbach
c69a2449b2
require DCO from now on
...
Signed-off-by: Daniel Holbach <daniel@weave.works >
2022-09-19 12:01:10 +02:00
Jean-Philippe Evrard
e3032373ab
Add a warning to inform users about move
...
This adds clarity to avoid temporary issues related to the
migration.
2022-09-19 12:00:27 +02:00
Daniel Holbach
5fd42b0085
Merge pull request #632 from evrardjp/test
...
Update golang and x/net to avoid CVE in our builds
2022-09-14 18:46:27 +02:00
Jean-Philippe Evrard
9d28cac8b4
Update golang and x/net
...
Without this patch, we have an old version of x/net, which
is vulnerable to CVE-2022-27664.
This fixes it by bumping to the lowest golang version
(1.18.6) and module which are known to have the fix [1] in.
[1]: https://go-review.googlesource.com/c/net/+/428735/
2022-09-14 17:57:51 +02:00
Jean-Philippe Evrard
788e351a18
ci: Ignore cache to pick latest matching go ver
...
Instead of requiring major.minor.x, it makes sense, in our CI,
to test major.minor.<latest>.
Without this, it is possible that the CI has a cached version
which is not yet the latest version.
This is a problem, as the current cached version on some workers
is 1.18.5, which has a CVE. Forcing the latest would fix it.
2022-09-14 17:57:51 +02:00
Daniel Holbach
c20a5c2da9
Merge pull request #631 from dholbach/update-slack
...
Update Slack information - point to CNCF Slack.
2022-09-14 15:31:31 +02:00
Daniel Holbach
8e42373fcb
Update Slack information - point to CNCF Slack.
...
- Also sort maintainers alphabetically.
- Make markdownlint happy.
Signed-off-by: Daniel Holbach <daniel@weave.works >
2022-09-14 14:04:30 +02:00
Daniel Holbach
6966f628b9
Merge pull request #630 from evrardjp/fix-maintainer-email
...
Update maintainer email address
2022-09-14 14:02:53 +02:00
Jean-Philippe Evrard
41ae0b20a5
Update maintainer email address
...
My maintainer email address is outdated, and is not
redirected anymore. This should fix it.
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party >
2022-09-14 13:23:55 +02:00
dependabot[bot]
8f5b9abc19
build(deps): bump github.com/spf13/viper from 1.12.0 to 1.13.0 ( #626 )
...
Bumps [github.com/spf13/viper](https://github.com/spf13/viper ) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/spf13/viper/releases )
- [Commits](https://github.com/spf13/viper/compare/v1.12.0...v1.13.0 )
---
updated-dependencies:
- dependency-name: github.com/spf13/viper
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-06 20:39:16 +02:00
Daniel Holbach
774dc69e3b
Merge pull request #623 from weaveworks/release/1.10.2
...
Prepare release 1.10.2
1.10.2
2022-08-20 11:11:06 +02:00
Christian Kotzbauer
9377948f62
chore: prepare release 1.10.2
...
Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de >
2022-08-20 10:44:22 +02:00
dependabot[bot]
4d6cac66a6
build(deps): bump helm/chart-testing-action from 2.2.1 to 2.3.0 ( #618 )
...
Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action ) from 2.2.1 to 2.3.0.
- [Release notes](https://github.com/helm/chart-testing-action/releases )
- [Commits](https://github.com/helm/chart-testing-action/compare/v2.2.1...v2.3.0 )
---
updated-dependencies:
- dependency-name: helm/chart-testing-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-11 19:37:50 +02:00
dependabot[bot]
9d4ebfc1f8
build(deps): bump alpine from 3.16.1 to 3.16.2 in /cmd/kured ( #617 )
...
Bumps alpine from 3.16.1 to 3.16.2.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-10 06:20:13 +02:00
dependabot[bot]
ad781ad6f0
build(deps): bump github.com/prometheus/client_golang ( #616 )
...
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ) from 1.12.2 to 1.13.0.
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.12.2...v1.13.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-09 06:26:49 +02:00
dependabot[bot]
9525ce53a3
build(deps): bump nick-invision/retry from 2.8.0 to 2.8.1 ( #615 )
...
Bumps [nick-invision/retry](https://github.com/nick-invision/retry ) from 2.8.0 to 2.8.1.
- [Release notes](https://github.com/nick-invision/retry/releases )
- [Changelog](https://github.com/nick-fields/retry/blob/master/.releaserc.js )
- [Commits](https://github.com/nick-invision/retry/compare/v2.8.0...v2.8.1 )
---
updated-dependencies:
- dependency-name: nick-invision/retry
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-09 06:25:46 +02:00
dependabot[bot]
c5bb9ae478
build(deps): bump nick-invision/retry from 2.7.1 to 2.8.0 ( #613 )
...
Bumps [nick-invision/retry](https://github.com/nick-invision/retry ) from 2.7.1 to 2.8.0.
- [Release notes](https://github.com/nick-invision/retry/releases )
- [Changelog](https://github.com/nick-fields/retry/blob/master/.releaserc.js )
- [Commits](https://github.com/nick-invision/retry/compare/v2.7.1...v2.8.0 )
---
updated-dependencies:
- dependency-name: nick-invision/retry
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-04 19:53:30 +02:00
Daniel Holbach
8cf12fa24e
Merge pull request #612 from weaveworks/dependabot/github_actions/nick-invision/retry-2.7.1
...
build(deps): bump nick-invision/retry from 2.7.0 to 2.7.1
2022-08-04 14:25:16 +02:00
dependabot[bot]
98fdb334aa
build(deps): bump nick-invision/retry from 2.7.0 to 2.7.1
...
Bumps [nick-invision/retry](https://github.com/nick-invision/retry ) from 2.7.0 to 2.7.1.
- [Release notes](https://github.com/nick-invision/retry/releases )
- [Changelog](https://github.com/nick-fields/retry/blob/master/.releaserc.js )
- [Commits](https://github.com/nick-invision/retry/compare/v2.7.0...v2.7.1 )
---
updated-dependencies:
- dependency-name: nick-invision/retry
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-08-03 17:03:44 +00:00
dependabot[bot]
87eda823e7
build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 ( #600 )
...
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus ) from 1.8.1 to 1.9.0.
- [Release notes](https://github.com/sirupsen/logrus/releases )
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md )
- [Commits](https://github.com/sirupsen/logrus/compare/v1.8.1...v1.9.0 )
---
updated-dependencies:
- dependency-name: github.com/sirupsen/logrus
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-31 15:52:14 +02:00
Kingdon Barrett
9788dba4f3
fix: helm chart, use standard labels/best practice ( #605 )
...
https://helm.sh/docs/chart_best_practices/labels/#standard-labels
Upgrade Notes
* bump Helm chart version to v3.0.0
* shorten gitops directions
* shorten the amount of text to get to why
Users will want to know why we have decided to commit this breaking
change straightaway
* better sentence flow
* even slimmer, only support uninstall/reinstall
* better language
* fixup: it isn't kube-prometheus-stack's Smon
it's our ServiceMonitor, which has to line up with
kube-prometheus-stack's ServiceMonitor Selector labels
* remove the "updateStrategy"
Signed-off-by: Kingdon Barrett <kingdon@weave.works >
2022-07-31 15:51:17 +02:00