Merge pull request #245 from stefanprodan/release-6.3.2

Release v6.3.3
2026-04-09 12:36:50 +00:00 · 2023-02-03 12:28:34 +02:00 · 2023-02-03 12:25:11 +02:00 · 2023-02-03 12:23:00 +02:00 · 2023-02-03 12:19:26 +02:00
13 changed files with 19 additions and 16 deletions
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -14,7 +14,7 @@ jobs:
    strategy:
      matrix:
        helm-version:
-          - v3.10.3
+          - v3.11.0
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -50,9 +50,9 @@ jobs:
          if [[ $GITHUB_REF == refs/tags/* ]]; then
            VERSION=${GITHUB_REF/refs\/tags\//}
          fi
-          echo ::set-output name=BUILD_DATE::$(date -u +'%Y-%m-%dT%H:%M:%SZ')
-          echo ::set-output name=VERSION::${VERSION}
-          echo ::set-output name=REVISION::${GITHUB_SHA}
+          echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
+          echo "VERSION=${VERSION}" >> $GITHUB_OUTPUT
+          echo "REVISION=${GITHUB_SHA}" >> $GITHUB_OUTPUT
      - name: Generate images meta
        id: meta
        uses: docker/metadata-action@v4
@@ -66,6 +66,8 @@ jobs:
      - name: Publish multi-arch image
        uses: docker/build-push-action@v3
        with:
+          sbom: true
+          provenance: true
          push: true
          builder: ${{ steps.buildx.outputs.name }}
          context: .
@@ -96,7 +98,7 @@ jobs:
          cosign sign ghcr.io/stefanprodan/charts/podinfo:${{ steps.prep.outputs.VERSION }}
          cosign sign ghcr.io/stefanprodan/manifests/podinfo:${{ steps.prep.outputs.VERSION }}
      - name: Publish base image
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v3
        with:
          push: true
          builder: ${{ steps.buildx.outputs.name }}
--- a/README.md
+++ b/README.md
@@ -24,6 +24,7 @@ Specifications:
 * End-to-End testing with Kubernetes Kind and Helm
 * Multi-arch container image with Docker buildx and Github Actions
 * Container image signing with Sigstore cosign
+* SBOMs and SLSA Provenance embedded in the container image
 * CVE scanning with Trivy

 Web API:
--- a/charts/podinfo/Chart.yaml
+++ b/charts/podinfo/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
-version: 6.3.1
-appVersion: 6.3.1
+version: 6.3.2
+appVersion: 6.3.2
 name: podinfo
 engine: gotpl
 description: Podinfo Helm chart for Kubernetes
--- a/charts/podinfo/values-prod.yaml
+++ b/charts/podinfo/values-prod.yaml
@@ -8,7 +8,7 @@ backends: []

 image:
  repository: ghcr.io/stefanprodan/podinfo
-  tag: 6.3.1
+  tag: 6.3.2
  pullPolicy: IfNotPresent

 ui:
--- a/charts/podinfo/values.yaml
+++ b/charts/podinfo/values.yaml
@@ -8,7 +8,7 @@ backends: []

 image:
  repository: ghcr.io/stefanprodan/podinfo
-  tag: 6.3.1
+  tag: 6.3.2
  pullPolicy: IfNotPresent

 ui:
--- a/cue/main.cue
+++ b/cue/main.cue
@@ -10,7 +10,7 @@ app: podinfo.#Application & {
 			name:      "podinfo"
 			namespace: "default"
 		}
-		image: tag: "6.3.1"
+		image: tag: "6.3.2"
 		resources: requests: {
 			cpu:    "100m"
 			memory: "16Mi"
--- a/deploy/bases/backend/deployment.yaml
+++ b/deploy/bases/backend/deployment.yaml
@@ -23,7 +23,7 @@ spec:
    spec:
      containers:
      - name: backend
-        image: ghcr.io/stefanprodan/podinfo:6.3.1
+        image: ghcr.io/stefanprodan/podinfo:6.3.2
        imagePullPolicy: IfNotPresent
        ports:
        - name: http
--- a/deploy/bases/frontend/deployment.yaml
+++ b/deploy/bases/frontend/deployment.yaml
@@ -23,7 +23,7 @@ spec:
    spec:
      containers:
      - name: frontend
-        image: ghcr.io/stefanprodan/podinfo:6.3.1
+        image: ghcr.io/stefanprodan/podinfo:6.3.2
        imagePullPolicy: IfNotPresent
        ports:
        - name: http
--- a/deploy/webapp/backend/deployment.yaml
+++ b/deploy/webapp/backend/deployment.yaml
@@ -25,7 +25,7 @@ spec:
      serviceAccountName: webapp
      containers:
      - name: backend
-        image: ghcr.io/stefanprodan/podinfo:6.3.1
+        image: ghcr.io/stefanprodan/podinfo:6.3.2
        imagePullPolicy: IfNotPresent
        ports:
        - name: http
--- a/deploy/webapp/frontend/deployment.yaml
+++ b/deploy/webapp/frontend/deployment.yaml
@@ -25,7 +25,7 @@ spec:
      serviceAccountName: webapp
      containers:
      - name: frontend
-        image: ghcr.io/stefanprodan/podinfo:6.3.1
+        image: ghcr.io/stefanprodan/podinfo:6.3.2
        imagePullPolicy: IfNotPresent
        ports:
        - name: http
--- a/kustomize/deployment.yaml
+++ b/kustomize/deployment.yaml
@@ -23,7 +23,7 @@ spec:
    spec:
      containers:
      - name: podinfod
-        image: ghcr.io/stefanprodan/podinfo:6.3.1
+        image: ghcr.io/stefanprodan/podinfo:6.3.2
        imagePullPolicy: IfNotPresent
        ports:
        - name: http
--- a/pkg/version/version.go
+++ b/pkg/version/version.go
@@ -1,4 +1,4 @@
 package version

-var VERSION = "6.3.1"
+var VERSION = "6.3.2"
 var REVISION = "unknown"
Author	SHA1	Message	Date
Stefan Prodan	e8c388a3fd	Merge pull request #245 from stefanprodan/release-6.3.2 Release v6.3.3	2023-02-03 12:28:34 +02:00
Stefan Prodan	abc38e1bff	Release v6.3.3 Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>	2023-02-03 12:25:11 +02:00
Stefan Prodan	bf4a3140fe	Merge pull request #244 from stefanprodan/slsa-sbom build: Enable SBOM and SLSA Provenance	2023-02-03 12:23:00 +02:00
Stefan Prodan	de2dd687cb	build: Enable SBOM and SLSA Provenance Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>	2023-02-03 12:19:26 +02:00