mirror of
https://github.com/FairwindsOps/polaris.git
synced 2026-02-14 18:09:54 +00:00
be349a885d
* Bumped to to 1.24 to fix vulnerability * Bumped to to 1.22.7 to fix vulnerability * Bumped to to 1.22.7 to fix vulnerability * Bumped to to 1.22.7 to fix vulnerability * Fixing issues * Fixing issues * Fixing issues * Fixing issues * Fixing issues * Fixing issues * Fixing issues
115 lines
3.8 KiB
Plaintext
115 lines
3.8 KiB
Plaintext
version: 2
|
|
checksum:
|
|
name_template: 'checksums.txt'
|
|
changelog:
|
|
sort: asc
|
|
filters:
|
|
exclude:
|
|
- '^docs:'
|
|
- '^test:'
|
|
env:
|
|
- GOBIN={{ .Env.TMPDIR }}/go-bin
|
|
before:
|
|
hooks:
|
|
- go mod download
|
|
builds:
|
|
- id: polaris
|
|
ldflags:
|
|
- -X main.Version={{.Version}} -X main.Commit={{.Commit}} -s -w
|
|
env:
|
|
- CGO_ENABLED=0
|
|
- GO111MODULE=on
|
|
goos:
|
|
- linux
|
|
- darwin
|
|
- windows
|
|
goarch:
|
|
- amd64
|
|
- arm
|
|
- arm64
|
|
goarm:
|
|
- 6
|
|
- 7
|
|
archives:
|
|
- id: polaris
|
|
builds: ["polaris"]
|
|
name_template: "{{ .ProjectName }}_{{ .Os }}_{{ .Arch }}{{ if .Arm }}v{{ .Arm }}{{ end }}{{ if .Mips }}_{{ .Mips }}{{ end }}"
|
|
signs:
|
|
- cmd: cosign
|
|
args: ["sign-blob", "--key=hashivault://cosign", "-output-signature=${signature}", "${artifact}"]
|
|
artifacts: checksum
|
|
release:
|
|
# This is replaced using `envsubst`, depending on the git branch.
|
|
disable: ${skip_release}
|
|
prerelease: auto
|
|
footer: |
|
|
You can verify the signature of the checksums.txt file using [cosign](https://github.com/sigstore/cosign).
|
|
|
|
```
|
|
cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub
|
|
```
|
|
brews:
|
|
- name: polaris
|
|
# This is replaced using `envsubst`, depending on the git branch.
|
|
skip_upload: ${skip_release}
|
|
repository:
|
|
owner: FairwindsOps
|
|
name: homebrew-tap
|
|
directory: Formula
|
|
description: Open Source Best Practices for Kubernetes
|
|
url_template: "https://github.com/FairwindsOps/polaris/releases/download/{{ .Tag }}/{{ .ArtifactName }}"
|
|
test: |
|
|
system "#{bin}/polaris version"
|
|
dockers:
|
|
# There are multiple images to match the `--platform` docker build flag with
|
|
# combinations of `GOOS`, `GOARCH`, and `GOARM`
|
|
- image_templates:
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
|
|
use: buildx
|
|
build_flag_templates:
|
|
- "--platform=linux/amd64"
|
|
- image_templates:
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
|
|
use: buildx
|
|
goarch: arm64
|
|
goos: linux
|
|
build_flag_templates:
|
|
- "--platform=linux/arm64"
|
|
docker_manifests:
|
|
# Create DOcker manifests that make multiple architectures available within a tag,
|
|
# and provide partial-version tags like 2, and 2.2.
|
|
- name_template: quay.io/fairwinds/polaris:{{ .FullCommit }}
|
|
image_templates:
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
|
|
- name_template: quay.io/fairwinds/polaris:{{ .Env.feature_docker_tag }}
|
|
# This is replaced using `envsubst`, depending on the git branch.
|
|
skip_push: ${skip_feature_docker_tags}
|
|
image_templates:
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
|
|
- name_template: quay.io/fairwinds/polaris:latest
|
|
# This is replaced using `envsubst`, depending on the git branch.
|
|
skip_push: ${skip_release}
|
|
image_templates:
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
|
|
- name_template: quay.io/fairwinds/polaris:{{ .Tag }}
|
|
# This is replaced using `envsubst`, depending on the git branch.
|
|
skip_push: ${skip_release}
|
|
image_templates:
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
|
|
- name_template: quay.io/fairwinds/polaris:{{ .Major }}
|
|
# This is replaced using `envsubst`, depending on the git branch.
|
|
skip_push: ${skip_release}
|
|
image_templates:
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
|
|
- name_template: quay.io/fairwinds/polaris:{{ .Major }}.{{ .Minor }}
|
|
# This is replaced using `envsubst`, depending on the git branch.
|
|
skip_push: ${skip_release}
|
|
image_templates:
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-amd64"
|
|
- "quay.io/fairwinds/polaris:{{ .FullCommit }}-arm64"
|