Compare commits

..
15 Commits
Author SHA1 Message Date
dependabot[bot]andThomas Pantelis 3406547674 Bump actions/checkout from 3.0.2 to 3.1.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.0.2 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/2541b1294d2704b0964813337f33b291d3f8596b...93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-12 07:40:57 -04:00
dependabot[bot]andThomas Pantelis 54bb10457a Bump helm/chart-testing-action from 2.3.0 to 2.3.1
Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](https://github.com/helm/chart-testing-action/compare/09ed88797198755e5031f25be13da255e7e33aad...afea100a513515fbd68b0e72a7bb0ae34cb62aec)

---
updated-dependencies:
- dependency-name: helm/chart-testing-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-07 13:34:25 -04:00
Sridhar GaddamandDaniel Farrell c4f4f7cb52 Stop overloading LH and Operator images
Now that lighthouse fix is merged and operator changes are in,
stop overloading the images.

Depends on: https://github.com/submariner-io/submariner-charts/pull/273
Signed-off-by: Sridhar Gaddam <sgaddam@redhat.com>
2022-10-07 12:32:32 -04:00
Sridhar GaddamandDaniel Farrell 732eb70dcc Bump to 0.14.0-m1
Signed-off-by: Sridhar Gaddam <sgaddam@redhat.com>
2022-10-07 12:32:32 -04:00
Mike KolesnikandDaniel Farrell 045cc7f4f7 Add support for load balancer
Signed-off-by: Mike Kolesnik <mkolesni@redhat.com>
2022-09-22 14:25:03 -04:00
Daniel FarrellandStephen Kitt 33efe8b1dc Add K8s 1.25 to E2E CI
Relates-to: submariner-io/shipyard#949
Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
2022-09-21 09:33:56 +02:00
Stephen KittandThomas Pantelis aa354f79f2 Use the default kind CNI
See https://github.com/submariner-io/shipyard/issues/858.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2022-09-20 11:49:44 -04:00
Mike KolesnikandThomas Pantelis 7a555fe8ee Preload LH images in case of LH & GN deployment
Due to a bug in LH which was fixed in devel, but not yet backported, we
have to preload the LH images to get latest versions (and operator due
to a similar reason).

Signed-off-by: Mike Kolesnik <mkolesni@redhat.com>
2022-09-14 07:56:59 -04:00
Mike KolesnikandThomas Pantelis 0633dd80fb Don't specify images to preload
Shipyard now preloads all built images,
there's no need to explicitly preload any images.

Signed-off-by: Mike Kolesnik <mkolesni@redhat.com>
2022-09-14 07:56:59 -04:00
Stephen KittandMike Kolesnik 4d54dd283e Add contents write permission on release
When releasing, since the job pushes to the git repository, it needs
to have write permission on "contents".

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2022-09-06 14:39:08 +03:00
Mike Kolesnik 5be04f2906 Adjust LH image overrides to use component names
Operator expects the component name, use it in the Submariner CR and not
the image name.

Signed-off-by: Mike Kolesnik <mkolesni@redhat.com>
2022-09-06 14:25:30 +03:00
Stephen KittandThomas Pantelis 3eec2f8474 Check GHA updates weekly
The release frequency of some GHAs means we end up with daily
dependabot PRs, which results in lots of not-particularly-useful
review work. Reducing the update cadence to weekly shouldn't expose us
to much risk and will reduce PR churn.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2022-08-26 16:04:16 -04:00
Daniel FarrellandStephen Kitt e16a2c36df Minimize GHA permissions
Set the GitHub Actions token permission to null in most workflows.

This results in:

GITHUB_TOKEN Permissions
  Metadata: read

The default permissions, used without the null override, are either

GITHUB_TOKEN Permissions
  Actions: write
  Checks: write
  Contents: write
  Deployments: write
  Discussions: write
  Issues: write
  Metadata: read
  Packages: write
  Pages: write
  PullRequests: write
  RepositoryProjects: write
  SecurityEvents: write
  Statuses: write

or

GITHUB_TOKEN Permissions
  Actions: read
  Checks: read
  Contents: read
  Deployments: read
  Discussions: read
  Issues: read
  Metadata: read
  Packages: read
  Pages: read
  PullRequests: read
  RepositoryProjects: read
  SecurityEvents: read
  Statuses: read

Jobs triggered by PRs get read permissions, other jobs get write.

One job requires non-null permissions to function.

The dependent issues GHA needs PR/issues write permissions to add/remove
`dependent` labels. It needs status write permission to block/unblock
PRs when dependencies are missing/met. Fails with HttpError otherwise.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
2022-08-25 10:47:32 +02:00
Mike KolesnikandThomas Pantelis 01599cbb65 Add support for image overrides
Add support to override specific images (already supported by
submariner) to the helm chart.

Signed-off-by: Mike Kolesnik <mkolesni@redhat.com>
2022-08-22 08:07:25 -04:00
dependabot[bot]andThomas Pantelis a5401e6df0 Bump azure/setup-helm from 2.1 to 3.3
Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 2.1 to 3.3.
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Commits](https://github.com/azure/setup-helm/compare/217bf70cbd2e930ba2e81ba7e1de2f7faecc42ba...b5b231a831f96336bbfeccc1329990f0005c5bb1)

---
updated-dependencies:
- dependency-name: azure/setup-helm
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-19 08:07:00 -04:00
18 changed files with 82 additions and 35 deletions
+3 -3
View File
@@ -4,14 +4,14 @@ updates:
- package-ecosystem: github-actions
directory: '/'
schedule:
interval: daily
interval: weekly
- package-ecosystem: github-actions
directory: '/'
target-branch: "release-0.12"
schedule:
interval: daily
interval: weekly
- package-ecosystem: github-actions
directory: '/'
target-branch: "release-0.13"
schedule:
interval: daily
interval: weekly
+2
View File
@@ -4,6 +4,8 @@ name: Branch Checks
on:
pull_request:
permissions: {}
jobs:
target_branch:
name: PR targets branch
+5
View File
@@ -19,6 +19,11 @@ on:
schedule:
- cron: '0 0/6 * * *' # every 6 hours
permissions:
issues: write
pull-requests: write
statuses: write
jobs:
check:
name: Check Dependencies
+5 -2
View File
@@ -5,6 +5,8 @@ on:
pull_request:
types: [labeled, opened, synchronize, reopened]
permissions: {}
jobs:
e2e:
name: E2E
@@ -16,14 +18,15 @@ jobs:
matrix:
cable_driver: ['libreswan', 'wireguard', 'vxlan']
globalnet: ['', 'globalnet']
k8s_version: ['1.24']
k8s_version: ['1.25']
lighthouse: ['', 'lighthouse']
include:
- k8s_version: '1.22'
- k8s_version: '1.23'
- k8s_version: '1.24'
steps:
- name: Check out the repository
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
- name: Run E2E deployment and tests
uses: submariner-io/shipyard/gh-actions/e2e@devel
+3 -1
View File
@@ -4,6 +4,8 @@ name: End to End Default
on:
pull_request:
permissions: {}
jobs:
e2e:
name: E2E
@@ -11,7 +13,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
- name: Run E2E deployment and tests
uses: submariner-io/shipyard/gh-actions/e2e@devel
+3 -1
View File
@@ -5,6 +5,8 @@ on:
schedule:
- cron: "0 0 * * *"
permissions: {}
jobs:
e2e:
name: E2E
@@ -19,7 +21,7 @@ jobs:
lighthouse: ['', 'lighthouse']
steps:
- name: Check out the repository
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
- name: Run E2E deployment and tests
uses: submariner-io/shipyard/gh-actions/e2e@devel
+10 -8
View File
@@ -4,6 +4,8 @@ name: Linting
on:
pull_request:
permissions: {}
jobs:
apply-suggestions-commits:
name: 'No "Apply suggestions from code review" Commits'
@@ -36,10 +38,10 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
- name: Set up Helm
uses: azure/setup-helm@217bf70cbd2e930ba2e81ba7e1de2f7faecc42ba
uses: azure/setup-helm@b5b231a831f96336bbfeccc1329990f0005c5bb1
with:
version: v3.6.0
@@ -49,7 +51,7 @@ jobs:
python-version: '3.x'
- name: Set up helm/chart-testing
uses: helm/chart-testing-action@09ed88797198755e5031f25be13da255e7e33aad
uses: helm/chart-testing-action@afea100a513515fbd68b0e72a7bb0ae34cb62aec
- name: Run helm/chart-testing (lint)
run: ct lint --config ct.yaml
@@ -59,7 +61,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
with:
fetch-depth: 0
- name: Run gitlint
@@ -70,7 +72,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
- name: Run helm-docs and verify docs are up-to-date
run: make helm-docs
@@ -80,7 +82,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
- name: Run markdown-link-check
uses: gaurav-nelson/github-action-markdown-link-check@228fbf4ffb2a86a65314866e9b2322b519fd885f
@@ -94,7 +96,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
- name: Run markdownlint
run: make markdownlint
@@ -103,6 +105,6 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
- name: Run yamllint
run: make yamllint
+3 -1
View File
@@ -5,6 +5,8 @@ on:
schedule:
- cron: "0 0 * * 0"
permissions: {}
jobs:
markdown-link-check-periodic:
name: Markdown Links (all files)
@@ -12,7 +14,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
- name: Run markdown-link-check
uses: gaurav-nelson/github-action-markdown-link-check@228fbf4ffb2a86a65314866e9b2322b519fd885f
+4 -1
View File
@@ -6,6 +6,9 @@ on:
branches:
- devel
permissions:
contents: write
jobs:
release:
name: Release
@@ -13,7 +16,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
with:
fetch-depth: 0
-1
View File
@@ -1,5 +1,4 @@
---
cni: weave
submariner: true
nodes: control-plane
clusters:
+1 -3
View File
@@ -6,8 +6,6 @@ ifneq (,$(DAPPER_HOST_ARCH))
# Running in Dapper
PRELOAD_IMAGES := submariner-gateway submariner-operator submariner-route-agent lighthouse-agent lighthouse-coredns
include $(SHIPYARD_DIR)/Makefile.inc
ifneq (,$(filter ovn,$(_using)))
@@ -19,7 +17,7 @@ endif
export DEPLOYTOOL = helm
GH_URL=https://submariner-io.github.io/submariner-charts/charts
CHARTS_DIR=charts
CHARTS_VERSION=0.13.0-rc2
CHARTS_VERSION=0.14.0-m1
HELM_DOCS_VERSION=0.15.0
REPO_URL=$(shell git config remote.origin.url)
+2 -2
View File
@@ -1,8 +1,8 @@
---
name: submariner-k8s-broker
version: 0.13.0-rc2
version: 0.14.0-m1
apiVersion: v2
appVersion: 0.13.0-rc2
appVersion: 0.14.0-m1
description: Submariner Kubernetes Broker
keywords:
home: https://submariner-io.github.io/
+1 -1
View File
@@ -1,6 +1,6 @@
# submariner-k8s-broker
![Version: 0.13.0](https://img.shields.io/badge/Version-0.13.0-informational?style=flat-square) ![AppVersion: 0.13.0](https://img.shields.io/badge/AppVersion-0.13.0-informational?style=flat-square)
![Version: 0.14.0](https://img.shields.io/badge/Version-0.14.0-informational?style=flat-square) ![AppVersion: 0.14.0](https://img.shields.io/badge/AppVersion-0.14.0-informational?style=flat-square)
Submariner Kubernetes Broker
+2 -2
View File
@@ -1,8 +1,8 @@
---
name: submariner-operator
version: 0.13.0-rc2
version: 0.14.0-m1
apiVersion: v2
appVersion: 0.13.0-rc2
appVersion: 0.14.0-m1
description: Submariner enables direct networking between Pods and Services in different Kubernetes clusters
keywords:
home: https://submariner-io.github.io/
+4 -4
View File
@@ -1,6 +1,6 @@
# submariner-operator
![Version: 0.13.0](https://img.shields.io/badge/Version-0.13.0-informational?style=flat-square) ![AppVersion: 0.13.0](https://img.shields.io/badge/AppVersion-0.13.0-informational?style=flat-square)
![Version: 0.14.0](https://img.shields.io/badge/Version-0.14.0-informational?style=flat-square) ![AppVersion: 0.14.0](https://img.shields.io/badge/AppVersion-0.14.0-informational?style=flat-square)
Submariner enables direct networking between Pods and Services in different Kubernetes clusters
@@ -27,7 +27,7 @@ Submariner enables direct networking between Pods and Services in different Kube
| broker.server | string | `"example.k8s.apiserver"` | |
| broker.token | string | `"test"` | |
| gateway.image.repository | string | `"quay.io/submariner/submariner-gateway"` | |
| gateway.image.tag | string | `"0.13.0-rc2"` | |
| gateway.image.tag | string | `"0.14.0-m1"` | |
| ipsec.debug | bool | `false` | |
| ipsec.forceUDPEncaps | bool | `false` | |
| ipsec.ikePort | int | `500` | |
@@ -39,7 +39,7 @@ Submariner enables direct networking between Pods and Services in different Kube
| operator.affinity | object | `{}` | |
| operator.image.pullPolicy | string | `"IfNotPresent"` | |
| operator.image.repository | string | `"quay.io/submariner/submariner-operator"` | |
| operator.image.tag | string | `"0.13.0-rc2"` | |
| operator.image.tag | string | `"0.14.0-m1"` | |
| operator.resources | object | `{}` | |
| operator.tolerations | list | `[]` | |
| rbac.create | bool | `true` | |
@@ -64,7 +64,7 @@ Submariner enables direct networking between Pods and Services in different Kube
| submariner.globalCidr | string | `""` | |
| submariner.healthcheckEnabled | bool | `true` | |
| submariner.images.repository | string | `"quay.io/submariner"` | |
| submariner.images.tag | string | `"0.13.0-rc2"` | |
| submariner.images.tag | string | `"0.14.0-m1"` | |
| submariner.natEnabled | bool | `false` | |
| submariner.serviceCidr | string | `""` | |
| submariner.serviceDiscovery | bool | `true` | |
+2 -2
View File
@@ -14,7 +14,7 @@ questions:
type: string
label: Submariner Operator Image Repository
- variable: operator.image.tag
default: "0.13.0-rc2"
default: "0.14.0-m1"
description: "Submariner Operator Image Tag"
type: string
label: Submariner Operator Image Tag
@@ -32,7 +32,7 @@ questions:
type: string
label: Submariner Repository
- variable: submariner.images.tag
default: "0.13.0-rc2"
default: "0.14.0-m1"
description: "Submariner Images Tag (shared for all non-operator images)"
type: string
label: Submariner Images Tag
@@ -19,10 +19,37 @@ spec:
clusterID: {{ .Values.submariner.clusterId }}
colorCodes: {{ .Values.submariner.colorCodes }}
debug: {{ .Values.submariner.debug }}
loadBalancerEnabled: {{ .Values.submariner.loadBalancerEnabled }}
namespace: {{ .Release.Namespace }}
natEnabled: {{ .Values.submariner.natEnabled }}
repository: {{ .Values.submariner.images.repository }}
version: {{ .Values.submariner.images.tag }}
{{- with .Values.images }}
{{- if . }}
imageOverrides:
{{- if index . "submariner-operator" }}
submariner-operator: {{ index . "submariner-operator" }}
{{- end }}
{{- if index . "submariner-gateway" }}
submariner-gateway: {{ index . "submariner-gateway" }}
{{- end }}
{{- if index . "submariner-route-agent" }}
submariner-routeagent: {{ index . "submariner-route-agent" }}
{{- end }}
{{- if index . "submariner-globalnet" }}
submariner-globalnet: {{ index . "submariner-globalnet" }}
{{- end }}
{{- if index . "submariner-networkplugin-syncer" }}
submariner-networkplugin-syncer: {{ index . "submariner-networkplugin-syncer" }}
{{- end }}
{{- if index . "lighthouse-agent" }}
submariner-lighthouse-agent: {{ index . "lighthouse-agent" }}
{{- end }}
{{- if index . "lighthouse-coredns" }}
submariner-lighthouse-coredns: {{ index . "lighthouse-coredns" }}
{{- end }}
{{- end }}
{{- end }}
serviceCIDR: "{{ .Values.submariner.serviceCidr }}"
globalCIDR: "{{ .Values.submariner.globalCidr }}"
serviceDiscoveryEnabled: {{ .Values.submariner.serviceDiscovery }}
+5 -3
View File
@@ -5,6 +5,7 @@ submariner:
clusterCidr: ""
serviceCidr: ""
globalCidr: ""
loadBalancerEnabled: false
natEnabled: false
colorCodes: blue
debug: false
@@ -14,7 +15,7 @@ submariner:
coreDNSCustomConfig: {}
images:
repository: quay.io/submariner
tag: "0.13.0-rc2"
tag: "0.14.0-m1"
broker:
server: example.k8s.apiserver
token: test
@@ -24,6 +25,7 @@ broker:
globalnet: false
rbac:
create: true
images: {}
ipsec:
psk: ""
debug: false
@@ -37,7 +39,7 @@ leadership:
operator:
image:
repository: quay.io/submariner/submariner-operator
tag: "0.13.0-rc2"
tag: "0.14.0-m1"
pullPolicy: IfNotPresent
resources: {}
tolerations: []
@@ -45,7 +47,7 @@ operator:
gateway:
image:
repository: quay.io/submariner/submariner-gateway
tag: "0.13.0-rc2"
tag: "0.14.0-m1"
serviceAccounts:
operator:
create: true