Compare commits

..
24 Commits
Author SHA1 Message Date
Automated ReleaseandSubmariner Bot fd88fcff1d Update Submariner dependencies to v0.19.0-m0
Signed-off-by: Automated Release <release@submariner.io>
2024-06-13 11:36:51 +03:00
Tom Pantelis 6c093ebca2 Adjust globalnet RBAC permissions
Globalnet now annotates Gateways instead of nodes.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-06-03 15:03:23 -04:00
dependabot[bot]andThomas Pantelis d3bce36afe Bump actions/checkout from 4.1.4 to 4.1.6 in the github-actions group
Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4.1.4 to 4.1.6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/0ad4b8fadaa221de15dcec353f45205ec38ea70b...a5ac7e51b41094c92402da3b24376905380afc29)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-03 07:15:07 -04:00
Tom Pantelis 301db56c91 Remove node update RBAC permission for route agent
Re: https://github.com/submariner-io/submariner/pull/3010

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-21 17:56:46 -04:00
Thomas PantelisandGitHub eb336236f3 Add RBAC access to finalizers for the operator role (#515)
On Openshift, the operator failed with error

"\"submariner-gateway\" is forbidden: cannot set blockOwnerDeletion
if an ownerReference refers to a resource you can't set finalizers on"

Openshift enables OwnerReferencesPermissionEnforcement, so
in order to set blockOwnerDeletion for an object, the user needs
update permission for the finalizers subresource of the referenced
owner. In this case the owner is the Submariner object.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-21 12:28:13 +03:00
Tom PantelisandStephen Kitt 1b251e84cf Reduce lighthouse-agent RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt f037f15dc0 Reduce lighthouse-coredns RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt b4720fad02 Reduce submariner-globalnet RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt 6f632767b3 Reduce submariner-routeagent RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt ab6d482b9e Reduce submariner-gateway RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt 01a4312a89 Reduce submariner-operator RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt ae72e4bb5d Add Makefile.shipyard to .gitignore
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
dependabot[bot]andThomas Pantelis a6f99ab9cc Bump the github-actions group with 2 updates
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [azure/setup-helm](https://github.com/azure/setup-helm).


Updates `actions/checkout` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/9bb56186c3b09b4f86b1c65136769dd318469633...0ad4b8fadaa221de15dcec353f45205ec38ea70b)

Updates `azure/setup-helm` from 3.5 to 4
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](https://github.com/azure/setup-helm/compare/5119fcb9089d432beecbf79bb2c7915207344b78...fe7b79cd5ee1e45176fcad797de68ecaf3ca4814)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: azure/setup-helm
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-01 07:59:15 -04:00
Automated ReleaseandSubmariner Bot d1805991eb Update Submariner dependencies to v0.18.0-m3
Signed-off-by: Automated Release <release@submariner.io>
2024-04-30 18:40:47 +03:00
dependabot[bot]andThomas Pantelis a3ed300574 Bump the github-actions group with 2 updates
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [actions/setup-python](https://github.com/actions/setup-python).


Updates `actions/checkout` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/b4ffde65f46336ab88eb53be808477a3936bae11...9bb56186c3b09b4f86b1c65136769dd318469633)

Updates `actions/setup-python` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/0a5c61591373683505ea898e09a3ea4f39ef2b9c...82c7e631bb3cdc910f68e0081d67478d79c6982d)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-02 11:32:46 -04:00
Automated ReleaseandSubmariner Bot c83ec2d623 Update Submariner dependencies to v0.18.0-m2
Signed-off-by: Automated Release <release@submariner.io>
2024-04-02 16:57:42 +03:00
Automated ReleaseandSubmariner Bot 2a5326a2c3 Update Submariner dependencies to v0.18.0-m1
Signed-off-by: Automated Release <release@submariner.io>
2024-03-11 17:12:51 +02:00
Tom Pantelis fd1141e423 Add dependabot config for release-0.17
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-03-04 11:19:19 -05:00
dependabot[bot]andThomas Pantelis 50528943fe Bump the github-actions group with 1 update
Bumps the github-actions group with 1 update: [tim-actions/get-pr-commits](https://github.com/tim-actions/get-pr-commits).


Updates `tim-actions/get-pr-commits` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/tim-actions/get-pr-commits/releases)
- [Commits](https://github.com/tim-actions/get-pr-commits/compare/3efc1387ead42029a0d488ab98f24b7452dc3cde...198af03565609bb4ed924d1260247b4881f09e7d)

---
updated-dependencies:
- dependency-name: tim-actions/get-pr-commits
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-04 10:56:05 -05:00
Daniel FarrellandThomas Pantelis e416a2d206 Add committers to Makefile
To allow more folks to help make releases.

Relates-to: submariner-io/submariner#2900
Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
2024-02-07 04:24:48 -05:00
Tom Pantelis 6914e5bfd5 Use K8s 1.29 as latest in E2E
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-02-06 12:07:18 -05:00
Stephen KittandThomas Pantelis 7685e7ae06 Add vthapar as code owner
Signed-off-by: Stephen Kitt <skitt@redhat.com>
2024-02-06 06:47:06 -05:00
dependabot[bot]andThomas Pantelis 0bb5a6b8fd Bump the github-actions group with 1 update
Bumps the github-actions group with 1 update: [peter-evans/create-issue-from-file](https://github.com/peter-evans/create-issue-from-file).


Updates `peter-evans/create-issue-from-file` from 4.0.1 to 5.0.0
- [Release notes](https://github.com/peter-evans/create-issue-from-file/releases)
- [Commits](https://github.com/peter-evans/create-issue-from-file/compare/433e51abf769039ee20ba1293a088ca19d573b7f...24452a72d85239eacf1468b0f1982a9f3fec4c94)

---
updated-dependencies:
- dependency-name: peter-evans/create-issue-from-file
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-01 07:58:46 -05:00
Automated ReleaseandSubmariner Bot 5709918844 Update Submariner dependencies to v0.18.0-m0
Signed-off-by: Automated Release <release@submariner.io>
2024-01-29 20:17:36 +02:00
10 changed files with 40 additions and 42 deletions
+9
View File
@@ -36,3 +36,12 @@ updates:
github-actions:
patterns:
- "*"
- package-ecosystem: github-actions
directory: '/'
target-branch: "release-0.17"
schedule:
interval: monthly
groups:
github-actions:
patterns:
- "*"
+2 -2
View File
@@ -11,6 +11,6 @@ jobs:
name: PR targets branch
runs-on: ubuntu-latest
steps:
- name: Check that the PR targets release-0.17
if: ${{ github.base_ref != 'release-0.17' }}
- name: Check that the PR targets devel
if: ${{ github.base_ref != 'devel' }}
run: exit 1
+3 -3
View File
@@ -26,14 +26,14 @@ jobs:
- k8s_version: '1.26'
steps:
- name: Check out the repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
- name: Run E2E deployment and tests
uses: submariner-io/shipyard/gh-actions/e2e@release-0.17
uses: submariner-io/shipyard/gh-actions/e2e@devel
with:
k8s_version: ${{ matrix.k8s_version }}
using: ${{ matrix.cable_driver }} ${{ matrix.globalnet }} ${{ matrix.lighthouse }}
- name: Post mortem
if: failure()
uses: submariner-io/shipyard/gh-actions/post-mortem@release-0.17
uses: submariner-io/shipyard/gh-actions/post-mortem@devel
+3 -3
View File
@@ -13,11 +13,11 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
- name: Run E2E deployment and tests
uses: submariner-io/shipyard/gh-actions/e2e@release-0.17
uses: submariner-io/shipyard/gh-actions/e2e@devel
- name: Post mortem
if: failure()
uses: submariner-io/shipyard/gh-actions/post-mortem@release-0.17
uses: submariner-io/shipyard/gh-actions/post-mortem@devel
+3 -3
View File
@@ -21,13 +21,13 @@ jobs:
lighthouse: ['', 'lighthouse']
steps:
- name: Check out the repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
- name: Run E2E deployment and tests
uses: submariner-io/shipyard/gh-actions/e2e@release-0.17
uses: submariner-io/shipyard/gh-actions/e2e@devel
with:
using: ${{ matrix.cable_driver }} ${{ matrix.globalnet }} ${{ matrix.lighthouse }}
- name: Post mortem
if: failure()
uses: submariner-io/shipyard/gh-actions/post-mortem@release-0.17
uses: submariner-io/shipyard/gh-actions/post-mortem@devel
+6 -6
View File
@@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
- name: Set up Helm
uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814
@@ -64,7 +64,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
with:
fetch-depth: 0
- name: Run gitlint
@@ -75,7 +75,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
- name: Run helm-docs and verify docs are up-to-date
run: make helm-docs
@@ -85,7 +85,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
- name: Run markdown-link-check
uses: gaurav-nelson/github-action-markdown-link-check@d53a906aa6b22b8979d33bc86170567e619495ec
@@ -99,7 +99,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
- name: Run markdownlint
run: make markdownlint
@@ -108,6 +108,6 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
- name: Run yamllint
run: make yamllint
+1 -1
View File
@@ -16,7 +16,7 @@ jobs:
issues: write
steps:
- name: Check out the repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
- name: Run markdown-link-check
uses: gaurav-nelson/github-action-markdown-link-check@d53a906aa6b22b8979d33bc86170567e619495ec
+2 -2
View File
@@ -4,7 +4,7 @@ name: Release Charts
on:
push:
branches:
- release-0.17
- devel
permissions:
contents: write
@@ -16,7 +16,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
with:
fetch-depth: 0
+2 -2
View File
@@ -1,4 +1,4 @@
BASE_BRANCH ?= release-0.17
BASE_BRANCH ?= devel
export BASE_BRANCH
export HELM_REPO_LOCATION=./helm_repo
@@ -17,7 +17,7 @@ endif
export DEPLOYTOOL = helm
GH_URL=https://submariner-io.github.io/submariner-charts/charts
CHARTS_DIR=charts
CHARTS_VERSION=0.17.2
CHARTS_VERSION=0.19.0-m0
HELM_DOCS_VERSION=0.15.0
REPO_URL=$(shell git config remote.origin.url)
+9 -20
View File
@@ -18,16 +18,6 @@ rules:
- get
- create
- update
- apiGroups:
- ""
resources:
# For syncing Secrets from the broker
- secrets
verbs:
- get
- create
- update
- delete
- apiGroups:
- ""
resources:
@@ -236,6 +226,15 @@ metadata:
chart: {{ template "submariner.chart" . }}
app: {{ template "submariner.name" . }}
rules:
- apiGroups:
- submariner.io
resources:
- gateways
verbs:
- get
- list
- watch
- update
- apiGroups:
- coordination.k8s.io
resources:
@@ -478,7 +477,6 @@ rules:
- get
- list
- watch
- update
- apiGroups:
- projectcalico.org
resources:
@@ -519,15 +517,6 @@ metadata:
chart: {{ template "submariner.chart" . }}
app: {{ template "submariner.name" . }}
rules:
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- list
- watch
- update
- apiGroups:
- ""
resources: