Compare commits

..
28 Commits
Author SHA1 Message Date
Automated ReleaseandSubmariner Bot 9376b31107 Update Submariner dependencies to v0.19.0-m1
Signed-off-by: Automated Release <release@submariner.io>
2024-07-22 18:00:24 +03:00
Stephen KittandSubmariner Bot f406805d57 Remove extra space in YAML file
Signed-off-by: Stephen Kitt <skitt@redhat.com>
2024-07-22 18:00:24 +03:00
dependabot[bot]andThomas Pantelis 525d5cc7af Bump actions/checkout from 4.1.6 to 4.1.7 in the github-actions group
Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4.1.6 to 4.1.7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/a5ac7e51b41094c92402da3b24376905380afc29...692973e3d937129bcbf40652eb9f2f61becf3332)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-20 08:19:59 -04:00
Tom Pantelis 561bf2d2b8 Add dependabot config for release-0.18
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-06-20 08:10:57 -04:00
Automated ReleaseandSubmariner Bot fd88fcff1d Update Submariner dependencies to v0.19.0-m0
Signed-off-by: Automated Release <release@submariner.io>
2024-06-13 11:36:51 +03:00
Tom Pantelis 6c093ebca2 Adjust globalnet RBAC permissions
Globalnet now annotates Gateways instead of nodes.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-06-03 15:03:23 -04:00
dependabot[bot]andThomas Pantelis d3bce36afe Bump actions/checkout from 4.1.4 to 4.1.6 in the github-actions group
Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4.1.4 to 4.1.6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/0ad4b8fadaa221de15dcec353f45205ec38ea70b...a5ac7e51b41094c92402da3b24376905380afc29)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-06-03 07:15:07 -04:00
Tom Pantelis 301db56c91 Remove node update RBAC permission for route agent
Re: https://github.com/submariner-io/submariner/pull/3010

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-21 17:56:46 -04:00
Thomas PantelisandGitHub eb336236f3 Add RBAC access to finalizers for the operator role (#515)
On Openshift, the operator failed with error

"\"submariner-gateway\" is forbidden: cannot set blockOwnerDeletion
if an ownerReference refers to a resource you can't set finalizers on"

Openshift enables OwnerReferencesPermissionEnforcement, so
in order to set blockOwnerDeletion for an object, the user needs
update permission for the finalizers subresource of the referenced
owner. In this case the owner is the Submariner object.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-21 12:28:13 +03:00
Tom PantelisandStephen Kitt 1b251e84cf Reduce lighthouse-agent RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt f037f15dc0 Reduce lighthouse-coredns RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt b4720fad02 Reduce submariner-globalnet RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt 6f632767b3 Reduce submariner-routeagent RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt ab6d482b9e Reduce submariner-gateway RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt 01a4312a89 Reduce submariner-operator RBAC permissions
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
Tom PantelisandStephen Kitt ae72e4bb5d Add Makefile.shipyard to .gitignore
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-06 17:46:32 +02:00
dependabot[bot]andThomas Pantelis a6f99ab9cc Bump the github-actions group with 2 updates
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [azure/setup-helm](https://github.com/azure/setup-helm).


Updates `actions/checkout` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/9bb56186c3b09b4f86b1c65136769dd318469633...0ad4b8fadaa221de15dcec353f45205ec38ea70b)

Updates `azure/setup-helm` from 3.5 to 4
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](https://github.com/azure/setup-helm/compare/5119fcb9089d432beecbf79bb2c7915207344b78...fe7b79cd5ee1e45176fcad797de68ecaf3ca4814)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: azure/setup-helm
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-01 07:59:15 -04:00
Automated ReleaseandSubmariner Bot d1805991eb Update Submariner dependencies to v0.18.0-m3
Signed-off-by: Automated Release <release@submariner.io>
2024-04-30 18:40:47 +03:00
dependabot[bot]andThomas Pantelis a3ed300574 Bump the github-actions group with 2 updates
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [actions/setup-python](https://github.com/actions/setup-python).


Updates `actions/checkout` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/b4ffde65f46336ab88eb53be808477a3936bae11...9bb56186c3b09b4f86b1c65136769dd318469633)

Updates `actions/setup-python` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/0a5c61591373683505ea898e09a3ea4f39ef2b9c...82c7e631bb3cdc910f68e0081d67478d79c6982d)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-02 11:32:46 -04:00
Automated ReleaseandSubmariner Bot c83ec2d623 Update Submariner dependencies to v0.18.0-m2
Signed-off-by: Automated Release <release@submariner.io>
2024-04-02 16:57:42 +03:00
Automated ReleaseandSubmariner Bot 2a5326a2c3 Update Submariner dependencies to v0.18.0-m1
Signed-off-by: Automated Release <release@submariner.io>
2024-03-11 17:12:51 +02:00
Tom Pantelis fd1141e423 Add dependabot config for release-0.17
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-03-04 11:19:19 -05:00
dependabot[bot]andThomas Pantelis 50528943fe Bump the github-actions group with 1 update
Bumps the github-actions group with 1 update: [tim-actions/get-pr-commits](https://github.com/tim-actions/get-pr-commits).


Updates `tim-actions/get-pr-commits` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/tim-actions/get-pr-commits/releases)
- [Commits](https://github.com/tim-actions/get-pr-commits/compare/3efc1387ead42029a0d488ab98f24b7452dc3cde...198af03565609bb4ed924d1260247b4881f09e7d)

---
updated-dependencies:
- dependency-name: tim-actions/get-pr-commits
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-04 10:56:05 -05:00
Daniel FarrellandThomas Pantelis e416a2d206 Add committers to Makefile
To allow more folks to help make releases.

Relates-to: submariner-io/submariner#2900
Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
2024-02-07 04:24:48 -05:00
Tom Pantelis 6914e5bfd5 Use K8s 1.29 as latest in E2E
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-02-06 12:07:18 -05:00
Stephen KittandThomas Pantelis 7685e7ae06 Add vthapar as code owner
Signed-off-by: Stephen Kitt <skitt@redhat.com>
2024-02-06 06:47:06 -05:00
dependabot[bot]andThomas Pantelis 0bb5a6b8fd Bump the github-actions group with 1 update
Bumps the github-actions group with 1 update: [peter-evans/create-issue-from-file](https://github.com/peter-evans/create-issue-from-file).


Updates `peter-evans/create-issue-from-file` from 4.0.1 to 5.0.0
- [Release notes](https://github.com/peter-evans/create-issue-from-file/releases)
- [Commits](https://github.com/peter-evans/create-issue-from-file/compare/433e51abf769039ee20ba1293a088ca19d573b7f...24452a72d85239eacf1468b0f1982a9f3fec4c94)

---
updated-dependencies:
- dependency-name: peter-evans/create-issue-from-file
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-01 07:58:46 -05:00
Automated ReleaseandSubmariner Bot 5709918844 Update Submariner dependencies to v0.18.0-m0
Signed-off-by: Automated Release <release@submariner.io>
2024-01-29 20:17:36 +02:00
11 changed files with 52 additions and 45 deletions
+18
View File
@@ -36,3 +36,21 @@ updates:
github-actions: github-actions:
patterns: patterns:
- "*" - "*"
- package-ecosystem: github-actions
directory: '/'
target-branch: "release-0.17"
schedule:
interval: monthly
groups:
github-actions:
patterns:
- "*"
- package-ecosystem: github-actions
directory: '/'
target-branch: "release-0.18"
schedule:
interval: monthly
groups:
github-actions:
patterns:
- "*"
+2 -2
View File
@@ -11,6 +11,6 @@ jobs:
name: PR targets branch name: PR targets branch
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check that the PR targets release-0.17 - name: Check that the PR targets devel
if: ${{ github.base_ref != 'release-0.17' }} if: ${{ github.base_ref != 'devel' }}
run: exit 1 run: exit 1
+3 -3
View File
@@ -26,14 +26,14 @@ jobs:
- k8s_version: '1.26' - k8s_version: '1.26'
steps: steps:
- name: Check out the repository - name: Check out the repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
- name: Run E2E deployment and tests - name: Run E2E deployment and tests
uses: submariner-io/shipyard/gh-actions/e2e@release-0.17 uses: submariner-io/shipyard/gh-actions/e2e@devel
with: with:
k8s_version: ${{ matrix.k8s_version }} k8s_version: ${{ matrix.k8s_version }}
using: ${{ matrix.cable_driver }} ${{ matrix.globalnet }} ${{ matrix.lighthouse }} using: ${{ matrix.cable_driver }} ${{ matrix.globalnet }} ${{ matrix.lighthouse }}
- name: Post mortem - name: Post mortem
if: failure() if: failure()
uses: submariner-io/shipyard/gh-actions/post-mortem@release-0.17 uses: submariner-io/shipyard/gh-actions/post-mortem@devel
+3 -3
View File
@@ -13,11 +13,11 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check out the repository - name: Check out the repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
- name: Run E2E deployment and tests - name: Run E2E deployment and tests
uses: submariner-io/shipyard/gh-actions/e2e@release-0.17 uses: submariner-io/shipyard/gh-actions/e2e@devel
- name: Post mortem - name: Post mortem
if: failure() if: failure()
uses: submariner-io/shipyard/gh-actions/post-mortem@release-0.17 uses: submariner-io/shipyard/gh-actions/post-mortem@devel
+3 -3
View File
@@ -21,13 +21,13 @@ jobs:
lighthouse: ['', 'lighthouse'] lighthouse: ['', 'lighthouse']
steps: steps:
- name: Check out the repository - name: Check out the repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
- name: Run E2E deployment and tests - name: Run E2E deployment and tests
uses: submariner-io/shipyard/gh-actions/e2e@release-0.17 uses: submariner-io/shipyard/gh-actions/e2e@devel
with: with:
using: ${{ matrix.cable_driver }} ${{ matrix.globalnet }} ${{ matrix.lighthouse }} using: ${{ matrix.cable_driver }} ${{ matrix.globalnet }} ${{ matrix.lighthouse }}
- name: Post mortem - name: Post mortem
if: failure() if: failure()
uses: submariner-io/shipyard/gh-actions/post-mortem@release-0.17 uses: submariner-io/shipyard/gh-actions/post-mortem@devel
+7 -7
View File
@@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check out the repository - name: Check out the repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
- name: Set up Helm - name: Set up Helm
uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814
@@ -46,7 +46,7 @@ jobs:
version: v3.6.0 version: v3.6.0
- name: Set up Python - name: Set up Python
uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d
with: with:
python-version: '3.x' python-version: '3.x'
@@ -64,7 +64,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check out the repository - name: Check out the repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Run gitlint - name: Run gitlint
@@ -75,7 +75,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check out the repository - name: Check out the repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
- name: Run helm-docs and verify docs are up-to-date - name: Run helm-docs and verify docs are up-to-date
run: make helm-docs run: make helm-docs
@@ -85,7 +85,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check out the repository - name: Check out the repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
- name: Run markdown-link-check - name: Run markdown-link-check
uses: gaurav-nelson/github-action-markdown-link-check@d53a906aa6b22b8979d33bc86170567e619495ec uses: gaurav-nelson/github-action-markdown-link-check@d53a906aa6b22b8979d33bc86170567e619495ec
@@ -99,7 +99,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check out the repository - name: Check out the repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
- name: Run markdownlint - name: Run markdownlint
run: make markdownlint run: make markdownlint
@@ -108,6 +108,6 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check out the repository - name: Check out the repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
- name: Run yamllint - name: Run yamllint
run: make yamllint run: make yamllint
+2 -2
View File
@@ -16,7 +16,7 @@ jobs:
issues: write issues: write
steps: steps:
- name: Check out the repository - name: Check out the repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
- name: Run markdown-link-check - name: Run markdown-link-check
uses: gaurav-nelson/github-action-markdown-link-check@d53a906aa6b22b8979d33bc86170567e619495ec uses: gaurav-nelson/github-action-markdown-link-check@d53a906aa6b22b8979d33bc86170567e619495ec
@@ -25,7 +25,7 @@ jobs:
- name: Raise an Issue to report broken links - name: Raise an Issue to report broken links
if: ${{ failure() }} if: ${{ failure() }}
uses: peter-evans/create-issue-from-file@e8ef132d6df98ed982188e460ebb3b5d4ef3a9cd uses: peter-evans/create-issue-from-file@24452a72d85239eacf1468b0f1982a9f3fec4c94
with: with:
title: Broken link detected by CI title: Broken link detected by CI
content-filepath: .github/ISSUE_TEMPLATE/broken-link.md content-filepath: .github/ISSUE_TEMPLATE/broken-link.md
+2 -2
View File
@@ -4,7 +4,7 @@ name: Release Charts
on: on:
push: push:
branches: branches:
- release-0.17 - devel
permissions: permissions:
contents: write contents: write
@@ -16,7 +16,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
with: with:
fetch-depth: 0 fetch-depth: 0
+1 -1
View File
@@ -16,7 +16,7 @@ jobs:
issues: write issues: write
pull-requests: write pull-requests: write
steps: steps:
- uses: actions/stale@f69122271d990fd11f5594ccff2296f00ff59b49 - uses: actions/stale@3f3b0175e8c66fb49b9a6d5a0cd1f8436d4c3ab6
with: with:
days-before-issue-stale: 120 days-before-issue-stale: 120
days-before-pr-stale: 14 days-before-pr-stale: 14
+2 -2
View File
@@ -1,4 +1,4 @@
BASE_BRANCH ?= release-0.17 BASE_BRANCH ?= devel
export BASE_BRANCH export BASE_BRANCH
export HELM_REPO_LOCATION=./helm_repo export HELM_REPO_LOCATION=./helm_repo
@@ -17,7 +17,7 @@ endif
export DEPLOYTOOL = helm export DEPLOYTOOL = helm
GH_URL=https://submariner-io.github.io/submariner-charts/charts GH_URL=https://submariner-io.github.io/submariner-charts/charts
CHARTS_DIR=charts CHARTS_DIR=charts
CHARTS_VERSION=0.17.4 CHARTS_VERSION=0.19.0-m1
HELM_DOCS_VERSION=0.15.0 HELM_DOCS_VERSION=0.15.0
REPO_URL=$(shell git config remote.origin.url) REPO_URL=$(shell git config remote.origin.url)
+9 -20
View File
@@ -18,16 +18,6 @@ rules:
- get - get
- create - create
- update - update
- apiGroups:
- ""
resources:
# For syncing Secrets from the broker
- secrets
verbs:
- get
- create
- update
- delete
- apiGroups: - apiGroups:
- "" - ""
resources: resources:
@@ -236,6 +226,15 @@ metadata:
chart: {{ template "submariner.chart" . }} chart: {{ template "submariner.chart" . }}
app: {{ template "submariner.name" . }} app: {{ template "submariner.name" . }}
rules: rules:
- apiGroups:
- submariner.io
resources:
- gateways
verbs:
- get
- list
- watch
- update
- apiGroups: - apiGroups:
- coordination.k8s.io - coordination.k8s.io
resources: resources:
@@ -478,7 +477,6 @@ rules:
- get - get
- list - list
- watch - watch
- update
- apiGroups: - apiGroups:
- projectcalico.org - projectcalico.org
resources: resources:
@@ -519,15 +517,6 @@ metadata:
chart: {{ template "submariner.chart" . }} chart: {{ template "submariner.chart" . }}
app: {{ template "submariner.name" . }} app: {{ template "submariner.name" . }}
rules: rules:
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- list
- watch
- update
- apiGroups: - apiGroups:
- "" - ""
resources: resources: