Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package polaris for openSUSE:Factory checked in at 2022-02-26 17:02:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/polaris (Old) and /work/SRC/openSUSE:Factory/.polaris.new.1958 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "polaris" Sat Feb 26 17:02:24 2022 rev:2 rq:957775 version:5.0.1 Changes: -------- --- /work/SRC/openSUSE:Factory/polaris/polaris.changes 2022-01-26 21:28:17.097454411 +0100 +++ /work/SRC/openSUSE:Factory/.polaris.new.1958/polaris.changes 2022-02-26 17:03:01.475544875 +0100 @@ -1,0 +2,9 @@ +Wed Feb 23 09:01:22 UTC 2022 - ka...@b1-systems.de + +- Update to version 5.0.1: + * CI/CD Updates - get publish secrets from vault. Update goreleaser. Sign checksums. Enable experimental docker features to move towards multi-arch support (#710) + * Update documentation from template (#702) + * Update goreleaser to v1.1.0 (#700) + * Benchmark banner image (#696) + +------------------------------------------------------------------- Old: ---- polaris-5.0.0.tar.gz New: ---- polaris-5.0.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ polaris.spec ++++++ --- /var/tmp/diff_new_pack.IAqJp6/_old 2022-02-26 17:03:02.127544979 +0100 +++ /var/tmp/diff_new_pack.IAqJp6/_new 2022-02-26 17:03:02.131544980 +0100 @@ -1,7 +1,7 @@ # # spec file for package polaris # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: polaris -Version: 5.0.0 +Version: 5.0.1 Release: 0 Summary: Validation of best practices in your Kubernetes clusters License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.IAqJp6/_old 2022-02-26 17:03:02.171544986 +0100 +++ /var/tmp/diff_new_pack.IAqJp6/_new 2022-02-26 17:03:02.171544986 +0100 @@ -3,9 +3,10 @@ <param name="url">https://github.com/FairwindsOps/polaris</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">5.0.0</param> + <param name="revision">v5.0.1</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> + <param name="versionrewrite-pattern">v(.*)</param> </service> <service name="set_version" mode="disabled"> <param name="basename">polaris</param> @@ -15,7 +16,7 @@ <param name="compression">gz</param> </service> <service name="go_modules" mode="disabled"> - <param name="archive">polaris-5.0.0.tar.gz</param> + <param name="archive">polaris-5.0.1.tar.gz</param> </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.IAqJp6/_old 2022-02-26 17:03:02.191544989 +0100 +++ /var/tmp/diff_new_pack.IAqJp6/_new 2022-02-26 17:03:02.195544990 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/FairwindsOps/polaris</param> - <param name="changesrevision">e91b9b8824daa4f39a20256edb2bb63858e5acf0</param></service></servicedata> + <param name="changesrevision">986d47b5ddfb670e894e5fe066105084473f580b</param></service></servicedata> (No newline at EOF) ++++++ polaris-5.0.0.tar.gz -> polaris-5.0.1.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polaris-5.0.0/.circleci/config.yml new/polaris-5.0.1/.circleci/config.yml --- old/polaris-5.0.0/.circleci/config.yml 2022-01-20 15:08:39.000000000 +0100 +++ new/polaris-5.0.1/.circleci/config.yml 2022-02-23 00:14:10.000000000 +0100 @@ -1,5 +1,8 @@ version: 2.1 +orbs: + rok8s: fairwinds/rok8s-scripts@11 + executors: vm: machine: @@ -82,16 +85,6 @@ echo "Skipping Kubernetes tests for forked PR" fi - # Release scripts - install_goreleaser: &install_goreleaser - run: - name: Install GoReleaser - command: | - curl -fsSLo goreleaser.deb https://github.com/goreleaser/goreleaser/releases/download/v0.174.2/goreleaser_amd64.deb - echo "bad33997ea9977a84196bdca1d5993fada909cd81c3e88d52bd297666bea61a4 goreleaser.deb" | sha256sum -c - - sudo dpkg -i goreleaser.deb - rm goreleaser.deb - docker_build: &docker_build run: name: Docker login and build @@ -117,6 +110,26 @@ curl -X POST "$upload_url?name=dashboard.yaml" --data-binary "@./deploy/dashboard.yaml" -H "Authorization: Bearer $GITHUB_TOKEN" -H "Content-Type: application/x-yaml" curl -X POST "$upload_url?name=webhook.yaml" --data-binary "@./deploy/webhook.yaml" -H "Authorization: Bearer $GITHUB_TOKEN" -H "Content-Type: application/x-yaml" + enable_experimental_features: &enable_experimental_docker_features + run: + name: enable experimental features + command: | + set -ex + apk --update add openssh + ssh remote-docker \<<EOF + sudo bash -c 'echo "{\"experimental\": true}" > /etc/docker/daemon.json' + sudo systemctl restart docker + EOF + install_vault_alpine: &install_vault_alpine + run: + name: install hashicorp vault + command: | + apk --update add curl yq + cd /tmp + curl -LO https://releases.hashicorp.com/vault/1.9.3/vault_1.9.3_linux_amd64.zip + unzip vault_1.9.3_linux_amd64.zip + mv vault /usr/bin/vault + jobs: build: docker: @@ -176,16 +189,25 @@ release_binary: working_directory: /go/src/github.com/fairwindsops/polaris/ + resource_class: large + shell: /bin/bash docker: - - image: circleci/golang:1.16 + - image: goreleaser/goreleaser:v1.3.0 steps: - checkout - - setup_remote_docker + - setup_remote_docker: + version: 20.10.6 + - *enable_experimental_docker_features + - *install_vault_alpine + - rok8s/get_vault_env: + vault_path: repo/global/env + - rok8s/get_vault_env: + vault_path: repo/polaris/env - *set_environment_variables - - *install_goreleaser - run: go get -u github.com/gobuffalo/packr/v2/packr2 - run: git checkout -- . # FIXME: the go get makes the directory dirty - run: packr2 + - run: echo 'export GORELEASER_CURRENT_TAG="${CIRCLE_TAG}"' >> $BASH_ENV - run: goreleaser - *release_deploy_configs @@ -198,7 +220,6 @@ - setup_remote_docker - *set_environment_variables - *docker_build_and_push - publish_docs: docker: - image: cimg/node:15.5.1 @@ -213,17 +234,34 @@ npm run check-links npm run build - run: - name: Install AWS CLI + name: Install Tools command: | + cd /tmp + echo "Installing AWS CLI" curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip" unzip awscliv2.zip sudo ./aws/install + + echo "Installing Hashicorp Vault" + curl -LO https://releases.hashicorp.com/vault/1.9.3/vault_1.9.3_linux_amd64.zip + unzip vault_1.9.3_linux_amd64.zip + sudo mv vault /usr/bin/vault + sudo chmod +x /usr/bin/vault + vault --version + + echo "Installing yq" + curl -LO https://github.com/mikefarah/yq/releases/download/v4.16.2/yq_linux_amd64.tar.gz + tar -zxvf yq_linux_amd64.tar.gz + sudo mv yq_linux_amd64 /usr/bin/yq + sudo chmod +x /usr/bin/yq + yq --version + - rok8s/get_vault_env: + vault_path: repo/polaris/env - run: name: Publish Docs Site to S3 command: | cd ./dist aws s3 sync ./ s3://polaris.docs.fairwinds.com --delete - workflows: version: 2 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polaris-5.0.0/.github/dependabot.yml new/polaris-5.0.1/.github/dependabot.yml --- old/polaris-5.0.0/.github/dependabot.yml 2022-01-20 15:08:39.000000000 +0100 +++ new/polaris-5.0.1/.github/dependabot.yml 2022-02-23 00:14:10.000000000 +0100 @@ -1,44 +1,24 @@ version: 2 updates: -- package-ecosystem: gomod - directory: "/" - schedule: - interval: weekly - time: "11:00" - ignore: - - dependency-name: cloud.google.com/go - versions: - - ">= 0.57.a, < 0.58" - - dependency-name: github.com/go-logr/logr - versions: - - ">= 0.2.a, < 0.3" - - dependency-name: github.com/go-logr/zapr - versions: - - ">= 0.2.a, < 0.3" - - dependency-name: github.com/googleapis/gnostic - versions: - - ">= 0.4.a, < 0.5" - - dependency-name: github.com/googleapis/gnostic - versions: - - ">= 0.5.a, < 0.6" - - dependency-name: github.com/qri-io/jsonschema - versions: - - ">= 0.2.a, < 0.3" - - dependency-name: k8s.io/api - versions: - - ">= 0.19.a, < 0.20" - - dependency-name: k8s.io/apimachinery - versions: - - ">= 0.19.a, < 0.20" - - dependency-name: k8s.io/client-go - versions: - - ">= 0.19.a, < 0.20" - - dependency-name: sigs.k8s.io/controller-runtime - versions: - - ">= 0.5.a, < 0.6" - - dependency-name: sigs.k8s.io/controller-runtime - versions: - - ">= 0.8.a, < 0.9" - - dependency-name: k8s.io/apimachinery - versions: - - 0.20.4 + - package-ecosystem: "docker" + directory: "/" + schedule: + interval: "weekly" + + - package-ecosystem: "npm" + directory: "/docs" + schedule: + interval: "weekly" + open-pull-requests-limit: 0 + ignore: + - dependency-name: "*" + + - package-ecosystem: "gomod" + directory: "/" + schedule: + interval: "weekly" + + - package-ecosystem: "pip" + directory: "/" + schedule: + interval: "weekly" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polaris-5.0.0/.github/pull_request_template.md new/polaris-5.0.1/.github/pull_request_template.md --- old/polaris-5.0.0/.github/pull_request_template.md 2022-01-20 15:08:39.000000000 +0100 +++ new/polaris-5.0.1/.github/pull_request_template.md 2022-02-23 00:14:10.000000000 +0100 @@ -1,4 +1,4 @@ -This PR fixes issue # +This PR fixes # ## Checklist * [ ] I have signed the CLA diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polaris-5.0.0/.goreleaser.yml new/polaris-5.0.1/.goreleaser.yml --- old/polaris-5.0.0/.goreleaser.yml 2022-01-20 15:08:39.000000000 +0100 +++ new/polaris-5.0.1/.goreleaser.yml 2022-02-23 00:14:10.000000000 +0100 @@ -26,6 +26,18 @@ - id: polaris builds: ["polaris"] name_template: "{{ .ProjectName }}_{{ .Os }}_{{ .Arch }}{{ if .Arm }}v{{ .Arm }}{{ end }}{{ if .Mips }}_{{ .Mips }}{{ end }}" +signs: +- cmd: cosign + args: ["sign-blob", "--key=hashivault://cosign", "-output-signature=${signature}", "${artifact}"] + artifacts: checksum +release: + prerelease: auto + footer: | + You can verify the signature of the checksums.txt file using [cosign](https://github.com/sigstore/cosign). + + ``` + cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub + ``` brews: - name: polaris tap: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polaris-5.0.0/docs/package-lock.json new/polaris-5.0.1/docs/package-lock.json --- old/polaris-5.0.0/docs/package-lock.json 2022-01-20 15:08:39.000000000 +0100 +++ new/polaris-5.0.1/docs/package-lock.json 2022-02-23 00:14:10.000000000 +0100 @@ -6141,9 +6141,9 @@ } }, "node_modules/follow-redirects": { - "version": "1.14.4", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.4.tgz", - "integrity": "sha512-zwGkiSXC1MUJG/qmeIFH2HBJx9u0V46QGUe3YR1fXG8bXQxq7fLj0RjLZQ5nubr9qNJUZrH+xUcwXEoXNpfS+g==", + "version": "1.14.8", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.8.tgz", + "integrity": "sha512-1x0S9UVJHsQprFcEC/qnNzBLcIxsjAV905f/UkQxbclCsoTWlacCNOpQa/anodLl2uaEKFhfWOvM2Qg77+15zA==", "dev": true, "funding": [ { @@ -15341,6 +15341,7 @@ "integrity": "sha512-pM7CR3yXB6L8Gfn6EmX7FLNE3+V/15I3o33GkSNsWvgsMp6HVGXKkXgojrcfUUauyL1LZOdvTmu4enU2RePGHw==", "dev": true, "requires": { + "@babel/core": "^7.11.0", "@babel/helper-compilation-targets": "^7.9.6", "@babel/helper-module-imports": "^7.8.3", "@babel/plugin-proposal-class-properties": "^7.8.3", @@ -15353,6 +15354,7 @@ "@vue/babel-plugin-jsx": "^1.0.3", "@vue/babel-preset-jsx": "^1.2.4", "babel-plugin-dynamic-import-node": "^2.3.3", + "core-js": "^3.6.5", "core-js-compat": "^3.6.5", "semver": "^6.1.0" } @@ -18971,9 +18973,9 @@ } }, "follow-redirects": { - "version": "1.14.4", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.4.tgz", - "integrity": "sha512-zwGkiSXC1MUJG/qmeIFH2HBJx9u0V46QGUe3YR1fXG8bXQxq7fLj0RjLZQ5nubr9qNJUZrH+xUcwXEoXNpfS+g==", + "version": "1.14.8", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.8.tgz", + "integrity": "sha512-1x0S9UVJHsQprFcEC/qnNzBLcIxsjAV905f/UkQxbclCsoTWlacCNOpQa/anodLl2uaEKFhfWOvM2Qg77+15zA==", "dev": true }, "for-in": { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polaris-5.0.0/docs/package.json new/polaris-5.0.1/docs/package.json --- old/polaris-5.0.0/docs/package.json 2022-01-20 15:08:39.000000000 +0100 +++ new/polaris-5.0.1/docs/package.json 2022-02-23 00:14:10.000000000 +0100 @@ -26,7 +26,8 @@ "scripts": { "build": "npm run build:readme && npm run build:docs", "build:docs": "vuepress build -d ../dist/", - "build:readme": "cat ../README.md | grep -v 'ocumentation' | sed \"s/https:\\/\\/\\w\\+.docs.fairwinds.com//g\" > README.md", + "build:metadata": "cat main-metadata.md > README.md || true", + "build:readme": "npm run build:metadata && cat ../README.md | grep -v 'ocumentation' | sed \"s/https:\\/\\/\\w\\+.docs.fairwinds.com//g\" >> README.md", "check-links": "vuepress check-md", "serve": "npm run build:readme && vuepress dev --port 3003", "vuepress": "vuepress" Binary files old/polaris-5.0.0/pkg/dashboard/assets/images/FW_Insights_Polaris.svg and new/polaris-5.0.1/pkg/dashboard/assets/images/FW_Insights_Polaris.svg differ Binary files old/polaris-5.0.0/pkg/dashboard/assets/images/benchmark.png and new/polaris-5.0.1/pkg/dashboard/assets/images/benchmark.png differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polaris-5.0.0/pkg/dashboard/templates/dashboard.gohtml new/polaris-5.0.1/pkg/dashboard/templates/dashboard.gohtml --- old/polaris-5.0.0/pkg/dashboard/templates/dashboard.gohtml 2022-01-20 15:08:39.000000000 +0100 +++ new/polaris-5.0.1/pkg/dashboard/templates/dashboard.gohtml 2022-02-23 00:14:10.000000000 +0100 @@ -87,7 +87,7 @@ <a class="align-self-center" target="_blank" href="https://www.fairwinds.com/polaris-user-insights-demo?utm_source=polaris&utm_medium=ad&utm_campaign=polarisad"> - <img src="static/images/FW_Insights_Polaris.svg" /> + <img src="static/images/benchmark.png" /> </a> </div> ++++++ vendor.tar.gz ++++++