This repository has been archived by the owner on Jul 19, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
13 changed files
with
393 additions
and
31 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,3 @@ | ||
| .git | ||
| Dockerfile | ||
| README.md |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,64 @@ | ||
| name: "Build and Release" | ||
|
|
||
| on: | ||
| push: | ||
| branches: | ||
| - master | ||
| pull_request: | ||
| branches: | ||
| - master | ||
|
|
||
| jobs: | ||
| lint: | ||
| name: lint | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v2 | ||
| - name: golangci-lint | ||
| uses: golangci/golangci-lint-action@v2 | ||
| with: | ||
| version: latest | ||
|
|
||
| build: | ||
| needs: lint | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v2 | ||
|
|
||
| - name: Cache Docker layers | ||
| uses: actions/cache@v2 | ||
| with: | ||
| path: /tmp/.buildx-cache | ||
| key: ${{ runner.os }}-buildx | ||
| restore-keys: | | ||
| ${{ runner.os }}-buildx | ||
| - name: Set up QEMU | ||
| uses: docker/setup-qemu-action@v1 | ||
|
|
||
| - name: Set up Docker Buildx | ||
| id: buildx | ||
| uses: docker/setup-buildx-action@v1 | ||
|
|
||
| - name: Build and push | ||
| uses: docker/build-push-action@v2 | ||
| with: | ||
| context: . | ||
| platforms: linux/amd64,linux/arm64 | ||
| push: false | ||
| tags: test | ||
|
|
||
| kube: | ||
| name: kustomize-validation | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v2 | ||
| - name: Validate Helm chart | ||
| uses: stefanprodan/kube-tools@v1 | ||
| with: | ||
| kubectl: 1.19.11 | ||
| helm: 2.17.0 | ||
| helmv3: 3.6.0 | ||
| command: | | ||
| kustomize build ./kustomize | kubeval --strict --kubernetes-version 1.23.5 --schema-location https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master | ||
| # Looted from https://github.com/stefanprodan/podinfo/blob/master/.github/workflows/test.yml | ||
| # kustomize build ./kustomize | conftest test -p .github/polic... |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,46 @@ | ||
| name: "Build and Release" | ||
|
|
||
| on: | ||
| push: | ||
| tags: | ||
| - "*.*.*" | ||
|
|
||
| jobs: | ||
| release: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v2 | ||
|
|
||
| - name: Cache Docker layers | ||
| uses: actions/cache@v2 | ||
| with: | ||
| path: /tmp/.buildx-cache | ||
| key: ${{ runner.os }}-buildx | ||
| restore-keys: | | ||
| ${{ runner.os }}-buildx | ||
| - name: Get the version | ||
| id: get_version | ||
| run: echo ::set-output name=version::${GITHUB_REF/refs\/tags\//} | ||
|
|
||
| - name: Set up QEMU | ||
| uses: docker/setup-qemu-action@v1 | ||
|
|
||
| - name: Set up Docker Buildx | ||
| id: buildx | ||
| uses: docker/setup-buildx-action@v1 | ||
|
|
||
| - name: Log in to the Container registry | ||
| uses: docker/login-action@v1 | ||
| with: | ||
| registry: ghcr.io | ||
| username: ${{ github.actor }} | ||
| password: ${{ secrets.GITHUB_TOKEN }} | ||
|
|
||
| - name: Build and push | ||
| uses: docker/build-push-action@v2 | ||
| with: | ||
| context: . | ||
| platforms: linux/amd64,linux/arm64 | ||
| push: true | ||
| tags: ghcr.io/binkhq/kube-crb-manager:${{ steps.get_version.outputs.version }} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,178 @@ | ||
| run: | ||
| timeout: 2m | ||
| # skip-dirs: | ||
| # - testdir | ||
|
|
||
| # skip-files: | ||
| # - test.go | ||
|
|
||
| output: | ||
| # colored-line-number|line-number|json|tab|checkstyle|code-climate|junit-xml|github-actions | ||
| format: colored-line-number | ||
| sort-results: true | ||
|
|
||
|
|
||
| linters-settings: | ||
|
|
||
| cyclop: | ||
| # the maximal code complexity to report | ||
| max-complexity: 30 | ||
| # the maximal average package complexity. If it's higher than 0.0 (float) the check is enabled (default 0.0) | ||
| package-average: 0.0 | ||
| # should ignore tests (default false) | ||
| skip-tests: false | ||
|
|
||
| dogsled: | ||
| # checks assignments with too many blank identifiers; default is 2 | ||
| max-blank-identifiers: 2 | ||
|
|
||
| errorlint: | ||
| errorf: true | ||
| asserts: true | ||
| comparison: true | ||
|
|
||
| gocognit: | ||
| # minimal code complexity to report, 30 by default (but we recommend 10-20) | ||
| min-complexity: 20 | ||
|
|
||
| goconst: | ||
| # minimal length of string constant, 3 by default | ||
| min-len: 3 | ||
| # minimum occurrences of constant string count to trigger issue, 3 by default | ||
| min-occurrences: 3 | ||
| # ignore test files, false by default | ||
| ignore-tests: true | ||
| # look for existing constants matching the values, true by default | ||
| match-constant: true | ||
| # search also for duplicated numbers, false by default | ||
| numbers: false | ||
| # minimum value, only works with goconst.numbers, 3 by default | ||
| min: 3 | ||
| # maximum value, only works with goconst.numbers, 3 by default | ||
| max: 3 | ||
| # ignore when constant is not used as function argument, true by default | ||
| ignore-calls: true | ||
|
|
||
| gocyclo: | ||
| # minimal code complexity to report, 30 by default (but we recommend 10-20) | ||
| min-complexity: 20 | ||
|
|
||
| godot: | ||
| # comments to be checked: `declarations`, `toplevel`, or `all` | ||
| scope: declarations | ||
| # check that each sentence starts with a capital letter | ||
| capital: true | ||
|
|
||
| godox: | ||
| # report any comments starting with keywords, this is useful for TODO or FIXME comments that | ||
| # might be left in the code accidentally and should be resolved before merging | ||
| keywords: # default keywords are TODO, BUG, and FIXME, these can be overwritten by this setting | ||
| - NOTE | ||
| #- TODO | ||
| - FIXME | ||
| - OPTIMIZE | ||
| - HACK | ||
|
|
||
| gofmt: | ||
| # simplify code: gofmt with `-s` option, true by default | ||
| simplify: true | ||
|
|
||
| gofumpt: | ||
| # Select the Go version to target. The default is `1.15`. | ||
| lang-version: "1.16" | ||
|
|
||
| golint: | ||
| # minimal confidence for issues, default is 0.8 | ||
| min-confidence: 0.8 | ||
|
|
||
| gosec: | ||
| # To select a subset of rules to run. | ||
| # Available rules: https://github.com/securego/gosec#available-rules | ||
| # includes: | ||
| # - G401 | ||
| # - G306 | ||
| # - G101 | ||
| # # To specify a set of rules to explicitly exclude. | ||
| # # Available rules: https://github.com/securego/gosec#available-rules | ||
| # excludes: | ||
| # - G204 | ||
| # To specify the configuration of rules. | ||
| # The configuration of rules is not fully documented by gosec: | ||
| # https://github.com/securego/gosec#configuration | ||
| # https://github.com/securego/gosec/blob/569328eade2ccbad4ce2d0f21ee158ab5356a5cf/rules/rulelist.go#L60-L102 | ||
| config: | ||
| G306: "0600" | ||
| G101: | ||
| pattern: "(?i)example" | ||
| ignore_entropy: false | ||
| entropy_threshold: "80.0" | ||
| per_char_threshold: "3.0" | ||
| truncate: "32" | ||
|
|
||
| maligned: | ||
| # print struct with more effective memory layout or not, false by default | ||
| suggest-new: true | ||
|
|
||
| misspell: | ||
| # Correct spellings using locale preferences for US or UK. | ||
| # Default is to use a neutral variety of English. | ||
| # Setting locale to US will correct the British spelling of 'colour' to 'color'. | ||
| locale: UK | ||
| ignore-words: | ||
| - someword | ||
|
|
||
| # prealloc: | ||
| # # XXX: we don't recommend using this linter before doing performance profiling. | ||
| # # For most programs usage of prealloc will be a premature optimization. | ||
| # | ||
| # # Report preallocation suggestions only on simple loops that have no returns/breaks/continues/gotos in them. | ||
| # # True by default. | ||
| # simple: true | ||
| # range-loops: true # Report preallocation suggestions on range loops, true by default | ||
| # for-loops: false # Report preallocation suggestions on for loops, false by default | ||
|
|
||
| unused: | ||
| # Select the Go version to target. The default is '1.13'. | ||
| go: "1.16" | ||
|
|
||
| # whitespace: | ||
| # multi-if: false # Enforces newlines (or comments) after every multi-line if statement | ||
| # multi-func: false # Enforces newlines (or comments) after every multi-line function signature | ||
|
|
||
| govet: | ||
| # report about shadowed variables | ||
| check-shadowing: true | ||
|
|
||
| linters: | ||
| enable: | ||
| - megacheck | ||
| - errcheck | ||
| - gosimple | ||
| - govet | ||
| - ineffassign | ||
| - staticcheck | ||
| - typecheck | ||
| - unused | ||
| - dogsled | ||
| - cyclop | ||
| - durationcheck | ||
| - errname | ||
| - goconst | ||
| - gocritic | ||
| - godot | ||
| - godox | ||
| - gofumpt | ||
| - gosec | ||
| - ifshort | ||
| - misspell | ||
| - predeclared | ||
| - revive | ||
| - unconvert | ||
|
|
||
| disable: | ||
| - prealloc | ||
| - scopelint | ||
| presets: | ||
| - bugs | ||
| - unused | ||
| fast: false |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,15 +1,19 @@ | ||
| FROM golang:alpine AS build | ||
| FROM --platform=$BUILDPLATFORM golang:1.18-alpine3.15 AS build | ||
|
|
||
| RUN apk update && apk add --no-cache git ca-certificates && update-ca-certificates | ||
| RUN apk update && apk add --no-cache git ca-certificates && \ | ||
| update-ca-certificates | ||
|
|
||
| WORKDIR /go/src/git.bink.com/tools/blobfileexporter | ||
| WORKDIR /go/src/github.com/binkhq/kube-crb-manager | ||
| COPY . . | ||
|
|
||
| RUN go mod download | ||
| RUN go mod verify | ||
| RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-w -s" -o /a . | ||
|
|
||
| ARG TARGETOS | ||
| ARG TARGETARCH | ||
| RUN GOOS=$TARGETOS GOARCH=$TARGETARCH CGO_ENABLED=0 go build -ldflags="-w -s" -o /kube-crb-manager . | ||
|
|
||
| FROM scratch | ||
| COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ | ||
| COPY --from=build /a /a | ||
| ENTRYPOINT ["/a"] | ||
| COPY --from=build /kube-crb-manager /kube-crb-manager | ||
| ENTRYPOINT ["/kube-crb-manager"] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,4 @@ | ||
| module git.bink.com/tools/kube-crb-manager | ||
| module github.com/binkhq/kube-crb-manager | ||
|
|
||
| go 1.14 | ||
|
|
||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| --- | ||
| apiVersion: apps/v1 | ||
| kind: Deployment | ||
| metadata: | ||
| name: kube-crb-manager | ||
| namespace: kube-system | ||
| labels: | ||
| app: kube-crb-manager | ||
| spec: | ||
| replicas: 1 | ||
| strategy: | ||
| type: Recreate | ||
| selector: | ||
| matchLabels: | ||
| app: kube-crb-manager | ||
| template: | ||
| metadata: | ||
| labels: | ||
| app: kube-crb-manager | ||
| spec: | ||
| serviceAccountName: kube-crb-manager | ||
| containers: | ||
| - name: kube-crb-manager | ||
| image: ghcr.io/binkhq/kube-crb-manager:0.1.0 | ||
| env: | ||
| - name: AZURE_CLIENT_ID | ||
| value: REPLACE_ME | ||
| - name: AZURE_CLIENT_SECRET | ||
| value: REPLACE_ME | ||
| - name: AZURE_AD_GROUP_ID | ||
| value: REPLACE_ME | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,5 @@ | ||
| resources: | ||
| - deployment.yaml | ||
| - role.yaml | ||
| - role-binding.yaml | ||
| - service-account.yaml |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,13 @@ | ||
| apiVersion: rbac.authorization.k8s.io/v1 | ||
| kind: RoleBinding | ||
| metadata: | ||
| name: kube-crb-manager | ||
| namespace: kube-system | ||
| roleRef: | ||
| apiGroup: rbac.authorization.k8s.io | ||
| kind: Role | ||
| name: kube-crb-manager | ||
| subjects: | ||
| - kind: ServiceAccount | ||
| name: kube-crb-manager | ||
| namespace: kube-system |
Oops, something went wrong.