Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

test #362

Open
wants to merge 157 commits into
base: master
Choose a base branch
from
Open

test #362

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
157 commits
Select commit Hold shift + click to select a range
e16efb1
Create SECURITY.md
tphee Oct 14, 2020
4d42df9
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Nov 30, 2020
4f40ff5
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 2, 2020
c035285
Create SECURITY.md
tphee Oct 14, 2020
be97950
Merge branch 'master' of github.com:open-cluster-management/integrity…
Dec 2, 2020
d3ec16b
Replace go package path
Dec 2, 2020
82dbbb4
Merge pull request #4 from open-cluster-management/fix/go-mod
yuji-watanabe-jp Dec 2, 2020
67b0e65
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 3, 2020
2f43ec0
Create SECURITY.md
tphee Oct 14, 2020
0144973
Merge branch 'master' of github.com:open-cluster-management/integrity…
Dec 4, 2020
bb93079
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 4, 2020
60b54ab
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 7, 2020
765e654
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 7, 2020
73da11e
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 7, 2020
7035912
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 8, 2020
f6815cf
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 8, 2020
1ecc2fb
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 8, 2020
93dd568
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 8, 2020
cf8132a
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 10, 2020
07143bf
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 10, 2020
1357d84
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 10, 2020
81caaca
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 11, 2020
ee9df19
temporary commit for sonar test
hirokuni-kitahara Dec 11, 2020
7680fdb
temporary commit for sonar test 2
hirokuni-kitahara Dec 11, 2020
85980fc
Revert "temporary commit for sonar test 2"
yuji-watanabe-jp Dec 11, 2020
27a2769
Revert "temporary commit for sonar test"
yuji-watanabe-jp Dec 11, 2020
ed90c0d
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 11, 2020
e591911
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 14, 2020
976f1ee
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 14, 2020
4566b4d
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 14, 2020
ba14540
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 14, 2020
2dd3264
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 14, 2020
23b7b0d
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 14, 2020
66f98ef
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 14, 2020
22285af
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 14, 2020
cd88309
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 14, 2020
2908ef4
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 14, 2020
2edbd09
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 14, 2020
42bbbfe
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 15, 2020
ac2d672
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Dec 15, 2020
67188b7
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 5, 2021
c622830
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 6, 2021
9b67168
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 8, 2021
e8de441
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 8, 2021
b2d5c4a
Update README_SETUP_KEY_RING_ACM_ENV.md
gparvin Jan 8, 2021
5dacef0
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 12, 2021
29a1b3a
Fixed the docment to update how to update a verification key
Jan 12, 2021
d32b75b
Merge pull request #7 from open-cluster-management/change-signing-key
yuji-watanabe-jp Jan 12, 2021
74563e3
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 12, 2021
c338ac0
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 12, 2021
deb2073
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 13, 2021
23f290b
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 15, 2021
3826229
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 19, 2021
577f0a2
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 20, 2021
82fc418
Squashed commit of the following:
yuji-watanabe-jp Jan 20, 2021
79bf3f4
Update signing script to remove syntax issue
gparvin Jan 20, 2021
020e973
Merge pull request #8 from open-cluster-management/fix-signing-script
yuji-watanabe-jp Jan 21, 2021
385bce0
Squashed commit of the following:
yuji-watanabe-jp Jan 21, 2021
c909c3e
Squashed commit of the following:
yuji-watanabe-jp Jan 22, 2021
d048c83
resolve conflict
yuji-watanabe-jp Jan 25, 2021
136dd21
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 26, 2021
b40342a
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 26, 2021
e3857ca
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Jan 27, 2021
cf0f7ba
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 2, 2021
a14a59e
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 2, 2021
5919681
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 3, 2021
fcaeaa6
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 8, 2021
0d4ff1b
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 9, 2021
b5b7b1a
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 9, 2021
0fa6eab
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 9, 2021
5aa6292
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 9, 2021
b2604b9
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 9, 2021
738c8d7
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 10, 2021
5de2c1b
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 12, 2021
26a2e0b
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 16, 2021
5228a01
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 25, 2021
651fbbb
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 25, 2021
863ae28
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 25, 2021
b4e7024
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 26, 2021
04ca60e
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 26, 2021
c89240c
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Feb 26, 2021
5010a66
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Mar 1, 2021
dbbb8e4
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Mar 2, 2021
ebd7076
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Mar 2, 2021
059ff00
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Mar 2, 2021
5a5f799
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Mar 5, 2021
f494cbe
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Mar 8, 2021
24802d7
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Mar 8, 2021
aed46d4
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Mar 10, 2021
5ecf044
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Mar 10, 2021
f426c70
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Mar 10, 2021
67a44f1
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Mar 11, 2021
909c8b8
Merge remote-tracking branch 'upstream/master'
yuji-watanabe-jp Mar 11, 2021
8df3c4e
add comment in readme to trigger rebuild for img vulns
willkutler Aug 19, 2021
041a258
Merge pull request #11 from open-cluster-management/img-vuln
willkutler Aug 19, 2021
b9b5760
update k8s dependencies to update protobuf version (#13)
hirokuni-kitahara Sep 21, 2021
5bc8b07
update Makefile to make it consistent with release-0.1.6
hirokuni-kitahara Sep 21, 2021
ad23f4e
fix for jwt-go package vulnerability
hirokuni-kitahara Sep 22, 2021
848169b
update go version in .travis.yml
hirokuni-kitahara Sep 22, 2021
7e9c168
upgrade to version 0.2.5 (#19)
rurikudo Oct 1, 2021
68c2edf
organize files for version 0.2.5 (#20)
rurikudo Oct 1, 2021
153dd52
resolve lint error (#21)
rurikudo Oct 1, 2021
79d8ac0
update install-dependencies.sh to fix travis error (#22)
hirokuni-kitahara Oct 1, 2021
3cb25e6
fix ENV and add kind cluster status check
rurikudo Oct 4, 2021
55dc808
Merge pull request #23 from open-cluster-management/fix/e2e-test-error
rurikudo Oct 4, 2021
afa14ff
fix e2e-test
rurikudo Oct 4, 2021
13d44d1
change version to 0.3.0
rurikudo Oct 4, 2021
3593beb
change base image to ubi-minimal:7.9
rurikudo Oct 5, 2021
ca62e07
Merge pull request #24 from open-cluster-management/fix/image-vuln
rurikudo Oct 5, 2021
3180162
replace github.com/IBM/integrity-shield with github.com/IBM/integrity…
rurikudo Oct 5, 2021
31e86cd
fix module name (#26)
rurikudo Oct 6, 2021
c8fa122
fix observer (#27)
rurikudo Oct 7, 2021
d8efb14
add github actions for PR & update OWNERS (#30)
hirokuni-kitahara Oct 12, 2021
36d64ea
fix Makefile for yq version 3 (used in travis) (#32)
hirokuni-kitahara Oct 12, 2021
e2dc25e
update sign/verify scripts and add signing document (#31)
hirokuni-kitahara Oct 12, 2021
be1726f
fix observer (#35)
rurikudo Oct 13, 2021
01deb59
Integrity Shield Operator Update to 0.3.0 in OperatorHub.io (#33)
Oct 13, 2021
f61a242
Update doc (#36)
rurikudo Oct 14, 2021
f66ab03
add `gh-pages` action for auto generation (#38)
hirokuni-kitahara Oct 14, 2021
496917b
Integrity Shield Operator Update to 0.3.0 in OperatorHub.io (#37)
Oct 14, 2021
ccd0729
fix constraint parameter (#39)
rurikudo Oct 15, 2021
ebbb76d
remove sensitive infomation (#40)
rurikudo Oct 18, 2021
e9aa161
prepare for moving to v0.3.1 (#42)
rurikudo Oct 22, 2021
9b1d692
update documents (#41)
rurikudo Oct 22, 2021
464ecc6
add a getting started document for acm policy using pgp key (#43)
rurikudo Oct 29, 2021
976eb11
fix timeout issue in constrainttemplate rego policy (#44)
hirokuni-kitahara Nov 15, 2021
d138067
enable decision logger (#45)
rurikudo Nov 17, 2021
9b29cac
support private registry (#47)
rurikudo Nov 19, 2021
f8c3749
enable https access (#48)
rurikudo Nov 22, 2021
3f772d4
fix build/sec_scan
rurikudo Nov 22, 2021
36d79d8
fix build/push script
rurikudo Nov 22, 2021
63e7676
support signatureResource (#49)
rurikudo Nov 26, 2021
a2e6860
update cosign and k8s-manifest-sigstore version (#50)
rurikudo Dec 1, 2021
0641a1b
fix go.mod (#51)
rurikudo Dec 2, 2021
bdcd442
update k8s-manifest-sigstore version (#52)
rurikudo Jan 21, 2022
11d7418
Organization rename to `stolostron` (#53)
dhaiducek Jan 21, 2022
6f34115
Fix/travis (#54)
rurikudo Jan 24, 2022
06b8b58
Prep for release-0.3.2 (#55)
rurikudo Jan 24, 2022
9edd4be
fix release 0.3.2 (#56)
rurikudo Jan 25, 2022
51f1794
bump operator-sdk to v1.15.0 (#57)
rurikudo Jan 25, 2022
d34e060
enable opm command on local lima env (#59)
rurikudo Jan 26, 2022
dc56ff2
enable admissionOnly (#60)
rurikudo Jan 27, 2022
c8b478a
add verifyResource library (#61)
rurikudo Mar 7, 2022
84866f3
fix user setting (#62)
rurikudo Mar 10, 2022
4bc097d
fix user setting (#63)
rurikudo Mar 10, 2022
9fef9ab
fix DryRun request handling (#64)
rurikudo Mar 14, 2022
1510863
bump up k8s-manifest-sigstore version (#66)
rurikudo Mar 16, 2022
f42cdcf
update e2e-test (#67)
rurikudo Mar 17, 2022
b22fe45
prep for release v0.3.3 (#68)
rurikudo Mar 18, 2022
c57ccb8
update k8s-manifest-sigstore version and enable CheckMutatingResource…
rurikudo Mar 23, 2022
3ee7311
fix bug in image verification with key (#70)
rurikudo Apr 27, 2022
51d8fe7
improve tmp dir handling (#71)
rurikudo Apr 27, 2022
c708c08
update k8s-manifest-sigstore version (#72)
rurikudo May 30, 2022
21e9d38
bump up dependent packages (#73)
rurikudo Jul 13, 2022
8a6b916
change go version of travis env to 1.18.x (#74)
rurikudo Jul 13, 2022
417423a
Fix vulnerable module (#75)
rurikudo Aug 10, 2022
70b66e7
upgrade packages (#76)
rurikudo Sep 20, 2022
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
18 changes: 18 additions & 0 deletions .github/workflows/gh-pages.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
name: GitHub Pages

on:
push:
branches:
- master # Set a branch name to trigger deployment

jobs:
gitbook:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2

- name: Run Gitbook Action # https://github.com/ZanderZhao/gitbook-action/releases
uses: ZanderZhao/[email protected] # -> or ZanderZhao/gitbook-action@master. If not use master click above, use latest please
with: # or fork this repo and use YourName/gitbook-action@master
token: ${{ secrets.GITHUB_TOKEN }} # -> remember add this in settings/secrets as following
source_dir: docs/
58 changes: 58 additions & 0 deletions .github/workflows/tests.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,58 @@
name: Lint and Tests

on: [pull_request]

jobs:

# Lint action
lint:
name: Lint
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/setup-go@v2
with:
go-version: '1.18.x'
- name: Run Lint
run: |
set -e
export ISHIELD_REPO_ROOT=$(pwd)
export ISHIELD_ENV="local"
export ISHIELD_TEST_ENV="local"
curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v1.42.1
make lint

# Unit Test action
unit-test:
name: Unit Test
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/setup-go@v2
with:
go-version: '1.18.x'
- name: Run Unit Test
run: |
set -e
export ISHIELD_REPO_ROOT=$(pwd)
export ISHIELD_ENV="local"
export ISHIELD_TEST_ENV="local"
make test-unit

# E2e Test action
e2e-test:
name: E2e Test
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/setup-go@v2
with:
go-version: '1.18.x'
- name: Run E2e Test
run: |
set -e
./build/install-dependencies.sh
export ISHIELD_REPO_ROOT=$(pwd)
export ISHIELD_ENV="local"
export ISHIELD_TEST_ENV="local"
make test-e2e
1 change: 1 addition & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -9,3 +9,4 @@ kubeconfig_managed
.build-harness-bootstrap
.build-harness
!vbh/.build-harness-bootstrap
*/vendor/
24 changes: 12 additions & 12 deletions .travis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ service:
- docker

go:
- "1.14.x"
- "1.18.x"

os:
- linux
Expand Down Expand Up @@ -46,6 +46,9 @@ stages:
- test-e2e
- publish

before_script:
- make init

jobs:
include:
- stage: lint
Expand All @@ -56,35 +59,32 @@ jobs:
- stage: build
name: "Build the image and push it"
script:
- |
make init
make component/build
make sec-scan
- make component/build
- ./build/sec_scan.sh
- stage: test-unit
name: "Run unit test"
script:
- set -e
- |
make init
make component/test/unit
make test-gpg-annotation
make sonar-go-test-ishield
make sonar-go-test-op
- |
./build/sonar-go-test-ishield.sh
./build/sonar-go-test-op.sh
# make sonar-go-test-ishield
# make sonar-go-test-op
# make sonar/go enable it after resolving package references to upstream repo
- stage: test-e2e
name: "Deploy the image to a cluster and run e2e tests"
script:
- |
make init
make component/pull
make component/test/e2e
- stage: publish
name: "Publish the image to quay with an official version/sha tag and publish entry to integration pipeline stage"
if: env(ENABLE_PUBLISH) = true AND branch = master
#type = push AND branch = master
if: env(ENABLE_PUBLISH) = true AND branch =~ /^release-[0-9]+\..*$/
script:
- |
make init
make component/build
make publish
#${TRAVIS_BUILD_DIR}/build/pipeline.sh
2 changes: 1 addition & 1 deletion COMPONENT_VERSION
Original file line number Diff line number Diff line change
@@ -1 +1 @@
0.1.0
0.3.3
13 changes: 13 additions & 0 deletions CatalogSource.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
apiVersion: operators.coreos.com/v1alpha1
kind: CatalogSource
metadata:
name: new-integrity-shield-operator-catalog
namespace: openshift-marketplace # olm
spec:
displayName: Integrity Shield++ Operator
image: quay.io/stolostron/integrity-shield-operator-index:0.3.3
publisher: IBM
sourceType: grpc
updateStrategy:
registryPoll:
interval: 45m
Loading