Skip to content

Commit

Permalink
CASMPET-7334: Add images for K8s v1.32.0 upgrade in CSM 1.7
Browse files Browse the repository at this point in the history
Put quotes around DOCKER_TAG <<TAG>> so evaluated as string
  • Loading branch information
studenym-hpe committed Jan 21, 2025
1 parent 2bf0576 commit 53b9ce3
Show file tree
Hide file tree
Showing 15 changed files with 524 additions and 2 deletions.
2 changes: 1 addition & 1 deletion .github/scripts/template/workflow.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ jobs:
env:
CONTEXT_PATH: <<CONTEXT_PATH>>
DOCKER_REPO: artifactory.algol60.net/csm-docker/${{ github.ref == 'refs/heads/main' && 'stable' || 'unstable' }}/<<IMAGE>>
DOCKER_TAG: <<TAG>>
DOCKER_TAG: "<<TAG>>"
steps:
- name: build-sign-scan
uses: Cray-HPE/github-actions/build-sign-scan@build-sign-scan/v2
Expand Down
59 changes: 59 additions & 0 deletions .github/workflows/registry.k8s.io.coredns.coredns.v1.11.3.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
#
# MIT License
#
# (C) Copyright [2025] Hewlett Packard Enterprise Development LP
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included
# in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
# OTHER DEALINGS IN THE SOFTWARE.
#

# Generated with: make add IMAGE=coredns/coredns:v1.11.3 REGISTRY=registry.k8s.io PACKAGE_MANAGER=
#
---
name: registry.k8s.io/coredns/coredns:v1.11.3
on:
push:
paths:
- .github/workflows/registry.k8s.io.coredns.coredns.v1.11.3.yaml
- registry.k8s.io/coredns/coredns/v1.11.3/**
workflow_dispatch:
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
env:
CONTEXT_PATH: registry.k8s.io/coredns/coredns/v1.11.3
DOCKER_REPO: artifactory.algol60.net/csm-docker/${{ github.ref == 'refs/heads/main' && 'stable' || 'unstable' }}/registry.k8s.io/coredns/coredns
DOCKER_TAG: v1.11.3
steps:
- name: build-sign-scan
uses: Cray-HPE/github-actions/build-sign-scan@build-sign-scan/v2
with:
context_path: ${{ env.CONTEXT_PATH }}
docker_repo: ${{ env.DOCKER_REPO }}
docker_tag: "${{ env.DOCKER_TAG }}"
docker_username: ${{ secrets.ARTIFACTORY_ALGOL60_USERNAME }}
docker_password: ${{ secrets.ARTIFACTORY_ALGOL60_TOKEN }}
sign: ${{ github.ref == 'refs/heads/main' }}
cosign_gcp_workload_identity_provider: ${{ secrets.COSIGN_GCP_WORKLOAD_IDENTITY_PROVIDER_RSA }}
cosign_gcp_service_account: ${{ secrets.COSIGN_GCP_SERVICE_ACCOUNT_RSA }}
cosign_key: ${{ secrets.COSIGN_KEY_RSA }}
snyk_token: ${{ secrets.SNYK_TOKEN }}
fail_on_snyk_errors: true
59 changes: 59 additions & 0 deletions .github/workflows/registry.k8s.io.kube-apiserver.v1.32.0.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
#
# MIT License
#
# (C) Copyright [2025] Hewlett Packard Enterprise Development LP
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included
# in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
# OTHER DEALINGS IN THE SOFTWARE.
#

# Generated with: make add IMAGE=kube-apiserver:v1.32.0 REGISTRY=registry.k8s.io PACKAGE_MANAGER=
#
---
name: registry.k8s.io/kube-apiserver:v1.32.0
on:
push:
paths:
- .github/workflows/registry.k8s.io.kube-apiserver.v1.32.0.yaml
- registry.k8s.io/kube-apiserver/v1.32.0/**
workflow_dispatch:
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
env:
CONTEXT_PATH: registry.k8s.io/kube-apiserver/v1.32.0
DOCKER_REPO: artifactory.algol60.net/csm-docker/${{ github.ref == 'refs/heads/main' && 'stable' || 'unstable' }}/registry.k8s.io/kube-apiserver
DOCKER_TAG: v1.32.0
steps:
- name: build-sign-scan
uses: Cray-HPE/github-actions/build-sign-scan@build-sign-scan/v2
with:
context_path: ${{ env.CONTEXT_PATH }}
docker_repo: ${{ env.DOCKER_REPO }}
docker_tag: "${{ env.DOCKER_TAG }}"
docker_username: ${{ secrets.ARTIFACTORY_ALGOL60_USERNAME }}
docker_password: ${{ secrets.ARTIFACTORY_ALGOL60_TOKEN }}
sign: ${{ github.ref == 'refs/heads/main' }}
cosign_gcp_workload_identity_provider: ${{ secrets.COSIGN_GCP_WORKLOAD_IDENTITY_PROVIDER_RSA }}
cosign_gcp_service_account: ${{ secrets.COSIGN_GCP_SERVICE_ACCOUNT_RSA }}
cosign_key: ${{ secrets.COSIGN_KEY_RSA }}
snyk_token: ${{ secrets.SNYK_TOKEN }}
fail_on_snyk_errors: true
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
#
# MIT License
#
# (C) Copyright [2025] Hewlett Packard Enterprise Development LP
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included
# in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
# OTHER DEALINGS IN THE SOFTWARE.
#

# Generated with: make add IMAGE=kube-controller-manager:v1.32.0 REGISTRY=registry.k8s.io PACKAGE_MANAGER=
#
---
name: registry.k8s.io/kube-controller-manager:v1.32.0
on:
push:
paths:
- .github/workflows/registry.k8s.io.kube-controller-manager.v1.32.0.yaml
- registry.k8s.io/kube-controller-manager/v1.32.0/**
workflow_dispatch:
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
env:
CONTEXT_PATH: registry.k8s.io/kube-controller-manager/v1.32.0
DOCKER_REPO: artifactory.algol60.net/csm-docker/${{ github.ref == 'refs/heads/main' && 'stable' || 'unstable' }}/registry.k8s.io/kube-controller-manager
DOCKER_TAG: v1.32.0
steps:
- name: build-sign-scan
uses: Cray-HPE/github-actions/build-sign-scan@build-sign-scan/v2
with:
context_path: ${{ env.CONTEXT_PATH }}
docker_repo: ${{ env.DOCKER_REPO }}
docker_tag: "${{ env.DOCKER_TAG }}"
docker_username: ${{ secrets.ARTIFACTORY_ALGOL60_USERNAME }}
docker_password: ${{ secrets.ARTIFACTORY_ALGOL60_TOKEN }}
sign: ${{ github.ref == 'refs/heads/main' }}
cosign_gcp_workload_identity_provider: ${{ secrets.COSIGN_GCP_WORKLOAD_IDENTITY_PROVIDER_RSA }}
cosign_gcp_service_account: ${{ secrets.COSIGN_GCP_SERVICE_ACCOUNT_RSA }}
cosign_key: ${{ secrets.COSIGN_KEY_RSA }}
snyk_token: ${{ secrets.SNYK_TOKEN }}
fail_on_snyk_errors: true
59 changes: 59 additions & 0 deletions .github/workflows/registry.k8s.io.kube-proxy.v1.32.0.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
#
# MIT License
#
# (C) Copyright [2025] Hewlett Packard Enterprise Development LP
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included
# in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
# OTHER DEALINGS IN THE SOFTWARE.
#

# Generated with: make add IMAGE=kube-proxy:v1.32.0 REGISTRY=registry.k8s.io PACKAGE_MANAGER=
#
---
name: registry.k8s.io/kube-proxy:v1.32.0
on:
push:
paths:
- .github/workflows/registry.k8s.io.kube-proxy.v1.32.0.yaml
- registry.k8s.io/kube-proxy/v1.32.0/**
workflow_dispatch:
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
env:
CONTEXT_PATH: registry.k8s.io/kube-proxy/v1.32.0
DOCKER_REPO: artifactory.algol60.net/csm-docker/${{ github.ref == 'refs/heads/main' && 'stable' || 'unstable' }}/registry.k8s.io/kube-proxy
DOCKER_TAG: v1.32.0
steps:
- name: build-sign-scan
uses: Cray-HPE/github-actions/build-sign-scan@build-sign-scan/v2
with:
context_path: ${{ env.CONTEXT_PATH }}
docker_repo: ${{ env.DOCKER_REPO }}
docker_tag: "${{ env.DOCKER_TAG }}"
docker_username: ${{ secrets.ARTIFACTORY_ALGOL60_USERNAME }}
docker_password: ${{ secrets.ARTIFACTORY_ALGOL60_TOKEN }}
sign: ${{ github.ref == 'refs/heads/main' }}
cosign_gcp_workload_identity_provider: ${{ secrets.COSIGN_GCP_WORKLOAD_IDENTITY_PROVIDER_RSA }}
cosign_gcp_service_account: ${{ secrets.COSIGN_GCP_SERVICE_ACCOUNT_RSA }}
cosign_key: ${{ secrets.COSIGN_KEY_RSA }}
snyk_token: ${{ secrets.SNYK_TOKEN }}
fail_on_snyk_errors: true
59 changes: 59 additions & 0 deletions .github/workflows/registry.k8s.io.kube-scheduler.v1.32.0.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
#
# MIT License
#
# (C) Copyright [2025] Hewlett Packard Enterprise Development LP
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included
# in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
# OTHER DEALINGS IN THE SOFTWARE.
#

# Generated with: make add IMAGE=kube-scheduler:v1.32.0 REGISTRY=registry.k8s.io PACKAGE_MANAGER=
#
---
name: registry.k8s.io/kube-scheduler:v1.32.0
on:
push:
paths:
- .github/workflows/registry.k8s.io.kube-scheduler.v1.32.0.yaml
- registry.k8s.io/kube-scheduler/v1.32.0/**
workflow_dispatch:
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
env:
CONTEXT_PATH: registry.k8s.io/kube-scheduler/v1.32.0
DOCKER_REPO: artifactory.algol60.net/csm-docker/${{ github.ref == 'refs/heads/main' && 'stable' || 'unstable' }}/registry.k8s.io/kube-scheduler
DOCKER_TAG: v1.32.0
steps:
- name: build-sign-scan
uses: Cray-HPE/github-actions/build-sign-scan@build-sign-scan/v2
with:
context_path: ${{ env.CONTEXT_PATH }}
docker_repo: ${{ env.DOCKER_REPO }}
docker_tag: "${{ env.DOCKER_TAG }}"
docker_username: ${{ secrets.ARTIFACTORY_ALGOL60_USERNAME }}
docker_password: ${{ secrets.ARTIFACTORY_ALGOL60_TOKEN }}
sign: ${{ github.ref == 'refs/heads/main' }}
cosign_gcp_workload_identity_provider: ${{ secrets.COSIGN_GCP_WORKLOAD_IDENTITY_PROVIDER_RSA }}
cosign_gcp_service_account: ${{ secrets.COSIGN_GCP_SERVICE_ACCOUNT_RSA }}
cosign_key: ${{ secrets.COSIGN_KEY_RSA }}
snyk_token: ${{ secrets.SNYK_TOKEN }}
fail_on_snyk_errors: true
59 changes: 59 additions & 0 deletions .github/workflows/registry.k8s.io.pause.3.10.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
#
# MIT License
#
# (C) Copyright [2025] Hewlett Packard Enterprise Development LP
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included
# in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
# OTHER DEALINGS IN THE SOFTWARE.
#

# Generated with: make add IMAGE=pause:3.10 REGISTRY=registry.k8s.io PACKAGE_MANAGER=
#
---
name: registry.k8s.io/pause:3.10
on:
push:
paths:
- .github/workflows/registry.k8s.io.pause.3.10.yaml
- registry.k8s.io/pause/3.10/**
workflow_dispatch:
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
env:
CONTEXT_PATH: registry.k8s.io/pause/3.10
DOCKER_REPO: artifactory.algol60.net/csm-docker/${{ github.ref == 'refs/heads/main' && 'stable' || 'unstable' }}/registry.k8s.io/pause
DOCKER_TAG: "3.10"
steps:
- name: build-sign-scan
uses: Cray-HPE/github-actions/build-sign-scan@build-sign-scan/v2
with:
context_path: ${{ env.CONTEXT_PATH }}
docker_repo: ${{ env.DOCKER_REPO }}
docker_tag: "${{ env.DOCKER_TAG }}"
docker_username: ${{ secrets.ARTIFACTORY_ALGOL60_USERNAME }}
docker_password: ${{ secrets.ARTIFACTORY_ALGOL60_TOKEN }}
sign: ${{ github.ref == 'refs/heads/main' }}
cosign_gcp_workload_identity_provider: ${{ secrets.COSIGN_GCP_WORKLOAD_IDENTITY_PROVIDER_RSA }}
cosign_gcp_service_account: ${{ secrets.COSIGN_GCP_SERVICE_ACCOUNT_RSA }}
cosign_key: ${{ secrets.COSIGN_KEY_RSA }}
snyk_token: ${{ secrets.SNYK_TOKEN }}
fail_on_snyk_errors: true
2 changes: 1 addition & 1 deletion GNUmakefile
Original file line number Diff line number Diff line change
Expand Up @@ -94,7 +94,7 @@ define gen_gh_update_workflow
@printf " env:\n" >> $1
@printf " CONTEXT_PATH: $(DOCKERDIR)\n" >> $1
@printf " DOCKER_REPO: artifactory.algol60.net/csm-docker/$$\x7B\x7B github.ref == 'refs/heads/main' && 'stable' || 'unstable' \x7D\x7D/$(REGISTRY)/$(NAME)\n" >> $1
@printf " DOCKER_TAG: $(TAG)\n" >> $1
@printf " DOCKER_TAG: \"$(TAG)\"\n" >> $1
@cat template/fragment-workflow >> $1
endef

Expand Down
Loading

0 comments on commit 53b9ce3

Please sign in to comment.