|
|
|
|
@ -12,12 +12,10 @@ vars:
|
|
|
|
|
E2E_KUBERNETES_VERSION: v1.36.1
|
|
|
|
|
E2E_CLUSTER_NAME: barman-cloud-plugin-e2e-{{.E2E_KUBERNETES_VERSION}}
|
|
|
|
|
REGISTRY_NETWORK: barman-cloud-plugin
|
|
|
|
|
REGISTRY_NAME: '{{ .REGISTRY_NAME | default "registry.dev" }}'
|
|
|
|
|
REGISTRY_PORT: '{{ .REGISTRY_PORT | default 5000 }}'
|
|
|
|
|
GITHUB_REPOSITORY: '{{.GITHUB_REPOSITORY | default "cloudnative-pg/plugin-barman-cloud"}}'
|
|
|
|
|
REGISTRY_NAME: registry.dev
|
|
|
|
|
REGISTRY_PORT: 5000
|
|
|
|
|
DAGGER_ENGINE_CONTAINER_NAME: e2e-dagger-engine
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
tasks:
|
|
|
|
|
|
|
|
|
|
####################################
|
|
|
|
|
@ -51,25 +49,24 @@ tasks:
|
|
|
|
|
deps:
|
|
|
|
|
- internal:lint
|
|
|
|
|
|
|
|
|
|
# run the go linters
|
|
|
|
|
core:uncommitted:
|
|
|
|
|
desc: Check for uncommitted changes
|
|
|
|
|
deps:
|
|
|
|
|
- internal:uncommitted
|
|
|
|
|
|
|
|
|
|
# run the spellcheck
|
|
|
|
|
core:spellcheck:
|
|
|
|
|
desc: Run the spellcheck
|
|
|
|
|
deps:
|
|
|
|
|
- internal:wordlist-ordered
|
|
|
|
|
- internal:spellcheck
|
|
|
|
|
|
|
|
|
|
# Generate the manifest from the current branch
|
|
|
|
|
core:manifest:
|
|
|
|
|
desc: Generate the manifest to be uploaded to the release or as a workflow artifact
|
|
|
|
|
deps:
|
|
|
|
|
- internal:controller-gen
|
|
|
|
|
requires:
|
|
|
|
|
# We expect this to run in a GitHub workflow, so we put a few GitHub-specific vars here
|
|
|
|
|
# to prevent running this task locally by accident.
|
|
|
|
|
vars:
|
|
|
|
|
- CI
|
|
|
|
|
- GITHUB_REPOSITORY
|
|
|
|
|
vars:
|
|
|
|
|
GITHUB_REPOSITORY: '{{.GITHUB_REPOSITORY | default "cloudnative-pg/plugin-barman-cloud"}}'
|
|
|
|
|
CURRENT_BRANCH:
|
|
|
|
|
sh: git rev-parse --abbrev-ref HEAD
|
|
|
|
|
GITHUB_REF: '{{.GITHUB_REF | default (printf "refs/heads/%s" .CURRENT_BRANCH)}}'
|
|
|
|
|
@ -81,11 +78,6 @@ tasks:
|
|
|
|
|
GITHUB_REF: '{{.GITHUB_REF}}'
|
|
|
|
|
GITHUB_REF_NAME: '{{.GITHUB_REF_NAME}}'
|
|
|
|
|
|
|
|
|
|
core:go-test:
|
|
|
|
|
desc: Run the Go tests
|
|
|
|
|
deps:
|
|
|
|
|
- internal:go-test
|
|
|
|
|
|
|
|
|
|
core:publish:
|
|
|
|
|
desc: Publish the container images
|
|
|
|
|
requires:
|
|
|
|
|
@ -93,10 +85,12 @@ tasks:
|
|
|
|
|
# to prevent running this task locally by accident.
|
|
|
|
|
vars:
|
|
|
|
|
- CI
|
|
|
|
|
- GITHUB_REPOSITORY
|
|
|
|
|
- GITHUB_REF
|
|
|
|
|
- GITHUB_REF_NAME
|
|
|
|
|
- REGISTRY_USER
|
|
|
|
|
- REGISTRY_PASSWORD
|
|
|
|
|
vars:
|
|
|
|
|
GITHUB_REPOSITORY: '{{.GITHUB_REPOSITORY | default "cloudnative-pg/plugin-barman-cloud"}}'
|
|
|
|
|
CURRENT_BRANCH:
|
|
|
|
|
sh: git rev-parse --abbrev-ref HEAD
|
|
|
|
|
GITHUB_REF: '{{.GITHUB_REF | default (printf "refs/heads/%s" .CURRENT_BRANCH)}}'
|
|
|
|
|
@ -117,6 +111,9 @@ tasks:
|
|
|
|
|
# to prevent running this task locally by accident.
|
|
|
|
|
vars:
|
|
|
|
|
- CI
|
|
|
|
|
- GITHUB_REPOSITORY
|
|
|
|
|
- GITHUB_REF
|
|
|
|
|
- GITHUB_REF_NAME
|
|
|
|
|
- GITHUB_TOKEN
|
|
|
|
|
env:
|
|
|
|
|
# renovate: datasource=git-refs depName=gh lookupName=https://github.com/sagikazarmark/daggerverse
|
|
|
|
|
@ -124,12 +121,6 @@ tasks:
|
|
|
|
|
preconditions:
|
|
|
|
|
- sh: "[[ {{.GITHUB_REF}} =~ 'refs/tags/v.*' ]]"
|
|
|
|
|
msg: not a tag, failing
|
|
|
|
|
vars:
|
|
|
|
|
GITHUB_REPOSITORY: '{{.GITHUB_REPOSITORY | default "cloudnative-pg/plugin-barman-cloud"}}'
|
|
|
|
|
CURRENT_BRANCH:
|
|
|
|
|
sh: git rev-parse --abbrev-ref HEAD
|
|
|
|
|
GITHUB_REF: '{{.GITHUB_REF | default (printf "refs/heads/%s" .CURRENT_BRANCH)}}'
|
|
|
|
|
GITHUB_REF_NAME: '{{.GITHUB_REF_NAME | default .CURRENT_BRANCH}}'
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger -s call -m github.com/sagikazarmark/daggerverse/gh@${DAGGER_GH_SHA}
|
|
|
|
|
@ -243,11 +234,7 @@ tasks:
|
|
|
|
|
internal:uncommitted:
|
|
|
|
|
desc: Check for uncommitted changes
|
|
|
|
|
deps:
|
|
|
|
|
- task: internal:manifest
|
|
|
|
|
vars:
|
|
|
|
|
GITHUB_REPOSITORY: cloudnative-pg/plugin-barman-cloud
|
|
|
|
|
GITHUB_REF: main
|
|
|
|
|
GITHUB_REF_NAME: main
|
|
|
|
|
- internal:manifest
|
|
|
|
|
- documentation:apidoc
|
|
|
|
|
- internal:wordlist-ordered
|
|
|
|
|
env:
|
|
|
|
|
@ -262,7 +249,7 @@ tasks:
|
|
|
|
|
internal:go-test:
|
|
|
|
|
desc: Run go test
|
|
|
|
|
env:
|
|
|
|
|
# renovate: datasource=git-refs depName=kubernetes packageName=https://github.com/kubernetes/kubernetes versioning=semver
|
|
|
|
|
# renovate: datasource=git-refs depname=kubernetes packageName=https://github.com/kubernetes/kubernetes versioning=semver
|
|
|
|
|
K8S_VERSION: 1.31.0
|
|
|
|
|
# renovate: datasource=git-refs depName=controller-runtime packageName=https://github.com/kubernetes-sigs/controller-runtime versioning=semver
|
|
|
|
|
SETUP_ENVTEST_VERSION: 0.24.1
|
|
|
|
|
@ -278,211 +265,6 @@ tasks:
|
|
|
|
|
sources:
|
|
|
|
|
- ./**/*.go
|
|
|
|
|
|
|
|
|
|
internal:generate-certs:
|
|
|
|
|
desc: Generate certificates for the local registry
|
|
|
|
|
internal: true
|
|
|
|
|
run: once
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
mkdir -p certs &&
|
|
|
|
|
docker volume create certs &&
|
|
|
|
|
docker run -v certs:/certs -w /certs --name certs --entrypoint=/bin/sh alpine/openssl -c '
|
|
|
|
|
openssl genrsa -out ca-key.pem 4096 &&
|
|
|
|
|
openssl req -new -x509 -days 365 -key ca-key.pem -sha256 -out ca.pem \
|
|
|
|
|
-subj "/O=CloudNativePG/OU=Barman Cloud Plugin Testing" &&
|
|
|
|
|
openssl genrsa -out server-key.pem 4096 &&
|
|
|
|
|
openssl req -subj "/CN={{ .REGISTRY_NAME }}" -sha256 -new -key server-key.pem -out server.csr &&
|
|
|
|
|
echo subjectAltName = DNS:{{ .REGISTRY_NAME }},IP:127.0.0.1 >> extfile.cnf &&
|
|
|
|
|
echo extendedKeyUsage = serverAuth >> extfile.cnf &&
|
|
|
|
|
openssl x509 -req -days 365 -sha256 -in server.csr -CA ca.pem -CAkey ca-key.pem \
|
|
|
|
|
-CAcreateserial -out server-cert.pem -extfile extfile.cnf'
|
|
|
|
|
docker cp certs:/certs/ca.pem certs/ca.pem &&
|
|
|
|
|
docker rm certs
|
|
|
|
|
status:
|
|
|
|
|
- docker volume inspect certs
|
|
|
|
|
- test -f certs/ca.pem
|
|
|
|
|
|
|
|
|
|
internal:start-build-network:
|
|
|
|
|
desc: Create a docker network for image building used by the dagger engine and the registry
|
|
|
|
|
run: once
|
|
|
|
|
internal: true
|
|
|
|
|
cmds:
|
|
|
|
|
- docker network create {{ .REGISTRY_NETWORK}}
|
|
|
|
|
status:
|
|
|
|
|
- docker network inspect {{ .REGISTRY_NETWORK }}
|
|
|
|
|
|
|
|
|
|
internal:start-registry:
|
|
|
|
|
desc: Start a container registry
|
|
|
|
|
run: once
|
|
|
|
|
internal: true
|
|
|
|
|
deps:
|
|
|
|
|
- internal:generate-certs
|
|
|
|
|
- internal:start-build-network
|
|
|
|
|
env:
|
|
|
|
|
# renovate: datasource=docker depName=registry versioning=semver
|
|
|
|
|
REGISTRY_VERSION: 2
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
docker run -d --name {{ .REGISTRY_NAME }}
|
|
|
|
|
-p {{ .REGISTRY_PORT }}:5000
|
|
|
|
|
--network {{ .REGISTRY_NETWORK }}
|
|
|
|
|
-v certs:/certs
|
|
|
|
|
-e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/server-cert.pem -e REGISTRY_HTTP_TLS_KEY=/certs/server-key.pem
|
|
|
|
|
registry:${REGISTRY_VERSION}
|
|
|
|
|
status:
|
|
|
|
|
- \[ "$(docker inspect -f {{`'{{.State.Running}}'`}} "{{ .REGISTRY_NAME }}" 2> /dev/null )" == 'true' \]
|
|
|
|
|
|
|
|
|
|
# Start a dagger engine that mounts the CA certificate for the local registry.
|
|
|
|
|
internal:start-dagger-engine-for-local-builds:
|
|
|
|
|
desc: Start a dagger engine mounting the CA
|
|
|
|
|
run: once
|
|
|
|
|
deps:
|
|
|
|
|
- internal:generate-certs
|
|
|
|
|
- internal:start-build-network
|
|
|
|
|
vars:
|
|
|
|
|
# renovate: datasource=github-tags depName=dagger/dagger versioning=semver
|
|
|
|
|
DAGGER_VERSION: 0.21.8
|
|
|
|
|
DAGGER_ENGINE_IMAGE: registry.dagger.io/engine:v{{ .DAGGER_VERSION }}
|
|
|
|
|
internal: true
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
docker run -d -v /var/lib/dagger --name "{{ .DAGGER_ENGINE_CONTAINER_NAME }}"
|
|
|
|
|
--network={{ .REGISTRY_NETWORK }}
|
|
|
|
|
-v certs:/usr/local/share/ca-certificates/
|
|
|
|
|
--privileged {{ .DAGGER_ENGINE_IMAGE }}
|
|
|
|
|
status:
|
|
|
|
|
- \[ "$(docker inspect -f {{`'{{.State.Running}}'`}} "{{ .DAGGER_ENGINE_CONTAINER_NAME }}" 2> /dev/null )" == 'true' \]
|
|
|
|
|
|
|
|
|
|
# We build an image and push it to a local registry.
|
|
|
|
|
# The name is always `plugin-barman-cloud:testing`.
|
|
|
|
|
internal:build-plugin-image:
|
|
|
|
|
desc: Build the operator container image for the plugin
|
|
|
|
|
deps:
|
|
|
|
|
- internal:start-registry
|
|
|
|
|
- internal:start-dagger-engine-for-local-builds
|
|
|
|
|
env:
|
|
|
|
|
# renovate: datasource=git-refs depName=docker lookupName=https://github.com/purpleclay/daggerverse currentValue=main
|
|
|
|
|
DAGGER_DOCKER_SHA: ee12c1a4a2630e194ec20c5a9959183e3a78c192
|
|
|
|
|
_EXPERIMENTAL_DAGGER_RUNNER_HOST: docker-container://{{ .DAGGER_ENGINE_CONTAINER_NAME }}
|
|
|
|
|
internal: true
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger -s call -m github.com/purpleclay/daggerverse/docker@${DAGGER_DOCKER_SHA}
|
|
|
|
|
build --dir . --file containers/Dockerfile.plugin --args GO_VERSION={{.GO_VERSION}} --platform linux/amd64
|
|
|
|
|
publish --ref {{ .REGISTRY_NAME }}:{{ .REGISTRY_PORT }}/plugin-barman-cloud --tags testing
|
|
|
|
|
|
|
|
|
|
# We build an image and push it to a local registry.
|
|
|
|
|
# The name is always `sidecar-barman-cloud:testing`.
|
|
|
|
|
internal:build-sidecar-image:
|
|
|
|
|
desc: Build the sidecar container image for the plugin
|
|
|
|
|
internal: true
|
|
|
|
|
deps:
|
|
|
|
|
- internal:start-registry
|
|
|
|
|
- internal:start-dagger-engine-for-local-builds
|
|
|
|
|
env:
|
|
|
|
|
# renovate: datasource=git-refs depName=docker lookupName=https://github.com/purpleclay/daggerverse currentValue=main
|
|
|
|
|
DAGGER_DOCKER_SHA: ee12c1a4a2630e194ec20c5a9959183e3a78c192
|
|
|
|
|
_EXPERIMENTAL_DAGGER_RUNNER_HOST: docker-container://{{ .DAGGER_ENGINE_CONTAINER_NAME }}
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger -s call -m github.com/purpleclay/daggerverse/docker@${DAGGER_DOCKER_SHA}
|
|
|
|
|
build --dir . --file containers/Dockerfile.sidecar --args GO_VERSION={{.GO_VERSION}} --platform linux/amd64
|
|
|
|
|
publish --ref {{ .REGISTRY_NAME }}:{{ .REGISTRY_PORT }}/sidecar-barman-cloud --tags testing
|
|
|
|
|
|
|
|
|
|
# Install kind if not at the expected version.
|
|
|
|
|
internal:install-kind:
|
|
|
|
|
desc: Install kind
|
|
|
|
|
run: once
|
|
|
|
|
vars:
|
|
|
|
|
# renovate: datasource=git-refs depName=kind lookupName=https://github.com/kubernetes-sigs/kind versioning=semver
|
|
|
|
|
KIND_VERSION: v0.32.0
|
|
|
|
|
cmds:
|
|
|
|
|
- go install sigs.k8s.io/kind@{{.KIND_VERSION}}
|
|
|
|
|
- kind version | grep -q {{.KIND_VERSION}}
|
|
|
|
|
status:
|
|
|
|
|
- kind version | grep -q {{.KIND_VERSION}}
|
|
|
|
|
|
|
|
|
|
internal:start-kind-cluster:
|
|
|
|
|
desc: Start a kind cluster
|
|
|
|
|
deps:
|
|
|
|
|
- internal:install-kind
|
|
|
|
|
- internal:start-build-network
|
|
|
|
|
- internal:generate-certs
|
|
|
|
|
run: once
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
kind create cluster --name {{ .E2E_CLUSTER_NAME }}
|
|
|
|
|
--image kindest/node:{{ .E2E_KUBERNETES_VERSION }}
|
|
|
|
|
--config hack/kind-config.yaml
|
|
|
|
|
--wait 5m
|
|
|
|
|
- >
|
|
|
|
|
for node in $(kind get nodes --name {{ .E2E_CLUSTER_NAME }} ); do
|
|
|
|
|
docker network connect {{ .REGISTRY_NETWORK }} $node;
|
|
|
|
|
docker exec $node sh -c "update-ca-certificates";
|
|
|
|
|
done
|
|
|
|
|
status:
|
|
|
|
|
- kind get clusters | grep -q {{ .E2E_CLUSTER_NAME }}
|
|
|
|
|
|
|
|
|
|
internal:publish:
|
|
|
|
|
desc: Build and publish a container image for the plugin
|
|
|
|
|
requires:
|
|
|
|
|
vars:
|
|
|
|
|
- GITHUB_REPOSITORY
|
|
|
|
|
- GITHUB_REF
|
|
|
|
|
- GITHUB_REF_NAME
|
|
|
|
|
- REGISTRY_USER
|
|
|
|
|
- REGISTRY_PASSWORD
|
|
|
|
|
vars:
|
|
|
|
|
PLUGIN_IMAGE_NAME: ghcr.io/{{.GITHUB_REPOSITORY}}{{if not (hasPrefix "refs/tags/v" .GITHUB_REF)}}-testing{{end}}
|
|
|
|
|
SIDECAR_IMAGE_NAME: ghcr.io/{{.GITHUB_REPOSITORY}}-sidecar{{if not (hasPrefix "refs/tags/v" .GITHUB_REF)}}-testing{{end}}
|
|
|
|
|
# remove /merge suffix from the branch name. This is a workaround for the GitHub workflow on PRs,
|
|
|
|
|
# where the branch name is suffixed with /merge. Prepend pr- to the branch name on PRs.
|
|
|
|
|
# Any remaining "/" (e.g. from namespaced branches like "dev/foo") is replaced with "-" since
|
|
|
|
|
# "/" is not a valid character in a Docker tag.
|
|
|
|
|
IMAGE_VERSION: '{{replace "/" "-" (regexReplaceAll "(\\d+)/merge" .GITHUB_REF_NAME "pr-${1}")}}'
|
|
|
|
|
env:
|
|
|
|
|
# renovate: datasource=git-refs depName=docker lookupName=https://github.com/purpleclay/daggerverse currentValue=main
|
|
|
|
|
DAGGER_DOCKER_SHA: ee12c1a4a2630e194ec20c5a9959183e3a78c192
|
|
|
|
|
internal: true
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger call -m github.com/purpleclay/daggerverse/docker@${DAGGER_DOCKER_SHA}
|
|
|
|
|
--registry ghcr.io --username $REGISTRY_USER --password env:REGISTRY_PASSWORD
|
|
|
|
|
build --dir . --file containers/Dockerfile.plugin --args GO_VERSION={{.GO_VERSION}} --platform linux/amd64 --platform linux/arm64
|
|
|
|
|
publish --ref {{.PLUGIN_IMAGE_NAME}} --tags {{.IMAGE_VERSION}}
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger call -m github.com/purpleclay/daggerverse/docker@${DAGGER_DOCKER_SHA}
|
|
|
|
|
--registry ghcr.io --username $REGISTRY_USER --password env:REGISTRY_PASSWORD
|
|
|
|
|
build --dir . --file containers/Dockerfile.sidecar --args GO_VERSION={{.GO_VERSION}} --platform linux/amd64 --platform linux/arm64
|
|
|
|
|
publish --ref {{.SIDECAR_IMAGE_NAME}} --tags {{.IMAGE_VERSION}}
|
|
|
|
|
|
|
|
|
|
internal:controller-gen:
|
|
|
|
|
desc: Run controller-gen
|
|
|
|
|
run: once
|
|
|
|
|
env:
|
|
|
|
|
# renovate: datasource=git-refs depName=controller-gen lookupName=https://github.com/cloudnative-pg/daggerverse currentValue=main
|
|
|
|
|
DAGGER_CONTROLLER_GEN_SHA: 7174b66d283da487638a98b431b7707b311a9a32
|
|
|
|
|
internal: true
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger -s call -m github.com/cloudnative-pg/daggerverse/controller-gen@${DAGGER_CONTROLLER_GEN_SHA}
|
|
|
|
|
controller-gen --source . --args object:headerFile=hack/boilerplate.go.txt --args paths=./api/...
|
|
|
|
|
file --path api/v1/zz_generated.deepcopy.go export --path api/v1/zz_generated.deepcopy.go
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger -s call -m github.com/cloudnative-pg/daggerverse/controller-gen@${DAGGER_CONTROLLER_GEN_SHA}
|
|
|
|
|
controller-gen --source . --args rbac:roleName=plugin-barman-cloud --args crd --args webhook
|
|
|
|
|
--args paths=./api/... --args paths=./internal/... --args output:crd:artifacts:config=config/crd/bases
|
|
|
|
|
directory --path config/
|
|
|
|
|
filter --include crd/bases/,rbac/
|
|
|
|
|
export --path config/
|
|
|
|
|
sources:
|
|
|
|
|
- ./api/**/*.go
|
|
|
|
|
- ./internal/**/*.go
|
|
|
|
|
generates:
|
|
|
|
|
- ./api/v1/zz_generated.deepcopy.go
|
|
|
|
|
- ./config/rbac/role.yaml
|
|
|
|
|
- ./config/crd/bases/*.yaml
|
|
|
|
|
|
|
|
|
|
internal:manifest:
|
|
|
|
|
desc: Update the image in the Kustomization
|
|
|
|
|
label: manifest-internal-{{.GITHUB_REF_NAME}}
|
|
|
|
|
@ -519,6 +301,211 @@ tasks:
|
|
|
|
|
generates:
|
|
|
|
|
- ./manifest.yaml
|
|
|
|
|
|
|
|
|
|
internal:generate-certs:
|
|
|
|
|
desc: Generate certificates for the local registry
|
|
|
|
|
internal: true
|
|
|
|
|
run: once
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
mkdir -p certs &&
|
|
|
|
|
docker volume create certs &&
|
|
|
|
|
docker run -v certs:/certs -w /certs --name certs --entrypoint=/bin/sh alpine/openssl -c '
|
|
|
|
|
openssl genrsa -out ca-key.pem 4096 &&
|
|
|
|
|
openssl req -new -x509 -days 365 -key ca-key.pem -sha256 -out ca.pem \
|
|
|
|
|
-subj "/O=CloudNativePG/OU=Barman Cloud Plugin Testing" &&
|
|
|
|
|
openssl genrsa -out server-key.pem 4096 &&
|
|
|
|
|
openssl req -subj "/CN={{ .REGISTRY_NAME }}" -sha256 -new -key server-key.pem -out server.csr &&
|
|
|
|
|
echo subjectAltName = DNS:{{ .REGISTRY_NAME }},IP:127.0.0.1 >> extfile.cnf &&
|
|
|
|
|
echo extendedKeyUsage = serverAuth >> extfile.cnf &&
|
|
|
|
|
openssl x509 -req -days 365 -sha256 -in server.csr -CA ca.pem -CAkey ca-key.pem \
|
|
|
|
|
-CAcreateserial -out server-cert.pem -extfile extfile.cnf'
|
|
|
|
|
docker cp certs:/certs/ca.pem certs/ca.pem &&
|
|
|
|
|
docker rm certs
|
|
|
|
|
status:
|
|
|
|
|
- docker volume inspect certs
|
|
|
|
|
- test -f certs/ca.pem
|
|
|
|
|
|
|
|
|
|
internal:controller-gen:
|
|
|
|
|
desc: Run controller-gen
|
|
|
|
|
run: once
|
|
|
|
|
env:
|
|
|
|
|
# renovate: datasource=git-refs depName=controller-gen lookupName=https://github.com/cloudnative-pg/daggerverse currentValue=main
|
|
|
|
|
DAGGER_CONTROLLER_GEN_SHA: 7174b66d283da487638a98b431b7707b311a9a32
|
|
|
|
|
internal: true
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger -s call -m github.com/cloudnative-pg/daggerverse/controller-gen@${DAGGER_CONTROLLER_GEN_SHA}
|
|
|
|
|
controller-gen --source . --args object:headerFile=hack/boilerplate.go.txt --args paths=./api/...
|
|
|
|
|
file --path api/v1/zz_generated.deepcopy.go export --path api/v1/zz_generated.deepcopy.go
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger -s call -m github.com/cloudnative-pg/daggerverse/controller-gen@${DAGGER_CONTROLLER_GEN_SHA}
|
|
|
|
|
controller-gen --source . --args rbac:roleName=plugin-barman-cloud --args crd --args webhook
|
|
|
|
|
--args paths=./api/... --args paths=./internal/... --args output:crd:artifacts:config=config/crd/bases
|
|
|
|
|
directory --path config/
|
|
|
|
|
filter --include crd/bases/,rbac/
|
|
|
|
|
export --path config/
|
|
|
|
|
sources:
|
|
|
|
|
- ./api/**/*.go
|
|
|
|
|
- ./internal/**/*.go
|
|
|
|
|
generates:
|
|
|
|
|
- ./api/v1/zz_generated.deepcopy.go
|
|
|
|
|
- ./config/rbac/role.yaml
|
|
|
|
|
- ./config/crd/bases/*.yaml
|
|
|
|
|
|
|
|
|
|
internal:publish:
|
|
|
|
|
desc: Build and publish a container image for the plugin
|
|
|
|
|
requires:
|
|
|
|
|
vars:
|
|
|
|
|
- GITHUB_REPOSITORY
|
|
|
|
|
- GITHUB_REF
|
|
|
|
|
- GITHUB_REF_NAME
|
|
|
|
|
- REGISTRY_USER
|
|
|
|
|
- REGISTRY_PASSWORD
|
|
|
|
|
vars:
|
|
|
|
|
PLUGIN_IMAGE_NAME: ghcr.io/{{.GITHUB_REPOSITORY}}{{if not (hasPrefix "refs/tags/v" .GITHUB_REF)}}-testing{{end}}
|
|
|
|
|
SIDECAR_IMAGE_NAME: ghcr.io/{{.GITHUB_REPOSITORY}}-sidecar{{if not (hasPrefix "refs/tags/v" .GITHUB_REF)}}-testing{{end}}
|
|
|
|
|
# remove /merge suffix from the branch name. This is a workaround for the GitHub workflow on PRs,
|
|
|
|
|
# where the branch name is suffixed with /merge. Prepend pr- to the branch name on PRs.
|
|
|
|
|
# Any remaining "/" (e.g. from namespaced branches like "dev/foo") is replaced with "-" since
|
|
|
|
|
# "/" is not a valid character in a Docker tag.
|
|
|
|
|
IMAGE_VERSION: '{{replace "/" "-" (regexReplaceAll "(\\d+)/merge" .GITHUB_REF_NAME "pr-${1}")}}'
|
|
|
|
|
env:
|
|
|
|
|
# renovate: datasource=git-refs depName=docker lookupName=https://github.com/purpleclay/daggerverse currentValue=main
|
|
|
|
|
DAGGER_DOCKER_SHA: ee12c1a4a2630e194ec20c5a9959183e3a78c192
|
|
|
|
|
internal: true
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger call -m github.com/purpleclay/daggerverse/docker@${DAGGER_DOCKER_SHA}
|
|
|
|
|
--registry ghcr.io --username $REGISTRY_USER --password env:REGISTRY_PASSWORD
|
|
|
|
|
build --dir . --file containers/Dockerfile.plugin --args GO_VERSION={{.GO_VERSION}} --platform linux/amd64 --platform linux/arm64
|
|
|
|
|
publish --ref {{.PLUGIN_IMAGE_NAME}} --tags {{.IMAGE_VERSION}}
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger call -m github.com/purpleclay/daggerverse/docker@${DAGGER_DOCKER_SHA}
|
|
|
|
|
--registry ghcr.io --username $REGISTRY_USER --password env:REGISTRY_PASSWORD
|
|
|
|
|
build --dir . --file containers/Dockerfile.sidecar --args GO_VERSION={{.GO_VERSION}} --platform linux/amd64 --platform linux/arm64
|
|
|
|
|
publish --ref {{.SIDECAR_IMAGE_NAME}} --tags {{.IMAGE_VERSION}}
|
|
|
|
|
|
|
|
|
|
# We build an image and push it to a local registry.
|
|
|
|
|
# The name is always `plugin-barman-cloud:testing`.
|
|
|
|
|
internal:build-plugin-image:
|
|
|
|
|
desc: Build the operator container image for the plugin
|
|
|
|
|
deps:
|
|
|
|
|
- internal:start-registry
|
|
|
|
|
- internal:start-dagger-engine-for-local-builds
|
|
|
|
|
env:
|
|
|
|
|
# renovate: datasource=git-refs depName=docker lookupName=https://github.com/purpleclay/daggerverse currentValue=main
|
|
|
|
|
DAGGER_DOCKER_SHA: ee12c1a4a2630e194ec20c5a9959183e3a78c192
|
|
|
|
|
_EXPERIMENTAL_DAGGER_RUNNER_HOST: docker-container://{{ .DAGGER_ENGINE_CONTAINER_NAME }}
|
|
|
|
|
internal: true
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger -s call -m github.com/purpleclay/daggerverse/docker@${DAGGER_DOCKER_SHA}
|
|
|
|
|
build --dir . --file containers/Dockerfile.plugin --args GO_VERSION={{.GO_VERSION}} --platform linux/amd64
|
|
|
|
|
publish --ref {{ .REGISTRY_NAME }}:{{ .REGISTRY_PORT }}/plugin-barman-cloud --tags testing
|
|
|
|
|
|
|
|
|
|
# We build an image and push it to a local registry.
|
|
|
|
|
# The name is always `sidecar-barman-cloud:testing`.
|
|
|
|
|
internal:build-sidecar-image:
|
|
|
|
|
desc: Build the sidecar container image for the plugin
|
|
|
|
|
internal: true
|
|
|
|
|
deps:
|
|
|
|
|
- internal:start-registry
|
|
|
|
|
- internal:start-dagger-engine-for-local-builds
|
|
|
|
|
env:
|
|
|
|
|
# renovate: datasource=git-refs depName=docker lookupName=https://github.com/purpleclay/daggerverse currentValue=main
|
|
|
|
|
DAGGER_DOCKER_SHA: ee12c1a4a2630e194ec20c5a9959183e3a78c192
|
|
|
|
|
_EXPERIMENTAL_DAGGER_RUNNER_HOST: docker-container://{{ .DAGGER_ENGINE_CONTAINER_NAME }}
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
GITHUB_REF= dagger -s call -m github.com/purpleclay/daggerverse/docker@${DAGGER_DOCKER_SHA}
|
|
|
|
|
build --dir . --file containers/Dockerfile.sidecar --args GO_VERSION={{.GO_VERSION}} --platform linux/amd64
|
|
|
|
|
publish --ref {{ .REGISTRY_NAME }}:{{ .REGISTRY_PORT }}/sidecar-barman-cloud --tags testing
|
|
|
|
|
|
|
|
|
|
internal:start-registry:
|
|
|
|
|
desc: Start a container registry
|
|
|
|
|
run: once
|
|
|
|
|
internal: true
|
|
|
|
|
deps:
|
|
|
|
|
- internal:generate-certs
|
|
|
|
|
- internal:start-build-network
|
|
|
|
|
env:
|
|
|
|
|
# renovate: datasource=docker depName=registry versioning=semver
|
|
|
|
|
REGISTRY_VERSION: 2
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
docker run -d --name {{ .REGISTRY_NAME }}
|
|
|
|
|
-p {{ .REGISTRY_PORT }}:5000
|
|
|
|
|
--network {{ .REGISTRY_NETWORK }}
|
|
|
|
|
-v certs:/certs
|
|
|
|
|
-e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/server-cert.pem -e REGISTRY_HTTP_TLS_KEY=/certs/server-key.pem
|
|
|
|
|
registry:${REGISTRY_VERSION}
|
|
|
|
|
status:
|
|
|
|
|
- \[ "$(docker inspect -f {{`'{{.State.Running}}'`}} "{{ .REGISTRY_NAME }}" 2> /dev/null )" == 'true' \]
|
|
|
|
|
|
|
|
|
|
# Start a dagger engine that mounts the CA certificate for the local registry.
|
|
|
|
|
internal:start-dagger-engine-for-local-builds:
|
|
|
|
|
desc: Start a dagger engine mounting the CA
|
|
|
|
|
run: once
|
|
|
|
|
deps:
|
|
|
|
|
- internal:generate-certs
|
|
|
|
|
- internal:start-build-network
|
|
|
|
|
vars:
|
|
|
|
|
# renovate: datasource=github-tags depName=dagger/dagger versioning=semver
|
|
|
|
|
DAGGER_VERSION: 0.21.8
|
|
|
|
|
DAGGER_ENGINE_IMAGE: registry.dagger.io/engine:v{{ .DAGGER_VERSION }}
|
|
|
|
|
internal: true
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
docker run -d -v /var/lib/dagger --name "{{ .DAGGER_ENGINE_CONTAINER_NAME }}"
|
|
|
|
|
--network={{ .REGISTRY_NETWORK }}
|
|
|
|
|
-v certs:/usr/local/share/ca-certificates/
|
|
|
|
|
--privileged {{ .DAGGER_ENGINE_IMAGE }}
|
|
|
|
|
status:
|
|
|
|
|
- \[ "$(docker inspect -f {{`'{{.State.Running}}'`}} "{{ .DAGGER_ENGINE_CONTAINER_NAME }}" 2> /dev/null )" == 'true' \]
|
|
|
|
|
|
|
|
|
|
internal:start-build-network:
|
|
|
|
|
desc: Create a docker network for image building used by the dagger engine and the registry
|
|
|
|
|
run: once
|
|
|
|
|
internal: true
|
|
|
|
|
cmds:
|
|
|
|
|
- docker network create {{ .REGISTRY_NETWORK}}
|
|
|
|
|
status:
|
|
|
|
|
- docker network inspect {{ .REGISTRY_NETWORK }}
|
|
|
|
|
|
|
|
|
|
# Install kind if not at the expected version.
|
|
|
|
|
internal:install-kind:
|
|
|
|
|
desc: Install kind
|
|
|
|
|
run: once
|
|
|
|
|
vars:
|
|
|
|
|
# renovate: datasource=git-refs depName=kind lookupName=https://github.com/kubernetes-sigs/kind versioning=semver
|
|
|
|
|
KIND_VERSION: v0.32.0
|
|
|
|
|
cmds:
|
|
|
|
|
- go install sigs.k8s.io/kind@{{.KIND_VERSION}}
|
|
|
|
|
- kind version | grep -q {{.KIND_VERSION}}
|
|
|
|
|
status:
|
|
|
|
|
- kind version | grep -q {{.KIND_VERSION}}
|
|
|
|
|
|
|
|
|
|
internal:start-kind-cluster:
|
|
|
|
|
desc: Start a kind cluster
|
|
|
|
|
deps:
|
|
|
|
|
- internal:install-kind
|
|
|
|
|
- internal:start-build-network
|
|
|
|
|
- internal:generate-certs
|
|
|
|
|
run: once
|
|
|
|
|
cmds:
|
|
|
|
|
- >
|
|
|
|
|
kind create cluster --name {{ .E2E_CLUSTER_NAME }}
|
|
|
|
|
--image kindest/node:{{ .E2E_KUBERNETES_VERSION }}
|
|
|
|
|
--config hack/kind-config.yaml
|
|
|
|
|
--wait 5m
|
|
|
|
|
- >
|
|
|
|
|
for node in $(kind get nodes --name {{ .E2E_CLUSTER_NAME }} ); do
|
|
|
|
|
docker network connect {{ .REGISTRY_NETWORK }} $node;
|
|
|
|
|
docker exec $node sh -c "update-ca-certificates";
|
|
|
|
|
done
|
|
|
|
|
status:
|
|
|
|
|
- kind get clusters | grep -q {{ .E2E_CLUSTER_NAME }}
|
|
|
|
|
|
|
|
|
|
internal:clean:
|
|
|
|
|
desc: Remove autogenerated artifacts
|
|
|
|
|
internal: true
|
|
|
|
|
|
