Skip to content

Commit aaf5f0f

Browse files
g-bggg-bgg
committed
build-container-helm-chart-flux-demo
1 parent fba2c67 commit aaf5f0f

24 files changed

+721
-15
lines changed

‎.github/workflows/build.yaml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -11,20 +11,20 @@ on:
1111
branches: ['main', 'master']
1212

1313
jobs:
14-
lint:
15-
runs-on: ubuntu-latest
16-
steps:
17-
- name: Checkout repository
18-
uses: actions/checkout@v3
14+
# lint:
15+
# runs-on: ubuntu-latest
16+
# steps:
17+
# - name: Checkout repository
18+
# uses: actions/checkout@v3
1919

20-
- name: Run golangci-lint
21-
uses: reviewdog/action-golangci-lint@v2
22-
with:
23-
go_version: "1.24.3"
24-
golangci_lint_flags: "--timeout=5m0s"
20+
# - name: Run golangci-lint
21+
# uses: reviewdog/action-golangci-lint@v2
22+
# with:
23+
# go_version: "1.24.3"
24+
# golangci_lint_flags: "--timeout=5m0s"
2525
build:
2626
runs-on: ubuntu-latest
27-
needs: lint
27+
#needs: lint
2828
steps:
2929
- name: Checkout source code
3030
uses: actions/checkout@v3

‎.github/workflows/release.yaml‎

Lines changed: 88 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,19 @@
1-
name: goreleaser
1+
name: release
22

33
on:
44
push:
55
tags:
66
- "v[0-9]+.[0-9]+.[0-9]+"
7+
- "v[0-9]+.[0-9]+.[0-9]+-testing[0-9]+"
78

89
permissions:
910
contents: write
1011

12+
env:
13+
GH_REGISTRY: ghcr.io
14+
IMAGE_NAME: ${{ github.repository }}
15+
RELEASE_VERSION: ${{ github.ref_name }}
16+
1117
jobs:
1218
goreleaser:
1319
runs-on: ubuntu-latest
@@ -18,11 +24,91 @@ jobs:
1824
uses: actions/setup-go@v3
1925
with:
2026
go-version: '1.24.3'
21-
- uses: anchore/sbom-action/download-syft@v0.13.3
27+
- uses: anchore/sbom-action/download-syft@v0.20.6
2228
- name: Run GoReleaser
2329
uses: goreleaser/goreleaser-action@v4
2430
with:
2531
distribution: goreleaser
2632
args: release --clean
2733
env:
2834
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
35+
36+
packagerelease:
37+
runs-on: ubuntu-latest
38+
permissions:
39+
contents: read
40+
packages: write
41+
attestations: write
42+
id-token: write
43+
steps:
44+
- name: Checkout repository
45+
uses: actions/checkout@v5
46+
- name: Log in to the GitHub Container registry
47+
uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
48+
with:
49+
registry: ${{ env.GH_REGISTRY }}
50+
username: ${{ github.actor }}
51+
password: ${{ secrets.GITHUB_TOKEN }}
52+
- name: Extract metadata (tags, labels) for Docker
53+
id: meta
54+
uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
55+
with:
56+
images: ${{ env.GH_REGISTRY }}/${{ env.IMAGE_NAME }}
57+
- name: Set up QEMU
58+
uses: docker/setup-qemu-action@v3
59+
- name: Set up Docker Buildx
60+
uses: docker/setup-buildx-action@v3
61+
- name: Build and push Docker image
62+
id: push
63+
uses: docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4
64+
with:
65+
context: .
66+
platforms: linux/amd64,linux/arm64
67+
push: true
68+
tags: ${{ steps.meta.outputs.tags }}
69+
labels: ${{ steps.meta.outputs.labels }}
70+
build-args: |
71+
VERSION=${{ env.RELEASE_VERSION }}
72+
- name: Login to Docker Hub
73+
uses: docker/login-action@v2
74+
with:
75+
username: ${{ secrets.DOCKERHUB_USERNAME }}
76+
password: ${{ secrets.DOCKERHUB_TOKEN }}
77+
- name: Build and push
78+
uses: docker/build-push-action@v4
79+
with:
80+
context: .
81+
platforms: linux/amd64,linux/arm64
82+
push: true
83+
tags: |
84+
controlplane/netassert:${{ github.ref_name }}
85+
controlplane/netassert:latest
86+
build-args: |
87+
VERSION=${{ env.RELEASE_VERSION }}
88+
89+
- name: Generate artifact attestation
90+
uses: actions/attest-build-provenance@v3
91+
with:
92+
subject-name: ${{ env.GH_REGISTRY }}/${{ env.IMAGE_NAME}}
93+
subject-digest: ${{ steps.push.outputs.digest }}
94+
push-to-registry: true
95+
96+
- name: Set up Helm
97+
uses: azure/setup-helm@v4
98+
- name: Setup yq
99+
uses: mikefarah/yq@v4
100+
- name: Log in to GitHub Container Registry
101+
run: |
102+
echo "${{ secrets.GITHUB_TOKEN }}" | helm registry login ghcr.io -u ${{ github.actor }} --password-stdin
103+
- name: Prepare and package Helm chart
104+
run: |
105+
CLEAN_VERSION=$(echo "$RELEASE_VERSION" | sed 's/^v//')
106+
echo "Using chart version and appVersion: $CLEAN_VERSION"
107+
yq -i ".image.tag = \"${RELEASE_VERSION}\"" ./helm/values.yaml
108+
yq -i ".version = \"${CLEAN_VERSION}\"" ./helm/Chart.yaml
109+
yq -i ".appVersion = \"${CLEAN_VERSION}\"" ./helm/Chart.yaml
110+
helm package ./helm -d .
111+
- name: Push Helm chart to GHCR
112+
run: |
113+
CLEAN_VERSION=$(echo "$RELEASE_VERSION" | sed 's/^v//')
114+
helm push "./netassert-${CLEAN_VERSION}.tgz" oci://ghcr.io/${{ github.repository_owner }}/charts

‎Dockerfile‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
FROM golang:1.24-alpine AS builder
2+
3+
ARG VERSION
4+
5+
COPY . /build
6+
WORKDIR /build
7+
8+
RUN go mod download && \
9+
CGO_ENABLED=0 GO111MODULE=on go build -ldflags="-X 'main.appName=NetAssert' -X 'main.version=${VERSION}'" -v -o /netassertv2 cmd/netassert/cli/*.go && \
10+
ls -ltr /netassertv2
11+
12+
FROM gcr.io/distroless/base:nonroot
13+
COPY --from=builder /netassertv2 /usr/bin/netassertv2
14+
15+
ENTRYPOINT [ "/usr/bin/netassertv2" ]

‎cmd/netassert/cli/run.go‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -35,9 +35,9 @@ type runCmdConfig struct {
3535
var runCmdCfg = runCmdConfig{
3636
TapFile: "results.tap", // name of the default TAP file where the results will be written
3737
SuffixLength: 9, // suffix length of the random string to be appended to the container name
38-
SnifferContainerImage: "docker.io/controlplane/netassertv2-packet-sniffer:latest",
38+
SnifferContainerImage: "docker.io/controlplane/netassertv2-packet-sniffer:v1.1.7",
3939
SnifferContainerPrefix: "netassertv2-sniffer",
40-
ScannerContainerImage: "docker.io/controlplane/netassertv2-l4-client:latest",
40+
ScannerContainerImage: "docker.io/controlplane/netassertv2-l4-client:v1.0.6",
4141
ScannerContainerPrefix: "netassertv2-client",
4242
PauseInSeconds: 1, // seconds to pause before each test case
4343
PacketCaptureInterface: `eth0`, // the interface used by the sniffer image to capture traffic

‎fluxcd-demo/README.md‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
Fluxcd Demo
2+
3+
doc to be finished
4+
5+
6+
docker run -d -p 5000:5000 --restart=always --name registry-5000 registry:2
7+
kind create cluster --config kind-cluster.yaml
8+
9+
10+
kubectl apply -f https://github.com/fluxcd/flux2/releases/download/v2.7.2/install.yaml
11+
12+
update chart version
13+
helm package ./helm -d .
14+
helm push ./fluxcd-demo-0.0.1-dev.tgz oci://localhost:5000/fluxcd/
15+
kubectl get helmreleases
16+
17+
18+
kind delete cluster

‎fluxcd-demo/fluxcd-helmconfig.yaml‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
apiVersion: source.toolkit.fluxcd.io/v1
2+
kind: HelmRepository
3+
metadata:
4+
name: demo-repo
5+
namespace: default
6+
spec:
7+
type: "oci"
8+
insecure: true
9+
interval: 10s
10+
url: oci://host.docker.internal:5000/fluxcd
11+
---
12+
apiVersion: helm.toolkit.fluxcd.io/v2
13+
kind: HelmRelease
14+
metadata:
15+
name: demo-release
16+
namespace: default
17+
spec:
18+
interval: 10s
19+
timeout: 5m
20+
chart:
21+
spec:
22+
chart: fluxcd-demo
23+
version: '0.0.x-dev'
24+
sourceRef:
25+
kind: HelmRepository
26+
name: demo-repo
27+
interval: 1m
28+
releaseName: myhelmrelease
29+
# valuesFrom:
30+
# - kind: ConfigMap
31+
# name: tests
32+
# valuesKey: test-cases.yaml
33+
# targetPath: testFile

‎fluxcd-demo/helm/Chart.yaml‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
apiVersion: v1
2+
description: fluxcd-demo
3+
name: fluxcd-demo
4+
version: 0.0.1-dev
5+
appVersion: 0.0.1-dev
6+
dependencies:
7+
- name: netassert
8+
repository: ghcr.io/controlplaneio/charts/netassert
9+
version: 1.0.0-dev

‎fluxcd-demo/helm/templates/_helpers.tpl‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
{{/* vim: set filetype=mustache: */}}
2+
{{/*
3+
Expand the name of the chart.
4+
*/}}
5+
{{- define "fluxcd-demo.name" -}}
6+
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
7+
{{- end -}}
8+
9+
{{/*
10+
Create a default fully qualified app name.
11+
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
12+
If release name contains chart name it will be used as a full name.
13+
*/}}
14+
{{- define "fluxcd-demo.fullname" -}}
15+
{{- if .Values.fullnameOverride -}}
16+
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
17+
{{- else -}}
18+
{{- $name := default .Chart.Name .Values.nameOverride -}}
19+
{{- if contains $name .Release.Name -}}
20+
{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
21+
{{- else -}}
22+
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
23+
{{- end -}}
24+
{{- end -}}
25+
{{- end -}}
26+
27+
{{/*
28+
Create chart name and version as used by the chart label.
29+
*/}}
30+
{{- define "fluxcd-demo.chart" -}}
31+
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
32+
{{- end -}}

‎fluxcd-demo/helm/templates/deployment.yaml‎

Lines changed: 85 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,85 @@
1+
---
2+
apiVersion: v1
3+
kind: Namespace
4+
metadata:
5+
name: echoserver
6+
---
7+
apiVersion: v1
8+
kind: Namespace
9+
metadata:
10+
name: busybox
11+
---
12+
apiVersion: apps/v1
13+
kind: Deployment
14+
metadata:
15+
name: {{ template "fluxcd-demo.fullname" . }}-echoserver
16+
namespace: echoserver
17+
labels:
18+
app: echoserver-deploy
19+
spec:
20+
replicas: 1
21+
selector:
22+
matchLabels:
23+
app: echoserver
24+
template:
25+
metadata:
26+
labels:
27+
app: echoserver
28+
spec:
29+
initContainers:
30+
- name: "sleepy"
31+
image: busybox:1.36
32+
command: ["sh", "-c", "echo 'Sleeping...'; sleep 20"]
33+
containers:
34+
- name: echoserver
35+
image: k8s.gcr.io/e2e-test-images/echoserver:2.5
36+
imagePullPolicy: IfNotPresent
37+
ports:
38+
- containerPort: 8080
39+
name: web
40+
resources:
41+
requests:
42+
memory: 64Mi
43+
cpu: 300m
44+
limits:
45+
memory: 64Mi
46+
cpu: 400m
47+
securityContext:
48+
allowPrivilegeEscalation: false
49+
privileged: false
50+
---
51+
apiVersion: apps/v1
52+
kind: Deployment
53+
metadata:
54+
name: {{ template "fluxcd-demo.fullname" . }}-busybox
55+
namespace: busybox
56+
labels:
57+
app: busybox
58+
spec:
59+
replicas: 1
60+
selector:
61+
matchLabels:
62+
app: busybox
63+
template:
64+
metadata:
65+
labels:
66+
app: busybox
67+
spec:
68+
containers:
69+
- name: busybox
70+
image: busybox
71+
command:
72+
- sleep
73+
- "360000"
74+
imagePullPolicy: IfNotPresent
75+
resources:
76+
requests:
77+
memory: 64Mi
78+
cpu: 300m
79+
limits:
80+
memory: 64Mi
81+
cpu: 400m
82+
securityContext:
83+
allowPrivilegeEscalation: false
84+
privileged: false
85+
...

0 commit comments

Comments
 (0)