From 877b905d4075bf8556db4c0c11fbf14a7a650f8a Mon Sep 17 00:00:00 2001 From: David Donchez Date: Thu, 31 Oct 2024 14:39:05 +0100 Subject: [PATCH 1/3] ci(workflows): add k8s v1.30 v1.31 to tests --- .github/workflows/release.yml | 4 ++-- .github/workflows/tests.yaml | 4 ++-- README.md | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 03ab59d0..4c90eb11 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -191,7 +191,7 @@ jobs: strategy: max-parallel: 6 matrix: - k8sversion: ["v1.24.17", "v1.25.16", "v1.26.14", "v1.27.11", "v1.28.7", "v1.29.2"] + k8sversion: ["v1.24.17", "v1.25.16", "v1.26.15", "v1.27.16", "v1.28.13", "v1.29.8", "v1.30.4", "v1.31.0"] steps: - name: Checkout Repository uses: actions/checkout@v4 @@ -324,7 +324,7 @@ jobs: strategy: max-parallel: 6 matrix: - k8sversion: ["v1.24.17", "v1.25.16", "v1.26.14", "v1.27.11", "v1.28.7", "v1.29.2"] + k8sversion: ["v1.24.17", "v1.25.16", "v1.26.15", "v1.27.16", "v1.28.13", "v1.29.8", "v1.30.4", "v1.31.0"] steps: - name: Checkout Repository uses: actions/checkout@v4 diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml index cf61a5a8..181f3574 100644 --- a/.github/workflows/tests.yaml +++ b/.github/workflows/tests.yaml @@ -100,7 +100,7 @@ jobs: strategy: max-parallel: 6 matrix: - k8sversion: ["v1.24.17", "v1.25.16", "v1.26.14", "v1.27.11", "v1.28.7", "v1.29.2"] + k8sversion: ["v1.24.17", "v1.25.16", "v1.26.15", "v1.27.16", "v1.28.13", "v1.29.8", "v1.30.4", "v1.31.0"] steps: - name: Checkout Repository uses: actions/checkout@v4 @@ -241,7 +241,7 @@ jobs: strategy: max-parallel: 6 matrix: - k8sversion: ["v1.24.17", "v1.25.16", "v1.26.14", "v1.27.11", "v1.28.7", "v1.29.2"] + k8sversion: ["v1.24.17", "v1.25.16", "v1.26.15", "v1.27.16", "v1.28.13", "v1.29.8", "v1.30.4", "v1.31.0"] steps: - name: Checkout Repository uses: actions/checkout@v4 diff --git a/README.md b/README.md index ff5ea734..3cb5dcb3 100644 --- a/README.md +++ b/README.md @@ -67,7 +67,7 @@ We investigated other options, and we didn't find any that would quite fit our r ## Supported Kubernetes versions -kuik has been developed for, and tested with, Kubernetes 1.24 to 1.28; but the code doesn't use any deprecated (or new) feature or API, and should work with newer versions as well. +kuik has been developed for, and tested with, Kubernetes 1.24 to 1.30; but the code doesn't use any deprecated (or new) feature or API, and should work with newer versions as well. ## How it works From ef4905f069b002812de22d16978be8d37a29bfcb Mon Sep 17 00:00:00 2001 From: David Donchez Date: Thu, 31 Oct 2024 14:48:03 +0100 Subject: [PATCH 2/3] ci(workflow): trivy action failure. disabling temporary --- .github/workflows/tests.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml index 181f3574..1c89003c 100644 --- a/.github/workflows/tests.yaml +++ b/.github/workflows/tests.yaml @@ -29,6 +29,7 @@ jobs: - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@0.28.0 + continue-on-error: true with: scan-type: 'fs' ignore-unfixed: true @@ -37,6 +38,7 @@ jobs: - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v3 + continue-on-error: true with: sarif_file: 'trivy-results.sarif' From 383608a92a702e092556681c091f9136063fb594 Mon Sep 17 00:00:00 2001 From: David Donchez Date: Thu, 31 Oct 2024 16:00:01 +0100 Subject: [PATCH 3/3] ci: customize TRIVY_DB_REPOSITORY due to rate-limits on github --- .github/workflows/tests.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml index 1c89003c..a3bc164d 100644 --- a/.github/workflows/tests.yaml +++ b/.github/workflows/tests.yaml @@ -17,6 +17,7 @@ jobs: HARBOR_REPO: "kube-image-keeper/kube-image-keeper" GHCR_IMAGE: "ghcr.io/enix/kube-image-keeper" QUAY_IMAGE: "quay.io/enix/kube-image-keeper" + TRIVY_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-db:2" steps: - name: Checkout Repository uses: actions/checkout@v4 @@ -29,7 +30,6 @@ jobs: - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@0.28.0 - continue-on-error: true with: scan-type: 'fs' ignore-unfixed: true @@ -38,7 +38,6 @@ jobs: - name: Upload Trivy scan results to GitHub Security tab uses: github/codeql-action/upload-sarif@v3 - continue-on-error: true with: sarif_file: 'trivy-results.sarif'