mirror of
https://github.com/external-secrets/external-secrets.git
synced 2024-12-15 17:51:01 +00:00
67fedc840e
* build(deps): bump sigs.k8s.io/controller-runtime from 0.11.2 to 0.12.3 Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.11.2 to 0.12.3. - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/master/RELEASE.md) - [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.11.2...v0.12.3) --- updated-dependencies: - dependency-name: sigs.k8s.io/controller-runtime dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * feat: bump kubernetes 1.24 Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: backwards-compatible vault implementation Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * feat: add audiences field to serviceAccountRef This will be used by aws, azure, gcp, kubernetes & vault providers in combination with TokenRequest API: it will _append_ audience claims to provider-specific audiences. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * feat: refactor kubernetes client to match provider/client interfaces the kubernetes provider mixed up provider and client interfaces which made it really hard to reason about. This commit separates into two structs, each implements one interface. The client struct fields have been renamed and annotated so their use and scope is clear. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: deprecate expirationSeconds expirationSeconds is not needed because we generate a service account token on the fly for a single use. There will be no replacement for this. Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: rename token fetch audiences field Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> * fix: generate CRDs Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Moritz Johner <beller.moritz@googlemail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Moritz Johner <beller.moritz@googlemail.com>
58 lines
1.8 KiB
Makefile
58 lines
1.8 KiB
Makefile
MAKEFLAGS += --warn-undefined-variables
|
|
SHELL := /bin/bash
|
|
.SHELLFLAGS := -euo pipefail -c
|
|
|
|
KIND_IMG = "kindest/node:v1.24.2@sha256:1f0cee2282f43150b52dc7933183ed96abdcfc8d293f30ec07082495874876f1"
|
|
BUILD_ARGS ?=
|
|
|
|
export E2E_IMAGE_REGISTRY ?= ghcr.io/external-secrets/external-secrets-e2e
|
|
export GINKGO_LABELS ?= !managed
|
|
export TEST_SUITES ?= provider flux argocd
|
|
|
|
start-kind: ## Start kind cluster
|
|
kind create cluster \
|
|
--name external-secrets \
|
|
--config kind.yaml \
|
|
--retain \
|
|
--image "$(KIND_IMG)"
|
|
|
|
test: e2e-image ## Run e2e tests against current kube context
|
|
$(MAKE) -C ../ docker.build \
|
|
IMAGE_REGISTRY=$(IMAGE_REGISTRY) \
|
|
VERSION=$(VERSION) \
|
|
ARCH=amd64 \
|
|
BUILD_ARGS="${BUILD_ARGS} --build-arg TARGETARCH=amd64 --build-arg TARGETOS=linux"
|
|
kind load docker-image --name="external-secrets" $(IMAGE_REGISTRY):$(VERSION)
|
|
kind load docker-image --name="external-secrets" $(E2E_IMAGE_REGISTRY):$(VERSION)
|
|
./run.sh
|
|
|
|
test.managed: e2e-image ## Run e2e tests against current kube context
|
|
$(MAKE) -C ../ docker.build \
|
|
VERSION=$(VERSION) \
|
|
ARCH=amd64 \
|
|
BUILD_ARGS="${BUILD_ARGS} --build-arg TARGETARCH=amd64 --build-arg TARGETOS=linux"
|
|
$(MAKE) -C ../ docker.push \
|
|
VERSION=$(VERSION)
|
|
$(MAKE) -C ../ docker.push \
|
|
IMAGE_REGISTRY=$(E2E_IMAGE_REGISTRY) \
|
|
VERSION=$(VERSION)
|
|
./run.sh
|
|
|
|
e2e-bin:
|
|
CGO_ENABLED=0 go run github.com/onsi/ginkgo/v2/ginkgo build ./suites/...
|
|
|
|
e2e-image: e2e-bin
|
|
-rm -rf ./k8s/deploy
|
|
mkdir -p k8s
|
|
$(MAKE) -C ../ helm.generate
|
|
cp -r ../deploy ./k8s
|
|
docker build $(BUILD_ARGS) -t $(E2E_IMAGE_REGISTRY):$(VERSION) .
|
|
|
|
stop-kind: ## Stop kind cluster
|
|
kind delete cluster \
|
|
--name external-secrets \
|
|
|
|
help: ## displays this help message
|
|
@awk 'BEGIN {FS = ":.*?## "} /^[a-zA-Z_\/-]+:.*?## / {printf "\033[34m%-18s\033[0m %s\n", $$1, $$2}' $(MAKEFILE_LIST) | \
|
|
sort | \
|
|
grep -v '#'
|