From 860541cc22c6025ed9dce9be6f611f3365769b32 Mon Sep 17 00:00:00 2001 From: Tommy Skaug Date: Thu, 26 Sep 2024 05:55:33 +0200 Subject: [PATCH] chore: remove unused workflow files. The chart has been moved to another repo. --- .github/ct.yaml | 5 - .github/kubescape-controls-inputs.json | 122 ------------------------- .github/stale.yml | 17 ---- .github/workflows/chart.yaml | 82 ----------------- .github/workflows/release.yaml | 15 --- .github/workflows/test.yaml | 24 ----- 6 files changed, 265 deletions(-) delete mode 100644 .github/ct.yaml delete mode 100644 .github/kubescape-controls-inputs.json delete mode 100644 .github/stale.yml delete mode 100644 .github/workflows/chart.yaml delete mode 100644 .github/workflows/release.yaml delete mode 100644 .github/workflows/test.yaml diff --git a/.github/ct.yaml b/.github/ct.yaml deleted file mode 100644 index 30d99fa..0000000 --- a/.github/ct.yaml +++ /dev/null @@ -1,5 +0,0 @@ -chart-dirs: - - charts -remote: origin -target-branch: main -check-version-increment: false diff --git a/.github/kubescape-controls-inputs.json b/.github/kubescape-controls-inputs.json deleted file mode 100644 index 2b07253..0000000 --- a/.github/kubescape-controls-inputs.json +++ /dev/null @@ -1,122 +0,0 @@ -{ - "cpu_limit_max": [], - "cpu_limit_min": [], - "cpu_request_max": [], - "cpu_request_min": [], - "imageRepositoryAllowList": [ - "ghcr.io" - ], - "insecureCapabilities": [ - "SETPCAP", - "NET_ADMIN", - "NET_RAW", - "SYS_MODULE", - "SYS_RAWIO", - "SYS_PTRACE", - "SYS_ADMIN", - "SYS_BOOT", - "MAC_OVERRIDE", - "MAC_ADMIN", - "PERFMON", - "ALL", - "BPF" - ], - "k8sRecommendedLabels": [ - "app.kubernetes.io/name", - "app.kubernetes.io/instance", - "app.kubernetes.io/version", - "app.kubernetes.io/component", - "app.kubernetes.io/part-of", - "app.kubernetes.io/managed-by", - "app.kubernetes.io/created-by" - ], - "listOfDangerousArtifcats": [ - "bin/bash", - "sbin/sh", - "bin/ksh", - "bin/tcsh", - "bin/zsh", - "usr/bin/scsh", - "bin/csh", - "bin/busybox", - "usr/bin/busybox" - ], - "max_critical_vulnerabilities": [ - "5" - ], - "max_high_vulnerabilities": [ - "10" - ], - "memory_limit_max": [], - "memory_limit_min": [], - "memory_request_max": [], - "memory_request_min": [], - "publicRegistries": [ - "quay.io", - "registry.hub.docker.com" - ], - "recommendedLabels": [ - "app.kubernetes.io/name", - "app.kubernetes.io/instance" - ], - "sensitiveInterfaces": [ - "nifi", - "argo-server", - "weave-scope-app", - "kubeflow", - "kubernetes-dashboard" - ], - "sensitiveKeyNames": [ - "aws_access_key_id", - "aws_secret_access_key", - "azure_batchai_storage_account", - "azure_batchai_storage_key", - "azure_batch_account", - "azure_batch_key", - "secret", - "key", - "password", - "pwd", - "token", - "jwt", - "bearer", - "credential" - ], - "sensitiveValues": [ - "BEGIN \\w+ PRIVATE KEY", - "PRIVATE KEY", - "eyJhbGciO", - "JWT", - "Bearer" - ], - "sensitiveValuesAllowed": [], - "servicesNames": [ - "nifi-service", - "argo-server", - "minio", - "postgres", - "workflow-controller-metrics", - "weave-scope-app", - "kubernetes-dashboard" - ], - "untrustedRegistries": [], - "wlKnownNames": [ - "coredns", - "kube-proxy", - "event-exporter-gke", - "kube-dns", - "17-default-backend", - "metrics-server", - "ca-audit", - "ca-dashboard-aggregator", - "ca-notification-server", - "ca-ocimage", - "ca-oracle", - "ca-posture", - "ca-rbac", - "ca-vuln-scan", - "ca-webhook", - "ca-websocket", - "clair-clair" - ] -} \ No newline at end of file diff --git a/.github/stale.yml b/.github/stale.yml deleted file mode 100644 index c6a7103..0000000 --- a/.github/stale.yml +++ /dev/null @@ -1,17 +0,0 @@ -daysUntilStale: 30 -daysUntilClose: 14 -onlyLabels: [] -exemptLabels: - - pinned - - security - -exemptProjects: false -exemptMilestones: true -exemptAssignees: false -staleLabel: stale - -markComment: > - This issue has been automatically marked as stale because it has not had - recent activity. It will be closed if no further activity occurs. Thank you - for your contributions. -limitPerRun: 30 diff --git a/.github/workflows/chart.yaml b/.github/workflows/chart.yaml deleted file mode 100644 index 425d344..0000000 --- a/.github/workflows/chart.yaml +++ /dev/null @@ -1,82 +0,0 @@ -name: Chart -on: - pull_request: - branches: - - 'main' - push: - branches: - - 'main' - -jobs: - chart-testing: - runs-on: ubuntu-latest - steps: - - name: Checkout - uses: actions/checkout@v3 - with: - fetch-depth: 0 - - - name: Set up Helm - uses: azure/setup-helm@v3 - with: - version: v3.7.1 - - - uses: actions/setup-python@v4 - with: - python-version: 3.7 - - - name: Set up chart-testing - uses: helm/chart-testing-action@v2.3.1 - - - name: Run chart-testing (list-changed) - id: list-changed - run: | - changed=$(ct --config .github/ct.yaml list-changed) - if [[ -n "$changed" ]]; then - echo "::set-output name=changed::true" - fi - - - name: Run chart-testing (lint) - run: ct --config .github/ct.yaml lint - - polaris-audit: - runs-on: ubuntu-latest - steps: - - name: Checkout - uses: actions/checkout@v3 - with: - fetch-depth: 0 - - - name: Set up Helm - uses: azure/setup-helm@v3 - with: - version: v3.7.1 - - - name: Setup polaris - uses: fairwindsops/polaris/.github/actions/setup-polaris@master - with: - version: 6.0.0 - - - name: Run audit - run: | - polaris audit --helm-chart ./charts/well-known --helm-values ./charts/well-known/values.yaml --format pretty --set-exit-code-on-danger --set-exit-code-below-score 90 - - pluto-scan: - runs-on: ubuntu-latest - steps: - - name: Checkout - uses: actions/checkout@v2 - with: - fetch-depth: 0 - - - name: Set up Helm - uses: azure/setup-helm@v3 - with: - version: v3.7.1 - - - name: Download Pluto - uses: FairwindsOps/pluto/github-action@master - - - name: Use pluto - run: | - helm template ./charts/well-known -f ./charts/well-known/ci/pluto-values.yaml | pluto detect - --ignore-deprecations diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml deleted file mode 100644 index 47b67ac..0000000 --- a/.github/workflows/release.yaml +++ /dev/null @@ -1,15 +0,0 @@ -name: Release -on: - push: - branches: - - 'main' - -jobs: - release: - name: Release - uses: stenic/github-workflows/.github/workflows/release-docker-helm.yaml@main - with: - docker_image: "ghcr.io/${{ github.repository }}" - chart_path: './charts/well-known' - secrets: - token: ${{ secrets.PERSONAL_ACCESS_TOKEN }} diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml deleted file mode 100644 index de0c306..0000000 --- a/.github/workflows/test.yaml +++ /dev/null @@ -1,24 +0,0 @@ -name: Build - -on: - pull_request: - branches: - - 'main' - push: - branches: - - 'main' - -jobs: - docker: - runs-on: ubuntu-latest - steps: - - name: Set up QEMU - uses: docker/setup-qemu-action@v2 - - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v2 - - - name: Build - uses: docker/build-push-action@v3 - with: - push: false \ No newline at end of file