Upstream rebase

.github/workflows/e2e.yaml

@@ -0,0 +1,20 @@
+name: e2e
+
+on:
+  workflow_dispatch:
+  pull_request:
+  push:
+    branches:
+    - main
+
+jobs:
+  e2e-kind:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    - uses: actions/setup-go@v4
+      with:
+        go-version-file: "go.mod"
+    - name: Run e2e tests
+      run: |
+        make e2e

.github/workflows/go-apidiff.yaml

@@ -0,0 +1,25 @@
+name: go-apidiff
+
+on:
+  workflow_dispatch:
+  pull_request:
+  push:
+    branches:
+    - main
+
+jobs:
+  go-apidiff:
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+    - name: Check out code into the Go module directory
+      uses: actions/checkout@v3
+      with:
+        fetch-depth: 0
+    - name: Set up Go
+      uses: actions/setup-go@v4
+      with:
+        go-version-file: "go.mod"
+      id: go
+    - name: Run go-apidiff
+      uses: joelanford/go-apidiff@main

.github/workflows/release-e2e.yaml

@@ -0,0 +1,39 @@
+---
+name: release-e2e
+
+on:
+  release:
+    types:
+    - published
+    - edited
+
+jobs:
+  release-e2e-kind:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    - uses: actions/setup-go@v4
+      with:
+        go-version-file: "go.mod"
+
+    - name: Download kubectl
+      run: |
+        curl -LO "https://dl.k8s.io/release/$(go list -m k8s.io/kubectl | cut -d" " -f2 | sed 's/^v0/v1/')/bin/linux/amd64/kubectl"
+        sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl
+
+    - name: Start a kind cluster
+      run: make kind-cluster
+
+    - name: Install the cert-manager dependency
+      run: make cert-mgr
+
+    - name: Install the rukpak release manifests
+      run: |
+        kubectl apply -f https://github.com/operator-framework/rukpak/releases/download/${{ github.event.release.tag_name }}/rukpak.yaml
+        make wait
+
+    - name: Load testdata bundle container images into kind
+      run: make kind-load-bundles KIND=hack/tools/bin/kind
+
+    - name: Run e2e tests
+      run: make test-e2e KIND=hack/tools/bin/kind

.github/workflows/release.yaml

@@ -0,0 +1,64 @@
+name: release
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'main'
+    tags:
+      - 'v*'
+  pull_request:
+    branches:
+    - main
+
+jobs:
+  goreleaser:
+    name: goreleaser
+    runs-on: ubuntu-latest
+    steps:
+    - name: Check out code into the Go module directory
+      uses: actions/checkout@v3
+      with:
+        fetch-depth: 0
+
+    - name: Install Go
+      uses: actions/setup-go@v4
+      with:
+        go-version-file: "go.mod"
+
+    - name: Docker Login
+      if: ${{ github.event_name != 'pull_request' }}
+      uses: docker/login-action@v2
+      with:
+        registry: quay.io
+        username: ${{ secrets.QUAY_USERNAME }}
+        password: ${{ secrets.QUAY_PASSWORD }}
+
+    - name: Set the release related variables
+      run: |
+        if [[ $GITHUB_REF == refs/tags/* ]]; then
+          # Release tags.
+          echo IMAGE_TAG="${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
+          echo GORELEASER_ARGS="--rm-dist" >> $GITHUB_ENV
+          echo DISABLE_RELEASE_PIPELINE=false >> $GITHUB_ENV
+        elif [[ $GITHUB_REF == refs/heads/* ]]; then
+          # Branch build.
+          echo IMAGE_TAG="$(echo "${GITHUB_REF#refs/heads/}" | sed -r 's|/+|-|g')" >> $GITHUB_ENV
+          echo GORELEASER_ARGS="--rm-dist --skip-validate" >> $GITHUB_ENV
+        elif [[ $GITHUB_REF == refs/pull/* ]]; then
+          # PR build.
+          echo IMAGE_TAG="pr-$(echo "${GITHUB_REF}" | sed -E 's|refs/pull/([^/]+)/?.*|\1|')" >> $GITHUB_ENV
+        else
+          echo IMAGE_TAG="$(git describe --tags --always)" >> $GITHUB_ENV
+        fi
+
+    - name: Generate the rukpak release manifests
+      if: ${{ startsWith(github.ref, 'refs/tags/v') }}
+      run: |
+        echo VERSION="${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
+        make quickstart 
+
+    - name: Run goreleaser
+      run: make release
+      env:
+        GITHUB_TOKEN: ${{ github.token }}

.github/workflows/sanity.yaml

@@ -0,0 +1,44 @@
+name: sanity
+
+on:
+  workflow_dispatch:
+  pull_request:
+  push:
+    branches:
+    - main
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v4
+        with:
+          go-version-file: "go.mod"
+      - name: Run verification checks
+        run: make verify
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - uses: actions/setup-go@v4
+        with:
+          go-version-file: "go.mod"
+
+      - name: Run golangci linting checks
+        run: make lint
+  markdown:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: Lint markdown files
+        uses: github/super-linter/slim@v4
+        env:
+          VALIDATE_ALL_CODEBASE: true
+          DEFAULT_BRANCH: main
+          # only runs the markdown linter
+          VALIDATE_MARKDOWN: true

.github/workflows/stale.yaml

@@ -0,0 +1,32 @@
+name: stale
+on:
+  workflow_dispatch:
+  schedule:
+    # The start of everyday and at hour 12
+    - cron: '00 00 * * *'
+
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/stale@v8.0.0
+        id: stale
+        with:
+          # Overall configuration
+          operations-per-run: 100
+
+          # PR configuration
+          days-before-pr-stale: 30
+          stale-pr-message: 'This PR has become stale because it has been open for 30 days with no activity. Please update this PR or remove the `lifecycle/stale` label before it is automatically closed in 30 days. Adding the `lifecycle/frozen` label will cause this PR to ignore lifecycle events.'
+          days-before-pr-close: 30
+          close-pr-message: 'This PR has been closed as no updates were detected after 30 days of being stale. Please feel free to reopen this PR if necessary.'
+          stale-pr-label: lifecycle/stale
+          exempt-pr-labels: lifecycle/frozen
+          close-pr-label: lifecycle/rotten
+
+          # Issue configuration
+          days-before-issue-stale: 60
+          stale-issue-message: 'This issue has become stale because it has been open 60 days with no activity. The maintainers of this repo will remove this label during issue triage or it will be removed automatically after an update. Adding the `lifecycle/frozen` label will cause this issue to ignore lifecycle events.'
+          days-before-issue-close: -1
+          stale-issue-label: lifecycle/stale
+          exempt-issue-labels: lifecycle/frozen

.github/workflows/todo.yaml

@@ -0,0 +1,12 @@
+name: todo
+on:
+  push:
+    branches:
+    - main
+jobs:
+  build:
+    runs-on: "ubuntu-latest"
+    steps:
+      - uses: "actions/checkout@v3"
+      - name: "Create issues from TODO comments"
+        uses: "alstr/todo-to-issue-action@v4.6.2"

.github/workflows/unit.yaml

@@ -0,0 +1,18 @@
+name: unit
+
+on:
+  workflow_dispatch:
+  pull_request:
+  push:
+    branches:
+    - main
+
+jobs:
+  unit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v4
+        with:
+          go-version-file: "go.mod"
+      - run: make test-unit

.gitignore

@@ -12,5 +12,10 @@
 *.out
 
 # Dependency directories (remove the comment below to include it)
-bin
-.github
+#vendor/
+bin/
+dist/
+
+# Release artifacts
+.goreleaser.yml
+rukpak.yaml

.goreleaser.template.yml

@@ -19,8 +19,6 @@ builds:
     - arm64
     - ppc64le
     - s390x
-    ldflags:
-    - -X {{ .Env.PKG }}.GitCommit={{ .ShortCommit }}
   - id: helm
     main: ./cmd/helm
     binary: helm
@@ -32,8 +30,6 @@ builds:
       - arm64
       - ppc64le
       - s390x
-    ldflags:
-      - -X {{ .Env.PKG }}.GitCommit={{ .ShortCommit }}
   - id: core
     main: ./cmd/core
     binary: core
@@ -45,8 +41,6 @@ builds:
     - arm64
     - ppc64le
     - s390x
-    ldflags:
-    - -X {{ .Env.PKG }}.GitCommit={{ .ShortCommit }}
   - id: webhooks
     main: ./cmd/webhooks
     binary: webhooks
@@ -58,8 +52,6 @@ builds:
       - arm64
       - ppc64le
       - s390x
-    ldflags:
-      - -X {{ .Env.PKG }}.GitCommit={{ .ShortCommit }}
   - id: crdvalidator
     main: ./cmd/crdvalidator
     binary: crdvalidator
@@ -71,8 +63,6 @@ builds:
     - arm64
     - ppc64le
     - s390x
-    ldflags:
-    - -X {{ .Env.PKG }}.GitCommit={{ .ShortCommit }}
   - id: rukpakctl
     main: ./cmd/rukpakctl
     binary: rukpakctl
@@ -84,8 +74,6 @@ builds:
       - arm64
       - ppc64le
       - s390x
-    ldflags:
-      - -X {{ .Env.PKG }}.GitCommit={{ .ShortCommit }}
 dockers:
 - image_templates:
   - "{{ .Env.IMAGE_REPO }}:{{ .Env.IMAGE_TAG }}-amd64"
@@ -145,4 +133,7 @@ release:
     kubectl wait --for=condition=Available --namespace=cert-manager deployment/cert-manager-webhook --timeout=60s
     kubectl apply -f https://github.com/operator-framework/rukpak/releases/download/{{ .Tag }}/rukpak.yaml
     kubectl wait --for=condition=Available --namespace=rukpak-system deployment/core --timeout=60s
+    kubectl wait --for=condition=Available --namespace=rukpak-system deployment/helm-provisioner --timeout=60s
     kubectl wait --for=condition=Available --namespace=rukpak-system deployment/rukpak-webhooks --timeout=60s
+    kubectl wait --for=condition=Available --namespace=crdvalidator-system deployment/crd-validation-webhook --timeout=60s
+    ```