Update from upstream repo Praqma/helmsman@master

.circleci/config.yml

@@ -0,0 +1,71 @@
+version: 2
+jobs:
+  build:
+    docker:
+      - image: docker:25.0.5-git
+    steps:
+      - checkout
+      - setup_remote_docker:
+          version: default
+      - run:
+          name: build docker image
+          command: |
+            docker pull praqma/helmsman:latest
+            docker build --cache-from=praqma/helmsman:latest -t helmsman .
+
+  release:
+    docker:
+      - image: goreleaser/goreleaser
+        entrypoint: /bin/bash
+    working_directory: "/go/src/github.com/Praqma/helmsman"
+    steps:
+      - run:
+          name: install git
+          command: apk update && apk add --no-cache git openssh-client
+      - checkout
+      - run:
+          name: release
+          command: |
+            goreleaser release --release-notes release-notes.md
+
+  docker-release:
+    working_directory: "/tmp/go/src/helmsman"
+    machine: true
+    steps:
+      - checkout
+      - run:
+          name: build docker images and push them to dockerhub
+          command: |
+            helm_versions=( "v3.15.0" "v3.14.4" "v3.13.3" )
+
+            TAG=$(git describe --abbrev=0 --tags)
+            docker login -u $DOCKER_USER -p $DOCKER_PASS
+
+            for HELM_VERSION in "${helm_versions[@]}"
+            do
+              docker build -t praqma/helmsman:$TAG-helm-$HELM_VERSION --build-arg GLOBAL_HELM_VERSION=$HELM_VERSION . --no-cache
+              docker push praqma/helmsman:$TAG-helm-$HELM_VERSION
+            done
+
+workflows:
+  version: 2
+  build-test-push-release:
+    jobs:
+      - build:
+          filters:
+            tags:
+              only: /.*/
+      - release:
+          filters:
+            branches:
+              ignore: /.*/
+            tags:
+              only: /v[0-9]+(\.[0-9]+)*(-.*)*/
+      - docker-release:
+          requires:
+            - release
+          filters:
+            branches:
+              ignore: /.*/
+            tags:
+              only: /v[0-9]+(\.[0-9]+)*(-.*)*/

.dockerignore

@@ -0,0 +1,5 @@
+.circleci
+keys
+vendor
+.gitignore
+.idea

.github/dependabot.yml

@@ -0,0 +1,7 @@
+version: 2
+updates:
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "sunday"

.github/workflows/stale.yml

@@ -0,0 +1,31 @@
+# This workflow warns and then closes issues and PRs that have had no activity for a specified amount of time.
+#
+# You can adjust the behavior by modifying this file.
+# For more information, see:
+# https://github.com/actions/stale
+name: Mark stale issues and pull requests
+
+on:
+  schedule:
+  - cron: '0 5 * * *'
+
+jobs:
+  stale:
+
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+
+    steps:
+    - uses: actions/stale@v5
+      with:
+        repo-token: ${{ secrets.GITHUB_TOKEN }}
+        days-before-stale: 60
+        days-before-close: 6
+        stale-issue-message: 'This issue has been marked stale due to an inactivity.'
+        stale-pr-message: 'This PR has been marked stale due to an inactivity.'
+        stale-issue-label: 'stale'
+        stale-pr-label: 'stale'
+        ascending: true
+        operations-per-run: '60'

.gitignore

@@ -1,4 +1,13 @@
 *.passwd
 *.key
 *.crt
-/dist
+/dist
+/vendor/
+*.world
+*.world1
+helmsman
+helmsman.exe
+keys/*
+!tests/secrets/keys
+!cmd/**/*
+.helmsman-tmp

.goreleaser.yml

@@ -2,8 +2,16 @@
 # Build customization
 builds:
   - binary: helmsman
+    ldflags: -s -w -X main.build={{.Version}} -extldflags "-static"
+    flags:
+      - -trimpath
+    env:
+      - CGO_ENABLED=0
     goos:
       - darwin
       - linux
+      - windows
     goarch:
-      - amd64
+      - amd64
+      - arm64
+    main: ./cmd/helmsman/main.go

.version

@@ -0,0 +1 @@
+v3.17.1

CONTRIBUTION.md

@@ -0,0 +1,54 @@
+# Contribution Guide
+
+Pull requests, feeback/feature requests are all welcome. This guide will be updated overtime.
+
+## Build helmsman from source
+
+To build helmsman from source, you need go:1.17+. Follow the steps below:
+
+```sh
+git clone https://github.com/Praqma/helmsman.git
+make tools # installs few tools for testing, building, releasing
+make build
+make test
+```
+
+## The branches and tags
+
+`master` is where Helmsman latest code lives.
+`1.x` this is where Helmsman versions 1.x lives.
+
+> Helmsman v1.x supports helm v2.x only and will no longer be supported except for bug fixes and minor changes.
+
+## Submitting pull requests
+
+- If your PR is for Helmsman v1.x, it should target the `1.x` branch.
+- Please make sure you state the purpose of the pull request and that the code you submit is documented. If in doubt, [this guide](https://blog.github.com/2015-01-21-how-to-write-the-perfect-pull-request/) offers some good tips on writing a PR.
+- Please make sure you update the documentation with new features or the changes your PR adds. The following places are required.
+  - Update existing [how_to](docs/how_to/) guides or create new ones.
+  - If necessary, Update the [Desired State File spec](docs/desired_state_specification.md)
+  - If adding new flags, Update the [cmd reference](docs/cmd_reference.md)
+- Please add tests wherever possible to test your new changes.
+
+## Contribution to documentation
+
+Contribution to the documentation can be done via pull requests or by opening an issue.
+
+## Reporting issues/feature requests
+
+Please provide details of the issue, versions of helmsman, helm and kubernetes and all possible logs.
+
+## Releasing Helmsman
+
+Release is automated from CicrcleCI based on Git tags. [Goreleaser](goreleaser.com) is used to release the binaries and update the release notes on Github while the CircleCI pipeline builds a set of docker images and pushes them to dockerhub.
+
+The following steps are needed to cut a release (They assume that you are on master and the code is up to date):
+
+1. Change the version variable in [main.go](internal/app/main.go) and in [.version](.version)
+2. Update the [release-notes.md](release-notes.md) file with new version and changelog.
+3. Update the installation section in the [README.md](README.md) file to point to the latest version.
+4. (Optional), if new helm versions are required, update the [circleci config](.circleci/config.yml) and add more docker commands.
+5. Commit your changes locally.
+6. Create a git tag with the following command: `git tag -a <semantic version number> -m "<semantic version number>" <your-last-commit-sha>`
+7. Push your commit and tag with `git push --follow-tags`
+8. This should trigger the [pipeline on circleci](https://circleci.com/gh/Praqma/workflows/helmsman) which eventually releases to Github and dockerhub.

Dockerfile

@@ -0,0 +1,82 @@
+ARG GO_VERSION="1.22.3"
+ARG ALPINE_VERSION="3.19"
+ARG GLOBAL_KUBE_VERSION="v1.29.2"
+ARG GLOBAL_HELM_VERSION="v3.15.0"
+ARG GLOBAL_HELM_DIFF_VERSION="v3.9.6"
+ARG GLOBAL_HELM_GCS_VERSION="0.4.2"
+ARG GLOBAL_HELM_S3_VERSION="v0.16.0"
+ARG GLOBAL_HELM_SECRETS_VERSION="v4.6.0"
+ARG GLOBAL_SOPS_VERSION="v3.8.1"
+
+### Helm Installer ###
+FROM alpine:${ALPINE_VERSION} as helm-installer
+ARG GLOBAL_KUBE_VERSION
+ARG GLOBAL_HELM_VERSION
+ARG GLOBAL_HELM_DIFF_VERSION
+ARG GLOBAL_HELM_GCS_VERSION
+ARG GLOBAL_HELM_S3_VERSION
+ARG GLOBAL_HELM_SECRETS_VERSION
+ARG GLOBAL_SOPS_VERSION
+ENV KUBE_VERSION=$GLOBAL_KUBE_VERSION
+ENV HELM_VERSION=$GLOBAL_HELM_VERSION
+ENV HELM_DIFF_VERSION=$GLOBAL_HELM_DIFF_VERSION
+ENV HELM_GCS_VERSION=$GLOBAL_HELM_GCS_VERSION
+ENV HELM_S3_VERSION=$GLOBAL_HELM_S3_VERSION
+ENV HELM_SECRETS_VERSION=$GLOBAL_HELM_SECRETS_VERSION
+ENV SOPS_VERSION=$GLOBAL_SOPS_VERSION
+ENV HELM_DIFF_THREE_WAY_MERGE=true
+
+RUN apk add --update --no-cache ca-certificates git openssh-client openssl ruby curl wget tar gzip make bash
+
+RUN curl -L https://github.com/getsops/sops/releases/download/${SOPS_VERSION}/sops-${SOPS_VERSION}.linux.amd64 -o /usr/local/bin/sops \
+    && chmod +x /usr/local/bin/sops
+
+RUN curl --retry 5 -L https://storage.googleapis.com/kubernetes-release/release/${KUBE_VERSION}/bin/linux/amd64/kubectl -o /usr/local/bin/kubectl
+RUN chmod +x /usr/local/bin/kubectl
+
+RUN curl --retry 5 -Lk https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz | tar zxv -C /tmp
+RUN mv /tmp/linux-amd64/helm /usr/local/bin/helm && rm -rf /tmp/linux-amd64
+RUN chmod +x /usr/local/bin/helm
+
+RUN helm plugin install https://github.com/hypnoglow/helm-s3.git --version ${HELM_S3_VERSION}
+RUN helm plugin install https://github.com/nouney/helm-gcs --version ${HELM_GCS_VERSION}
+RUN helm plugin install https://github.com/databus23/helm-diff --version ${HELM_DIFF_VERSION}
+RUN helm plugin install https://github.com/jkroepke/helm-secrets --version ${HELM_SECRETS_VERSION}
+
+### Go Builder & Tester ###
+FROM golang:${GO_VERSION}-alpine${ALPINE_VERSION} as builder
+
+RUN apk add --update --no-cache ca-certificates git openssh-client ruby bash make curl
+RUN gem install hiera-eyaml hiera-eyaml-gkms --no-doc
+RUN update-ca-certificates
+
+COPY --from=helm-installer /usr/local/bin/kubectl /usr/local/bin/kubectl
+COPY --from=helm-installer /usr/local/bin/helm /usr/local/bin/helm
+COPY --from=helm-installer /root/.cache/helm/plugins/ /root/.cache/helm/plugins/
+COPY --from=helm-installer /root/.local/share/helm/plugins/ /root/.local/share/helm/plugins/
+
+WORKDIR /go/src/github.com/Praqma/helmsman
+
+COPY . .
+RUN make test \
+    && LastTag=$(git describe --abbrev=0 --tags) \
+    && TAG=$LastTag-$(date +"%d%m%y") \
+    && LT_SHA=$(git rev-parse ${LastTag}^{}) \
+    && LC_SHA=$(git rev-parse HEAD) \
+    && if [ ${LT_SHA} != ${LC_SHA} ]; then TAG=latest-$(date +"%d%m%y"); fi \
+    && make build
+
+### Final Image ###
+FROM alpine:${ALPINE_VERSION} as base
+
+RUN apk add --update --no-cache ca-certificates git openssh-client ruby curl bash gnupg gcompat
+RUN gem install hiera-eyaml hiera-eyaml-gkms --no-doc
+RUN update-ca-certificates
+
+COPY --from=helm-installer /usr/local/bin/kubectl /usr/local/bin/kubectl
+COPY --from=helm-installer /usr/local/bin/helm /usr/local/bin/helm
+COPY --from=helm-installer /usr/local/bin/sops /usr/local/bin/sops
+COPY --from=helm-installer /root/.cache/helm/plugins/ /root/.cache/helm/plugins/
+COPY --from=helm-installer /root/.local/share/helm/plugins/ /root/.local/share/helm/plugins/
+
+COPY --from=builder /go/src/github.com/Praqma/helmsman/helmsman /bin/helmsman

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2017 Praqma
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.