Merge branch 'main' into 0406-taskdefinition

.github/workflows/validate-helm-docs.yml → .github/workflows/validate-helm-chart.yml

@@ -1,10 +1,13 @@
-name: Validate Helm Docs
+name: Validate Helm Chart
 on:
+  push:
+    branches:
+      - 'main'
+      - '[0-9]+.[1-9][0-9]*.x'
   pull_request:
     branches:
       - 'main'
-    paths:
-      - 'helm/**'
+      - '[0-9]+.[1-9][0-9]*.x'
 defaults:
   run:
     shell: bash
@@ -51,3 +54,33 @@ jobs:
             echo ""
             echo "Helm values documentation is correct!"
           fi
+
+  helm-generation-check:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Cache build tools
+        id: cache-build-tools
+        uses: actions/cache@v3
+        with:
+          path: ./bin
+          key: build-tools-${{ github.ref_name }}
+
+      - name: Generate helm charts
+        env:
+          RELEASE_REGISTRY: ghcr.keptn.sh/keptn
+        run: make helm-package
+
+      - name: Compare YAML file changes
+        run: |
+          if [ -z "$(git status --porcelain)" ]; then
+            echo ""
+            echo "There are no changes in the manifests"
+          else
+            echo ""
+            echo "Helm charts were not re-generated. Please regenerate them using make helm-package RELEASE_REGISTRY=ghcr.keptn.sh/keptn"
+            exit 1
+          fi

.yamllint

@@ -7,10 +7,15 @@ ignore: |
   **/rendered/release.yaml
   examples/support/observability/config/prometheus
   dashboards/grafana
-  operator/config/crd/bases
-  metrics-operator/config/crd/bases
+  operator/config/crd/bases/*
+  metrics-operator/config/crd/bases/*
+  klt-cert-manager/config/crd/bases/*
+  operator/config/rbac/role.yaml
+  metrics-operator/config/rbac/role.yaml
+  klt-cert-manager/config/rbac/role.yaml
   helm/chart/templates
   helm/chart/rendered.yaml
+  helm/chart/values.yaml
   helmchart.yaml
 
 rules:

docs/.htmltest.yml

@@ -4,6 +4,7 @@ IgnoreDirectoryMissingTrailingSlash: true
 IgnoreDirs:
   - favicons
   - docs/crd-ref/lifecycle/
+  - community/
 IgnoreURLs:
   - "linkedin.com"
   - "localhost"

docs/config/_default/config.yaml

@@ -18,6 +18,15 @@ module:
           target: assets
         - source: archetypes
           target: archetypes
+    - path: github.com/keptn/community
+      ignoreConfig: false
+      mounts:
+        - source: ./
+          target: ./content/en/community
+          excludeFiles:
+            - "mentorship"
+        - source: "README.md"
+          target: "./content/community/_index.md"
   proxy: direct
 languages:
   en:

docs/content/en/_index.md

@@ -10,6 +10,19 @@ cascade:
       path: "/docs-*/**"
     sitemap:
       priority: 0.1
+
+  - _target:
+      path: "/community/**"
+    type: docs
+  - _target:
+      path: "/community/readme.md"
+    draft: true
+  - _target:
+      path: "/community/_index.md"
+    title: Community
+    menu:
+      main:
+        weight: 20
 ---
 
 <!-- markdownlint-disable MD033 -->
@@ -29,7 +42,7 @@ cascade:
 {{% blocks/lead color="white" %}}
 [![Keptn Lifecycle Toolkit in a Nutshell](https://img.youtube.com/vi/K-cvnZ8EtGc/0.jpg)](https://www.youtube.com/watch?v=K-cvnZ8EtGc)
 {{% /blocks/lead %}}
-
+git add
 {{< blocks/section color="dark" >}}
 {{% blocks/feature icon="fa-lightbulb" title="Keptn Recordings" %}}
 See Keptn [in Action](https://youtube.com/playlist?list=PL6i801Rjt9DbikPPILz38U1TLMrEjppzZ)

docs/go.mod

@@ -4,5 +4,6 @@ go 1.19
 
 require (
 	github.com/google/docsy/dependencies v0.6.0 // indirect
+	github.com/keptn/community v0.0.0-20230412061900-85b0a5576ec5 // indirect
 	github.com/keptn/docs-tooling v0.1.1 // indirect
 )

docs/go.sum

@@ -1,6 +1,8 @@
 github.com/FortAwesome/Font-Awesome v0.0.0-20220831210243-d3a7818c253f/go.mod h1:IUgezN/MFpCDIlFezw3L8j83oeiIuYoj28Miwr/KUYo=
 github.com/google/docsy/dependencies v0.6.0 h1:BFXDCINbp8ZuUGl/mrHjMfhCg+b1YX+hVLAA5fGW7Pc=
 github.com/google/docsy/dependencies v0.6.0/go.mod h1:EDGc2znMbGUw0RW5kWwy2oGgLt0iVXBmoq4UOqstuNE=
+github.com/keptn/community v0.0.0-20230412061900-85b0a5576ec5 h1:7B0khjhyk8QlzvxJ82Rg+Alj38ODw3VghjD04sP3jeU=
+github.com/keptn/community v0.0.0-20230412061900-85b0a5576ec5/go.mod h1:0G5nUhSv7ch9BgIFXiY7+U+cV5SbVmneysNGQwQkH8s=
 github.com/keptn/docs-tooling v0.1.1 h1:IuI0Fgs0JrtffLN05iaRZVkRMbPu6h9bxR4C8q1ApGU=
 github.com/keptn/docs-tooling v0.1.1/go.mod h1:x0iT5YsJosz6wzjQke/YaLgiXF6PV+N8QzxSAc2MY/4=
 github.com/twbs/bootstrap v4.6.2+incompatible/go.mod h1:fZTSrkpSf0/HkL0IIJzvVspTt1r9zuf7XlZau8kpcY0=

examples/support/metrics/Makefile

@@ -4,7 +4,7 @@
 
 .PHONY: 2-create-metric
 2-create-metric:
-	kubectl apply -f load-generator-job.yaml
+	kubectl apply -f metric.yaml
 
 .PHONY: 3-generate-load
 3-generate-load:

examples/support/metrics/deployment.yaml

@@ -52,6 +52,5 @@ spec:
     - name: http
       port: 9000
       protocol: TCP
-      nodePort: 30900
       targetPort: 9000
   type: ClusterIP

examples/support/metrics/metric.yaml

@@ -15,4 +15,4 @@ spec:
   provider:
     name: prometheus
   query: 'avg(rate(container_cpu_cfs_throttled_seconds_total{container="server", namespace="podtato-metrics"}[1m]))'
-  fetchIntervalSeconds: 60
+  fetchIntervalSeconds: 10

helm/chart/values.yaml

@@ -4,7 +4,7 @@ certificateOperator:
       allowPrivilegeEscalation: false
       capabilities:
         drop:
-          - ALL
+        - ALL
       readOnlyRootFilesystem: true
       runAsGroup: 65532
       runAsUser: 65532
@@ -56,7 +56,7 @@ lifecycleOperator:
       allowPrivilegeEscalation: false
       capabilities:
         drop:
-          - ALL
+        - ALL
       privileged: false
       runAsGroup: 65532
       runAsNonRoot: true
@@ -104,16 +104,16 @@ lifecycleOperator:
   topologySpreadConstraints: []
 lifecycleOperatorMetricsService:
   ports:
-    - name: metrics
-      port: 2222
-      protocol: TCP
-      targetPort: metrics
+  - name: metrics
+    port: 2222
+    protocol: TCP
+    targetPort: metrics
   type: ClusterIP
 lifecycleWebhookService:
   ports:
-    - port: 443
-      protocol: TCP
-      targetPort: 9443
+  - port: 443
+    protocol: TCP
+    targetPort: 9443
   type: ClusterIP
 metricsManagerConfig:
   controllerManagerConfigYaml:
@@ -132,7 +132,7 @@ metricsOperator:
       allowPrivilegeEscalation: false
       capabilities:
         drop:
-          - ALL
+        - ALL
     env:
       exposeKeptnMetrics: "true"
       metricsControllerLogLevel: "0"
@@ -164,23 +164,23 @@ metricsOperator:
   topologySpreadConstraints: []
 metricsOperatorService:
   ports:
-    - name: https
-      port: 8443
-      protocol: TCP
-      targetPort: https
-    - name: custom-metrics
-      port: 443
-      targetPort: custom-metrics
-    - name: metrics
-      port: 9999
-      protocol: TCP
-      targetPort: metrics
+  - name: https
+    port: 8443
+    protocol: TCP
+    targetPort: https
+  - name: custom-metrics
+    port: 443
+    targetPort: custom-metrics
+  - name: metrics
+    port: 9999
+    protocol: TCP
+    targetPort: metrics
   type: ClusterIP
 metricsWebhookService:
   ports:
-    - port: 443
-      protocol: TCP
-      targetPort: 9443
+  - port: 443
+    protocol: TCP
+    targetPort: 9443
   type: ClusterIP
 scheduler:
   nodeSelector: {}
@@ -190,7 +190,7 @@ scheduler:
       allowPrivilegeEscalation: false
       capabilities:
         drop:
-          - ALL
+        - ALL
       privileged: false
       readOnlyRootFilesystem: true
       runAsNonRoot: true
@@ -228,8 +228,8 @@ schedulerConfig:
     leaderElection:
       leaderElect: false
     profiles:
-      - plugins:
-          permit:
-            enabled:
-              - name: KLCPermit
-        schedulerName: keptn-scheduler
+    - plugins:
+        permit:
+          enabled:
+          - name: KLCPermit
+      schedulerName: keptn-scheduler

klt-cert-manager/config/rbac/role.yaml

@@ -5,44 +5,44 @@ metadata:
   creationTimestamp: null
   name: certificate-operator-role
 rules:
-  - apiGroups:
-      - admissionregistration.k8s.io
-    resources:
-      - mutatingwebhookconfigurations
-    verbs:
-      - get
-      - list
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - admissionregistration.k8s.io
-    resources:
-      - validatingwebhookconfigurations
-    verbs:
-      - get
-      - list
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - apiextensions.k8s.io
-    resources:
-      - customresourcedefinitions
-    verbs:
-      - get
-      - list
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - apps
-    resources:
-      - deployments
-    verbs:
-      - get
-      - list
-      - watch
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - mutatingwebhookconfigurations
+  verbs:
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - validatingwebhookconfigurations
+  verbs:
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - apiextensions.k8s.io
+  resources:
+  - customresourcedefinitions
+  verbs:
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - apps
+  resources:
+  - deployments
+  verbs:
+  - get
+  - list
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
@@ -51,15 +51,15 @@ metadata:
   name: certificate-operator-role
   namespace: keptn-lifecycle-toolkit-system
 rules:
-  - apiGroups:
-      - ""
-    resources:
-      - secrets
-    verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - update
-      - watch
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch