From f9f882726032538f2d2bc89a65dbe21d28c2f90e Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 14:10:46 +0530 Subject: [PATCH 01/24] Create ghcr.io.kyverno.kyverno.v1.10.7.yaml for new version of Kyverno Kyverno upgrade evaluation. --- .../ghcr.io.kyverno.kyverno.v1.10.7.yaml | 54 +++++++++++++++++++ 1 file changed, 54 insertions(+) create mode 100644 .github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml diff --git a/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml new file mode 100644 index 00000000..67c00253 --- /dev/null +++ b/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml @@ -0,0 +1,54 @@ +# +# MIT License +# +# (C) Copyright 2023-2024 Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +name: ghcr.io/kyverno/kyverno:v1.10.7 +on: + push: + paths: + - .github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml + - ghcr.io/kyverno/kyverno/v1.10.7/** + workflow_dispatch: +jobs: + build: + runs-on: ubuntu-latest + permissions: + contents: read + id-token: write + env: + CONTEXT_PATH: ghcr.io/kyverno/kyverno/v1.10.7 + DOCKER_REPO: artifactory.algol60.net/csm-docker/${{ github.ref == 'refs/heads/main' && 'stable' || 'unstable' }}/ghcr.io/kyverno/kyverno + DOCKER_TAG: v1.10.7 + steps: + - name: build-sign-scan + uses: Cray-HPE/github-actions/build-sign-scan@build-sign-scan/v2 + with: + context_path: ${{ env.CONTEXT_PATH }} + docker_repo: ${{ env.DOCKER_REPO }} + docker_tag: ${{ env.DOCKER_TAG }} + docker_username: ${{ secrets.ARTIFACTORY_ALGOL60_USERNAME }} + docker_password: ${{ secrets.ARTIFACTORY_ALGOL60_TOKEN }} + sign: ${{ github.ref == 'refs/heads/main' }} + cosign_gcp_workload_identity_provider: ${{ secrets.COSIGN_GCP_WORKLOAD_IDENTITY_PROVIDER_RSA }} + cosign_gcp_service_account: ${{ secrets.COSIGN_GCP_SERVICE_ACCOUNT_RSA }} + cosign_key: ${{ secrets.COSIGN_KEY_RSA }} + snyk_token: ${{ secrets.SNYK_TOKEN }} From ee4e4b77e8cc7abd1458e76cbf501da42c64c915 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 14:17:50 +0530 Subject: [PATCH 02/24] Create ghcr.io.kyverno.kyvernopre.v1.10.7.yaml for new version Evaluating new Kyverno version --- .../ghcr.io.kyverno.kyvernopre.v1.10.7.yaml | 54 +++++++++++++++++++ 1 file changed, 54 insertions(+) create mode 100644 .github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml diff --git a/.github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml new file mode 100644 index 00000000..2872057f --- /dev/null +++ b/.github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml @@ -0,0 +1,54 @@ +# +# MIT License +# +# (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +name: ghcr.io/kyverno/kyvernopre:v1.10.7 +on: + push: + paths: + - .github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml + - ghcr.io/kyverno/kyvernopre/v1.10.7/** + workflow_dispatch: +jobs: + build: + runs-on: ubuntu-latest + permissions: + contents: read + id-token: write + env: + CONTEXT_PATH: ghcr.io/kyverno/kyvernopre/v1.10.7 + DOCKER_REPO: artifactory.algol60.net/csm-docker/${{ github.ref == 'refs/heads/main' && 'stable' || 'unstable' }}/ghcr.io/kyverno/kyvernopre + DOCKER_TAG: v1.10.7 + steps: + - name: build-sign-scan + uses: Cray-HPE/github-actions/build-sign-scan@build-sign-scan/v2 + with: + context_path: ${{ env.CONTEXT_PATH }} + docker_repo: ${{ env.DOCKER_REPO }} + docker_tag: ${{ env.DOCKER_TAG }} + docker_username: ${{ secrets.ARTIFACTORY_ALGOL60_USERNAME }} + docker_password: ${{ secrets.ARTIFACTORY_ALGOL60_TOKEN }} + sign: ${{ github.ref == 'refs/heads/main' }} + cosign_gcp_workload_identity_provider: ${{ secrets.COSIGN_GCP_WORKLOAD_IDENTITY_PROVIDER_RSA }} + cosign_gcp_service_account: ${{ secrets.COSIGN_GCP_SERVICE_ACCOUNT_RSA }} + cosign_key: ${{ secrets.COSIGN_KEY_RSA }} + snyk_token: ${{ secrets.SNYK_TOKEN }} From c281d291218742297e1af273f174db882a4ac144 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 14:18:49 +0530 Subject: [PATCH 03/24] Update ghcr.io.kyverno.kyverno.v1.10.7.yaml with new copyright --- .github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml index 67c00253..a0425cef 100644 --- a/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml +++ b/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml @@ -1,7 +1,7 @@ # # MIT License # -# (C) Copyright 2023-2024 Hewlett Packard Enterprise Development LP +# (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP # # Permission is hereby granted, free of charge, to any person obtaining a # copy of this software and associated documentation files (the "Software"), From 84c0ce084d98002ecafe29452b4d91482932d1a4 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 14:21:26 +0530 Subject: [PATCH 04/24] Create Dockerfile for new verson of Kyverno Evaluating 1.10.7 version of Kyverno --- ghcr.io/kyverno/kyverno/v1.10.7/Dockerfile | 24 ++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 ghcr.io/kyverno/kyverno/v1.10.7/Dockerfile diff --git a/ghcr.io/kyverno/kyverno/v1.10.7/Dockerfile b/ghcr.io/kyverno/kyverno/v1.10.7/Dockerfile new file mode 100644 index 00000000..31afaeee --- /dev/null +++ b/ghcr.io/kyverno/kyverno/v1.10.7/Dockerfile @@ -0,0 +1,24 @@ +# +# MIT License +# +# (C) Copyright [2024] Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +FROM ghcr.io/kyverno/kyverno:v1.10.7 From ed9c3de41ff60eeecce0b4a826114db776fa1a9b Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 14:22:29 +0530 Subject: [PATCH 05/24] Create Dockerfile for new verson of Kyverno Evaluating 1.10.7 version of Kyverno --- ghcr.io/kyverno/kyvernopre/v1.10.7/Dockerfile | 24 +++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 ghcr.io/kyverno/kyvernopre/v1.10.7/Dockerfile diff --git a/ghcr.io/kyverno/kyvernopre/v1.10.7/Dockerfile b/ghcr.io/kyverno/kyvernopre/v1.10.7/Dockerfile new file mode 100644 index 00000000..5dfdcb60 --- /dev/null +++ b/ghcr.io/kyverno/kyvernopre/v1.10.7/Dockerfile @@ -0,0 +1,24 @@ +# +# MIT License +# +# (C) Copyright [2024] Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +FROM ghcr.io/kyverno/kyvernopre:v1.10.7 From a17855459de86184d71237b0b492802016d6bcf0 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 15:13:44 +0530 Subject: [PATCH 06/24] Create ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml for new version of kyverno Evaluating new version of Kyverno --- ...io.kyverno.cleanup-controller.v1.10.7.yaml | 54 +++++++++++++++++++ 1 file changed, 54 insertions(+) create mode 100644 .github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml diff --git a/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml new file mode 100644 index 00000000..08fd21b2 --- /dev/null +++ b/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml @@ -0,0 +1,54 @@ +# +# MIT License +# +# (C) Copyright 2023-2024 Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +name: ghcr.io/kyverno/cleanup-controller:v1.10.7 +on: + push: + paths: + - .github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml + - ghcr.io/kyverno/cleanup-controller/v1.10.7/** + workflow_dispatch: +jobs: + build: + runs-on: ubuntu-latest + permissions: + contents: read + id-token: write + env: + CONTEXT_PATH: ghcr.io/kyverno/cleanup-controller/v1.10.7 + DOCKER_REPO: artifactory.algol60.net/csm-docker/${{ github.ref == 'refs/heads/main' && 'stable' || 'unstable' }}/ghcr.io/kyverno/cleanup-controller + DOCKER_TAG: v1.10.7 + steps: + - name: build-sign-scan + uses: Cray-HPE/github-actions/build-sign-scan@build-sign-scan/v2 + with: + context_path: ${{ env.CONTEXT_PATH }} + docker_repo: ${{ env.DOCKER_REPO }} + docker_tag: ${{ env.DOCKER_TAG }} + docker_username: ${{ secrets.ARTIFACTORY_ALGOL60_USERNAME }} + docker_password: ${{ secrets.ARTIFACTORY_ALGOL60_TOKEN }} + sign: ${{ github.ref == 'refs/heads/main' }} + cosign_gcp_workload_identity_provider: ${{ secrets.COSIGN_GCP_WORKLOAD_IDENTITY_PROVIDER_RSA }} + cosign_gcp_service_account: ${{ secrets.COSIGN_GCP_SERVICE_ACCOUNT_RSA }} + cosign_key: ${{ secrets.COSIGN_KEY_RSA }} + snyk_token: ${{ secrets.SNYK_TOKEN }} From c3657d82f855f0b4ec68f013ee637b5e6cfafa6b Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 15:30:09 +0530 Subject: [PATCH 07/24] Create ghcr.io.kyverno.reports-controller.v1.10.7.yaml for new version of Kyverno Evaluating 1.10.7 version of Kyverno --- ...io.kyverno.reports-controller.v1.10.7.yaml | 53 +++++++++++++++++++ 1 file changed, 53 insertions(+) create mode 100644 .github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml diff --git a/.github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml new file mode 100644 index 00000000..7e371131 --- /dev/null +++ b/.github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml @@ -0,0 +1,53 @@ +# MIT License +# +# (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +name: ghcr.io/kyverno/reports-controller:v1.10.7 +on: + push: + paths: + - .github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml + - ghcr.io/kyverno/reports-controller/v1.10.7/** + workflow_dispatch: +jobs: + build: + runs-on: ubuntu-latest + permissions: + contents: read + id-token: write + env: + CONTEXT_PATH: ghcr.io/kyverno/reports-controller/v1.10.7 + DOCKER_REPO: artifactory.algol60.net/csm-docker/${{ github.ref == 'refs/heads/main' && 'stable' || 'unstable' }}/ghcr.io/kyverno/reports-controller + DOCKER_TAG: v1.10.7 + steps: + - name: build-sign-scan + uses: Cray-HPE/github-actions/build-sign-scan@build-sign-scan/v2 + with: + context_path: ${{ env.CONTEXT_PATH }} + docker_repo: ${{ env.DOCKER_REPO }} + docker_tag: ${{ env.DOCKER_TAG }} + docker_username: ${{ secrets.ARTIFACTORY_ALGOL60_USERNAME }} + docker_password: ${{ secrets.ARTIFACTORY_ALGOL60_TOKEN }} + sign: ${{ github.ref == 'refs/heads/main' }} + cosign_gcp_workload_identity_provider: ${{ secrets.COSIGN_GCP_WORKLOAD_IDENTITY_PROVIDER_RSA }} + cosign_gcp_service_account: ${{ secrets.COSIGN_GCP_SERVICE_ACCOUNT_RSA }} + cosign_key: ${{ secrets.COSIGN_KEY_RSA }} + snyk_token: ${{ secrets.SNYK_TOKEN }} From bdf4c5070baf95fe0e61ee5b526a684eb516beee Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 15:37:37 +0530 Subject: [PATCH 08/24] Create ghcr.io.kyverno.background--controller.v1.10.7.yaml for new version of Kyverno Evaluating new Kyverno version --- ...yverno.background--controller.v1.10.7.yaml | 53 +++++++++++++++++++ 1 file changed, 53 insertions(+) create mode 100644 .github/workflows/ghcr.io.kyverno.background--controller.v1.10.7.yaml diff --git a/.github/workflows/ghcr.io.kyverno.background--controller.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.background--controller.v1.10.7.yaml new file mode 100644 index 00000000..c78d3448 --- /dev/null +++ b/.github/workflows/ghcr.io.kyverno.background--controller.v1.10.7.yaml @@ -0,0 +1,53 @@ +# MIT License +# +# (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +name: ghcr.io/kyverno/background-controller:v1.10.7 +on: + push: + paths: + - .github/workflows/ghcr.io.kyverno.background-controller.v1.10.7.yaml + - ghcr.io/kyverno/background-controller/v1.10.7/** + workflow_dispatch: +jobs: + build: + runs-on: ubuntu-latest + permissions: + contents: read + id-token: write + env: + CONTEXT_PATH: ghcr.io/kyverno/background-controller/v1.10.7 + DOCKER_REPO: artifactory.algol60.net/csm-docker/${{ github.ref == 'refs/heads/main' && 'stable' || 'unstable' }}/ghcr.io/kyverno/background-controller + DOCKER_TAG: v1.10.7 + steps: + - name: build-sign-scan + uses: Cray-HPE/github-actions/build-sign-scan@build-sign-scan/v2 + with: + context_path: ${{ env.CONTEXT_PATH }} + docker_repo: ${{ env.DOCKER_REPO }} + docker_tag: ${{ env.DOCKER_TAG }} + docker_username: ${{ secrets.ARTIFACTORY_ALGOL60_USERNAME }} + docker_password: ${{ secrets.ARTIFACTORY_ALGOL60_TOKEN }} + sign: ${{ github.ref == 'refs/heads/main' }} + cosign_gcp_workload_identity_provider: ${{ secrets.COSIGN_GCP_WORKLOAD_IDENTITY_PROVIDER_RSA }} + cosign_gcp_service_account: ${{ secrets.COSIGN_GCP_SERVICE_ACCOUNT_RSA }} + cosign_key: ${{ secrets.COSIGN_KEY_RSA }} + snyk_token: ${{ secrets.SNYK_TOKEN }} From 2c83199ef5b2c5c8d18e5041c521846934bb2e09 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 15:39:33 +0530 Subject: [PATCH 09/24] Update ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml with copywright date --- .../workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml index 08fd21b2..e4407438 100644 --- a/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml +++ b/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml @@ -1,7 +1,7 @@ # # MIT License # -# (C) Copyright 2023-2024 Hewlett Packard Enterprise Development LP +# (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP # # Permission is hereby granted, free of charge, to any person obtaining a # copy of this software and associated documentation files (the "Software"), From 010396f59cab81f0f109996934a0d3dbe6c87151 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 15:56:33 +0530 Subject: [PATCH 10/24] Create Dockerfile for new version of Kyverno Reports-controller is new in 1.10.7 Kyverno which we are evaluating. --- .../reports-controller/v1.10.7/Dockerfile | 24 +++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 ghcr.io/kyverno/reports-controller/v1.10.7/Dockerfile diff --git a/ghcr.io/kyverno/reports-controller/v1.10.7/Dockerfile b/ghcr.io/kyverno/reports-controller/v1.10.7/Dockerfile new file mode 100644 index 00000000..8d053810 --- /dev/null +++ b/ghcr.io/kyverno/reports-controller/v1.10.7/Dockerfile @@ -0,0 +1,24 @@ +# +# MIT License +# +# (C) Copyright [2024] Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +FROM ghcr.io/kyverno/reports-controller:v1.10.7 From 1efaea16964e0b8659b48dbef78a5df3f456ae15 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 15:58:25 +0530 Subject: [PATCH 11/24] Create Dockerfile for new version of Kyverno Evaluating 1.10.7 version of Kyverno. --- .../cleanup-controller/v1.10.7/Dockerfile | 24 +++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 ghcr.io/kyverno/cleanup-controller/v1.10.7/Dockerfile diff --git a/ghcr.io/kyverno/cleanup-controller/v1.10.7/Dockerfile b/ghcr.io/kyverno/cleanup-controller/v1.10.7/Dockerfile new file mode 100644 index 00000000..0f5b495b --- /dev/null +++ b/ghcr.io/kyverno/cleanup-controller/v1.10.7/Dockerfile @@ -0,0 +1,24 @@ +# +# MIT License +# +# (C) Copyright [2024] Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +FROM ghcr.io/kyverno/cleanup-controller:v1.10.7 From 251861cd7f51fb762c374d2abccb3ae162bdf3e8 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 16:00:16 +0530 Subject: [PATCH 12/24] Create Dockerfile for new version of Kyverno Evaluating 1.10.7 version of Kyverno. --- .../background-controller/v1.10.7/Dockerfile | 24 +++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 ghcr.io/kyverno/background-controller/v1.10.7/Dockerfile diff --git a/ghcr.io/kyverno/background-controller/v1.10.7/Dockerfile b/ghcr.io/kyverno/background-controller/v1.10.7/Dockerfile new file mode 100644 index 00000000..494c9b6a --- /dev/null +++ b/ghcr.io/kyverno/background-controller/v1.10.7/Dockerfile @@ -0,0 +1,24 @@ +# +# MIT License +# +# (C) Copyright [2024] Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +FROM ghcr.io/kyverno/background-controller:v1.10.7 From e7e9061a9d63153c6f09fca83ed36e709d31572d Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 20:26:27 +0530 Subject: [PATCH 13/24] Rename ghcr.io.kyverno.background-controller.v1.10.7.yaml to ghcr.io.kyverno.background-controller.v1.10.7.yaml Rectifying typo in name. --- ....7.yaml => ghcr.io.kyverno.background-controller.v1.10.7.yaml} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename .github/workflows/{ghcr.io.kyverno.background--controller.v1.10.7.yaml => ghcr.io.kyverno.background-controller.v1.10.7.yaml} (100%) diff --git a/.github/workflows/ghcr.io.kyverno.background--controller.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.background-controller.v1.10.7.yaml similarity index 100% rename from .github/workflows/ghcr.io.kyverno.background--controller.v1.10.7.yaml rename to .github/workflows/ghcr.io.kyverno.background-controller.v1.10.7.yaml From 881a4180a94ef413fea4409a079b8f3fafa5ff71 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 21:00:24 +0530 Subject: [PATCH 14/24] Update ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml --- .../workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml index e4407438..92497717 100644 --- a/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml +++ b/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml @@ -1,4 +1,3 @@ -# # MIT License # # (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP From 9acc48371c28a766eed67347fc9355218cc29001 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 21:03:36 +0530 Subject: [PATCH 15/24] Update ghcr.io.kyverno.kyverno.v1.10.7.yaml --- .github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml index a0425cef..5bfb11ec 100644 --- a/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml +++ b/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml @@ -1,4 +1,3 @@ -# # MIT License # # (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP From dc4b289712b997e9506d178f465a45945e3d9f7c Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 21:03:53 +0530 Subject: [PATCH 16/24] Update ghcr.io.kyverno.kyvernopre.v1.10.7.yaml --- .github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml index 2872057f..6351aac6 100644 --- a/.github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml +++ b/.github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml @@ -1,4 +1,3 @@ -# # MIT License # # (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP From b8a0b8951ff9104a28b9846ba3db91476a1cc7e5 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 21:04:17 +0530 Subject: [PATCH 17/24] Update ghcr.io.kyverno.reports-controller.v1.10.7.yaml --- .../workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml index 7e371131..af1faa0c 100644 --- a/.github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml +++ b/.github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml @@ -1,3 +1,4 @@ +# # MIT License # # (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP From 1a8df52728bb0e937fbd07e4656706ec1045f69f Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Mon, 15 Jul 2024 21:07:14 +0530 Subject: [PATCH 18/24] Update Dockerfile for kyvernopre image --- ghcr.io/kyverno/kyvernopre/v1.10.7/Dockerfile | 1 - 1 file changed, 1 deletion(-) diff --git a/ghcr.io/kyverno/kyvernopre/v1.10.7/Dockerfile b/ghcr.io/kyverno/kyvernopre/v1.10.7/Dockerfile index 5dfdcb60..c444b1bf 100644 --- a/ghcr.io/kyverno/kyvernopre/v1.10.7/Dockerfile +++ b/ghcr.io/kyverno/kyvernopre/v1.10.7/Dockerfile @@ -1,4 +1,3 @@ -# # MIT License # # (C) Copyright [2024] Hewlett Packard Enterprise Development LP From 06ba32cbc34f9e80be61df00da9e12e3f396e637 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Tue, 16 Jul 2024 08:42:20 +0530 Subject: [PATCH 19/24] Copyright change --- .../ghcr.io.kyverno.background-controller.v1.10.7.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ghcr.io.kyverno.background-controller.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.background-controller.v1.10.7.yaml index c78d3448..982cd425 100644 --- a/.github/workflows/ghcr.io.kyverno.background-controller.v1.10.7.yaml +++ b/.github/workflows/ghcr.io.kyverno.background-controller.v1.10.7.yaml @@ -1,6 +1,6 @@ # MIT License # -# (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP +# (C) Copyright 2024 Hewlett Packard Enterprise Development LP # # Permission is hereby granted, free of charge, to any person obtaining a # copy of this software and associated documentation files (the "Software"), From 46f410cb40dc87e1997ea0685395a61bd4e3e99a Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Tue, 16 Jul 2024 08:43:06 +0530 Subject: [PATCH 20/24] copyright change Review comment addressed. --- .../ghcr.io.kyverno.background-controller.v1.10.7.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ghcr.io.kyverno.background-controller.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.background-controller.v1.10.7.yaml index 982cd425..b6913c3d 100644 --- a/.github/workflows/ghcr.io.kyverno.background-controller.v1.10.7.yaml +++ b/.github/workflows/ghcr.io.kyverno.background-controller.v1.10.7.yaml @@ -1,6 +1,6 @@ # MIT License # -# (C) Copyright 2024 Hewlett Packard Enterprise Development LP +# (C) Copyright [2024] Hewlett Packard Enterprise Development LP # # Permission is hereby granted, free of charge, to any person obtaining a # copy of this software and associated documentation files (the "Software"), From ba42c37f788eebfcbc07b3863ae2425dbd8ad290 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Tue, 16 Jul 2024 08:43:35 +0530 Subject: [PATCH 21/24] Copyright change. Review comment addressed. --- .../workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml index 92497717..793b6ecb 100644 --- a/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml +++ b/.github/workflows/ghcr.io.kyverno.cleanup-controller.v1.10.7.yaml @@ -1,6 +1,6 @@ # MIT License # -# (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP +# (C) Copyright [2024] Hewlett Packard Enterprise Development LP # # Permission is hereby granted, free of charge, to any person obtaining a # copy of this software and associated documentation files (the "Software"), From 0af811465370c5409d5f9baedac36baf7643fd2f Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Tue, 16 Jul 2024 08:44:03 +0530 Subject: [PATCH 22/24] Copyright change. Review comment addressed. --- .github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml index 5bfb11ec..2e3be2c4 100644 --- a/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml +++ b/.github/workflows/ghcr.io.kyverno.kyverno.v1.10.7.yaml @@ -1,6 +1,6 @@ # MIT License # -# (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP +# (C) Copyright [2024] Hewlett Packard Enterprise Development LP # # Permission is hereby granted, free of charge, to any person obtaining a # copy of this software and associated documentation files (the "Software"), From 2b456b0e364dda35c3069aa78f9e8a8a50268d0d Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Tue, 16 Jul 2024 08:44:31 +0530 Subject: [PATCH 23/24] Copyright change. Review comment addressed. --- .github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml index 6351aac6..a9b419ed 100644 --- a/.github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml +++ b/.github/workflows/ghcr.io.kyverno.kyvernopre.v1.10.7.yaml @@ -1,6 +1,6 @@ # MIT License # -# (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP +# (C) Copyright [2024] Hewlett Packard Enterprise Development LP # # Permission is hereby granted, free of charge, to any person obtaining a # copy of this software and associated documentation files (the "Software"), From 502da5cdded80f23a97ac28f47beeeea89ca9252 Mon Sep 17 00:00:00 2001 From: pradeepkumargl <80017325+pradeepkumargl@users.noreply.github.com> Date: Tue, 16 Jul 2024 08:44:58 +0530 Subject: [PATCH 24/24] Copyright change. Review comment addressed. --- .../workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml b/.github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml index af1faa0c..83313e19 100644 --- a/.github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml +++ b/.github/workflows/ghcr.io.kyverno.reports-controller.v1.10.7.yaml @@ -1,7 +1,7 @@ # # MIT License # -# (C) Copyright 2024-2025 Hewlett Packard Enterprise Development LP +# (C) Copyright [2024] Hewlett Packard Enterprise Development LP # # Permission is hereby granted, free of charge, to any person obtaining a # copy of this software and associated documentation files (the "Software"),