Fix CVE-2022-32149, just need recompile

Signed-off-by: Alexandre Peixoto Ferreira <alexandref75@gmail.com>
Update chart version (#9 )
2022-11-21 13:45:19 -06:00 · 2022-11-16 14:54:45 -06:00 · 2022-11-16 13:40:46 -06:00 · 2022-11-09 09:32:08 -06:00 · 2022-11-08 17:00:03 -06:00 · 2022-11-07 18:28:32 -06:00
19 changed files with 61 additions and 38 deletions
--- a/.github/workflows/smarter-org-docker-buildx.yml
+++ b/.github/workflows/smarter-org-docker-buildx.yml
@@ -0,0 +1,21 @@
+name: Docker Image BuildX CI and Publish
+
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+on:
+  schedule:
+    - cron: "19 16 * * *"
+  push:
+    branches: ["main"]
+    # Publish semver tags as releases.
+    tags: ["v*.*.*"]
+  pull_request:
+    branches: ["main"]
+  workflow_dispatch:
+
+jobs:
+  build:
+    uses: smarter-project/reusable-workflows/.github/workflows/smarter-org-docker-buildx.yml@main
--- a/.github/workflows/smarter-org-helm.yml
+++ b/.github/workflows/smarter-org-helm.yml
@@ -0,0 +1,14 @@
+# release.yaml
+name: Release Charts
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  release:
+    uses: smarter-project/reusable-workflows/.github/workflows/smarter-org-helm.yml@main
+    secrets:
+      GPG_KEYRING_BASE64: ${{ secrets.GPG_KEYRING_BASE64 }}
+      GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,6 +0,0 @@
-include:
-  - project: 'ericvh/gitlab-ci-arm-template'
-    file: '/.gitlab-ci.yml'
-
-variables:
-  CI_BUILDX_ARCHS: "linux/amd64,linux/arm64"
--- a/charts/smarter-device-manager/.helmignore
+++ b/charts/smarter-device-manager/.helmignore
--- a/charts/smarter-device-manager/Chart.yaml
+++ b/charts/smarter-device-manager/Chart.yaml
@@ -1,21 +1,17 @@
 apiVersion: v2
 name: smarter-device-manager
 description: smarter-device-manager chart for SMARTER edge devices
-home: https://gitlab.com/smarter-project/smarter-device-manager/helm
-version: 0.0.2
-appVersion: v1.20.11
+home: https://getsmarter.io
+version: 0.0.9
+appVersion: v1.20.12
 kubeVersion: ">=1.16.0-0"
 keywords:
  - kubernetes
  - device
  - hardware
 sources:
-  - https://gitlab.com/smarter-project/smarter-device-manager
-#dependencies:
-#  - name: smarter-common
-#    repository: https://gitlab.com/smarter-project/documentation
-#    version: 0.0.1
-
+  - https://github.com/smarter-project/smarter-device-manager
+icon: https://github.com/smarter-project/documentation/raw/main/ARM1636_Project_Logo_ST2_RGB_V1.png
 annotations:
  artifacthub.io/changes: |
    - Fix template
@@ -26,5 +22,5 @@ annotations:
      email: alexandref75@gmail.com
  artifacthub.io/prerelease: "false"
  artifacthub.io/signKey: |
-    fingerprint: 82AD709FEC4ECA4C84B093889BDC9DE410CFC23B
-    url: https://keybase.io/alexandref75/pgp_keys.asc
+    fingerprint: 71EDA4E3D652DC73EB09E3A5387D298C169CF24E
+    url: https://smarter-project.github.io/documentation/pgp_keys.asc
--- a/charts/smarter-device-manager/README.md
+++ b/charts/smarter-device-manager/README.md
@@ -6,9 +6,10 @@ For more information check out https://getsmarter.io

 ## TL;DR

+Assumes that this repository was cloned.
+
 ```console
-helm repo add smarter https://smarter-project.gitlab.io/documentation/charts
-helm install my-smarter-device-manager smarter-device-manager --version 0.0.2
+helm install --nsmespace=smarter --create-namespace my-smarter-device-manager charts/smarter-device-manager
 ```

 ## Overview
--- a/charts/smarter-device-manager/templates/common.yaml
+++ b/charts/smarter-device-manager/templates/common.yaml
@@ -2,7 +2,6 @@ apiVersion: apps/v1
 kind: DaemonSet
 metadata:
  name: {{ .Values.application.appName }}
-  namespace: {{ .Values.application.namespace }}
  labels:
    name: {{ .Values.application.appName }}
    role: agent
@@ -20,7 +19,11 @@ spec:
        node.kubernetes.io/bootstrap-checkpoint: "true"
    spec: 
      nodeSelector:
-        {{- toYaml .Values.configuration.nodeSelector | nindent 8 }}
+        {{- if .Values.nodeSelector }}
+        {{- toYaml .Values.nodeSelector | nindent 8 }}
+        {{- else }}
+        smarter.device-manager: enabled
+        {{- end }}
      tolerations:
      - key: "smarter.type"
        operator: "Equal"
--- a/charts/smarter-device-manager/templates/configmap.yaml
+++ b/charts/smarter-device-manager/templates/configmap.yaml
@@ -3,7 +3,6 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
  name: {{ .Values.application.appName }}
-  namespace: {{ .Values.application.namespace }}
 data:
  conf.yaml: |
  {{- toYaml .Values.config | nindent 4 }}
--- a/charts/smarter-device-manager/values.yaml
+++ b/charts/smarter-device-manager/values.yaml
@@ -1,19 +1,14 @@
 #

 application:
-  namespace: smarter
  appName: smarter-device-manager

 image:
-  repository: registry.gitlab.com/smarter-project/smarter-device-manager
+  repository: ghcr.io/smarter-project/smarter-device-manager
  # @default -- chart.appVersion
  tag: ""
  pullPolicy: IfNotPresent

-configuration:
-  nodeSelector:
-    smarter.device-manager: enabled
-
 # If a specific configurations is used it can be provided by uncommenting this lines
 # config:
 #   - devicematch: ^snd$
--- a/compile.sh
+++ b/compile.sh
@@ -36,7 +36,7 @@ function printHelp() {
 }

 BUILD_TAG=$(date -u "+%Y%m%d%H%M%S")
-REPOSITORY_NAME="registry.gitlab.com/smarter-project/smarter-device-manager/"
+REPOSITORY_NAME="ghcr.io/smarter-project/smarter-device-manager/"
 IMAGE_NAME="smarter-device-manager"
 DIRECTORY_TO_RUN=.

--- a/smarter-device-management-pod-k3s-test-xavier.yaml
+++ b/smarter-device-management-pod-k3s-test-xavier.yaml
@@ -15,7 +15,7 @@ spec:
  nodeName: smarter-jetson-xavier-4bcc2584
  containers:
  - name: smarter-device-manager
-    image: registry.gitlab.com/smarter-project/smarter-device-manager:v1.20.11
+    image: ghcr.io/smarter-project/smarter-device-manager:v1.20.11
    imagePullPolicy: IfNotPresent
    securityContext:
      allowPrivilegeEscalation: false
--- a/smarter-device-management-pod-k3s.yaml
+++ b/smarter-device-management-pod-k3s.yaml
@@ -15,7 +15,7 @@ spec:
  nodeName: <replace with node to run>
  containers:
  - name: smarter-device-manager
-    image: registry.gitlab.com/smarter-project/smarter-device-manager:v1.20.11
+    image: ghcr.io/smarter-project/smarter-device-manager:v1.20.11
    imagePullPolicy: IfNotPresent
    securityContext:
      allowPrivilegeEscalation: false
--- a/smarter-device-management-pod.yaml
+++ b/smarter-device-management-pod.yaml
@@ -15,7 +15,7 @@ spec:
  nodeName: <replace with node to run>
  containers:
  - name: smarter-device-manager
-    image: registry.gitlab.com/smarter-project/smarter-device-manager:v1.20.11
+    image: ghcr.io/smarter-project/smarter-device-manager:v1.20.11
    imagePullPolicy: IfNotPresent
    securityContext:
      allowPrivilegeEscalation: false
--- a/smarter-device-manager-ds-k3s.yaml
+++ b/smarter-device-manager-ds-k3s.yaml
@@ -34,7 +34,7 @@ spec:
      dnsPolicy: ClusterFirstWithHostNet
      containers:
      - name: smarter-device-manager
-        image: registry.gitlab.com/smarter-project/smarter-device-manager:v1.20.11
+        image: ghcr.io/smarter-project/smarter-device-manager:v1.20.11
        imagePullPolicy: IfNotPresent
        securityContext:
          allowPrivilegeEscalation: false
--- a/smarter-device-manager-ds-with-configmap-rpi-k3s.yaml
+++ b/smarter-device-manager-ds-with-configmap-rpi-k3s.yaml
@@ -34,7 +34,7 @@ spec:
      dnsPolicy: ClusterFirstWithHostNet
      containers:
      - name: smarter-device-manager
-        image: registry.gitlab.com/smarter-project/smarter-device-manager:v1.20.11
+        image: ghcr.io/smarter-project/smarter-device-manager:v1.20.11
        imagePullPolicy: IfNotPresent
        securityContext:
          allowPrivilegeEscalation: false
--- a/smarter-device-manager-ds-with-configmap-rpi.yaml
+++ b/smarter-device-manager-ds-with-configmap-rpi.yaml
@@ -34,7 +34,7 @@ spec:
      dnsPolicy: ClusterFirstWithHostNet
      containers:
      - name: smarter-device-manager
-        image: registry.gitlab.com/smarter-project/smarter-device-manager:v1.20.11
+        image: ghcr.io/smarter-project/smarter-device-manager:v1.20.11
        imagePullPolicy: IfNotPresent
        securityContext:
          allowPrivilegeEscalation: false
--- a/smarter-device-manager-ds-with-configmap-xavier-k3s.yaml
+++ b/smarter-device-manager-ds-with-configmap-xavier-k3s.yaml
@@ -34,7 +34,7 @@ spec:
      dnsPolicy: ClusterFirstWithHostNet
      containers:
      - name: smarter-device-manager
-        image: registry.gitlab.com/smarter-project/smarter-device-manager:v1.20.11
+        image: ghcr.io/smarter-project/smarter-device-manager:v1.20.11
        imagePullPolicy: IfNotPresent
        securityContext:
          allowPrivilegeEscalation: false
--- a/smarter-device-manager-ds-with-configmap-xavier.yaml
+++ b/smarter-device-manager-ds-with-configmap-xavier.yaml
@@ -34,7 +34,7 @@ spec:
      dnsPolicy: ClusterFirstWithHostNet
      containers:
      - name: smarter-device-manager
-        image: registry.gitlab.com/smarter-project/smarter-device-manager:v1.20.11
+        image: ghcr.io/smarter-project/smarter-device-manager:v1.20.11
        imagePullPolicy: IfNotPresent
        securityContext:
          allowPrivilegeEscalation: false
--- a/smarter-device-manager-ds.yaml
+++ b/smarter-device-manager-ds.yaml
@@ -34,7 +34,7 @@ spec:
      dnsPolicy: ClusterFirstWithHostNet
      containers:
      - name: smarter-device-manager
-        image: registry.gitlab.com/smarter-project/smarter-device-manager:v1.20.11
+        image: ghcr.io/smarter-project/smarter-device-manager:v1.20.11
        imagePullPolicy: IfNotPresent
        securityContext:
          allowPrivilegeEscalation: false
Author	SHA1	Message	Date
Alexandre Peixoto Ferreira	482e65a316	Fix CVE-2022-32149, just need recompile Signed-off-by: Alexandre Peixoto Ferreira <alexandref75@gmail.com>	2022-11-21 13:45:19 -06:00
Alexandre Peixoto Ferreira	51fb12e8a0	Update chart version (#9 ) Signed-off-by: Alexandre Peixoto Ferreira <alexandref75@gmail.com>	2022-11-16 14:54:45 -06:00
Alexandre Peixoto Ferreira	7effe1975a	Remove last reference to gitlab (#8 ) Signed-off-by: Alexandre Peixoto Ferreira <alexandref75@gmail.com>	2022-11-16 13:40:46 -06:00
Josh Minor	e386d5d7e0	Fix secrets in helm ci (#7 ) Signed-off-by: Josh Minor <josh.minor@arm.com>	2022-11-09 09:32:08 -06:00
Josh Minor	7b03727989	Use common yaml for builds (#6 ) * Use common yaml for builds Signed-off-by: Josh Minor <josh.minor@arm.com>	2022-11-08 17:00:03 -06:00
Alexandre Peixoto Ferreira	91a0f95107	Remove references to gitlab (#5 ) Signed-off-by: Alexandre Peixoto Ferreira <alexandref75@gmail.com>	2022-11-07 18:28:32 -06:00
Eric Van Hensbergen	321d7b5820	Switch Docker CI from gitlab to github Adds buildx signing and helm chart publication. Signed-off-by: Eric Van Hensbergen <ericvh@gmail.com>	2022-11-07 13:55:54 -06:00
Alexandre Peixoto Ferreira	3b4636fa30	Remove namespace so helm install it (#4 ) * Remove namespace so helm install it Signed-off-by: Alexandre Peixoto Ferreira <alexandref75@gmail.com> * Fix nodeSelector (Bug #9027 helm) Signed-off-by: Alexandre Peixoto Ferreira <alexandref75@gmail.com> Signed-off-by: Alexandre Peixoto Ferreira <alexandref75@gmail.com>	2022-11-07 12:45:38 -06:00