Merge branch 'master' into up-doc

argoproj · Jan 6, 2023 · e79d625 · e79d625
2 parents 784c772 + c4fa841
commit e79d625
Show file tree

Hide file tree

Showing 38 changed files with 1,969 additions and 1,517 deletions.
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
@@ -2,7 +2,7 @@ blank_issues_enabled: false
 
 contact_links:
   - name: Have you read the docs?
-    url: https://argoproj.github.io/argo-rollouts/
+    url: https://argo-rollouts.readthedocs.io/
     about: Much help can be found in the docs
   - name: Ask a question
     url: https://github.com/argoproj/argo-rollouts/discussions/new

diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
@@ -17,10 +17,10 @@ jobs:
           fetch-depth: 0
       - name: Update Changelog
         run: |
-          curl -o git-chglog.tar.gz -L https://github.com/git-chglog/git-chglog/releases/download/v0.15.1/git-chglog_0.15.1_darwin_amd64.tar.gz
+          curl -o git-chglog.tar.gz -L https://github.com/git-chglog/git-chglog/releases/download/v0.15.1/git-chglog_0.15.1_linux_amd64.tar.gz
           tar -zxvf git-chglog.tar.gz
           chmod u+x git-chglog
-          ./git-chglog --sort semver -o CHANGELOG-AUTO.md v1.3.1..
+          ./git-chglog --sort semver -o CHANGELOG.md v1.3.1..
           rm git-chglog
       - name: Create Pull Request
         uses: peter-evans/create-pull-request@v4

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -6,6 +6,11 @@ on:
       tag:
         description: Git tag to build release from
         required: true
+      update_stable_tag:
+        description: 'Update stable tag'
+        required: true
+        type: boolean
+        default: 'false'
 permissions:
   contents: read
 
@@ -116,6 +121,7 @@ jobs:
       - name: Generate release artifacts
         run: |
           make release-plugins
+          make checksums
           make manifests IMAGE_TAG=${{ github.event.inputs.tag }}
 
       - name: Generate SBOM (spdx)
@@ -149,6 +155,14 @@ jobs:
 
           cd /tmp && tar -zcf sbom.tar.gz *.spdx
 
+      - name: Login to Quay.io
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v2
+        with:
+          registry: quay.io
+          username: ${{ secrets.QUAY_USERNAME }}
+          password: ${{ secrets.QUAY_ROBOT_TOKEN }}
+
       - name: Install cosign
         uses: sigstore/cosign-installer@main
         with:
@@ -159,11 +173,11 @@ jobs:
 
       - name: Get digest of controller-image
         run: |
-          echo "CONTROLLER_DIGEST=$(crane digest ${{ steps.controller-meta.outputs.tags }})" >> $GITHUB_ENV
+          echo "CONTROLLER_DIGEST=$(crane digest quay.io/argoproj/argo-rollouts:${{ github.event.inputs.tag }})" >> $GITHUB_ENV
 
       - name: Get digest of plugin-image
         run: |
-          echo "PLUGIN_DIGEST=$(crane digest ${{ steps.plugin-meta.outputs.tags }})" >> $GITHUB_ENV
+          echo "PLUGIN_DIGEST=$(crane digest quay.io/argoproj/kubectl-argo-rollouts:${{ github.event.inputs.tag }})" >> $GITHUB_ENV
 
       - name: Sign Argo Rollouts Images
         run: |
@@ -175,8 +189,9 @@ jobs:
 
       - name: Sign checksums and create public key for release assets
         run: |
-          cosign sign-blob --key env://COSIGN_PRIVATE_KEY dist/argo-rollouts-checksums.txt > dist/argo-rollouts-checksums.sig
+          cosign sign-blob --key env://COSIGN_PRIVATE_KEY ./dist/argo-rollouts-checksums.txt > ./dist/argo-rollouts-checksums.sig
           cosign public-key --key env://COSIGN_PRIVATE_KEY > ./dist/argo-rollouts-cosign.pub
+          cosign sign-blob --key env://COSIGN_PRIVATE_KEY /tmp/sbom.tar.gz > /tmp/sbom.tar.gz.sig
           # Displays the public key to share.
           cosign public-key --key env://COSIGN_PRIVATE_KEY
         env:
@@ -186,7 +201,8 @@ jobs:
       - name: update stable tag for docs
         run: |
           git tag -f stable ${{ github.event.inputs.tag }}
-          git push -f origin stable  
+          git push -f origin stable
+        if:  ${{ inputs.update_stable_tag }}
 
       - name: Draft release
         uses: softprops/action-gh-release@v1
@@ -208,5 +224,6 @@ jobs:
             manifests/notifications-install.yaml
             docs/features/kustomize/rollout_cr_schema.json
             /tmp/sbom.tar.gz
+            /tmp/sbom.tar.gz.sig
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/stale-issues-pr.yml b/.github/workflows/stale-issues-pr.yml
@@ -13,7 +13,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@v6
+      - uses: actions/stale@v7
         with:
           operations-per-run: 250
           stale-issue-message: 'This issue is stale because it has been open 60 days with no activity.'

diff --git a/.github/workflows/waiting-issues.yml b/.github/workflows/waiting-issues.yml
@@ -13,7 +13,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@v6
+      - uses: actions/stale@v7
         with:
           operations-per-run: 250
           stale-issue-message: 'This issue is stale because it has awaiting-response label for 5 days with no activity. Remove stale label or comment or this will be closed in 5 days.'