Skip to content

Commit 15d84e2

Browse files
ThomasVitaleThomasVitale
authored
Add Cartographer 0.7.1+tap.1 and update metadata (#170)
1 parent 4ec684f commit 15d84e2

File tree

5 files changed

+187
-4
lines changed

5 files changed

+187
-4
lines changed

‎.github/workflows/release.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ on:
55
env:
66
REGISTRY: ghcr.io
77
IMAGE_NAME: ${{ github.repository }}
8-
VERSION: 0.10.0
8+
VERSION: 0.11.0-RC1
99

1010
jobs:
1111
build:

‎README.md‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,11 +27,11 @@ This repository contains the following Carvel packages.
2727
| [knative-serving](https://github.com/kadras-io/package-for-knative-serving) | A solution built on Kubernetes to support deploying and serving of applications and functions as serverless containers. |
2828
| [kpack](https://github.com/kadras-io/package-for-kpack) | A Kubernetes-native implementation of Cloud Native Buildpacks to build source code into OCI images from within your cluster. |
2929
| [metrics-server](https://github.com/kadras-io/package-for-metrics-server) | A scalable and efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines. |
30-
| [namespace-setup](https://github.com/kadras-io/namespace-setup) | Sets up up namespaces with the necessary RBAC and Secrets to work with the Kadras platform. |
3130
| [secretgen-controller](https://github.com/carvel-dev/secretgen-controller) | Generates various types of Secrets in-cluster as well as export and import Secrets across namespaces. Maintained by [Carvel](https://github.com/carvel-dev). |
3231
| [spring-boot-conventions](https://github.com/kadras-io/package-for-spring-boot-conventions) | Defines conventions for Spring Boot workloads that will be applied by the Cartographer Convention Controller. |
33-
| [tekton-catalog](https://github.com/kadras-io/package-for-tekton-catalog) | A set of Tekton pipelines and tasks used by the Kadras platform to support testing, scanning, delivering and deploying applications. |
32+
| [tekton-catalog](https://github.com/kadras-io/tekton-catalog) | A set of Tekton pipelines and tasks used by the Kadras platform to support testing, scanning, delivering and deploying applications. |
3433
| [tekton-pipelines](https://github.com/kadras-io/package-for-tekton-pipelines) | A cloud-native solution for building CI/CD systems. |
34+
| [workspace-provisioner](https://github.com/kadras-io/workspace-provisioner) | Provisions and configures workspaces (namespaces or virtual clusters) to work with the Kadras Engineering Platform. |
3535

3636
## 🚀  Getting Started
3737

‎docs/verify-release.md‎

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
# Verifying the Package Repository Release
2+
3+
This package repository is published as an OCI artifact, signed with Sigstore [Cosign](https://docs.sigstore.dev/cosign/overview), and associated with a [SLSA Provenance](https://slsa.dev/provenance) attestation.
4+
5+
Using `cosign`, you can display the supply chain security related artifacts for the `ghcr.io/kadras-io/kadras-packages` images. Use the specific digest you'd like to verify.
6+
7+
```shell
8+
cosign tree ghcr.io/kadras-io/kadras-packages
9+
```
10+
11+
The result:
12+
13+
```shell
14+
📦 Supply Chain Security Related artifacts for an image: ghcr.io/kadras-io/kadras-packages
15+
└── 💾 Attestations for an image tag: ghcr.io/kadras-io/kadras-packages:sha256-046c6f16def6fa8ea562c84169725a4a7ef8c16dd7180137dc729f555af4a151.att
16+
└── 🍒 sha256:23f10f5d24941657ddaa5ff25117373a243abbeb51f2f81065e562e3b292ee2d
17+
└── 🔐 Signatures for an image tag: ghcr.io/kadras-io/kadras-packages:sha256-046c6f16def6fa8ea562c84169725a4a7ef8c16dd7180137dc729f555af4a151.sig
18+
└── 🍒 sha256:2e765ddc539ac475fa5275d0709e62699ebc2b47d054be5d5eb05b3d958310e6
19+
```
20+
21+
You can verify the signature and its claims:
22+
23+
```shell
24+
cosign verify \
25+
--certificate-identity-regexp https://github.com/kadras-io \
26+
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
27+
ghcr.io/kadras-io/kadras-packages | jq
28+
```
29+
30+
You can also verify the SLSA Provenance attestation associated with the image.
31+
32+
```shell
33+
cosign verify-attestation --type slsaprovenance \
34+
--certificate-identity-regexp https://github.com/slsa-framework \
35+
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
36+
ghcr.io/kadras-io/kadras-packages | jq .payload -r | base64 --decode | jq
37+
```

‎repo/packages/cartographer.packages.kadras.io/0.7.1+tap.1.yml‎

Lines changed: 146 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,146 @@
1+
apiVersion: data.packaging.carvel.dev/v1alpha1
2+
kind: Package
3+
metadata:
4+
name: cartographer.packages.kadras.io.0.7.1+tap.1
5+
spec:
6+
refName: cartographer.packages.kadras.io
7+
version: 0.7.1+tap.1
8+
releaseNotes: https://github.com/vmware-tanzu/package-for-cartographer/releases/tag/0.7.1+tap.1
9+
releasedAt: "2023-03-22T16:00:22Z"
10+
valuesSchema:
11+
openAPIv3:
12+
title: cartographer.packages.kadras.io.0.7.1+tap.1 values schema
13+
properties:
14+
ca_cert_data:
15+
type: string
16+
description: 'Optional: PEM Encoded certificate data for image registries with private CA.'
17+
default: ""
18+
excluded_components:
19+
type: array
20+
items:
21+
type: string
22+
default: []
23+
description: 'Optional: List of components to exclude from installation (e.g. [conventions])'
24+
aws_iam_role_arn:
25+
type: string
26+
description: 'Optional: Arn role that has access to pull images from ECR container registry'
27+
default: ""
28+
cartographer:
29+
type: object
30+
properties:
31+
concurrency:
32+
type: object
33+
properties:
34+
max_workloads:
35+
type: integer
36+
description: 'Optional: maximum number of Workloads to process concurrently.'
37+
default: 2
38+
max_deliveries:
39+
type: integer
40+
description: 'Optional: maximum number of Deliverables to process concurrently.'
41+
default: 2
42+
max_runnables:
43+
type: integer
44+
description: 'Optional: maximum number of Runnables to process concurrently.'
45+
default: 2
46+
resources:
47+
type: object
48+
properties:
49+
limits:
50+
type: object
51+
properties:
52+
cpu:
53+
anyOf:
54+
- type: integer
55+
- type: string
56+
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
57+
x-kubernetes-int-or-string: true
58+
description: 'Optional: maximum amount of cpu resources to allow the controller to use'
59+
default: 1000m
60+
memory:
61+
anyOf:
62+
- type: integer
63+
- type: string
64+
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
65+
x-kubernetes-int-or-string: true
66+
description: 'Optional: maximum amount of memory to allow the controller to use'
67+
default: 128Mi
68+
requests:
69+
type: object
70+
properties:
71+
cpu:
72+
anyOf:
73+
- type: integer
74+
- type: string
75+
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
76+
x-kubernetes-int-or-string: true
77+
description: 'Optional: minimum amount of cpu to reserve'
78+
default: 250m
79+
memory:
80+
anyOf:
81+
- type: integer
82+
- type: string
83+
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
84+
x-kubernetes-int-or-string: true
85+
description: 'Optional: minimum amount of memory to reserve'
86+
default: 128Mi
87+
conventions:
88+
type: object
89+
properties:
90+
resources:
91+
type: object
92+
properties:
93+
limits:
94+
type: object
95+
properties:
96+
cpu:
97+
anyOf:
98+
- type: integer
99+
- type: string
100+
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
101+
x-kubernetes-int-or-string: true
102+
description: 'Optional: maximum amount of cpu resources to allow the controller to use'
103+
default: 1000m
104+
memory:
105+
anyOf:
106+
- type: integer
107+
- type: string
108+
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
109+
x-kubernetes-int-or-string: true
110+
description: 'Optional: maximum amount of memory to allow the controller to use'
111+
default: 128Mi
112+
requests:
113+
type: object
114+
properties:
115+
cpu:
116+
anyOf:
117+
- type: integer
118+
- type: string
119+
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
120+
x-kubernetes-int-or-string: true
121+
description: 'Optional: minimum amount of cpu to reserve'
122+
default: 250m
123+
memory:
124+
anyOf:
125+
- type: integer
126+
- type: string
127+
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
128+
x-kubernetes-int-or-string: true
129+
description: 'Optional: minimum amount of memory to reserve'
130+
default: 128Mi
131+
template:
132+
spec:
133+
fetch:
134+
- imgpkgBundle:
135+
image: index.docker.io/projectcartographer/package-for-cartographer@sha256:155c08105fccb02f0300d948197f1a77a7a476e5825a3f31daa142b81dfd5ab4
136+
template:
137+
- ytt:
138+
ignoreUnknownComments: true
139+
paths:
140+
- config
141+
- kbld:
142+
paths:
143+
- .imgpkg/images.yml
144+
- '-'
145+
deploy:
146+
- kapp: {}

‎repo/packages/cartographer.packages.kadras.io/metadata.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ metadata:
77
spec:
88
displayName: Cartographer
99
providerName: VMware
10-
shortDescription: Kubernetes native Supply Chain Choreographer.
10+
shortDescription: Kubernetes Native Supply Chain Choreographer.
1111
supportDescription: https://github.com/vmware-tanzu/cartographer
1212
longDescription: |-
1313
Cartographer is a Kubernetes native Choreographer. It allows users to

0 commit comments

Comments
 (0)