├── .editorconfig ├── .github ├── .kodiak.toml ├── CODEOWNERS ├── CONTRIBUTING.md ├── ISSUE_TEMPLATE │ ├── bug_report.md │ ├── feature_request.md │ └── question.md ├── dependabot.yml ├── stale.yml └── workflows │ ├── all-examples.yaml │ ├── docs.yaml │ ├── install-frsca.yaml │ └── scorecards.yml ├── .gitignore ├── .markdownlint.yml ├── .prettierignore ├── .yamllint.yaml ├── CODE_OF_CONDUCT.md ├── LICENSE ├── Makefile ├── README.md ├── cspell.config.yaml ├── cue.mod ├── gen │ ├── github.com │ │ └── tektoncd │ │ │ ├── pipeline │ │ │ └── pkg │ │ │ │ ├── apis │ │ │ │ ├── config │ │ │ │ │ ├── default_go_gen.cue │ │ │ │ │ ├── events_go_gen.cue │ │ │ │ │ ├── feature_flags_go_gen.cue │ │ │ │ │ ├── metrics_go_gen.cue │ │ │ │ │ ├── spire_config_go_gen.cue │ │ │ │ │ ├── store_go_gen.cue │ │ │ │ │ └── tracing_go_gen.cue │ │ │ │ ├── pipeline │ │ │ │ │ ├── pod │ │ │ │ │ │ ├── affinity_assitant_template_go_gen.cue │ │ │ │ │ │ ├── doc_go_gen.cue │ │ │ │ │ │ └── template_go_gen.cue │ │ │ │ │ ├── v1 │ │ │ │ │ │ ├── artifact_types_go_gen.cue │ │ │ │ │ │ ├── container_types_go_gen.cue │ │ │ │ │ │ ├── doc_go_gen.cue │ │ │ │ │ │ ├── matrix_types_go_gen.cue │ │ │ │ │ │ ├── param_types_go_gen.cue │ │ │ │ │ │ ├── pipeline_types_go_gen.cue │ │ │ │ │ │ ├── pipeline_validation_go_gen.cue │ │ │ │ │ │ ├── pipelineref_types_go_gen.cue │ │ │ │ │ │ ├── pipelinerun_types_go_gen.cue │ │ │ │ │ │ ├── provenance_go_gen.cue │ │ │ │ │ │ ├── resolver_types_go_gen.cue │ │ │ │ │ │ ├── result_types_go_gen.cue │ │ │ │ │ │ ├── resultref_go_gen.cue │ │ │ │ │ │ ├── task_types_go_gen.cue │ │ │ │ │ │ ├── task_validation_go_gen.cue │ │ │ │ │ │ ├── taskref_types_go_gen.cue │ │ │ │ │ │ ├── taskrun_defaults_go_gen.cue │ │ │ │ │ │ ├── taskrun_types_go_gen.cue │ │ │ │ │ │ ├── when_types_go_gen.cue │ │ │ │ │ │ └── workspace_types_go_gen.cue │ │ │ │ │ └── v1beta1 │ │ │ │ │ │ ├── artifact_types_go_gen.cue │ │ │ │ │ │ ├── cluster_task_types_go_gen.cue │ │ │ │ │ │ ├── container_types_go_gen.cue │ │ │ │ │ │ ├── conversion_error_go_gen.cue │ │ │ │ │ │ ├── customrun_types_go_gen.cue │ │ │ │ │ │ ├── doc_go_gen.cue │ │ │ │ │ │ ├── matrix_types_go_gen.cue │ │ │ │ │ │ ├── param_types_go_gen.cue │ │ │ │ │ │ ├── pipeline_interface_go_gen.cue │ │ │ │ │ │ ├── pipeline_types_go_gen.cue │ │ │ │ │ │ ├── pipeline_validation_go_gen.cue │ │ │ │ │ │ ├── pipelineref_types_go_gen.cue │ │ │ │ │ │ ├── pipelinerun_types_go_gen.cue │ │ │ │ │ │ ├── provenance_go_gen.cue │ │ │ │ │ │ ├── resolver_types_go_gen.cue │ │ │ │ │ │ ├── resource_types_go_gen.cue │ │ │ │ │ │ ├── result_types_go_gen.cue │ │ │ │ │ │ ├── resultref_go_gen.cue │ │ │ │ │ │ ├── run_interface_go_gen.cue │ │ │ │ │ │ ├── stepaction_types_go_gen.cue │ │ │ │ │ │ ├── task_conversion_go_gen.cue │ │ │ │ │ │ ├── task_interface_go_gen.cue │ │ │ │ │ │ ├── task_types_go_gen.cue │ │ │ │ │ │ ├── task_validation_go_gen.cue │ │ │ │ │ │ ├── taskref_types_go_gen.cue │ │ │ │ │ │ ├── taskrun_conversion_go_gen.cue │ │ │ │ │ │ ├── taskrun_defaults_go_gen.cue │ │ │ │ │ │ ├── taskrun_types_go_gen.cue │ │ │ │ │ │ ├── when_types_go_gen.cue │ │ │ │ │ │ └── workspace_types_go_gen.cue │ │ │ │ ├── resource │ │ │ │ │ └── v1alpha1 │ │ │ │ │ │ ├── doc_go_gen.cue │ │ │ │ │ │ └── pipeline_resource_types_go_gen.cue │ │ │ │ └── run │ │ │ │ │ └── v1beta1 │ │ │ │ │ ├── customrunstatus_types_go_gen.cue │ │ │ │ │ └── doc_go_gen.cue │ │ │ │ ├── result │ │ │ │ └── result_go_gen.cue │ │ │ │ └── spire │ │ │ │ └── config │ │ │ │ └── config_go_gen.cue │ │ │ └── triggers │ │ │ └── pkg │ │ │ └── apis │ │ │ └── triggers │ │ │ └── v1beta1 │ │ │ ├── cluster_trigger_binding_types_go_gen.cue │ │ │ ├── doc_go_gen.cue │ │ │ ├── event_listener_types_go_gen.cue │ │ │ ├── interceptor_types_go_gen.cue │ │ │ ├── param_go_gen.cue │ │ │ ├── trigger_binding_interface_go_gen.cue │ │ │ ├── trigger_binding_types_go_gen.cue │ │ │ ├── trigger_defaults_go_gen.cue │ │ │ ├── trigger_template_types_go_gen.cue │ │ │ └── trigger_types_go_gen.cue │ ├── google.golang.org │ │ └── grpc │ │ │ └── codes │ │ │ └── codes_go_gen.cue │ ├── k8s.io │ │ ├── api │ │ │ ├── batch │ │ │ │ └── v1 │ │ │ │ │ ├── register_go_gen.cue │ │ │ │ │ └── types_go_gen.cue │ │ │ ├── core │ │ │ │ └── v1 │ │ │ │ │ ├── annotation_key_constants_go_gen.cue │ │ │ │ │ ├── doc_go_gen.cue │ │ │ │ │ ├── register_go_gen.cue │ │ │ │ │ ├── types_go_gen.cue │ │ │ │ │ ├── well_known_labels_go_gen.cue │ │ │ │ │ └── well_known_taints_go_gen.cue │ │ │ └── rbac │ │ │ │ └── v1 │ │ │ │ ├── register_go_gen.cue │ │ │ │ └── types_go_gen.cue │ │ ├── apiextensions-apiserver │ │ │ └── pkg │ │ │ │ └── apis │ │ │ │ └── apiextensions │ │ │ │ └── v1 │ │ │ │ ├── doc_go_gen.cue │ │ │ │ ├── register_go_gen.cue │ │ │ │ ├── types_go_gen.cue │ │ │ │ └── types_jsonschema_go_gen.cue │ │ └── apimachinery │ │ │ └── pkg │ │ │ ├── api │ │ │ └── resource │ │ │ │ ├── amount_go_gen.cue │ │ │ │ ├── math_go_gen.cue │ │ │ │ ├── quantity_go_gen.cue │ │ │ │ └── suffix_go_gen.cue │ │ │ ├── apis │ │ │ └── meta │ │ │ │ └── v1 │ │ │ │ ├── duration_go_gen.cue │ │ │ │ ├── group_version_go_gen.cue │ │ │ │ ├── meta_go_gen.cue │ │ │ │ ├── micro_time_go_gen.cue │ │ │ │ ├── register_go_gen.cue │ │ │ │ ├── time_go_gen.cue │ │ │ │ ├── time_proto_go_gen.cue │ │ │ │ ├── types_go_gen.cue │ │ │ │ └── watch_go_gen.cue │ │ │ ├── runtime │ │ │ ├── allocator_go_gen.cue │ │ │ ├── codec_go_gen.cue │ │ │ ├── conversion_go_gen.cue │ │ │ ├── converter_go_gen.cue │ │ │ ├── doc_go_gen.cue │ │ │ ├── embedded_go_gen.cue │ │ │ ├── helper_go_gen.cue │ │ │ ├── interfaces_go_gen.cue │ │ │ ├── negotiate_go_gen.cue │ │ │ ├── splice_go_gen.cue │ │ │ ├── swagger_doc_generator_go_gen.cue │ │ │ ├── types_go_gen.cue │ │ │ └── types_proto_go_gen.cue │ │ │ ├── selection │ │ │ └── operator_go_gen.cue │ │ │ ├── types │ │ │ ├── doc_go_gen.cue │ │ │ ├── namespacedname_go_gen.cue │ │ │ ├── nodename_go_gen.cue │ │ │ ├── patch_go_gen.cue │ │ │ └── uid_go_gen.cue │ │ │ ├── util │ │ │ └── intstr │ │ │ │ └── intstr_go_gen.cue │ │ │ └── watch │ │ │ ├── doc_go_gen.cue │ │ │ ├── filter_go_gen.cue │ │ │ ├── mux_go_gen.cue │ │ │ ├── streamwatcher_go_gen.cue │ │ │ └── watch_go_gen.cue │ └── knative.dev │ │ └── pkg │ │ ├── apis │ │ ├── condition_set_go_gen.cue │ │ ├── condition_types_go_gen.cue │ │ ├── contexts_go_gen.cue │ │ ├── deprecated_go_gen.cue │ │ ├── doc_go_gen.cue │ │ ├── duck │ │ │ ├── v1 │ │ │ │ ├── addressable_types_go_gen.cue │ │ │ │ ├── auth_types_go_gen.cue │ │ │ │ ├── binding_types_go_gen.cue │ │ │ │ ├── cronjob_defaults_go_gen.cue │ │ │ │ ├── cronjob_types_go_gen.cue │ │ │ │ ├── cronjob_validation_go_gen.cue │ │ │ │ ├── destination_go_gen.cue │ │ │ │ ├── doc_go_gen.cue │ │ │ │ ├── knative_reference_go_gen.cue │ │ │ │ ├── kresource_type_go_gen.cue │ │ │ │ ├── podspec_defaults_go_gen.cue │ │ │ │ ├── podspec_types_go_gen.cue │ │ │ │ ├── podspec_validation_go_gen.cue │ │ │ │ ├── source_types_go_gen.cue │ │ │ │ └── status_types_go_gen.cue │ │ │ └── v1beta1 │ │ │ │ ├── addressable_types_go_gen.cue │ │ │ │ ├── binding_types_go_gen.cue │ │ │ │ ├── destination_go_gen.cue │ │ │ │ ├── doc_go_gen.cue │ │ │ │ ├── source_types_go_gen.cue │ │ │ │ └── status_types_go_gen.cue │ │ ├── field_error_go_gen.cue │ │ ├── interfaces_go_gen.cue │ │ ├── metadata_validation_go_gen.cue │ │ ├── url_go_gen.cue │ │ └── volatile_time_go_gen.cue │ │ └── tracker │ │ ├── doc_go_gen.cue │ │ └── interface_go_gen.cue └── module.cue ├── dependencies.go ├── docs ├── README.md ├── bootstrap.sh ├── config.toml ├── content │ ├── _index.md │ └── docs │ │ ├── _index.md │ │ ├── contributing │ │ ├── _index.md │ │ └── how-to-contribute.md │ │ ├── getting-started │ │ ├── _index.md │ │ ├── architecture.md │ │ ├── frsca_mascot-color.png │ │ ├── introduction.md │ │ └── quick-start.md │ │ ├── help │ │ ├── _index.md │ │ ├── faq.md │ │ └── using-cue.md │ │ └── slsa │ │ ├── _index.md │ │ └── frsca-slsa.md ├── diagrams │ ├── frsca.url │ ├── workspace.dsl │ └── workspace.json ├── serve.sh ├── static │ └── img │ │ ├── frsca.png │ │ └── frsca_mascot-color.png ├── templates │ ├── docs │ │ └── page.html │ └── shortcodes │ │ └── markdown.html └── themes │ └── adidoks │ ├── .gitignore │ ├── CODE_OF_CONDUCT.md │ ├── CONTRIBUTING.md │ ├── LICENSE │ ├── README.md │ ├── config.toml │ ├── config.toml.example │ ├── content │ ├── _index.md │ ├── authors │ │ ├── _index.md │ │ └── aaran-xu.md │ ├── blog │ │ ├── _index.md │ │ ├── hello-world.md │ │ ├── markdown-syntax.md │ │ ├── math-typesetting.md │ │ ├── placeholder-text.md │ │ └── say-hello-to-zola-doks.md │ ├── docs │ │ ├── _index.md │ │ ├── contributing │ │ │ ├── _index.md │ │ │ ├── code-of-conduct.md │ │ │ └── how-to-contribute.md │ │ ├── getting-started │ │ │ ├── _index.md │ │ │ ├── introduction.md │ │ │ └── quick-start.md │ │ └── help │ │ │ ├── _index.md │ │ │ └── faq.md │ └── privacy-policy │ │ └── _index.md │ ├── netlify.toml │ ├── sass │ ├── _custom.scss │ ├── bootstrap │ │ ├── LICENSE │ │ ├── README.md │ │ ├── dist │ │ │ ├── css │ │ │ │ ├── bootstrap-grid.css │ │ │ │ ├── bootstrap-grid.css.map │ │ │ │ ├── bootstrap-grid.min.css │ │ │ │ ├── bootstrap-grid.min.css.map │ │ │ │ ├── bootstrap-grid.rtl.css │ │ │ │ ├── bootstrap-grid.rtl.css.map │ │ │ │ ├── bootstrap-grid.rtl.min.css │ │ │ │ ├── bootstrap-grid.rtl.min.css.map │ │ │ │ ├── bootstrap-reboot.css │ │ │ │ ├── bootstrap-reboot.css.map │ │ │ │ ├── bootstrap-reboot.min.css │ │ │ │ ├── bootstrap-reboot.min.css.map │ │ │ │ ├── bootstrap-reboot.rtl.css │ │ │ │ ├── bootstrap-reboot.rtl.css.map │ │ │ │ ├── bootstrap-reboot.rtl.min.css │ │ │ │ ├── bootstrap-reboot.rtl.min.css.map │ │ │ │ ├── bootstrap-utilities.css │ │ │ │ ├── bootstrap-utilities.css.map │ │ │ │ ├── bootstrap-utilities.min.css │ │ │ │ ├── bootstrap-utilities.min.css.map │ │ │ │ ├── bootstrap-utilities.rtl.css │ │ │ │ ├── bootstrap-utilities.rtl.css.map │ │ │ │ ├── bootstrap-utilities.rtl.min.css │ │ │ │ ├── bootstrap-utilities.rtl.min.css.map │ │ │ │ ├── bootstrap.css │ │ │ │ ├── bootstrap.css.map │ │ │ │ ├── bootstrap.min.css │ │ │ │ ├── bootstrap.min.css.map │ │ │ │ ├── bootstrap.rtl.css │ │ │ │ ├── bootstrap.rtl.css.map │ │ │ │ ├── bootstrap.rtl.min.css │ │ │ │ └── bootstrap.rtl.min.css.map │ │ │ └── js │ │ │ │ ├── bootstrap.bundle.js │ │ │ │ ├── bootstrap.bundle.js.map │ │ │ │ ├── bootstrap.bundle.min.js │ │ │ │ ├── bootstrap.bundle.min.js.map │ │ │ │ ├── bootstrap.esm.js │ │ │ │ ├── bootstrap.esm.js.map │ │ │ │ ├── bootstrap.esm.min.js │ │ │ │ ├── bootstrap.esm.min.js.map │ │ │ │ ├── bootstrap.js │ │ │ │ ├── bootstrap.js.map │ │ │ │ ├── bootstrap.min.js │ │ │ │ └── bootstrap.min.js.map │ │ ├── js │ │ │ ├── dist │ │ │ │ ├── alert.js │ │ │ │ ├── alert.js.map │ │ │ │ ├── base-component.js │ │ │ │ ├── base-component.js.map │ │ │ │ ├── button.js │ │ │ │ ├── button.js.map │ │ │ │ ├── carousel.js │ │ │ │ ├── carousel.js.map │ │ │ │ ├── collapse.js │ │ │ │ ├── collapse.js.map │ │ │ │ ├── dom │ │ │ │ │ ├── data.js │ │ │ │ │ ├── data.js.map │ │ │ │ │ ├── event-handler.js │ │ │ │ │ ├── event-handler.js.map │ │ │ │ │ ├── manipulator.js │ │ │ │ │ ├── manipulator.js.map │ │ │ │ │ ├── selector-engine.js │ │ │ │ │ └── selector-engine.js.map │ │ │ │ ├── dropdown.js │ │ │ │ ├── dropdown.js.map │ │ │ │ ├── modal.js │ │ │ │ ├── modal.js.map │ │ │ │ ├── offcanvas.js │ │ │ │ ├── offcanvas.js.map │ │ │ │ ├── popover.js │ │ │ │ ├── popover.js.map │ │ │ │ ├── scrollspy.js │ │ │ │ ├── scrollspy.js.map │ │ │ │ ├── tab.js │ │ │ │ ├── tab.js.map │ │ │ │ ├── toast.js │ │ │ │ ├── toast.js.map │ │ │ │ ├── tooltip.js │ │ │ │ └── tooltip.js.map │ │ │ └── src │ │ │ │ ├── alert.js │ │ │ │ ├── base-component.js │ │ │ │ ├── button.js │ │ │ │ ├── carousel.js │ │ │ │ ├── collapse.js │ │ │ │ ├── dom │ │ │ │ ├── data.js │ │ │ │ ├── event-handler.js │ │ │ │ ├── manipulator.js │ │ │ │ └── selector-engine.js │ │ │ │ ├── dropdown.js │ │ │ │ ├── modal.js │ │ │ │ ├── offcanvas.js │ │ │ │ ├── popover.js │ │ │ │ ├── scrollspy.js │ │ │ │ ├── tab.js │ │ │ │ ├── toast.js │ │ │ │ ├── tooltip.js │ │ │ │ └── util │ │ │ │ ├── index.js │ │ │ │ ├── sanitizer.js │ │ │ │ └── scrollbar.js │ │ ├── package.json │ │ └── scss │ │ │ ├── _accordion.scss │ │ │ ├── _alert.scss │ │ │ ├── _badge.scss │ │ │ ├── _breadcrumb.scss │ │ │ ├── _button-group.scss │ │ │ ├── _buttons.scss │ │ │ ├── _card.scss │ │ │ ├── _carousel.scss │ │ │ ├── _close.scss │ │ │ ├── _containers.scss │ │ │ ├── _dropdown.scss │ │ │ ├── _forms.scss │ │ │ ├── _functions.scss │ │ │ ├── _grid.scss │ │ │ ├── _helpers.scss │ │ │ ├── _images.scss │ │ │ ├── _list-group.scss │ │ │ ├── _mixins.scss │ │ │ ├── _modal.scss │ │ │ ├── _nav.scss │ │ │ ├── _navbar.scss │ │ │ ├── _offcanvas.scss │ │ │ ├── _pagination.scss │ │ │ ├── _popover.scss │ │ │ ├── _progress.scss │ │ │ ├── _reboot.scss │ │ │ ├── _root.scss │ │ │ ├── _spinners.scss │ │ │ ├── _tables.scss │ │ │ ├── _toasts.scss │ │ │ ├── _tooltip.scss │ │ │ ├── _transitions.scss │ │ │ ├── _type.scss │ │ │ ├── _utilities.scss │ │ │ ├── _variables.scss │ │ │ ├── bootstrap-grid.scss │ │ │ ├── bootstrap-reboot.scss │ │ │ ├── bootstrap-utilities.scss │ │ │ ├── bootstrap.scss │ │ │ ├── forms │ │ │ ├── _floating-labels.scss │ │ │ ├── _form-check.scss │ │ │ ├── _form-control.scss │ │ │ ├── _form-range.scss │ │ │ ├── _form-select.scss │ │ │ ├── _form-text.scss │ │ │ ├── _input-group.scss │ │ │ ├── _labels.scss │ │ │ └── _validation.scss │ │ │ ├── helpers │ │ │ ├── _clearfix.scss │ │ │ ├── _colored-links.scss │ │ │ ├── _position.scss │ │ │ ├── _ratio.scss │ │ │ ├── _stretched-link.scss │ │ │ ├── _text-truncation.scss │ │ │ └── _visually-hidden.scss │ │ │ ├── mixins │ │ │ ├── _alert.scss │ │ │ ├── _border-radius.scss │ │ │ ├── _box-shadow.scss │ │ │ ├── _breakpoints.scss │ │ │ ├── _buttons.scss │ │ │ ├── _caret.scss │ │ │ ├── _clearfix.scss │ │ │ ├── _container.scss │ │ │ ├── _deprecate.scss │ │ │ ├── _forms.scss │ │ │ ├── _gradients.scss │ │ │ ├── _grid.scss │ │ │ ├── _image.scss │ │ │ ├── _list-group.scss │ │ │ ├── _lists.scss │ │ │ ├── _pagination.scss │ │ │ ├── _reset-text.scss │ │ │ ├── _resize.scss │ │ │ ├── _table-variants.scss │ │ │ ├── _text-truncate.scss │ │ │ ├── _transition.scss │ │ │ ├── _utilities.scss │ │ │ └── _visually-hidden.scss │ │ │ ├── utilities │ │ │ └── _api.scss │ │ │ └── vendor │ │ │ └── _rfs.scss │ ├── common │ │ ├── _dark.scss │ │ ├── _fonts.scss │ │ ├── _global.scss │ │ └── _variables.scss │ ├── components │ │ ├── _alerts.scss │ │ ├── _buttons.scss │ │ ├── _code.scss │ │ ├── _comments.scss │ │ ├── _doks.scss │ │ ├── _footnote.scss │ │ ├── _forms.scss │ │ ├── _images.scss │ │ ├── _search.scss │ │ ├── _syntax.scss │ │ └── _tables.scss │ ├── layouts │ │ ├── _footer.scss │ │ ├── _header.scss │ │ ├── _pages.scss │ │ ├── _posts.scss │ │ └── _sidebar.scss │ └── main.scss │ ├── screenshot.png │ ├── static │ ├── _headers │ ├── android-chrome-192x192.png │ ├── android-chrome-512x512.png │ ├── apple-touch-icon.png │ ├── doks.png │ ├── doks.svg │ ├── favicon-16x16.png │ ├── favicon-32x32.png │ ├── favicon.ico │ ├── fonts │ │ └── vendor │ │ │ └── jost │ │ │ ├── jost-v4-latin-500.woff │ │ │ ├── jost-v4-latin-500.woff2 │ │ │ ├── jost-v4-latin-500italic.woff │ │ │ ├── jost-v4-latin-500italic.woff2 │ │ │ ├── jost-v4-latin-700.woff │ │ │ ├── jost-v4-latin-700.woff2 │ │ │ ├── jost-v4-latin-700italic.woff │ │ │ ├── jost-v4-latin-700italic.woff2 │ │ │ ├── jost-v4-latin-italic.woff │ │ │ ├── jost-v4-latin-italic.woff2 │ │ │ ├── jost-v4-latin-regular.woff │ │ │ └── jost-v4-latin-regular.woff2 │ ├── index.js │ ├── js │ │ ├── main.js │ │ └── search.js │ ├── logo-doks.png │ ├── plugins │ │ └── elasticlunr.min.js │ └── site.webmanifest │ ├── templates │ ├── 404.html │ ├── authors │ │ ├── list.html │ │ └── single.html │ ├── base.html │ ├── blog │ │ ├── page.html │ │ └── section.html │ ├── docs │ │ ├── page.html │ │ └── section.html │ ├── index.html │ ├── macros │ │ ├── docs-edit-page.html │ │ ├── docs-navigation.html │ │ ├── docs-sidebar.html │ │ ├── docs-toc.html │ │ ├── footer.html │ │ ├── head.html │ │ ├── header.html │ │ ├── javascript.html │ │ ├── math.html │ │ ├── page-publish-metadata.html │ │ └── section-navigation.html │ ├── page.html │ ├── robots.txt │ └── section.html │ └── theme.toml ├── examples ├── buildpacks │ ├── README.md │ ├── buildpacks-run.sh │ ├── buildpacks-setup.sh │ ├── buildpacks.cue │ └── dual-storage-backend.md ├── cosign │ ├── README.md │ ├── cosign.cue │ ├── cosign.sh │ ├── cyclonedx.sbom │ ├── pipeline-ko.yaml │ ├── spdx.sbom │ └── task-ko.yaml ├── examples.cue ├── go-pipeline │ ├── README.md │ ├── go-pipeline-run.sh │ ├── go-pipeline-setup.sh │ └── go-pipeline.cue ├── gradle-pipeline │ ├── README.md │ ├── gradle-pipeline-run.sh │ ├── gradle-pipeline-setup.sh │ └── gradle-pipeline.cue ├── ibm-tutorial │ ├── README.md │ ├── ibm-tutorial-run.sh │ ├── ibm-tutorial-setup.sh │ └── ibm-tutorial.cue ├── maven │ ├── README.md │ ├── maven-pkg.cue │ ├── maven-run.sh │ └── maven-setup.sh └── sample-pipeline │ ├── README.md │ ├── sample-pipeline-run.sh │ ├── sample-pipeline-setup.sh │ └── sample-pipeline.cue ├── frsca-words.txt ├── frsca.cue ├── frsca_mascot-color.png ├── frsca_tool.cue ├── go.mod ├── go.sum ├── platform ├── .gitignore ├── 00-kubernetes-minikube-setup.sh ├── 02-setup-certs.sh ├── 04-registry-setup.sh ├── 05-registry-proxy.sh ├── 06-gitea-install.sh ├── 10-tekton-pipelines-install.sh ├── 11-tekton-pipeline-setup.sh ├── 12-tekton-chains-install.sh ├── 13-tekton-chains-setup.sh ├── 14-tekton-tasks.sh ├── 20-spire-install.sh ├── 21-spire-setup.sh ├── 25-vault-install.sh ├── 26-vault-setup.sh ├── 30-kyverno-install.sh ├── 31-kyverno-setup.sh ├── 35-opa-gatekeeper-setup.sh ├── 40-efk-stack-setup │ ├── 40-efk-stack-setup.sh │ └── README.md ├── 50-example-mirror.sh ├── components │ ├── cert-manager │ │ ├── ca.yaml │ │ ├── gitea.yaml │ │ ├── registry.yaml │ │ └── spire.yaml │ ├── elastic │ │ └── values.yaml │ ├── gitea │ │ └── values.yaml │ ├── kyverno │ │ └── patch_container_args.json │ ├── registry │ │ └── registry.yaml │ ├── spire │ │ └── values.yaml │ ├── tekton │ │ ├── chains │ │ │ ├── patch_ca_certs.json │ │ │ ├── patch_config_dual_backend.yaml │ │ │ ├── patch_config_kms.yaml │ │ │ ├── patch_config_oci.yaml │ │ │ └── patch_spire.json │ │ ├── pipelines │ │ │ └── patch_ca_certs.json │ │ ├── tasks │ │ │ ├── patch_buildpacks.yml │ │ │ ├── patch_git_clone.yml │ │ │ ├── patch_gradle.yml │ │ │ ├── patch_kaniko.yml │ │ │ └── patch_trivy.yml │ │ └── triggers │ │ │ └── rbac.yaml │ └── vault │ │ └── values.yaml ├── vault │ └── .gitignore ├── vendor │ ├── cert-manager │ │ └── release │ │ │ └── cert-manager.yaml │ ├── elastic │ │ └── chart │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── Makefile │ │ │ ├── README.md │ │ │ ├── examples │ │ │ ├── config │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ ├── test │ │ │ │ │ └── goss.yaml │ │ │ │ ├── values.yaml │ │ │ │ └── watcher_encryption_key │ │ │ ├── default │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ ├── rolling_upgrade.sh │ │ │ │ └── test │ │ │ │ │ └── goss.yaml │ │ │ ├── docker-for-mac │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ └── values.yaml │ │ │ ├── kubernetes-kind │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ ├── values-local-path.yaml │ │ │ │ └── values.yaml │ │ │ ├── microk8s │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ └── values.yaml │ │ │ ├── migration │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ ├── client.yaml │ │ │ │ ├── data.yaml │ │ │ │ └── master.yaml │ │ │ ├── minikube │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ └── values.yaml │ │ │ ├── multi │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ ├── client.yaml │ │ │ │ ├── data.yaml │ │ │ │ ├── master.yaml │ │ │ │ └── test │ │ │ │ │ └── goss.yaml │ │ │ ├── networkpolicy │ │ │ │ ├── Makefile │ │ │ │ └── values.yaml │ │ │ ├── openshift │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ ├── test │ │ │ │ │ └── goss.yaml │ │ │ │ └── values.yaml │ │ │ ├── security │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ ├── test │ │ │ │ │ └── goss.yaml │ │ │ │ └── values.yaml │ │ │ └── upgrade │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ ├── scripts │ │ │ │ └── upgrade.sh │ │ │ │ ├── test │ │ │ │ └── goss.yaml │ │ │ │ └── values.yaml │ │ │ ├── templates │ │ │ ├── NOTES.txt │ │ │ ├── _helpers.tpl │ │ │ ├── configmap.yaml │ │ │ ├── ingress.yaml │ │ │ ├── networkpolicy.yaml │ │ │ ├── poddisruptionbudget.yaml │ │ │ ├── podsecuritypolicy.yaml │ │ │ ├── role.yaml │ │ │ ├── rolebinding.yaml │ │ │ ├── service.yaml │ │ │ ├── serviceaccount.yaml │ │ │ ├── statefulset.yaml │ │ │ └── test │ │ │ │ └── test-elasticsearch-health.yaml │ │ │ └── values.yaml │ ├── fluent │ │ └── chart │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── README.md │ │ │ ├── ci │ │ │ └── ci-values.yaml │ │ │ ├── dashboards │ │ │ └── fluent-bit.json │ │ │ ├── templates │ │ │ ├── NOTES.txt │ │ │ ├── _helpers.tpl │ │ │ ├── _pod.tpl │ │ │ ├── clusterrole.yaml │ │ │ ├── clusterrolebinding.yaml │ │ │ ├── configmap-dashboards.yaml │ │ │ ├── configmap-luascripts.yaml │ │ │ ├── configmap.yaml │ │ │ ├── daemonset.yaml │ │ │ ├── deployment.yaml │ │ │ ├── hpa.yaml │ │ │ ├── ingress.yaml │ │ │ ├── networkpolicy.yaml │ │ │ ├── pdb.yaml │ │ │ ├── prometheusrule.yaml │ │ │ ├── psp.yaml │ │ │ ├── scc.yaml │ │ │ ├── service.yaml │ │ │ ├── serviceaccount.yaml │ │ │ ├── servicemonitor.yaml │ │ │ └── tests │ │ │ │ └── test-connection.yaml │ │ │ └── values.yaml │ ├── gatekeeper │ │ └── chart │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── README.md │ │ │ ├── crds │ │ │ ├── assign-customresourcedefinition.yaml │ │ │ ├── assignmetadata-customresourcedefinition.yaml │ │ │ ├── config-customresourcedefinition.yaml │ │ │ ├── constraintpodstatus-customresourcedefinition.yaml │ │ │ ├── constrainttemplate-customresourcedefinition.yaml │ │ │ ├── constrainttemplatepodstatus-customresourcedefinition.yaml │ │ │ └── mutatorpodstatus-customresourcedefinition.yaml │ │ │ ├── templates │ │ │ ├── _helpers.tpl │ │ │ ├── gatekeeper-admin-podsecuritypolicy.yaml │ │ │ ├── gatekeeper-admin-serviceaccount.yaml │ │ │ ├── gatekeeper-audit-deployment.yaml │ │ │ ├── gatekeeper-controller-manager-deployment.yaml │ │ │ ├── gatekeeper-controller-manager-poddisruptionbudget.yaml │ │ │ ├── gatekeeper-critical-pods-resourcequota.yaml │ │ │ ├── gatekeeper-manager-role-clusterrole.yaml │ │ │ ├── gatekeeper-manager-role-role.yaml │ │ │ ├── gatekeeper-manager-rolebinding-clusterrolebinding.yaml │ │ │ ├── gatekeeper-manager-rolebinding-rolebinding.yaml │ │ │ ├── gatekeeper-mutating-webhook-configuration-mutatingwebhookconfiguration.yaml │ │ │ ├── gatekeeper-validating-webhook-configuration-validatingwebhookconfiguration.yaml │ │ │ ├── gatekeeper-webhook-server-cert-secret.yaml │ │ │ ├── gatekeeper-webhook-service-service.yaml │ │ │ ├── namespace-post-install.yaml │ │ │ └── upgrade-crds-hook.yaml │ │ │ └── values.yaml │ ├── gitea │ │ └── chart │ │ │ ├── .drone.yml │ │ │ ├── .helmignore │ │ │ ├── .markdownlint.yaml │ │ │ ├── Chart.lock │ │ │ ├── Chart.yaml │ │ │ ├── LICENSE │ │ │ ├── README.md │ │ │ ├── charts │ │ │ ├── mariadb │ │ │ │ ├── .helmignore │ │ │ │ ├── Chart.lock │ │ │ │ ├── Chart.yaml │ │ │ │ ├── README.md │ │ │ │ ├── charts │ │ │ │ │ └── common │ │ │ │ │ │ ├── .helmignore │ │ │ │ │ │ ├── Chart.yaml │ │ │ │ │ │ ├── README.md │ │ │ │ │ │ ├── templates │ │ │ │ │ │ ├── _affinities.tpl │ │ │ │ │ │ ├── _capabilities.tpl │ │ │ │ │ │ ├── _errors.tpl │ │ │ │ │ │ ├── _images.tpl │ │ │ │ │ │ ├── _ingress.tpl │ │ │ │ │ │ ├── _labels.tpl │ │ │ │ │ │ ├── _names.tpl │ │ │ │ │ │ ├── _secrets.tpl │ │ │ │ │ │ ├── _storage.tpl │ │ │ │ │ │ ├── _tplvalues.tpl │ │ │ │ │ │ ├── _utils.tpl │ │ │ │ │ │ ├── _warnings.tpl │ │ │ │ │ │ └── validations │ │ │ │ │ │ │ ├── _cassandra.tpl │ │ │ │ │ │ │ ├── _mariadb.tpl │ │ │ │ │ │ │ ├── _mongodb.tpl │ │ │ │ │ │ │ ├── _postgresql.tpl │ │ │ │ │ │ │ ├── _redis.tpl │ │ │ │ │ │ │ └── _validations.tpl │ │ │ │ │ │ └── values.yaml │ │ │ │ ├── ci │ │ │ │ │ └── values-production-with-rbac-and-metrics.yaml │ │ │ │ ├── templates │ │ │ │ │ ├── NOTES.txt │ │ │ │ │ ├── _helpers.tpl │ │ │ │ │ ├── extra-list.yaml │ │ │ │ │ ├── primary │ │ │ │ │ │ ├── configmap.yaml │ │ │ │ │ │ ├── initialization-configmap.yaml │ │ │ │ │ │ ├── pdb.yaml │ │ │ │ │ │ ├── statefulset.yaml │ │ │ │ │ │ └── svc.yaml │ │ │ │ │ ├── role.yaml │ │ │ │ │ ├── rolebinding.yaml │ │ │ │ │ ├── secondary │ │ │ │ │ │ ├── configmap.yaml │ │ │ │ │ │ ├── pdb.yaml │ │ │ │ │ │ ├── statefulset.yaml │ │ │ │ │ │ └── svc.yaml │ │ │ │ │ ├── secrets.yaml │ │ │ │ │ ├── serviceaccount.yaml │ │ │ │ │ └── servicemonitor.yaml │ │ │ │ ├── values.schema.json │ │ │ │ └── values.yaml │ │ │ ├── memcached │ │ │ │ ├── .helmignore │ │ │ │ ├── Chart.lock │ │ │ │ ├── Chart.yaml │ │ │ │ ├── README.md │ │ │ │ ├── charts │ │ │ │ │ └── common │ │ │ │ │ │ ├── .helmignore │ │ │ │ │ │ ├── Chart.yaml │ │ │ │ │ │ ├── README.md │ │ │ │ │ │ ├── templates │ │ │ │ │ │ ├── _affinities.tpl │ │ │ │ │ │ ├── _capabilities.tpl │ │ │ │ │ │ ├── _errors.tpl │ │ │ │ │ │ ├── _images.tpl │ │ │ │ │ │ ├── _ingress.tpl │ │ │ │ │ │ ├── _labels.tpl │ │ │ │ │ │ ├── _names.tpl │ │ │ │ │ │ ├── _secrets.tpl │ │ │ │ │ │ ├── _storage.tpl │ │ │ │ │ │ ├── _tplvalues.tpl │ │ │ │ │ │ ├── _utils.tpl │ │ │ │ │ │ ├── _warnings.tpl │ │ │ │ │ │ └── validations │ │ │ │ │ │ │ ├── _cassandra.tpl │ │ │ │ │ │ │ ├── _mariadb.tpl │ │ │ │ │ │ │ ├── _mongodb.tpl │ │ │ │ │ │ │ ├── _postgresql.tpl │ │ │ │ │ │ │ ├── _redis.tpl │ │ │ │ │ │ │ └── _validations.tpl │ │ │ │ │ │ └── values.yaml │ │ │ │ ├── ci │ │ │ │ │ └── values-production.yaml │ │ │ │ ├── templates │ │ │ │ │ ├── NOTES.txt │ │ │ │ │ ├── _helpers.tpl │ │ │ │ │ ├── deployment.yaml │ │ │ │ │ ├── extra-list.yaml │ │ │ │ │ ├── secrets.yaml │ │ │ │ │ ├── service.yaml │ │ │ │ │ ├── serviceaccount.yaml │ │ │ │ │ ├── servicemonitor.yaml │ │ │ │ │ ├── statefulset.yaml │ │ │ │ │ └── svc-metrics.yaml │ │ │ │ └── values.yaml │ │ │ ├── mysql │ │ │ │ ├── .helmignore │ │ │ │ ├── Chart.yaml │ │ │ │ ├── README.md │ │ │ │ ├── ci │ │ │ │ │ └── values-production.yaml │ │ │ │ ├── files │ │ │ │ │ └── docker-entrypoint-initdb.d │ │ │ │ │ │ └── README.md │ │ │ │ ├── templates │ │ │ │ │ ├── NOTES.txt │ │ │ │ │ ├── _helpers.tpl │ │ │ │ │ ├── initialization-configmap.yaml │ │ │ │ │ ├── master-configmap.yaml │ │ │ │ │ ├── master-statefulset.yaml │ │ │ │ │ ├── master-svc.yaml │ │ │ │ │ ├── secrets.yaml │ │ │ │ │ ├── serviceaccount.yaml │ │ │ │ │ ├── servicemonitor.yaml │ │ │ │ │ ├── slave-configmap.yaml │ │ │ │ │ ├── slave-statefulset.yaml │ │ │ │ │ └── slave-svc.yaml │ │ │ │ ├── values-production.yaml │ │ │ │ └── values.yaml │ │ │ └── postgresql │ │ │ │ ├── .helmignore │ │ │ │ ├── Chart.lock │ │ │ │ ├── Chart.yaml │ │ │ │ ├── README.md │ │ │ │ ├── charts │ │ │ │ └── common │ │ │ │ │ ├── .helmignore │ │ │ │ │ ├── Chart.yaml │ │ │ │ │ ├── README.md │ │ │ │ │ ├── templates │ │ │ │ │ ├── _affinities.tpl │ │ │ │ │ ├── _capabilities.tpl │ │ │ │ │ ├── _errors.tpl │ │ │ │ │ ├── _images.tpl │ │ │ │ │ ├── _ingress.tpl │ │ │ │ │ ├── _labels.tpl │ │ │ │ │ ├── _names.tpl │ │ │ │ │ ├── _secrets.tpl │ │ │ │ │ ├── _storage.tpl │ │ │ │ │ ├── _tplvalues.tpl │ │ │ │ │ ├── _utils.tpl │ │ │ │ │ ├── _warnings.tpl │ │ │ │ │ └── validations │ │ │ │ │ │ ├── _cassandra.tpl │ │ │ │ │ │ ├── _mariadb.tpl │ │ │ │ │ │ ├── _mongodb.tpl │ │ │ │ │ │ ├── _postgresql.tpl │ │ │ │ │ │ ├── _redis.tpl │ │ │ │ │ │ └── _validations.tpl │ │ │ │ │ └── values.yaml │ │ │ │ ├── ci │ │ │ │ ├── commonAnnotations.yaml │ │ │ │ ├── default-values.yaml │ │ │ │ └── shmvolume-disabled-values.yaml │ │ │ │ ├── files │ │ │ │ ├── README.md │ │ │ │ ├── conf.d │ │ │ │ │ └── README.md │ │ │ │ └── docker-entrypoint-initdb.d │ │ │ │ │ └── README.md │ │ │ │ ├── templates │ │ │ │ ├── NOTES.txt │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── extended-config-configmap.yaml │ │ │ │ ├── extra-list.yaml │ │ │ │ ├── initialization-configmap.yaml │ │ │ │ ├── metrics-configmap.yaml │ │ │ │ ├── metrics-svc.yaml │ │ │ │ ├── networkpolicy.yaml │ │ │ │ ├── podsecuritypolicy.yaml │ │ │ │ ├── prometheusrule.yaml │ │ │ │ ├── role.yaml │ │ │ │ ├── rolebinding.yaml │ │ │ │ ├── secrets.yaml │ │ │ │ ├── serviceaccount.yaml │ │ │ │ ├── servicemonitor.yaml │ │ │ │ ├── statefulset-readreplicas.yaml │ │ │ │ ├── statefulset.yaml │ │ │ │ ├── svc-headless.yaml │ │ │ │ ├── svc-read.yaml │ │ │ │ └── svc.yaml │ │ │ │ ├── values.schema.json │ │ │ │ └── values.yaml │ │ │ ├── templates │ │ │ ├── NOTES.txt │ │ │ ├── _helpers.tpl │ │ │ ├── gitea │ │ │ │ ├── config.yaml │ │ │ │ ├── deprecation.yaml │ │ │ │ ├── http-svc.yaml │ │ │ │ ├── ingress.yaml │ │ │ │ ├── init.yaml │ │ │ │ ├── servicemonitor.yaml │ │ │ │ ├── ssh-svc.yaml │ │ │ │ └── statefulset.yaml │ │ │ └── tests │ │ │ │ └── test-http-connection.yaml │ │ │ └── values.yaml │ ├── kibana │ │ └── chart │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── Makefile │ │ │ ├── README.md │ │ │ ├── examples │ │ │ ├── default │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ └── test │ │ │ │ │ └── goss.yaml │ │ │ ├── openshift │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ ├── test │ │ │ │ │ └── goss.yaml │ │ │ │ └── values.yml │ │ │ ├── security │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ ├── test │ │ │ │ │ └── goss.yaml │ │ │ │ └── values.yaml │ │ │ └── upgrade │ │ │ │ ├── Makefile │ │ │ │ ├── README.md │ │ │ │ ├── test │ │ │ │ └── goss.yaml │ │ │ │ └── values.yaml │ │ │ ├── templates │ │ │ ├── _helpers.tpl │ │ │ ├── configmap.yaml │ │ │ ├── deployment.yaml │ │ │ ├── ingress.yaml │ │ │ └── service.yaml │ │ │ └── values.yaml │ ├── kyverno │ │ └── release │ │ │ └── install.yaml │ ├── spire │ │ ├── crd │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── README.md │ │ │ ├── templates │ │ │ │ ├── spire.spiffe.io_clusterfederatedtrustdomains.yaml │ │ │ │ ├── spire.spiffe.io_clusterspiffeids.yaml │ │ │ │ └── spire.spiffe.io_clusterstaticentries.yaml │ │ │ └── values.yaml │ │ └── server │ │ │ ├── .helmignore │ │ │ ├── Chart.lock │ │ │ ├── Chart.yaml │ │ │ ├── LICENSE │ │ │ ├── README.md │ │ │ ├── charts │ │ │ ├── spiffe-csi-driver │ │ │ │ ├── .helmignore │ │ │ │ ├── Chart.yaml │ │ │ │ ├── README.md │ │ │ │ ├── templates │ │ │ │ │ ├── NOTES.txt │ │ │ │ │ ├── _helpers.tpl │ │ │ │ │ ├── daemonset.yaml │ │ │ │ │ ├── scc-restricted-csi.yaml │ │ │ │ │ ├── scc-spiffe-csi-driver.yaml │ │ │ │ │ ├── serviceaccount.yaml │ │ │ │ │ └── spiffe-csi-driver.yaml │ │ │ │ └── values.yaml │ │ │ ├── spiffe-oidc-discovery-provider │ │ │ │ ├── .helmignore │ │ │ │ ├── Chart.yaml │ │ │ │ ├── README.md │ │ │ │ ├── files │ │ │ │ │ └── test │ │ │ │ │ │ └── jwt-decode.sh │ │ │ │ ├── templates │ │ │ │ │ ├── NOTES.txt │ │ │ │ │ ├── _helpers.tpl │ │ │ │ │ ├── certificate.yaml │ │ │ │ │ ├── configmap.yaml │ │ │ │ │ ├── deployment.yaml │ │ │ │ │ ├── hpa.yaml │ │ │ │ │ ├── ingress.yaml │ │ │ │ │ ├── issuer.yaml │ │ │ │ │ ├── podmonitor.yaml │ │ │ │ │ ├── pre-delete-hook.yaml │ │ │ │ │ ├── scc-spire-oidc-discovery-provider.yaml │ │ │ │ │ ├── service.yaml │ │ │ │ │ ├── serviceaccount.yaml │ │ │ │ │ └── tests │ │ │ │ │ │ ├── test-connection.yaml │ │ │ │ │ │ └── test-keys.yaml │ │ │ │ └── values.yaml │ │ │ ├── spire-agent │ │ │ │ ├── .helmignore │ │ │ │ ├── Chart.yaml │ │ │ │ ├── README.md │ │ │ │ ├── templates │ │ │ │ │ ├── NOTES.txt │ │ │ │ │ ├── _helpers.tpl │ │ │ │ │ ├── configmap.yaml │ │ │ │ │ ├── daemonset.yaml │ │ │ │ │ ├── podmonitor.yaml │ │ │ │ │ ├── pre-upgrade-hook.yaml │ │ │ │ │ ├── roles.yaml │ │ │ │ │ ├── scc-spire-agent.yaml │ │ │ │ │ └── serviceaccount.yaml │ │ │ │ └── values.yaml │ │ │ ├── spire-server │ │ │ │ ├── .helmignore │ │ │ │ ├── Chart.yaml │ │ │ │ ├── README.md │ │ │ │ ├── templates │ │ │ │ │ ├── NOTES.txt │ │ │ │ │ ├── _helpers.tpl │ │ │ │ │ ├── aws-kms-configmap.yaml │ │ │ │ │ ├── aws-kms-secret.yaml │ │ │ │ │ ├── bundle-configmap.yaml │ │ │ │ │ ├── configmap.yaml │ │ │ │ │ ├── controller-manager-cluster-ids.yaml │ │ │ │ │ ├── controller-manager-configmap.yaml │ │ │ │ │ ├── controller-manager-ftd.yaml │ │ │ │ │ ├── controller-manager-roles.yaml │ │ │ │ │ ├── controller-manager-service.yaml │ │ │ │ │ ├── controller-manager-static-entries.yaml │ │ │ │ │ ├── controller-manager-webhook.yaml │ │ │ │ │ ├── federation-certificate.yaml │ │ │ │ │ ├── federation-ingress.yaml │ │ │ │ │ ├── federation-issuer.yaml │ │ │ │ │ ├── hpa.yaml │ │ │ │ │ ├── ingress.yaml │ │ │ │ │ ├── issuer.yaml │ │ │ │ │ ├── kubeconfig-secret.yaml │ │ │ │ │ ├── podmonitor.yaml │ │ │ │ │ ├── post-install-hook.yaml │ │ │ │ │ ├── post-upgrade-hook.yaml │ │ │ │ │ ├── pre-delete-hook.yaml │ │ │ │ │ ├── pre-upgrade-hook.yaml │ │ │ │ │ ├── roles.yaml │ │ │ │ │ ├── secret.yaml │ │ │ │ │ ├── server-resource.yaml │ │ │ │ │ ├── service.yaml │ │ │ │ │ ├── serviceaccount.yaml │ │ │ │ │ ├── tests │ │ │ │ │ │ ├── test-connection.yaml │ │ │ │ │ │ └── test-tornjak-connection.yaml │ │ │ │ │ ├── tornjak-config.yaml │ │ │ │ │ ├── tornjak-ingress.yaml │ │ │ │ │ ├── tornjak-service.yaml │ │ │ │ │ ├── tpm-configmap.yaml │ │ │ │ │ └── upstream-ca-secret.yaml │ │ │ │ └── values.yaml │ │ │ └── tornjak-frontend │ │ │ │ ├── Chart.yaml │ │ │ │ ├── README.md │ │ │ │ ├── templates │ │ │ │ ├── NOTES.txt │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── deployment.yaml │ │ │ │ ├── ingress.yaml │ │ │ │ ├── service.yaml │ │ │ │ ├── serviceaccount.yaml │ │ │ │ └── tests │ │ │ │ │ └── test-tornjak-connection.yaml │ │ │ │ └── values.yaml │ │ │ ├── templates │ │ │ ├── NOTES.txt │ │ │ ├── _spire-lib.tpl │ │ │ ├── spire-server-namespace.yaml │ │ │ └── spire-system-namespace.yaml │ │ │ └── values.yaml │ ├── tekton │ │ ├── catalog │ │ │ └── main │ │ │ │ ├── pipeline │ │ │ │ └── buildpacks │ │ │ │ │ └── 0.2 │ │ │ │ │ └── buildpacks.yaml │ │ │ │ └── task │ │ │ │ ├── buildpacks-phases │ │ │ │ └── 0.2 │ │ │ │ │ └── buildpacks-phases.yaml │ │ │ │ ├── buildpacks │ │ │ │ └── 0.5 │ │ │ │ │ └── buildpacks.yaml │ │ │ │ ├── git-clone │ │ │ │ └── 0.9 │ │ │ │ │ └── git-clone.yaml │ │ │ │ ├── golang-build │ │ │ │ └── 0.3 │ │ │ │ │ └── golang-build.yaml │ │ │ │ ├── golang-test │ │ │ │ └── 0.2 │ │ │ │ │ └── golang-test.yaml │ │ │ │ ├── jib-gradle │ │ │ │ └── 0.4 │ │ │ │ │ └── jib-gradle.yaml │ │ │ │ ├── kaniko │ │ │ │ └── 0.6 │ │ │ │ │ └── kaniko.yaml │ │ │ │ ├── maven │ │ │ │ └── 0.4 │ │ │ │ │ └── maven.yaml │ │ │ │ └── trivy-scanner │ │ │ │ └── 0.2 │ │ │ │ └── trivy-scanner.yaml │ │ ├── chains │ │ │ └── release.yaml │ │ ├── pipeline │ │ │ └── release.yaml │ │ └── triggers │ │ │ ├── interceptors.yaml │ │ │ └── release.yaml │ ├── vault │ │ └── chart │ │ │ ├── .circleci │ │ │ └── config.yml │ │ │ ├── .github │ │ │ ├── ISSUE_TEMPLATE │ │ │ │ ├── bug_report.md │ │ │ │ ├── config.yml │ │ │ │ └── feature_request.md │ │ │ └── workflows │ │ │ │ ├── acceptance.yaml │ │ │ │ ├── jira.yaml │ │ │ │ ├── setup-test-tools │ │ │ │ └── action.yaml │ │ │ │ └── tests.yaml │ │ │ ├── .gitignore │ │ │ ├── .helmignore │ │ │ ├── CHANGELOG.md │ │ │ ├── CONTRIBUTING.md │ │ │ ├── Chart.yaml │ │ │ ├── LICENSE.md │ │ │ ├── Makefile │ │ │ ├── README.md │ │ │ ├── templates │ │ │ ├── NOTES.txt │ │ │ ├── _helpers.tpl │ │ │ ├── csi-clusterrole.yaml │ │ │ ├── csi-clusterrolebinding.yaml │ │ │ ├── csi-daemonset.yaml │ │ │ ├── csi-serviceaccount.yaml │ │ │ ├── injector-certs-secret.yaml │ │ │ ├── injector-clusterrole.yaml │ │ │ ├── injector-clusterrolebinding.yaml │ │ │ ├── injector-deployment.yaml │ │ │ ├── injector-disruptionbudget.yaml │ │ │ ├── injector-mutating-webhook.yaml │ │ │ ├── injector-network-policy.yaml │ │ │ ├── injector-psp-role.yaml │ │ │ ├── injector-psp-rolebinding.yaml │ │ │ ├── injector-psp.yaml │ │ │ ├── injector-role.yaml │ │ │ ├── injector-rolebinding.yaml │ │ │ ├── injector-service.yaml │ │ │ ├── injector-serviceaccount.yaml │ │ │ ├── server-clusterrolebinding.yaml │ │ │ ├── server-config-configmap.yaml │ │ │ ├── server-discovery-role.yaml │ │ │ ├── server-discovery-rolebinding.yaml │ │ │ ├── server-disruptionbudget.yaml │ │ │ ├── server-ha-active-service.yaml │ │ │ ├── server-ha-standby-service.yaml │ │ │ ├── server-headless-service.yaml │ │ │ ├── server-ingress.yaml │ │ │ ├── server-network-policy.yaml │ │ │ ├── server-psp-role.yaml │ │ │ ├── server-psp-rolebinding.yaml │ │ │ ├── server-psp.yaml │ │ │ ├── server-route.yaml │ │ │ ├── server-service.yaml │ │ │ ├── server-serviceaccount.yaml │ │ │ ├── server-statefulset.yaml │ │ │ ├── tests │ │ │ │ └── server-test.yaml │ │ │ └── ui-service.yaml │ │ │ ├── values.openshift.yaml │ │ │ ├── values.schema.json │ │ │ └── values.yaml │ ├── vendor-helm-all.sh │ ├── vendor-helm-chart.sh │ ├── vendor.sh │ └── vendor.yaml └── wait-for-pipelinerun.sh ├── resources ├── docker-config-empty.json ├── kyverno │ └── admission-control-policy │ │ ├── admission-control-verify-attestation.cue │ │ ├── admission-control-verify-image-resources.cue │ │ ├── admission-control-verify-image.cue │ │ └── kyverno.cue ├── opa-gatekeeper │ └── enable-mutating.yaml └── tekton │ └── tasks │ ├── .gitkeep │ └── buildpacks.yaml ├── scripts ├── gen-keys.sh └── provenance.sh ├── shell.nix └── tools └── install-ci.sh /.editorconfig: -------------------------------------------------------------------------------- 1 | root = true 2 | 3 | [*] 4 | charset = utf-8 5 | end_of_line = lf 6 | indent_size = 2 7 | indent_style = space 8 | insert_final_newline = true 9 | trim_trailing_whitespace = true 10 | 11 | [*.py] 12 | indent_size = 4 13 | 14 | [Makefile] 15 | indent_style = tab 16 | -------------------------------------------------------------------------------- /.github/.kodiak.toml: -------------------------------------------------------------------------------- 1 | version = 1 2 | 3 | [merge] 4 | blacklist_title_regex = "^WIP:.*" 5 | blacklist_labels = ["do-not-merge"] 6 | delete_branch_on_merge = true 7 | method = "squash" 8 | prioritize_ready_to_merge = true 9 | require_automerge_label = false 10 | 11 | [update] 12 | always = true 13 | require_automerge_label = false 14 | 15 | [approve] 16 | auto_approve_usernames = ["dependabot"] 17 | -------------------------------------------------------------------------------- /.github/CODEOWNERS: -------------------------------------------------------------------------------- 1 | # Global Owners 2 | * @buildsec/buildsec-maintainers 3 | -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/question.md: -------------------------------------------------------------------------------- 1 | --- 2 | name: Question 3 | about: Need help? Ask away! 4 | labels: question 5 | --- 6 | 7 | # Question 8 | 9 | 10 | 11 | ## Problem/Question 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | ## Context 20 | 21 | 22 | -------------------------------------------------------------------------------- /.github/dependabot.yml: -------------------------------------------------------------------------------- 1 | version: 2 2 | updates: 3 | # Maintain dependencies for GitHub Actions. 4 | - package-ecosystem: 'github-actions' 5 | directory: '/' 6 | schedule: 7 | interval: 'weekly' 8 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | base64_* 2 | docs/public/ 3 | hello.txt 4 | kubernetes/scripts/*.json 5 | kubernetes/scripts/payload 6 | kubernetes/scripts/signature 7 | target/ 8 | *.pub 9 | .vscode/ 10 | -------------------------------------------------------------------------------- /.markdownlint.yml: -------------------------------------------------------------------------------- 1 | # Disable some built-in rules. 2 | no-duplicate-header: 3 | allow_different_nesting: true 4 | line-length: 5 | tables: false 6 | code_blocks: false 7 | single-h1: false 8 | # MD033/no-inline-html - Inline HTML 9 | MD033: 10 | # Allowed elements 11 | allowed_elements: [p, img] 12 | -------------------------------------------------------------------------------- /.prettierignore: -------------------------------------------------------------------------------- 1 | /docs/themes 2 | /platform 3 | -------------------------------------------------------------------------------- /.yamllint.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | extends: default 3 | 4 | rules: 5 | document-start: disable 6 | line-length: disable 7 | truthy: disable 8 | 9 | ignore: | 10 | platform/vendor 11 | -------------------------------------------------------------------------------- /cspell.config.yaml: -------------------------------------------------------------------------------- 1 | $schema: https://raw.githubusercontent.com/streetsidesoftware/cspell/main/cspell.schema.json 2 | version: '0.2' 3 | dictionaryDefinitions: 4 | - name: frsca-words 5 | path: './frsca-words.txt' 6 | addWords: true 7 | dictionaries: 8 | - frsca-words 9 | ignorePaths: 10 | - '/frsca-words.txt' 11 | - '/docs/themes' 12 | - '/go.mod' 13 | - '/platform/vendor' 14 | - 'frsca_tool.cue' 15 | - 'go.sum' 16 | - 'cue.mod' 17 | - '*.cue' 18 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/config/store_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/config 4 | 5 | package config 6 | 7 | import sc "github.com/tektoncd/pipeline/pkg/spire/config" 8 | 9 | _#cfgKey: {} 10 | 11 | // Config holds the collection of configurations that we attach to contexts. 12 | // +k8s:deepcopy-gen=false 13 | #Config: { 14 | Defaults?: null | #Defaults @go(,*Defaults) 15 | FeatureFlags?: null | #FeatureFlags @go(,*FeatureFlags) 16 | Metrics?: null | #Metrics @go(,*Metrics) 17 | SpireConfig?: null | sc.#SpireConfig @go(,*sc.SpireConfig) 18 | Events?: null | #Events @go(,*Events) 19 | Tracing?: null | #Tracing @go(,*Tracing) 20 | } 21 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/pod/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/pod 4 | 5 | // Package pod contains non-versioned pod configuration 6 | // +k8s:openapi-gen=true 7 | // +gencrdrefdocs:unversionedTypes 8 | // +groupName=tekton.dev 9 | package pod 10 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/v1 4 | 5 | // Package v1 contains API Schema definitions for the pipeline v1 API group 6 | // +k8s:openapi-gen=true 7 | // +k8s:deepcopy-gen=package,register 8 | // +k8s:conversion-gen=github.com/tektoncd/pipeline/pkg/apis/pipeline 9 | // +k8s:defaulter-gen=TypeMeta 10 | // +groupName=tekton.dev 11 | package v1 12 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1/pipeline_validation_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/v1 4 | 5 | package v1 6 | 7 | _#taskRef: "taskRef" 8 | _#taskSpec: "taskSpec" 9 | _#pipelineRef: "pipelineRef" 10 | _#pipelineSpec: "pipelineSpec" 11 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1/pipelineref_types_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/v1 4 | 5 | package v1 6 | 7 | // PipelineRef can be used to refer to a specific instance of a Pipeline. 8 | #PipelineRef: { 9 | // Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names 10 | name?: string @go(Name) 11 | 12 | // API version of the referent 13 | // +optional 14 | apiVersion?: string @go(APIVersion) 15 | 16 | // ResolverRef allows referencing a Pipeline in a remote location 17 | // like a git repo. This field is only supported when the alpha 18 | // feature gate is enabled. 19 | // +optional 20 | ResolverRef?: #ResolverRef 21 | } 22 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1/taskrun_defaults_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/v1 4 | 5 | package v1 6 | 7 | #ManagedByLabelKey: "app.kubernetes.io/managed-by" 8 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1/conversion_error_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1 4 | 5 | package v1beta1 6 | 7 | import "knative.dev/pkg/apis" 8 | 9 | // ConditionTypeConvertible is a Warning condition that is set on 10 | // resources when they cannot be converted to warn of a forthcoming 11 | // breakage. 12 | #ConditionTypeConvertible: apis.#ConditionType & "Convertible" 13 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1 4 | 5 | // Package v1beta1 contains API Schema definitions for the pipeline v1beta1 API group 6 | // +k8s:openapi-gen=true 7 | // +k8s:deepcopy-gen=package,register 8 | // +k8s:conversion-gen=github.com/tektoncd/pipeline/pkg/apis/pipeline 9 | // +k8s:defaulter-gen=TypeMeta 10 | // +groupName=tekton.dev 11 | package v1beta1 12 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1/pipeline_interface_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1 4 | 5 | package v1beta1 6 | 7 | // PipelineObject is implemented by Pipeline 8 | #PipelineObject: _ 9 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1/pipeline_validation_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1 4 | 5 | package v1beta1 6 | 7 | _#taskRef: "taskRef" 8 | _#taskSpec: "taskSpec" 9 | _#pipelineRef: "pipelineRef" 10 | _#pipelineSpec: "pipelineSpec" 11 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1/run_interface_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1 4 | 5 | package v1beta1 6 | 7 | // RunObject is implemented by CustomRun and Run 8 | #RunObject: _ 9 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1/task_interface_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1 4 | 5 | package v1beta1 6 | 7 | // TaskObject is implemented by Task and ClusterTask 8 | #TaskObject: _ 9 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1/taskrun_conversion_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1 4 | 5 | package v1beta1 6 | 7 | _#cloudEventsAnnotationKey: "tekton.dev/v1beta1CloudEvents" 8 | _#resourcesResultAnnotationKey: "tekton.dev/v1beta1ResourcesResult" 9 | _#resourcesStatusAnnotationKey: "tekton.dev/v1beta1ResourcesStatus" 10 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1/taskrun_defaults_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1 4 | 5 | package v1beta1 6 | 7 | #ManagedByLabelKey: "app.kubernetes.io/managed-by" 8 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/resource/v1alpha1/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/resource/v1alpha1 4 | 5 | // Package v1alpha1 contains API Schema definitions for the pipeline v1alpha1 API group 6 | // +k8s:deepcopy-gen=package,register 7 | // +k8s:conversion-gen=github.com/tektoncd/pipeline/pkg/apis/resource 8 | // +k8s:defaulter-gen=TypeMeta 9 | // +groupName=tekton.dev 10 | package v1alpha1 11 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/pipeline/pkg/apis/run/v1beta1/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/pipeline/pkg/apis/run/v1beta1 4 | 5 | // Package v1beta1 contains API Schema definitions for the customrun v1beta1 API group 6 | // +groupName=tekton.dev 7 | package v1beta1 8 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/triggers/pkg/apis/triggers/v1beta1/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/triggers/pkg/apis/triggers/v1beta1 4 | 5 | // package v1beta1 contains API Schema definitions for the triggers v1beta1 API group 6 | // +k8s:openapi-gen=true 7 | // +k8s:deepcopy-gen=package,register 8 | // +k8s:conversion-gen=github.com/tektoncd/triggers/pkg/apis/triggers 9 | // +k8s:defaulter-gen=TypeMeta 10 | // +groupName=triggers.tekton.dev 11 | package v1beta1 12 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/triggers/pkg/apis/triggers/v1beta1/trigger_binding_interface_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/triggers/pkg/apis/triggers/v1beta1 4 | 5 | package v1beta1 6 | 7 | // TriggerBindingInterface is implemented by TriggerBinding and ClusterTriggerBinding 8 | #TriggerBindingInterface: _ 9 | -------------------------------------------------------------------------------- /cue.mod/gen/github.com/tektoncd/triggers/pkg/apis/triggers/v1beta1/trigger_defaults_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go github.com/tektoncd/triggers/pkg/apis/triggers/v1beta1 4 | 5 | package v1beta1 6 | 7 | _#triggerSpecBindingArray: [...null | #TriggerSpecBinding] 8 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/api/batch/v1/register_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/api/batch/v1 4 | 5 | package v1 6 | 7 | #GroupName: "batch" 8 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/api/core/v1/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/api/core/v1 4 | 5 | // Package v1 is the v1 version of the core API. 6 | package v1 7 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/api/core/v1/register_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/api/core/v1 4 | 5 | package v1 6 | 7 | #GroupName: "" 8 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/api/rbac/v1/register_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/api/rbac/v1 4 | 5 | package v1 6 | 7 | #GroupName: "rbac.authorization.k8s.io" 8 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1 4 | 5 | // Package v1 is the v1 version of the API. 6 | package v1 7 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/register_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1 4 | 5 | package v1 6 | 7 | #GroupName: "apiextensions.k8s.io" 8 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/api/resource/math_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/api/resource 4 | 5 | package resource 6 | 7 | // maxInt64Factors is the highest value that will be checked when removing factors of 10 from an int64. 8 | // It is also the maximum decimal digits that can be represented with an int64. 9 | _#maxInt64Factors: 18 10 | 11 | _#mostNegative: -9223372036854775808 12 | 13 | _#mostPositive: 9223372036854775807 14 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/api/resource/suffix_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/api/resource 4 | 5 | package resource 6 | 7 | _#suffix: string 8 | 9 | // suffixer can interpret and construct suffixes. 10 | _#suffixer: _ 11 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/duration_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/apis/meta/v1 4 | 5 | package v1 6 | 7 | // Duration is a wrapper around time.Duration which supports correct 8 | // marshaling to YAML and JSON. In particular, it marshals into strings, which 9 | // can be used as map keys in json. 10 | #Duration: _ 11 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/micro_time_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/apis/meta/v1 4 | 5 | package v1 6 | 7 | #RFC3339Micro: "2006-01-02T15:04:05.000000Z07:00" 8 | 9 | // MicroTime is version of Time with microsecond level precision. 10 | // 11 | // +protobuf.options.marshal=false 12 | // +protobuf.as=Timestamp 13 | // +protobuf.options.(gogoproto.goproto_stringer)=false 14 | #MicroTime: _ 15 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/register_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/apis/meta/v1 4 | 5 | package v1 6 | 7 | #GroupName: "meta.k8s.io" 8 | 9 | #WatchEventKind: "WatchEvent" 10 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1/time_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/apis/meta/v1 4 | 5 | package v1 6 | 7 | // Time is a wrapper around time.Time which supports correct 8 | // marshaling to YAML and JSON. Wrappers are provided for many 9 | // of the factory methods that the time package offers. 10 | // 11 | // +protobuf.options.marshal=false 12 | // +protobuf.as=Timestamp 13 | // +protobuf.options.(gogoproto.goproto_stringer)=false 14 | #Time: _ 15 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/runtime/allocator_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/runtime 4 | 5 | package runtime 6 | 7 | // SimpleAllocator a wrapper around make([]byte) 8 | // conforms to the MemoryAllocator interface 9 | #SimpleAllocator: {} 10 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/runtime/conversion_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/runtime 4 | 5 | // Package runtime defines conversions between generic types and structs to map query strings 6 | // to struct objects. 7 | package runtime 8 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/runtime/converter_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/runtime 4 | 5 | package runtime 6 | 7 | // UnstructuredConverter is an interface for converting between interface{} 8 | // and map[string]interface representation. 9 | #UnstructuredConverter: _ 10 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/runtime/embedded_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/runtime 4 | 5 | package runtime 6 | 7 | _#encodable: _ 8 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/runtime/helper_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/runtime 4 | 5 | package runtime 6 | 7 | // MultiObjectTyper returns the types of objects across multiple schemes in order. 8 | #MultiObjectTyper: [...#ObjectTyper] 9 | 10 | _#defaultFramer: {} 11 | 12 | // WithVersionEncoder serializes an object and ensures the GVK is set. 13 | #WithVersionEncoder: { 14 | Version: #GroupVersioner 15 | Encoder: #Encoder 16 | ObjectTyper: #ObjectTyper 17 | } 18 | 19 | // WithoutVersionDecoder clears the group version kind of a deserialized object. 20 | #WithoutVersionDecoder: { 21 | Decoder: #Decoder 22 | } 23 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/runtime/negotiate_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/runtime 4 | 5 | package runtime 6 | 7 | // NegotiateError is returned when a ClientNegotiator is unable to locate 8 | // a serializer for the requested operation. 9 | #NegotiateError: { 10 | ContentType: string 11 | Stream: bool 12 | } 13 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/runtime/splice_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/runtime 4 | 5 | package runtime 6 | 7 | // Splice is the interface that wraps the Splice method. 8 | // 9 | // Splice moves data from given slice without copying the underlying data for 10 | // efficiency purpose. Therefore, the caller should make sure the underlying 11 | // data is not changed later. 12 | #Splice: _ 13 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/runtime/swagger_doc_generator_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/runtime 4 | 5 | package runtime 6 | 7 | // Pair of strings. We keed the name of fields and the doc 8 | #Pair: { 9 | Name: string 10 | Doc: string 11 | } 12 | 13 | // KubeTypes is an array to represent all available types in a parsed file. [0] is for the type itself 14 | #KubeTypes: [...#Pair] 15 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/runtime/types_proto_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/runtime 4 | 5 | package runtime 6 | 7 | #ProtobufMarshaller: _ 8 | 9 | #ProtobufReverseMarshaller: _ 10 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/types/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/types 4 | 5 | // Package types implements various generic types used throughout kubernetes. 6 | package types 7 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/types/namespacedname_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/types 4 | 5 | package types 6 | 7 | #NamespacedName: { 8 | Namespace: string 9 | Name: string 10 | } 11 | 12 | #Separator: 47 // '/' 13 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/types/uid_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/types 4 | 5 | package types 6 | 7 | // UID is a type that holds unique ID values, including UUIDs. Because we 8 | // don't ONLY use UUIDs, this is an alias to string. Being a type captures 9 | // intent and helps make sure that UIDs and names do not get conflated. 10 | #UID: string 11 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/watch/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/watch 4 | 5 | // Package watch contains a generic watchable interface, and a fake for 6 | // testing code that uses the watch interface. 7 | package watch 8 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/watch/filter_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/watch 4 | 5 | package watch 6 | 7 | // Recorder records all events that are sent from the watch until it is closed. 8 | #Recorder: { 9 | Interface: #Interface 10 | } 11 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/watch/mux_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/watch 4 | 5 | package watch 6 | 7 | // FullChannelBehavior controls how the Broadcaster reacts if a watcher's watch 8 | // channel is full. 9 | #FullChannelBehavior: int // #enumFullChannelBehavior 10 | 11 | #enumFullChannelBehavior: 12 | #WaitIfChannelFull | 13 | #DropIfChannelFull 14 | 15 | #values_FullChannelBehavior: { 16 | WaitIfChannelFull: #WaitIfChannelFull 17 | DropIfChannelFull: #DropIfChannelFull 18 | } 19 | 20 | #WaitIfChannelFull: #FullChannelBehavior & 0 21 | #DropIfChannelFull: #FullChannelBehavior & 1 22 | 23 | _#incomingQueueLength: 25 24 | 25 | _#internalRunFunctionMarker: "internal-do-function" 26 | -------------------------------------------------------------------------------- /cue.mod/gen/k8s.io/apimachinery/pkg/watch/streamwatcher_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go k8s.io/apimachinery/pkg/watch 4 | 5 | package watch 6 | 7 | // Decoder allows StreamWatcher to watch any stream for which a Decoder can be written. 8 | #Decoder: _ 9 | 10 | // Reporter hides the details of how an error is turned into a runtime.Object for 11 | // reporting on a watch stream since this package may not import a higher level report. 12 | #Reporter: _ 13 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/condition_set_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis 4 | 5 | package apis 6 | 7 | // ConditionsAccessor is the interface for a Resource that implements the getter and 8 | // setter for accessing a Condition collection. 9 | // +k8s:deepcopy-gen=true 10 | #ConditionsAccessor: _ 11 | 12 | // ConditionAccessor is used to access a condition through it's type 13 | #ConditionAccessor: _ 14 | 15 | // ConditionManager allows a resource to operate on its Conditions using higher 16 | // order operations. 17 | #ConditionManager: _ 18 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/deprecated_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis 4 | 5 | package apis 6 | 7 | _#deprecatedPrefix: "Deprecated" 8 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis 4 | 5 | // +k8s:deepcopy-gen=package 6 | package apis 7 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/duck/v1/auth_types_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis/duck/v1 4 | 5 | package v1 6 | 7 | // AuthStatus is meant to provide the generated service account name 8 | // in the resource status. 9 | #AuthStatus: { 10 | // ServiceAccountName is the name of the generated service account 11 | // used for this components OIDC authentication. 12 | serviceAccountName?: null | string @go(ServiceAccountName,*string) 13 | } 14 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/duck/v1/cronjob_defaults_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis/duck/v1 4 | 5 | package v1 6 | 7 | // cdKey is used for associating a CronJobDefaulter with a context.Context 8 | _#cdKey: {} 9 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/duck/v1/cronjob_types_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis/duck/v1 4 | 5 | package v1 6 | 7 | import ( 8 | metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" 9 | batchv1 "k8s.io/api/batch/v1" 10 | ) 11 | 12 | // CronJob is a wrapper around CronJob resource, which supports our interfaces 13 | // for webhooks 14 | #CronJob: { 15 | metav1.#TypeMeta 16 | metadata?: metav1.#ObjectMeta @go(ObjectMeta) 17 | spec?: batchv1.#CronJobSpec @go(Spec) 18 | } 19 | 20 | // CronJobList is a list of CronJob resources 21 | #CronJobList: { 22 | metav1.#TypeMeta 23 | metadata: metav1.#ListMeta @go(ListMeta) 24 | items: [...#CronJob] @go(Items,[]CronJob) 25 | } 26 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/duck/v1/cronjob_validation_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis/duck/v1 4 | 5 | package v1 6 | 7 | // cvKey is used for associating a CronJobValidator with a context.Context 8 | _#cvKey: {} 9 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/duck/v1/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis/duck/v1 4 | 5 | // +k8s:deepcopy-gen=package 6 | // +groupName=duck.knative.dev 7 | package v1 8 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/duck/v1/podspec_defaults_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis/duck/v1 4 | 5 | package v1 6 | 7 | // psdKey is used for associating a PodSpecDefaulter with a context.Context 8 | _#psdKey: {} 9 | 10 | // pdKey is used for associating a PodDefaulter with a context.Context 11 | _#pdKey: {} 12 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/duck/v1/podspec_validation_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis/duck/v1 4 | 5 | package v1 6 | 7 | // psvKey is used for associating a PodSpecValidator with a context.Context 8 | _#psvKey: {} 9 | 10 | // pvKey is used for associating a PodValidator with a context.Context 11 | _#pvKey: {} 12 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/duck/v1beta1/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis/duck/v1beta1 4 | 5 | // +k8s:deepcopy-gen=package 6 | // +groupName=duck.knative.dev 7 | package v1beta1 8 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/metadata_validation_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis 4 | 5 | package apis 6 | 7 | // CreatorAnnotationSuffix is the suffix of the annotation key to describe 8 | // the user that created the resource. 9 | #CreatorAnnotationSuffix: "/creator" 10 | 11 | // UpdaterAnnotationSuffix is the suffix of the annotation key to describe 12 | // the user who last modified the resource. 13 | #UpdaterAnnotationSuffix: "/lastModifier" 14 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/url_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis 4 | 5 | package apis 6 | 7 | // URL is an alias of url.URL. 8 | // It has custom json marshal methods that enable it to be used in K8s CRDs 9 | // such that the CRD resource will have the URL but operator code can can work with url.URL struct 10 | // +kubebuilder:validation:Type=string 11 | #URL: _ 12 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/apis/volatile_time_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/apis 4 | 5 | package apis 6 | 7 | // VolatileTime wraps metav1.Time 8 | // 9 | // Unlike metav1.Time, VolatileTimes are considered semantically equal when 10 | // using kubernetes semantic equality checks. 11 | // Thus differing VolatileTime values are not considered different. 12 | // Note, go-cmp will still return inequality, see unit test if you 13 | // need this behavior for go-cmp. 14 | // 15 | // +kubebuilder:validation:Type=string 16 | #VolatileTime: _ 17 | -------------------------------------------------------------------------------- /cue.mod/gen/knative.dev/pkg/tracker/doc_go_gen.cue: -------------------------------------------------------------------------------- 1 | // Code generated by cue get go. DO NOT EDIT. 2 | 3 | //cue:generate cue get go knative.dev/pkg/tracker 4 | 5 | // Package tracker defines a utility to enable Reconcilers to trigger 6 | // reconciliations when objects that are cross-referenced change, so 7 | // that the level-based reconciliation can react to the change. The 8 | // prototypical cross-reference in Kubernetes is corev1.ObjectReference. 9 | package tracker 10 | -------------------------------------------------------------------------------- /cue.mod/module.cue: -------------------------------------------------------------------------------- 1 | module: "github.com/buildsec/frsca@v0" 2 | language: { 3 | version: "v0.12.0" 4 | } 5 | -------------------------------------------------------------------------------- /dependencies.go: -------------------------------------------------------------------------------- 1 | package frsca 2 | 3 | // Declared dependencies for CUE code generation. 4 | import ( 5 | _ "github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1" 6 | _ "github.com/tektoncd/triggers/pkg/apis/triggers/v1beta1" 7 | _ "k8s.io/api/core/v1" 8 | _ "k8s.io/api/rbac/v1" 9 | ) 10 | -------------------------------------------------------------------------------- /docs/README.md: -------------------------------------------------------------------------------- 1 | # FRSCA Diagrams 2 | 3 | The diagrams in this directory are written in the structurizr language. In order 4 | to view them or export them as images see: 5 | [Structurizr documentation](https://structurizr.org/) 6 | -------------------------------------------------------------------------------- /docs/bootstrap.sh: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | set -euo pipefail 3 | 4 | # Define variables. 5 | C_GREEN='\033[32m' 6 | C_RED='\033[31m' 7 | C_RESET_ALL='\033[0m' 8 | 9 | # Detect the platform. 10 | PLATFORM=$(uname) 11 | 12 | # Install packages if needed. 13 | echo -e "${C_GREEN}Installing packages if needed...${C_RESET_ALL}" 14 | case "${PLATFORM}" in 15 | 16 | Darwin) 17 | zola --version || brew install zola 18 | ;; 19 | 20 | Linux|Windows*) 21 | echo -e "${C_GREEN}Skipping zola install: the ${PLATFORM} platform will run zola using docker.${C_RESET_ALL}" 22 | ;; 23 | 24 | *) 25 | echo -e "${C_RED}The ${PLATFORM} platform is unimplemented or unsupported.${C_RESET_ALL}" 26 | exit 1 27 | ;; 28 | esac 29 | -------------------------------------------------------------------------------- /docs/content/docs/_index.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "Docs" 3 | description = "Factory for Repeatable Secure Creation of Artifacts documentation." 4 | sort_by = "weight" 5 | weight = 1 6 | template = "docs/section.html" 7 | +++ 8 | -------------------------------------------------------------------------------- /docs/content/docs/contributing/_index.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "Contributing" 3 | description = "Find out how to contribute to Factory for Repeatable Secure Creation of Artifacts." 4 | template = "docs/section.html" 5 | sort_by = "weight" 6 | weight = 4 7 | draft = false 8 | +++ 9 | -------------------------------------------------------------------------------- /docs/content/docs/contributing/how-to-contribute.md: -------------------------------------------------------------------------------- 1 | ../../../../.github/CONTRIBUTING.md -------------------------------------------------------------------------------- /docs/content/docs/getting-started/_index.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "Getting Started" 3 | description = "Quick start and guides for installing the AdiDoks theme on your preferred operating system." 4 | template = "docs/section.html" 5 | sort_by = "weight" 6 | weight = 1 7 | draft = false 8 | +++ 9 | -------------------------------------------------------------------------------- /docs/content/docs/getting-started/frsca_mascot-color.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/content/docs/getting-started/frsca_mascot-color.png -------------------------------------------------------------------------------- /docs/content/docs/getting-started/introduction.md: -------------------------------------------------------------------------------- 1 | --- 2 | title: "Factory for Repeatable Secure Creation of Artifacts (FRSCA)" 3 | description: "FRSCA is a secure build system" 4 | date: 2021-05-01T08:00:00+00:00 5 | updated: 2021-05-01T08:00:00+00:00 6 | draft: false 7 | weight: 10 8 | sort_by: "weight" 9 | template: "docs/page.html" 10 | 11 | extra: 12 | toc: true 13 | top: false 14 | headerless: true 15 | --- 16 | 17 | {{ markdown(value="../../../../README.md") }} 18 | -------------------------------------------------------------------------------- /docs/content/docs/help/_index.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "Help" 3 | description = "Get help." 4 | template = "docs/section.html" 5 | sort_by = "weight" 6 | weight = 5 7 | draft = false 8 | +++ 9 | -------------------------------------------------------------------------------- /docs/content/docs/slsa/_index.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "SLSA" 3 | description = "Read how FRSCA is meeting various necessary requirements of SLSA levels 1 through 3." 4 | template = "docs/section.html" 5 | sort_by = "weight" 6 | weight = 4 7 | draft = false 8 | +++ 9 | -------------------------------------------------------------------------------- /docs/static/img/frsca.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/static/img/frsca.png -------------------------------------------------------------------------------- /docs/static/img/frsca_mascot-color.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/static/img/frsca_mascot-color.png -------------------------------------------------------------------------------- /docs/templates/shortcodes/markdown.html: -------------------------------------------------------------------------------- 1 | {% set data = load_data(path=value) %} 2 | {{ data | markdown(inline=true) | safe}} 3 | -------------------------------------------------------------------------------- /docs/themes/adidoks/.gitignore: -------------------------------------------------------------------------------- 1 | public 2 | .vs 3 | .vscode 4 | -------------------------------------------------------------------------------- /docs/themes/adidoks/content/authors/_index.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "Authors" 3 | description = "The authurs of the blog articles." 4 | date = 2021-04-01T08:00:00+00:00 5 | updated = 2021-04-01T08:00:00+00:00 6 | draft = false 7 | 8 | # If add a new author page in this section, please add a new item, 9 | # and the format is as follows: 10 | # 11 | # "author-name-in-url" = "the-full-path-of-the-author-page" 12 | # 13 | # Note: We use quoted keys here. 14 | [extra.author_pages] 15 | "aaran-xu" = "authors/aaran-xu.md" 16 | +++ 17 | 18 | The authors of the blog articles. 19 | -------------------------------------------------------------------------------- /docs/themes/adidoks/content/authors/aaran-xu.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "Aaran Xu" 3 | description = "Creator of AdiDoks." 4 | date = 2021-04-01T08:50:45+00:00 5 | updated = 2021-04-01T08:50:45+00:00 6 | draft = false 7 | +++ 8 | 9 | Creator of **AdiDoks**. 10 | 11 | [@aaranxu](https://github.com/aaranxu) 12 | -------------------------------------------------------------------------------- /docs/themes/adidoks/content/blog/_index.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "Blog" 3 | description = "Blog" 4 | sort_by = "date" 5 | paginate_by = 2 6 | template = "blog/section.html" 7 | +++ 8 | -------------------------------------------------------------------------------- /docs/themes/adidoks/content/blog/say-hello-to-zola-doks.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "Say hello to AdiDoks 👋" 3 | description = "Introducing AdiDoks, a Zola theme helping you build modern documentation websites, which is a port of the Hugo theme Doks for Zola." 4 | date = 2021-04-03T07:00:00+00:00 5 | updated = 2021-04-03T07:00:00+00:00 6 | template = "blog/page.html" 7 | draft = false 8 | 9 | [taxonomies] 10 | authors = ["Aaran Xu"] 11 | 12 | [extra] 13 | lead = 'Introducing AdiDoks, a Zola theme helping you build modern documentation websites, which is a port of the Hugo theme Doks for Zola.' 14 | images = [] 15 | +++ 16 | -------------------------------------------------------------------------------- /docs/themes/adidoks/content/docs/_index.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "Docs" 3 | description = "The documents of the AdiDoks theme." 4 | date = 2025-05-01T08:00:00+00:00 5 | updated = 2021-05-01T08:00:00+00:00 6 | sort_by = "weight" 7 | weight = 1 8 | template = "docs/section.html" 9 | +++ 10 | -------------------------------------------------------------------------------- /docs/themes/adidoks/content/docs/contributing/_index.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "Contributing" 3 | description = "Find out how to contribute to AdiDoks." 4 | date = 2025-05-01T18:00:00+00:00 5 | updated = 2021-05-01T18:00:00+00:00 6 | template = "docs/section.html" 7 | sort_by = "weight" 8 | weight = 4 9 | draft = false 10 | +++ 11 | -------------------------------------------------------------------------------- /docs/themes/adidoks/content/docs/getting-started/_index.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "Getting Started" 3 | description = "Quick start and guides for installing the AdiDoks theme on your preferred operating system." 4 | date = 2025-05-01T08:00:00+00:00 5 | updated = 2021-05-01T08:00:00+00:00 6 | template = "docs/section.html" 7 | sort_by = "weight" 8 | weight = 1 9 | draft = false 10 | +++ 11 | -------------------------------------------------------------------------------- /docs/themes/adidoks/content/docs/help/_index.md: -------------------------------------------------------------------------------- 1 | +++ 2 | title = "Help" 3 | description = "Get help on AdiDoks." 4 | date = 2025-05-01T19:00:00+00:00 5 | updated = 2021-05-01T19:00:00+00:00 6 | template = "docs/section.html" 7 | sort_by = "weight" 8 | weight = 5 9 | draft = false 10 | +++ 11 | -------------------------------------------------------------------------------- /docs/themes/adidoks/netlify.toml: -------------------------------------------------------------------------------- 1 | [build] 2 | publish = "public" 3 | command = "zola build" 4 | 5 | [build.environment] 6 | ZOLA_VERSION = "0.13.0" 7 | 8 | [context.deploy-preview] 9 | command = "zola build --base-url $DEPLOY_PRIME_URL" 10 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/_custom.scss: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/sass/_custom.scss -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/_badge.scss: -------------------------------------------------------------------------------- 1 | // Base class 2 | // 3 | // Requires one of the contextual, color modifier classes for `color` and 4 | // `background-color`. 5 | 6 | .badge { 7 | display: inline-block; 8 | padding: $badge-padding-y $badge-padding-x; 9 | @include font-size($badge-font-size); 10 | font-weight: $badge-font-weight; 11 | line-height: 1; 12 | color: $badge-color; 13 | text-align: center; 14 | white-space: nowrap; 15 | vertical-align: baseline; 16 | @include border-radius($badge-border-radius); 17 | @include gradient-bg(); 18 | 19 | // Empty badges collapse automatically 20 | &:empty { 21 | display: none; 22 | } 23 | } 24 | 25 | // Quick fix for badges in buttons 26 | .btn .badge { 27 | position: relative; 28 | top: -1px; 29 | } 30 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/_forms.scss: -------------------------------------------------------------------------------- 1 | @import "forms/labels"; 2 | @import "forms/form-text"; 3 | @import "forms/form-control"; 4 | @import "forms/form-select"; 5 | @import "forms/form-check"; 6 | @import "forms/form-range"; 7 | @import "forms/floating-labels"; 8 | @import "forms/input-group"; 9 | @import "forms/validation"; 10 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/_grid.scss: -------------------------------------------------------------------------------- 1 | // Row 2 | // 3 | // Rows contain your columns. 4 | 5 | @if $enable-grid-classes { 6 | .row { 7 | @include make-row(); 8 | 9 | > * { 10 | @include make-col-ready(); 11 | } 12 | } 13 | } 14 | 15 | 16 | // Columns 17 | // 18 | // Common styles for small and large grid columns 19 | 20 | @if $enable-grid-classes { 21 | @include make-grid-columns(); 22 | } 23 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/_helpers.scss: -------------------------------------------------------------------------------- 1 | @import "helpers/clearfix"; 2 | @import "helpers/colored-links"; 3 | @import "helpers/ratio"; 4 | @import "helpers/position"; 5 | @import "helpers/visually-hidden"; 6 | @import "helpers/stretched-link"; 7 | @import "helpers/text-truncation"; 8 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/_root.scss: -------------------------------------------------------------------------------- 1 | :root { 2 | // Custom variable values only support SassScript inside `#{}`. 3 | @each $color, $value in $colors { 4 | --#{$variable-prefix}#{$color}: #{$value}; 5 | } 6 | 7 | @each $color, $value in $theme-colors { 8 | --#{$variable-prefix}#{$color}: #{$value}; 9 | } 10 | 11 | // Use `inspect` for lists so that quoted items keep the quotes. 12 | // See https://github.com/sass/sass/issues/2383#issuecomment-336349172 13 | --#{$variable-prefix}font-sans-serif: #{inspect($font-family-sans-serif)}; 14 | --#{$variable-prefix}font-monospace: #{inspect($font-family-monospace)}; 15 | --#{$variable-prefix}gradient: #{$gradient}; 16 | } 17 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/_transitions.scss: -------------------------------------------------------------------------------- 1 | .fade { 2 | @include transition($transition-fade); 3 | 4 | &:not(.show) { 5 | opacity: 0; 6 | } 7 | } 8 | 9 | // scss-docs-start collapse-classes 10 | .collapse { 11 | &:not(.show) { 12 | display: none; 13 | } 14 | } 15 | 16 | .collapsing { 17 | height: 0; 18 | overflow: hidden; 19 | @include transition($transition-collapse); 20 | } 21 | // scss-docs-end collapse-classes 22 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/bootstrap-reboot.scss: -------------------------------------------------------------------------------- 1 | /*! 2 | * Bootstrap Reboot v5.0.0-beta3 (https://getbootstrap.com/) 3 | * Copyright 2011-2021 The Bootstrap Authors 4 | * Copyright 2011-2021 Twitter, Inc. 5 | * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) 6 | * Forked from Normalize.css, licensed MIT (https://github.com/necolas/normalize.css/blob/master/LICENSE.md) 7 | */ 8 | 9 | @import "functions"; 10 | @import "variables"; 11 | // Prevent the usage of custom properties since we don't add them to `:root` in reboot 12 | $font-family-base: $font-family-sans-serif; // stylelint-disable-line scss/dollar-variable-default 13 | $font-family-code: $font-family-monospace; // stylelint-disable-line scss/dollar-variable-default 14 | @import "mixins"; 15 | @import "reboot"; 16 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/bootstrap-utilities.scss: -------------------------------------------------------------------------------- 1 | /*! 2 | * Bootstrap Utilities v5.0.0-beta3 (https://getbootstrap.com/) 3 | * Copyright 2011-2021 The Bootstrap Authors 4 | * Copyright 2011-2021 Twitter, Inc. 5 | * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) 6 | */ 7 | 8 | // Configuration 9 | @import "functions"; 10 | @import "variables"; 11 | @import "mixins"; 12 | @import "utilities"; 13 | 14 | // Helpers 15 | @import "helpers"; 16 | 17 | // Utilities 18 | @import "utilities/api"; 19 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/forms/_form-text.scss: -------------------------------------------------------------------------------- 1 | // 2 | // Form text 3 | // 4 | 5 | .form-text { 6 | margin-top: $form-text-margin-top; 7 | @include font-size($form-text-font-size); 8 | font-style: $form-text-font-style; 9 | font-weight: $form-text-font-weight; 10 | color: $form-text-color; 11 | } 12 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/forms/_validation.scss: -------------------------------------------------------------------------------- 1 | // Form validation 2 | // 3 | // Provide feedback to users when form field values are valid or invalid. Works 4 | // primarily for client-side validation via scoped `:invalid` and `:valid` 5 | // pseudo-classes but also includes `.is-invalid` and `.is-valid` classes for 6 | // server-side validation. 7 | 8 | // scss-docs-start form-validation-states-loop 9 | @each $state, $data in $form-validation-states { 10 | @include form-validation-state($state, $data...); 11 | } 12 | // scss-docs-end form-validation-states-loop 13 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/helpers/_clearfix.scss: -------------------------------------------------------------------------------- 1 | .clearfix { 2 | @include clearfix(); 3 | } 4 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/helpers/_colored-links.scss: -------------------------------------------------------------------------------- 1 | @each $color, $value in $theme-colors { 2 | .link-#{$color} { 3 | color: $value; 4 | 5 | @if $link-shade-percentage != 0 { 6 | &:hover, 7 | &:focus { 8 | color: if(color-contrast($value) == $color-contrast-light, shade-color($value, $link-shade-percentage), tint-color($value, $link-shade-percentage)); 9 | } 10 | } 11 | } 12 | } 13 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/helpers/_position.scss: -------------------------------------------------------------------------------- 1 | // Shorthand 2 | 3 | .fixed-top { 4 | position: fixed; 5 | top: 0; 6 | right: 0; 7 | left: 0; 8 | z-index: $zindex-fixed; 9 | } 10 | 11 | .fixed-bottom { 12 | position: fixed; 13 | right: 0; 14 | bottom: 0; 15 | left: 0; 16 | z-index: $zindex-fixed; 17 | } 18 | 19 | // Responsive sticky top 20 | @each $breakpoint in map-keys($grid-breakpoints) { 21 | @include media-breakpoint-up($breakpoint) { 22 | $infix: breakpoint-infix($breakpoint, $grid-breakpoints); 23 | 24 | .sticky#{$infix}-top { 25 | position: sticky; 26 | top: 0; 27 | z-index: $zindex-sticky; 28 | } 29 | } 30 | } 31 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/helpers/_ratio.scss: -------------------------------------------------------------------------------- 1 | // Credit: Nicolas Gallagher and SUIT CSS. 2 | 3 | .ratio { 4 | position: relative; 5 | width: 100%; 6 | 7 | &::before { 8 | display: block; 9 | padding-top: var(--#{$variable-prefix}aspect-ratio); 10 | content: ""; 11 | } 12 | 13 | > * { 14 | position: absolute; 15 | top: 0; 16 | left: 0; 17 | width: 100%; 18 | height: 100%; 19 | } 20 | } 21 | 22 | @each $key, $ratio in $aspect-ratios { 23 | .ratio-#{$key} { 24 | --#{$variable-prefix}aspect-ratio: #{$ratio}; 25 | } 26 | } 27 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/helpers/_stretched-link.scss: -------------------------------------------------------------------------------- 1 | // 2 | // Stretched link 3 | // 4 | 5 | .stretched-link { 6 | &::#{$stretched-link-pseudo-element} { 7 | position: absolute; 8 | top: 0; 9 | right: 0; 10 | bottom: 0; 11 | left: 0; 12 | z-index: $stretched-link-z-index; 13 | content: ""; 14 | } 15 | } 16 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/helpers/_text-truncation.scss: -------------------------------------------------------------------------------- 1 | // 2 | // Text truncation 3 | // 4 | 5 | .text-truncate { 6 | @include text-truncate(); 7 | } 8 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/helpers/_visually-hidden.scss: -------------------------------------------------------------------------------- 1 | // 2 | // Visually hidden 3 | // 4 | 5 | .visually-hidden, 6 | .visually-hidden-focusable:not(:focus):not(:focus-within) { 7 | @include visually-hidden(); 8 | } 9 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/mixins/_alert.scss: -------------------------------------------------------------------------------- 1 | // scss-docs-start alert-variant-mixin 2 | @mixin alert-variant($background, $border, $color) { 3 | color: $color; 4 | @include gradient-bg($background); 5 | border-color: $border; 6 | 7 | .alert-link { 8 | color: shade-color($color, 20%); 9 | } 10 | } 11 | // scss-docs-end alert-variant-mixin 12 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/mixins/_box-shadow.scss: -------------------------------------------------------------------------------- 1 | @mixin box-shadow($shadow...) { 2 | @if $enable-shadows { 3 | $result: (); 4 | 5 | @each $value in $shadow { 6 | @if $value != null { 7 | $result: append($result, $value, "comma"); 8 | } 9 | @if $value == none and length($shadow) > 1 { 10 | @warn "The keyword 'none' must be used as a single argument."; 11 | } 12 | } 13 | 14 | @if (length($result) > 0) { 15 | box-shadow: $result; 16 | } 17 | } 18 | } 19 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/mixins/_clearfix.scss: -------------------------------------------------------------------------------- 1 | // scss-docs-start clearfix 2 | @mixin clearfix() { 3 | &::after { 4 | display: block; 5 | clear: both; 6 | content: ""; 7 | } 8 | } 9 | // scss-docs-end clearfix 10 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/mixins/_container.scss: -------------------------------------------------------------------------------- 1 | // Container mixins 2 | 3 | @mixin make-container($gutter: $container-padding-x) { 4 | width: 100%; 5 | padding-right: var(--#{$variable-prefix}gutter-x, #{$gutter}); 6 | padding-left: var(--#{$variable-prefix}gutter-x, #{$gutter}); 7 | margin-right: auto; 8 | margin-left: auto; 9 | } 10 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/mixins/_deprecate.scss: -------------------------------------------------------------------------------- 1 | // Deprecate mixin 2 | // 3 | // This mixin can be used to deprecate mixins or functions. 4 | // `$enable-deprecation-messages` is a global variable, `$ignore-warning` is a variable that can be passed to 5 | // some deprecated mixins to suppress the warning (for example if the mixin is still be used in the current version of Bootstrap) 6 | @mixin deprecate($name, $deprecate-version, $remove-version, $ignore-warning: false) { 7 | @if ($enable-deprecation-messages != false and $ignore-warning != true) { 8 | @warn "#{$name} has been deprecated as of #{$deprecate-version}. It will be removed entirely in #{$remove-version}."; 9 | } 10 | } 11 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/mixins/_image.scss: -------------------------------------------------------------------------------- 1 | // Image Mixins 2 | // - Responsive image 3 | // - Retina image 4 | 5 | 6 | // Responsive image 7 | // 8 | // Keep images from scaling beyond the width of their parents. 9 | 10 | @mixin img-fluid { 11 | // Part 1: Set a maximum relative to the parent 12 | max-width: 100%; 13 | // Part 2: Override the height to auto, otherwise images will be stretched 14 | // when setting a width and height attribute on the img element. 15 | height: auto; 16 | } 17 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/mixins/_list-group.scss: -------------------------------------------------------------------------------- 1 | // List Groups 2 | 3 | // scss-docs-start list-group-mixin 4 | @mixin list-group-item-variant($state, $background, $color) { 5 | .list-group-item-#{$state} { 6 | color: $color; 7 | background-color: $background; 8 | 9 | &.list-group-item-action { 10 | &:hover, 11 | &:focus { 12 | color: $color; 13 | background-color: shade-color($background, 10%); 14 | } 15 | 16 | &.active { 17 | color: $white; 18 | background-color: $color; 19 | border-color: $color; 20 | } 21 | } 22 | } 23 | } 24 | // scss-docs-end list-group-mixin 25 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/mixins/_lists.scss: -------------------------------------------------------------------------------- 1 | // Lists 2 | 3 | // Unstyled keeps list items block level, just removes default browser padding and list-style 4 | @mixin list-unstyled { 5 | padding-left: 0; 6 | list-style: none; 7 | } 8 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/mixins/_reset-text.scss: -------------------------------------------------------------------------------- 1 | @mixin reset-text { 2 | font-family: $font-family-base; 3 | // We deliberately do NOT reset font-size or overflow-wrap / word-wrap. 4 | font-style: normal; 5 | font-weight: $font-weight-normal; 6 | line-height: $line-height-base; 7 | text-align: left; // Fallback for where `start` is not supported 8 | text-align: start; 9 | text-decoration: none; 10 | text-shadow: none; 11 | text-transform: none; 12 | letter-spacing: normal; 13 | word-break: normal; 14 | word-spacing: normal; 15 | white-space: normal; 16 | line-break: auto; 17 | } 18 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/mixins/_resize.scss: -------------------------------------------------------------------------------- 1 | // Resize anything 2 | 3 | @mixin resizable($direction) { 4 | overflow: auto; // Per CSS3 UI, `resize` only applies when `overflow` isn't `visible` 5 | resize: $direction; // Options: horizontal, vertical, both 6 | } 7 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/mixins/_text-truncate.scss: -------------------------------------------------------------------------------- 1 | // Text truncate 2 | // Requires inline-block or block for proper styling 3 | 4 | @mixin text-truncate() { 5 | overflow: hidden; 6 | text-overflow: ellipsis; 7 | white-space: nowrap; 8 | } 9 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/bootstrap/scss/mixins/_transition.scss: -------------------------------------------------------------------------------- 1 | // stylelint-disable property-disallowed-list 2 | @mixin transition($transition...) { 3 | @if length($transition) == 0 { 4 | $transition: $transition-base; 5 | } 6 | 7 | @if length($transition) > 1 { 8 | @each $value in $transition { 9 | @if $value == null or $value == none { 10 | @warn "The keyword 'none' or 'null' must be used as a single argument."; 11 | } 12 | } 13 | } 14 | 15 | @if $enable-transitions { 16 | @if nth($transition, 1) != null { 17 | transition: $transition; 18 | } 19 | 20 | @if $enable-reduced-motion and nth($transition, 1) != null and nth($transition, 1) != none { 21 | @media (prefers-reduced-motion: reduce) { 22 | transition: none; 23 | } 24 | } 25 | } 26 | } 27 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/components/_comments.scss: -------------------------------------------------------------------------------- 1 | .comment-list { 2 | @extend .list-unstyled; 3 | } 4 | 5 | .comment-list ol { 6 | list-style: none; 7 | } 8 | 9 | .comment-form p { 10 | @extend .form-group !optional; 11 | } 12 | 13 | .comment-form input[type="text"], 14 | .comment-form input[type="email"], 15 | .comment-form input[type="url"], 16 | .comment-form textarea { 17 | @extend .form-control; 18 | } 19 | 20 | .comment-form input[type="submit"] { 21 | @extend .btn; 22 | @extend .btn-secondary; 23 | } 24 | 25 | blockquote { 26 | margin-bottom: 1rem; 27 | font-size: 1.25rem; 28 | border-left: 3px solid $gray-300; 29 | padding-left: 1rem; 30 | } 31 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/components/_footnote.scss: -------------------------------------------------------------------------------- 1 | .footnote-definition { 2 | sup { 3 | top: -.2.5em; 4 | font-size: 0.75em; 5 | display: inline; 6 | } 7 | p { 8 | display: inline; 9 | } 10 | } 11 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/components/_forms.scss: -------------------------------------------------------------------------------- 1 | /** Search form */ 2 | .search-form { 3 | @extend .form-inline !optional; 4 | } 5 | 6 | .search-form label { 7 | @extend .form-group; 8 | 9 | font-weight: normal; 10 | } 11 | 12 | .search-form .search-field { 13 | @extend .form-control; 14 | } 15 | 16 | .search-form .search-submit { 17 | @extend .btn; 18 | @extend .btn-secondary; 19 | } 20 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/components/_tables.scss: -------------------------------------------------------------------------------- 1 | table { 2 | @extend .table; 3 | 4 | margin: 3rem 0; 5 | } 6 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/layouts/_footer.scss: -------------------------------------------------------------------------------- 1 | .footer { 2 | border-top: 1px solid $gray-200; 3 | padding-top: 1.125rem; 4 | padding-bottom: 1.125rem; 5 | } 6 | 7 | .footer ul { 8 | margin-bottom: 0; 9 | } 10 | 11 | .footer li { 12 | font-size: $font-size-sm; 13 | margin-bottom: 0; 14 | } 15 | 16 | @include media-breakpoint-up(md) { 17 | .footer li { 18 | font-size: $font-size-base; 19 | } 20 | } 21 | -------------------------------------------------------------------------------- /docs/themes/adidoks/sass/layouts/_posts.scss: -------------------------------------------------------------------------------- 1 | .home .card, 2 | .contributors.list .card, 3 | .blog.list .card { 4 | margin-top: 2rem; 5 | margin-bottom: 2rem; 6 | transition: transform 0.3s; 7 | } 8 | 9 | .home .card:hover, 10 | .contributors.list .card:hover, 11 | .blog.list .card:hover { 12 | transform: scale(1.025); 13 | } 14 | 15 | .home .card-body, 16 | .contributors.list .card-body, 17 | .blog.list .card-body { 18 | padding: 0 2rem 1rem; 19 | } 20 | 21 | .blog-header { 22 | text-align: center; 23 | margin-bottom: 2rem; 24 | } 25 | 26 | .blog-footer { 27 | text-align: center; 28 | } 29 | -------------------------------------------------------------------------------- /docs/themes/adidoks/screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/screenshot.png -------------------------------------------------------------------------------- /docs/themes/adidoks/static/_headers: -------------------------------------------------------------------------------- 1 | /* 2 | Access-Control-Allow-Origin: * -------------------------------------------------------------------------------- /docs/themes/adidoks/static/android-chrome-192x192.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/android-chrome-192x192.png -------------------------------------------------------------------------------- /docs/themes/adidoks/static/android-chrome-512x512.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/android-chrome-512x512.png -------------------------------------------------------------------------------- /docs/themes/adidoks/static/apple-touch-icon.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/apple-touch-icon.png -------------------------------------------------------------------------------- /docs/themes/adidoks/static/doks.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/doks.png -------------------------------------------------------------------------------- /docs/themes/adidoks/static/favicon-16x16.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/favicon-16x16.png -------------------------------------------------------------------------------- /docs/themes/adidoks/static/favicon-32x32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/favicon-32x32.png -------------------------------------------------------------------------------- /docs/themes/adidoks/static/favicon.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/favicon.ico -------------------------------------------------------------------------------- /docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-500.woff: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-500.woff -------------------------------------------------------------------------------- /docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-500.woff2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-500.woff2 -------------------------------------------------------------------------------- /docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-500italic.woff: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-500italic.woff -------------------------------------------------------------------------------- /docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-500italic.woff2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-500italic.woff2 -------------------------------------------------------------------------------- /docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-700.woff: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-700.woff -------------------------------------------------------------------------------- /docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-700.woff2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-700.woff2 -------------------------------------------------------------------------------- /docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-700italic.woff: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-700italic.woff -------------------------------------------------------------------------------- /docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-700italic.woff2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-700italic.woff2 -------------------------------------------------------------------------------- /docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-italic.woff: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-italic.woff -------------------------------------------------------------------------------- /docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-italic.woff2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-italic.woff2 -------------------------------------------------------------------------------- /docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-regular.woff: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-regular.woff -------------------------------------------------------------------------------- /docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-regular.woff2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/fonts/vendor/jost/jost-v4-latin-regular.woff2 -------------------------------------------------------------------------------- /docs/themes/adidoks/static/js/main.js: -------------------------------------------------------------------------------- 1 | // Set darkmode 2 | document.getElementById('mode').addEventListener('click', () => { 3 | 4 | document.body.classList.toggle('dark'); 5 | localStorage.setItem('theme', document.body.classList.contains('dark') ? 'dark' : 'light'); 6 | 7 | }); 8 | 9 | // enforce local storage setting but also fallback to user-agent preferences 10 | if (localStorage.getItem('theme') === 'dark' || (!localStorage.getItem('theme') && window.matchMedia("(prefers-color-scheme: dark)").matches)) { 11 | 12 | document.body.classList.add('dark'); 13 | 14 | } 15 | -------------------------------------------------------------------------------- /docs/themes/adidoks/static/logo-doks.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/docs/themes/adidoks/static/logo-doks.png -------------------------------------------------------------------------------- /docs/themes/adidoks/static/site.webmanifest: -------------------------------------------------------------------------------- 1 | {"name":"Zola Theme AdiDoks","short_name":"AdiDoks","icons":[{"src":"/android-chrome-192x192.png","sizes":"192x192","type":"image/png"},{"src":"/android-chrome-512x512.png","sizes":"512x512","type":"image/png"}],"theme_color":"#fff","background_color":"#fff","display":"standalone"} -------------------------------------------------------------------------------- /docs/themes/adidoks/templates/macros/docs-edit-page.html: -------------------------------------------------------------------------------- 1 | {% macro docs_edit_page(current_path) %} 2 |

Edit this page on GitHub

3 | {% endmacro %} 4 | -------------------------------------------------------------------------------- /docs/themes/adidoks/templates/macros/docs-toc.html: -------------------------------------------------------------------------------- 1 | {% macro docs_toc(page) %} 2 | {% if page.extra.toc %} 3 | 22 | {% endif %} 23 | {% endmacro %} 24 | -------------------------------------------------------------------------------- /docs/themes/adidoks/templates/macros/javascript.html: -------------------------------------------------------------------------------- 1 | {% macro javascript() %} 2 | 3 | {% if config.build_search_index %} 4 | 5 | 6 | 7 | {% endif %} 8 | {% endmacro %} 9 | -------------------------------------------------------------------------------- /docs/themes/adidoks/templates/macros/page-publish-metadata.html: -------------------------------------------------------------------------------- 1 | {% macro page_publish_metadata(page) %} 2 |

Posted {{ page.date | date(format=config.extra.timeformat | default(value="%B %e, %Y"), timezone=config.extra.timezone | default(value="America/New_York")) }}{% if page.taxonomies.authors and config.taxonomies %} by {% for author in page.taxonomies.authors %}{% if author_flag %} and {% endif %}{{ author }}{% set_global author_flag = true %}{% endfor %}{% endif %} ‐ {{ page.reading_time }} min read

3 | {% endmacro %} 4 | -------------------------------------------------------------------------------- /docs/themes/adidoks/templates/macros/section-navigation.html: -------------------------------------------------------------------------------- 1 | {% macro navigation(paginator) %} 2 |

3 | {% if paginator.previous %} 4 | 5 |
6 |
7 | ← Newer 8 |
9 |
10 | 11 | {% endif %} 12 | {% if paginator.next %} 13 | 14 |
15 |
16 | Older → 17 |
18 |
19 | 20 | {% endif %} 21 |
22 | {% endmacro %} 23 | -------------------------------------------------------------------------------- /docs/themes/adidoks/templates/robots.txt: -------------------------------------------------------------------------------- 1 | User-agent: * 2 | Allow: / 3 | 4 | Sitemap: {{config.base_url}}/sitemap.xml 5 | -------------------------------------------------------------------------------- /docs/themes/adidoks/theme.toml: -------------------------------------------------------------------------------- 1 | name = "adidoks" 2 | description = "AdiDoks is a Zola theme helping you build modern documentation." 3 | license = "MIT" 4 | homepage = "https://github.com/aaranxu/adidoks" 5 | min_version = "0.13.0" 6 | demo = "https://adidoks.netlify.app/" 7 | 8 | [extra] 9 | 10 | [author] 11 | name = "Aaran Xu" 12 | homepage = "https://github.com/aaranxu" 13 | 14 | [original] 15 | author = "h-enk" 16 | homepage = "https://getdoks.org/" 17 | repo = "https://github.com/h-enk/doks" 18 | -------------------------------------------------------------------------------- /examples/buildpacks/buildpacks-run.sh: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | set -euo pipefail 3 | 4 | # Define variables. 5 | C_GREEN='\033[32m' 6 | C_RESET_ALL='\033[0m' 7 | 8 | # Trigger the buildpacks pipelinerun. 9 | echo -e "${C_GREEN}Triggering a buildpacks pipelinerun${C_RESET_ALL}" 10 | kubectl -n gitea exec -i gitea-0 -c gitea -- su - git < :warning: This pipeline is not intended to be used in production 6 | 7 | ## Starting Demo 8 | 9 | ```bash 10 | # Only if a cluster is needed. 11 | make setup-minikube 12 | 13 | # Setup FRSCA environment 14 | make setup-frsca 15 | 16 | # Run a new pipeline. 17 | make example-maven 18 | 19 | # Wait until it completes. 20 | tkn pr logs --last -f 21 | 22 | # to do 23 | verify jar-file 24 | ``` 25 | 26 | ## References 27 | 28 | - 29 | - 30 | - 31 | -------------------------------------------------------------------------------- /examples/maven/maven-run.sh: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | set -euo pipefail 3 | 4 | # Define variables. 5 | C_GREEN='\033[32m' 6 | C_RESET_ALL='\033[0m' 7 | 8 | # Trigger the maven pipelinerun. 9 | echo -e "${C_GREEN}Triggering a maven pipelinerun${C_RESET_ALL}" 10 | kubectl -n gitea exec -i gitea-0 -c gitea -- su - git </dev/null 2>&1; do 9 | echo "PROCESS IS RUNNING" 10 | if curl --fail 'http://localhost:8001/api/v1/proxy/namespaces/default/services/elasticsearch-master:9200/_search' ; then 11 | echo "cluster is healthy" 12 | else 13 | echo "cluster not healthy!" 14 | exit 1 15 | fi 16 | sleep 1 17 | done 18 | echo "PROCESS TERMINATED" 19 | exit 0 20 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/docker-for-mac/Makefile: -------------------------------------------------------------------------------- 1 | default: test 2 | 3 | RELEASE := helm-es-docker-for-mac 4 | TIMEOUT := 1200s 5 | 6 | install: 7 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values values.yaml $(RELEASE) ../../ 8 | 9 | test: install 10 | helm test $(RELEASE) 11 | 12 | purge: 13 | helm del $(RELEASE) 14 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/docker-for-mac/README.md: -------------------------------------------------------------------------------- 1 | # Docker for Mac 2 | 3 | This example deploy a 3 nodes Elasticsearch 7.17.3 cluster on [Docker for Mac][] 4 | using [custom values][]. 5 | 6 | Note that this configuration should be used for test only and isn't recommended 7 | for production. 8 | 9 | 10 | ## Usage 11 | 12 | * Deploy Elasticsearch chart with the default values: `make install` 13 | 14 | * You can now setup a port forward to query Elasticsearch API: 15 | 16 | ``` 17 | kubectl port-forward svc/elasticsearch-master 9200 18 | curl localhost:9200/_cat/indices 19 | ``` 20 | 21 | 22 | [custom values]: https://github.com/elastic/helm-charts/tree/7.17/elasticsearch/examples/docker-for-mac/values.yaml 23 | [docker for mac]: https://docs.docker.com/docker-for-mac/kubernetes/ 24 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/docker-for-mac/values.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | # Permit co-located instances for solitary minikube virtual machines. 3 | antiAffinity: "soft" 4 | 5 | # Shrink default JVM heap. 6 | esJavaOpts: "-Xmx128m -Xms128m" 7 | 8 | # Allocate smaller chunks of memory per pod. 9 | resources: 10 | requests: 11 | cpu: "100m" 12 | memory: "512M" 13 | limits: 14 | cpu: "1000m" 15 | memory: "512M" 16 | 17 | # Request smaller persistent volumes. 18 | volumeClaimTemplate: 19 | accessModes: [ "ReadWriteOnce" ] 20 | storageClassName: "hostpath" 21 | resources: 22 | requests: 23 | storage: 100M 24 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/kubernetes-kind/Makefile: -------------------------------------------------------------------------------- 1 | default: test 2 | 3 | RELEASE := helm-es-kind 4 | TIMEOUT := 1200s 5 | 6 | install: 7 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values values.yaml $(RELEASE) ../../ 8 | 9 | install-local-path: 10 | kubectl apply -f https://raw.githubusercontent.com/rancher/local-path-provisioner/master/deploy/local-path-storage.yaml 11 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values values-local-path.yaml $(RELEASE) ../../ 12 | 13 | test: install 14 | helm test $(RELEASE) 15 | 16 | purge: 17 | helm del $(RELEASE) 18 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/kubernetes-kind/values-local-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | # Permit co-located instances for solitary minikube virtual machines. 3 | antiAffinity: "soft" 4 | 5 | # Shrink default JVM heap. 6 | esJavaOpts: "-Xmx128m -Xms128m" 7 | 8 | # Allocate smaller chunks of memory per pod. 9 | resources: 10 | requests: 11 | cpu: "100m" 12 | memory: "512M" 13 | limits: 14 | cpu: "1000m" 15 | memory: "512M" 16 | 17 | # Request smaller persistent volumes. 18 | volumeClaimTemplate: 19 | accessModes: [ "ReadWriteOnce" ] 20 | storageClassName: "local-path" 21 | resources: 22 | requests: 23 | storage: 100M 24 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/kubernetes-kind/values.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | # Permit co-located instances for solitary minikube virtual machines. 3 | antiAffinity: "soft" 4 | 5 | # Shrink default JVM heap. 6 | esJavaOpts: "-Xmx128m -Xms128m" 7 | 8 | # Allocate smaller chunks of memory per pod. 9 | resources: 10 | requests: 11 | cpu: "100m" 12 | memory: "512M" 13 | limits: 14 | cpu: "1000m" 15 | memory: "512M" 16 | 17 | # Request smaller persistent volumes. 18 | volumeClaimTemplate: 19 | accessModes: [ "ReadWriteOnce" ] 20 | storageClassName: "local-path" 21 | resources: 22 | requests: 23 | storage: 100M 24 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/microk8s/Makefile: -------------------------------------------------------------------------------- 1 | default: test 2 | 3 | RELEASE := helm-es-microk8s 4 | TIMEOUT := 1200s 5 | 6 | install: 7 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values values.yaml $(RELEASE) ../../ 8 | 9 | test: install 10 | helm test $(RELEASE) 11 | 12 | purge: 13 | helm del $(RELEASE) 14 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/migration/Makefile: -------------------------------------------------------------------------------- 1 | PREFIX := helm-es-migration 2 | 3 | data: 4 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values data.yaml $(PREFIX)-data ../../ 5 | 6 | master: 7 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values master.yaml $(PREFIX)-master ../../ 8 | 9 | client: 10 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values client.yaml $(PREFIX)-client ../../ 11 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/migration/client.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | 3 | replicas: 2 4 | 5 | clusterName: "elasticsearch" 6 | nodeGroup: "client" 7 | 8 | esMajorVersion: 6 9 | 10 | roles: 11 | master: "false" 12 | ingest: "false" 13 | data: "false" 14 | 15 | volumeClaimTemplate: 16 | accessModes: [ "ReadWriteOnce" ] 17 | storageClassName: "standard" 18 | resources: 19 | requests: 20 | storage: 1Gi # Currently needed till pvcs are made optional 21 | 22 | persistence: 23 | enabled: false 24 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/migration/data.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | 3 | replicas: 2 4 | 5 | esMajorVersion: 6 6 | 7 | extraEnvs: 8 | - name: discovery.zen.ping.unicast.hosts 9 | value: "my-release-elasticsearch-discovery" 10 | 11 | clusterName: "elasticsearch" 12 | nodeGroup: "data" 13 | 14 | roles: 15 | master: "false" 16 | ingest: "false" 17 | data: "true" 18 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/migration/master.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | 3 | # Temporarily set to 3 so we can scale up/down the old a new cluster 4 | # one at a time whilst always keeping 3 masters running 5 | replicas: 1 6 | 7 | esMajorVersion: 6 8 | 9 | extraEnvs: 10 | - name: discovery.zen.ping.unicast.hosts 11 | value: "my-release-elasticsearch-discovery" 12 | 13 | clusterName: "elasticsearch" 14 | nodeGroup: "master" 15 | 16 | roles: 17 | master: "true" 18 | ingest: "false" 19 | data: "false" 20 | 21 | volumeClaimTemplate: 22 | accessModes: [ "ReadWriteOnce" ] 23 | storageClassName: "standard" 24 | resources: 25 | requests: 26 | storage: 4Gi 27 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/minikube/Makefile: -------------------------------------------------------------------------------- 1 | default: test 2 | 3 | RELEASE := helm-es-minikube 4 | TIMEOUT := 1200s 5 | 6 | install: 7 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values values.yaml $(RELEASE) ../../ 8 | 9 | test: install 10 | helm test $(RELEASE) 11 | 12 | purge: 13 | helm del $(RELEASE) 14 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/minikube/values.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | # Permit co-located instances for solitary minikube virtual machines. 3 | antiAffinity: "soft" 4 | 5 | # Shrink default JVM heap. 6 | esJavaOpts: "-Xmx128m -Xms128m" 7 | 8 | # Allocate smaller chunks of memory per pod. 9 | resources: 10 | requests: 11 | cpu: "100m" 12 | memory: "512M" 13 | limits: 14 | cpu: "1000m" 15 | memory: "512M" 16 | 17 | # Request smaller persistent volumes. 18 | volumeClaimTemplate: 19 | accessModes: [ "ReadWriteOnce" ] 20 | storageClassName: "standard" 21 | resources: 22 | requests: 23 | storage: 100M 24 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/multi/Makefile: -------------------------------------------------------------------------------- 1 | default: test 2 | 3 | include ../../../helpers/examples.mk 4 | 5 | PREFIX := helm-es-multi 6 | RELEASE := helm-es-multi-master 7 | TIMEOUT := 1200s 8 | 9 | install: 10 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values master.yaml $(PREFIX)-master ../../ 11 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values data.yaml $(PREFIX)-data ../../ 12 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values client.yaml $(PREFIX)-client ../../ 13 | 14 | test: install goss 15 | 16 | purge: 17 | helm del $(PREFIX)-master 18 | helm del $(PREFIX)-data 19 | helm del $(PREFIX)-client 20 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/multi/client.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | 3 | clusterName: "multi" 4 | nodeGroup: "client" 5 | 6 | roles: 7 | master: "false" 8 | ingest: "false" 9 | data: "false" 10 | ml: "false" 11 | remote_cluster_client: "false" 12 | 13 | persistence: 14 | enabled: false 15 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/multi/data.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | 3 | clusterName: "multi" 4 | nodeGroup: "data" 5 | 6 | roles: 7 | master: "false" 8 | ingest: "true" 9 | data: "true" 10 | ml: "false" 11 | remote_cluster_client: "false" 12 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/multi/master.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | 3 | clusterName: "multi" 4 | nodeGroup: "master" 5 | 6 | roles: 7 | master: "true" 8 | ingest: "false" 9 | data: "false" 10 | ml: "false" 11 | remote_cluster_client: "false" 12 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/multi/test/goss.yaml: -------------------------------------------------------------------------------- 1 | http: 2 | http://localhost:9200/_cluster/health: 3 | status: 200 4 | timeout: 2000 5 | body: 6 | - 'green' 7 | - '"cluster_name":"multi"' 8 | - '"number_of_nodes":9' 9 | - '"number_of_data_nodes":3' 10 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/networkpolicy/Makefile: -------------------------------------------------------------------------------- 1 | default: test 2 | 3 | include ../../../helpers/examples.mk 4 | 5 | RELEASE := helm-es-networkpolicy 6 | TIMEOUT := 1200s 7 | 8 | install: 9 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values values.yaml $(RELEASE) ../../ 10 | 11 | test: install goss 12 | 13 | purge: 14 | helm del $(RELEASE) 15 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/openshift/Makefile: -------------------------------------------------------------------------------- 1 | default: test 2 | 3 | include ../../../helpers/examples.mk 4 | 5 | RELEASE := elasticsearch 6 | 7 | install: 8 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values values.yaml $(RELEASE) ../../ 9 | 10 | test: install goss 11 | 12 | purge: 13 | helm del $(RELEASE) 14 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/openshift/test/goss.yaml: -------------------------------------------------------------------------------- 1 | http: 2 | http://localhost:9200/_cluster/health: 3 | status: 200 4 | timeout: 2000 5 | body: 6 | - "green" 7 | - '"number_of_nodes":3' 8 | - '"number_of_data_nodes":3' 9 | 10 | http://localhost:9200: 11 | status: 200 12 | timeout: 2000 13 | body: 14 | - '"number" : "7.17.3"' 15 | - '"cluster_name" : "elasticsearch"' 16 | - "You Know, for Search" 17 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/openshift/values.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | 3 | securityContext: 4 | runAsUser: null 5 | 6 | podSecurityContext: 7 | fsGroup: null 8 | runAsUser: null 9 | 10 | sysctlInitContainer: 11 | enabled: false 12 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/upgrade/Makefile: -------------------------------------------------------------------------------- 1 | default: test 2 | 3 | include ../../../helpers/examples.mk 4 | 5 | CHART := elasticsearch 6 | RELEASE := helm-es-upgrade 7 | FROM := 7.4.0 # versions before 7.4.O aren't compatible with Kubernetes >= 1.16.0 8 | 9 | install: 10 | ../../../helpers/upgrade.sh --chart $(CHART) --release $(RELEASE) --from $(FROM) 11 | kubectl rollout status statefulset upgrade-master 12 | 13 | test: install goss 14 | 15 | purge: 16 | helm del $(RELEASE) 17 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/upgrade/README.md: -------------------------------------------------------------------------------- 1 | # Upgrade 2 | 3 | This example will deploy a 3 node Elasticsearch cluster chart using an old chart 4 | version, then upgrade it. 5 | 6 | 7 | ## Usage 8 | 9 | * Deploy and upgrade Elasticsearch chart with the default values: `make install` 10 | 11 | 12 | ## Testing 13 | 14 | You can also run [goss integration tests][] using `make test`. 15 | 16 | 17 | [goss integration tests]: https://github.com/elastic/helm-charts/tree/master/elasticsearch/examples/upgrade/test/goss.yaml 18 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/upgrade/test/goss.yaml: -------------------------------------------------------------------------------- 1 | http: 2 | http://localhost:9200/_cluster/health: 3 | status: 200 4 | timeout: 2000 5 | body: 6 | - "green" 7 | - '"number_of_nodes":3' 8 | - '"number_of_data_nodes":3' 9 | 10 | http://localhost:9200: 11 | status: 200 12 | timeout: 2000 13 | body: 14 | - '"number" : "7.17.3"' 15 | - '"cluster_name" : "upgrade"' 16 | - "You Know, for Search" 17 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/examples/upgrade/values.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | clusterName: upgrade 3 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | 1. Watch all cluster members come up. 2 | $ kubectl get pods --namespace={{ .Release.Namespace }} -l app={{ template "elasticsearch.uname" . }} -w 3 | {{- if .Values.tests.enabled -}} 4 | 2. Test cluster health using Helm test. 5 | $ helm --namespace={{ .Release.Namespace }} test {{ .Release.Name }} 6 | {{- end -}} 7 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/templates/poddisruptionbudget.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.maxUnavailable }} 2 | {{- if .Capabilities.APIVersions.Has "policy/v1" -}} 3 | apiVersion: policy/v1 4 | {{- else}} 5 | apiVersion: policy/v1beta1 6 | {{- end }} 7 | kind: PodDisruptionBudget 8 | metadata: 9 | name: "{{ template "elasticsearch.uname" . }}-pdb" 10 | spec: 11 | maxUnavailable: {{ .Values.maxUnavailable }} 12 | selector: 13 | matchLabels: 14 | app: "{{ template "elasticsearch.uname" . }}" 15 | {{- end }} 16 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/templates/podsecuritypolicy.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.podSecurityPolicy.create -}} 2 | {{- $fullName := include "elasticsearch.uname" . -}} 3 | {{- if .Capabilities.APIVersions.Has "policy/v1" -}} 4 | apiVersion: policy/v1 5 | {{- else}} 6 | apiVersion: policy/v1beta1 7 | {{- end }} 8 | kind: PodSecurityPolicy 9 | metadata: 10 | name: {{ default $fullName .Values.podSecurityPolicy.name | quote }} 11 | labels: 12 | heritage: {{ .Release.Service | quote }} 13 | release: {{ .Release.Name | quote }} 14 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 15 | app: {{ $fullName | quote }} 16 | spec: 17 | {{ toYaml .Values.podSecurityPolicy.spec | indent 2 }} 18 | {{- end -}} 19 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/templates/role.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | {{- $fullName := include "elasticsearch.uname" . -}} 3 | apiVersion: rbac.authorization.k8s.io/v1 4 | kind: Role 5 | metadata: 6 | name: {{ $fullName | quote }} 7 | labels: 8 | heritage: {{ .Release.Service | quote }} 9 | release: {{ .Release.Name | quote }} 10 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 11 | app: {{ $fullName | quote }} 12 | rules: 13 | - apiGroups: 14 | - extensions 15 | resources: 16 | - podsecuritypolicies 17 | resourceNames: 18 | {{- if eq .Values.podSecurityPolicy.name "" }} 19 | - {{ $fullName | quote }} 20 | {{- else }} 21 | - {{ .Values.podSecurityPolicy.name | quote }} 22 | {{- end }} 23 | verbs: 24 | - use 25 | {{- end -}} 26 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/templates/rolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | {{- $fullName := include "elasticsearch.uname" . -}} 3 | apiVersion: rbac.authorization.k8s.io/v1 4 | kind: RoleBinding 5 | metadata: 6 | name: {{ $fullName | quote }} 7 | labels: 8 | heritage: {{ .Release.Service | quote }} 9 | release: {{ .Release.Name | quote }} 10 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 11 | app: {{ $fullName | quote }} 12 | subjects: 13 | - kind: ServiceAccount 14 | name: "{{ template "elasticsearch.serviceAccount" . }}" 15 | namespace: {{ .Release.Namespace | quote }} 16 | roleRef: 17 | kind: Role 18 | name: {{ $fullName | quote }} 19 | apiGroup: rbac.authorization.k8s.io 20 | {{- end -}} 21 | -------------------------------------------------------------------------------- /platform/vendor/elastic/chart/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | {{- $fullName := include "elasticsearch.uname" . -}} 3 | apiVersion: v1 4 | kind: ServiceAccount 5 | metadata: 6 | name: "{{ template "elasticsearch.serviceAccount" . }}" 7 | annotations: 8 | {{- with .Values.rbac.serviceAccountAnnotations }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | labels: 12 | heritage: {{ .Release.Service | quote }} 13 | release: {{ .Release.Name | quote }} 14 | chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" 15 | app: {{ $fullName | quote }} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/Chart.yaml: -------------------------------------------------------------------------------- 1 | annotations: 2 | artifacthub.io/changes: | 3 | - kind: added 4 | description: "Add initial Openshift SCC support" 5 | apiVersion: v1 6 | appVersion: 1.9.3 7 | description: Fast and lightweight log processor and forwarder or Linux, OSX and BSD 8 | family operating systems. 9 | home: https://fluentbit.io/ 10 | icon: https://fluentbit.io/assets/img/logo1-default.png 11 | keywords: 12 | - logging 13 | - fluent-bit 14 | - fluentd 15 | maintainers: 16 | - email: eduardo@calyptia.com 17 | name: edsiper 18 | - email: naseem@transit.app 19 | name: naseemkullah 20 | - email: towmeykaw@gmail.com 21 | name: Towmeykaw 22 | - email: steve.hipwell@gmail.com 23 | name: stevehipwell 24 | name: fluent-bit 25 | sources: 26 | - https://github.com/fluent/fluent-bit/ 27 | version: 0.20.1 28 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/ci/ci-values.yaml: -------------------------------------------------------------------------------- 1 | logLevel: debug 2 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | Get Fluent Bit build information by running these commands: 2 | 3 | export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "fluent-bit.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}") 4 | kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 2020:2020 5 | curl http://127.0.0.1:2020 6 | 7 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | name: {{ include "fluent-bit.fullname" . }} 6 | labels: 7 | {{- include "fluent-bit.labels" . | nindent 4 }} 8 | roleRef: 9 | apiGroup: rbac.authorization.k8s.io 10 | kind: ClusterRole 11 | name: {{ include "fluent-bit.fullname" . }} 12 | subjects: 13 | - kind: ServiceAccount 14 | name: {{ include "fluent-bit.serviceAccountName" . }} 15 | namespace: {{ .Release.Namespace }} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/templates/configmap-dashboards.yaml: -------------------------------------------------------------------------------- 1 | 2 | {{- if .Values.dashboards.enabled -}} 3 | {{- range $path, $_ := .Files.Glob "dashboards/*.json" }} 4 | apiVersion: v1 5 | kind: ConfigMap 6 | metadata: 7 | name: {{ include "fluent-bit.fullname" $ }}-dashboard-{{ trimSuffix ".json" (base $path) }} 8 | {{- with $.Values.dashboards.namespace }} 9 | namespace: {{ . }} 10 | {{- end }} 11 | {{- with $.Values.dashboards.annotations }} 12 | annotations: 13 | {{- toYaml . | nindent 4 -}} 14 | {{- end }} 15 | labels: 16 | {{- include "fluent-bit.labels" $ | nindent 4 }} 17 | {{ $.Values.dashboards.labelKey }}: "1" 18 | data: 19 | {{ base $path }}: | 20 | {{- tpl ($.Files.Get $path) $ | nindent 4 }} 21 | --- 22 | {{- end }} 23 | {{- end -}} 24 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/templates/configmap-luascripts.yaml: -------------------------------------------------------------------------------- 1 | {{- if gt (len .Values.luaScripts) 0 -}} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | name: {{ include "fluent-bit.fullname" . }}-luascripts 6 | labels: 7 | {{- include "fluent-bit.labels" . | nindent 4 }} 8 | data: 9 | {{ range $key, $value := .Values.luaScripts }} 10 | {{ $key }}: {{ $value | quote }} 11 | {{ end }} 12 | {{- end -}} 13 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- if (empty .Values.existingConfigMap) -}} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | name: {{ include "fluent-bit.fullname" . }} 6 | labels: 7 | {{- include "fluent-bit.labels" . | nindent 4 }} 8 | data: 9 | custom_parsers.conf: | 10 | {{- (tpl .Values.config.customParsers $) | nindent 4 }} 11 | fluent-bit.conf: | 12 | {{- (tpl .Values.config.service $) | nindent 4 }} 13 | {{- (tpl .Values.config.inputs $) | nindent 4 }} 14 | {{- (tpl .Values.config.filters $) | nindent 4 }} 15 | {{- (tpl .Values.config.outputs $) | nindent 4 }} 16 | {{- range $key, $val := .Values.config.extraFiles }} 17 | {{ $key }}: | 18 | {{- (tpl $val $) | nindent 4 }} 19 | {{- end }} 20 | {{- end -}} 21 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/templates/networkpolicy.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.networkPolicy.enabled }} 2 | apiVersion: "networking.k8s.io/v1" 3 | kind: "NetworkPolicy" 4 | metadata: 5 | name: {{ include "fluent-bit.fullname" . | quote }} 6 | labels: 7 | {{- include "fluent-bit.labels" . | nindent 4 }} 8 | spec: 9 | policyTypes: 10 | - "Ingress" 11 | podSelector: 12 | matchLabels: 13 | {{- include "fluent-bit.selectorLabels" . | nindent 6 }} 14 | ingress: 15 | {{- with .Values.networkPolicy.ingress }} 16 | - from: 17 | {{- with .from }}{{- . | toYaml | nindent 8 }}{{- else }} []{{- end }} 18 | ports: 19 | - protocol: "TCP" 20 | port: {{ $.Values.service.port }} 21 | {{- end }} 22 | {{- end }} 23 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/templates/pdb.yaml: -------------------------------------------------------------------------------- 1 | {{- if and ( eq .Values.kind "Deployment" ) .Values.podDisruptionBudget.enabled }} 2 | apiVersion: {{ include "fluent-bit.pdb.apiVersion" . }} 3 | kind: PodDisruptionBudget 4 | metadata: 5 | name: {{ include "fluent-bit.fullname" . }} 6 | labels: 7 | {{- include "fluent-bit.labels" . | nindent 4 }} 8 | {{- with .Values.podDisruptionBudget.annotations }} 9 | annotations: 10 | {{- toYaml . | nindent 4 }} 11 | {{- end }} 12 | spec: 13 | maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable }} 14 | selector: 15 | matchLabels: 16 | {{- include "fluent-bit.selectorLabels" . | nindent 6 }} 17 | {{- with .Values.labels }} 18 | {{- toYaml . | nindent 6 }} 19 | {{- end }} 20 | {{- end }} 21 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/templates/prometheusrule.yaml: -------------------------------------------------------------------------------- 1 | {{- if and ( .Capabilities.APIVersions.Has "monitoring.coreos.com/v1" ) .Values.prometheusRule.enabled }} 2 | apiVersion: monitoring.coreos.com/v1 3 | kind: PrometheusRule 4 | metadata: 5 | name: {{ include "fluent-bit.fullname" . }} 6 | {{- with .Values.prometheusRule.namespace }} 7 | namespace: {{ . }} 8 | {{- end }} 9 | labels: 10 | {{- include "fluent-bit.labels" . | nindent 4 }} 11 | {{- if .Values.prometheusRule.additionalLabels }} 12 | {{- toYaml .Values.prometheusRule.additionalLabels | nindent 4 }} 13 | {{- end }} 14 | spec: 15 | {{- if .Values.prometheusRule.rules }} 16 | groups: 17 | - name: {{ template "fluent-bit.name" . }} 18 | rules: {{- toYaml .Values.prometheusRule.rules | nindent 4 }} 19 | {{- end }} 20 | {{- end }} 21 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.create -}} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ include "fluent-bit.serviceAccountName" . }} 6 | labels: 7 | {{- include "fluent-bit.labels" . | nindent 4 }} 8 | {{- with .Values.serviceAccount.annotations }} 9 | annotations: 10 | {{- toYaml . | nindent 4 }} 11 | {{- end }} 12 | {{- end -}} 13 | -------------------------------------------------------------------------------- /platform/vendor/fluent/chart/templates/tests/test-connection.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Pod 3 | metadata: 4 | name: "{{ include "fluent-bit.fullname" . }}-test-connection" 5 | labels: 6 | {{- include "fluent-bit.labels" . | nindent 4 }} 7 | annotations: 8 | "helm.sh/hook": test-success 9 | spec: 10 | containers: 11 | - name: wget 12 | image: "{{ .Values.testFramework.image.repository }}:{{ .Values.testFramework.image.tag }}" 13 | imagePullPolicy: {{ .Values.testFramework.image.pullPolicy }} 14 | command: ['wget'] 15 | args: ['{{ include "fluent-bit.fullname" . }}:{{ .Values.service.port }}'] 16 | {{- with .Values.imagePullSecrets }} 17 | imagePullSecrets: 18 | {{- toYaml . | nindent 4 }} 19 | {{- end }} 20 | restartPolicy: Never 21 | -------------------------------------------------------------------------------- /platform/vendor/gatekeeper/chart/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /platform/vendor/gatekeeper/chart/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v2 2 | appVersion: v3.6.0 3 | description: A Helm chart for Gatekeeper 4 | home: https://github.com/open-policy-agent/gatekeeper 5 | keywords: 6 | - open policy agent 7 | name: gatekeeper 8 | sources: 9 | - https://github.com/open-policy-agent/gatekeeper.git 10 | version: 3.6.0 11 | -------------------------------------------------------------------------------- /platform/vendor/gatekeeper/chart/templates/gatekeeper-admin-serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | labels: 5 | app: '{{ template "gatekeeper.name" . }}' 6 | chart: '{{ template "gatekeeper.name" . }}' 7 | gatekeeper.sh/system: "yes" 8 | heritage: '{{ .Release.Service }}' 9 | release: '{{ .Release.Name }}' 10 | name: gatekeeper-admin 11 | namespace: '{{ .Release.Namespace }}' 12 | -------------------------------------------------------------------------------- /platform/vendor/gatekeeper/chart/templates/gatekeeper-critical-pods-resourcequota.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.resourceQuota }} 2 | apiVersion: v1 3 | kind: ResourceQuota 4 | metadata: 5 | labels: 6 | app: '{{ template "gatekeeper.name" . }}' 7 | chart: '{{ template "gatekeeper.name" . }}' 8 | gatekeeper.sh/system: "yes" 9 | heritage: '{{ .Release.Service }}' 10 | release: '{{ .Release.Name }}' 11 | name: gatekeeper-critical-pods 12 | namespace: '{{ .Release.Namespace }}' 13 | spec: 14 | hard: 15 | pods: {{ .Values.podCountLimit }} 16 | scopeSelector: 17 | matchExpressions: 18 | - operator: In 19 | scopeName: PriorityClass 20 | values: 21 | - {{ .Values.controllerManager.priorityClassName }} 22 | - {{ .Values.audit.priorityClassName }} 23 | {{- end }} 24 | -------------------------------------------------------------------------------- /platform/vendor/gatekeeper/chart/templates/gatekeeper-manager-role-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | creationTimestamp: null 5 | labels: 6 | app: '{{ template "gatekeeper.name" . }}' 7 | chart: '{{ template "gatekeeper.name" . }}' 8 | gatekeeper.sh/system: "yes" 9 | heritage: '{{ .Release.Service }}' 10 | release: '{{ .Release.Name }}' 11 | name: gatekeeper-manager-role 12 | namespace: '{{ .Release.Namespace }}' 13 | rules: 14 | - apiGroups: 15 | - "" 16 | resources: 17 | - events 18 | verbs: 19 | - create 20 | - patch 21 | - apiGroups: 22 | - "" 23 | resources: 24 | - secrets 25 | verbs: 26 | - create 27 | - delete 28 | - get 29 | - list 30 | - patch 31 | - update 32 | - watch 33 | -------------------------------------------------------------------------------- /platform/vendor/gatekeeper/chart/templates/gatekeeper-manager-rolebinding-clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | labels: 5 | app: '{{ template "gatekeeper.name" . }}' 6 | chart: '{{ template "gatekeeper.name" . }}' 7 | gatekeeper.sh/system: "yes" 8 | heritage: '{{ .Release.Service }}' 9 | release: '{{ .Release.Name }}' 10 | name: gatekeeper-manager-rolebinding 11 | roleRef: 12 | apiGroup: rbac.authorization.k8s.io 13 | kind: ClusterRole 14 | name: gatekeeper-manager-role 15 | subjects: 16 | - kind: ServiceAccount 17 | name: gatekeeper-admin 18 | namespace: '{{ .Release.Namespace }}' 19 | -------------------------------------------------------------------------------- /platform/vendor/gatekeeper/chart/templates/gatekeeper-manager-rolebinding-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | labels: 5 | app: '{{ template "gatekeeper.name" . }}' 6 | chart: '{{ template "gatekeeper.name" . }}' 7 | gatekeeper.sh/system: "yes" 8 | heritage: '{{ .Release.Service }}' 9 | release: '{{ .Release.Name }}' 10 | name: gatekeeper-manager-rolebinding 11 | namespace: '{{ .Release.Namespace }}' 12 | roleRef: 13 | apiGroup: rbac.authorization.k8s.io 14 | kind: Role 15 | name: gatekeeper-manager-role 16 | subjects: 17 | - kind: ServiceAccount 18 | name: gatekeeper-admin 19 | namespace: '{{ .Release.Namespace }}' 20 | -------------------------------------------------------------------------------- /platform/vendor/gatekeeper/chart/templates/gatekeeper-webhook-server-cert-secret.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Secret 3 | metadata: 4 | annotations: {{- toYaml .Values.secretAnnotations | trim | nindent 4 }} 5 | labels: 6 | app: '{{ template "gatekeeper.name" . }}' 7 | chart: '{{ template "gatekeeper.name" . }}' 8 | gatekeeper.sh/system: "yes" 9 | heritage: '{{ .Release.Service }}' 10 | release: '{{ .Release.Name }}' 11 | name: gatekeeper-webhook-server-cert 12 | namespace: '{{ .Release.Namespace }}' 13 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | .vscode/ 23 | #charts/ 24 | #Chart.lock 25 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/Chart.lock: -------------------------------------------------------------------------------- 1 | dependencies: 2 | - name: memcached 3 | repository: https://raw.githubusercontent.com/bitnami/charts/eb5f9a9513d987b519f0ecd732e7031241c50328/bitnami 4 | version: 5.9.0 5 | - name: mysql 6 | repository: https://raw.githubusercontent.com/bitnami/charts/eb5f9a9513d987b519f0ecd732e7031241c50328/bitnami 7 | version: 6.14.10 8 | - name: postgresql 9 | repository: https://raw.githubusercontent.com/bitnami/charts/eb5f9a9513d987b519f0ecd732e7031241c50328/bitnami 10 | version: 10.3.17 11 | - name: mariadb 12 | repository: https://raw.githubusercontent.com/bitnami/charts/eb5f9a9513d987b519f0ecd732e7031241c50328/bitnami 13 | version: 9.3.6 14 | digest: sha256:0439bf606ed2f02055d9c87d9f954a4c0be60ef1a26950adc322158d739d3659 15 | generated: "2022-06-03T05:52:02.767966965Z" 16 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mariadb/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mariadb/Chart.lock: -------------------------------------------------------------------------------- 1 | dependencies: 2 | - name: common 3 | repository: https://charts.bitnami.com/bitnami 4 | version: 1.4.1 5 | digest: sha256:81be4c0ebd0a81952423b24268e82697231b8c07991ee60b23b950ff1db003a2 6 | generated: "2021-03-24T01:26:15.013812575Z" 7 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mariadb/charts/common/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | .vscode/ 23 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mariadb/charts/common/Chart.yaml: -------------------------------------------------------------------------------- 1 | annotations: 2 | category: Infrastructure 3 | apiVersion: v2 4 | appVersion: 1.4.1 5 | description: A Library Helm Chart for grouping common logic between bitnami charts. 6 | This chart is not deployable by itself. 7 | home: https://github.com/bitnami/charts/tree/master/bitnami/common 8 | icon: https://bitnami.com/downloads/logos/bitnami-mark.png 9 | keywords: 10 | - common 11 | - helper 12 | - template 13 | - function 14 | - bitnami 15 | maintainers: 16 | - email: containers@bitnami.com 17 | name: Bitnami 18 | name: common 19 | sources: 20 | - https://github.com/bitnami/charts 21 | - http://www.bitnami.com/ 22 | type: library 23 | version: 1.4.1 24 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mariadb/charts/common/templates/_labels.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Kubernetes standard labels 4 | */}} 5 | {{- define "common.labels.standard" -}} 6 | app.kubernetes.io/name: {{ include "common.names.name" . }} 7 | helm.sh/chart: {{ include "common.names.chart" . }} 8 | app.kubernetes.io/instance: {{ .Release.Name }} 9 | app.kubernetes.io/managed-by: {{ .Release.Service }} 10 | {{- end -}} 11 | 12 | {{/* 13 | Labels to use on deploy.spec.selector.matchLabels and svc.spec.selector 14 | */}} 15 | {{- define "common.labels.matchLabels" -}} 16 | app.kubernetes.io/name: {{ include "common.names.name" . }} 17 | app.kubernetes.io/instance: {{ .Release.Name }} 18 | {{- end -}} 19 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mariadb/charts/common/templates/_storage.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Return the proper Storage Class 4 | {{ include "common.storage.class" ( dict "persistence" .Values.path.to.the.persistence "global" $) }} 5 | */}} 6 | {{- define "common.storage.class" -}} 7 | 8 | {{- $storageClass := .persistence.storageClass -}} 9 | {{- if .global -}} 10 | {{- if .global.storageClass -}} 11 | {{- $storageClass = .global.storageClass -}} 12 | {{- end -}} 13 | {{- end -}} 14 | 15 | {{- if $storageClass -}} 16 | {{- if (eq "-" $storageClass) -}} 17 | {{- printf "storageClassName: \"\"" -}} 18 | {{- else }} 19 | {{- printf "storageClassName: %s" $storageClass -}} 20 | {{- end -}} 21 | {{- end -}} 22 | 23 | {{- end -}} 24 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mariadb/charts/common/templates/_tplvalues.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Renders a value that contains template. 4 | Usage: 5 | {{ include "common.tplvalues.render" ( dict "value" .Values.path.to.the.Value "context" $) }} 6 | */}} 7 | {{- define "common.tplvalues.render" -}} 8 | {{- if typeIs "string" .value }} 9 | {{- tpl .value .context }} 10 | {{- else }} 11 | {{- tpl (.value | toYaml) .context }} 12 | {{- end }} 13 | {{- end -}} 14 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mariadb/charts/common/templates/_warnings.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Warning about using rolling tag. 4 | Usage: 5 | {{ include "common.warnings.rollingTag" .Values.path.to.the.imageRoot }} 6 | */}} 7 | {{- define "common.warnings.rollingTag" -}} 8 | 9 | {{- if and (contains "bitnami/" .repository) (not (.tag | toString | regexFind "-r\\d+$|sha256:")) }} 10 | WARNING: Rolling tag detected ({{ .repository }}:{{ .tag }}), please note that it is strongly recommended to avoid using rolling tags in a production environment. 11 | +info https://docs.bitnami.com/containers/how-to/understand-rolling-tags-containers/ 12 | {{- end }} 13 | 14 | {{- end -}} 15 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mariadb/charts/common/values.yaml: -------------------------------------------------------------------------------- 1 | ## bitnami/common 2 | ## It is required by CI/CD tools and processes. 3 | exampleValue: common-chart 4 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mariadb/templates/extra-list.yaml: -------------------------------------------------------------------------------- 1 | {{- range .Values.extraDeploy }} 2 | --- 3 | {{ include "common.tplvalues.render" (dict "value" . "context" $) }} 4 | {{- end }} 5 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mariadb/templates/primary/configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- if (include "mariadb.primary.createConfigmap" .) }} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | name: {{ include "mariadb.primary.fullname" . }} 6 | namespace: {{ .Release.Namespace }} 7 | labels: {{- include "common.labels.standard" . | nindent 4 }} 8 | app.kubernetes.io/component: primary 9 | {{- if .Values.commonLabels }} 10 | {{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }} 11 | {{- end }} 12 | {{- if .Values.commonAnnotations }} 13 | annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }} 14 | {{- end }} 15 | data: 16 | my.cnf: |- 17 | {{ .Values.primary.configuration | indent 4 }} 18 | {{- end -}} 19 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mariadb/templates/primary/initialization-configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.initdbScripts (not .Values.initdbScriptsConfigMap) }} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | name: {{ printf "%s-init-scripts" (include "mariadb.primary.fullname" .) }} 6 | namespace: {{ .Release.Namespace }} 7 | labels: {{- include "common.labels.standard" . | nindent 4 }} 8 | app.kubernetes.io/component: primary 9 | data: 10 | {{- include "common.tplvalues.render" (dict "value" .Values.initdbScripts "context" .) | nindent 2 }} 11 | {{ end }} 12 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/Chart.lock: -------------------------------------------------------------------------------- 1 | dependencies: 2 | - name: common 3 | repository: https://charts.bitnami.com/bitnami 4 | version: 1.4.2 5 | digest: sha256:4e3ec38e0e27e9fc1defb2a13f67a0aa12374bf0b15f06a6c13b1b46df6bffeb 6 | generated: "2021-03-25T20:52:23.855156849Z" 7 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/Chart.yaml: -------------------------------------------------------------------------------- 1 | annotations: 2 | category: Infrastructure 3 | apiVersion: v2 4 | appVersion: 1.6.9 5 | dependencies: 6 | - name: common 7 | repository: https://charts.bitnami.com/bitnami 8 | tags: 9 | - bitnami-common 10 | version: 1.x.x 11 | description: Chart for Memcached 12 | home: https://github.com/bitnami/charts/tree/master/bitnami/memcached 13 | icon: https://bitnami.com/assets/stacks/memcached/img/memcached-stack-220x234.png 14 | keywords: 15 | - memcached 16 | - cache 17 | maintainers: 18 | - email: containers@bitnami.com 19 | name: Bitnami 20 | name: memcached 21 | sources: 22 | - https://github.com/bitnami/bitnami-docker-memcached 23 | - http://memcached.org/ 24 | version: 5.9.0 25 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/charts/common/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | .vscode/ 23 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/charts/common/Chart.yaml: -------------------------------------------------------------------------------- 1 | annotations: 2 | category: Infrastructure 3 | apiVersion: v2 4 | appVersion: 1.4.2 5 | description: A Library Helm Chart for grouping common logic between bitnami charts. 6 | This chart is not deployable by itself. 7 | home: https://github.com/bitnami/charts/tree/master/bitnami/common 8 | icon: https://bitnami.com/downloads/logos/bitnami-mark.png 9 | keywords: 10 | - common 11 | - helper 12 | - template 13 | - function 14 | - bitnami 15 | maintainers: 16 | - email: containers@bitnami.com 17 | name: Bitnami 18 | name: common 19 | sources: 20 | - https://github.com/bitnami/charts 21 | - http://www.bitnami.com/ 22 | type: library 23 | version: 1.4.2 24 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/charts/common/templates/_labels.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Kubernetes standard labels 4 | */}} 5 | {{- define "common.labels.standard" -}} 6 | app.kubernetes.io/name: {{ include "common.names.name" . }} 7 | helm.sh/chart: {{ include "common.names.chart" . }} 8 | app.kubernetes.io/instance: {{ .Release.Name }} 9 | app.kubernetes.io/managed-by: {{ .Release.Service }} 10 | {{- end -}} 11 | 12 | {{/* 13 | Labels to use on deploy.spec.selector.matchLabels and svc.spec.selector 14 | */}} 15 | {{- define "common.labels.matchLabels" -}} 16 | app.kubernetes.io/name: {{ include "common.names.name" . }} 17 | app.kubernetes.io/instance: {{ .Release.Name }} 18 | {{- end -}} 19 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/charts/common/templates/_storage.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Return the proper Storage Class 4 | {{ include "common.storage.class" ( dict "persistence" .Values.path.to.the.persistence "global" $) }} 5 | */}} 6 | {{- define "common.storage.class" -}} 7 | 8 | {{- $storageClass := .persistence.storageClass -}} 9 | {{- if .global -}} 10 | {{- if .global.storageClass -}} 11 | {{- $storageClass = .global.storageClass -}} 12 | {{- end -}} 13 | {{- end -}} 14 | 15 | {{- if $storageClass -}} 16 | {{- if (eq "-" $storageClass) -}} 17 | {{- printf "storageClassName: \"\"" -}} 18 | {{- else }} 19 | {{- printf "storageClassName: %s" $storageClass -}} 20 | {{- end -}} 21 | {{- end -}} 22 | 23 | {{- end -}} 24 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/charts/common/templates/_tplvalues.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Renders a value that contains template. 4 | Usage: 5 | {{ include "common.tplvalues.render" ( dict "value" .Values.path.to.the.Value "context" $) }} 6 | */}} 7 | {{- define "common.tplvalues.render" -}} 8 | {{- if typeIs "string" .value }} 9 | {{- tpl .value .context }} 10 | {{- else }} 11 | {{- tpl (.value | toYaml) .context }} 12 | {{- end }} 13 | {{- end -}} 14 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/charts/common/templates/_warnings.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Warning about using rolling tag. 4 | Usage: 5 | {{ include "common.warnings.rollingTag" .Values.path.to.the.imageRoot }} 6 | */}} 7 | {{- define "common.warnings.rollingTag" -}} 8 | 9 | {{- if and (contains "bitnami/" .repository) (not (.tag | toString | regexFind "-r\\d+$|sha256:")) }} 10 | WARNING: Rolling tag detected ({{ .repository }}:{{ .tag }}), please note that it is strongly recommended to avoid using rolling tags in a production environment. 11 | +info https://docs.bitnami.com/containers/how-to/understand-rolling-tags-containers/ 12 | {{- end }} 13 | 14 | {{- end -}} 15 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/charts/common/values.yaml: -------------------------------------------------------------------------------- 1 | ## bitnami/common 2 | ## It is required by CI/CD tools and processes. 3 | exampleValue: common-chart 4 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/ci/values-production.yaml: -------------------------------------------------------------------------------- 1 | # Test values file for generating all of the yaml and check that 2 | # the rendering is correct 3 | 4 | metrics: 5 | enabled: true 6 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/templates/extra-list.yaml: -------------------------------------------------------------------------------- 1 | {{- range .Values.extraDeploy }} 2 | --- 3 | {{ include "common.tplvalues.render" (dict "value" . "context" $) }} 4 | {{- end }} 5 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/templates/secrets.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.memcachedPassword }} 2 | apiVersion: v1 3 | kind: Secret 4 | metadata: 5 | name: {{ template "common.names.fullname" . }} 6 | namespace: {{ .Release.Namespace }} 7 | labels: {{- include "common.labels.standard" . | nindent 4 }} 8 | {{- if .Values.commonLabels }} 9 | {{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }} 10 | {{- end }} 11 | {{- if .Values.commonAnnotations }} 12 | annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }} 13 | {{- end }} 14 | type: Opaque 15 | data: 16 | memcached-password: {{ .Values.memcachedPassword | b64enc | quote }} 17 | {{- end }} 18 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/memcached/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.create }} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }} 5 | metadata: 6 | name: {{ template "memcached.serviceAccountName" . }} 7 | namespace: {{ .Release.Namespace }} 8 | labels: {{- include "common.labels.standard" . | nindent 4 }} 9 | {{- if .Values.commonLabels }} 10 | {{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }} 11 | {{- end }} 12 | {{- if .Values.commonAnnotations }} 13 | annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }} 14 | {{- end }} 15 | {{- end }} 16 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mysql/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mysql/Chart.yaml: -------------------------------------------------------------------------------- 1 | annotations: 2 | category: Database 3 | apiVersion: v1 4 | appVersion: 8.0.21 5 | description: Chart to create a Highly available MySQL cluster 6 | home: https://github.com/bitnami/charts/tree/master/bitnami/mysql 7 | icon: https://bitnami.com/assets/stacks/mysql/img/mysql-stack-220x234.png 8 | keywords: 9 | - mysql 10 | - database 11 | - sql 12 | - cluster 13 | - high availablity 14 | maintainers: 15 | - email: containers@bitnami.com 16 | name: Bitnami 17 | name: mysql 18 | sources: 19 | - https://github.com/bitnami/bitnami-docker-mysql 20 | - https://mysql.com 21 | version: 6.14.10 22 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mysql/ci/values-production.yaml: -------------------------------------------------------------------------------- 1 | # Test values file for generating all of the yaml and check that 2 | # the rendering is correct 3 | 4 | volumePermissions: 5 | enabled: true 6 | 7 | master: 8 | extraEnvVars: 9 | - name: TEST 10 | value: "3" 11 | 12 | extraEnvVarsSecret: example-secret 13 | extraEnvVarsCM: example-cm 14 | 15 | slave: 16 | extraEnvVars: 17 | - name: TEST 18 | value: "2" 19 | 20 | extraEnvVarsSecret: example-secret-2 21 | extraEnvVarsCM: example-cm-2 22 | replicas: 2 23 | 24 | metrics: 25 | enabled: true 26 | ## Kubeval doesn't recognise ServiceMonitor as a valid K8s object 27 | # serviceMonitor: 28 | # enabled: true 29 | 30 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mysql/files/docker-entrypoint-initdb.d/README.md: -------------------------------------------------------------------------------- 1 | You can copy here your custom .sh, .sql or .sql.gz file so they are executed during the first boot of the image. 2 | 3 | More info in the [bitnami-docker-mysql](https://github.com/bitnami/bitnami-docker-mysql#initializing-a-new-instance) repository. -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mysql/templates/master-configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.master.config }} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | name: {{ template "mysql.master.fullname" . }} 6 | labels: {{- include "mysql.labels" . | nindent 4 }} 7 | component: master 8 | data: 9 | my.cnf: |- 10 | {{ .Values.master.config | indent 4 }} 11 | {{- end -}} 12 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mysql/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.create }} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ template "mysql.serviceAccountName" . }} 6 | labels: 7 | app: {{ template "mysql.name" . }} 8 | chart: {{ template "mysql.chart" . }} 9 | release: "{{ .Release.Name }}" 10 | heritage: "{{ .Release.Service }}" 11 | secrets: 12 | - name: {{ template "mysql.secretName" . }} 13 | {{- end }} 14 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/mysql/templates/slave-configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.replication.enabled .Values.slave.config }} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | name: {{ template "mysql.slave.fullname" . }} 6 | labels: {{- include "mysql.labels" . | nindent 4 }} 7 | component: slave 8 | data: 9 | my.cnf: |- 10 | {{ .Values.slave.config | indent 4 }} 11 | {{- end }} 12 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/Chart.lock: -------------------------------------------------------------------------------- 1 | dependencies: 2 | - name: common 3 | repository: https://charts.bitnami.com/bitnami 4 | version: 1.4.2 5 | digest: sha256:dce0349883107e3ff103f4f17d3af4ad1ea3c7993551b1c28865867d3e53d37c 6 | generated: "2021-03-30T09:13:28.360322819Z" 7 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/charts/common/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | .vscode/ 23 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/charts/common/Chart.yaml: -------------------------------------------------------------------------------- 1 | annotations: 2 | category: Infrastructure 3 | apiVersion: v2 4 | appVersion: 1.4.2 5 | description: A Library Helm Chart for grouping common logic between bitnami charts. 6 | This chart is not deployable by itself. 7 | home: https://github.com/bitnami/charts/tree/master/bitnami/common 8 | icon: https://bitnami.com/downloads/logos/bitnami-mark.png 9 | keywords: 10 | - common 11 | - helper 12 | - template 13 | - function 14 | - bitnami 15 | maintainers: 16 | - email: containers@bitnami.com 17 | name: Bitnami 18 | name: common 19 | sources: 20 | - https://github.com/bitnami/charts 21 | - http://www.bitnami.com/ 22 | type: library 23 | version: 1.4.2 24 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/charts/common/templates/_labels.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Kubernetes standard labels 4 | */}} 5 | {{- define "common.labels.standard" -}} 6 | app.kubernetes.io/name: {{ include "common.names.name" . }} 7 | helm.sh/chart: {{ include "common.names.chart" . }} 8 | app.kubernetes.io/instance: {{ .Release.Name }} 9 | app.kubernetes.io/managed-by: {{ .Release.Service }} 10 | {{- end -}} 11 | 12 | {{/* 13 | Labels to use on deploy.spec.selector.matchLabels and svc.spec.selector 14 | */}} 15 | {{- define "common.labels.matchLabels" -}} 16 | app.kubernetes.io/name: {{ include "common.names.name" . }} 17 | app.kubernetes.io/instance: {{ .Release.Name }} 18 | {{- end -}} 19 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/charts/common/templates/_storage.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Return the proper Storage Class 4 | {{ include "common.storage.class" ( dict "persistence" .Values.path.to.the.persistence "global" $) }} 5 | */}} 6 | {{- define "common.storage.class" -}} 7 | 8 | {{- $storageClass := .persistence.storageClass -}} 9 | {{- if .global -}} 10 | {{- if .global.storageClass -}} 11 | {{- $storageClass = .global.storageClass -}} 12 | {{- end -}} 13 | {{- end -}} 14 | 15 | {{- if $storageClass -}} 16 | {{- if (eq "-" $storageClass) -}} 17 | {{- printf "storageClassName: \"\"" -}} 18 | {{- else }} 19 | {{- printf "storageClassName: %s" $storageClass -}} 20 | {{- end -}} 21 | {{- end -}} 22 | 23 | {{- end -}} 24 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/charts/common/templates/_tplvalues.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Renders a value that contains template. 4 | Usage: 5 | {{ include "common.tplvalues.render" ( dict "value" .Values.path.to.the.Value "context" $) }} 6 | */}} 7 | {{- define "common.tplvalues.render" -}} 8 | {{- if typeIs "string" .value }} 9 | {{- tpl .value .context }} 10 | {{- else }} 11 | {{- tpl (.value | toYaml) .context }} 12 | {{- end }} 13 | {{- end -}} 14 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/charts/common/templates/_warnings.tpl: -------------------------------------------------------------------------------- 1 | {{/* vim: set filetype=mustache: */}} 2 | {{/* 3 | Warning about using rolling tag. 4 | Usage: 5 | {{ include "common.warnings.rollingTag" .Values.path.to.the.imageRoot }} 6 | */}} 7 | {{- define "common.warnings.rollingTag" -}} 8 | 9 | {{- if and (contains "bitnami/" .repository) (not (.tag | toString | regexFind "-r\\d+$|sha256:")) }} 10 | WARNING: Rolling tag detected ({{ .repository }}:{{ .tag }}), please note that it is strongly recommended to avoid using rolling tags in a production environment. 11 | +info https://docs.bitnami.com/containers/how-to/understand-rolling-tags-containers/ 12 | {{- end }} 13 | 14 | {{- end -}} 15 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/charts/common/values.yaml: -------------------------------------------------------------------------------- 1 | ## bitnami/common 2 | ## It is required by CI/CD tools and processes. 3 | exampleValue: common-chart 4 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/ci/commonAnnotations.yaml: -------------------------------------------------------------------------------- 1 | commonAnnotations: 2 | helm.sh/hook: "\"pre-install, pre-upgrade\"" 3 | helm.sh/hook-weight: "-1" 4 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/ci/default-values.yaml: -------------------------------------------------------------------------------- 1 | # Leave this file empty to ensure that CI runs builds against the default configuration in values.yaml. 2 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/ci/shmvolume-disabled-values.yaml: -------------------------------------------------------------------------------- 1 | shmVolume: 2 | enabled: false 3 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/files/README.md: -------------------------------------------------------------------------------- 1 | Copy here your postgresql.conf and/or pg_hba.conf files to use it as a config map. 2 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/files/conf.d/README.md: -------------------------------------------------------------------------------- 1 | If you don't want to provide the whole configuration file and only specify certain parameters, you can copy here your extended `.conf` files. 2 | These files will be injected as a config maps and add/overwrite the default configuration using the `include_dir` directive that allows settings to be loaded from files other than the default `postgresql.conf`. 3 | 4 | More info in the [bitnami-docker-postgresql README](https://github.com/bitnami/bitnami-docker-postgresql#configuration-file). 5 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/files/docker-entrypoint-initdb.d/README.md: -------------------------------------------------------------------------------- 1 | You can copy here your custom `.sh`, `.sql` or `.sql.gz` file so they are executed during the first boot of the image. 2 | 3 | More info in the [bitnami-docker-postgresql](https://github.com/bitnami/bitnami-docker-postgresql#initializing-a-new-instance) repository. -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/templates/extra-list.yaml: -------------------------------------------------------------------------------- 1 | {{- range .Values.extraDeploy }} 2 | --- 3 | {{ include "common.tplvalues.render" (dict "value" . "context" $) }} 4 | {{- end }} 5 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/templates/metrics-configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.metrics.enabled .Values.metrics.customMetrics }} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | name: {{ template "postgresql.metricsCM" . }} 6 | labels: 7 | {{- include "common.labels.standard" . | nindent 4 }} 8 | {{- if .Values.commonAnnotations }} 9 | annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }} 10 | {{- end }} 11 | namespace: {{ .Release.Namespace }} 12 | data: 13 | custom-metrics.yaml: {{ toYaml .Values.metrics.customMetrics | quote }} 14 | {{- end }} 15 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/templates/role.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create }} 2 | kind: Role 3 | apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }} 4 | metadata: 5 | name: {{ template "common.names.fullname" . }} 6 | labels: 7 | {{- include "common.labels.standard" . | nindent 4 }} 8 | {{- if .Values.commonAnnotations }} 9 | annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }} 10 | {{- end }} 11 | namespace: {{ .Release.Namespace }} 12 | rules: 13 | {{- if .Values.psp.create }} 14 | - apiGroups: ["extensions"] 15 | resources: ["podsecuritypolicies"] 16 | verbs: ["use"] 17 | resourceNames: 18 | - {{ template "common.names.fullname" . }} 19 | {{- end }} 20 | {{- end }} 21 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/charts/postgresql/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if and (.Values.serviceAccount.enabled) (not .Values.serviceAccount.name) }} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | labels: 6 | {{- include "common.labels.standard" . | nindent 4 }} 7 | name: {{ template "common.names.fullname" . }} 8 | {{- if .Values.commonAnnotations }} 9 | annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }} 10 | {{- end }} 11 | namespace: {{ .Release.Namespace }} 12 | {{- end }} 13 | -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/templates/gitea/servicemonitor.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.gitea.metrics.serviceMonitor.enabled -}} 2 | apiVersion: monitoring.coreos.com/v1 3 | kind: ServiceMonitor 4 | metadata: 5 | name: {{ include "gitea.fullname" . }} 6 | labels: 7 | {{- include "gitea.labels" . | nindent 4 }} 8 | {{- if .Values.gitea.metrics.serviceMonitor.additionalLabels }} 9 | {{- toYaml .Values.gitea.metrics.serviceMonitor.additionalLabels | nindent 4 }} 10 | {{- end }} 11 | spec: 12 | selector: 13 | matchLabels: 14 | {{- include "gitea.selectorLabels" . | nindent 6 }} 15 | endpoints: 16 | - port: http 17 | {{- end -}} -------------------------------------------------------------------------------- /platform/vendor/gitea/chart/templates/tests/test-http-connection.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Pod 3 | metadata: 4 | name: "{{ include "gitea.fullname" . }}-test-connection" 5 | labels: 6 | {{ include "gitea.labels" . | nindent 4 }} 7 | annotations: 8 | "helm.sh/hook": test-success 9 | spec: 10 | containers: 11 | - name: wget 12 | image: busybox 13 | command: ['wget'] 14 | args: ['{{ include "gitea.fullname" . }}-http:{{ .Values.service.http.port }}'] 15 | restartPolicy: Never 16 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/.helmignore: -------------------------------------------------------------------------------- 1 | tests/ 2 | .pytest_cache/ 3 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | appVersion: 7.17.3 3 | description: Official Elastic helm chart for Kibana 4 | home: https://github.com/elastic/helm-charts 5 | icon: https://helm.elastic.co/icons/kibana.png 6 | maintainers: 7 | - email: helm-charts@elastic.co 8 | name: Elastic 9 | name: kibana 10 | sources: 11 | - https://github.com/elastic/kibana 12 | version: 7.17.3 13 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/Makefile: -------------------------------------------------------------------------------- 1 | include ../helpers/common.mk 2 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/examples/default/Makefile: -------------------------------------------------------------------------------- 1 | default: test 2 | 3 | include ../../../helpers/examples.mk 4 | 5 | RELEASE := helm-kibana-default 6 | 7 | install: 8 | helm upgrade --wait --timeout=$(TIMEOUT) --install $(RELEASE) ../../ 9 | 10 | test: install goss 11 | 12 | purge: 13 | helm del $(RELEASE) 14 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/examples/default/test/goss.yaml: -------------------------------------------------------------------------------- 1 | http: 2 | http://localhost:5601/api/status: 3 | status: 200 4 | timeout: 2000 5 | body: 6 | - '"number":"7.17.3"' 7 | 8 | http://localhost:5601/app/kibana: 9 | status: 200 10 | timeout: 2000 11 | 12 | http://helm-kibana-default-kibana:5601/app/kibana: 13 | status: 200 14 | timeout: 2000 15 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/examples/openshift/Makefile: -------------------------------------------------------------------------------- 1 | default: test 2 | include ../../../helpers/examples.mk 3 | 4 | RELEASE := kibana 5 | 6 | template: 7 | helm template --values values.yaml ../../ 8 | 9 | install: 10 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values values.yaml $(RELEASE) ../../ 11 | 12 | test: install goss 13 | 14 | purge: 15 | helm del $(RELEASE) 16 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/examples/openshift/test/goss.yaml: -------------------------------------------------------------------------------- 1 | http: 2 | http://localhost:5601/app/kibana: 3 | status: 200 4 | timeout: 2000 5 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/examples/openshift/values.yml: -------------------------------------------------------------------------------- 1 | --- 2 | 3 | podSecurityContext: 4 | fsGroup: null 5 | 6 | securityContext: 7 | runAsUser: null 8 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/examples/security/Makefile: -------------------------------------------------------------------------------- 1 | default: test 2 | 3 | include ../../../helpers/examples.mk 4 | 5 | RELEASE := helm-kibana-security 6 | 7 | install: 8 | helm upgrade --wait --timeout=$(TIMEOUT) --install --values values.yaml $(RELEASE) ../../ 9 | 10 | test: secrets install goss 11 | 12 | purge: 13 | kubectl delete secret kibana || true 14 | helm del $(RELEASE) 15 | 16 | secrets: 17 | encryptionkey=$$(docker run --rm busybox:1.31.1 /bin/sh -c "< /dev/urandom tr -dc _A-Za-z0-9 | head -c50") && \ 18 | kubectl create secret generic kibana --from-literal=encryptionkey=$$encryptionkey 19 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/examples/upgrade/Makefile: -------------------------------------------------------------------------------- 1 | default: test 2 | 3 | include ../../../helpers/examples.mk 4 | 5 | CHART := kibana 6 | RELEASE := helm-kibana-upgrade 7 | FROM := 7.4.0 # versions before 7.4.O aren't compatible with Kubernetes >= 1.16.0 8 | 9 | install: 10 | ../../../helpers/upgrade.sh --chart $(CHART) --release $(RELEASE) --from $(FROM) 11 | kubectl rollout status deployment $(RELEASE)-kibana 12 | 13 | test: install goss 14 | 15 | purge: 16 | helm del $(RELEASE) 17 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/examples/upgrade/README.md: -------------------------------------------------------------------------------- 1 | # Upgrade 2 | 3 | This example will deploy Kibana chart using an old chart version, 4 | then upgrade it. 5 | 6 | 7 | ## Usage 8 | 9 | * Add the Elastic Helm charts repo: `helm repo add elastic https://helm.elastic.co` 10 | 11 | * Deploy [Elasticsearch Helm chart][]: `helm install elasticsearch elastic/elasticsearch` 12 | 13 | * Deploy and upgrade Kibana chart with the default values: `make install` 14 | 15 | 16 | ## Testing 17 | 18 | You can also run [goss integration tests][] using `make test`. 19 | 20 | 21 | [goss integration tests]: https://github.com/elastic/helm-charts/tree/master/kibana/examples/upgrade/test/goss.yaml 22 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/examples/upgrade/test/goss.yaml: -------------------------------------------------------------------------------- 1 | http: 2 | http://localhost:5601/api/status: 3 | status: 200 4 | timeout: 2000 5 | body: 6 | - '"number":"7.17.3"' 7 | 8 | http://localhost:5601/app/kibana: 9 | status: 200 10 | timeout: 2000 11 | 12 | http://helm-kibana-upgrade-kibana:5601/app/kibana: 13 | status: 200 14 | timeout: 2000 15 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/examples/upgrade/values.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | elasticsearchHosts: "http://upgrade-master:9200" 3 | -------------------------------------------------------------------------------- /platform/vendor/kibana/chart/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.kibanaConfig }} 2 | --- 3 | apiVersion: v1 4 | kind: ConfigMap 5 | metadata: 6 | name: {{ template "kibana.fullname" . }}-config 7 | labels: {{ include "kibana.labels" . | nindent 4 }} 8 | data: 9 | {{- range $path, $config := .Values.kibanaConfig }} 10 | {{ $path }}: | 11 | {{ tpl $config $ | indent 4 -}} 12 | {{- end -}} 13 | {{- end -}} 14 | -------------------------------------------------------------------------------- /platform/vendor/spire/crd/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /platform/vendor/spire/crd/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v2 2 | appVersion: 0.0.1 3 | description: 'A Helm chart for deploying the Spire CRDS ' 4 | home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire 5 | icon: https://spiffe.io/img/logos/spire/icon/color/spire-icon-color.png 6 | keywords: 7 | - spire-crds 8 | maintainers: 9 | - email: marco.franssen@gmail.com 10 | name: marcofranssen 11 | url: https://marcofranssen.nl 12 | - email: Kevin.Fox@pnnl.gov 13 | name: kfox1111 14 | - email: fymemon@yahoo.com 15 | name: faisal-memon 16 | - email: edwbuck@gmail.com 17 | name: edwbuck 18 | name: spire-crds 19 | sources: 20 | - https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire 21 | type: application 22 | version: 0.3.0 23 | -------------------------------------------------------------------------------- /platform/vendor/spire/crd/values.yaml: -------------------------------------------------------------------------------- 1 | annotations: 2 | ## @param annotations.helm.sh/resource-policy keep the crds after chart deletion 3 | helm.sh/resource-policy: keep 4 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | ci/ 25 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spiffe-csi-driver/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spiffe-csi-driver/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v2 2 | appVersion: 0.2.3 3 | description: A Helm chart to install the SPIFFE CSI driver. 4 | home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire 5 | icon: https://spiffe.io/img/logos/spire/icon/color/spire-icon-color.png 6 | keywords: 7 | - spiffe 8 | - csi-driver 9 | maintainers: 10 | - email: marco.franssen@gmail.com 11 | name: marcofranssen 12 | url: https://marcofranssen.nl 13 | - email: Kevin.Fox@pnnl.gov 14 | name: kfox1111 15 | - email: fymemon@yahoo.com 16 | name: faisal-memon 17 | - email: edwbuck@gmail.com 18 | name: edwbuck 19 | name: spiffe-csi-driver 20 | sources: 21 | - https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire 22 | type: application 23 | version: 0.1.0 24 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spiffe-csi-driver/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | SPIFFE CSI Driver installed… 2 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spiffe-csi-driver/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.create -}} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ include "spiffe-csi-driver.serviceAccountName" . }} 6 | namespace: {{ include "spiffe-csi-driver.namespace" . }} 7 | labels: 8 | {{- include "spiffe-csi-driver.labels" . | nindent 4 }} 9 | {{- with .Values.serviceAccount.annotations }} 10 | annotations: 11 | {{- toYaml . | nindent 4 }} 12 | {{- end }} 13 | {{- end }} 14 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spiffe-oidc-discovery-provider/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spiffe-oidc-discovery-provider/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v2 2 | appVersion: 1.9.1 3 | description: A Helm chart to install the SPIFFE OIDC discovery provider. 4 | home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire 5 | icon: https://spiffe.io/img/logos/spire/icon/color/spire-icon-color.png 6 | keywords: 7 | - spiffe 8 | - oidc 9 | maintainers: 10 | - email: marco.franssen@gmail.com 11 | name: marcofranssen 12 | url: https://marcofranssen.nl 13 | - email: Kevin.Fox@pnnl.gov 14 | name: kfox1111 15 | - email: fymemon@yahoo.com 16 | name: faisal-memon 17 | - email: edwbuck@gmail.com 18 | name: edwbuck 19 | name: spiffe-oidc-discovery-provider 20 | sources: 21 | - https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire 22 | type: application 23 | version: 0.1.0 24 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spiffe-oidc-discovery-provider/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | SPIFFE OIDC discovery provider installed… 2 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spiffe-oidc-discovery-provider/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.create -}} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ include "spiffe-oidc-discovery-provider.serviceAccountName" . }} 6 | namespace: {{ include "spiffe-oidc-discovery-provider.namespace" . }} 7 | labels: 8 | {{- include "spiffe-oidc-discovery-provider.labels" . | nindent 4 }} 9 | {{- with .Values.serviceAccount.annotations }} 10 | annotations: 11 | {{- toYaml . | nindent 4 }} 12 | {{- end }} 13 | {{- end }} 14 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spire-agent/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spire-agent/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v2 2 | appVersion: 1.9.3 3 | description: A Helm chart to install the SPIRE agent. 4 | home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire 5 | icon: https://spiffe.io/img/logos/spire/icon/color/spire-icon-color.png 6 | keywords: 7 | - spiffe 8 | - spire-agent 9 | maintainers: 10 | - email: marco.franssen@gmail.com 11 | name: marcofranssen 12 | url: https://marcofranssen.nl 13 | - email: Kevin.Fox@pnnl.gov 14 | name: kfox1111 15 | - email: fymemon@yahoo.com 16 | name: faisal-memon 17 | - email: edwbuck@gmail.com 18 | name: edwbuck 19 | name: spire-agent 20 | sources: 21 | - https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire 22 | type: application 23 | version: 0.1.0 24 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spire-agent/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | Installed {{ .Chart.Name }}… 2 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spire-agent/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.create -}} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ include "spire-agent.serviceAccountName" . }} 6 | namespace: {{ include "spire-agent.namespace" . }} 7 | labels: 8 | {{- include "spire-agent.labels" . | nindent 4 }} 9 | {{- with .Values.serviceAccount.annotations }} 10 | annotations: 11 | {{- toYaml . | nindent 4 }} 12 | {{- end }} 13 | {{- end }} 14 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spire-server/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spire-server/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v2 2 | appVersion: 1.9.3 3 | description: A Helm chart to install the SPIRE server. 4 | home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire 5 | icon: https://spiffe.io/img/logos/spire/icon/color/spire-icon-color.png 6 | keywords: 7 | - spiffe 8 | - spire-server 9 | - spire-controller-manager 10 | maintainers: 11 | - email: marco.franssen@gmail.com 12 | name: marcofranssen 13 | url: https://marcofranssen.nl 14 | - email: Kevin.Fox@pnnl.gov 15 | name: kfox1111 16 | - email: fymemon@yahoo.com 17 | name: faisal-memon 18 | - email: edwbuck@gmail.com 19 | name: edwbuck 20 | name: spire-server 21 | sources: 22 | - https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire 23 | type: application 24 | version: 0.1.0 25 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spire-server/templates/aws-kms-configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- if ne .Values.keyManager.awsKMS.keyPolicy.policy "" }} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | name: {{ include "spire-server.fullname" . }}-aws-kms 6 | namespace: {{ include "spire-server.namespace" . }} 7 | data: 8 | policy.json: | 9 | {{ .Values.keyManager.awsKMS.keyPolicy.policy | nindent 4 }} 10 | {{- end }} 11 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spire-server/templates/aws-kms-secret.yaml: -------------------------------------------------------------------------------- 1 | {{- $root := . }} 2 | {{- with .Values.keyManager.awsKMS }} 3 | {{- if or (ne .accessKeyID "") (ne .secretAccessKey "") }} 4 | apiVersion: v1 5 | kind: Secret 6 | metadata: 7 | name: {{ include "spire-server.fullname" $root }}-aws-kms 8 | namespace: {{ include "spire-server.namespace" $root }} 9 | data: 10 | {{- if ne .accessKeyID "" }} 11 | AWS_KMS_ACCESS_KEY_ID: {{ .accessKeyID | b64enc }} 12 | {{- end }} 13 | {{- if ne .secretAccessKey "" }} 14 | AWS_KMS_SECRET_ACCESS_KEY: {{ .secretAccessKey | b64enc }} 15 | {{- end }} 16 | {{- end }} 17 | {{- end }} 18 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spire-server/templates/bundle-configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- $namespace := include "spire-server.bundle-namespace" . }} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | name: {{ include "spire-lib.bundle-configmap" . }} 6 | namespace: {{ $namespace }} 7 | {{- with .Values.configMap.annotations }} 8 | annotations: 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spire-server/templates/kubeconfig-secret.yaml: -------------------------------------------------------------------------------- 1 | {{- $root := . }} 2 | {{- with .Values.kubeConfigs }} 3 | apiVersion: v1 4 | kind: Secret 5 | metadata: 6 | name: {{ include "spire-server.fullname" $root }}-kubeconfigs 7 | namespace: {{ include "spire-server.namespace" $root }} 8 | data: 9 | {{- range $name, $value := . }} 10 | {{- if and (hasKey . "kubeConfig") (hasKey . "kubeConfigBase64") }} 11 | {{- fail "You can not use both kubeConfig and kubeConfigBase64" }} 12 | {{- end }} 13 | {{- if (hasKey . "kubeConfig") }} 14 | {{ $name }}: {{ .kubeConfig | b64enc }} 15 | {{- else }} 16 | {{ $name }}: {{ .kubeConfigBase64 | nospace }} 17 | {{- end }} 18 | {{- end }} 19 | {{- end }} 20 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spire-server/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.create -}} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ include "spire-server.serviceAccountName" . }} 6 | namespace: {{ include "spire-server.namespace" . }} 7 | labels: 8 | {{- include "spire-server.labels" . | nindent 4 }} 9 | {{- with .Values.serviceAccount.annotations }} 10 | annotations: 11 | {{- toYaml . | nindent 4 }} 12 | {{- end }} 13 | {{- end }} 14 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/spire-server/templates/upstream-ca-secret.yaml: -------------------------------------------------------------------------------- 1 | {{- $root := . }} 2 | {{- with .Values.upstreamAuthority.disk }} 3 | {{- if and (eq (.enabled | toString) "true") (eq (.secret.create | toString) "true") }} 4 | apiVersion: v1 5 | kind: Secret 6 | metadata: 7 | name: {{ include "spire-server.upstream-ca-secret" $root }} 8 | namespace: {{ include "spire-server.namespace" $root }} 9 | labels: 10 | {{- include "spire-server.labels" $root | nindent 4 }} 11 | data: 12 | {{- with .secret.data }} 13 | tls.crt: {{ .certificate | b64enc }} 14 | tls.key: {{ .key | b64enc }} 15 | {{- if ne .bundle ""}} 16 | bundle.crt: {{ .bundle | b64enc }} 17 | {{- end }} 18 | {{- end }} 19 | {{- end }} 20 | {{- end }} 21 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/tornjak-frontend/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v2 2 | appVersion: v1.4.2 3 | description: A Helm chart to deploy Tornjak frontend 4 | home: https://github.com/spiffe/helm-charts-hardened/tree/main/charts/spire 5 | icon: https://raw.githubusercontent.com/spiffe/tornjak/main/logos/logo%2Btornjak.2132x1291.png 6 | maintainers: 7 | - email: mrsabath@gmail.com 8 | name: mrsabath 9 | url: https://mrsabath.github.io 10 | name: tornjak-frontend 11 | sources: 12 | - https://github.com/spiffe/tornjak 13 | type: application 14 | version: 0.1.0 15 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/tornjak-frontend/templates/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | namespace: {{ include "tornjak-frontend.namespace" . }} 5 | name: {{ include "tornjak-frontend.fullname" . }} 6 | {{- with .Values.service.annotations }} 7 | annotations: 8 | {{- toYaml . | nindent 4 }} 9 | {{- end }} 10 | labels: 11 | {{- include "tornjak-frontend.labels" . | nindent 4 }} 12 | spec: 13 | type: {{ .Values.service.type }} 14 | selector: 15 | {{- include "tornjak-frontend.selectorLabels" . | nindent 4 }} 16 | ports: 17 | - name: {{ include "tornjak-frontend.fullname" . }} 18 | port: {{ .Values.service.port }} 19 | targetPort: http 20 | -------------------------------------------------------------------------------- /platform/vendor/spire/server/charts/tornjak-frontend/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.create -}} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ include "tornjak-frontend.serviceAccountName" . }} 6 | namespace: {{ include "tornjak-frontend.namespace" . }} 7 | labels: 8 | {{- include "tornjak-frontend.labels" . | nindent 4 }} 9 | {{- with .Values.serviceAccount.annotations }} 10 | annotations: 11 | {{- toYaml . | nindent 4 }} 12 | {{- end }} 13 | {{- end }} 14 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/.github/ISSUE_TEMPLATE/config.yml: -------------------------------------------------------------------------------- 1 | contact_links: 2 | - name: Ask a question 3 | url: https://discuss.hashicorp.com/c/vault 4 | about: For increased visibility, please post questions on the discussion forum, and tag with `k8s` 5 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/.github/ISSUE_TEMPLATE/feature_request.md: -------------------------------------------------------------------------------- 1 | --- 2 | name: Feature request 3 | about: Suggest an idea for this project 4 | title: '' 5 | labels: enhancement 6 | assignees: '' 7 | 8 | --- 9 | 10 | **Is your feature request related to a problem? Please describe.** 11 | A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] 12 | 13 | **Describe the solution you'd like** 14 | A clear and concise description of what you want to happen. 15 | 16 | **Describe alternatives you've considered** 17 | A clear and concise description of any alternative solutions or features you've considered. 18 | 19 | **Additional context** 20 | Add any other context or screenshots about the feature request here. 21 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/.github/workflows/setup-test-tools/action.yaml: -------------------------------------------------------------------------------- 1 | name: Setup common testing tools 2 | description: Install bats and python-yq 3 | 4 | runs: 5 | using: "composite" 6 | steps: 7 | - uses: actions/setup-node@v2 8 | with: 9 | node-version: '14' 10 | - run: npm install -g bats@${BATS_VERSION} 11 | shell: bash 12 | env: 13 | BATS_VERSION: '1.5.0' 14 | - run: bats -v 15 | shell: bash 16 | - uses: actions/setup-python@v2 17 | - run: pip install yq 18 | shell: bash 19 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/.github/workflows/tests.yaml: -------------------------------------------------------------------------------- 1 | name: Tests 2 | 3 | on: [push, workflow_dispatch] 4 | 5 | jobs: 6 | bats-unit-tests: 7 | runs-on: ubuntu-latest 8 | steps: 9 | - uses: actions/checkout@v2 10 | - uses: ./.github/workflows/setup-test-tools 11 | - run: bats ./test/unit -t 12 | 13 | chart-verifier: 14 | runs-on: ubuntu-latest 15 | env: 16 | CHART_VERIFIER_VERSION: '1.2.1' 17 | steps: 18 | - uses: actions/checkout@v2 19 | - name: Setup test tools 20 | uses: ./.github/workflows/setup-test-tools 21 | - uses: actions/setup-go@v2 22 | with: 23 | go-version: '1.17.4' 24 | - run: go install github.com/redhat-certification/chart-verifier@${CHART_VERIFIER_VERSION} 25 | - run: bats ./test/chart -t 26 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/.gitignore: -------------------------------------------------------------------------------- 1 | .DS_Store 2 | .terraform/ 3 | .terraform.tfstate* 4 | terraform.tfstate* 5 | terraform.tfvars 6 | values.dev.yaml 7 | vaul-helm-dev-creds.json 8 | ./test/acceptance/vaul-helm-dev-creds.json 9 | ./test/terraform/vaul-helm-dev-creds.json 10 | ./test/unit/vaul-helm-dev-creds.json 11 | ./test/acceptance/values.yaml 12 | ./test/acceptance/values.yml 13 | .idea 14 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/.helmignore: -------------------------------------------------------------------------------- 1 | .git/ 2 | .terraform/ 3 | bin/ 4 | test/ 5 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v2 2 | appVersion: 1.10.3 3 | description: Official HashiCorp Vault Chart 4 | home: https://www.vaultproject.io 5 | icon: https://github.com/hashicorp/vault/raw/f22d202cde2018f9455dec755118a9b84586e082/Vault_PrimaryLogo_Black.png 6 | keywords: 7 | - vault 8 | - security 9 | - encryption 10 | - secrets 11 | - management 12 | - automation 13 | - infrastructure 14 | kubeVersion: '>= 1.16.0-0' 15 | name: vault 16 | sources: 17 | - https://github.com/hashicorp/vault 18 | - https://github.com/hashicorp/vault-helm 19 | - https://github.com/hashicorp/vault-k8s 20 | - https://github.com/hashicorp/vault-csi-provider 21 | version: 0.20.0 22 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | 2 | Thank you for installing HashiCorp Vault! 3 | 4 | Now that you have deployed Vault, you should look over the docs on using 5 | Vault with Kubernetes available here: 6 | 7 | https://www.vaultproject.io/docs/ 8 | 9 | 10 | Your release is named {{ .Release.Name }}. To learn more about the release, try: 11 | 12 | $ helm status {{ .Release.Name }} 13 | $ helm get manifest {{ .Release.Name }} 14 | 15 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/csi-clusterrole.yaml: -------------------------------------------------------------------------------- 1 | {{- template "vault.csiEnabled" . -}} 2 | {{- if .csiEnabled -}} 3 | apiVersion: rbac.authorization.k8s.io/v1 4 | kind: ClusterRole 5 | metadata: 6 | name: {{ template "vault.fullname" . }}-csi-provider-clusterrole 7 | labels: 8 | app.kubernetes.io/name: {{ include "vault.name" . }}-csi-provider 9 | app.kubernetes.io/instance: {{ .Release.Name }} 10 | app.kubernetes.io/managed-by: {{ .Release.Service }} 11 | rules: 12 | - apiGroups: 13 | - "" 14 | resources: 15 | - serviceaccounts/token 16 | verbs: 17 | - create 18 | {{- end }} 19 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/csi-clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- template "vault.csiEnabled" . -}} 2 | {{- if .csiEnabled -}} 3 | apiVersion: rbac.authorization.k8s.io/v1 4 | kind: ClusterRoleBinding 5 | metadata: 6 | name: {{ template "vault.fullname" . }}-csi-provider-clusterrolebinding 7 | labels: 8 | app.kubernetes.io/name: {{ include "vault.name" . }}-csi-provider 9 | app.kubernetes.io/instance: {{ .Release.Name }} 10 | app.kubernetes.io/managed-by: {{ .Release.Service }} 11 | roleRef: 12 | apiGroup: rbac.authorization.k8s.io 13 | kind: ClusterRole 14 | name: {{ template "vault.fullname" . }}-csi-provider-clusterrole 15 | subjects: 16 | - kind: ServiceAccount 17 | name: {{ template "vault.fullname" . }}-csi-provider 18 | namespace: {{ .Release.Namespace }} 19 | {{- end }} 20 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/csi-serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- template "vault.csiEnabled" . -}} 2 | {{- if .csiEnabled -}} 3 | apiVersion: v1 4 | kind: ServiceAccount 5 | metadata: 6 | name: {{ template "vault.fullname" . }}-csi-provider 7 | namespace: {{ .Release.Namespace }} 8 | labels: 9 | app.kubernetes.io/name: {{ include "vault.name" . }}-csi-provider 10 | app.kubernetes.io/instance: {{ .Release.Name }} 11 | app.kubernetes.io/managed-by: {{ .Release.Service }} 12 | {{- if .Values.csi.serviceAccount.extraLabels -}} 13 | {{- toYaml .Values.csi.serviceAccount.extraLabels | nindent 4 -}} 14 | {{- end -}} 15 | {{ template "csi.serviceAccount.annotations" . }} 16 | {{- end }} 17 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/injector-certs-secret.yaml: -------------------------------------------------------------------------------- 1 | {{- template "vault.injectorEnabled" . -}} 2 | {{- if .injectorEnabled -}} 3 | {{- if and (eq (.Values.injector.leaderElector.enabled | toString) "true") (gt (.Values.injector.replicas | int) 1) }} 4 | apiVersion: v1 5 | kind: Secret 6 | metadata: 7 | name: vault-injector-certs 8 | namespace: {{ .Release.Namespace }} 9 | labels: 10 | app.kubernetes.io/name: {{ include "vault.name" . }}-agent-injector 11 | app.kubernetes.io/instance: {{ .Release.Name }} 12 | app.kubernetes.io/managed-by: {{ .Release.Service }} 13 | {{- end }} 14 | {{- end }} -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/injector-clusterrole.yaml: -------------------------------------------------------------------------------- 1 | {{- template "vault.injectorEnabled" . -}} 2 | {{- if .injectorEnabled -}} 3 | apiVersion: rbac.authorization.k8s.io/v1 4 | kind: ClusterRole 5 | metadata: 6 | name: {{ template "vault.fullname" . }}-agent-injector-clusterrole 7 | labels: 8 | app.kubernetes.io/name: {{ include "vault.name" . }}-agent-injector 9 | app.kubernetes.io/instance: {{ .Release.Name }} 10 | app.kubernetes.io/managed-by: {{ .Release.Service }} 11 | rules: 12 | - apiGroups: ["admissionregistration.k8s.io"] 13 | resources: ["mutatingwebhookconfigurations"] 14 | verbs: 15 | - "get" 16 | - "list" 17 | - "watch" 18 | - "patch" 19 | {{ end }} 20 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/injector-clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- template "vault.injectorEnabled" . -}} 2 | {{- if .injectorEnabled -}} 3 | apiVersion: rbac.authorization.k8s.io/v1 4 | kind: ClusterRoleBinding 5 | metadata: 6 | name: {{ template "vault.fullname" . }}-agent-injector-binding 7 | labels: 8 | app.kubernetes.io/name: {{ include "vault.name" . }}-agent-injector 9 | app.kubernetes.io/instance: {{ .Release.Name }} 10 | app.kubernetes.io/managed-by: {{ .Release.Service }} 11 | roleRef: 12 | apiGroup: rbac.authorization.k8s.io 13 | kind: ClusterRole 14 | name: {{ template "vault.fullname" . }}-agent-injector-clusterrole 15 | subjects: 16 | - kind: ServiceAccount 17 | name: {{ template "vault.fullname" . }}-agent-injector 18 | namespace: {{ .Release.Namespace }} 19 | {{ end }} 20 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/injector-psp-role.yaml: -------------------------------------------------------------------------------- 1 | {{- template "vault.injectorEnabled" . -}} 2 | {{- if .injectorEnabled -}} 3 | {{- if eq (.Values.global.psp.enable | toString) "true" }} 4 | apiVersion: rbac.authorization.k8s.io/v1 5 | kind: Role 6 | metadata: 7 | name: {{ template "vault.fullname" . }}-agent-injector-psp 8 | namespace: {{ .Release.Namespace }} 9 | labels: 10 | app.kubernetes.io/name: {{ include "vault.name" . }} 11 | app.kubernetes.io/instance: {{ .Release.Name }} 12 | app.kubernetes.io/managed-by: {{ .Release.Service }} 13 | rules: 14 | - apiGroups: ['policy'] 15 | resources: ['podsecuritypolicies'] 16 | verbs: ['use'] 17 | resourceNames: 18 | - {{ template "vault.fullname" . }}-agent-injector 19 | {{- end }} 20 | {{- end }} 21 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/injector-serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- template "vault.injectorEnabled" . -}} 2 | {{- if .injectorEnabled -}} 3 | apiVersion: v1 4 | kind: ServiceAccount 5 | metadata: 6 | name: {{ template "vault.fullname" . }}-agent-injector 7 | namespace: {{ .Release.Namespace }} 8 | labels: 9 | app.kubernetes.io/name: {{ include "vault.name" . }}-agent-injector 10 | app.kubernetes.io/instance: {{ .Release.Name }} 11 | app.kubernetes.io/managed-by: {{ .Release.Service }} 12 | {{ end }} 13 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/server-discovery-role.yaml: -------------------------------------------------------------------------------- 1 | {{ template "vault.mode" . }} 2 | {{- if ne .mode "external" }} 3 | {{- if .serverEnabled -}} 4 | {{- if eq .mode "ha" }} 5 | apiVersion: rbac.authorization.k8s.io/v1 6 | kind: Role 7 | metadata: 8 | namespace: {{ .Release.Namespace }} 9 | name: {{ template "vault.fullname" . }}-discovery-role 10 | labels: 11 | helm.sh/chart: {{ include "vault.chart" . }} 12 | app.kubernetes.io/name: {{ include "vault.name" . }} 13 | app.kubernetes.io/instance: {{ .Release.Name }} 14 | app.kubernetes.io/managed-by: {{ .Release.Service }} 15 | rules: 16 | - apiGroups: [""] 17 | resources: ["pods"] 18 | verbs: ["get", "watch", "list", "update", "patch"] 19 | {{ end }} 20 | {{ end }} 21 | {{ end }} 22 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/server-psp-role.yaml: -------------------------------------------------------------------------------- 1 | {{ template "vault.mode" . }} 2 | {{- if .serverEnabled -}} 3 | {{- if and (ne .mode "") (eq (.Values.global.psp.enable | toString) "true") }} 4 | apiVersion: rbac.authorization.k8s.io/v1 5 | kind: Role 6 | metadata: 7 | name: {{ template "vault.fullname" . }}-psp 8 | namespace: {{ .Release.Namespace }} 9 | labels: 10 | app.kubernetes.io/name: {{ include "vault.name" . }} 11 | app.kubernetes.io/instance: {{ .Release.Name }} 12 | app.kubernetes.io/managed-by: {{ .Release.Service }} 13 | rules: 14 | - apiGroups: ['policy'] 15 | resources: ['podsecuritypolicies'] 16 | verbs: ['use'] 17 | resourceNames: 18 | - {{ template "vault.fullname" . }} 19 | {{- end }} 20 | {{- end }} 21 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/server-psp-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{ template "vault.mode" . }} 2 | {{- if .serverEnabled -}} 3 | {{- if and (ne .mode "") (eq (.Values.global.psp.enable | toString) "true") }} 4 | apiVersion: rbac.authorization.k8s.io/v1 5 | kind: RoleBinding 6 | metadata: 7 | name: {{ template "vault.fullname" . }}-psp 8 | namespace: {{ .Release.Namespace }} 9 | labels: 10 | app.kubernetes.io/name: {{ include "vault.name" . }} 11 | app.kubernetes.io/instance: {{ .Release.Name }} 12 | app.kubernetes.io/managed-by: {{ .Release.Service }} 13 | roleRef: 14 | kind: Role 15 | name: {{ template "vault.fullname" . }}-psp 16 | apiGroup: rbac.authorization.k8s.io 17 | subjects: 18 | - kind: ServiceAccount 19 | name: {{ template "vault.fullname" . }} 20 | {{- end }} 21 | {{- end }} 22 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/templates/server-serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{ template "vault.mode" . }} 2 | {{- if .serverEnabled -}} 3 | {{- if (eq (.Values.server.serviceAccount.create | toString) "true" ) }} 4 | apiVersion: v1 5 | kind: ServiceAccount 6 | metadata: 7 | name: {{ template "vault.serviceAccount.name" . }} 8 | namespace: {{ .Release.Namespace }} 9 | labels: 10 | helm.sh/chart: {{ include "vault.chart" . }} 11 | app.kubernetes.io/name: {{ include "vault.name" . }} 12 | app.kubernetes.io/instance: {{ .Release.Name }} 13 | app.kubernetes.io/managed-by: {{ .Release.Service }} 14 | {{ template "vault.serviceAccount.annotations" . }} 15 | {{ end }} 16 | {{ end }} 17 | -------------------------------------------------------------------------------- /platform/vendor/vault/chart/values.openshift.yaml: -------------------------------------------------------------------------------- 1 | # These overrides are appropriate defaults for deploying this chart on OpenShift 2 | 3 | global: 4 | openshift: true 5 | 6 | injector: 7 | image: 8 | repository: "registry.connect.redhat.com/hashicorp/vault-k8s" 9 | tag: "0.16.0-ubi" 10 | 11 | agentImage: 12 | repository: "registry.connect.redhat.com/hashicorp/vault" 13 | tag: "1.10.3-ubi" 14 | 15 | server: 16 | image: 17 | repository: "registry.connect.redhat.com/hashicorp/vault" 18 | tag: "1.10.3-ubi" 19 | -------------------------------------------------------------------------------- /platform/vendor/vendor.sh: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | set -euo pipefail 3 | 4 | GIT_ROOT=$(git rev-parse --show-toplevel) 5 | 6 | go install github.com/buildsec/vendorme@cee93cf3a994e0cf1f8b1e3d69fc4aaa144f2173 7 | 8 | pushd "$GIT_ROOT/platform/vendor" 9 | vendorme pull 10 | popd 11 | -------------------------------------------------------------------------------- /resources/docker-config-empty.json: -------------------------------------------------------------------------------- 1 | {} 2 | -------------------------------------------------------------------------------- /resources/kyverno/admission-control-policy/admission-control-verify-image-resources.cue: -------------------------------------------------------------------------------- 1 | package frsca 2 | 3 | frsca: configMap: "\(#keys.name)": { 4 | metadata: namespace: #keys.namespace 5 | data: { 6 | tektoncd: """ 7 | -----BEGIN PUBLIC KEY----- 8 | MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEnLNw3RYx9xQjXbUEw8vonX3U4+tB 9 | kPnJq+zt386SCoG0ewIH5MB8+GjIDGArUULSDfjfM31Eae/71kavAUI0OA== 10 | -----END PUBLIC KEY----- 11 | """ 12 | 13 | projectsigstore: """ 14 | -----BEGIN PUBLIC KEY----- 15 | MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEhyQCx0E9wQWSFI9ULGwy3BuRklnt 16 | IqozONbbdbqz11hlRJy9c7SG+hdcFl9jE9uE/dwtuwU2MqU9T/cN0YkWww== 17 | -----END PUBLIC KEY----- 18 | """ 19 | 20 | ttlsh: #public.key 21 | } 22 | } 23 | -------------------------------------------------------------------------------- /resources/kyverno/admission-control-policy/kyverno.cue: -------------------------------------------------------------------------------- 1 | package frsca 2 | 3 | #keys: { 4 | name: "keys" 5 | namespace: "default" 6 | } 7 | 8 | #public: { 9 | repo: string @tag(repo) 10 | key: string @tag(key) 11 | } 12 | 13 | frsca: clusterPolicy: [Name=_]: spec: { 14 | validationFailureAction: "Enforce" 15 | background: false 16 | webhookTimeoutSeconds: *30 | int 17 | failurePolicy: "Fail" 18 | rules: [{ 19 | name: Name 20 | match: resources: kinds: [ 21 | "Pod", 22 | ] 23 | context: [{ 24 | name: #keys.name 25 | configMap: { 26 | name: #keys.name 27 | namespace: #keys.namespace 28 | } 29 | }] 30 | }] 31 | } 32 | -------------------------------------------------------------------------------- /resources/opa-gatekeeper/enable-mutating.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | experimentalEnableMutation: true 3 | -------------------------------------------------------------------------------- /resources/tekton/tasks/.gitkeep: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/buildsec/frsca/74551a829ed6c33897c43ee7142a9a4a589b06ee/resources/tekton/tasks/.gitkeep -------------------------------------------------------------------------------- /scripts/provenance.sh: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | set -euo pipefail 3 | 4 | if [ -z "$TASKRUN" ]; then 5 | echo "TASKRUN is empty, please set it." 6 | exit 1 7 | else 8 | echo "Starting validation for TaskRun $TASKRUN..." 9 | fi 10 | 11 | TASKRUN_UID=$(kubectl get taskrun "$TASKRUN" -o=json | jq -r '.metadata.uid') 12 | kubectl get taskrun "$TASKRUN" -o=json | jq -r ".metadata.annotations[\"chains.tekton.dev/signature-taskrun-$TASKRUN_UID\"]" | base64 --decode > signature.pub 13 | 14 | echo "Verifying signature with cosign..." 15 | cosign verify-blob --key k8s://tekton-chains/signing-secrets --signature ./signature.pub ./signature.pub 16 | -------------------------------------------------------------------------------- /tools/install-ci.sh: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | set -euo pipefail 3 | 4 | # Define variables. 5 | C_GREEN='\033[32m' 6 | C_RESET_ALL='\033[0m' 7 | 8 | # Detect the platform. 9 | PLATFORM=$(uname) 10 | 11 | # Install packages if needed. 12 | echo -e "${C_GREEN}Installing packages if needed...${C_RESET_ALL}" 13 | case "${PLATFORM}" in 14 | Darwin) 15 | node --version || brew install node 16 | ;; 17 | esac --------------------------------------------------------------------------------