62 Commits

Author SHA1 Message Date
Madhav Jivrajani
474031588a .*: sync go toolchain version and add ability to verify versions
This commit adds a script to sync the version present in .go-version
across all go.mod files as the toolchain directive. As part of that,
this commit also modifies go.mod files that did not have synced toolchain
directives.

Additionally, this also adds a script to verify all toolchain and go
directives against the version present in .go-version as follows:
(1) The go directive <= version in .go-version
(2) The toolchain directive == version in .go-version

This script runs as part of the `make verify` target, making it run
as a presbumit by default.

Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>
2024-05-16 14:45:42 +05:30
Marek Siarkowicz
4ffa5c5dc4
Merge pull request #17619 from liangyuanpeng/approve_ghaction_3.5
[3.5] Add approvals gh workflows.
2024-04-07 09:41:14 +02:00
Lan Liang
b6df59cba4 Add approvals gh workflows.
Signed-off-by: Lan Liang <gcslyp@gmail.com>
2024-04-06 14:40:05 +00:00
Benjamin Wang
7f18f3078b
Merge pull request #17716 from ArkaSaha30/trivy-scan-head-3.5
[3.5]Add trivy scan for current branch HEAD
2024-04-06 13:32:12 +01:00
ArkaSaha30
1404f5aabd
[3.5]Add trivy scan as a job in release workflow
Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com>
2024-04-05 01:08:21 +05:30
Wei Fu
b78b21405d .github: enable failpoints for integration tests
And introduce helper to toggle failpoints by makefile.

Signed-off-by: Wei Fu <fuweid89@gmail.com>
2024-04-04 22:33:05 +08:00
Ivan Valdes
67afad6e21
Add govuln GitHub workflow
Signed-off-by: Ivan Valdes <ivan@vald.es>
2024-03-08 08:30:03 -08:00
vivekpatani
9635525bb2 *: add test-smoke to the pipeline and update test-smoke
- add test-smoke to the tests.yaml pipeline
- add bom and dep to the test-smoke definition
- https://github.com/etcd-io/etcd/issues/17400
- https://github.com/etcd-io/etcd/issues/17401
- wait for https://github.com/etcd-io/etcd/pull/17433 to merge
- wait for https://github.com/etcd-io/etcd/pull/17434 to merge

Signed-off-by: vivekpatani <9080894+vivekpatani@users.noreply.github.com>
2024-02-17 03:02:19 -08:00
Siyuan Zhang
cb65c1f032 test: enable gofail in release e2e test.
Signed-off-by: Siyuan Zhang <sizhang@google.com>
2023-12-11 09:15:56 -08:00
Ivan Valdes
f9f38bc97a
github workflow: run arm64 tests on every push
Use a template to consolidate arm64 and amd64 test workflows. Enable
running armd64 tests on every push and pull request.

Signed-off-by: Ivan Valdes <ivan@vald.es>
2023-11-13 16:56:29 -08:00
James Blair
0d829e4bcd
Update workflows to use makefile recipes for unit, integration & e2e-release.
Signed-off-by: James Blair <mail@jamesblair.net>
2023-08-02 14:43:40 +12:00
James Blair
f9ae5f8023
Backport fix to e2e release version identifcation.
Signed-off-by: James Blair <mail@jamesblair.net>
2023-07-22 11:00:45 +12:00
James Blair
6c1f883638
Revert "Merge pull request #16119 from natusameer/release-3.5"
This reverts commit cb38980e2012ecff5e525e7d61cf23ee843b305d, reversing
changes made to f565a94844576391beed88a31403d796c31b84e3.

Changes reversed as scheduled github actions must exist in default branch.

Signed-off-by: James Blair <mail@jamesblair.net>
2023-06-28 17:11:26 +12:00
Sameer Natu
c31f282766 Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30
Signed-off-by: Sameer Natu <sameer.natu@gmail.com>
2023-06-25 02:00:24 +00:00
James Blair
b5f07c9b7d
Backport .github/workflows: Read .go-version as a step and not separate workflow.
Signed-off-by: James Blair <mail@jamesblair.net>
2023-06-16 20:37:38 +12:00
Marek Siarkowicz
45d8cb254e Move go version to dedicated .go-version file
Signed-off-by: Marek Siarkowicz <siarkowicz@google.com>
2023-05-09 13:50:34 +02:00
James Blair
fb8fba710b
Backport go update to latest patch release 1.19.9.
Signed-off-by: James Blair <mail@jamesblair.net>
2023-05-04 14:13:56 +12:00
James Blair
b91025abbb
Backport centralising go version for actions workflows.
Signed-off-by: James Blair <mail@jamesblair.net>
2023-05-04 14:13:39 +12:00
Benjamin Wang
f905e2c264 bump golang to 1.19.8
fix CVE https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8/m/OV40vnafAwAJ

Signed-off-by: Benjamin Wang <wachao@vmware.com>
2023-04-06 14:27:40 +08:00
Wei Fu
55bce22e97 chore: enable strict mode for test CI
Signed-off-by: Wei Fu <fuweid89@gmail.com>
2023-04-02 08:57:56 +08:00
Prasad Chandrasekaran
9e506593bf scripts: Add testing of etcd in local image in release workflow.
Signed-off-by: Prasad Chandrasekaran <prasadc@vmware.com>
2023-04-01 16:47:08 +05:30
Benjamin Wang
44d78bf9aa Automated cherry-pick of #14860: Trigger release in current branch for github workflow case
Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com>
2023-03-30 16:39:08 +05:30
James Blair
f0aa228dbf
Updated go to 1.19.7.
Mitigates CVE-2023-24532.

Signed-off-by: James Blair <mail@jamesblair.net>
2023-03-08 22:33:13 +13:00
James Blair
1bd835383b
Bump to go 1.19.6
Signed-off-by: James Blair <mail@jamesblair.net>
2023-02-20 12:52:43 +13:00
Benjamin Wang
69ee8a83ab bump go version to 1.17.13
Signed-off-by: Benjamin Wang <wachao@vmware.com>
2022-12-19 13:23:16 +08:00
zsimon
d178292fec cidc: specify the correct branch name of release-3.5 in workflow for trivy nightly scan
To checkout the corresponding branch in cicd workflow. Specify the correct branch name in each branch.

Signed-off-by: zsimon <zsimon@vmware.com>
2022-12-17 15:30:26 +08:00
ArkaSaha30
4d3c840a9b
Add trivy nightly scan for release-3.5
Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com>
2022-12-16 10:59:14 +05:30
Dirkjan Bussink
c79f96d6ff server/etcdmain: add build support for Apple M1
This has been additionally verified by running the tests locally as a
basic smoke test. GitHub Actions doesn't provide MacOS M1 (arm64) yet,
so there's no good way to automate testing.

Ran `TMPDIR=/tmp make test` locally. The `TMPDIR` bit is needed so
there's no really long path used that breaks Unix socket setup in one of
the tests.

Signed-off-by: Marek Siarkowicz <siarkowicz@google.com>
2022-09-07 17:25:34 +02:00
Marek Siarkowicz
c4b0a569ba Make DRY_RUN explicit 2022-05-16 13:10:05 +02:00
Marek Siarkowicz
c76a010b48 scripts: Add tests for release scripts 2022-05-16 13:09:46 +02:00
Manuel Rüger
1801ef8d71 Update to go 1.16.15 2022-03-22 00:00:22 +01:00
Marek Siarkowicz
921f78d56f Stop using tip golang version in CI 2021-09-15 10:29:06 +02:00
Gyuho Lee
beae2e1801 workflows: remove ARM64 job for maintenance
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
2021-07-03 13:01:37 -07:00
Gyuho Lee
84d9187dbf github/workflow: run arm64 tests for all branches startin from 3.5
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
2021-05-17 13:52:11 -07:00
Patrice Chalin
bca0717f28
Rename master to main in README and other *.md files (#12977) 2021-05-15 23:46:05 -07:00
Piotr Tabor
27c74398cd Fixes to CI configs.
- Moves grpcproxy & functional tests to a separate workflows such thay can get restarted independently.
- Configures travis to run 1.16.3 go version (as travis cannot resolve 1.16 to the default).
2021-05-15 16:50:28 +02:00
Gyuho Lee
b6562a24b6 .github: rename "master" branch references to "main"
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
2021-05-12 10:41:24 -07:00
Marek Siarkowicz
c868bb97a9 github actions: Switch CI to use newest available 1.16 version 2021-05-12 15:25:16 +02:00
Marek Siarkowicz
f908e423bc github actions: Move e2e to separate workflow and remove semaphoreci 2021-05-12 14:17:17 +02:00
Marek Siarkowicz
f48609ae52 github actions: Run e2e tests 2021-05-11 14:20:46 +02:00
Marek Siarkowicz
da33b4034f github actions: Make github actions go1.16.3 tests blocking and remove them from travis
* Leave Go tip tests and coverage in travis as one is not yet supported
2021-05-10 15:19:09 +02:00
Marek Siarkowicz
f1082eec86 Trigger unit test workflow on pull_requests 2021-05-10 09:46:42 +02:00
Gyuho Lee
3a04b2b61f github action: add ARM64 test with README
README for self-hosted-linux-arm64-graviton2-tests.yml

Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
2021-05-10 00:28:41 -07:00
Marek Siarkowicz
e818f21790 Migrate PR testing from travis to GitHub actions 2021-05-06 17:06:57 +02:00
Gyuho Lee
f18f609bcd security: add private distributor list, and its application template
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
2021-03-23 11:34:15 -07:00
Nate W
d41e18817a Updating links in .md files after removing Documentation.
Signed-off-by: Nate W <4453979+nate-double-u@users.noreply.github.com>
2021-02-25 12:59:57 -08:00
Piotr Tabor
4af3bb3b01 Github: Shorten the reporting-bugs link. 2021-02-25 09:00:00 +01:00
Fog Dong
b0949cb49f Docs: fix the report bug link in issue template 2021-02-25 10:58:11 +08:00
Chris Aniszczyk
c0d44ec4b7
Add CodeQL Security Scanning
Signed-off-by: Chris Aniszczyk <caniszczyk@gmail.com>
2020-12-02 10:37:09 -08:00
Brandon Philips
142358c13d github: workflows: add asset-transparency release action
From etcd-dev discussion:
https://groups.google.com/u/2/g/etcd-dev/c/oMGSBqs_7sc

I have been working on this system called Asset Transparency[1] which
helps users verify they have received the correct contents from a URL.
If you are familiar with the "download a file, download a SHA256SUM
file, run `sha256sum -c`, etc" process? This tool helps to automate
that for users into something like this[2]:

$ tl get https://github.com/etcd-io/etcd/releases/download/v3.4.12/etcd-v3.4.12-darwin-amd64.zip

And a best practice for this Asset Transparency system is that URLs
are registered with the log as soon as possible. Why? Well, the sooner
a URL is entered the longer it can protect people consuming a URL from
unexpected content modification from say a GitHub credential
compromise.

To that end I have written a GitHub Action[3] that will automatically
do that on every release. It is easy to activate and should be hands
free after installation. So, before I enable it I want to see if there
are any concerns from maintainers. The only change to our repo will be
a new file in .github/workflows.

[1] https://www.transparencylog.com
[2] https://github.com/transparencylog/tl
[3] https://github.com/transparencylog/publish-releases-asset-transparency-action
2020-08-20 11:32:36 -07:00