- Jan 16, 2024
-
-
github-actions[bot] authored
github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pepr](https://togithub.com/defenseunicorns/pepr) | [`0.22.0` -> `0.22.2`](https://renovatebot.com/diffs/npm/pepr/0.22.0/0.22.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>defenseunicorns/pepr (pepr)</summary> ### [`v0.22.2`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.22.2) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.22.1...v0.22.2) #### What's Changed - chore: unparsable docs.yml by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/488](https://togithub.com/defenseunicorns/pepr/pull/488) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.22.1...v0.22.2 ### [`v0.22.1`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.22.1) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.22.0...v0.22.1) #### features - feat: enable docs build on published release by [@​btlghrants](https://togithub.com/btlghrants) in [https://github.com/defenseunicorns/pepr/pull/484](https://togithub.com/defenseunicorns/pepr/pull/484) #### What's Changed - chore: bump actions/upload-artifact from 4.0.0 to 4.1.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/486](https://togithub.com/defenseunicorns/pepr/pull/486) - chore: bump the development-dependencies group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/487](https://togithub.com/defenseunicorns/pepr/pull/487) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.22.0...v0.22.1 </details> --- ### Configuration
renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by:
Megamind <882485+jeff-mccoy@users.noreply.github.com>
-
Megamind authored
## Description This PR consolidates all Pepr capabilities into the folder `src/pepr`. This PR also introduces the UDS Operator, which manages a new CRD `packages` under the group `uds.dev/v1alpha1`. The UDS Operator manages the lifecycle of UDS Package CRs and their corresponding resources (e.g. NetworkPolicies, Istio VirtualServices, etc.). The operator uses [Pepr](https://pepr.dev) to bind the watch operations to the enque and reconciler. The operator is responsible for: - enabling Istio sidecar injection in namespaces where the CR is deployed - establishing default-deny ingress/egress network policies - creating a layered allow-list based approach on top of the default deny network policies including some basic defaults such as Istio requirements and DNS egress - providing targeted remote endpoints network policies such as `KubeAPI` and `CloudMetadata` to make policies more DRY and provide dynamic bindings where a static definition is not possible - creating Istio Virtual Services & related ingress gateway network policies ### Key Files and Folders ```bash . ├── controllers # Core business logic called by the reconciler │ ├── istio # Manages Istio VirtualServices and sidecar injection for UDS Packages/Namespace │ └── network # Manages default and generated NetworkPolicies for UDS Packages/Namespace ├── crd │ ├── generated # Type files generated by `uds run -f src/pepr/tasks.yaml gen-crds` │ ├── sources # CRD source files │ ├── register.ts # Registers the UDS Package CRD with the Kubernetes API │ └── validator.ts # Validates UDS Package CRs with Pepr ├── enque.ts # Serializes UDS Package CRs for processing by the reconciler ├── index.ts # Entrypoint for the UDS Operator └── reconciler.ts # Reconciles UDS Package CRs via the controllers ```
-
Tristan Holaday authored
## Description There are currently no tests, integration (using k3d) or unit, that test the exemptions allowed for Pepr policies. This PR adds 2 tests to explicitly verify that `registerExemptions()` works as intended. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 13, 2024
-
-
github-actions[bot] authored
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pepr](https://togithub.com/defenseunicorns/pepr) | [`0.21.1` -> `0.22.0`](https://renovatebot.com/diffs/npm/pepr/0.21.1/0.22.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>defenseunicorns/pepr (pepr)</summary> ### [`v0.22.0`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.22.0) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.21.1...v0.22.0) #### Features Make `npx pepr deploy` wait recursively for deployments to be in a ready-state - feat: npx pepr dev does not wait for resources to be fully up by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/435](https://togithub.com/defenseunicorns/pepr/pull/435) Work on multi-versioned docs automation for the [Docs Site](https://pepr-docs.netlify.app/v0.21.1/) - feat: delete website by [@​btlghrants](https://togithub.com/btlghrants) in [https://github.com/defenseunicorns/pepr/pull/459](https://togithub.com/defenseunicorns/pepr/pull/459) Locking down the Pepr generated Kubernetes manifests with securityContexts - feat: add sane defaults to the pod and containers in pepr deployments by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/445](https://togithub.com/defenseunicorns/pepr/pull/445) `npx pepr deploy --force` to override manager field in the underlying KFC implementation of [Server Side Apply](https://kubernetes.io/docs/reference/using-api/server-side-apply/#conflicts) eat: force option on npx pepr deploy by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/480](https://togithub.com/defenseunicorns/pepr/pull/480) (e2e style) Upgrade test of Kubernetes manifests - feat: pepr upgrade test by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/478](https://togithub.com/defenseunicorns/pepr/pull/478) Force rollouts to Pepr's Admission and Watcher deployments by adding an annotation to podSpecs - feat: add timestamp to podSpec annotations force rollout on deployments by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/483](https://togithub.com/defenseunicorns/pepr/pull/483) #### What's Changed - chore: update waitForDeployments by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/482](https://togithub.com/defenseunicorns/pepr/pull/482) - chore: add error message for easier debugging by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/479](https://togithub.com/defenseunicorns/pepr/pull/479) - chore: kubernetes slack channel for pepr and readme updates by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/467](https://togithub.com/defenseunicorns/pepr/pull/467) - chore: test code coverage by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/468](https://togithub.com/defenseunicorns/pepr/pull/468) - chore: bump the development-dependencies group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/456](https://togithub.com/defenseunicorns/pepr/pull/456) - chore: bump actions/dependency-review-action from 3.1.4 to 3.1.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/458](https://togithub.com/defenseunicorns/pepr/pull/458) - chore: bump the development-dependencies group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/457](https://togithub.com/defenseunicorns/pepr/pull/457) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/466](https://togithub.com/defenseunicorns/pepr/pull/466) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/469](https://togithub.com/defenseunicorns/pepr/pull/469) - chore: bump actions/checkout from 2 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/472](https://togithub.com/defenseunicorns/pepr/pull/472) - chore: bump actions/setup-node from 2 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/470](https://togithub.com/defenseunicorns/pepr/pull/470) - chore: bump codecov/codecov-action from 2 to 3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/471](https://togithub.com/defenseunicorns/pepr/pull/471) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/475](https://togithub.com/defenseunicorns/pepr/pull/475) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.21.1...v0.22.0 </details> --- ### Configuration
-
- Jan 12, 2024
-
-
Micah Nagel authored
-
- Jan 11, 2024
-
-
github-actions[bot] authored
Micah Nagel <micah.nagel@defenseunicorns.com>
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [defenseunicorns/uds-cli](https://togithub.com/defenseunicorns/uds-cli) | patch | `0.5.2` -> `0.5.3` | --- ### Release Notes <details> <summary>defenseunicorns/uds-cli (defenseunicorns/uds-cli)</summary> ### [`v0.5.3`](https://togithub.com/defenseunicorns/uds-cli/releases/tag/v0.5.3) [Compare Source](https://togithub.com/defenseunicorns/uds-cli/compare/v0.5.2...v0.5.3) ##### What's Changed - chore(deps): update anchore/sbom-action action to v0.15.2 by [@​renovate](https://togithub.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/297](https://togithub.com/defenseunicorns/uds-cli/pull/297) - chore(deps): update github/codeql-action action to v3.22.12 by [@​renovate](https://togithub.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/294](https://togithub.com/defenseunicorns/uds-cli/pull/294) - chore(deps): update actions/download-artifact action to v4.1.0 by [@​renovate](https://togithub.com/renovate) in [https://github.com/defenseunicorns/uds-cli/pull/291](https://togithub.com/defenseunicorns/uds-cli/pull/291) - chore: update to zarf version 0.32.1 by [@​decleaver](https://togithub.com/decleaver) in [https://github.com/defenseunicorns/uds-cli/pull/300](https://togithub.com/defenseunicorns/uds-cli/pull/300) **Full Changelog**: https://github.com/defenseunicorns/uds-cli/compare/v0.5.2...v0.5.3 </details> --- ### Configuration
Jeff McCoy <code@jeffm.us> Co-authored-by:
razzle <harry@razzle.cloud> Co-authored-by:
-
Tristan Holaday authored
## Description Handling when seLinuxOptions contains defined user or role fields. ## Related Issue Fixes #95 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 10, 2024
-
-
Micah Nagel authored
-
Mike Vanhemert authored
## Description Trigger PR workflows for any change ... ## Related Issue ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
github-actions[bot] authored
-
- Jan 09, 2024
-
-
Mikael Vanhemert authored -
Micah Nagel authored
## Description This seems to be a common default across most istio installs (including Big Bang). The effect is just to make sure that the main "app" containers don't start until proxies are up. ## Related Issue Fixes https://github.com/defenseunicorns/uds-core/issues/69 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 08, 2024
-
-
github-actions[bot] authored
-
renovate[bot] authored
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [pepr](https://togithub.com/defenseunicorns/pepr) | [`0.18.1` -> `0.21.1`](https://renovatebot.com/diffs/npm/pepr/0.18.1/0.21.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [typescript](https://www.typescriptlang.org/) ([source](https://togithub.com/Microsoft/TypeScript)) | [`5.2.2` -> `5.3.3`](https://renovatebot.com/diffs/npm/typescript/5.2.2/5.3.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>defenseunicorns/pepr (pepr)</summary> ### [`v0.21.1`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.21.1) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.21.0...v0.21.1) #### What's Changed - chore: bump the production-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/455](https://togithub.com/defenseunicorns/pepr/pull/455) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.21.0...v0.21.1 ### [`v0.21.0`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.21.0) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.20.3...v0.21.0) #### What's Changed - feat: add resourceVersion tracking for watches & better watch recovery by [@​jeff-mccoy](https://togithub.com/jeff-mccoy) in [https://github.com/defenseunicorns/pepr/pull/453](https://togithub.com/defenseunicorns/pepr/pull/453) - chore: bump the production-dependencies group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/452](https://togithub.com/defenseunicorns/pepr/pull/452) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.20.3...v0.21.0 ### [`v0.20.3`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.20.3) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.20.2...v0.20.3) #### What's Changed - fix: bind debug logs to fluent-client watch log handler by [@​jeff-mccoy](https://togithub.com/jeff-mccoy) in [https://github.com/defenseunicorns/pepr/pull/450](https://togithub.com/defenseunicorns/pepr/pull/450) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.20.2...v0.20.3 ### [`v0.20.2`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.20.2) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.20.1...v0.20.2) #### What's Changed - chore: bump actions/upload-artifact from 3.1.3 to 4.0.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/442](https://togithub.com/defenseunicorns/pepr/pull/442) - chore: bump the prom-client version by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/443](https://togithub.com/defenseunicorns/pepr/pull/443) - chore: bump actions/setup-node from 4.0.0 to 4.0.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/446](https://togithub.com/defenseunicorns/pepr/pull/446) - chore: bump the production-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/448](https://togithub.com/defenseunicorns/pepr/pull/448) - chore: bump the development-dependencies group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/defenseunicorns/pepr/pull/447](https://togithub.com/defenseunicorns/pepr/pull/447) - chore: update peer deps (not updated by dependabot) by [@​jeff-mccoy](https://togithub.com/jeff-mccoy) in [https://github.com/defenseunicorns/pepr/pull/449](https://togithub.com/defenseunicorns/pepr/pull/449) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.20.1...v0.20.2 ### [`v0.20.1`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.20.1) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.19.0...v0.20.1) #### What's Changed - chore: spelling by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/441](https://togithub.com/defenseunicorns/pepr/pull/441) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.20.0...v0.20.1 ### [`v0.19.0`](https://togithub.com/defenseunicorns/pepr/releases/tag/v0.19.0) [Compare Source](https://togithub.com/defenseunicorns/pepr/compare/v0.18.1...v0.19.0) #### Features - feat: add pepr monitor command by [@​jeff-mccoy](https://togithub.com/jeff-mccoy) in [https://github.com/defenseunicorns/pepr/pull/411](https://togithub.com/defenseunicorns/pepr/pull/411) - feat: updated containers function to work with mutate requests by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/418](https://togithub.com/defenseunicorns/pepr/pull/418) ```typescript When(a.Pod) .IsCreated() .Validate(pod => { // returns all containers in pod const podsContainers = containers(pod); for (const container of podsContainers) { ... go on ```  #### What's Changed - chore: create a library of helper functions that make working with pepr easier by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/415](https://togithub.com/defenseunicorns/pepr/pull/415) - fix: watch does not respect ns testing by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/398](https://togithub.com/defenseunicorns/pepr/pull/398) - chore: fix PeprStore rendering where multiple capabilities are in play by [@​cmwylie19](https://togithub.com/cmwylie19) in [https://github.com/defenseunicorns/pepr/pull/422](https://togithub.com/defenseunicorns/pepr/pull/422) - chore: update logo image in header by [@​schaeferka](https://togithub.com/schaeferka) in [https://github.com/defenseunicorns/pepr/pull/420](https://togithub.com/defenseunicorns/pepr/pull/420) **Full Changelog**: https://github.com/defenseunicorns/pepr/compare/v0.18.1...v0.19.0 </details> <details> <summary>Microsoft/TypeScript (typescript)</summary> ### [`v5.3.3`](https://togithub.com/microsoft/TypeScript/releases/tag/v5.3.3): TypeScript 5.3.3 [Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v5.3.2...v5.3.3) For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-5-3/). For the complete list of fixed issues, check out the - [fixed issues query for Typescript 5.3.0 (Beta)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.0%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.1 (RC)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.1%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.2 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.2%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.3 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.3%22+is%3Aclosed+). Downloads are available on: - [NuGet package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild) ### [`v5.3.2`](https://togithub.com/microsoft/TypeScript/releases/tag/v5.3.2): TypeScript 5.3 [Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v5.2.2...v5.3.2) For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-5-3/). For the complete list of fixed issues, check out the - [fixed issues query for Typescript 5.3.0 (Beta)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.0%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.1 (RC)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.1%22+is%3Aclosed+). - [fixed issues query for Typescript 5.3.2 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.3.2%22+is%3Aclosed+). Downloads are available on: - [NuGet package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild) </details> --- ### Configuration
-
- Jan 06, 2024
-
-
Micah Nagel authored
## Description Adds the proper config to setup loki storage type. ## Related Issue Fixes https://github.com/defenseunicorns/uds-core/issues/83 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Jan 05, 2024
-
-
github-actions[bot] authored
Mikael Vanhemert <mike.vanhemert@defenseunicorns.com>
-
Mike Vanhemert authored
## Description When establishing the security context for a pod, Pepr security policy will look for labels to specify the runAsUser, runAsGroup, and/or fsGroup and use those values. ## Related Issue ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
-
- Dec 22, 2023
-
-
zamaz authored
## Description Adds initial renovate config. This should handle the new Ironbank flavor as well but currently does not have any "intelligence" around included/supported image versions in a given helm chart version. ## Related Issue N/A ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
-
- Dec 12, 2023
-
-
github-actions[bot] authored
-
- Dec 11, 2023
-
-
zamaz authored
## Description ... ## Related Issue Fixes # <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Dec 08, 2023
-
-
zamaz authored
## Description add minio deploy time bundle variable override definitions ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
-
- Dec 07, 2023
-
-
github-actions[bot] authored
-
zamaz authored
## Description Resolve logic bug where job termination was not functioning correctly because containerStatuses field doesnt exist when pod.status.phase is pending. ## Related Issue Fixes [#54](https://github.com/defenseunicorns/uds-core/issues/54) ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Test, docs, adr added or updated as needed - [ ] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Dec 05, 2023
-
-
github-actions[bot] authored
-
Mike Vanhemert authored
-
Megamind authored
## Description Introduce Pepr Validations to replace Kyverno. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
-
- Nov 19, 2023
-
-
github-actions[bot] authored
-
Megamind authored
## Description This PR leverages the new UDS Helm Variables mapping introduce in [UDS CLI v0.3.0](https://github.com/defenseunicorns/uds-cli/releases/tag/v0.3.0). While this is currently at the bundle-level, this should eventually make it down to the Zarf level. However, for UDS deployers, the change will be transparent. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
-
- Nov 17, 2023
-
-
Megamind authored
## Description Use task includes where possible (env vars cant be passed into includes inline so publish.yaml couldn't use it right now). Also provides a top-level task file to do clean commands such as: ```bash uds run test-uds-core ``` ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request ) followed --------- Co-authored-by:
-
-
-
- Nov 16, 2023
-
-
Megamind authored
* release-please fix * just a couple file changes * that shouldn't have been deleted * update readme with app links * test all source packages on usd-core bundle test * include the test app in UDS Core testing * fix test path * add `set -e` to all multi-line commands * fix bad merge conflict resolve * more merge conflict cleanup * single-package-test cleanup * more cleanup * oh for crying out loud.... * i hate you git * Update bundles/k3d-istio/uds-bundle.yaml Co-authored-by:
-
Micah Nagel authored
-
-
zamaz authored
* Add promtail, fix netpols, add prometheus to standard-package, add grafana * remove service monitor so individual test passes, add empty validate.yaml * add datasources cm, fix netpols * commit missed file * add wait for grafana test * Fix loki labels, remove extra prometheus annotations now handled via pepr * bump version variable in deploy.yaml * fix messed up zarf package name * update prometheus values, reorder packages in standard packages, remove grafana validate * revert version in deploy.yaml * fix deploy.yaml version, add file to release please * remove extra peer auth definition in grafana * fix package versions * update readme Signed-off-by:
Zachariah Miller <zachariah.miller@defenseunicorns.com> * Remediate review comments, bump chart and image versions * update loki chart and images * update prometheus values, fix images, job timeout * chore: update loki nps, use gateway * fix: netpols * remove loki gateway for now * fix loki replication factor, add set -e on tasks, update promtail to point to loki-gw * add validate.yaml checks for grafana, promtail, loki and prometheus * revert neuvector change * remove redundant peer-authentication.yaml from neuvector config chart * fix: netpols, loki required, quote consistency * template peerauth for scalable and bump loki config chart. Bump promtail limits * revert limits change * bump to test all to next runner size * add debug log for CI --------- Signed-off-by:
-
- Nov 15, 2023
-
-
zamaz authored
-
-
![github-actions[bot]'s avatar](https://secure.gravatar.com/avatar/e7cd911927c7d1acf6281b69d385990d8fadcd26871048bbcdbff2e88da7f607?s=64&d=identicon "github-actions[bot]")
![renovate[bot]'s avatar](https://secure.gravatar.com/avatar/4836c036306c20663d397df5cd0c2046c486c5ce1327af904affd8d285099e24?s=64&d=identicon "renovate[bot]")
