-
Notifications
You must be signed in to change notification settings - Fork 2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: Generate OpenVX data for every release #2276
Conversation
Signed-off-by: Shafeeque E S <shafeeque.e.s@sap.com>
This issue is currently awaiting triage. If kube-state-metrics contributors determine this is a relevant issue, they will accept it by applying the The Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
/ok-to-test |
Signed-off-by: Shafeeque E S <shafeeque.e.s@sap.com>
Signed-off-by: Shafeeque E S <shafeeque.e.s@sap.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you for picking this up! 🎉
.github/workflows/openvex.yml
Outdated
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 #v4.1.1 | ||
- name: Set env | ||
run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV | ||
- uses: openvex/generate-vex@31b415924ea0d72ed5f2640f1dee59dea6c2770b |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we pin this to the latest major as well?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I see openvex
has not tagged any release yet. Can we pin this to the latest c59881b41451d7ccba5c3b74cd195382b8971fcd
commit then?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I've raised an issue regarding releases: openvex/generate-vex#2.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I see
openvex
has not tagged any release yet. Can we pin this to the latestc59881b41451d7ccba5c3b74cd195382b8971fcd
commit then?
Done.
- name: Checkout code | ||
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 #v4.1.1 | ||
- name: Set env | ||
run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm afraid running openvex
for all releases would generate unnecessary noise, since we generally only maintain the latest release branches. Can we restrict this to that only? cc @mrueg
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is restricted only to a pushed tag. See line 7
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think it might be better to run on release creation. https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#release
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
+1, better to run on releases than tags.
.github/workflows/openvex.yml
Outdated
# Refer: https://github.com/openvex/vexctl#operational-model | ||
name: Run vexctl | ||
with: | ||
product: pkg:golang/kubernetes/kube-state-metrics@${{ env.RELEASE_VERSION }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
product: pkg:golang/kubernetes/kube-state-metrics@${{ env.RELEASE_VERSION }} | |
product: pkg:golang/k8s.io/kube-state-metrics/v2@${{ env.RELEASE_VERSION }} |
should this be the golang package name?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why the v2? Is it not covered by the env?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
v2 is because it expects the full name of the golang package.
/lgtm Thanks! Right now this will output in Github Actions log so it should not block any release. |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: mrueg, shafeeqes The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
What this PR does / why we need it:
This PR adds a github workflow action to generate OpenVX data for every release.
#SecuritySlam
Which issue(s) this PR fixes:
Fixes part of #2274