ces-build-lib

changed

• Relicense to AGPL-3.0-only

Changed

• change k3d.configureComponents so that null values disable single components so they won't be installed.
  This is useful if default components like the blueprint-operator have to be disabled.
  • Example:
    k3d.configureComponents(["k8s-minio": ["version": "latest", "helmRepositoryNamespace": "k8s"], "k8s-blueprint-operator": null])

Fixed

• [#125] K3d setup waits now until all dogus are rolled out and the setup is really done.

Added

• [#124 ]Maven.useMirrors([name: 'maven-proxy', mirrorOf: 'central', url: 'https://maven.example.org'])

Fixed

• [#120] K3d cluster is now able to run system calls used in go 1.21;
  • See https://github.com/docker-library/golang/issues/467

Changed

• [#120] Updated k3d to 5.6.0
• [#120] Updated k3s image to rancher/k3s:v1.28.5-k3s1
• Updated yq to 4.40.5
• Fix yq output when using JSON-input from dogu.json; #122

Fixed

• Add missing values.yaml as argument to helm install of k8s-ces-setup
• Add missing nginx-static to default setup.json

[!WARNING]
This release contains some major bugs. These are patched in 2.0.1.

[!CAUTION]
Breaking changes ahead!

Changed

• Use Helm to install and configure k8s-ces-setup in k3d; #117

Added

• Add Helm installation with k3d.installHelm(); #115

Changed

• Switch to hadolint Dockerfile linter; #111

Added

• Add Dockerfile class with new linting functions; #111
  • lint() lints with default hadolint config parameters. Only fails on errors
  • lintWithConfig() lets you specify the hadolint configuration

Deprecated

• lintDockerfile() function should be replaced by the Dockerfile lint() function

Fixed

• Split helm-repo-config in separate values #113

Added

• Add helm-repo-config to k3d-cluster #109

Changed

findVulnerabilitiesWithTrivy schema bug fix
The trivy output scheme is now interpreted correctly
Added additionalFlags as parameter e.g. '--ingore-unfixed' can be used now

Changed

• findVulnerabilitiesWithTrivy #107
  • Switch from using allowlist param to built-in .trivyignore file. Advantage: More declarative.
    Fewer things in Jenkinsfile. Local trivy scans pick up allowlist as well.
  • Updated Trivy default to 0.41.0 from 0.15.0.
    • Trivy 0.20.0 introduced a JSON schema (see here)
    • findVulnerabilitiesWithTrivy code can now only parse the new one
    • findVulnerabilitiesWithTrivy returns the new schema
  • These are somewhat breaking changes, which will likely not affect anyone. So we dared to make them. Make sure to
    • not use allowlist, if so migrate to .trivyignore
    • not pin the trivyVersion, or update to trivy >= 0.20.0
    • if you parsed the result of findVulnerabilitiesWithTrivy make sure to migrate to new schema,
      e.g. VulnerabilityID moved to .Results[].Vulnerabilities[].VulnerabilityID

Fixed

• [#104] A missing @NonCPS annotation caused an error when calling the K3d constructor.

Fixed

• HttpClient escapes now the credentials in curl command to support credentials with characters like $.

Added

• Add parameter to configure version for markdown link checker #100.

Fixed

• A bug with SonarCloud where an error was thrown because a private field was accessed (#99)

Added

• Function lintDockerfile to lint docker files #96.
• Function shellCheck to lint shell scripts #96.

Add output from kubectl describe in the summary of the k8s resources in k3d #94

• these resources will be collected afterwards:
  • configmap, deployment, ingress, ingressclass, persistentvolume, persistentvolumeclaim, pod, replicaset, secret, service, statefulset

Fixed

• Incorrect usage of parameters makes currently used feature of installing and performing a setup unusable.