Merge branch 'main' of https://github.com/AzureArcForKubernetes/azure…

…-workload-identity
AzureArcForKubernetes · May 1, 2024 · 0a54a79 · 0a54a79
2 parents 2138263 + 9b60b52
commit 0a54a79
Show file tree

Hide file tree

Showing 121 changed files with 1,162 additions and 2,727 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -11,18 +11,33 @@ updates:
         update-types:
         - "version-update:semver-major"
         - "version-update:semver-minor"
+    groups:
+      k8s:
+        patterns:
+        - "k8s.io/*"
+        - "sigs.k8s.io/*"
+      azure-sdk:
+        patterns:
+        - "github.com/Azure/azure-sdk-for-go/*"
+
   - package-ecosystem: "npm"
     directory: "/example/msal-node"
     schedule:
       interval: "weekly"
     commit-message:
       prefix: "chore"
+    groups:
+      all:
+        patterns:
+        - "*"
+
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
     commit-message:
       prefix: "chore"
+
   - package-ecosystem: "gomod"
     directory: "/test/e2e"
     schedule:
@@ -34,144 +49,97 @@ updates:
         update-types:
         - "version-update:semver-major"
         - "version-update:semver-minor"
-
-
-  - package-ecosystem: docker
-    directory: /examples/azure-identity/dotnet
-    schedule:
-      interval: daily
-    commit-message:
-      prefix: "chore"
-
-  - package-ecosystem: nuget
-    directory: /examples/azure-identity/dotnet
-    schedule:
-      interval: daily
-    commit-message:
-      prefix: "chore"
-
-  - package-ecosystem: docker
-    directory: /examples/azure-identity/go
-    schedule:
-      interval: daily
-    commit-message:
-      prefix: "chore"
-
-  - package-ecosystem: gomod
-    directory: /examples/azure-identity/go
-    schedule:
-      interval: daily
-    commit-message:
-      prefix: "chore"
-
-  - package-ecosystem: docker
-    directory: /examples/azure-identity/java
-    schedule:
-      interval: daily
-    commit-message:
-      prefix: "chore"
-
-  - package-ecosystem: docker
-    directory: /examples/azure-identity/node
-    schedule:
-      interval: daily
-    commit-message:
-      prefix: "chore"
-
-  - package-ecosystem: npm
-    directory: /examples/azure-identity/node
-    schedule:
-      interval: daily
-    commit-message:
-      prefix: "chore"
-
-  - package-ecosystem: docker
-    directory: /examples/azure-identity/python
-    schedule:
-      interval: daily
-    commit-message:
-      prefix: "chore"
-
-  - package-ecosystem: pip
-    directory: /examples/azure-identity/python
-    schedule:
-      interval: daily
-    commit-message:
-      prefix: "chore"
+    groups:
+      k8s:
+        patterns:
+        - "k8s.io/*"
 
   - package-ecosystem: docker
     directory: /examples/msal-go
     schedule:
-      interval: daily
+      interval: weekly
     commit-message:
       prefix: "chore"
 
   - package-ecosystem: gomod
     directory: /examples/msal-go
     schedule:
-      interval: daily
+      interval: weekly
     commit-message:
       prefix: "chore"
+    groups:
+      all:
+        patterns:
+        - "*"
 
   - package-ecosystem: docker
     directory: /examples/msal-java
     schedule:
-      interval: daily
+      interval: weekly
     commit-message:
       prefix: "chore"
 
   - package-ecosystem: docker
     directory: /examples/msal-net/akvdotnet
     schedule:
-      interval: daily
+      interval: weekly
     commit-message:
       prefix: "chore"
 
   - package-ecosystem: nuget
     directory: /examples/msal-net/akvdotnet
     schedule:
-      interval: daily
+      interval: weekly
     commit-message:
       prefix: "chore"
+    groups:
+      all:
+        patterns:
+        - "*"
 
   - package-ecosystem: docker
     directory: /examples/msal-node
     schedule:
-      interval: daily
+      interval: weekly
     commit-message:
       prefix: "chore"
 
   - package-ecosystem: npm
     directory: /examples/msal-node
     schedule:
-      interval: daily
+      interval: weekly
     commit-message:
       prefix: "chore"
+    groups:
+      all:
+        patterns:
+        - "*"
 
   - package-ecosystem: docker
     directory: /examples/msal-python
     schedule:
-      interval: daily
+      interval: weekly
     commit-message:
       prefix: "chore"
 
   - package-ecosystem: pip
     directory: /examples/msal-python
     schedule:
-      interval: daily
-    commit-message:
-      prefix: "chore"
-
-  - package-ecosystem: maven
-    directory: /examples/azure-identity/java
-    schedule:
-      interval: daily
+      interval: weekly
     commit-message:
       prefix: "chore"
+    groups:
+      all:
+        patterns:
+        - "*"
 
   - package-ecosystem: maven
     directory: /examples/msal-java
     schedule:
-      interval: daily
+      interval: weekly
     commit-message:
       prefix: "chore"
+    groups:
+      all:
+        patterns:
+        - "*"
diff --git a/.github/workflows/azwi-build.yaml b/.github/workflows/azwi-build.yaml
@@ -25,17 +25,18 @@ jobs:
     runs-on: ${{ matrix.env }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 # v2.3.1
+        uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
         with:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
         with:
           fetch-depth: 0
-      - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0
+      - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
-          go-version: "1.20"
+          go-version: "1.21"
+          check-latest: true
       - name: Build azwi
         run: |
           make bin/azwi

diff --git a/.github/workflows/azwi-e2e.yaml b/.github/workflows/azwi-e2e.yaml
@@ -27,17 +27,18 @@ jobs:
     runs-on: ${{ matrix.env }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 # v2.3.1
+        uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
         with:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
         with:
           fetch-depth: 0
-      - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0
+      - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
-          go-version: "1.20"
+          go-version: "1.21"
+          check-latest: true
       - name: Azure CLI
         run: |
           echo "Azure CLI Current installed version"
@@ -56,7 +57,7 @@ jobs:
           make kind-create
       - name: Build azwi
         run: make bin/azwi
-      - uses: azure/login@92a5484dfaf04ca78a94597f4f19fea633851fa2 # v1.4.6
+      - uses: azure/login@8c334a195cbb38e46038007b304988d888bf676a # v1.4.6
         with:
           client-id: ${{ env.AZURE_CLIENT_ID }}
           tenant-id: ${{ env.AZURE_TENANT_ID }}
@@ -105,17 +106,18 @@ jobs:
     runs-on: ${{ matrix.env }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 # v2.3.1
+        uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
         with:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
         with:
           fetch-depth: 0
-      - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0
+      - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
-          go-version: "1.20"
+          go-version: "1.21"
+          check-latest: true
       - name: Build azwi
         run: |
           make bin/azwi

diff --git a/.github/workflows/chart.yaml b/.github/workflows/chart.yaml
@@ -16,11 +16,11 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 # v2.3.1
+        uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
         with:
           submodules: true
           fetch-depth: 0

diff --git a/.github/workflows/codecov.yaml b/.github/workflows/codecov.yaml
@@ -14,16 +14,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 # v2.3.1
+        uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
-      - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
+      - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
-          go-version: "^1.20"
+          go-version: "^1.21"
+          check-latest: true
       - name: Run tests
         run: make test
-      - uses: codecov/codecov-action@894ff025c7b54547a9a2a1e9f228beae737ad3c2
+      - uses: codecov/codecov-action@7afa10ed9b269c561c2336fd862446844e0cbf71
         with:
           files: ./cover.out
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
@@ -21,20 +21,20 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 # v2.3.1
+        uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
         with:
           egress-policy: audit
 
       - name: Checkout repository
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f3feb00acb00f31a6f60280e6ace9ca31d91c76a
+        uses: github/codeql-action/init@012739e5082ff0c22ca6d6ab32e07c36df03c4a4
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f3feb00acb00f31a6f60280e6ace9ca31d91c76a
+        uses: github/codeql-action/autobuild@012739e5082ff0c22ca6d6ab32e07c36df03c4a4
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f3feb00acb00f31a6f60280e6ace9ca31d91c76a
+        uses: github/codeql-action/analyze@012739e5082ff0c22ca6d6ab32e07c36df03c4a4
diff --git a/.github/workflows/create-release-pull-request.yaml b/.github/workflows/create-release-pull-request.yaml
@@ -19,28 +19,29 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 # v2.3.1
+        uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
         with:
           egress-policy: audit
 
       - name: validate version
         run: |
           echo "${{ github.event.inputs.release_version }}" | grep -E 'v[0-9]+\.[0-9]+\.[0-9]+(-alpha\.[0-9]+|-beta\.[0-9]+|-rc\.[0-9]+)?$'
           echo "${{ github.event.inputs.based_on_branch }}" | grep -E '^(main|release-[0-9]+\.[0-9]+)$'
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
         with:
           submodules: true
           fetch-depth: 0
           ref: "${{ github.event.inputs.based_on_branch }}"
-      - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0
+      - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
-          go-version: "1.20"
+          go-version: "1.21"
+          check-latest: true
       - run: make release-manifest
         env:
           NEW_VERSION: "${{ github.event.inputs.release_version }}"
       - run: make promote-staging-manifest
       - name: Create release pull request
-        uses: peter-evans/create-pull-request@5b4a9f6a9e2af26e5f02351490b90d01eb8ec1e5 # v5.0.0
+        uses: peter-evans/create-pull-request@284f54f989303d2699d373481a0cfa13ad5a6666 # v5.0.1
         with:
           commit-message: "release: update manifest and helm charts for ${{ github.event.inputs.release_version }}"
           title: "release: update manifest and helm charts for ${{ github.event.inputs.release_version }}"