Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use azure bom for cosmosdb backed controlplane #13

Merged
merged 1 commit into from
Mar 31, 2022

Conversation

denisneuling
Copy link
Contributor

No description provided.

@denisneuling denisneuling changed the title Use azure bom for cosmosdb backend controlplane Use azure bom for cosmosdb backed controlplane Mar 31, 2022
@denisneuling denisneuling merged commit a1da627 into develop Mar 31, 2022
@denisneuling denisneuling deleted the feature/controlplane-cosmos-cp-hardening branch April 6, 2022 14:56
@florianrusch-zf florianrusch-zf added this to the Release 1 milestone May 6, 2022
denisneuling added a commit that referenced this pull request May 19, 2022
* Bump actions/checkout from 2 to 3 (#1)

Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Release version 0.0.1 (#2)

* Bump actions/checkout from 2 to 3 (#1)

Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Prepare release 0.0.1

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: GitHub actions <[email protected]>

* helm: add image pull secret template (#3)

* helm: add image pull secret template

Signed-off-by: Denis Neuling <[email protected]>

* helm: replace configuration properties delimiter by underscore

Signed-off-by: Denis Neuling <[email protected]>

* helm: add config properties for cosmosdb based contract definition/negotiation store

Signed-off-by: Denis Neuling <[email protected]>

* edc: use ref 705a44712fecb9cf5ac18622311e6a2dbd86ffc3 (#4)

Signed-off-by: Denis Neuling <[email protected]>

* Make docker images distroless (#5)

Signed-off-by: Denis Neuling <[email protected]>

* Feature: classpath hardening (#6)

control/data-plane classpath hardening

* Collect all non-sample/launcher edc artifacts within pom's dependencyManagement
* Revise control/data plane dependencies

* Add minimal memory controlplane (#7)

* Bumb edc to 3305340d6a19ba919540d28a731b3cab6d23857a + enable image publication of develop branch (#8)

* Update .gitignore & fix ServiceExtension directory (#9)

* add '.vscode' to .gitignore

* mv ServiceExtension file into META-INF/serices

* add DS_STORE to .gitignore

* Fix controlplane cosmosdb servicelocator (#11)

Signed-off-by: Denis Neuling <[email protected]>

* fix createAsset API in ControlPlaneController.java

Signed-off-by: Dominik Pinsel <[email protected]>

* Use azure bom for cosmosdb backend controlplane (#13)

* new aas controller extension (#14)

* Add default config for Opentelemetry + logging (#15)

* Bump alpine (#17)

Bumps alpine from 3.14 to 3.15.4.

* Bump alpine from 3.14 to 3.15.4 in /edc-dataplane/src/main/docker (#16)

Bumps alpine from 3.14 to 3.15.4.

* Add controlplane-postgres flavor (#10)

* Use edc release milestone-3 (#19)

* Use DAPS as IAM system (#20)

* Add BPN validation (#21)

* Rework edc data/control-plane svc/ingress endpoints (#23)

* Rework edc data/control-plane svc/ingress endpoints

* Bump actions/setup-java from 2 to 3.1.1 (#22)

* Add issue templates (#24)

* Add controlplane-postgresql dependabot section (#25)

* Add missing license headers (#26)

* Bump mikefarah/yq from 4.24.2 to 4.24.4 (#28)

Bumps [mikefarah/yq](https://github.com/mikefarah/yq) from 4.24.2 to 4.24.4.

* Add initial documentation (#27)

* Bump mikefarah/yq from 4.24.2 to 4.24.5 (#30)

Bumps [mikefarah/yq](https://github.com/mikefarah/yq) from 4.24.2 to 4.24.5.
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@v4.24.2...v4.24.5)

---
updated-dependencies:
- dependency-name: mikefarah/yq
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Rename project to product-edc (#32)

* Bump edc to 79b58b8 (#33)

Signed-off-by: Denis Neuling <[email protected]>

* Extend helm notes (#35)

* Bump actions/setup-python from 2 to 3 (#36)

* Bump azure/setup-helm from 1 to 2.1 (#37)

* Bump actions/setup-java from 3.1.1 to 3.2.0 (#38)

* Update dependabot configuration to cover edc git submodule (#39)

* Bump postgresql from 42.2.6 to 42.3.4 (#45)

* Bump spotless-maven-plugin from 1.31.3 to 2.22.2 (#44)

* Bump maven-surefire-plugin from 2.19.1 to 2.22.2 (#41)

* Bump flyway-core from 8.5.5 to 8.5.9 (#42)

* Bump junit-platform-surefire-provider from 1.1.0 to 1.3.2 (#43)

* Remove edc checkout step in build workflow (#47)

* Remove junit-platform-surefire-provider due to deprecation (#51)

* Bump maven-shade-plugin from 3.2.4 to 3.3.0 (#52)

* Bump jakarta.ws.rs-api from 3.0.0 to 3.1.0 (#53)

* Bump spotless-maven-plugin from 2.22.2 to 2.22.3 (#57)

* Bump azure-sdk-bom from 1.2.0 to 1.2.1 (#54)

* Activate edc data-management-api (#50)

* Fix due to renaming broken edc sql extension dependencies (#60)

* Fix gh action docker push (#61)

* Fix gh action docker push (#62)

* Use CXNG_GHCR_PAT instead of GITHUB_TOKEN for authentication \w ghcr (#64)

* Add capability to define container environment variables (#65)

* Bump edc from `79b58b8` to `0da15e1`

Bumps [edc](https://github.com/eclipse-dataspaceconnector/DataSpaceConnector) from `79b58b8` to `0da15e1`.
- [Release notes](https://github.com/eclipse-dataspaceconnector/DataSpaceConnector/releases)
- [Commits](eclipse-edc/Connector@79b58b8...0da15e1)

---
updated-dependencies:
- dependency-name: edc
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump mikefarah/yq from 4.24.5 to 4.25.1 (#67)

* Bump flyway-core from 8.5.9 to 8.5.10 (#69)

* update control plane documentation

* Parallelize build steps (#59)

* Ignore non-helm related paths when running gh action helm-lint step (#58)

* Fix gh build workflow: replace GITHUB_TOKEN by CXNG_GHCR_PAT (#77)

* Apply suggestions from code review

Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]>

* update known issues

Signed-off-by: Dominik Pinsel <[email protected]>

* Remove all in-memory stores deps which are now default (#80)

* Bump spotless-maven-plugin from 2.22.3 to 2.22.4 (#81)

* Update edc bom section and use policy-store-cosmos in edc-controlplane-cosmosdb (#82)

* Update sql migration for edc_contract_definition due to introduction of access_policy_id and contract_policy_id (#83)

* Bump actions/setup-java from 3.2.0 to 3.3.0 (#85)

* Provide functionality to configure more than one ingress / hostname (#78)

* update README.md

Signed-off-by: Dominik Pinsel <[email protected]>

* Bump postgresql from 42.3.4 to 42.3.5 (#96)

* Bump docker/metadata-action from 3 to 4 (#94)

* Expose validation endpoint through k8s service (#99)

* Remove keystore configurations

These are not needed, because they are only used in the vault-fs extension of the edc.

* bpn - register rules and update docu

* Replace dockerfile-maven-plugin by exec-maven-plugin for building docker images (#93)

* Restart pods if configmap changed (#100)

* Integrate veracode into gh build workflow (#102)

* update documentation and schema for postgresql

* Fix build workflow due to broken docker push action (#115)

* Change gh build workflow: Allow Veracode scan to fail (#116)

* Create SECURITY.md (#113)

Proposal of a security proposal. This is the template provided by the Catena-X Security Expert team.

* Bump docker/build-push-action from 2 to 3

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 2 to 3.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v2...v3)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump veracode/veracode-uploadandscan-action from 0.2.1 to 1.0 (#111)

* Bump docker/login-action from 1 to 2

Bumps [docker/login-action](https://github.com/docker/login-action) from 1 to 2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v1...v2)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* update workflows/build.yaml

Signed-off-by: Dominik Pinsel <[email protected]>

* update cosmos db documentation

* typo

* secure data mgmt API with auth key  (#123)

* secure data mgmt API with auth key

* Update edc-controlplane/README.md

Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]>

* add edc.api.auth.key to values.yaml

Co-authored-by: Dominik Pinsel <[email protected]>
Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]>

* Fix docker image step when running on PRs (#127)

* Bump spotless-maven-plugin from 2.22.4 to 2.22.5 (#125)

* sql fix: udate edc and schema (#129)

* remove edc jar shading (#130)

* Add LICENSE and NOTICE.md (#133)

* Milestone 3 Docu (#132)

* Bump jaxb-runtime from 2.3.6 to 3.0.2 (#134)

Bumps jaxb-runtime from 2.3.6 to 3.0.2.

---
updated-dependencies:
- dependency-name: org.glassfish.jaxb:jaxb-runtime
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Replace iam-mock by iam-daps at controlplane-memory

Signed-off-by: Denis Neuling <[email protected]>

* Fix typo in ContractDefinitions URL (#141)

* Bump flyway-core from 8.5.10 to 8.5.11 (#142)

* Enable gh workflow for building published releases/tags as well (#137)

* Use different secrets for performing veracode scans (#144)

* Update edc-controlplane/edc-controlplane-memory/README.md

Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]>

* Introduce helm chart releaser action (#85)

Signed-off-by: Denis Neuling <[email protected]>

* Prepare release 0.0.1

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: GitHub actions <[email protected]>
Co-authored-by: Denis Neuling <[email protected]>
Co-authored-by: Dominik-Pinsel <[email protected]>
Co-authored-by: Dominik-Pinsel <[email protected]>
Co-authored-by: Dominik Pinsel <[email protected]>
Co-authored-by: Denis Neuling <[email protected]>
Co-authored-by: Florian Rusch (ZF Friedrichshafen AG) <[email protected]>
Co-authored-by: Zied-Belkhiria-Mhp <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants