Commit Graph

1036 Commits

Author SHA1 Message Date
Roberto Abdelkader Martínez Pérez
e7ff1906e9 chore: update pipenv install strategy (tested on ubuntu-22.04) 2023-01-20 13:13:59 +01:00
Roberto Abdelkader Martínez Pérez
eccef9d728 chore: fix python3.9 2023-01-20 12:57:37 +01:00
Roberto Abdelkader Martínez Pérez
4b0a968059 chore: try to update to ubuntu-22.04 in the test runners 2023-01-20 12:49:53 +01:00
Roberto Abdelkader Martínez Pérez
fd8ae8f62a chore: update python version and include Pipfile.lock 2023-01-20 12:35:13 +01:00
Roberto Abdelkader Martínez Pérez
d9a67f7368 chore: install jaillover with go > 1.17
https://stackoverflow.com/a/71862464
2023-01-20 12:01:26 +01:00
Roberto Abdelkader Martínez Pérez
0d0cbf583b fix: make linter necessary for release again 2023-01-20 11:58:03 +01:00
Roberto Abdelkader Martínez Pérez
189de2c534 chore: separate linter and unit test jobs to allow for a go version compatible with the linter
https://github.com/golangci/golangci-lint-action/issues/434#issuecomment-1088100765
2023-01-20 11:54:48 +01:00
Roberto Abdelkader Martínez Pérez
93997249e4 chore: skip-go-installation to avoid error. remove build before lint
https://github.com/golangci/golangci-lint-action/issues/434#issuecomment-1086127909
2023-01-20 11:48:23 +01:00
Roberto Abdelkader Martínez Pérez
a746fb834f chore: make sure everything builds before lint
https://github.com/golangci/golangci-lint/issues/827#issuecomment-766067258
2023-01-20 11:42:48 +01:00
dependabot[bot]
b31ed97d84 chore(deps): bump actions/upload-artifact from 2 to 3 (#205)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-19 23:07:20 +01:00
dependabot[bot]
b0570db2e9 chore(deps): bump actions/download-artifact from 2 to 3 (#206)
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 2 to 3.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-19 23:07:08 +01:00
dependabot[bot]
13d9a97547 chore(deps): bump actions/checkout from 2 to 3.1.0 (#219)
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-19 23:06:34 +01:00
dependabot[bot]
5bf7f5ac00 chore(deps): bump golangci/golangci-lint-action from 2.5.2 to 3.3.1 (#226)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 2.5.2 to 3.3.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v2.5.2...v3.3.1)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-19 23:06:17 +01:00
dependabot[bot]
1aff765e9f chore(deps): bump goreleaser/goreleaser-action from 2.7.0 to 4.1.0 (#228)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 2.7.0 to 4.1.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v2.7.0...v4.1.0)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-19 23:06:03 +01:00
dependabot[bot]
8eedf6ef4d chore(deps): bump golang from 1.17.2 to 1.19.5 in /.github/go (#229)
Bumps golang from 1.17.2 to 1.19.5.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-19 23:05:45 +01:00
dependabot[bot]
415cd1ffa5 chore(deps): bump golang from 1.17.0 to 1.17.2 in /.github/go (#187) 2021-10-29 11:04:23 +00:00
Roberto Abdelkader Martínez Pérez
e7a9208b7c chore: try Github's CodeQL 2021-10-29 12:30:31 +02:00
Roberto Abdelkader Martínez Pérez
fe470f2328 docs: fix broken link 2021-10-29 12:28:45 +02:00
dependabot[bot]
461827df50 chore(deps): bump goreleaser/goreleaser-action from 2.5.0 to 2.7.0 (#182)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 2.5.0 to 2.7.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v2.5.0...v2.7.0)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-18 13:47:22 +02:00
dependabot[bot]
ba33e505fe chore(deps): bump joncloud/makensis-action from 3.5 to 3.6 (#177)
Bumps [joncloud/makensis-action](https://github.com/joncloud/makensis-action) from 3.5 to 3.6.
- [Release notes](https://github.com/joncloud/makensis-action/releases)
- [Commits](https://github.com/joncloud/makensis-action/compare/v3.5...v3.6)

---
updated-dependencies:
- dependency-name: joncloud/makensis-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-18 11:39:39 +02:00
dependabot[bot]
47d0dc5938 chore(deps): bump golang from 1.16.6 to 1.17.0 in /.github/go (#185)
* chore(deps): bump golang from 1.16.6 to 1.17.0 in /.github/go

Bumps golang from 1.16.6 to 1.17.0.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: guard against writing HTTP Status 0

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Roberto Abdelkader Martínez Pérez <robertomartinezp@gmail.com>
2021-08-18 11:37:51 +02:00
dependabot[bot]
70c3e6cd82 chore(deps): bump gopkg.in/h2non/gock.v1 from 1.1.0 to 1.1.2 (#183) 2021-08-18 09:26:25 +00:00
dependabot[bot]
6d869223e0 chore(deps): bump github.com/google/uuid from 1.2.0 to 1.3.0 (#179) 2021-08-18 09:14:40 +00:00
dependabot[bot]
01dd5174d1 chore(deps): bump github.com/spf13/cobra from 1.1.3 to 1.2.1 (#176) 2021-08-03 12:19:42 +00:00
dependabot[bot]
b7f92b6d94 chore(deps): bump golang from 1.16.5 to 1.16.6 in /.github/go (#180)
Bumps golang from 1.16.5 to 1.16.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-08-03 12:53:32 +02:00
dependabot[bot]
2651af81e7 chore(deps): bump golang from 1.16.3 to 1.16.5 in /.github/go
Bumps golang from 1.16.3 to 1.16.5.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-09 16:32:34 +02:00
dependabot[bot]
7c50030276 chore(deps): bump gopkg.in/h2non/gock.v1 from 1.0.16 to 1.1.0
Bumps [gopkg.in/h2non/gock.v1](https://github.com/h2non/gock) from 1.0.16 to 1.1.0.
- [Release notes](https://github.com/h2non/gock/releases)
- [Changelog](https://github.com/h2non/gock/blob/master/History.md)
- [Commits](https://github.com/h2non/gock/compare/v1.0.16...v1.1.0)

---
updated-dependencies:
- dependency-name: gopkg.in/h2non/gock.v1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-09 16:32:04 +02:00
dependabot[bot]
e6de00ebdc chore(deps): bump goreleaser/goreleaser-action from 2 to 2.5.0
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 2 to 2.5.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Changelog](https://github.com/goreleaser/goreleaser-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v2...v2.5.0)

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-09 16:29:30 +02:00
dependabot[bot]
1426f13f33 chore(deps): bump actions/upload-release-asset from 1 to 1.0.2
Bumps [actions/upload-release-asset](https://github.com/actions/upload-release-asset) from 1 to 1.0.2.
- [Release notes](https://github.com/actions/upload-release-asset/releases)
- [Commits](https://github.com/actions/upload-release-asset/compare/v1...v1.0.2)

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-09 16:28:17 +02:00
dependabot[bot]
31b5b29323 chore(deps): bump actions/checkout from 2 to 2.3.4
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 2.3.4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v2.3.4)

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-09 16:26:26 +02:00
pancho horrillo
37e4c216af chore: configure dependabot to ignore pip ecosystem
Co-authored-by: César Gallego Rodríguez <cesar.gallego.next@bbva.com>
Co-authored-by: Roberto Abdelkader Martínez Pérez <robertomartinezp@gmail.com>
2021-04-22 12:24:51 +02:00
dependabot[bot]
69b4dd789b chore(deps): bump joncloud/makensis-action from v3.4 to v3.5
Bumps [joncloud/makensis-action](https://github.com/joncloud/makensis-action) from v3.4 to v3.5.
- [Release notes](https://github.com/joncloud/makensis-action/releases)
- [Commits](https://github.com/joncloud/makensis-action/compare/v3.4...18ba43d8e0eaa02d6d0a302e74a3468b5a96786a)

Signed-off-by: dependabot[bot] <support@github.com>
2021-04-05 12:18:36 +02:00
dependabot[bot]
31d910861e chore(deps): bump golangci/golangci-lint-action from v2.5.1 to v2.5.2
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from v2.5.1 to v2.5.2.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v2.5.1...5c56cd6c9dc07901af25baab6f2b0d9f3b7c3018)

Signed-off-by: dependabot[bot] <support@github.com>
2021-04-05 12:18:00 +02:00
dependabot[bot]
8220279d75 chore(deps): bump golang from 1.16.2 to 1.16.3 in /.github/go (#164)
Bumps golang from 1.16.2 to 1.16.3.

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-05 12:11:58 +02:00
pancho horrillo
ada23ca04e fix: drop stale Pipfile{,.lock}
We're using now nix for handling dependencies.

Co-authored-by: Roberto Abdelkader Martínez Pérez <robertomartinezp@gmail.com>
Co-authored-by: César Gallego Rodríguez <cesar.gallego.next@bbva.com>
2021-04-05 11:34:03 +02:00
pancho horrillo
7807ccd194 Merge branch 'feature/secure-control-api' 2021-03-12 17:33:28 +01:00
pancho horrillo
1e63f3c104 feat: Control API uses automatic cross-pinning mTLS (Closes #119)
. kapow server generates on startup a pair of certificates
that will use to secure communications to its control server.
It will communicate the server and client certificates as well
as the client private key to the init programs it launches,
via environment variables.

. kapow server now understands a new flag --control-reachable-addr
which accepts either a IP address or a DNS name, that can be used
to ensure that the generated server certificate will be appropiate
in case the control server must be accessed from something other
than localhost.

Co-authored-by: Roberto Abdelkader Martínez Pérez <robertomartinezp@gmail.com>
2021-03-12 17:24:17 +01:00
pancho horrillo
ab50721f69 test(spec): Control Server API secured via cross-pinning mTLS
. We are now leveraging nix for portable dependency handling.
. There are now three types of tests: client, server and end-to-end.
. server tests exercise the actual kapow server being tested, while the
requests are performed using the test steps.
. client tests exercise the actual kapow client being tested, while the
requests are served using the test steps.
. e2e test exercise the actual kapow program in its dual role of client
and server (¡como tiene que ser!).

Co-authored-by: Roberto Abdelkader Martínez Pérez <robertomartinezp@gmail.com>
2021-03-12 17:09:50 +01:00
pancho horrillo
b7b55d2f3b test(poc): Secure Control API using cross-pinning mTLS
Note that we are leveraging nix-shell to provide portable dependency
handling.

Co-authored-by: Roberto Abdelkader Martínez Pérez <robertomartinezp@gmail.com>
2021-03-12 17:00:53 +01:00
dependabot[bot]
175f174b8c chore(deps): bump golang from 1.16.1 to 1.16.2 in /.github/go (#162)
Bumps golang from 1.16.1 to 1.16.2.

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-12 09:22:00 +01:00
dependabot[bot]
e6be5b6efd chore(deps): bump golang from 1.16.0 to 1.16.1 in /.github/go (#161)
Bumps golang from 1.16.0 to 1.16.1.

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-11 11:07:42 +01:00
dependabot[bot]
c724b5f283 chore(deps): bump aiohttp from 3.5.4 to 3.7.4 in /testutils/poc (#160) 2021-02-26 09:35:50 +01:00
dependabot[bot]
bf2879b657 chore(deps): bump golangci/golangci-lint-action from v2.4.0 to v2.5.1 (#159) 2021-02-26 09:30:34 +01:00
dependabot[bot]
e25dc445f7 Merge pull request #158 from BBVA/dependabot/docker/dot-github/go/golang-1.16.0 2021-02-18 07:33:01 +00:00
dependabot[bot]
2c83f5430f chore(deps): bump golang from 1.15.7 to 1.16.0 in /.github/go
Bumps golang from 1.15.7 to 1.16.0.

Signed-off-by: dependabot[bot] <support@github.com>
2021-02-18 07:31:29 +00:00
dependabot[bot]
27b003a4b4 Merge pull request #157 from BBVA/dependabot/github_actions/golangci/golangci-lint-action-v2.4.0 2021-02-18 07:30:48 +00:00
dependabot[bot]
6c9dbf9c91 chore(deps): bump golangci/golangci-lint-action from v2.3.0 to v2.4.0
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from v2.3.0 to v2.4.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v2.3.0...544d2efb307b3f205f34886f2787046abe7fb26e)

Signed-off-by: dependabot[bot] <support@github.com>
2021-02-18 07:26:30 +00:00
dependabot[bot]
18d252806d Merge pull request #156 from BBVA/dependabot/go_modules/github.com/spf13/cobra-1.1.3 2021-02-18 07:23:01 +00:00
dependabot[bot]
2b65d53b2c chore(deps): bump github.com/spf13/cobra from 1.1.1 to 1.1.3
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.1.1 to 1.1.3.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md)
- [Commits](https://github.com/spf13/cobra/compare/v1.1.1...v1.1.3)

Signed-off-by: dependabot[bot] <support@github.com>
2021-02-18 07:16:58 +00:00
dependabot[bot]
c72ede73b7 Merge pull request #153 from BBVA/dependabot/go_modules/github.com/google/uuid-1.2.0 2021-02-18 06:31:39 +00:00