starofys · elgohr · Sep 16, 2021 · Sep 16, 2021 · Sep 16, 2021 · Sep 20, 2021
diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md
@@ -0,0 +1,37 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**Client Version**
+e.g. `11.0.1`
+
+**Kubernetes Version**
+e.g. `1.19.3`
+
+**Java Version**
+e.g. Java 8
+
+**To Reproduce**
+Steps to reproduce the behavior:
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**KubeConfig**
+If applicable, add a KubeConfig file with secrets redacted.
+
+**Server (please complete the following information):**
+ - OS: [e.g. Linux]
+ - Environment [e.g. container]
+ - Cloud [e.g. Azure]
+
+**Additional context**
+Add any other context about the problem here.
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -0,0 +1,36 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ master ]
+  schedule:
+    - cron: '37 19 * * 0'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'java' ]
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2.4.0
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
@@ -5,43 +5,52 @@ name: build

 on:
  push:
-    branches: [ master ]
+    branches: [ "master", "release-**" ]
  pull_request:
-    branches: [ master ]
+    branches: [ "master", "release-**" ]

 jobs:
  verify-format:
    runs-on: ubuntu-latest
    name: Verify Source Format
    steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.4.0
      - name: Setup Java
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@v2
        with:
+          distribution: 'temurin'
          java-version: 8.0.x
      - name: Verify Format and License
        run: mvn spotless:check
  build:
-    runs-on: ubuntu-latest
-    name: Java ${{ matrix.java }} Maven Test
+    name: Java ${{ matrix.java }} Maven Test on ${{ matrix.os }}
    strategy:
      matrix:
-        # test against latest update of each major Java version, as well as specific updates of LTS versions:
-        java: [ 8.0.x, 9.0.x, 10.0.x, 11.0.x, 12.0.x, 13.0.x ]
+        # Test against the LTS Java versions. TODO: add JDK18 when it becomes available.
+        java: [ 8.0.x, 11.0.x, 17.0.x ]
+        os: [ windows-latest, ubuntu-latest ]
+    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.4.0
      - name: Setup Java
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@v2
        with:
+          distribution: 'temurin'
          java-version: ${{ matrix.java }}
+      - name: Cache local Maven repository
+        uses: actions/cache@v2.1.7
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-maven-${{ matrix.java }}-${{ hashFiles('pom.xml', '**/pom.xml') }}
      - name: Build with Maven
-        run: mvn -q test -B -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn
+        run: |
+          mvn clean test -q -B --define=org.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn
  build-graalvm:
    runs-on: ubuntu-latest
    name: GraalVM Maven Test
    steps:
-      - uses: actions/checkout@v2
-      - uses: DeLaGuardo/setup-graalvm@3
+      - uses: actions/checkout@v2.4.0
+      - uses: DeLaGuardo/setup-graalvm@2ebaf4e808f403090cbecb79873354da5dbd7e09
        with:
          graalvm-version: '19.3.0.java8'
      - name: Build with Maven
@@ -50,9 +59,9 @@ jobs:
    runs-on: ubuntu-latest
    name: End-to-End Test Against Real Cluster
    steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.4.0
      - name: Create k8s Kind Cluster
-        uses: helm/kind-action@v1.0.0
+        uses: helm/kind-action@v1.2.0
      - name: Run E2E with Maven
        run: |
          mvn clean install \
@@ -63,6 +72,52 @@ jobs:
            -B \
            -De2e.skip=false \
            -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn
+  examples:
+    runs-on: ubuntu-latest
+    name: Examples smoke test
+    steps:
+      - uses: actions/checkout@v2.4.0
+      - name: Setup Java
+        uses: actions/setup-java@v2
+        with:
+          distribution: 'temurin'
+          java-version: 11.0.x
+      - name: Cache local Maven repository
+        uses: actions/cache@v2.1.7
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-maven-
+      - name: Build with Maven
+        run: |
+          mvn clean install \
+          -q \
+          -Dmaven.test.skip=true
+      - name: Build Cert Manager Contrib
+        run: |
+          cd client-java-contrib/cert-manager
+          mvn clean install \
+          -q \
+          -Dmaven.test.skip=true
+      - name: Build Prometheus Contrib
+        run: |
+          cd client-java-contrib/prometheus-operator
+          mvn clean install \
+          -q \
+          -Dmaven.test.skip=true
+      - name: Version 13
+        run: |
+          cd examples/examples-release-13
+          mvn clean install
+      - name: Version 14
+        run: |
+          cd examples/examples-release-14
+          mvn clean install
+      - name: Version 15
+        run: |
+          cd examples/examples-release-15
+          mvn clean install
  codegen:
    runs-on: ubuntu-latest
    services:
@@ -72,9 +127,9 @@ jobs:
          - 5000:5000
    name: CRD Java Models Code Generation
    steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.4.0
      - name: Publish to Registry
-        uses: elgohr/Publish-Docker-Github-Action@master
+        uses: elgohr/Publish-Docker-Github-Action@v5
        with:
          name: kubernetes-client/java/crd-model-gen
          tags: gh-action-tmp

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -0,0 +1,93 @@
+name: Maven Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      releaseVersion:
+        type: string
+        required: true
+        description: The POM release version of this release. Must be a semantic version of the form X.Y.Z.
+      nextDevelopmentVersion:
+        type: string
+        required: true
+        description: The next POM development version after the release is done. Must be of the form X.Y.${Z+1}-SNAPSHOT
+      dry-run:
+        type: boolean
+        required: true
+        description: Dry run, will not push branches or upload the artifacts.
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Validate Input
+        run: |
+          echo "${{ github.ref_type }}" | perl -ne 'die unless m/^branch$/'
+          echo "${{ github.ref_name }}" | perl -ne 'die unless m/^release-\d+$/'
+          echo "${{ github.event.inputs.releaseVersion }}" | perl -ne 'die unless m/^\d+\.\d+\.\d+$/'
+          echo "${{ github.event.inputs.nextDevelopmentVersion }}" | perl -ne 'die unless m/^\d+\.\d+\.\d+-SNAPSHOT$/'
+      - name: Checkout
+        uses: actions/checkout@v2
+      - name: Check Actor
+        run: |
+          # Release actor should be in the OWNER list
+          cat OWNERS | grep ${{ github.actor }}
+      - name: Setup Java
+        uses: actions/setup-java@v2
+        with:
+          distribution: 'temurin'
+          java-version: 8.0.x
+          server-id: ossrh
+          server-username: OSSRH_USERNAME
+          server-password: OSSRH_TOKEN
+          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+          gpg-passphrase: GPG_PASSPHRASE
+      - name: Prepare
+        run: |
+          export GPG_TTY=$(tty)
+          (echo 5; echo y; echo save) | gpg --command-fd 0 --no-tty --pinentry-mode loopback --passphrase ${{ secrets.GPG_PASSWORD }} --no-greeting --edit-key 'Kubernetes Client Publishers' trust
+          (echo 0; echo y; echo save) | gpg --command-fd 0 --no-tty --pinentry-mode loopback --passphrase ${{ secrets.GPG_PASSWORD }} --no-greeting --edit-key 'Kubernetes Client Publishers' expire
+          git config user.email "k8s.ci.robot@gmail.com"
+          git config user.name "Kubernetes Prow Robot"
+      - name: Check Current Version
+        run: |
+          mvn -q \
+            -Dexec.executable=echo \
+            -Dexec.args='${project.version}' \
+            --non-recursive \
+            exec:exec | perl -ne 'die unless m/${{ github.event.inputs.releaseVersion }}-SNAPSHOT/'
+      - name: Release Prepare
+        run: |
+          git checkout -b 'automated-release-${{ github.event.inputs.releaseVersion }}'
+          mvn --batch-mode \
+            release:prepare \
+            -Dtag=v${{ github.event.inputs.releaseVersion }} \
+            -DconnectionUrl=https://${{ github.token }}@github.com/${{ github.repository }}.git \
+            -DreleaseVersion=${{ github.event.inputs.releaseVersion }} \
+            -DdevelopmentVersion=${{ github.event.inputs.nextDevelopmentVersion }} \
+            -DpushChanges=false
+      - name: Release Perform
+        if: ${{ github.event.inputs.dry-run != 'true' }}
+        env:
+          OSSRH_USERNAME: ${{ secrets.SNAPSHOT_UPLOAD_USER }}
+          OSSRH_TOKEN: ${{ secrets.SNAPSHOT_UPLOAD_PASSWORD }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSWORD }}
+        run: |
+          # The tests are already executed in the prepare, skipping
+          mvn -DlocalCheckout=true -Darguments=-DskipTests release:perform
+          git push https://${{ github.token }}@github.com/${{ github.repository }}.git \
+            automated-release-${{ github.event.inputs.releaseVersion }}:automated-release-${{ github.event.inputs.releaseVersion }}
+          git push https://${{ github.token }}@github.com/${{ github.repository }}.git v${{ github.event.inputs.releaseVersion }}
+      - name: Pull Request
+        uses: repo-sync/pull-request@v2
+        with:
+          source_branch: automated-release-${{ github.event.inputs.releaseVersion }}
+          destination_branch: ${{ github.ref_name }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          pr_title: "Automated Release: ${{ github.event.inputs.releaseVersion }}"
+      - name: Publish Release
+        if: ${{ github.event.inputs.dry-run != 'true' }}
+        uses: ncipollo/release-action@v1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          tag: v${{ github.event.inputs.releaseVersion }}
diff --git a/.github/workflows/snapshot.yml b/.github/workflows/snapshot.yml
@@ -0,0 +1,38 @@
+name: Upload Snapshot
+
+on:
+  push:
+    branches:
+      - master
+  workflow_dispatch: {}
+
+jobs:
+  verify:
+    name: latest-images
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+      - name: Setup Java
+        uses: actions/setup-java@v2
+        with:
+          distribution: 'temurin'
+          java-version: 8.0.x
+          server-id: ossrh
+          server-username: OSSRH_USERNAME
+          server-password: OSSRH_TOKEN
+          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+          gpg-passphrase: GPG_PASSPHRASE
+      - name: Assert Snapshot Version
+        run: |
+          ./mvnw clean install -Dmaven.test.skip=true
+          ./mvnw -q \
+            -Dexec.executable=echo \
+            -Dexec.args='${project.version}' \
+            exec:exec | perl -ne 'die unless m/.*-SNAPSHOT/'
+      - name: Publish to Apache Maven Central
+        run: ./mvnw deploy
+        env:
+          OSSRH_USERNAME: ${{ secrets.SNAPSHOT_UPLOAD_USER }}
+          OSSRH_TOKEN: ${{ secrets.SNAPSHOT_UPLOAD_PASSWORD }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSWORD }}
diff --git a/.gitignore b/.gitignore
@@ -5,6 +5,7 @@
 .settings/
 .project
 .vscode/
+.attach_pid*

 # Maven builds
 */target/