[pull] master from openyurtio:master

.github/workflows/ci.yaml

@@ -9,8 +9,8 @@ on:
   workflow_dispatch: {}
 
 env:
-  GO_VERSION: '1.20'
-  GOLANGCI_VERSION: 'v1.55.2'
+  GO_VERSION: '1.24.1'
+  GOLANGCI_VERSION: 'v1.64.7'
 
   # Common users. We can't run a step 'if secrets.AWS_USR != ""' but we can run
   # a step 'if env.AWS_USR' != ""', so we copy these to succinctly test whether
@@ -19,6 +19,16 @@ env:
   AWS_USR: ${{ secrets.AWS_USR }}
 
 jobs:
+  typos-check:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout Actions Repository
+        uses: actions/checkout@v4
+      - name: Check spelling with custom config file
+        uses: crate-ci/typos@v1.23.2
+        with:
+          config: ./typos.toml
+
   verify:
     runs-on: ubuntu-22.04
     steps:
@@ -49,18 +59,18 @@ jobs:
           skip-cache: true
           mode: readonly
 
-  markdownlint-misspell-shellcheck:
-    runs-on: ubuntu-22.04
-    # this image is build from Dockerfile
-    # https://github.com/pouchcontainer/pouchlinter/blob/master/Dockerfile
-    container: pouchcontainer/pouchlinter:v0.1.2
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-      - name: Run misspell
-        run: find  ./* -name  "*"  | xargs misspell -error
-      - name: Lint markdown files
-        run: find  ./ -name  "*.md" | grep -v enhancements |  grep -v .github
+#  markdownlint-misspell-shellcheck:
+#    runs-on: ubuntu-22.04
+#    # this image is build from Dockerfile
+#    # https://github.com/pouchcontainer/pouchlinter/blob/master/Dockerfile
+#    container: pouchcontainer/pouchlinter:v0.1.2
+#    steps:
+#      - name: Checkout
+#        uses: actions/checkout@v3
+#      - name: Run misspell
+#        run: find  ./* -name  "*"  | xargs misspell -error
+#      - name: Lint markdown files
+#        run: find  ./ -name  "*.md" | grep -v enhancements |  grep -v .github
 #      - name: Check markdown links
 #        run: |
 #          set +e
@@ -97,12 +107,13 @@ jobs:
       - name: Publish Unit Test Coverage
         # only publish result in openyurt repo
         if: github.repository == 'openyurtio/openyurt'
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v4.5.0
         with:
           name: codecov-umbrella
           token: ${{ secrets.CODECOV_TOKEN }}
           flags: unittests
           files: ./cover.out,./yurttunnel-cover.out
+          version: v0.6.0
           fail_ci_if_error: true
           verbose: true
   e2e-tests:
@@ -121,11 +132,11 @@ jobs:
 #          restore-keys: ${{ runner.os }}-go-
       - name: Install Required Commands
         run: |
-          go install sigs.k8s.io/kind@v0.22.0
-          curl -LO https://storage.googleapis.com/kubernetes-release/release/v1.28.7/bin/linux/amd64/kubectl && sudo install kubectl /usr/local/bin/kubectl
+          go install sigs.k8s.io/kind@v0.26.0
+          curl -LO https://dl.k8s.io/release/v1.32.1/bin/linux/amd64/kubectl && sudo install kubectl /usr/local/bin/kubectl
       - name: Build Images
         run: make docker-build
       - name: Local Up Openyurt Cluster With Kind
-        run: NODES_NUM=3 DISABLE_DEFAULT_CNI=true make local-up-openyurt
+        run: NODES_NUM=5 DISABLE_DEFAULT_CNI=true make local-up-openyurt
       - name: Run e2e Tests
         run: make e2e-tests

.github/workflows/release-assets.yaml

@@ -31,13 +31,13 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: 1.20
+          go-version: 1.22.3
           cache: true
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v5
         with:
           distribution: goreleaser
-          version: latest
+          version: v1.25.1
           args: release --clean
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/sonarcloud.yaml

@@ -41,10 +41,10 @@ jobs:
           publish_results: true
 
       - name: "Upload artifact"
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
-          name: SARIF file
-          path: results.sarif
+          name: my-artifact-${{ matrix.runs-on }}
+          path: file-${{ matrix.runs-on }}.txt
           retention-days: 5
 
       - name: "Upload to code-scanning"

.github/workflows/sync-charts.yaml

@@ -6,6 +6,7 @@ on:
       - master
     paths:
       - 'charts/**'
+  workflow_dispatch: {}
 
 jobs:
   sync-charts:
@@ -15,17 +16,9 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Get the version
-        id: get_version
-        run: |
-          echo ::set-output name=VERSION::${GITHUB_REF#refs/tags/}
-          echo ::set-output name=TAG::${GITHUB_REF#refs/tags/}
-
-      - name: Sync to openyurt-helm Repo
+      - name: Sync to openyurtio/charts Repo
         env:
-          SSH_DEPLOY_KEY: ${{ secrets.SYNC_CHARTS_SECRET }}
-          VERSION: ${{ steps.get_version.outputs.VERSION }}
-          TAG: ${{ steps.get_version.outputs.TAG }}
+          SSH_DEPLOY_KEY: ${{ secrets.SYNC_OPENYURTIO_CHARTS_KEY }}
           COMMIT_ID: ${{ github.sha }}
         run: |
           bash ./hack/lib/sync-charts.sh

.github/workflows/trivy-scan.yml

@@ -44,7 +44,7 @@ jobs:
           output: 'trivy-results.sarif'
 
       - name: Upload Trivy scan results to GitHub Security
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         if: always()
         with:
           sarif_file: 'trivy-results.sarif'

.golangci.yaml

@@ -17,9 +17,8 @@ run:
 
 # output configuration options
 output:
-  # colored-line-number|line-number|json|tab|checkstyle|code-climate|junit-xml|github-actions
-  # default is "colored-line-number"
-  format: colored-line-number
+  formats:
+    - format: colored-line-number
 
   # print lines of code with issue, default is true
   print-issued-lines: true
@@ -33,7 +32,10 @@ output:
 # all available settings of specific linters
 linters-settings:
   gci:
-    local-prefixes: github.com/openyurtio
+    sections:
+      - standard
+      - prefix(github.com/openyurtio)
+      - default
 
 linters:
   disable-all: true
@@ -44,5 +46,5 @@ linters:
     - ineffassign
     - misspell
     - unused
-    - vet
+    - govet
     - staticcheck

.goreleaser.yaml

@@ -14,6 +14,18 @@ builds:
       - -s -w -X github.com/openyurtio/openyurt/pkg/projectinfo.gitVersion={{ .Tag }} -X github.com/openyurtio/openyurt/pkg/projectinfo.gitCommit={{ .ShortCommit }} -X github.com/openyurtio/openyurt/pkg/projectinfo.buildDate={{ .Date }}
     env:
       - CGO_ENABLED=0
+  - id: yurthub
+    binary: yurthub
+    goos:
+      - linux
+    goarch:
+      - amd64
+      - arm64
+    main: ./cmd/yurthub/yurthub.go
+    ldflags:
+      - -s -w -X github.com/openyurtio/openyurt/pkg/projectinfo.gitVersion={{ .Tag }} -X github.com/openyurtio/openyurt/pkg/projectinfo.gitCommit={{ .ShortCommit }} -X github.com/openyurtio/openyurt/pkg/projectinfo.buildDate={{ .Date }}
+    env:
+      - CGO_ENABLED=0
 
 archives:
   - format: tar.gz
@@ -23,13 +35,28 @@ archives:
       - yurtadm
     name_template: '{{ .ArtifactName }}-{{ .Tag }}-{{ .Os }}-{{ .Arch }}'
     files: [ LICENSE, README.md ]
+  - format: tar.gz
+    id: yurthub-tgz
+    wrap_in_directory: '{{ .Os }}-{{ .Arch }}'
+    builds:
+      - yurthub
+    name_template: '{{ .ArtifactName }}-{{ .Tag }}-{{ .Os }}-{{ .Arch }}'
+    files: [ LICENSE, README.md ]
   - format: zip
     id: yurtadm-zip
     builds:
       - yurtadm
     wrap_in_directory: '{{ .Os }}-{{ .Arch }}'
     name_template: '{{ .ArtifactName }}-{{ .Tag }}-{{ .Os }}-{{ .Arch }}'
     files: [ LICENSE, README.md ]
+  - format: zip
+    id: yurthub-zip
+    builds:
+      - yurthub
+    wrap_in_directory: '{{ .Os }}-{{ .Arch }}'
+    name_template: '{{ .ArtifactName }}-{{ .Tag }}-{{ .Os }}-{{ .Arch }}'
+    files: [ LICENSE, README.md ]
+
 
 checksum:
   name_template: 'sha256sums.txt'