Merge remote-tracking branch 'origin/master' into sanprabhu/cilium-nodesubnet-target-makefile

Author: santhoshmprabhu

.config/.gdnsuppress

@@ -0,0 +1,32 @@
+name: 'Docker Base Images'
+on:
+  workflow_dispatch:
+  pull_request:
+    types:
+        - opened
+        - reopened
+        - synchronize
+        - ready_for_review
+  merge_group:
+    types:
+      - checks_requested
+
+jobs:
+  render:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+    - name: Set up Go
+      uses: actions/setup-go@v5
+      with:
+        go-version: '1.23'
+    - name: Render Dockerfiles
+      run: make dockerfiles
+    - name: Fail if base images are outdated
+      run: |
+        if [ -n "$(git status --porcelain)" ]; then
+          echo "Changes detected. Please run 'make dockerfiles' locally to update the base images."
+          exit 1
+        fi

.config/credScanSuppressions.json

@@ -29,11 +29,12 @@ jobs:
           go-version: "^1.23"
 
       - name: Setup Kind
-        uses: engineerd/setup-kind@v0.6.2
+        uses: helm/kind-action@v1
         with:
-          version: "v0.11.1"
+          version: "v0.22.0"
+          kubectl_version: "v1.27.7"
           config: ./test/kind/kind.yaml
-          name: npm-kind
+          cluster_name: npm-kind
 
       - name: Check Kind
         run: |

.github/workflows/baseimages.yaml

@@ -10,6 +10,7 @@ ipam-*.xml
 
 # Environment
 .vscode/*
+**/*.sw?
 
 # Coverage 
 *.out

.github/workflows/cyclonus-netpol-extended-nightly-test.yaml

@@ -34,6 +34,7 @@ linters-settings:
     disabled-checks:
     - "hugeParam"
   govet:
-    check-shadowing: true
+    enable:
+    - shadow
   lll:
     line-length: 200

.gitignore

@@ -0,0 +1,45 @@
+parameters:
+- name: binaries
+  type: jobList
+
+
+jobs:
+- ${{ each job_data in parameters.binaries }}:
+  - ${{ if eq(job_data.templateContext.action, 'build') }}:
+    - job: binaries_${{ job_data.job }}
+      displayName: "Build Binary - ${{ job_data.displayName }} -"
+      strategy: ${{ job_data.strategy }}
+      pool:
+        type: linux
+        ${{ if eq(job_data.job, 'linux_arm64') }}:
+          hostArchitecture: arm64
+
+      variables:
+        ob_outputDirectory: $(Build.ArtifactStagingDirectory)/out
+        ob_artifactSuffix: _$(artifact)
+        ob_git_checkout: false
+        REPO_ROOT: $(Build.SourcesDirectory)/${{ job_data.templateContext.repositoryArtifact }}
+        ${{ if eq(job_data.job, 'linux_amd64') }}:
+          LinuxContainerImage: 'onebranch.azurecr.io/linux/ubuntu-2204:latest'
+          ARCH: amd64
+          OS: linux
+        ${{ elseif eq(job_data.job, 'windows_amd64') }}:
+          LinuxContainerImage: 'onebranch.azurecr.io/linux/ubuntu-2204:latest'
+          ARCH: amd64
+          OS: windows
+        ${{ elseif eq(job_data.job, 'linux_arm64') }}:
+          ob_enable_qemu: true
+          ARCH: arm64
+          OS: linux
+  
+      steps:
+      - task: DownloadPipelineArtifact@2
+        inputs:
+          targetPath: $(Build.SourcesDirectory)/${{ job_data.templateContext.repositoryArtifact }}
+          artifact: '${{ job_data.templateContext.repositoryArtifact }}'
+
+      - template: binary.steps.yaml
+        parameters:
+          target: $(name)
+          os: $(OS)
+          arch: $(ARCH)

.golangci.yml

@@ -0,0 +1,72 @@
+parameters:
+- name: target
+  type: string
+
+- name: os
+  type: string
+
+- name: arch
+  type: string
+
+
+steps:
+- task: GoTool@0
+  inputs:
+    version: '$(GOVERSION)'
+
+- bash: |
+    # Ubuntu
+    if [[ -f /etc/debian_version ]];then
+      sudo apt-get update -y
+      if [[ $GOARCH =~ amd64 ]]; then
+        sudo apt-get install -y llvm clang linux-libc-dev linux-headers-generic libbpf-dev libc6-dev nftables iproute2 gcc-multilib tree
+        for dir in /usr/include/x86_64-linux-gnu/*; do 
+          sudo ln -sfn "$dir" /usr/include/$(basename "$dir") 
+        done
+  
+      elif [[ $GOARCH =~ arm64 ]]; then
+        sudo apt-get install -y llvm clang linux-libc-dev linux-headers-generic libbpf-dev libc6-dev nftables iproute2 gcc-aarch64-linux-gnu tree
+        for dir in /usr/include/aarch64-linux-gnu/*; do 
+          sudo ln -sfn "$dir" /usr/include/$(basename "$dir")
+        done
+      fi
+    # Mariner
+    else
+      sudo tdnf install -y llvm clang libbpf-devel nftables tree
+      for dir in /usr/include/aarch64-linux-gnu/*; do 
+        if [[ -d $dir ]]; then
+          sudo ln -sfn "$dir" /usr/include/$(basename "$dir") 
+        elif [[ -f "$dir" ]]; then
+          sudo ln -Tsfn "$dir" /usr/include/$(basename "$dir") 
+        fi
+      done
+    fi
+  displayName: "Install Binary Pre-Reqs"
+  workingDirectory: $(ACN_DIR)
+  continueOnError: true
+  env:
+    GOOS: ${{ parameters.os }}
+    GOARCH: ${{ parameters.arch }}
+
+- bash: |
+    make "$TARGET"
+  displayName: "Build Binary - ${{ parameters.target }}"
+  workingDirectory: $(ACN_DIR)
+  env:
+    REPO_ROOT: $(ACN_DIR)
+    TARGET: ${{ parameters.target }}
+    GOOS: ${{ parameters.os }}
+    GOARCH: ${{ parameters.arch }}
+
+- script: |
+    SOURCE_DIR="./output"
+    TARGET_DIR="$BUILD_ARTIFACTSTAGINGDIRECTORY"/out
+    tree "$SOURCE_DIR"
+
+    mkdir -p "$TARGET_DIR"
+    find "$SOURCE_DIR" -name '*.tgz*' -print -exec mv -t "$TARGET_DIR"/ {} +
+    find "$SOURCE_DIR" -name '*.zip' -print -exec mv -t "$TARGET_DIR"/ {} +
+
+    tree "$TARGET_DIR"
+  displayName: "Prepare Artifacts"
+  workingDirectory: $(ACN_DIR)