build(deps): bump actions/checkout from 3 to 5

.dockerignore

@@ -0,0 +1,35 @@
+# Binaries for programs and plugins
+*.exe
+*.dll
+*.so
+*.dylib
+*.tmp
+.DS_Store
+
+# Test binary, build with `go test -c`
+*.test
+
+# IntelliJ
+.idea/
+*.iml
+
+# Vscode files
+.vscode
+
+# rbac and manager config for example provider
+manager_image_patch.yaml-e
+manager_pull_policy.yaml-e
+
+# Sample config files auto-generated by kubebuilder
+config/samples
+
+# test results
+_artifacts
+
+# Used during parts of the build process. Files _should_ get cleaned up automatically.
+# This is also a good location for any temporary manfiests used during development
+tmp
+
+# Used by current object
+/_output/
+dist/

.github/OWNERS

@@ -1,18 +1,17 @@
 approvers:
     - pixiake
-    - Forest-L
     - rayzhou2017
     - LinuxSuRen
+    - ImitationImmortal
 
 reviewers:
     - pixiake
-    - Forest-L
     - rayzhou2017
     - zryfish
-    - shaowenchen
     - benjaminhuo
     - calvinyv
     - FeynmanZhou
     - huanggze
     - wansir
     - LinuxSuRen
+    - ImitationImmortal

.github/workflows/build-multiarch.yaml

@@ -3,36 +3,48 @@ name: BuildContainerImage
 on:
   push:
     tags:
-      - 'v3*'
+      - 'v4*'
 
 jobs:
   build:
     name: Build
     runs-on: ubuntu-latest
+    if: github.repository == 'kubesphere/kubekey'
     env:
       GO111MODULE: on
     steps:
-      - name: Set env
-        run: echo "RELEASE_TAG=${GITHUB_REF:10}" >> $GITHUB_ENV
+      - name: Prepare
+        id: prepare
+        run: |
+          VERSION=latest
+
+          if [[ $GITHUB_REF == refs/tags/* ]]; then
+            VERSION=${GITHUB_REF#refs/tags/}
+          fi
+          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
+
+      - name: Checkout code
+        uses: actions/checkout@v5
 
-      - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+      - name: Login to DOCKER
+        uses: docker/login-action@v3
         with:
-          fetch-depth: 0
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_PASSWORD }}
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v3
         with:
           platforms: all
 
       - name: Set up Docker buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
-      - name: Build and push docker images
-        env:
-          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
-          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
-        if: github.event_name == 'push'
+      - name: Build and push Docker images
         run: |
-          echo ${{ secrets.DOCKER_PASSWORD }} | docker login -u ${{ secrets.DOCKER_USERNAME }} --password-stdin
-          make release-prod
+          tag=${{ steps.prepare.outputs.version }}
+          if [[ $tag =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            REGISTRY=docker.io/kubesphere TAG=$tag make docker-push
+          else
+            REGISTRY=docker.io/kubespheredev TAG=$tag make docker-push
+          fi

.github/workflows/gen-repository-iso.yaml

@@ -1,9 +1,9 @@
 ---
-name: gen-repository-iso
+name: GenRepositoryISO
 on:
   push:
     tags:
-      - 'v*'
+      - 'ISO-*'
   workflow_dispatch:
 
 jobs:
@@ -14,16 +14,14 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - name: centos7-rpms
-            dockerfile: dockerfile.centos7
           - name: almalinux-9.0-rpms
             dockerfile: dockerfile.almalinux90
           - name: debian10-debs
             dockerfile: dockerfile.debian10
           - name: debian11-debs
             dockerfile: dockerfile.debian11
-          - name: ubuntu-16.04-debs
-            dockerfile: dockerfile.ubuntu1604
+          - name: debian12-debs
+            dockerfile: dockerfile.debian12
           - name: ubuntu-18.04-debs
             dockerfile: dockerfile.ubuntu1804
           - name: ubuntu-20.04-debs
@@ -32,16 +30,16 @@ jobs:
             dockerfile: dockerfile.ubuntu2204
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v3
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Build iso image to local
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: hack/gen-repository-iso
           file: hack/gen-repository-iso/${{ matrix.dockerfile }}
@@ -56,7 +54,7 @@ jobs:
           sha256sum *.iso >  ${{ matrix.name }}.iso.sha256sum.txt
 
       - name: Wait for release workflow to finish
-        uses: lewagon/wait-on-check-action@v1.3.1
+        uses: lewagon/wait-on-check-action@v1.3.4
         with:
           ref: ${{ github.ref }}
           check-name: 'create draft release'
@@ -66,12 +64,12 @@ jobs:
 
       - name: Release and upload packages
         if: startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           draft: true
           files: |
             ${{ matrix.name }}.iso.sha256sum.txt
             ${{ matrix.name }}-amd64.iso
-            ${{ matrix.name }}-arm64.iso
+            ${{ matrix.name }}-arm64.iso

.github/workflows/golangci-lint.yaml

@@ -0,0 +1,81 @@
+name: GolangCILint
+
+on:
+  pull_request:
+    types: [opened, edited, synchronize, reopened]
+    paths:
+      - 'pkg/**'
+      - 'cmd/**'
+      - 'version/**'
+      - 'go.mod'
+      - 'go.sum'
+      - 'api/**'
+
+# Remove all permissions from GITHUB_TOKEN except metadata.
+permissions: {}
+
+jobs:
+  golangci:
+    name: lint
+    runs-on: ubuntu-latest
+    if: github.repository == 'kubesphere/kubekey'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - name: Setup golang
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.23.3
+
+      - name: Sync mod
+        run: make generate-modules
+
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@v6
+        with:
+          version: v1.63.3
+
+  verify:
+    name: verify
+    runs-on: ubuntu-latest
+    if: github.repository == 'kubesphere/kubekey'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - name: Setup golang
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.23.3
+
+      - name: Sync mod
+        run: make generate-modules
+
+      - name: Verify
+        run: ALL_VERIFY_CHECKS="goimports releaser" make verify
+
+  test:
+    name: test
+    runs-on: ubuntu-latest
+    if: github.repository == 'kubesphere/kubekey'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - name: Setup golang
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.23.3
+
+      - name: Sync mod
+        run: make generate-modules
+
+      - name: Test
+        run: make test