[docs] update gh-pages branch so that docs can use latest changes

.chainsaw.yaml

@@ -0,0 +1,12 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/kyverno/chainsaw/main/.schemas/json/configuration-chainsaw-v1alpha1.json
+apiVersion: chainsaw.kyverno.io/v1alpha1
+kind: Configuration
+metadata:
+  name: configuration
+spec:
+  timeouts:
+    assert: 5m0s
+    cleanup: 5m0s
+    delete: 5m0s
+    error: 5m0s
+    exec: 5m0s

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,3 +1,16 @@
+<!-- If this is your first PR, welcome! Please make sure you read the [contributing guidelines](.github/CONTRIBUTING.md). -->
+<!-- Ensure your PR title complies with the following guidelines
+    1. All PRs titles should start with one of the following prefixes
+         - `[fix]` for PRs related to bug fixes and patches
+         - `[feat]` for PRs related to new features
+         - `[improvement]` for PRs related to improvements of existing features
+         - `[test]` for PRs related to tests
+         - `[CI]` for PRs related to repo CI improvements
+         - `[docs]` for PRs related to documentation updates
+         - `[deps]` for PRs related to dependency updates
+   2. if a PR introduces a breaking change it should include `[breaking]` in the title
+   3. if a PR introduces a deprecation it should include `[deprecation]` in the title
+-->
 ### General:
 
 * [ ] Have you removed all sensitive information, including but not limited to access keys and passwords?

.github/dependabot.yml

@@ -0,0 +1,38 @@
+version: 2
+updates:
+
+# Go - root directory
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    ## group all dependencies with a k8s.io prefix into a single PR.
+    groups:
+      kubernetes:
+        patterns: [ "k8s.io/*", "sigs.k8s.io/*" ]
+      otel:
+        patterns: ["go.opentelemetry.io/*"]
+    commit-message:
+      prefix: ":seedling:"
+    labels:
+      - "dependencies"
+
+# Docker
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: ":seedling:"
+    labels:
+      - "dependencies"
+
+# github-actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: ":seedling:"
+    labels:
+      - "dependencies"

.github/filters.yml

@@ -0,0 +1,3 @@
+# Any file that is not a doc *.md file
+src:
+  - "!**/*.md"

.github/labels.yml

@@ -1,24 +1,35 @@
-- name: added-feature
+# PR Labels
+- name: new-feature
   description: for new features in the changelog.
-  color: a2eeef
-- name: changed
-  description: for changes in existing functionality in the changelog.
-  color: a2eeef
-- name: deprecated
-  description: for soon-to-be removed features in the changelog.
-  color: e4e669
-- name: removed
-  description: for now removed features in the changelog.
-  color: e4e669
+  color: 225fee
+- name: improvement
+  description: for improvements in existing functionality in the changelog.
+  color: 22ee47
+- name: repo-ci-improvement
+  description: for improvements in the repository or CI workflow in the changelog.
+  color: c922ee
 - name: bugfix
   description: for any bug fixes in the changelog.
-  color: d73a4a
-- name: security
-  description: for vulnerabilities in the changelog.
-  color: dd4739
-- name: bug
-  description: Something isn't working in this issue.
-  color: d73a4a
+  color: ed8e21
+- name: documentation
+  description: for updates to the documentation in the changelog.
+  color: d3e1e6
+- name: dependencies
+  description: dependency updates including security fixes
+  color: 5c9dff
+- name: testing
+  description: for updates to the testing suite in the changelog.
+  color: 933ac9
+- name: breaking-change
+  description: for breaking changes in the changelog.
+  color: ff0000
+- name: ignore-for-release
+  description: PRs you do not want to render in the changelog.
+  color: 7b8eac
+# Issue Labels
 - name: enhancement
-  description: New feature request in this issue.
-  color: a2eeef
+  description: issues that request a enhancement.
+  color: 22ee47
+- name: bug
+  description: issues that report a bug.
+  color: ed8e21

.github/release-drafter.yml

@@ -0,0 +1,67 @@
+name-template: 'v$NEXT_PATCH_VERSION'
+tag-template: 'v$NEXT_PATCH_VERSION'
+exclude-labels:
+  - ignore-for-release
+categories:
+  - title: ⚠️ Breaking Change
+    labels:
+      - breaking-change
+  - title: 🐛 Bug Fixes
+    labels:
+      - bugfix
+  - title: 🚀 New Features
+    labels:
+      - new-feature
+  - title: 💡 Improvements
+    labels:
+      - improvement
+  - title: 🧪 Testing Improvements
+    labels:
+      - testing
+  - title: ⚙️ Repo/CI Improvements
+    labels:
+      - repo-ci-improvement
+  - title: 📖 Documentation
+    labels:
+      - documentation
+  - title: 📦 Dependency Updates
+    labels:
+      - dependencies
+  - title: Other Changes
+    labels:
+      - "*"
+autolabeler:
+  - label: 'breaking-change'
+    title:
+      - '/.*\[breaking\].+/'
+  - label: 'deprecation'
+    title:
+      - '/.*\[deprecation\].+/'
+  - label: 'bugfix'
+    title:
+      - '/.*\[fix\].+/'
+  - label: 'new-feature'
+    title:
+      - '/.*\[feat\].+/'
+  - label: 'improvement'
+    title:
+      - '/.*\[improvement\].+/'
+  - label: 'testing'
+    title:
+      - '/.*\[test\].+/'
+  - label: 'repo-ci-improvement'
+    title:
+      - '/.*\[CI\].+/'
+      - '/.*\[ci\].+/'
+  - label: 'documentation'
+    title:
+      - '/.*\[docs\].+/'
+  - label: 'dependencies'
+    title:
+      - '/.*\[deps\].+/'
+
+change-template: '- $TITLE by @$AUTHOR in #$NUMBER'
+no-changes-template: "- No changes"
+template: |
+  ## What's Changed
+  $CHANGES

.github/workflows/ci.yml

@@ -4,35 +4,103 @@ on:
   push:
     branches:
       - main
-  pull_request: null
+  pull_request_target: null
+
+permissions:
+  contents: read
+  pull-requests: read
+  actions: read
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
-  ci:
+  changes:
     runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        go-version: [ 'stable', 'oldstable', '1.20' ]
+    outputs:
+      paths: ${{ steps.filter.outputs.changes }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
         with:
-          fetch-depth: 0
-      - uses: actions/setup-go@v4
+          ref: ${{ github.event.pull_request.head.sha }}
+      - name: Harden Runner
+        uses: step-security/harden-runner@v2
         with:
-          go-version: ${{ matrix.go-version }}
+          disable-sudo: true
+          egress-policy: block
+          allowed-endpoints: >
+            api.github.com:443
+            github.com:443
+      - uses: dorny/paths-filter@v3
+        id: filter
+        with:
+          base: ${{ github.ref }}
+          filters: .github/filters.yml
+
+  build-test:
+    runs-on: ubuntu-latest
+    environment: ${{ github.event.pull_request.head.repo.fork == true && 'prod-external' || 'prod' }}
+    needs: changes
+    if: ${{ contains(fromJSON(needs.changes.outputs.paths), 'src') }}
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@v2
+        with:
+          disable-sudo: true
+          egress-policy: block
+          allowed-endpoints: >
+            api.github.com:443
+            github.com:443
+            golang.org:443
+            proxy.golang.org:443
+            sum.golang.org:443
+            objects.githubusercontent.com:443
+            storage.googleapis.com:443
+            cli.codecov.io:443
+            api.codecov.io:443
+            ingest.codecov.io:443
+            raw.githubusercontent.com:443
+            get.helm.sh:443
+
+      - uses: actions/[email protected]
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+          check-latest: true
+
       - name: Vet
         run: make vet
-      - name: Lint
-        run: make lint
+
+      - name: lint
+        uses: golangci/golangci-lint-action@v6
+        with:
+          version: v1.62.2
+
       - name: Helm Lint
         run: make helm-lint
+
       - name: Test
         run: make test
+
+      - name: Upload coverage reports to Codecov
+        uses: codecov/codecov-action@v5
+        with:
+          files: ./coverage.out
+          verbose: true
+          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: linode/linode-cloud-controller-manager
+
       - name: Build
         run: make build
+
   docker-build:
     runs-on: ubuntu-latest
+    environment: ${{ github.event.pull_request.head.repo.fork == true && 'prod-external' || 'prod' }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
       - name: Docker Meta
@@ -45,11 +113,57 @@ jobs:
             type=raw,value=latest,enable=${{ github.ref == format('refs/heads/{0}', 'main') }}
             type=semver,pattern={{raw}},value=${{ github.ref_name }}
       - name: Build Dockerfile
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           push: false
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           build-args: |
             REV=${{ github.ref_name }}
+
+  e2e-tests:
+    runs-on: ubuntu-latest
+    environment: ${{ github.event.pull_request.head.repo.fork == true && 'prod-external' || 'prod' }}
+    needs: changes
+    if: ${{ contains(fromJSON(needs.changes.outputs.paths), 'src') }}
+    env:
+      GITHUB_TOKEN: ${{ secrets.github_token }}
+      LINODE_TOKEN: ${{ secrets.LINODE_TOKEN }}
+      IMG: linode/linode-cloud-controller-manager:${{ github.ref == 'refs/heads/main' && 'latest' || format('pr-{0}', github.event.number) || github.ref_name }}
+      LINODE_REGION: us-lax
+      LINODE_CONTROL_PLANE_MACHINE_TYPE: g6-standard-2
+      LINODE_MACHINE_TYPE: g6-standard-2
+      WORKER_NODES: '2'
+    steps:
+      - uses: actions/[email protected]
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: 'go.mod'
+          check-latest: true
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Install devbox
+        uses: jetify-com/[email protected]
+
+      - name: Setup CAPL Management Kind Cluster and CAPL Child Cluster For Testing
+        run: devbox run mgmt-and-capl-cluster
+
+      - name: Run E2E Tests
+        run: devbox run e2e-test
+
+      - name: Run Cilium BGP e2e test
+        run: devbox run e2e-test-bgp
+
+      - name: Cleanup Resources
+        if: always()
+        run: devbox run cleanup-cluster