Fix/Windows Hosts Path Auto-Detection (#359)

* Sign release artifacts with Cosign in GoReleaser configuration

- Updated `.goreleaser.yml` to sign both archive and checksum artifacts using Cosign (keyless OIDC).
- Added specific arguments and signature templates for artifact signing.

* Update .gitignore to exclude /kubefwd.* files

* Use OS-specific hosts file path detection in `--hosts-path` flag.

* Use explicit ids for cosign signs in .goreleaser.yml

* Set global timeout for fuzz tests in CI workflow

- Added a `-timeout=60s` flag to fuzz tests to ensure a total timeout for each test’s setup and teardown process.

Author: cjimti

.github/workflows/ci.yml

@@ -89,11 +89,11 @@ jobs:
 
       - name: Run fuzz tests
         run: |
-          # Run each fuzz test for 30 seconds
+          # Run each fuzz test for 30 seconds with 60s total timeout for setup/teardown
           echo "Running FuzzIpFromString..."
-          go test -fuzz=FuzzIpFromString -fuzztime=30s ./pkg/fwdip/...
+          go test -fuzz=FuzzIpFromString -fuzztime=30s -timeout=60s ./pkg/fwdip/...
           echo "Running FuzzServiceConfigurationFromReservation..."
-          go test -fuzz=FuzzServiceConfigurationFromReservation -fuzztime=30s ./pkg/fwdip/...
+          go test -fuzz=FuzzServiceConfigurationFromReservation -fuzztime=30s -timeout=60s ./pkg/fwdip/...
 
   build:
     name: Build

.gitignore

@@ -7,6 +7,7 @@ dist
 vendor
 dist/
 /kubefwd
+/kubefwd.*
 RELEASE_*
 NOTES_*
 site/

.goreleaser.yml

@@ -54,9 +54,19 @@ archives:
 checksum:
   name_template: '{{ .ProjectName }}_checksums.txt'
 
-# Sign checksums with Cosign (keyless - uses OIDC identity)
+# Sign release artifacts with Cosign (keyless - uses OIDC identity)
 signs:
-  - cmd: cosign
+  - id: archives
+    cmd: cosign
+    artifacts: archive
+    signature: "${artifact}.sigstore.json"
+    args:
+      - "sign-blob"
+      - "--yes"
+      - "--bundle=${signature}"
+      - "${artifact}"
+  - id: checksums
+    cmd: cosign
     artifacts: checksum
     signature: "${artifact}.sigstore.json"
     args:

cmd/kubefwd/services/services.go

@@ -6,6 +6,7 @@ import (
 	"io"
 	"os"
 	"os/signal"
+	"runtime"
 	"sync"
 	"syscall"
 	"time"
@@ -56,6 +57,14 @@ var autoReconnect bool
 // Version is set by the main package
 var Version string
 
+// defaultHostsPath returns the OS-appropriate hosts file path
+func defaultHostsPath() string {
+	if runtime.GOOS == "windows" {
+		return `C:\Windows\System32\drivers\etc\hosts`
+	}
+	return "/etc/hosts"
+}
+
 func init() {
 	// override error output from k8s.io/apimachinery/pkg/util/runtime
 	utilRuntime.ErrorHandlers[0] = func(_ context.Context, err error, _ string, _ ...interface{}) {
@@ -75,7 +84,7 @@ func init() {
 	Cmd.Flags().StringSliceVarP(&fwdReservations, "reserve", "r", []string{}, "Specify an IP reservation. Specify multiple reservations by duplicating this argument.")
 	Cmd.Flags().StringVarP(&fwdConfigurationPath, "fwd-conf", "z", "", "Define an IP reservation configuration")
 	Cmd.Flags().IntVarP(&timeout, "timeout", "t", 300, "Specify a timeout seconds for the port forwarding.")
-	Cmd.Flags().StringVar(&hostsPath, "hosts-path", "/etc/hosts", "Hosts Path default /etc/hosts.")
+	Cmd.Flags().StringVar(&hostsPath, "hosts-path", defaultHostsPath(), "Hosts file path.")
 	Cmd.Flags().BoolVarP(&refreshHostsBackup, "refresh-backup", "b", false, "Create a fresh hosts backup, replacing any existing backup.")
 	Cmd.Flags().BoolVarP(&purgeStaleIps, "purge-stale-ips", "p", false, "Remove stale kubefwd host entries (IPs in 127.1.27.1 - 127.255.255.255 range) before starting.")
 	Cmd.Flags().DurationVar(&resyncInterval, "resync-interval", 5*time.Minute, "Interval for forced service resync (e.g., 1m, 5m, 30s)")