Merge branch 'main' into adding-lint-commit-and-husky-to-root-configuration

Signed-off-by: Dibyanshu Pal Kushwaha <dibyanshupkushwaha@gmail.com>

Author: dibyanshu-pal-kushwaha

.github/workflows/app-artifacts-embedded.yml

@@ -0,0 +1,66 @@
+name: Build and upload embedded binaries
+
+on:
+  workflow_dispatch:
+    inputs:
+      buildBranch:
+        description: 'Headlamp ref/branch/tag'
+        required: true
+        default: 'main'
+      version:
+        description: 'Version for the binaries (defaults to app/package.json version)'
+        required: false
+        default: ''
+
+permissions:
+  contents: read
+
+jobs:
+  build-embedded:
+    permissions:
+      actions: write # needed to upload artifacts
+      contents: read
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      with:
+        ref: ${{ github.event.inputs.buildBranch }}
+    - name: Setup nodejs
+      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+      with:
+        node-version: 20.x
+        cache: 'npm'
+        cache-dependency-path: |
+          frontend/package-lock.json
+    - uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
+      with:
+        go-version: '1.24.*'
+        cache-dependency-path: |
+          backend/go.sum
+    - name: Get version
+      id: get-version
+      run: |
+        if [ -n "${{ github.event.inputs.version }}" ]; then
+          VERSION="${{ github.event.inputs.version }}"
+        else
+          VERSION=$(node -p "require('./app/package.json').version")
+        fi
+        echo "version=$VERSION" >> $GITHUB_OUTPUT
+        echo "Building embedded binaries with version: $VERSION"
+    - name: Build frontend
+      run: |
+        make frontend
+    - name: Prepare backend for embedding
+      run: |
+        make backend-embed-prepare
+    - name: Build embedded binaries
+      run: |
+        make backend-embed-all-compressed VERSION=${{ steps.get-version.outputs.version }}
+    - name: Upload embedded binaries
+      uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+      with:
+        name: embedded-binaries
+        path: ./backend/dist/*.tar.gz
+        if-no-files-found: error
+        retention-days: 2
+

.github/workflows/app-artifacts-mac.yml

@@ -99,7 +99,7 @@ jobs:
       uses: azure/login@6c251865b4e6290e7b78be643ea2d005bc51f69a # v2.1.1
       with:
         client-id: ${{ secrets.WINDOWS_CLIENT_ID }}
-        tenant-id: ${{ secrets. AZ_TENANT_ID }}
+        tenant-id: ${{ secrets.AZ_TENANT_ID }}
         subscription-id: ${{ secrets.AZ_SUBSCRIPTION_ID }}
     - name: Fetch certificates
       if: ${{ inputs.signBinaries }}

.github/workflows/backend-test.yml

@@ -76,6 +76,10 @@ jobs:
           rm ~/.config/Headlamp/kubeconfigs/config
         shell: bash
 
+      - name: Run fuzz tests
+        run: npm run backend:fuzz
+        shell: bash
+
       - name: Upload coverage report as artifact
         id: upload-artifact
         uses: actions/upload-artifact@84480863f228bb9747b473957fcc9e309aa96097 # v4.4.2

.github/workflows/draft-release.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           fetch-depth: 0
 
@@ -47,23 +47,23 @@ jobs:
           echo "$RELEASE_NOTES" >> $GITHUB_OUTPUT
           echo "EOF" >> $GITHUB_OUTPUT
 
-      - name: Create Release Coordination Issue
-        uses: actions/github-script@v7
-        with:
-          github-token: ${{ github.token }}
-          script: |
-            const releaseName = '${{ github.event.inputs.releaseName }}';
-            const issueBody = `${{ steps.issue_body.outputs.body }}`;
+      # - name: Create Release Coordination Issue
+      #   uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+      #   with:
+      #     github-token: ${{ github.token }}
+      #     script: |
+      #       const releaseName = '${{ github.event.inputs.releaseName }}';
+      #       const issueBody = `${{ steps.issue_body.outputs.body }}`;
 
-            const issue = await github.rest.issues.create({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              title: `Release ${releaseName} - Coordination`,
-              body: issueBody,
-              labels: ['release']
-            });
+      #       const issue = await github.rest.issues.create({
+      #         owner: context.repo.owner,
+      #         repo: context.repo.repo,
+      #         title: `Release ${releaseName} - Coordination`,
+      #         body: issueBody,
+      #         labels: ['release']
+      #       });
 
-            console.log(`Created issue #${issue.data.number}`);
+      #       console.log(`Created issue #${issue.data.number}`);
 
       - name: Create Release Draft
         uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1

.github/workflows/helm-chart-release.yml

@@ -76,13 +76,13 @@ jobs:
         with:
           config: .github/cr.yaml
           mark_as_latest: false # only headlamp is set to latest
+          skip_existing: true # skip package upload if release already exists
 
       - name: Push Charts to GHCR
         run: |
-          for pkg in .cr-release-packages/*; do
+          for pkg in .cr-release-packages/*.tgz; do
             if [ -z "${pkg:-}" ]; then
               break
             fi
-
             helm push "${pkg}" oci://ghcr.io/${{ github.repository }}/charts
           done

.github/workflows/pr-to-update-minikube.yml

@@ -41,13 +41,13 @@ jobs:
         run: |
           gh repo sync headlamp-k8s/minikube
         env:
-          GITHUB_TOKEN: ${{ secrets. KINVOLK_REPOS_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.KINVOLK_REPOS_TOKEN }}
       - name: Check out minikube repo
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           repository: headlamp-k8s/minikube
           path: minikube
-          token: ${{ secrets. KINVOLK_REPOS_TOKEN }}
+          token: ${{ secrets.KINVOLK_REPOS_TOKEN }}
           fetch-depth: 0
       - name: Update headlamp version in minikube
         run: |
@@ -90,4 +90,4 @@ jobs:
             cc: @$user" \
         env:
           LATEST_HEADLAMP_TAG: ${{ env.LATEST_HEADLAMP_TAG }}
-          GITHUB_TOKEN: ${{ secrets. KINVOLK_REPOS_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.KINVOLK_REPOS_TOKEN }}

ADOPTERS.md

@@ -11,6 +11,7 @@ If you would like your organization to be added to this list, please open a PR w
 | Organization                                 | Description                                                                                                                                                                                                                                                                                                                                                       |
 |----------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
 | [EPAM Systems, Inc.](https://epam.com/)      | EPAM leverages Headlamp for their [edp-headlamp](https://github.com/epam/edp-headlamp) project, integrating it within their [KubeRocketCI](https://docs.kuberocketci.io/) open-source solution to enhance the user interface and experience for managing Platform using Kubernetes-native approach.                                                               |
+| [KA-NABELL](https://www.ka-nabell.com/)      | KA-NABELL, Japan's largest trading card e-commerce platform, contributes to Headlamp and uses it as a central operations hub for its microservices DevOps teams. They develop and extend official plugins (including a Knative plugin) alongside custom Headlamp plugins to streamline day-to-day application operations and integrate with their broader cloud native toolchain (including CNCF ecosystem tools and services). |
 | [Microsoft](https://www.microsoft.com/) | Microsoft contributes to Headlamp, uses Headlamp internally, and also uses Headlamp as the basis for [AKS desktop](https://github.com/Azure/aks-desktop). |
 | [Millennium bcp](https://www.millenniumbcp.pt/) | Millennium bcp is utilizing Headlamp as a User Interface to enhance visibility and streamline the configuration and deployment of microservices and applications. |
 | [Oracle](https://www.oracle.com/) | [Oracle Cloud Native Environment (OCNE)](https://www.oracle.com/linux/cloud-native-environment/), based on open standards, specifications, and APIs defined by the Open Container Initiative and Cloud Native Computing Foundation (CNCF), includes a CNCF-certified Kubernetes module, container runtimes, virtualization, service mesh, storage, networking, observability, and diagnostics. Oracle leverages Headlamp and its plugin system for implementing its own [OCNE UI](https://docs.oracle.com/en/learn/ocne-ui/index.html).