Merge branch 'main' into kuberay-operator-1.5.1

Author: afayasa

.github/workflows/bulwark-gitleaks-pr-validation.yaml

@@ -28,7 +28,7 @@ jobs:
         if: github.event.pull_request.head.repo.full_name != github.repository
         shell: sh
         run: |
-          git clone https://github.com/${{ github.event.pull_request.head.repo.full_name }}.git -b ${BRANCH}
+          git clone https://github.com/${{ github.event.pull_request.head.repo.full_name }}.git -b ${BRANCH} ${REPO}
           cd ${REPO}
           git remote add scRepo https://github.com/${{ github.repository }}.git
           git fetch scRepo
@@ -45,4 +45,4 @@ jobs:
             exit 1
           else 
             echo "GitLeaks validation check passed"
-          fi
+          fi

.github/workflows/pack-validation.yml

@@ -31,7 +31,7 @@
 
      - name: Get changed files
        id: changed-files
-       uses: tj-actions/changed-files@v41
+       uses: tj-actions/changed-files@v46.0.1
 
 #     # Run Validations
      - name: Check Packs

.gitignore

@@ -1 +1,2 @@
 *.tar.gz
+.DS_Store

.gitleaksignore

@@ -0,0 +1,35 @@
+# Generated by gitleak-dome
+# Repository: spectrocloud/pack-central
+# Invalid credentials that should be ignored by gitleaks
+
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-full-1.5.0/manifests/base_manifests.yaml:generic-api-key:4546
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-full-1.5.0/manifests/base_manifests.yaml:generic-api-key:4547
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-full-1.5.0/manifests/base_manifests.yaml:generic-api-key:4656
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-full-1.5.0/manifests/base_manifests.yaml:generic-api-key:4657
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-full/manifests/base_manifests.yaml:generic-api-key:4546
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-full/manifests/base_manifests.yaml:generic-api-key:4547
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-full/manifests/base_manifests.yaml:generic-api-key:4656
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-full/manifests/base_manifests.yaml:generic-api-key:4657
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-pipelines-1.5.0/manifests/base_manifests.yaml:generic-api-key:4546
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-pipelines-1.5.0/manifests/base_manifests.yaml:generic-api-key:4547
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-pipelines-1.5.0/manifests/base_manifests.yaml:generic-api-key:4656
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-pipelines-1.5.0/manifests/base_manifests.yaml:generic-api-key:4657
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-serving-1.5.0/manifests/base_manifests.yaml:generic-api-key:4546
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-serving-1.5.0/manifests/base_manifests.yaml:generic-api-key:4547
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-serving-1.5.0/manifests/base_manifests.yaml:generic-api-key:4656
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-serving-1.5.0/manifests/base_manifests.yaml:generic-api-key:4657
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-training-1.5.0/manifests/base_manifests.yaml:generic-api-key:4546
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-training-1.5.0/manifests/base_manifests.yaml:generic-api-key:4547
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-training-1.5.0/manifests/base_manifests.yaml:generic-api-key:4656
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubeflow-training-1.5.0/manifests/base_manifests.yaml:generic-api-key:4657
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/argocd-3.26.7/charts/argo-cd/values.yaml:private-key:1546
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/argocd-3.26.7/charts/argo-cd/values.yaml:private-key:1556
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/argocd-3.26.7/values.yaml:private-key:1560
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/argocd-3.26.7/values.yaml:private-key:1570
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/hipster-1.1.0/manifests/hipster.yaml:kubernetes-secret-yaml:27
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/hipster-2.0.0/manifests/hipster.yaml:kubernetes-secret-yaml:27
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/hipster-3.0.0/manifests/hipster.yaml:kubernetes-secret-yaml:27
+9e9db671c183a6c890ed53a7f2a196e07b81fbcb:packs/wordpress-6.4.3/charts/wordpress/README.md:private-key:511
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/wordpress-5.4.1/charts/wordpress/README.md:private-key:368
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubewatch-1.0.7/charts/kubewatch/values.yaml:generic-api-key:16
+a1b4bf1043a7f3681fdd294579be16aa76a03549:packs/kubewatch-1.0.7/values.yaml:generic-api-key:22

README.md

@@ -22,13 +22,14 @@ Use them from the Spectro Cloud public registry on our [SaaS offering](https://w
 ## Contributing
 We welcome contributions of new packs and updates to existing packs. This repository uses a fork and pull model. Here are the steps for becoming a contributor:
 
-  * Clone this repository and create a new branch.
+  * Fork this repository and create a new branch.
   * In the packs/ directory, add your changes.
   *  If you are adding a new pack, then create a directory having the format <name of the pack>-x.y.z, where x is the major version, y is the minor version and z is the patch version. If your name of the pack has multiple words, use ‘-’ as the separator while naming the top level directory of the pack.
   * Push your pack changes to your private registry and test it in your Palette environment.
   * Push your changes to your fork, then open a pull request against this repository.
   * While opening a pull request, mention the purpose of the pack and the scenarios that have been validated.
   * If you are making changes that address an existing issue, please make a comment in the issue so we can assign it to you. This helps to prevent accidentally doubling up on work.
+  * If you already have a pack and working on a new version for it, retain the name and display name of the pack across versions. Else, it will show up as a new pack.
 
 ## Rules for contributors
 Your contribution must be your own original work. You may not submit copyrighted content you do not own. Please do not plagiarize.

packs/archivista-0.7.0/README.md

@@ -0,0 +1,53 @@
+# Archivista
+
+![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
+
+Helm chart for Archivista - a graph and storage service for in-toto attestations.
+
+## Prerequisites
+
+A MySQL database and S3 compatible store are needed to successfully install this Helm chart.
+See [Archivista configuration](https://github.com/in-toto/archivista#configuration) for environment variables needed
+to establish connections to each datastore. These environment variables can be added to this Helm chart using the value `deployment.env[]`.
+
+## Parameters
+
+| Key                                        | Type   | Default       |
+|---                                         |---     |---            |
+| affinity                                   | object | `{}`          |
+| autoscaling.enabled                        | bool   | `false`       |
+| autoscaling.maxReplicas                    | int    | `10`          |
+| autoscaling.minReplicas                    | int    | `1`           |
+| autoscaling.targetCPUUtilizationPercentage | int    | `80`          |
+| deployment.env                             | list   | `[]`          |
+| fullnameOverride                           | string | `""`          |
+| image.pullPolicy                           | string | `"IfNotPresent"` |
+| image.repository                           | string | `"ghcr.io/testifysec/archivista"` |
+| image.tag                                  | string | `"0.1.1"`     |
+| ingress.annotations                        | object | `{}`          |
+| ingress.className                          | string | `""`          |
+| ingress.enabled                            | bool   | `true`        |
+| ingress.hosts[0].host                      | string | `"archivista.localhost"` |
+| ingress.hosts[0].path                      | string | `"/"`         |
+| ingress.tls                                | list   | `[]`          |
+| nameOverride                               | string | `""`          |
+| nodeSelector                               | object | `{}`          |
+| podAnnotations                             | object | `{}`          |
+| podSecurityContext                         | object | `{}`          |
+| replicaCount                               | int    | `1`           |
+| resources                                  | object | `{}`          |
+| serviceAccount.annotations                 | object | `{}`          |
+| serviceAccount.create                      | bool   | `false`       |
+| serviceAccount.name                        | string | `""`          |
+| service.port                               | int    | `8082`        |
+| service.type                               | string | `"ClusterIP"` |
+| tolerations                                | list   | `[]`          |
+
+## Usage
+Please refer to [Archivista Github](https://github.com/in-toto/archivista/blob/main/README.md) for further information.
+
+## References
+
+- [Archivista Helm Chart](https://github.com/in-toto/archivista/chart)
+- [Archivista](https://github.com/in-toto/archivista)
+- [in-toto](https://in-toto.io/)

packs/archivista-0.7.0/charts/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

packs/archivista-0.7.0/charts/archivista-0.7.0.tgz

@@ -0,0 +1,34 @@
+# Copyright 2024 The Archivista Contributors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+apiVersion: v2
+name: archivista
+description: A Helm chart for Archivista
+
+type: application
+version: 0.5.1
+
+keywords:
+  - attestation
+
+home: https://github.com/in-toto/
+
+sources:
+  - https://github.com/in-toto/archivista/chart
+  - https://github.com/in-toto/archivista
+
+maintainers:
+  - name: in-toto
+
+appVersion: "0.7.0"