release: prepare v0.15.0-rc6 (#1060)

Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>

.github/workflows/release-snapshot.yaml

@@ -39,7 +39,7 @@ jobs:
       - name: Release snapshot
         uses: goreleaser/goreleaser-action@v2
         with:
-          version: v1.5.0
+          version: v1.7.0
           args: release --snapshot --skip-publish --rm-dist
       - name: Scan Starboard CLI image for vulnerabilities
         uses: aquasecurity/trivy-action@master

.github/workflows/release.yaml

@@ -165,7 +165,7 @@ jobs:
       - integration-operator-conftest
     runs-on: ubuntu-20.04
     env:
-      DOCKER_CLI_EXPERIMENTAL: "enabled"    # support multi arch
+      DOCKER_CLI_EXPERIMENTAL: "enabled"
     steps:
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v1
@@ -193,16 +193,10 @@ jobs:
         with:
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - name: Login to ECR registry
-        uses: docker/login-action@v1
-        with:
-          registry: public.ecr.aws
-          username: ${{ secrets.ECR_ACCESS_KEY_ID }}
-          password: ${{ secrets.ECR_SECRET_ACCESS_KEY }}
       - name: Release
         uses: goreleaser/goreleaser-action@v2
         with:
-          version: v1.5.0
+          version: v1.7.0
           args: release --rm-dist
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.goreleaser.yaml

@@ -21,7 +21,7 @@ builds:
       - arm64
       - s390x
     goarm:
-      - 7
+      - "7"
     ignore:
       - goos: darwin
         goarch: s390x
@@ -38,14 +38,19 @@ builds:
       - arm64
       - s390x
     goarm:
-      - 7
+      - "7"
   - id: starboard-scanner-aqua
     main: ./cmd/scanner-aqua/main.go
     binary: starboard-scanner-aqua
     goos:
       - linux
     goarch:
       - amd64
+      - arm
+      - arm64
+      - s390x
+    goarm:
+      - "7"
 archives:
   - name_template: "{{ .ProjectName }}_{{ .Os }}_{{ .Arch }}"
     builds:
@@ -71,7 +76,6 @@ changelog:
 dockers:
   - image_templates:
       - "docker.io/aquasec/starboard:{{ .Version }}-amd64"
-      - "public.ecr.aws/aquasecurity/starboard:{{ .Version }}-amd64"
     use: buildx
     goos: linux
     dockerfile: build/starboard/Dockerfile
@@ -90,7 +94,6 @@ dockers:
       - "--platform=linux/amd64"
   - image_templates:
       - "docker.io/aquasec/starboard-operator:{{ .Version }}-amd64"
-      - "public.ecr.aws/aquasecurity/starboard-operator:{{ .Version }}-amd64"
     use: buildx
     goos: linux
     dockerfile: build/starboard-operator/Dockerfile
@@ -127,7 +130,6 @@ dockers:
       - "--platform=linux/amd64"
   - image_templates:
       - "docker.io/aquasec/starboard:{{ .Version }}-arm64"
-      - "public.ecr.aws/aquasecurity/starboard:{{ .Version }}-arm64"
     use: buildx
     goos: linux
     dockerfile: build/starboard/Dockerfile
@@ -146,7 +148,6 @@ dockers:
       - "--platform=linux/arm64"
   - image_templates:
       - "docker.io/aquasec/starboard-operator:{{ .Version }}-arm64"
-      - "public.ecr.aws/aquasecurity/starboard-operator:{{ .Version }}-arm64"
     use: buildx
     goos: linux
     dockerfile: build/starboard-operator/Dockerfile
@@ -163,9 +164,26 @@ dockers:
       - "--label=org.opencontainers.image.revision={{ .FullCommit }}"
       - "--label=org.opencontainers.image.documentation=https://aquasecurity.github.io/starboard/v{{ .Version }}/"
       - "--platform=linux/arm64"
+  - image_templates:
+      - "docker.io/aquasec/starboard-scanner-aqua:{{ .Version }}-arm64"
+    use: buildx
+    goos: linux
+    dockerfile: build/scanner-aqua/Dockerfile
+    goarch: arm64
+    ids:
+      - starboard-scanner-aqua
+    build_flag_templates:
+      - "--label=org.opencontainers.image.title=starboard-scanner-aqua"
+      - "--label=org.opencontainers.image.description=Aqua scanner for Starboard"
+      - "--label=org.opencontainers.image.vendor=Aqua Security"
+      - "--label=org.opencontainers.image.version={{ .Version }}"
+      - "--label=org.opencontainers.image.created={{ .Date }}"
+      - "--label=org.opencontainers.image.source=https://github.com/aquasecurity/starboard"
+      - "--label=org.opencontainers.image.revision={{ .FullCommit }}"
+      - "--label=org.opencontainers.image.documentation=https://aquasecurity.github.io/starboard/v{{ .Version }}/"
+      - "--platform=linux/arm64"
   - image_templates:
       - "docker.io/aquasec/starboard:{{ .Version }}-s390x"
-      - "public.ecr.aws/aquasecurity/starboard:{{ .Version }}-s390x"
     use: buildx
     goos: linux
     dockerfile: build/starboard/Dockerfile
@@ -184,7 +202,6 @@ dockers:
       - "--platform=linux/s390x"
   - image_templates:
       - "docker.io/aquasec/starboard-operator:{{ .Version }}-s390x"
-      - "public.ecr.aws/aquasecurity/starboard-operator:{{ .Version }}-s390x"
     use: buildx
     goos: linux
     dockerfile: build/starboard-operator/Dockerfile
@@ -201,27 +218,37 @@ dockers:
       - "--label=org.opencontainers.image.revision={{ .FullCommit }}"
       - "--label=org.opencontainers.image.documentation=https://aquasecurity.github.io/starboard/v{{ .Version }}/"
       - "--platform=linux/s390x"
+  - image_templates:
+      - "docker.io/aquasec/starboard-scanner-aqua:{{ .Version }}-s390x"
+    use: buildx
+    goos: linux
+    dockerfile: build/scanner-aqua/Dockerfile
+    goarch: s390x
+    ids:
+      - starboard-scanner-aqua
+    build_flag_templates:
+      - "--label=org.opencontainers.image.title=starboard-scanner-aqua"
+      - "--label=org.opencontainers.image.description=Aqua scanner for Starboard"
+      - "--label=org.opencontainers.image.vendor=Aqua Security"
+      - "--label=org.opencontainers.image.version={{ .Version }}"
+      - "--label=org.opencontainers.image.created={{ .Date }}"
+      - "--label=org.opencontainers.image.source=https://github.com/aquasecurity/starboard"
+      - "--label=org.opencontainers.image.revision={{ .FullCommit }}"
+      - "--label=org.opencontainers.image.documentation=https://aquasecurity.github.io/starboard/v{{ .Version }}/"
+      - "--platform=linux/s390x"
 docker_manifests:
-  - name_template: 'aquasec/starboard:{{ .Version }}'
-    image_templates:
-      - 'aquasec/starboard:{{ .Version }}-amd64'
-      - 'aquasec/starboard:{{ .Version }}-arm64'
-      - 'aquasec/starboard:{{ .Version }}-s390x'
-  - name_template: "public.ecr.aws/aquasecurity/starboard:{{ .Version }}"
-    image_templates:
-      - "public.ecr.aws/aquasecurity/starboard:{{ .Version }}-amd64"
-      - "public.ecr.aws/aquasecurity/starboard:{{ .Version }}-arm64"
-      - "public.ecr.aws/aquasecurity/starboard:{{ .Version }}-s390x"
-  - name_template: 'aquasec/starboard-operator:{{ .Version }}'
+  - name_template: "aquasec/starboard:{{ .Version }}"
     image_templates:
-      - 'aquasec/starboard-operator:{{ .Version }}-amd64'
-      - 'aquasec/starboard-operator:{{ .Version }}-arm64'
-      - 'aquasec/starboard-operator:{{ .Version }}-s390x'
-  - name_template: "public.ecr.aws/aquasecurity/starboard-operator:{{ .Version }}"
+      - "aquasec/starboard:{{ .Version }}-amd64"
+      - "aquasec/starboard:{{ .Version }}-arm64"
+      - "aquasec/starboard:{{ .Version }}-s390x"
+  - name_template: "aquasec/starboard-operator:{{ .Version }}"
     image_templates:
-      - "public.ecr.aws/aquasecurity/starboard-operator:{{ .Version }}-amd64"
-      - "public.ecr.aws/aquasecurity/starboard-operator:{{ .Version }}-arm64"
-      - "public.ecr.aws/aquasecurity/starboard-operator:{{ .Version }}-s390x"
-  - name_template: 'aquasec/starboard-scanner-aqua:{{ .Version }}'
+      - "aquasec/starboard-operator:{{ .Version }}-amd64"
+      - "aquasec/starboard-operator:{{ .Version }}-arm64"
+      - "aquasec/starboard-operator:{{ .Version }}-s390x"
+  - name_template: "aquasec/starboard-scanner-aqua:{{ .Version }}"
     image_templates:
-      - 'aquasec/starboard-scanner-aqua:{{ .Version }}-amd64'
+      - "aquasec/starboard-scanner-aqua:{{ .Version }}-amd64"
+      - "aquasec/starboard-scanner-aqua:{{ .Version }}-arm64"
+      - "aquasec/starboard-scanner-aqua:{{ .Version }}-s390x"

deploy/crd/ciskubebenchreports.crd.yaml

@@ -5,7 +5,7 @@ metadata:
   name: ciskubebenchreports.aquasecurity.github.io
   labels:
     app.kubernetes.io/managed-by: starboard
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
 spec:
   group: aquasecurity.github.io
   versions:

deploy/crd/clustercompliancedetailreports.crd.yaml

@@ -5,7 +5,7 @@ metadata:
   name: clustercompliancedetailreports.aquasecurity.github.io
   labels:
     app.kubernetes.io/managed-by: starboard
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
 spec:
   group: aquasecurity.github.io
   versions:

deploy/crd/clustercompliancereports.crd.yaml

@@ -5,7 +5,7 @@ metadata:
   name: clustercompliancereports.aquasecurity.github.io
   labels:
     app.kubernetes.io/managed-by: starboard
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
 spec:
   group: aquasecurity.github.io
   scope: Cluster

deploy/crd/clusterconfigauditreports.crd.yaml

@@ -5,7 +5,7 @@ metadata:
   name: clusterconfigauditreports.aquasecurity.github.io
   labels:
     app.kubernetes.io/managed-by: starboard
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
 spec:
   group: aquasecurity.github.io
   versions:

deploy/crd/clustervulnerabilityreports.crd.yaml

@@ -5,7 +5,7 @@ metadata:
   name: clustervulnerabilityreports.aquasecurity.github.io
   labels:
     app.kubernetes.io/managed-by: starboard
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
 spec:
   group: aquasecurity.github.io
   versions:

deploy/crd/configauditreports.crd.yaml

@@ -5,7 +5,7 @@ metadata:
   name: configauditreports.aquasecurity.github.io
   labels:
     app.kubernetes.io/managed-by: starboard
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
 spec:
   group: aquasecurity.github.io
   versions:

deploy/crd/kubehunterreports.crd.yaml

@@ -5,7 +5,7 @@ metadata:
   name: kubehunterreports.aquasecurity.github.io
   labels:
     app.kubernetes.io/managed-by: starboard
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
 spec:
   group: aquasecurity.github.io
   versions:

deploy/crd/vulnerabilityreports.crd.yaml

@@ -5,7 +5,7 @@ metadata:
   name: vulnerabilityreports.aquasecurity.github.io
   labels:
     app.kubernetes.io/managed-by: starboard
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
 spec:
   group: aquasecurity.github.io
   versions:

deploy/helm/Chart.yaml

@@ -11,7 +11,7 @@ version: 0.10.0
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
-appVersion: 0.15.0-rc5
+appVersion: 0.15.0-rc6
 
 # kubeVersion: A SemVer range of compatible Kubernetes versions (optional)
 

deploy/specs/nsa-1.0.yaml

@@ -6,7 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl
 spec:
   name: nsa

deploy/static/01-starboard-operator.ns.yaml

@@ -6,5 +6,5 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl

deploy/static/02-starboard-operator.rbac.yaml

@@ -7,7 +7,7 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -17,7 +17,7 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl
 rules:
   - apiGroups:
@@ -166,7 +166,7 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl
 roleRef:
   apiGroup: rbac.authorization.k8s.io

deploy/static/03-starboard-operator.config.yaml

@@ -7,7 +7,7 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl
 ---
 apiVersion: v1
@@ -18,7 +18,7 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl
 ---
 apiVersion: v1
@@ -29,7 +29,7 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl
 data:
   vulnerabilityReports.scanner: "Trivy"
@@ -44,7 +44,7 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl
 data:
   trivy.imageRef: "docker.io/aquasec/trivy:0.24.2"
@@ -64,7 +64,7 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl
 data:
   polaris.imageRef: "quay.io/fairwinds/polaris:4.2"

deploy/static/04-starboard-operator.policies.yaml

@@ -7,7 +7,7 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl
 data:
   library.kubernetes.rego: "package lib.kubernetes\n\ndefault is_gatekeeper = false\n\nis_gatekeeper

deploy/static/05-starboard-operator.deployment.yaml

@@ -7,7 +7,7 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl
   annotations:
     prometheus.io/path: /metrics
@@ -30,7 +30,7 @@ metadata:
   labels:
     app.kubernetes.io/name: starboard-operator
     app.kubernetes.io/instance: starboard-operator
-    app.kubernetes.io/version: "0.15.0-rc5"
+    app.kubernetes.io/version: "0.15.0-rc6"
     app.kubernetes.io/managed-by: kubectl
 spec:
   replicas: 1
@@ -50,7 +50,7 @@ spec:
       automountServiceAccountToken: true
       containers:
         - name: "starboard-operator"
-          image: "docker.io/aquasec/starboard-operator:0.15.0-rc5"
+          image: "docker.io/aquasec/starboard-operator:0.15.0-rc6"
           imagePullPolicy: IfNotPresent
           env:
             - name: OPERATOR_NAMESPACE