mirror of
https://github.com/ceph/ceph-csi.git
synced 2024-11-18 20:30:23 +00:00
4f0bb2315b
With Amazon STS and kubernetes cluster is configured with OIDC identity provider, credentials to access Amazon KMS can be fetched using oidc-token(serviceaccount token). Each tenant/namespace needs to create a secret with aws region, role and CMK ARN. Ceph-CSI will assume the given role with oidc token and access aws KMS, with given CMK to encrypt/decrypt DEK which will stored in the image metdata. Refer: https://docs.aws.amazon.com/STS/latest/APIReference/welcome.html Resolves: #2879 Signed-off-by: Rakshith R <rar@redhat.com>
64 lines
2.4 KiB
Makefile
64 lines
2.4 KiB
Makefile
PRE_RELEASE_VERSION ?=
|
|
|
|
RELEASE_MANIFEST_FILE ?=
|
|
RELEASE_CHGLOG_DESC_FILE ?=
|
|
|
|
REPOTOOLS_VERSION ?= latest
|
|
REPOTOOLS_MODULE = github.com/awslabs/aws-go-multi-module-repository-tools
|
|
REPOTOOLS_CMD_CALCULATE_RELEASE = ${REPOTOOLS_MODULE}/cmd/calculaterelease@${REPOTOOLS_VERSION}
|
|
REPOTOOLS_CMD_CALCULATE_RELEASE_ADDITIONAL_ARGS ?=
|
|
REPOTOOLS_CMD_UPDATE_REQUIRES = ${REPOTOOLS_MODULE}/cmd/updaterequires@${REPOTOOLS_VERSION}
|
|
REPOTOOLS_CMD_UPDATE_MODULE_METADATA = ${REPOTOOLS_MODULE}/cmd/updatemodulemeta@${REPOTOOLS_VERSION}
|
|
REPOTOOLS_CMD_GENERATE_CHANGELOG = ${REPOTOOLS_MODULE}/cmd/generatechangelog@${REPOTOOLS_VERSION}
|
|
REPOTOOLS_CMD_CHANGELOG = ${REPOTOOLS_MODULE}/cmd/changelog@${REPOTOOLS_VERSION}
|
|
REPOTOOLS_CMD_TAG_RELEASE = ${REPOTOOLS_MODULE}/cmd/tagrelease@${REPOTOOLS_VERSION}
|
|
REPOTOOLS_CMD_MODULE_VERSION = ${REPOTOOLS_MODULE}/cmd/moduleversion@${REPOTOOLS_VERSION}
|
|
|
|
ifneq ($(PRE_RELEASE_VERSION),)
|
|
REPOTOOLS_CMD_CALCULATE_RELEASE_ADDITIONAL_ARGS += -preview=${PRE_RELEASE_VERSION}
|
|
endif
|
|
|
|
smithy-publish-local:
|
|
cd codegen && ./gradlew publishToMavenLocal
|
|
|
|
smithy-build:
|
|
cd codegen && ./gradlew build
|
|
|
|
smithy-clean:
|
|
cd codegen && ./gradlew clean
|
|
|
|
#####################
|
|
# Release Process #
|
|
#####################
|
|
.PHONY: preview-release pre-release-validation release
|
|
|
|
preview-release:
|
|
go run ${REPOTOOLS_CMD_CALCULATE_RELEASE} ${REPOTOOLS_CMD_CALCULATE_RELEASE_ADDITIONAL_ARGS}
|
|
|
|
pre-release-validation:
|
|
@if [[ -z "${RELEASE_MANIFEST_FILE}" ]]; then \
|
|
echo "RELEASE_MANIFEST_FILE is required to specify the file to write the release manifest" && false; \
|
|
fi
|
|
@if [[ -z "${RELEASE_CHGLOG_DESC_FILE}" ]]; then \
|
|
echo "RELEASE_CHGLOG_DESC_FILE is required to specify the file to write the release notes" && false; \
|
|
fi
|
|
|
|
release: pre-release-validation
|
|
go run ${REPOTOOLS_CMD_CALCULATE_RELEASE} -o ${RELEASE_MANIFEST_FILE} ${REPOTOOLS_CMD_CALCULATE_RELEASE_ADDITIONAL_ARGS}
|
|
go run ${REPOTOOLS_CMD_UPDATE_REQUIRES} -release ${RELEASE_MANIFEST_FILE}
|
|
go run ${REPOTOOLS_CMD_UPDATE_MODULE_METADATA} -release ${RELEASE_MANIFEST_FILE}
|
|
go run ${REPOTOOLS_CMD_GENERATE_CHANGELOG} -release ${RELEASE_MANIFEST_FILE} -o ${RELEASE_CHGLOG_DESC_FILE}
|
|
go run ${REPOTOOLS_CMD_CHANGELOG} rm -all
|
|
go run ${REPOTOOLS_CMD_TAG_RELEASE} -release ${RELEASE_MANIFEST_FILE}
|
|
|
|
module-version:
|
|
@go run ${REPOTOOLS_CMD_MODULE_VERSION} .
|
|
|
|
##############
|
|
# Repo Tools #
|
|
##############
|
|
.PHONY: install-changelog
|
|
|
|
install-changelog:
|
|
go install ${REPOTOOLS_MODULE}/cmd/changelog@${REPOTOOLS_VERSION}
|