nova/.goreleaser.yml at master · FairwindsOps/nova · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
## DO NOT EDIT - Managed by Terraform
# yaml-language-server: $$schema=https://goreleaser.com/static/schema.json

version: 2
project_name: nova
builds:
  - id: nova
    binary: nova
    env:
      - CGO_ENABLED=0
      - GO111MODULE=on
    goarch:
      - amd64
      - arm
      - arm64
    goarm:
      - 6
      - 7
    goos:
      - linux
      - darwin
      - windows
    ignore:
      - goos: windows
        goarch: arm64
      - goos: windows
        goarch: arm
brews:
  - name: nova
    repository:
      owner: FairwindsOps
      name: homebrew-tap
    directory: Formula
    description: Check installed Helm charts for updates
    test: |
      system "#{bin}/nova version"
release:
  disable: '{{ eq (envOrDefault "GORELEASER_SKIP_RELEASE" "false") "true" }}'
  prerelease: auto
  github:
    owner: FairwindsOps
    name: nova
  footer: |
    You can verify the signatures of both the checksums.txt file and the published docker images using [cosign](https://github.com/sigstore/cosign).

    ```bash
    cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign-p256.pub
    ```

    ```bash
    cosign verify us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }} --key https://artifacts.fairwinds.com/cosign-p256.pub
    ```
checksum:
  name_template: "checksums.txt"
signs:
  - cmd: cosign
    args:
      - "sign-blob"
      - "--key=hashivault://cosign-p256"
      - "--output-signature=${signature}"
      - "${artifact}"
      - "--yes"
    artifacts: all
docker_signs:
  - artifacts: all
    args: ["sign", "--key=hashivault://cosign-p256", "us-docker.pkg.dev/fairwinds-ops/oss/nova@${digest}", "-r", "--yes"]
changelog:
  sort: asc
  filters:
    exclude:
      - '^docs:'
      - '^test:'
dockers:
   - image_templates:
        - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}-amd64"
        - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}-amd64"
     use: buildx
     dockerfile: Dockerfile
     build_flag_templates:
        - "--platform=linux/amd64"
   - image_templates:
        - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}-arm64v8"
        - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}-arm64v8"
     use: buildx
     goarch: arm64
     goos: linux
     dockerfile: Dockerfile
     build_flag_templates:
        - "--platform=linux/arm64/v8"
   - image_templates:
        - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}-armv7"
        - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}-armv7"
     use: buildx
     goarch: arm
     goarm: 7
     goos: linux
     dockerfile: Dockerfile
     build_flag_templates:
        - "--platform=linux/arm/v7"
docker_manifests:
  - name_template: us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}
    image_templates:
      - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}-amd64"
      - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}-arm64v8"
      - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .Tag }}-armv7"
  - name_template: us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}
    image_templates:
      - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}-amd64"
      - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}-arm64v8"
      - "us-docker.pkg.dev/fairwinds-ops/oss/nova:{{ .FullCommit }}-armv7"