Skip to content

Commit

Permalink
Release version 0.0.5 (#70)
Browse files Browse the repository at this point in the history 
* build(deps): bump flyway from 10.11.1 to 10.12.0

Bumps `flyway` from 10.11.1 to 10.12.0.

Updates `org.flywaydb:flyway-core` from 10.11.1 to 10.12.0
- [Release notes](https://github.com/flyway/flyway/releases)
- [Commits](flyway/flyway@flyway-10.11.1...flyway-10.12.0)

Updates `org.flywaydb:flyway-database-postgresql` from 10.11.1 to 10.12.0

---
updated-dependencies:
- dependency-name: org.flywaydb:flyway-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.flywaydb:flyway-database-postgresql
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* trg 1: documentation

* TRG 5+6: helm, upgradeability

* fix upgradeability test

* install vault

* build(deps): bump helm/kind-action from 1.9.0 to 1.10.0 (#43)

Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](helm/kind-action@v1.9.0...v1.10.0)

---
updated-dependencies:
- dependency-name: helm/kind-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps): bump thomaseizinger/create-pull-request from 1.3.1 to 1.4.0 (#45)

Bumps [thomaseizinger/create-pull-request](https://github.com/thomaseizinger/create-pull-request) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/thomaseizinger/create-pull-request/releases)
- [Changelog](https://github.com/thomaseizinger/create-pull-request/blob/master/CHANGELOG.md)
- [Commits](thomaseizinger/create-pull-request@1.3.1...1.4.0)

---
updated-dependencies:
- dependency-name: thomaseizinger/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps): bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 (#47)

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.19.0 to 0.20.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@0.19.0...0.20.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps): bump mikefarah/yq from 4.43.1 to 4.44.1 (#48)

Bumps [mikefarah/yq](https://github.com/mikefarah/yq) from 4.43.1 to 4.44.1.
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@v4.43.1...v4.44.1)

---
updated-dependencies:
- dependency-name: mikefarah/yq
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps): bump edc from 0.6.2 to 0.6.4 (#49)

Bumps `edc` from 0.6.2 to 0.6.4.

Updates `org.eclipse.edc:jetty-core` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:jersey-core` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:identity-did-core` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:boot` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:jwt-verifiable-credentials` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:verifiable-credentials` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:identity-trust-service` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:identity-trust-issuers-configuration` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:identity-trust-transform` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:identity-did-web` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:core-spi` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:identity-did-spi` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:web-spi` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:transaction-spi` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:transaction-datasource-spi` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:connector-core` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:jwt-spi` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:token-spi` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:identity-trust-spi` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:verifiable-credentials-spi` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:auth-spi` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:auth-tokenbased` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:vault-filesystem` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:vault-hashicorp` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:junit` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:api-observability` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:sql-core` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:transaction-local` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:sql-pool-apache-commons` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:keys-lib` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:transform-lib` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:json-ld-lib` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:json-lib` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

Updates `org.eclipse.edc:http-lib` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/eclipse-edc/Connector/releases)
- [Commits](eclipse-edc/Connector@v0.6.2...v0.6.4)

---
updated-dependencies:
- dependency-name: org.eclipse.edc:jetty-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:jersey-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:identity-did-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:boot
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:jwt-verifiable-credentials
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:verifiable-credentials
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:identity-trust-service
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:identity-trust-issuers-configuration
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:identity-trust-transform
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:identity-did-web
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:core-spi
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:identity-did-spi
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:web-spi
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:transaction-spi
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:transaction-datasource-spi
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:connector-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:jwt-spi
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:token-spi
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:identity-trust-spi
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:verifiable-credentials-spi
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:auth-spi
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:auth-tokenbased
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:vault-filesystem
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:vault-hashicorp
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:junit
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:api-observability
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:sql-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:transaction-local
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:sql-pool-apache-commons
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:keys-lib
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:transform-lib
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:json-ld-lib
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:json-lib
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.edc:http-lib
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps): bump com.nimbusds:nimbus-jose-jwt from 9.37.3 to 9.39 (#50)

* build(deps): bump com.nimbusds:nimbus-jose-jwt from 9.37.3 to 9.39

Bumps [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) from 9.37.3 to 9.39.
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/9.39..9.37.3)

---
updated-dependencies:
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* DEPENDENCIES

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Paul Latzelsperger <[email protected]>

* doc: add arc42 documentation  (#51)

* add docu

* added runtime

* updated README

* chore: add EndToEndTests to GitHub CI

* feat(ci): add Kubernetes compatibility test (#52)

* chore(legal): Update legal documents according to TRG7 (#62)

* chore(legal): Update legal documents according to TRG7

Signed-off-by: Lars Geyer-Blaumeiser <[email protected]>

* chore(dep): Update dependencies file

Signed-off-by: Lars Geyer-Blaumeiser <[email protected]>

* chore: Improve formatting of links in contributing.md

Signed-off-by: Lars Geyer-Blaumeiser <[email protected]>

---------

Signed-off-by: Lars Geyer-Blaumeiser <[email protected]>

* build(deps): bump mikefarah/yq from 4.44.1 to 4.44.2

Bumps [mikefarah/yq](https://github.com/mikefarah/yq) from 4.44.1 to 4.44.2.
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@v4.44.1...v4.44.2)

---
updated-dependencies:
- dependency-name: mikefarah/yq
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore: deps file

* build(deps): bump flyway from 10.12.0 to 10.15.0

Bumps `flyway` from 10.12.0 to 10.15.0.

Updates `org.flywaydb:flyway-core` from 10.12.0 to 10.15.0
- [Release notes](https://github.com/flyway/flyway/releases)
- [Commits](flyway/flyway@flyway-10.12.0...flyway-10.15.0)

Updates `org.flywaydb:flyway-database-postgresql` from 10.12.0 to 10.15.0

---
updated-dependencies:
- dependency-name: org.flywaydb:flyway-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.flywaydb:flyway-database-postgresql
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore: deps file

* build(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.22.0

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.20.0 to 0.22.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@0.20.0...0.22.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* build(deps): bump com.nimbusds:nimbus-jose-jwt from 9.39 to 9.40

Bumps [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) from 9.39 to 9.40.
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/9.40..9.39)

---
updated-dependencies:
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore: deps file

* build(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.22.0 to 0.23.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@0.22.0...0.23.0)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore: deps file

* build(deps): bump jupiter from 5.10.2 to 5.10.3 (#66)

Bumps `jupiter` from 5.10.2 to 5.10.3.

Updates `org.junit.jupiter:junit-jupiter-api` from 5.10.2 to 5.10.3
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit5@r5.10.2...r5.10.3)

Updates `org.junit.jupiter:junit-jupiter-params` from 5.10.2 to 5.10.3
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit5@r5.10.2...r5.10.3)

---
updated-dependencies:
- dependency-name: org.junit.jupiter:junit-jupiter-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.junit.jupiter:junit-jupiter-params
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: update license headers (#67)

* chore: update license headers

* DEPENDENCIES

* chore(deps): bump EDC to 0.7.1 (#68)

* chore(deps): bump EDC to 0.7.1

* DEPENDENCIES

* Prepare release 0.0.5

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Lars Geyer-Blaumeiser <[email protected]>
Co-authored-by: eclipse-tractusx-bot <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Paul Latzelsperger <[email protected]>
Co-authored-by: Paul Latzelsperger <[email protected]>
Co-authored-by: Lars Geyer-Blaumeiser <[email protected]>
Co-authored-by: Enrico Risa <[email protected]>
  • Loading branch information
@github-actions @eclipse-tractusx-bot
@dependabot @paullatzelsperger @lgblaumeiser @wolf4ood
7 people authored Jul 5, 2024
1 parent ead0d7f commit 4c7efe9
Show file tree
Hide file tree
Showing 87 changed files with 1,921 additions and 725 deletions.
7 changes: 7 additions & 0 deletions .github/actions/run-deployment-test/action.yml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,11 @@ inputs:
description: "YAML file to contain KinD cluster configuration"
default: system-tests/helm/kind.config.yaml

k8sversion:
required: false
description: "Version of Kubernetes to use"
default: "v1.30.0"

runs:
using: "composite"
steps:
Expand All @@ -70,6 +75,8 @@ runs:
uses: helm/[email protected]
with:
config: ${{ inputs.cluster-config }}
node_image: kindest/node:${{ inputs.k8sversion }}


- name: Load images into KinD
shell: bash
Expand Down
19 changes: 18 additions & 1 deletion .github/dependabot.yml
View file
Original file line number Diff line number Diff line change
@@ -1,4 +1,21 @@

#################################################################################
# Copyright (c) 2024 Bayerische Motoren Werke Aktiengesellschaft (BMW AG)
#
# See the NOTICE file(s) distributed with this work for additional
# information regarding copyright ownership.
#
# This program and the accompanying materials are made available under the
# terms of the Apache License, Version 2.0 which is available at
# https://www.apache.org/licenses/LICENSE-2.0.
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# SPDX-License-Identifier: Apache-2.0
#################################################################################

---
version: 2
Expand Down
6 changes: 5 additions & 1 deletion .github/workflows/deployment-test.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ jobs:
key: ${{ runner.os }}-io.containerd.snapshotter.v1.overlayfs

test-bdrs-server:
name: "Run deployment tests for all charts"
name: "Deployment test"
runs-on: ubuntu-latest
strategy:
fail-fast: false
Expand All @@ -59,6 +59,9 @@ jobs:
{ chart: charts/bdrs-server-memory, name: bdrs-server-memory },
{ chart: charts/bdrs-server, name: bdrs-server }
]
k8s-version: [ "v1.30.0",
"v1.29.4",
"v1.28.9" ]
needs: test-prepare
steps:
- uses: actions/checkout@v4
Expand All @@ -68,6 +71,7 @@ jobs:
imagename: ${{ matrix.variant.name }}
rootDir: runtimes/${{ matrix.variant.name }}
cluster-config: "system-tests/helm/kind.config.yaml"
k8sversion: ${{ matrix.k8s-version }}
helm_command: |-
helm install ${{ matrix.variant.name }} ${{ matrix.variant.chart }} \
--set server.image.pullPolicy="Never" \
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/draft-new-release.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ jobs:
GITHUB_PACKAGE_USERNAME: ${{ github.actor }}
GITHUB_PACKAGE_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
- name: Bump version in /charts
uses: mikefarah/yq@v4.43.1
uses: mikefarah/yq@v4.44.2
with:
cmd: |-
find charts -name Chart.yaml -maxdepth 3 | xargs -n1 yq -i '.appVersion = "${{ github.event.inputs.version }}" | .version = "${{ github.event.inputs.version }}"'
Expand All @@ -75,7 +75,7 @@ jobs:
- name: Push new branch
run: git push origin release/${{ github.event.inputs.version }}
- name: Create pull request
uses: thomaseizinger/create-pull-request@1.3.1
uses: thomaseizinger/create-pull-request@1.4.0

Check warning on line 78 in .github/workflows/draft-new-release.yaml

View workflow job for this annotation

GitHub Actions / Analyze

[LOW] Unpinned Actions Full Length Commit SHA 

Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload. When selecting a SHA, you should verify it is from the action's repository and not a repository fork.
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
Expand Down
19 changes: 19 additions & 0 deletions .github/workflows/publish-openapi.yaml
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1,22 @@
#################################################################################
# Copyright (c) 2024 Bayerische Motoren Werke Aktiengesellschaft (BMW AG)
#
# See the NOTICE file(s) distributed with this work for additional
# information regarding copyright ownership.
#
# This program and the accompanying materials are made available under the
# terms of the Apache License, Version 2.0 which is available at
# https://www.apache.org/licenses/LICENSE-2.0.
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# SPDX-License-Identifier: Apache-2.0
#################################################################################

name: publish openapi ui

on:
Expand Down
7 changes: 3 additions & 4 deletions .github/workflows/run-all-tests.yml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -52,10 +52,9 @@ jobs:
uses: ./.github/workflows/deployment-test.yaml
secrets: inherit

# deactivated until we have helm charts
# upgradeability-test:
# uses: ./.github/workflows/upgradeability-test.yaml
# secrets: inherit
upgradeability-test:
uses: ./.github/workflows/upgradeability-test.yaml
secrets: inherit

# this job really serves no other purpose than waiting for the other two test workflows
# in future iterations, this could be used as a choke point to collect test data, etc.
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/trivy.yml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,7 @@ jobs:
steps:
- uses: actions/checkout@v4
- name: Run Trivy vulnerability scanner in repo mode
uses: aquasecurity/trivy-action@0.19.0
uses: aquasecurity/trivy-action@0.23.0

Check warning on line 61 in .github/workflows/trivy.yml

View workflow job for this annotation

GitHub Actions / Analyze

[LOW] Unpinned Actions Full Length Commit SHA 

Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload. When selecting a SHA, you should verify it is from the action's repository and not a repository fork.
with:
scan-type: "config"
# ignore-unfixed: true
Expand Down Expand Up @@ -98,7 +98,7 @@ jobs:
## the next two steps will only execute if the image exists check was successful
- name: Run Trivy vulnerability scanner
if: success() && steps.imageCheck.outcome != 'failure'
uses: aquasecurity/trivy-action@0.19.0
uses: aquasecurity/trivy-action@0.23.0
with:
image-ref: "tractusx/${{ matrix.image }}:sha-${{ needs.git-sha7.outputs.value }}"
format: "sarif"
Expand Down
61 changes: 33 additions & 28 deletions .github/workflows/upgradeability-test.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -56,69 +56,74 @@ jobs:
version: 'v1.28.2'

- name: Create k8s Kind Cluster
uses: helm/kind-action@v1.9.0
uses: helm/kind-action@v1.10.0

Check warning on line 59 in .github/workflows/upgradeability-test.yaml

View workflow job for this annotation

GitHub Actions / Analyze

[LOW] Unpinned Actions Full Length Commit SHA 

Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload. When selecting a SHA, you should verify it is from the action's repository and not a repository fork.

- name: "Update helm repo"
run: |
helm repo add tractusx https://eclipse-tractusx.github.io/charts/dev
helm repo update tractusx
## Skip 0.6.0 when doing the compatibility check ref https://github.com/eclipse-tractusx/tractusx-edc/issues/1082
- name: "Get latest released version"
id: get-version
run: |
RELEASED_VERSION=$(helm search repo tractusx/tractusx-connector -l -o json | jq -r 'map(select(.version !="0.6.0")) | first | .version')
RELEASED_VERSION=$(helm search repo tractusx/bdrs-server -l -o json | jq -r 'first | .version')
echo "Last official release is $RELEASED_VERSION"
echo "RELEASE=$RELEASED_VERSION" >> $GITHUB_ENV
exit 0
- name: "Install latest release"
- name: "Install Vault chart"
shell: bash
run: |
sh -c "edc-tests/deployment/src/main/resources/prepare-test.sh \
edc-tests/deployment/src/main/resources/helm/tractusx-connector-test.yaml"
helm repo add hashicorp https://helm.releases.hashicorp.com
helm install vault hashicorp/vault \
-f system-tests/helm/values-vault-test.yaml \
--wait-for-jobs --timeout=120s --dependency-update
helm upgrade --install tx-prod tractusx/tractusx-connector \
-f edc-tests/deployment/src/main/resources/helm/tractusx-connector-test.yaml \
--set "controlplane.image.tag=$RELEASE" \
--set "controlplane.image.pullPolicy=Always" \
--set "controlplane.image.repository=tractusx/edc-controlplane-postgresql-hashicorp-vault" \
--set "dataplane.image.tag=$RELEASE" \
--set "dataplane.image.pullPolicy=Always" \
--set "dataplane.image.repository=tractusx/edc-dataplane-hashicorp-vault" \
--dependency-update \
--wait-for-jobs --timeout=120s \
# wait for Vault pod to become ready
kubectl wait --for=condition=ready pod \
--selector=app.kubernetes.io/name=vault \
--timeout=90s
- name: "Install latest release"
run: |
helm install bdrs-server tractusx/bdrs-server \
--set server.image.pullPolicy="Always" \
--set server.image.tag="$RELEASE" \
--set server.image.repository="tractusx/bdrs-server" \
-f system-tests/helm/values-test.yaml \
--wait-for-jobs --timeout=120s --dependency-update \
--version $RELEASE
# wait for the pod to become ready
kubectl rollout status deployment tx-prod-controlplane
kubectl rollout status deployment tx-prod-dataplane
kubectl rollout status deployment bdrs-server
- uses: ./.github/actions/setup-java

- name: "Build docker images"
shell: bash
run: |-
./gradlew :edc-controlplane:edc-controlplane-postgresql-hashicorp-vault:dockerize
./gradlew :edc-dataplane:edc-dataplane-hashicorp-vault:dockerize
./gradlew :runtimes:bdrs-server:dockerize
- name: "Load images into KinD"
shell: bash
run: |
kind get clusters | xargs -n1 kind load docker-image edc-controlplane-postgresql-hashicorp-vault edc-dataplane-hashicorp-vault --name
kind get clusters | xargs -n1 kind load docker-image bdrs-server:latest --name
- name: "Install new chart"
run: |
helm upgrade --install tx-prod charts/tractusx-connector \
-f edc-tests/deployment/src/main/resources/helm/tractusx-connector-test.yaml \
--dependency-update \
--wait-for-jobs --timeout=120s
helm upgrade --install bdrs-server charts/bdrs-server \
--set server.image.pullPolicy="Never" \
--set server.image.tag="latest" \
--set server.image.repository="bdrs-server" \
-f system-tests/helm/values-test.yaml \
--wait-for-jobs --timeout=120s --dependency-update
# wait for the pod to become ready
kubectl rollout status deployment tx-prod-controlplane
kubectl rollout status deployment tx-prod-dataplane
kubectl rollout status deployment bdrs-server
# execute the helm test
helm test tx-prod
helm test bdrs-server
- name: Destroy the kind cluster
if: always()
Expand Down
17 changes: 16 additions & 1 deletion .github/workflows/verify.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -48,6 +48,21 @@ jobs:
git diff
exit 1
fi
verify-license-headers:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: "Check for files without a license header"
run: |-
# checks all java, yaml, kts and sql files for an Apache 2.0 license header
cmd="grep -riL \"SPDX-License-Identifier: Apache-2.0\" --include=\*.{java,ts,html,css,yaml,yml,kts,sql,tf} --exclude-dir={.gradle,\*\openapi} ."
violations=$(eval $cmd | wc -l)
if [[ $violations -ne 0 ]] ; then
echo "$violations files without license headers were found:";
eval $cmd;
exit 1;
fi
verify-dependencies:
uses: eclipse-edc/.github/.github/workflows/dependency-check.yml@main
Expand Down Expand Up @@ -82,7 +97,7 @@ jobs:
- uses: ./.github/actions/setup-java

- name: Run Integration tests
run: ./gradlew test -DincludeTags="ComponentTest"
run: ./gradlew test -DincludeTags="ComponentTest,EndToEndTest"

postgres-tests:
runs-on: ubuntu-latest
Expand Down
3 changes: 3 additions & 0 deletions .tractusx
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
product: "Tractus-X BPN DID Resolution Service"
leadingRepository: "https://github.com/eclipse-tractusx/bpn-did-resolution-service"
repositories: []
31 changes: 31 additions & 0 deletions CHANGELOG.md
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
All notable changes to this project will be documented in this file see also the
overarching [`CHANGELOG.md`](https://eclipse-tractusx.github.io/changelog) for Tractus-X releases.

## [0.0.4] - 2024-04-26

What's Changed

- fix: add Trusted Issuers to helm template by @paullatzelsperger
in [#40](https://github.com/eclipse-tractusx/bpn-did-resolution-service/pull/40)
- feat: add ingress example and tests by @paullatzelsperger
in [#28](https://github.com/eclipse-tractusx/bpn-did-resolution-service/pull/28)
- feat: add Authorization header validation by @paullatzelsperger
in [#29](https://github.com/eclipse-tractusx/bpn-did-resolution-service/pull/29)
- feat: add K8s ingress for Mgmt API by @paullatzelsperger
in [#33](https://github.com/eclipse-tractusx/bpn-did-resolution-service/pull/33)
- feat: read DB secrets and API key from vault by @paullatzelsperger
in [#35](https://github.com/eclipse-tractusx/bpn-did-resolution-service/pull/35)
- fix(bdrs-server): use correct image in chart by @evegufy
in [#39](https://github.com/eclipse-tractusx/bpn-did-resolution-service/pull/39)

## [0.0.3] - 2024-03-26

- version bump

## [0.0.2] - 2024-03-28

- Updated to EDC 0.6.0

## [0.0.1] - 2024-03-26

Initial release
75 changes: 75 additions & 0 deletions CONTRIBUTING.md
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,75 @@
# Contributing to Eclipse Tractus-X

Thanks for your interest in this project.

## Project description

The companies involved want to increase the automotive industry's
competitiveness, improve efficiency through industry-specific cooperation and
accelerate company processes through standardization and access to information
and data. A special focus is also on SMEs, whose active participation is of
central importance for the network's success. That is why Catena-X has been
conceived from the outset as an open network with solutions ready for SMEs,
where these companies will be able to participate quickly and with little IT
infrastructure investment. Tractus-X is meant to be the PoC project of the
Catena-X alliance focusing on parts traceability.

* <https://projects.eclipse.org/projects/automotive.tractusx>

## Project licenses

The Tractus-X project uses the following licenses:

* Apache-2.0 for code
* CC-BY-4.0 for non-code

## Terms of Use

This repository is subject to the Terms of Use of the Eclipse Foundation

* https://www.eclipse.org/legal/termsofuse.php

## Developer resources

Information regarding source code management, builds, coding standards, and
more.

* https://projects.eclipse.org/projects/automotive.tractusx/developer

Getting started:

* https://eclipse-tractusx.github.io/docs/developer

The project maintains the source code repositories in the following GitHub organization:

* https://github.com/eclipse-tractusx/

## Eclipse Development Process

This Eclipse Foundation open project is governed by the Eclipse Foundation
Development Process and operates under the terms of the Eclipse IP Policy.

* https://eclipse.org/projects/dev_process
* https://www.eclipse.org/org/documents/Eclipse_IP_Policy.pdf

## Eclipse Contributor Agreement

In order to be able to contribute to Eclipse Foundation projects you must
electronically sign the Eclipse Contributor Agreement (ECA).

* http://www.eclipse.org/legal/ECA.php

The ECA provides the Eclipse Foundation with a permanent record that you agree
that each of your contributions will comply with the commitments documented in
the Developer Certificate of Origin (DCO). Having an ECA on file associated with
the email address matching the "Author" field of your contribution's Git commits
fulfills the DCO's requirement that you sign-off on your contributions.

For more information, please see the Eclipse Committer Handbook:
https://www.eclipse.org/projects/handbook/#resources-commit

## Contact

Contact the project developers via the project's "dev" list.

* https://accounts.eclipse.org/mailing-list/tractusx-dev
Loading

0 comments on commit 4c7efe9

Please sign in to comment.