Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
67 commits
Select commit Hold shift + click to select a range
2ff0a8d
testing if nodeagent ci runs against fork
entlein Jan 30, 2026
52af940
where is that unit test trigger
entlein Feb 1, 2026
306782e
debug test workflow on fork
entlein Feb 1, 2026
4e08946
debug test workflow on fork
entlein Feb 1, 2026
4639e09
debug test workflow on fork
entlein Feb 1, 2026
cd2ef91
debug test workflow on fork
entlein Feb 1, 2026
9316ab6
apparently we need to rebuild the storage go module into node-agent
entlein Feb 12, 2026
8e6a60c
Uncomment component tests in workflow configuration
entlein Feb 12, 2026
8a33ce1
apparently we need to rebuild the storage go module into node-agent
entlein Feb 12, 2026
ac13916
apparently we need to rebuild the storage go module into node-agent
entlein Feb 12, 2026
b25dea4
Merge pull request #1 from k8sstormcenter/test/localtestbuild
entlein Feb 12, 2026
9a82d0e
Merge branch 'kubescape:main' into main
entlein Feb 12, 2026
a072639
Merge upstream main (#9)
entlein Mar 6, 2026
68c59de
first step towards constanze working to understanding all the compone…
entlein Mar 10, 2026
3094368
fix malicious app test by local dns resolution
entlein Mar 11, 2026
cbcf5bd
revert tests
entlein Mar 11, 2026
eca7bd6
testing user defined profile
entlein Mar 11, 2026
89db204
adding a latest tag to the build image workflow
entlein Mar 11, 2026
272231d
quick turnaround: run componenttest on latest
entlein Mar 11, 2026
ec9ff9d
adding absolute path tests to test 27
entlein Mar 11, 2026
8ad376a
feat: add signature verification for Kubernetes profiles
matthyx Mar 3, 2026
0de39d2
addressing comments
matthyx Mar 3, 2026
85fa7e1
review comments
matthyx Mar 3, 2026
fb604bd
review comments
matthyx Mar 3, 2026
93a27a0
use cosign instead
matthyx Mar 4, 2026
63c7049
final touches
matthyx Mar 4, 2026
1f752bd
fix signature and verification to use canonical hash
matthyx Mar 9, 2026
c9e0936
update docs
matthyx Mar 9, 2026
966cc3a
fix signing with keys
matthyx Mar 9, 2026
f70da28
fix hash calculation from cluster
matthyx Mar 9, 2026
ca54f19
don't warn if profile isn't signed, only if signature doesn't match
matthyx Mar 9, 2026
e0db64e
add signature verification for rules CRD
matthyx Mar 9, 2026
df992e2
rename feature, also verify rule signatures
matthyx Mar 9, 2026
7ff8d0f
update docs
matthyx Mar 10, 2026
9a8fba7
also sign and verify networkneighborhoods
matthyx Mar 11, 2026
8560486
review comments
matthyx Mar 11, 2026
a9ec616
update to cosign v3
matthyx Mar 11, 2026
9887527
use proper fulcio integration
matthyx Mar 11, 2026
c736f4f
tests with correct storage tg
entlein Mar 11, 2026
ead1955
adding absolute path tests to test 27
entlein Mar 11, 2026
84e3c34
adding test failure summary
entlein Mar 11, 2026
da77a3b
nginx test
entlein Mar 11, 2026
6840a95
Test/improvecomponenttest (#12)
entlein Mar 11, 2026
73f14bb
user-defined-network test 1
entlein Mar 11, 2026
5ff4fdb
forgot to switch the new test on
entlein Mar 11, 2026
846f8ef
review comments
matthyx Mar 11, 2026
46336f4
Regression : merge upstream main but use the new tests (#14)
entlein Mar 11, 2026
66fcf90
adding the user-provided-network
entlein Mar 11, 2026
04fb5cf
testing the user-defined-network
entlein Mar 11, 2026
011e175
use keys for signature tests, option for keyless
matthyx Mar 11, 2026
41380d9
merge main
entlein Mar 11, 2026
60321f8
more logging for new test
entlein Mar 12, 2026
26bd96b
curl instead of wget, as wget is not in the nginx image
entlein Mar 12, 2026
064375b
and now we use the curl image, so that we have curl
entlein Mar 12, 2026
cd1320e
restoringt test 27, independently learning dns for test 28
entlein Mar 12, 2026
d495dc5
using profiles learnt from IRL
entlein Mar 12, 2026
9d36f7f
Test 27 : adding a more elaborate profile for wildcard opens
entlein Mar 12, 2026
00d27c3
Test 28: add nslookup to test, still not clear why we dont see DNS an…
entlein Mar 12, 2026
02a2305
Test 28: labels and annotations
entlein Mar 12, 2026
40c9d6b
Test 28: annotations back
entlein Mar 12, 2026
6ac9b76
Test 28: simplification
entlein Mar 12, 2026
55ca148
need to switch ON the networkrules, they were off
entlein Mar 12, 2026
a493ba8
TEST 28 now adding DNS ,also switching on the rules helps trememdosly
entlein Mar 12, 2026
07b185d
need to wait until profile ready
entlein Mar 12, 2026
3449829
switching again to the curl image
entlein Mar 12, 2026
7d513d8
waiting longer for alerts
entlein Mar 12, 2026
da4184b
Merge Sign PR from Matthias
entlein Mar 12, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .gitattributes
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
.github/** merge=ours
104 changes: 104 additions & 0 deletions .github/workflows/build.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,104 @@
name: build-image

on:
workflow_dispatch:
inputs:
IMAGE_TAG:
required: true
type: string
description: "Image tag for the node-agent image"
STORAGE_REF:
required: false
type: string
default: ""
description: "Branch/tag/commit of k8sstormcenter/storage to use (leave empty to keep go.mod default)"
PLATFORMS:
type: boolean
required: false
default: false
description: "Build for both amd64 and arm64"

jobs:
build:
runs-on: ubuntu-latest
permissions:
id-token: write
packages: write
contents: read
steps:
- uses: actions/checkout@v4
with:
submodules: recursive

- uses: actions/setup-go@v5
with:
go-version: "1.25"

- name: Update storage dependency
if: ${{ inputs.STORAGE_REF != '' }}
env:
STORAGE_REF: ${{ inputs.STORAGE_REF }}
GONOSUMCHECK: "*"
GOFLAGS: ""
run: |
echo "Replacing github.com/kubescape/storage with github.com/k8sstormcenter/storage@${STORAGE_REF}"
go mod edit -replace "github.com/kubescape/storage=github.com/k8sstormcenter/storage@${STORAGE_REF}"
go mod tidy
echo "Resolved storage version:"
grep "k8sstormcenter/storage" go.sum | head -1

- name: Ensure ig is installed
run: |
curl -L https://github.com/inspektor-gadget/inspektor-gadget/releases/download/v0.45.0/ig_0.45.0_amd64.deb -O
sudo dpkg -i ig_0.45.0_amd64.deb

- name: Build gadgets
run: make gadgets

- name: Set up QEMU
if: ${{ inputs.PLATFORMS }}
uses: docker/setup-qemu-action@v3

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3

- name: Login to GitHub Container Registry
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}

- name: Build and push
uses: docker/build-push-action@v6
with:
context: .
file: build/Dockerfile
tags: |
ghcr.io/${{ github.repository_owner }}/node-agent:${{ inputs.IMAGE_TAG }}
ghcr.io/${{ github.repository_owner }}/node-agent:latest
build-args: image_version=${{ inputs.IMAGE_TAG }}
platforms: ${{ inputs.PLATFORMS && 'linux/amd64,linux/arm64' || 'linux/amd64' }}
push: true


trigger-component-tests:
needs: build
runs-on: ubuntu-latest
permissions:
actions: write
steps:
- name: Trigger component tests
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
STORAGE_TAG="${{ inputs.IMAGE_TAG }}"
NODE_AGENT_TAG="${{ inputs.IMAGE_TAG }}"
STORAGE_REF="${{ inputs.STORAGE_REF }}"
echo "Triggering component tests with STORAGE_TAG=${STORAGE_TAG} NODE_AGENT_TAG=${NODE_AGENT_TAG} STORAGE_REF=${STORAGE_REF}"
gh workflow run component-tests.yaml \
--repo "${{ github.repository }}" \
--ref "${{ github.ref_name }}" \
-f STORAGE_TAG="${STORAGE_TAG}" \
-f NODE_AGENT_TAG="${NODE_AGENT_TAG}" \
-f STORAGE_REF="${STORAGE_REF}"
2 changes: 1 addition & 1 deletion .github/workflows/bypass.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ jobs:
needs: reset-run-number
uses: ./.github/workflows/incluster-comp-pr-merged.yaml
with:
IMAGE_NAME: quay.io/${{ github.repository_owner }}/node-agent
IMAGE_NAME: ghcr.io/${{ github.repository_owner }}/node-agent
IMAGE_TAG: v0.2.${{ needs.reset-run-number.outputs.run-number }}
COMPONENT_NAME: nodeAgent
CGO_ENABLED: 0
Expand Down
Loading
Loading