A Kubernetes operator that bridges Hardware Security Module (HSM) data storage with Kubernetes Secrets, providing true secret portability th
add tangled workflows
+56
+24
.tangled/workflows/lint.yaml
+24
.tangled/workflows/lint.yaml
···
1
+
when:
2
+
- event: ["push"]
3
+
branch: ["*"]
4
+
- event: ["pull_request"]
5
+
branch: ["main"]
6
+
7
+
engine: kubernetes
8
+
image: golang:1.24-trixie
9
+
architecture: amd64
10
+
11
+
steps:
12
+
- name: Install dependencies and tools
13
+
environment:
14
+
CGO_ENABLED: "1"
15
+
command: |
16
+
apt-get update && apt-get install -y libudev-dev
17
+
go mod download
18
+
go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.7.2
19
+
20
+
- name: Run Linter
21
+
environment:
22
+
CGO_ENABLED: "1"
23
+
command: |
24
+
golangci-lint run ./...
+32
.tangled/workflows/release.yml
+32
.tangled/workflows/release.yml
···
1
+
when:
2
+
- event: ["push"]
3
+
tag: ["v*"]
4
+
5
+
engine: kubernetes
6
+
image: quay.io/buildah/stable:latest
7
+
architecture: amd64
8
+
9
+
environment:
10
+
IMAGE_REGISTRY: buoy.cr
11
+
12
+
steps:
13
+
- name: Login to registry
14
+
command: |
15
+
echo "${APP_PASSWORD}" | buildah login \
16
+
-u "${TANGLED_REPO_HANDLE}" \
17
+
--password-stdin \
18
+
${IMAGE_REGISTRY}
19
+
20
+
- name: Build and push image
21
+
command: |
22
+
buildah bud \
23
+
--tag ${IMAGE_REGISTRY}/${TANGLED_REPO_HANDLE}/${TANGLED_REPO_NAME}:${TANGLED_REF_NAME} \
24
+
--tag ${IMAGE_REGISTRY}/${TANGLED_REPO_HANDLE}/${TANGLED_REPO_NAME}:latest \
25
+
--file ./Dockerfile \
26
+
.
27
+
28
+
buildah push \
29
+
${IMAGE_REGISTRY}/${TANGLED_REPO_HANDLE}/${TANGLED_REPO_NAME}:${TANGLED_REF_NAME}
30
+
31
+
buildah push \
32
+
${IMAGE_REGISTRY}/${TANGLED_REPO_HANDLE}/${TANGLED_REPO_NAME}:latest