🚚 release (#353)

Author: mfiedorowicz

.github/CODEOWNERS

@@ -1 +1 @@
-* @leoparente @ltucker @mfiedorowicz
+* @jajeffries @leoparente @ltucker @mfiedorowicz

.github/golangci.yaml

@@ -1,44 +1,46 @@
+version: "2"
 run:
-  timeout: 5m
   modules-download-mode: readonly
-
 output:
-  formats: colored-line-number
-
+  formats:
+    text:
+      path: stdout
+      color: true
 linters:
   enable:
-    - revive
-    - errcheck
-    - unused
-    - staticcheck
-    - ineffassign
-    - govet
-    - gosimple
     - bodyclose
+    - revive
+  exclusions:
+    generated: lax
+    rules:
+      - linters:
+          - revive
+        path: /*.go
+        text: 'package-comments: should have a package comment'
+      - path: /*.go
+        text: 'SA1019: filter.DataType is deprecated'
+      - path: /*.go
+        text: 'SA1019: g.client.RetrieveIngestionLogs is deprecated'
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
+severity:
+  default: error
+formatters:
+  enable:
     - gci
     - gofumpt
-
-issues:
-  exclude-use-default: false
-  exclude-rules:
-    - path: /*.go
-      text: "package-comments: should have a package comment"
-      linters:
-        - revive
-    - path: /*.go
-      text: 'SA1019: filter.DataType is deprecated'
-    - path: /*.go
-      text: 'SA1019: g.client.RetrieveIngestionLogs is deprecated'
-
-severity:
-  default-severity: error
-
-linters-settings:
-  gci:
-    sections:
-      - standard
-      - default
-      - prefix(github.com/netboxlabs/diode)
-    custom-order: true
-  go-fumpt:
-    extra-rules: true
+  settings:
+    gci:
+      sections:
+        - standard
+        - default
+        - prefix(github.com/netboxlabs/diode)
+      custom-order: true
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$

.github/workflows/go-test.yaml

@@ -32,7 +32,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v5
         with:
-          go-version: '1.23.x'
+          go-version: '1.24.x'
           check-latest: true
       - name: Run go build
         run: go build ./...
@@ -56,6 +56,7 @@ jobs:
           body-includes: Go test coverage
       - name: Post comment
         uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4
+        if: github.event.pull_request.head.repo.full_name == github.repository
         with:
           comment-id: ${{ steps.existing-comment.outputs.comment-id }}
           issue-number: ${{ github.event.pull_request.number }}

.github/workflows/golangci-lint.yaml

@@ -21,11 +21,11 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v5
         with:
-          go-version: '1.23.x'
+          go-version: '1.24.x'
           check-latest: true
       - name: Lint
-        uses: golangci/golangci-lint-action@971e284b6050e8a5849b72094c50ab08da042db8 # v6
+        uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 #v8.0.0
         with:
-          version: v1.62
+          version: v2.1
           working-directory: diode-server
           args: --config ../.github/golangci.yaml

.github/workflows/helm-release.yaml

@@ -31,12 +31,16 @@ jobs:
           git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
       - name: Setup Helm
         uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4
-      - name: Update helm dependencies
+      - name: Extract Helm repo dependencies from Chart.yaml
+        id: extract_repos
+        uses: mikefarah/yq@b534aa9ee5d38001fba3cd8fe254a037e4847b37 # v4.45.4
+        with:
+          cmd: yq -o=tsv '.dependencies[] | [.name, .repository] | @tsv' charts/diode/Chart.yaml
+      - name: Add Helm repos from dependencies
         run: |
-          helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
-          helm repo add jetstack https://charts.jetstack.io
-          helm repo add bitnami https://charts.bitnami.com/bitnami
-          helm repo add ory https://k8s.ory.sh/helm/charts
+          echo "${{ steps.extract_repos.outputs.result }}" | while IFS=$'\t' read -r name repo; do
+            helm repo add "$name" "$repo"
+          done      
       - name: Run chart-releaser
         uses: helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584 # v1.6.0
         env:

.github/workflows/server-develop.yaml

@@ -0,0 +1,93 @@
+name: Server - build and push develop
+on:
+  workflow_dispatch:
+  push:
+    branches: [ develop ]
+    paths:
+      - "diode-server/**"
+      - "!diode-server/docker/**"
+      - "!diode-server/Makefile"
+      - "!diode-server/README.md"
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: false
+
+env:
+  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  GO_VERSION: '1.24'
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+  id-token: write
+
+jobs:
+  setup:
+    name: Setup
+    runs-on: ubuntu-latest
+    outputs:
+      apps: ${{ steps.apps.outputs.apps }}
+    steps:
+      - name: Get apps
+        id: apps
+        run: |
+          echo 'apps=["auth", "ingester", "reconciler"]' >> "$GITHUB_OUTPUT"
+
+  build:
+    name: Build - ${{ matrix.app }}
+    needs: [ setup ]
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        app: ${{ fromJSON(needs.setup.outputs.apps) }}
+    env:
+      BUILD_VERSION: 0.0.0
+      BUILD_COMMIT: ${{ github.sha }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
+
+      - name: Set build info
+        run: |
+          echo $BUILD_COMMIT > ./diode-server/version/BUILD_COMMIT.txt
+          echo $BUILD_VERSION > ./diode-server/version/BUILD_VERSION.txt
+
+      - name: Setup JFrog CLI
+        id: setup-jfrog-cli
+        uses: jfrog/setup-jfrog-cli@ff5cb544114ffc152db9cea1cd3d5978d5074946 # v4.5.11
+        env:
+          JF_URL: https://netboxlabs.jfrog.io
+          JF_PROJECT: obs
+        with:
+          oidc-provider-name: platform-setup-jfrog-cli
+
+      - name: Login to JFrog Artifactory
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 #v3
+        with:
+          registry: netboxlabs.jfrog.io
+          username: ${{ steps.setup-jfrog-cli.outputs.oidc-user }}
+          password: ${{ steps.setup-jfrog-cli.outputs.oidc-token }}
+
+      - name: Build image and push
+        uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
+        with:
+          context: diode-server
+          file: diode-server/docker/Dockerfile-build.${{ matrix.app }}
+          platforms: linux/amd64,linux/arm64
+          push: true
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          tags: |
+            netboxlabs.jfrog.io/obs-builds/diode-${{ matrix.app }}:develop
+          build-args: |
+            GO_VERSION=${{ env.GO_VERSION }}
+            SVC=${{ matrix.app }}

.github/workflows/server-release.yaml

@@ -16,12 +16,13 @@ concurrency:
 env:
   GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   SEMANTIC_RELEASE_PACKAGE: ${{ github.repository }}
-  GO_VERSION: '1.23'
+  GO_VERSION: '1.24'
 
 permissions:
   contents: write
   issues: write
   pull-requests: write
+  id-token: write
 
 jobs:
   setup:
@@ -76,6 +77,22 @@ jobs:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
+      - name: Setup JFrog CLI
+        id: setup-jfrog-cli
+        uses: jfrog/setup-jfrog-cli@ff5cb544114ffc152db9cea1cd3d5978d5074946 # v4.5.11
+        env:
+          JF_URL: https://netboxlabs.jfrog.io
+          JF_PROJECT: obs
+        with:
+          oidc-provider-name: platform-setup-jfrog-cli
+
+      - name: Login to JFrog Artifactory
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 #v3
+        with:
+          registry: netboxlabs.jfrog.io
+          username: ${{ steps.setup-jfrog-cli.outputs.oidc-user }}
+          password: ${{ steps.setup-jfrog-cli.outputs.oidc-token }}
+
       - name: Set build info
         run: |
           echo $BUILD_COMMIT > ./diode-server/version/BUILD_COMMIT.txt
@@ -93,6 +110,8 @@ jobs:
           tags: |
             netboxlabs/diode-${{ matrix.app }}:latest
             netboxlabs/diode-${{ matrix.app }}:${{ env.BUILD_VERSION }}
+            netboxlabs.jfrog.io/obs-builds/diode-${{ matrix.app }}:latest
+            netboxlabs.jfrog.io/obs-builds/diode-${{ matrix.app }}:${{ env.BUILD_VERSION }}
           build-args: |
             GO_VERSION=${{ env.GO_VERSION }}
             SVC=${{ matrix.app }}

README.md

@@ -16,7 +16,7 @@ for missing information, which means even fragmented information about the netwo
 ## Project status
 
 The Diode project is currently in the _Public Preview_ stage. Please
-see [NetBox Labs Product and Feature Lifecycle](https://docs.netboxlabs.com/product_feature_lifecycle/) for more
+see [NetBox Labs Product and Feature Lifecycle](https://netboxlabs.com/docs/console/product_feature_lifecycle/) for more
 details. We actively welcome feedback to help identify and prioritize bugs, new features and areas of improvement.
 
 ## Get started

charts/diode/.gitignore

@@ -0,0 +1 @@
+/charts/*.tgz

charts/diode/Chart.lock

@@ -1,4 +1,7 @@
 dependencies:
+- name: common
+  repository: https://charts.bitnami.com/bitnami
+  version: 2.31.1
 - name: redis
   repository: https://charts.bitnami.com/bitnami
   version: 20.11.5
@@ -14,5 +17,5 @@ dependencies:
 - name: cert-manager
   repository: https://charts.jetstack.io
   version: v1.12.0
-digest: sha256:befc72d9e6eedfe03a16a502fecb33478a4e8bc94acc2497d12b758405561f6e
-generated: "2025-05-16T17:12:36.330502+02:00"
+digest: sha256:61907df8f8ab4bd2fd67195670bb6f920392f6af0655f22dce06a68fd381a1ba
+generated: "2025-05-30T12:44:47.769834-04:00"