Tags: sky-uk/feed
Tags
Truncate comment to fit under the line limit for nginx config (#255) * Truncate comment to fit under the line limit for nginx config * Remove extraneous conditionals * Remove ingress comment entirely * Revert the ingress comment * Indicate truncated lines
New external command for scenareos where LBs are attached externally … …not explicitly via feed (#238) * Working GCP feed with GKE ingress controller, external and internal * External command that doesn't attach to external load baalncers * Add external status updater * Logging * Flags for external and internal host name * Flags for external and internal host name * Formatting * Rename to static
Change the docker image build process to reduce/eliminate security wa… …rnings The current feed docker image has 20 critical or high security warnings reported by the trivy scanning tool, as well as a couple go package warnings. To our knowledge these do not represent vulnerabilities in feed, however itʼs best practice to eliminate them, which we do in the following ways: - Split the docker image into a multistage build. We now have a stage that updates the base Alpine image and installs runtime dependencies, a second stage that builds the C dependencies, and a third stage that copies the files from the first two stages into a single image and sets up permissions/users/working directory/etc. - Update the OS packages as part of the dockerfile to pull in the latest security fixes. - Bump the version of golang.org/x/crypto since this was triggering one of the trivy warnings As strictly unrelated changes this PR also: - Bumps the go version to 1.16 in the repo - Makes some changes to the makefile to avoid errors for some of the ancillary tasks (lint and friends) as well as using `go run` to avoid depending on installing binaries into a usersʼ global environment.
Fix bug during feed shutdown (#234) * Fix bug during feed shutdown - Feed instance can attach to multiple target groups belonging to the load balancer having a tag matching the value in the flag `ingress-class`. The fix is for feed instance to wait for the drain duration even if the de-register call succeeds to at least one of those target groups. * Add instruction to include apk upgrade before package adds. * Ignore the bind-libs vulnerability
PreviousNext