release: cut v2.0.0 release

.dockerignore

@@ -0,0 +1,8 @@
+Dockerfile*
+Jenkinsfile*
+**/.terraform
+.git/
+
+.idea/
+*.iml
+.gcloudignore

.editorconfig

@@ -8,5 +8,19 @@ insert_final_newline = true
 max_line_length = 120
 trim_trailing_whitespace = true
 
-[Makefile]
+[*.py]
+indent_size = 4
+
+[{Makefile,makefile,**.mk}]
 indent_style = tab
+
+[*.sh]
+indent_style = space
+indent_size = 2
+
+shell_variant      = bash # like -ln=posix
+binary_next_line   = true  # like -bn
+switch_case_indent = true  # like -ci
+space_redirects    = true  # like -sr
+keep_padding       = false  # like -kp
+

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,27 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: ''
+labels: bug
+assignees: ''
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behaviour:
+
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+
+**Expected behaviour**
+A clear and concise description of what you expected to happen.
+
+**Screenshots**
+If applicable, add screenshots to help explain your problem.
+
+**Additional context**
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,20 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+title: ''
+labels: ''
+assignees: ''
+---
+
+**Is your feature request related to a problem? Please describe.**
+A clear and concise description of what the problem is.
+For example: I'm always frustrated when [...]
+
+**Describe the solution you'd like**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Additional context**
+Add any other context or screenshots about the feature request here.

.github/ISSUE_TEMPLATE/question.md

@@ -0,0 +1,13 @@
+---
+name: Question
+about: Post a question about the project
+title: ''
+labels: question
+assignees: ''
+---
+
+**Your question**
+A clear and concise question.
+
+**Additional context**
+Add any other context about your question here.

.github/PULL_REQUEST_TEMPLATE/pull_request_template.md

@@ -0,0 +1,25 @@
+---
+name: Pull Request
+about: A pull request
+title: ''
+labels: ''
+assignees: ''
+---
+
+[pull_requests]: https://github.com/controlplaneio/kubesec/pulls?q=is%3Apr+is%3Aopen+sort%3Aupdated-desc
+
+<!-- You can erase any parts of this template not applicable to your Pull Request. -->
+
+**All Submissions.**
+
+- [ ] Have you followed the guidelines in our [Contributing document](../../CONTRIBUTING.md)?
+- [ ] Have you checked to ensure there aren't other open [Pull Requests][pull_requests] for the same update/change?
+
+**Code Submissions.**
+
+- [ ] Does your submission pass linting, tests, and security analysis?
+
+**Changes to Core Features.**
+
+- [ ] Have you added an explanation of what your changes do and why you'd like us to include them?
+- [ ] Have you written new tests for your core changes, as applicable?

.github/workflows/build.yaml

@@ -0,0 +1,43 @@
+name: Lint and Build
+on:
+  push:
+  ## do not lint and build when tagged, we already do that in push to master
+    tags-ignore:
+      - '*'
+
+    branches:
+    - '*'
+  pull_request:
+    branches: ['main', 'master']
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: Run golangci-lint
+        uses: reviewdog/action-golangci-lint@v2
+        with:
+          go_version: "1.20"
+  build:
+    runs-on: ubuntu-latest
+    needs: lint
+    steps:
+      - name: Checkout source code
+        uses: actions/checkout@v3
+
+      - name: Setup Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: '1.20.x'
+
+      - name: Install dependencies
+        run: go get ./...
+
+      - name: Test
+        run: go test -v ./... --race
+
+      - name: Build
+        run: go build -v ./...

.github/workflows/release.yaml

@@ -0,0 +1,28 @@
+name: goreleaser
+
+on:
+  push:
+    tags:
+      - "v[0-9]+.[0-9]+.[0-9]+"
+
+permissions:
+  contents: write
+
+jobs:
+  goreleaser:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: '1.20.x'
+      - uses: anchore/sbom-action/[email protected]
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v4
+        with:
+          distribution: goreleaser
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -1,3 +1,9 @@
+# Secrets #
+###########
+*.pem
+*.key
+*_rsa
+
 # Compiled source #
 ###################
 *.com
@@ -6,6 +12,7 @@
 *.exe
 *.o
 *.so
+*.pyc
 
 # Packages #
 ############
@@ -23,8 +30,8 @@
 # Logs and databases #
 ######################
 *.log
-*.sql
 *.sqlite
+pip-log.txt
 
 # OS generated files #
 ######################
@@ -33,34 +40,114 @@ ehthumbs.db
 Icon?
 Thumbs.db
 
-# SSH                 #
-#######################
-.ssh/*.pem
-.ssh/*.pub
-
 # IDE generated files #
 #######################
 .idea/
+*.iml
+atlassian-ide-plugin.xml
+
+# Test Files #
+##############
+test/log
+.coverage
+.tox
+nosetests.xml
+
+# Package Managed Files #
+#########################
+bower_components/
+vendor/
+composer.lock
+node_modules/
+.npm/
+venv/
+.venv/
+.venv2/
+.venv3/
+
+# temporary files #
+###################
+*.*swp
+nohup.out
+*.tmp
+
+# Virtual machines #
+####################
+.vagrant/
+
+# Pythonics #
+#############
+*.py[cod]
+
+# Packages
+*.egg
+*.egg-info
+dist
+build
+eggs
+parts
+var
+sdist
+develop-eggs
+.installed.cfg
+lib
+lib64
+
+# Translations
+*.mo
+
+# Mr Developer
+.mr.developer.cfg
+.project
+.pydevproject
+
+# Complexity
+output/*.html
+output/*/index.html
+
+# Sphinx
+docs/_build
+.scratch.md
 
-conf/.ssh/
-conf/.vim/bundle/
-google-cloud-sdk
-conf/.tmux/plugins/*
-!conf/.tmux/plugins/tpm/
-conf/.tmux/resurrect/
+conf/.config/keybase/
 
-conf/.tunnelbear/pass
-conf/.ivpn/pass
+# Pipenv
 
-conf/.config/fish/fish_history
-conf/.config/fish/fishd.ac*
+Pipfile*
+# backup files
+*.backup
+*.notworking
 
-conf/.docker/config.json
+internal/types-not-used/
+demo.yaml
+.idea
+cmd/netassert/cli/netassert
+cmd/netassert/cli/results.tap
+internal/logger/*.old
+cmd/netassert/cli/cli
 
-includes/_SECRET
+# Terraform
+.terraform
+*.tfstate
+*.tfstate.*
+crash.log
+crash.*.log
+*.tfvars
+*.tfvars.json
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+.terraformrc
+terraform.rc
+*.lock.hcl*
 
-!bin/
-.passwd-s3fs
-*.orig
+# Kubeconfig
+*.kubeconfig
 
-!lib/
+# CLI
+/cmd/netassert/cli/*.sh
+abc
+netassert-*-*-kubeconfig
+bin
+results.tap

.goreleaser.yaml

@@ -0,0 +1,35 @@
+builds:
+- id: netassert
+  env:
+  - CGO_ENABLED=0
+  ldflags:
+  - -s
+  - -w
+  - -X main.version={{.Version}}
+  - -X main.gitHash={{.FullCommit}}
+  - -X main.buildDate={{.Date}}
+  goos:
+  - linux
+  - windows
+  - darwin
+  goarch:
+  - amd64
+  main: ./cmd/netassert/cli/
+  binary: netassert
+archives:
+- id: netassert
+  name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
+  format: tar.gz
+  files:
+  - LICENSE
+  wrap_in_directory: false
+checksum:
+  algorithm: sha256
+  name_template: 'checksums-sha256.txt'
+changelog:
+  sort: asc
+sboms:
+  - id: archive
+    artifacts: archive
+  - id: source
+    artifacts: source

.hadolint.yaml

@@ -0,0 +1,4 @@
+---
+ignored:
+  - DL3018 # Pin versions in apk add.
+  - DL3022 # COPY --from alias