Cherry-pick #5240 #5241 #5248 #5249 #5254 #5255 #5256 #5258 #5260 #5262

#5263 (#5265) * Fix panic in ECS driftdetection when a taskdef in livestates does not exist (#5240) * Generate v0.49.x docs Signed-off-by: t-kikuc <[email protected]> * fix: avoid panic when live taskdef does not exist Signed-off-by: t-kikuc <[email protected]> --------- Signed-off-by: t-kikuc <[email protected]> Signed-off-by: pipecd-bot <[email protected]> * Upgrade aws-sdk-go-v2 (#5241) * Generate v0.49.x docs Signed-off-by: t-kikuc <[email protected]> * upgrade aws-sdk-go-v2 Signed-off-by: t-kikuc <[email protected]> * upgrade aws-sdk-go-v2/**/* Signed-off-by: t-kikuc <[email protected]> * fix compile errors caused by the breaking change Signed-off-by: t-kikuc <[email protected]> * fix a test due to added RestartPolicy Signed-off-by: t-kikuc <[email protected]> * fix: avoid panic when live taskdef does not exist Signed-off-by: t-kikuc <[email protected]> * fix go.sum by `make update/go-deps` Signed-off-by: t-kikuc <[email protected]> --------- Signed-off-by: t-kikuc <[email protected]> Signed-off-by: pipecd-bot <[email protected]> * Remove an unused field 'configFilePathInGitRepo' (#5248) * Generate v0.49.x docs Signed-off-by: t-kikuc <[email protected]> * remove unused field 'configFilePathInGitRepo' Signed-off-by: t-kikuc <[email protected]> --------- Signed-off-by: t-kikuc <[email protected]> Signed-off-by: pipecd-bot <[email protected]> * Support fetching a piped config from AWS SSM Parameter Store (#5249) * Generate v0.49.x docs Signed-off-by: t-kikuc <[email protected]> * add --aws-ssm-parameter Signed-off-by: t-kikuc <[email protected]> * add config-aws-ssm-parameter to piped Signed-off-by: t-kikuc <[email protected]> * update docs of runtime options Signed-off-by: t-kikuc <[email protected]> --------- Signed-off-by: t-kikuc <[email protected]> Signed-off-by: pipecd-bot <[email protected]> * Remove subnet ordering in head manifest (#5254) Signed-off-by: HoangNguyen689 <[email protected]> Signed-off-by: pipecd-bot <[email protected]> * Update quickstart header note (#5255) Signed-off-by: khanhtc1202 <[email protected]> Signed-off-by: pipecd-bot <[email protected]> * Update feature status (#5256) Signed-off-by: khanhtc1202 <[email protected]> Signed-off-by: pipecd-bot <[email protected]> * Support directly designating a gitSSHKey instead of File for launcher (#5258) * Generate v0.49.x docs Signed-off-by: t-kikuc <[email protected]> * add --git-ssh-key-env Signed-off-by: t-kikuc <[email protected]> * update docs: add '--git-ssh-key-env' Signed-off-by: t-kikuc <[email protected]> * add '\n' at the end of ssh key Signed-off-by: t-kikuc <[email protected]> * Directly use data instead of env Signed-off-by: t-kikuc <[email protected]> * Clarify the flag description Signed-off-by: t-kikuc <[email protected]> * fix error message: 'and' -> 'or' Signed-off-by: t-kikuc <[email protected]> --------- Signed-off-by: t-kikuc <[email protected]> Signed-off-by: pipecd-bot <[email protected]> * Add workflow steps to build and publish quickstart manifests (#5260) Signed-off-by: pipecd-bot <[email protected]> * Update workflow not to run by matrix (#5262) Signed-off-by: Shinnosuke Sawada-Dazai <[email protected]> Signed-off-by: pipecd-bot <[email protected]> * Update RELEASE to v0.49.1 and update v0.49.x docs (#5263) * update RELEASE to v0.49.1 Signed-off-by: t-kikuc <[email protected]> * update docs of v0.49.x by `make release version=v0.49.1` Signed-off-by: t-kikuc <[email protected]> --------- Signed-off-by: t-kikuc <[email protected]> Signed-off-by: pipecd-bot <[email protected]> --------- Signed-off-by: t-kikuc <[email protected]> Signed-off-by: pipecd-bot <[email protected]> Signed-off-by: HoangNguyen689 <[email protected]> Signed-off-by: khanhtc1202 <[email protected]> Signed-off-by: Shinnosuke Sawada-Dazai <[email protected]> Co-authored-by: Tetsuya Kikuchi <[email protected]> Co-authored-by: HoangNguyen689 <[email protected]> Co-authored-by: Khanh Tran <[email protected]> Co-authored-by: Shinnosuke Sawada-Dazai <[email protected]>
pipe-cd · Oct 8, 2024 · fa404a8 · fa404a8
1 parent 909fd76
commit fa404a8
Show file tree

Hide file tree

Showing 16 changed files with 343 additions and 182 deletions.
diff --git a/.github/workflows/publish_image_chart.yaml b/.github/workflows/publish_image_chart.yaml
@@ -146,3 +146,43 @@ jobs:
           event-name: helm-release
           labels: helmRepo=pipecd
           data: ${{ env.PIPECD_VERSION }}
+
+  release-quickstart-manifests:
+    runs-on: ubuntu-latest
+    needs: artifacts
+    if: startsWith(github.ref, 'refs/tags/')
+    permissions:
+      contents: write
+    steps:
+      # setup tools and repositories
+      - name: Install helm
+        uses: Azure/setup-helm@v1
+        with:
+          version: ${{ env.HELM_VERSION }}
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Determine version
+        run: echo "PIPECD_VERSION=$(git describe --tags --always --abbrev=7)" >> $GITHUB_ENV
+
+      # Building and publishing quickstart manifests.
+      - name: Build quickstart manifests
+        run: |
+          helm template pipecd oci://ghcr.io/pipe-cd/chart/pipecd --version ${{ env.PIPECD_VERSION }} -n pipecd -f quickstart/control-plane-values.yaml > quickstart/manifests/control-plane.yaml
+          helm template piped oci://ghcr.io/pipe-cd/chart/piped --version ${{ env.PIPECD_VERSION }} -n pipecd --set quickstart.enabled=true --set quickstart.pipedId=\<YOUR_PIPED_ID\> --set quickstart.pipedKeyData=\<YOUR_PIPED_KEY_DATA\> > quickstart/manifests/piped.yaml
+      - name: Publish quickstart manifests
+        uses: peter-evans/create-pull-request@v6
+        with:
+          title: "[bot] Publish quickstart manifests"
+          commit-message: "[bot] Publish quickstart manifests"
+          branch: "create-pull-request/publish-quickstart-manifests"
+          body: |
+            Automated changes by [create-pull-request](https://github.com/peter-evans/create-pull-request) GitHub action.
+            The workflow is defined [here](https://github.com/pipe-cd/pipecd/blob/master/.github/workflows/publish_image_chart.yaml).
+
+            **Note:** You need to **close and reopen this PR** manually to trigger status check workflows. (Or just click `Update branch` if possible.)
+            For details, see https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs.
+          delete-branch: true
+          signoff: true
+          token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/RELEASE b/RELEASE
@@ -1,6 +1,6 @@
 # Generated by `make release` command.
 # DO NOT EDIT.
-tag: v0.49.0
+tag: v0.49.1
 
 releaseNoteGenerator:
   showCommitter: false

diff --git a/docs/content/en/docs-dev/quickstart/_index.md b/docs/content/en/docs-dev/quickstart/_index.md
@@ -6,7 +6,9 @@ description: >
   This page describes how to quickly get started with PipeCD on Kubernetes.
 ---
 
-This page is a guideline for installing PipeCD into your Kubernetes cluster and deploying a "hello world" application to that same Kubernetes cluster.
+PipeCD is constructed by two components: the Control plane and the piped (agent) (ref: [PipeCD concepts](../concepts/)). The control plane can be thought of as a regular web service application that can be installed anywhere, while the piped agent is a single binary that can run as a pod in a Kubernetes cluster, a container on ECS, a serverless function like Lambda, Cloud Run, or a process running directly on your local machine.
+
+This page is a guideline for installing PipeCD (both two components) into your Kubernetes cluster and deploying a "hello world" application to that same Kubernetes cluster.
 
 Note:
 

diff --git a/docs/content/en/docs-dev/user-guide/managing-piped/runtime-options.md b/docs/content/en/docs-dev/user-guide/managing-piped/runtime-options.md
@@ -20,6 +20,7 @@ Flags:
       --app-manifest-cache-count int               The number of app manifests to cache. The cache-key contains the commit hash. The default is 150. (default 150)     
       --cert-file string                           The path to the TLS certificate file.
       --config-aws-secret string                   The ARN of secret that contains Piped config and be stored in AWS Secrets Manager.
+      --config-aws-ssm-parameter string            The name of parameter of Piped config stored in AWS Systems Manager Parameter Store. SecureString is also supported.
       --config-data string                         The base64 encoded string of the configuration data.
       --config-file string                         The path to the configuration file.
       --config-gcp-secret string                   The resource ID of secret that contains Piped config and be stored in GCP SecretManager.
@@ -46,25 +47,28 @@ Usage:
   launcher launcher [flags]
 
 Flags:
-      --aws-secret-id string           The ARN of secret that contains Piped config in AWS Secrets Manager service.
-      --cert-file string               The path to the TLS certificate file.
-      --check-interval duration        Interval to periodically check desired config/version to restart Piped. Default is 1m. (default 1m0s)
-      --config-data string             The base64 encoded string of the configuration data.
-      --config-file string             The path to the configuration file.
-      --config-from-aws-secret         Whether to load Piped config that is being stored in AWS Secrets Manager service.
-      --config-from-gcp-secret         Whether to load Piped config that is being stored in GCP SecretManager service.
-      --config-from-git-repo           Whether to load Piped config that is being stored in a git repository.
-      --default-version string         The version should be run when no desired version was specified. Empty means using the same version with Launcher.
-      --gcp-secret-id string           The resource ID of secret that contains Piped config in GCP SecretManager service.
-      --git-branch string              Branch of git repository to for Piped config.
-      --git-piped-config-file string   Relative path within git repository to locate Piped config file.
-      --git-repo-url string            The remote URL of git repository to fetch Piped config.
-      --git-ssh-key-file string        The path to SSH private key to fetch private git repository.
-      --grace-period duration          How long to wait for graceful shutdown. (default 30s)
-  -h, --help                           help for launcher
-      --home-dir string                The working directory of Launcher.
-      --insecure                       Whether disabling transport security while connecting to control-plane.
-      --launcher-admin-port int        The port number used to run a HTTP server for admin tasks such as metrics, healthz.
+      --aws-secret-id string                  The ARN of secret that contains Piped config in AWS Secrets Manager service.
+      --aws-ssm-parameter string              The name of parameter of Piped config stored in AWS Systems Manager Parameter Store. SecureString is also supported.
+      --cert-file string                      The path to the TLS certificate file.
+      --check-interval duration               Interval to periodically check desired config/version to restart Piped. Default is 1m. (default 1m0s)
+      --config-data string                    The base64 encoded string of the configuration data.
+      --config-file string                    The path to the configuration file.
+      --config-from-aws-secret                Whether to load Piped config that is being stored in AWS Secrets Manager service.
+      --config-from-aws-ssm-parameter-store   Whether to load Piped config that is being stored in AWS Systems Manager Parameter Store.
+      --config-from-gcp-secret                Whether to load Piped config that is being stored in GCP SecretManager service.
+      --config-from-git-repo                  Whether to load Piped config that is being stored in a git repository.
+      --default-version string                The version should be run when no desired version was specified. Empty means using the same version with Launcher.
+      --gcp-secret-id string                  The resource ID of secret that contains Piped config in GCP SecretManager service.
+      --git-branch string                     Branch of git repository to for Piped config.
+      --git-piped-config-file string          Relative path within git repository to locate Piped config file.
+      --git-repo-url string                   The remote URL of git repository to fetch Piped config.
+      --git-ssh-key-data string               Base64 encoded value of SSH private key to fetch Piped config from the private git repository.
+      --git-ssh-key-file string               The path to SSH private key to fetch Piped config from private git repository.
+      --grace-period duration                 How long to wait for graceful shutdown. (default 30s)
+  -h, --help                                  help for launcher
+      --home-dir string                       The working directory of Launcher.
+      --insecure                              Whether disabling transport security while connecting to control-plane.
+      --launcher-admin-port int               The port number used to run a HTTP server for admin tasks such as metrics, healthz.
 
 Global Flags:
       --log-encoding string                The encoding type for logger [json|console|humanize]. (default "humanize")

diff --git a/docs/content/en/docs-v0.49.x/feature-status/_index.md b/docs/content/en/docs-v0.49.x/feature-status/_index.md
@@ -32,7 +32,6 @@ Please note that the phases (Incubating, Alpha, Beta, and Stable) are applied to
 | Support Kustomize | Beta |
 | Support Istio service mesh | Beta |
 | Support SMI service mesh | Incubating |
-| Support [AWS App Mesh](https://aws.amazon.com/app-mesh/) | Incubating |
 | [Plan preview](../user-guide/plan-preview) | Beta |
 | [Manifest attachment](../user-guide/managing-application/manifest-attachment) | Alpha |
 
@@ -83,7 +82,6 @@ Please note that the phases (Incubating, Alpha, Beta, and Stable) are applied to
 | [Application live state](../user-guide/managing-application/application-live-state/) | Alpha *1 |
 | Quick sync deployment for [ECS Service Discovery](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-discovery.html) | Alpha |
 | Deployment with a defined pipeline for [ECS Service Discovery](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-discovery.html) | Alpha |
-| Support [AWS App Mesh](https://aws.amazon.com/app-mesh/) | Incubating |
 | [Plan preview](../user-guide/plan-preview) | Alpha |
 | [Manifest attachment](../user-guide/managing-application/manifest-attachment) | Alpha |
 

diff --git a/docs/content/en/docs-v0.49.x/quickstart/_index.md b/docs/content/en/docs-v0.49.x/quickstart/_index.md
@@ -6,7 +6,9 @@ description: >
   This page describes how to quickly get started with PipeCD on Kubernetes.
 ---
 
-This page is a guideline for installing PipeCD into your Kubernetes cluster and deploying a "hello world" application to that same Kubernetes cluster.
+PipeCD is constructed by two components: the Control plane and the piped (agent) (ref: [PipeCD concepts](../concepts/)). The control plane can be thought of as a regular web service application that can be installed anywhere, while the piped agent is a single binary that can run as a pod in a Kubernetes cluster, a container on ECS, a serverless function like Lambda, Cloud Run, or a process running directly on your local machine.
+
+This page is a guideline for installing PipeCD (both two components) into your Kubernetes cluster and deploying a "hello world" application to that same Kubernetes cluster.
 
 Note:
 

diff --git a/docs/content/en/docs-v0.49.x/user-guide/managing-piped/runtime-options.md b/docs/content/en/docs-v0.49.x/user-guide/managing-piped/runtime-options.md
@@ -20,6 +20,7 @@ Flags:
       --app-manifest-cache-count int               The number of app manifests to cache. The cache-key contains the commit hash. The default is 150. (default 150)     
       --cert-file string                           The path to the TLS certificate file.
       --config-aws-secret string                   The ARN of secret that contains Piped config and be stored in AWS Secrets Manager.
+      --config-aws-ssm-parameter string            The name of parameter of Piped config stored in AWS Systems Manager Parameter Store. SecureString is also supported.
       --config-data string                         The base64 encoded string of the configuration data.
       --config-file string                         The path to the configuration file.
       --config-gcp-secret string                   The resource ID of secret that contains Piped config and be stored in GCP SecretManager.
@@ -46,25 +47,28 @@ Usage:
   launcher launcher [flags]
 
 Flags:
-      --aws-secret-id string           The ARN of secret that contains Piped config in AWS Secrets Manager service.
-      --cert-file string               The path to the TLS certificate file.
-      --check-interval duration        Interval to periodically check desired config/version to restart Piped. Default is 1m. (default 1m0s)
-      --config-data string             The base64 encoded string of the configuration data.
-      --config-file string             The path to the configuration file.
-      --config-from-aws-secret         Whether to load Piped config that is being stored in AWS Secrets Manager service.
-      --config-from-gcp-secret         Whether to load Piped config that is being stored in GCP SecretManager service.
-      --config-from-git-repo           Whether to load Piped config that is being stored in a git repository.
-      --default-version string         The version should be run when no desired version was specified. Empty means using the same version with Launcher.
-      --gcp-secret-id string           The resource ID of secret that contains Piped config in GCP SecretManager service.
-      --git-branch string              Branch of git repository to for Piped config.
-      --git-piped-config-file string   Relative path within git repository to locate Piped config file.
-      --git-repo-url string            The remote URL of git repository to fetch Piped config.
-      --git-ssh-key-file string        The path to SSH private key to fetch private git repository.
-      --grace-period duration          How long to wait for graceful shutdown. (default 30s)
-  -h, --help                           help for launcher
-      --home-dir string                The working directory of Launcher.
-      --insecure                       Whether disabling transport security while connecting to control-plane.
-      --launcher-admin-port int        The port number used to run a HTTP server for admin tasks such as metrics, healthz.
+      --aws-secret-id string                  The ARN of secret that contains Piped config in AWS Secrets Manager service.
+      --aws-ssm-parameter string              The name of parameter of Piped config stored in AWS Systems Manager Parameter Store. SecureString is also supported.
+      --cert-file string                      The path to the TLS certificate file.
+      --check-interval duration               Interval to periodically check desired config/version to restart Piped. Default is 1m. (default 1m0s)
+      --config-data string                    The base64 encoded string of the configuration data.
+      --config-file string                    The path to the configuration file.
+      --config-from-aws-secret                Whether to load Piped config that is being stored in AWS Secrets Manager service.
+      --config-from-aws-ssm-parameter-store   Whether to load Piped config that is being stored in AWS Systems Manager Parameter Store.
+      --config-from-gcp-secret                Whether to load Piped config that is being stored in GCP SecretManager service.
+      --config-from-git-repo                  Whether to load Piped config that is being stored in a git repository.
+      --default-version string                The version should be run when no desired version was specified. Empty means using the same version with Launcher.
+      --gcp-secret-id string                  The resource ID of secret that contains Piped config in GCP SecretManager service.
+      --git-branch string                     Branch of git repository to for Piped config.
+      --git-piped-config-file string          Relative path within git repository to locate Piped config file.
+      --git-repo-url string                   The remote URL of git repository to fetch Piped config.
+      --git-ssh-key-data string               Base64 encoded value of SSH private key to fetch Piped config from the private git repository.
+      --git-ssh-key-file string               The path to SSH private key to fetch Piped config from private git repository.
+      --grace-period duration                 How long to wait for graceful shutdown. (default 30s)
+  -h, --help                                  help for launcher
+      --home-dir string                       The working directory of Launcher.
+      --insecure                              Whether disabling transport security while connecting to control-plane.
+      --launcher-admin-port int               The port number used to run a HTTP server for admin tasks such as metrics, healthz.
 
 Global Flags:
       --log-encoding string                The encoding type for logger [json|console|humanize]. (default "humanize")

diff --git a/go.mod b/go.mod
@@ -10,14 +10,15 @@ require (
 	github.com/DataDog/datadog-api-client-go v1.0.0-beta.16
 	github.com/Masterminds/sprig/v3 v3.2.2
 	github.com/NYTimes/gziphandler v0.0.0-20170623195520-56545f4a5d46
-	github.com/aws/aws-sdk-go-v2 v1.17.7
-	github.com/aws/aws-sdk-go-v2/config v1.18.19
-	github.com/aws/aws-sdk-go-v2/credentials v1.13.18
-	github.com/aws/aws-sdk-go-v2/service/ecs v1.24.2
-	github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 v1.19.7
-	github.com/aws/aws-sdk-go-v2/service/lambda v1.30.2
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.31.0
-	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.18.0
+	github.com/aws/aws-sdk-go-v2 v1.31.0
+	github.com/aws/aws-sdk-go-v2/config v1.27.38
+	github.com/aws/aws-sdk-go-v2/credentials v1.17.36
+	github.com/aws/aws-sdk-go-v2/service/ecs v1.46.2
+	github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 v1.38.2
+	github.com/aws/aws-sdk-go-v2/service/lambda v1.62.0
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.63.2
+	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.33.2
+	github.com/aws/aws-sdk-go-v2/service/ssm v1.54.3
 	github.com/coreos/go-oidc/v3 v3.11.0
 	github.com/creasty/defaults v1.6.0
 	github.com/envoyproxy/go-control-plane v0.12.0
@@ -88,20 +89,20 @@ require (
 	github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578 // indirect
 	github.com/agext/levenshtein v1.2.2 // indirect
 	github.com/apparentlymart/go-textseg v1.0.0 // indirect
-	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.10 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.1 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.31 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.25 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/ini v1.3.32 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/v4a v1.0.23 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.11 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.26 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.25 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.14.0 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.12.6 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.6 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sts v1.18.7 // indirect
-	github.com/aws/smithy-go v1.13.5 // indirect
+	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.5 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.14 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.18 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.18 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.18 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.5 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.20 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.20 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.18 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.23.2 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.27.2 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.31.2 // indirect
+	github.com/aws/smithy-go v1.21.0 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/cenkalti/backoff/v4 v4.3.0 // indirect
 	github.com/cespare/xxhash/v2 v2.2.0 // indirect