26 Commits

Author SHA1 Message Date
Gandalf the Greybeard 40137b8871 fix: add ca-certificates for SSL CA verification in promotion gate
Promotion Gate / Promotion Gate (pull_request) Successful in 10s
CI / ci (push) Successful in 43s
CI / ci (pull_request) Successful in 43s
Promotion Gate / Promotion Gate (pull_request_review) Successful in 9s
2026-05-20 14:14:01 +00:00
Regression Regina [agent] 323add11ae fix(ci): add container: ubuntu:latest for apt-get compatibility (PRI-1636)
Promotion Gate / Promotion Gate (pull_request) Failing after 6s
CI / ci (push) Successful in 42s
CI / ci (pull_request) Successful in 39s
Promotion Gate / Promotion Gate (pull_request_review) Failing after 6s
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-20 13:49:08 +00:00
Gandalf the Greybeard bbae8c33d7 fix(CI): inline dual-approval-check workflow, install curl/jq (PRI-1636)
CI / ci (push) Successful in 49s
Promotion Gate / Promotion Gate (pull_request) Failing after 0s
CI / ci (pull_request) Successful in 41s
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-20 13:27:22 +00:00
Countess von Containerheim 5eedb5dffb fix(ci): inline CI workflow, remove reusable .github dependency (PRI-1630)
Promotion Gate / promotion-gate (pull_request) Failing after 0s
CI / ci (push) Successful in 43s
CI / ci (pull_request) Successful in 44s
2026-05-20 10:46:04 +00:00
privilegedescalation-ceo[bot] ea1fc44614 Update CI and approval workflows for three-branch SDLC (#79)
CI triggers on dev/uat/main. Promotion gate replaces dual-approval.

Co-authored-by: Chris Farhood <chris@farhood.org>
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-05-11 21:40:04 +00:00
privilegedescalation-ceo[bot] a4a0f2d7cd chore: remove E2E testing and fix CI pnpm errors (#78)
* chore: remove E2E testing and fix CI pnpm build errors

Delete all non-browser E2E testing infrastructure (board directive).
Fix ERR_PNPM_IGNORED_BUILDS by adding pnpm.onlyBuiltDependencies.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

* fix: pin pnpm 9.15.4 and regenerate lockfile for CI

Adds packageManager field so CI uses Corepack with pnpm 9 instead of
pnpm@latest (11.x), which has incompatible build script approval.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

---------

Co-authored-by: Chris Farhood <chris@farhood.org>
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-05-11 20:21:33 +00:00
Chris Farhood bddfa62307 fix(renovate): add missing token input and remove deprecated renovate-json5
The Renovate workflow was failing because:
1. The required 'token' input was not provided
2. The 'renovate-json5' input is no longer supported in renovatebot/github-action@v40.3.0

This fix restores automated dependency updates for the repo.

Resolves: CI failures on Renovate workflow
2026-05-10 23:42:38 +00:00
privilegedescalation-engineer[bot] 42da5a26e3 Add renovate.yml workflow for automated dependency updates
Adds .github/workflows/renovate.yml using renovatebot/github-action@v40.3.0 with daily cron + manual dispatch. Removes Dependabot references.

Reviewed and approved:
- UAT (Patty): approved via PR comment
- QA (Regina): approved via Paperclip
- CTO (Nancy): formal GitHub review approval

Admin merge used: QA formal GitHub review blocked by same-App identity platform constraint (same issue as PR #108).
2026-05-06 15:12:31 +00:00
Chris Farhood b6941756f7 Fix E2E workflow: use pnpm-capable reusable workflow branch
The reusable plugin-e2e.yaml@main lacks pnpm support. Switching to
the PR branch that has pnpm detector, Corepack setup, and pnpm commands.

Will revert to @main once PR #141 merges.

- PRI-619 E2E fix

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-05 06:10:19 +00:00
Chris Farhood 8a36950235 Add E2E test infrastructure for rook plugin
- playwright.config.ts with authenticated test projects
- e2e/auth.setup.ts authenticates via OIDC or token
- e2e/rook.spec.ts smoke tests for sidebar, overview page,
  storage classes navigation, and plugin settings
- scripts/deploy-e2e-headlamp.sh deploys Headlamp + rook in headlamp-dev
- scripts/teardown-e2e-headlamp.sh cleans up after tests
- e2e.yaml uses reusable workflow from .github repo
- @playwright/test ^1.58.2 devDep added

- PRI-640

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-05 05:14:41 +00:00
privilegedescalation-engineer[bot] 30a38e7ed0 CI: trigger on dev branch for development workflow (#48)
Co-authored-by: Chris Farhood <chris@farhood.org>
2026-05-04 21:19:26 +00:00
privilegedescalation-engineer[bot] 4e5d1a2157 fix: pass pr_number to dual-approval-check workflow (#31)
Companion PR to privilegedescalation/.github#81

Co-authored-by: Hugh Hackman <hugh@paperclip.ing>
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-04-15 03:29:41 +00:00
privilegedescalation-ceo[bot] 1e82ef596a chore: add repository_dispatch trigger for automated release 2026-04-15 02:54:36 +00:00
privilegedescalation-engineer[bot] b9a351f53d ci: add dual-approval caller workflow
Calls the shared privilegedescalation/.github dual-approval-check
reusable workflow to enforce CTO + QA approval as a GitHub status check.

Once privilegedescalation/.github#47 is merged, this status check can
be added to required_status_checks in branch protection.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-21 23:55:52 +00:00
privilegedescalation-paperclip[bot] eb741ea2f4 ci: pass GitHub App token secrets to release workflow (#20)
The shared release workflow now requires RELEASE_APP_ID and
RELEASE_APP_PRIVATE_KEY secrets for PR creation, since the org
blocks GITHUB_TOKEN from creating PRs.

Depends on privilegedescalation/.github#31

Co-authored-by: privilegedescalation-paperclip[bot] <268365651+privilegedescalation-paperclip[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-20 13:24:40 +00:00
privilegedescalation-paperclip[bot] 8a154a305a fix: add pull-requests write permission to release workflow (#18)
The reusable release workflow declares pull-requests:write but the
caller didn't grant it, causing startup_failure on GitHub Actions.

Co-authored-by: Hugh Hackman [bot] <hugh-hackman[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-19 21:33:12 +00:00
hugh-hackman[bot] 3946f8d64d feat: auto-track upstream appVersion in releases (#6)
Configures the reusable release workflow to fetch the latest release
tag from rook/rook and set appVersion in artifacthub-pkg.yml.
This keeps our Artifact Hub listing in sync with the upstream project.

Co-authored-by: Hugh Hackman <hugh@privilegedescalation.dev>
2026-03-08 22:08:50 +00:00
hugh-hackman[bot] 5ba910c821 Merge PR #5
* ci: switch to org-level reusable workflows

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* chore: retrigger CI after reusable workflows merged

* feat: add workflow_dispatch to CI workflow

---------

Co-authored-by: hugh-hackman[bot] <hugh-hackman[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: hugh-hackman[bot] <266376744+hugh-hackman[bot]@users.noreply.github.com>
2026-03-08 11:16:25 +00:00
Chris Farhood 72e8d173c4 chore: add FUNDING.yml 2026-03-07 08:02:27 -05:00
DevContainer User dc936fb786 fix: add --allow-same-version and derive tarball name from package.json
Replaces hardcoded headlamp-rook-plugin tarball name with dynamic
PKG_NAME from package.json for consistency with other plugins.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-04 02:41:31 +00:00
DevContainer User 182fefa27a fix: use softprops/action-gh-release instead of gh CLI
The self-hosted runner doesn't have gh CLI installed, causing
"gh: command not found" at the Create GitHub Release step.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-04 02:06:16 +00:00
DevContainer User 27b5991a63 fix: hardcode tarball name in release workflow
The dynamic PKG_NAME read from package.json returns "rook", causing
`mv rook-X.Y.Z.tar.gz rook-X.Y.Z.tar.gz` to fail as a self-rename.
Hardcode "headlamp-rook-plugin" as the tarball name to match the repo
and artifacthub expectations.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-04 01:48:20 +00:00
DevContainer User 707a19ad9b fix: move Node.js setup before npm version in release workflow
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-04 01:09:26 +00:00
DevContainer User 49c5cdbe86 ci: standardize CI/CD workflows and add Renovate
- CI: single sequential job, local-ubuntu-latest runner, Node 22, workflow_call trigger, npm run commands
- Release: CI gate via reusable workflow, concurrency protection, dynamic package name, tarball validation, gh CLI
- Add renovate.json with recommended config

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-04 00:41:34 +00:00
Chris Farhood 300c705033 chore: rename plugin to headlamp-rook-plugin
Renames the plugin from headlamp-rook-ceph-plugin to headlamp-rook-plugin
across all files: package.json, package-lock.json, artifacthub-pkg.yml,
release workflow, README, CHANGELOG, CLAUDE.md, CONTRIBUTING, SECURITY,
and src/index.tsx.

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-19 11:26:33 -05:00
Chris Farhood 25175b65b8 feat: initial release of headlamp-rook-ceph-plugin v0.1.0
Headlamp plugin for Rook-Ceph cluster visibility.

Pages:
- Overview dashboard: CephCluster health, capacity bar, resource counts
  (block pools, filesystems, object stores, PVs, PVCs), daemon pod
  health summary, non-Bound PVC alerts
- Block Pools: CephBlockPool table with replication, failure domain,
  mirroring; slide-in detail panel
- Pods: all Rook-Ceph daemon pods grouped by role with ready/total counts

Native Headlamp integrations:
- StorageClass table: Rook Type, Pool, Cluster ID columns
- PV table: Rook Type, Pool columns
- PVC detail injection: driver, type, pool, volume handle
- PV detail injection: CSI volume attributes
- Pod detail injection: Ceph daemon role badge
- App bar badge: cluster health (HEALTH_OK/WARN/ERR), color-coded

API / architecture:
- src/api/k8s.ts: types + filters for ceph.rook.io/v1 CRDs; handles
  both default rook-ceph.* and custom-namespace provisioner strings
- src/api/RookCephDataContext.tsx: shared context provider; fetches
  CephCluster, CephBlockPool, CephFilesystem, CephObjectStore CRDs
  plus daemon pods via label selectors
- 37 unit tests (vitest + @testing-library/react)
- TypeScript strict mode, zero any types
- CI + release GitHub Actions workflows

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-18 16:55:39 -05:00