From 5b43b23249b7c4be7fa04c0e742f6d2667b70050 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 9 Jan 2025 10:05:08 +0000 Subject: [PATCH 1/8] Bump golang.org/x/crypto in /scripts/chart-dep-updater (#37) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.26.0 to 0.31.0. - [Commits](https://github.com/golang/crypto/compare/v0.26.0...v0.31.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- scripts/chart-dep-updater/go.mod | 10 +++++----- scripts/chart-dep-updater/go.sum | 20 ++++++++++---------- 2 files changed, 15 insertions(+), 15 deletions(-) diff --git a/scripts/chart-dep-updater/go.mod b/scripts/chart-dep-updater/go.mod index 9e35ca8..36b10e3 100644 --- a/scripts/chart-dep-updater/go.mod +++ b/scripts/chart-dep-updater/go.mod @@ -89,13 +89,13 @@ require ( go.opentelemetry.io/otel/metric v1.28.0 // indirect go.opentelemetry.io/otel/trace v1.28.0 // indirect go.starlark.net v0.0.0-20240725214946-42030a7cedce // indirect - golang.org/x/crypto v0.26.0 // indirect + golang.org/x/crypto v0.31.0 // indirect golang.org/x/net v0.28.0 // indirect golang.org/x/oauth2 v0.22.0 // indirect - golang.org/x/sync v0.8.0 // indirect - golang.org/x/sys v0.24.0 // indirect - golang.org/x/term v0.23.0 // indirect - golang.org/x/text v0.17.0 // indirect + golang.org/x/sync v0.10.0 // indirect + golang.org/x/sys v0.28.0 // indirect + golang.org/x/term v0.27.0 // indirect + golang.org/x/text v0.21.0 // indirect golang.org/x/time v0.6.0 // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20240808171019-573a1156607a // indirect google.golang.org/grpc v1.65.0 // indirect diff --git a/scripts/chart-dep-updater/go.sum b/scripts/chart-dep-updater/go.sum index 9bc6605..36ff1d5 100644 --- a/scripts/chart-dep-updater/go.sum +++ b/scripts/chart-dep-updater/go.sum @@ -333,8 +333,8 @@ golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8U golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.3.0/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4= -golang.org/x/crypto v0.26.0 h1:RrRspgV4mU+YwB4FYnuBoKsUapNIL5cohGAmSH3azsw= -golang.org/x/crypto v0.26.0/go.mod h1:GY7jblb9wI+FOo5y8/S2oY4zWP07AkOJ4+jxCqdqn54= +golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U= +golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk= golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 h1:2dVuKD2vS7b0QIHQbpyTISPd0LeHDbnYEryqj5Q1ug8= golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56/go.mod h1:M4RDyNAINzryxdtnbRXRL/OHtkFuWGRjvuhBJpk2IlY= golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= @@ -359,8 +359,8 @@ golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJ golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ= -golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ= +golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20181116152217-5ac8a444bdc5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= @@ -374,19 +374,19 @@ golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBc golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.24.0 h1:Twjiwq9dn6R1fQcyiK+wQyHWfaz/BJB+YIpzU/Cv3Xg= -golang.org/x/sys v0.24.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA= +golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc= -golang.org/x/term v0.23.0 h1:F6D4vR+EHoL9/sWAWgAR1H2DcHr4PareCbAaCo1RpuU= -golang.org/x/term v0.23.0/go.mod h1:DgV24QBUrK6jhZXl+20l6UWznPlwAHm1Q1mGHtydmSk= +golang.org/x/term v0.27.0 h1:WP60Sv1nlK1T6SupCHbXzSaN0b9wUmsPoRS9b61A23Q= +golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= -golang.org/x/text v0.17.0 h1:XtiM5bkSOt+ewxlOE/aE/AKEHibwj/6gvWMl9Rsh0Qc= -golang.org/x/text v0.17.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY= +golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo= +golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ= golang.org/x/time v0.6.0 h1:eTDhh4ZXt5Qf0augr54TN6suAUudPcawVZeIAPU7D4U= golang.org/x/time v0.6.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= From dd8ee3fd6b51bce9643859c1cd847bd594104a70 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Feb 2025 16:16:14 +0000 Subject: [PATCH 2/8] Bump the python-dependencies group across 1 directory with 6 updates (#43) Bumps the python-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [mkdocs-git-revision-date-localized-plugin](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin) | `1.2.9` | `1.3.0` | | [mkdocs-include-markdown-plugin](https://github.com/mondeja/mkdocs-include-markdown-plugin) | `6.2.2` | `7.1.4` | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.5.36` | `9.6.3` | | [mkdocs-material[imaging]](https://github.com/squidfunk/mkdocs-material) | `9.5.36` | `9.6.3` | | [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) | `10.10.1` | `10.14.3` | | [diagrams](https://github.com/mingrammer/diagrams) | `0.23.4` | `0.24.1` | Updates `mkdocs-git-revision-date-localized-plugin` from 1.2.9 to 1.3.0 - [Release notes](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin/releases) - [Commits](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin/compare/v1.2.9...v1.3.0) Updates `mkdocs-include-markdown-plugin` from 6.2.2 to 7.1.4 - [Release notes](https://github.com/mondeja/mkdocs-include-markdown-plugin/releases) - [Commits](https://github.com/mondeja/mkdocs-include-markdown-plugin/compare/v6.2.2...v7.1.4) Updates `mkdocs-material` from 9.5.36 to 9.6.3 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.5.36...9.6.3) Updates `mkdocs-material[imaging]` from 9.5.36 to 9.6.3 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.5.36...9.6.3) Updates `pymdown-extensions` from 10.10.1 to 10.14.3 - [Release notes](https://github.com/facelessuser/pymdown-extensions/releases) - [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.10.1...10.14.3) Updates `diagrams` from 0.23.4 to 0.24.1 - [Release notes](https://github.com/mingrammer/diagrams/releases) - [Changelog](https://github.com/mingrammer/diagrams/blob/master/CHANGELOG.md) - [Commits](https://github.com/mingrammer/diagrams/compare/v0.23.4...v0.24.1) --- updated-dependencies: - dependency-name: mkdocs-git-revision-date-localized-plugin dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: mkdocs-include-markdown-plugin dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: mkdocs-material[imaging] dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pymdown-extensions dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: diagrams dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements.txt | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/requirements.txt b/requirements.txt index 47696c4..7724376 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,13 +1,13 @@ mkdocs==1.6.1 mkdocs-get-deps==0.2.0 -mkdocs-git-revision-date-localized-plugin==1.2.9 -mkdocs-include-markdown-plugin==6.2.2 -mkdocs-material==9.5.36 -mkdocs-material[imaging]==9.5.36 +mkdocs-git-revision-date-localized-plugin==1.3.0 +mkdocs-include-markdown-plugin==7.1.4 +mkdocs-material==9.6.3 +mkdocs-material[imaging]==9.6.3 mkdocs-material-extensions==1.3.1 mkdocs-minify-plugin==0.8.0 -pymdown-extensions==10.10.1 +pymdown-extensions==10.14.3 readtime==3.0.0 paginate==0.5.7 mkdocs-git-revision-date-localized-plugin -diagrams==0.23.4 +diagrams==0.24.1 From 1e48cf3725d6d2ab015f389bdaec5250006348e4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Feb 2025 16:17:38 +0000 Subject: [PATCH 3/8] Bump the github-actions group with 2 updates (#39) Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [github/codeql-action](https://github.com/github/codeql-action). Updates `actions/checkout` from 3 to 4 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3...v4) Updates `github/codeql-action` from 2 to 3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: David Collom --- .github/workflows/scan.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scan.yaml b/.github/workflows/scan.yaml index 2a48aaa..daa14ef 100644 --- a/.github/workflows/scan.yaml +++ b/.github/workflows/scan.yaml @@ -4,7 +4,7 @@ jobs: kubescape: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - uses: kubescape/github-action@main continue-on-error: true with: @@ -15,6 +15,6 @@ jobs: # # Optional: Scan a specific path. Default will scan the whole repository # files: "examples/*.yaml" - name: Upload Kubescape scan results to Github Code Scanning - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 with: sarif_file: results.sarif \ No newline at end of file From 957115e05fb3fb707c8e0bd9c73068c629cf59fa Mon Sep 17 00:00:00 2001 From: Maria Reynoso <62747554+maria-reynoso@users.noreply.github.com> Date: Thu, 13 Feb 2025 17:29:13 +0100 Subject: [PATCH 4/8] FinOps on EKS (#33) * helmfile * prometheus exporter * Update docs * new line * update * env eks file * fix helmfile apply command * fix opencost templates chart * fix opencost * update env file * fix opencost template chart * remove opencost from prometheus * no aws access key needed * add dashboard to kind * update doc * new line * Re-word * Re-word * Update docs * Update docs * helmfile * prometheus exporter * Update docs * new line * update * env eks file * fix helmfile apply command * fix opencost templates chart * fix opencost * update env file * fix opencost template chart * remove opencost from prometheus * no aws access key needed * add dashboard to kind * update doc * new line * Re-word * Add scan pipeline * Bump golang.org/x/crypto in /scripts/chart-dep-updater (#37) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.26.0 to 0.31.0. - [Commits](https://github.com/golang/crypto/compare/v0.26.0...v0.31.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Re-word * Update docs * Update docs --------- Signed-off-by: dependabot[bot] Co-authored-by: Jon Tutcher <7592326+jontutcher@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: David Collom --- README.md | 2 +- .../templates/opencost/dashboards.yaml | 2 + content/install.md | 4 +- installation/Helmfile_eks.yaml | 139 ++++++++++++++++++ installation/Makefile | 5 - installation/README.md | 10 +- installation/config/common/enabled.yaml | 8 +- installation/config/eks/grafana-values.yaml | 16 ++ installation/config/eks/kyverno-values.yaml | 13 ++ .../config/eks/opencost-templates-values.yaml | 5 + installation/config/eks/opencost-values.yaml | 18 +++ .../prometheus-opencost-exporter-values.yaml | 27 ++++ .../config/eks/prometheus-values.yaml | 17 +++ .../config/gke/opencost-templates-values.yaml | 7 +- installation/config/kind/enabled.yaml | 26 ---- .../kind/opencost-templates-values.yaml | 1 + installation/eks.md | 81 ++++++++++ installation/env_eks.tmpl | 19 +++ installation/gke.md | 12 +- 19 files changed, 366 insertions(+), 46 deletions(-) create mode 100644 installation/Helmfile_eks.yaml create mode 100644 installation/config/eks/grafana-values.yaml create mode 100644 installation/config/eks/kyverno-values.yaml create mode 100644 installation/config/eks/opencost-templates-values.yaml create mode 100644 installation/config/eks/opencost-values.yaml create mode 100644 installation/config/eks/prometheus-opencost-exporter-values.yaml create mode 100644 installation/config/eks/prometheus-values.yaml delete mode 100644 installation/config/kind/enabled.yaml create mode 100644 installation/eks.md create mode 100644 installation/env_eks.tmpl diff --git a/README.md b/README.md index eb45a7f..e957f62 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ The FinOps Stack is the blueprint for a solution to automate FinOps best practic Our goal is to empower organisations with the tools they need to manage, visualise, and optimise their cloud resources in complex, ever-changing environments. -The FinOps Stack is designed to work out-of-the-box seamlessly with GKE standard/autopilot clusters using Google Managed Prometheus, and can be customised for an organisation’s business requirements and/or Kubernetes distribution. +The FinOps Stack is designed to work out-of-the-box seamlessly with Kind, GKE standard/autopilot clusters using Google Managed Prometheus, and EKS and can be customised for an organisation’s business requirements and/or Kubernetes distribution. This repository contains the core components of FinOps Stack, including: diff --git a/charts/opencost-config/templates/opencost/dashboards.yaml b/charts/opencost-config/templates/opencost/dashboards.yaml index c91e911..b775af1 100644 --- a/charts/opencost-config/templates/opencost/dashboards.yaml +++ b/charts/opencost-config/templates/opencost/dashboards.yaml @@ -1,3 +1,4 @@ +{{ if .Values.dashboards }} {{- range $path, $_ := .Files.Glob "dashboards/**.json" }} --- apiVersion: v1 @@ -11,3 +12,4 @@ data: {{ base $path }}: |- {{ ($.Files.Get $path) | nindent 6 }} {{ end }} +{{ end }} diff --git a/content/install.md b/content/install.md index 38fb5ba..fada58e 100644 --- a/content/install.md +++ b/content/install.md @@ -8,7 +8,9 @@ To simplify installation, the FinOps Stack is installed using a single Helmfile The following instructions are designed to work with a Kind cluster for quick setup. For full instructions, prerequisites and customisations, please see the [installation README](https://github.com/jetstack/finops-stack/blob/main/installation/README.md). -To work with GKE standard and GKE autopilot see the [ GKE installation guide]((https://github.com/jetstack/finops-stack/blob/main/installation/README.md)) +To work with GKE standard and GKE autopilot see the [ GKE installation guide]((https://github.com/jetstack/finops-stack/blob/main/installation/gke.md)) + +To work with EKS cluster see the [ EKS installation guide]((https://github.com/jetstack/finops-stack/blob/main/installation/eks.md)) ### Helmfile diff --git a/installation/Helmfile_eks.yaml b/installation/Helmfile_eks.yaml new file mode 100644 index 0000000..eae5dd1 --- /dev/null +++ b/installation/Helmfile_eks.yaml @@ -0,0 +1,139 @@ +repositories: +- name: kyverno + url: https://kyverno.github.io/kyverno/ +- name: prometheus-opencost-exporter + url: https://prometheus-community.github.io/helm-charts +- name: prometheus + url: https://prometheus-community.github.io/helm-charts +- name: grafana + url: https://grafana.github.io/helm-charts +- name: vpa + url: https://charts.fairwinds.com/stable +- name: cert-manager + url: https://charts.jetstack.io +- name: fairwinds-stable + url: https://charts.fairwinds.com/stable + +--- +helmDefaults: + wait: true + timeout: 1200 +--- +environments: + default: + values: + - "./config/{{ requiredEnv "HOST_ENV" }}/enabled.yaml" +--- +releases: +- name: kyverno + version: "3.2.6" + chart: kyverno/kyverno + condition: kyverno.enabled + namespace: finops-stack + values: + - "./config/common/kyverno-values.yaml" + - "./config/{{ requiredEnv "HOST_ENV" }}/kyverno-values.yaml" + +- name: finops-policies + version: "0.1.0" + chart: "../charts/finops-policies" + condition: finops-policies.enabled + namespace: finops-stack + disableValidationOnInstall: true + needs: + - kyverno + +- name: cert-manager + version: v1.15.3 + chart: cert-manager/cert-manager + condition: cert-manager.enabled + namespace: cert-manager + values: + - "./config/common/cert-manager-values.yaml" + - "./config/{{ requiredEnv "HOST_ENV" }}/cert-manager-values.yaml" + - global: + leaderElection: + namespace: cert-manager + commonLabels: + cost-center-label: "xyz" + - serviceAccount: + annotations: + {{ env "CERT_MANAGER_SA_ANNOTATION" }} + +- name: cert-manager-config + version: "0.1.0" + chart: "../charts/cert-manager-config" + condition: cert-manager.enabled + namespace: finops-stack + disableValidationOnInstall: true + needs: + - cert-manager/cert-manager + values: + - email: {{ env "CERT_MANAGER_EMAIL" }} + - grafanaTLSCert: + hostname: {{ env "GRAFANA_FQDN" }} + +- name: grafana + version: "8.4.7" + chart: grafana/grafana + condition: grafana.enabled + namespace: finops-stack + values: + - "./config/common/grafana-values.yaml" + - "./config/{{ requiredEnv "HOST_ENV" }}/grafana-values.yaml" + - adminUser: {{ env "GRAFANA_ADMIN_USER" }} + - adminPassword: {{ env "GRAFANA_ADMIN_PW" }} + - serviceAccount: + annotations: + {{ env "GRAFANA_SA_ANNOTATION" }} + + # If you don't require ingress via an FQDN remove this ingress section + - ingress: + enabled: {{ env "GRAFANA_INGRESS" }} + annotations: + kubernetes.io/ingress.global-static-ip-name: {{ env "GRAFANA_PUBLIC_IP_NAME" }} + hosts: + - {{ env "GRAFANA_FQDN" }} + # If you don't require https access to the Grafana dashboard remove this tls section + tls: + - secretName: {{ env "GRAFANA_FQDN" }}-tls + hosts: + - {{ env "GRAFANA_FQDN" }} + needs: + - cert-manager/cert-manager + +- name: vpa + version: "4.5.0" + chart: "vpa/vpa" + condition: vpa.enabled + namespace: finops-stack + values: + - "./config/common/vpa-values.yaml" + +- name: prometheus-opencost-exporter + version: "0.1.1" + chart: "prometheus-opencost-exporter/prometheus-opencost-exporter" + condition: opencost-exporter.enabled + namespace: finops-stack + values: + - "./config/common/prometheus-opencost-exporter-values.yaml" + - "./config/{{ requiredEnv "HOST_ENV" }}/prometheus-opencost-exporter-values.yaml" + +- name: finops-stack-opencost-templates + version: "0.1.0" + chart: "../charts/opencost-config" + condition: opencost-templates.enabled + namespace: finops-stack + disableValidationOnInstall: true + values: + - "./config/{{ requiredEnv "HOST_ENV" }}/opencost-templates-values.yaml" + +- name: goldilocks + version: "9.0.0" + chart: fairwinds-stable/goldilocks + condition: goldilocks.enabled + namespace: finops-stack + values: + - "./config/common/goldilocks-values.yaml" + + diff --git a/installation/Makefile b/installation/Makefile index d1ac14a..f20be81 100644 --- a/installation/Makefile +++ b/installation/Makefile @@ -1,10 +1,5 @@ .DEFAULT_GOAL := help -CLUSTER_NAME := ambient -PROJECT_ID := "$(shell gcloud config get-value project)" -M_TYPE := n1-standard-2 -ZONE := europe-west2-a - cluster: ## Setup cluster kind create cluster diff --git a/installation/README.md b/installation/README.md index 6c8e898..3593680 100644 --- a/installation/README.md +++ b/installation/README.md @@ -1,8 +1,12 @@ -# Installation using Helmfile +# FinOps Stack deployment -Installing Helm charts with lots of dependencies and CRDs is challenging; these instructions use Helmfile to mitigate issues with Helm. +This documentation provides instructions for installing the FinOps Stack in Kind cluster for a quick setup. -This documentation provides instructions for installing the FinOps Stack in Kind cluster for a quick setup. For deployment on a GKE cluster, refer to the [gke docs](./gke.md). +For deployment on a GKE cluster, refer to the [GKE docs](./gke.md) and deployment on a EKS cluster refer to the [EKS docs](./eks.md). + +## Using Helmfile + +Installing Helm charts with lots of dependencies and CRDs is challenging; these instructions use Helmfile to mitigate issues with Helm. ## Pre-requisites diff --git a/installation/config/common/enabled.yaml b/installation/config/common/enabled.yaml index 81f356a..e3a2105 100644 --- a/installation/config/common/enabled.yaml +++ b/installation/config/common/enabled.yaml @@ -14,19 +14,19 @@ grafana: # -- Enable / Disable the installation of cert-manager cert-manager: enabled: false -# -- Enable / Disable the installation of OpenCost -opencost: - enabled: false # -- Enable / Disable the installation of OpenCost Exporter opencost-exporter: enabled: true +# -- Enable / Disable the installation of Prometheus (required when using EKS or Kind) +prometheus: + enabled: false opencost-templates: enabled: true # -- Enable / Disable the installation of GMP Proxy (required when using Google Managed Prometheus) gmp-proxy: - enabled: true + enabled: false # -- Enable / Disable the installation of Fairwinds' Goldilocks goldilocks: diff --git a/installation/config/eks/grafana-values.yaml b/installation/config/eks/grafana-values.yaml new file mode 100644 index 0000000..781dc41 --- /dev/null +++ b/installation/config/eks/grafana-values.yaml @@ -0,0 +1,16 @@ +datasources: + datasources.yaml: + apiVersion: 1 + datasources: + - name: Prometheus + type: prometheus + uid: "PFB5ABA51A8A585D7" + url: http://prometheus-server + isDefault: true + editable: true +ingress: + enabled: false + annotations: + kubernetes.io/ingress.global-static-ip-name: "ip-name" + hosts: + - grafana.example.com diff --git a/installation/config/eks/kyverno-values.yaml b/installation/config/eks/kyverno-values.yaml new file mode 100644 index 0000000..2d4980c --- /dev/null +++ b/installation/config/eks/kyverno-values.yaml @@ -0,0 +1,13 @@ +features: + backgroundScan: + skipResourceFilters: false # Important so that background Scan's Exclude Namespaces, etc +config: + resourceFiltersIncludeNamespaces: + - kube-system + webhooks: + - namespaceSelector: + matchExpressions: + - key: kubernetes.io/metadata.name + operator: NotIn + values: + - kube-system diff --git a/installation/config/eks/opencost-templates-values.yaml b/installation/config/eks/opencost-templates-values.yaml new file mode 100644 index 0000000..3a6f68b --- /dev/null +++ b/installation/config/eks/opencost-templates-values.yaml @@ -0,0 +1,5 @@ +dashboards: true +opencost: + customPricing: + # -- This is only to enable custom pricing on on-premises or kind + enabled: false diff --git a/installation/config/eks/opencost-values.yaml b/installation/config/eks/opencost-values.yaml new file mode 100644 index 0000000..bc6dbdf --- /dev/null +++ b/installation/config/eks/opencost-values.yaml @@ -0,0 +1,18 @@ +cloudCost: + enabled: false +opencost: + cloudCost: + enabled: false + prometheus: + external: + enabled: false + # url: http://prometheus-server + internal: + # -- Use in-cluster Prometheus + enabled: true + # -- Service name of in-cluster Prometheus + serviceName: prometheus-server + # -- Namespace of in-cluster Prometheus + namespaceName: finops-stack + # -- Service port of in-cluster Prometheus + port: 80 diff --git a/installation/config/eks/prometheus-opencost-exporter-values.yaml b/installation/config/eks/prometheus-opencost-exporter-values.yaml new file mode 100644 index 0000000..de70cd1 --- /dev/null +++ b/installation/config/eks/prometheus-opencost-exporter-values.yaml @@ -0,0 +1,27 @@ +service: + enabled: true +opencost: + prometheus: + external: + enabled: false + # url: http://prometheus-server + internal: + # -- Use in-cluster Prometheus + enabled: true + # -- Service name of in-cluster Prometheus + serviceName: prometheus-server + # -- Namespace of in-cluster Prometheus + namespaceName: finops-stack + # -- Service port of in-cluster Prometheus + port: 80 + exporter: + persistence: + enabled: false + # -- Annotations for persistent volume + annotations: {} + # -- Access mode for persistent volume + accessMode: "" + # -- Storage class for persistent volume + storageClass: "standard-rwo" + # -- Size for persistent volume + size: "10g" diff --git a/installation/config/eks/prometheus-values.yaml b/installation/config/eks/prometheus-values.yaml new file mode 100644 index 0000000..8c0a0b1 --- /dev/null +++ b/installation/config/eks/prometheus-values.yaml @@ -0,0 +1,17 @@ +extraScrapeConfigs: | + - job_name: opencost + honor_labels: true + scrape_interval: 1m + scrape_timeout: 10s + metrics_path: /metrics + scheme: http + dns_sd_configs: + - names: + - opencost.opencost + type: 'A' + port: 9003 + +alertmanager: + enabled: false +prometheus-pushgateway: + enabled: false diff --git a/installation/config/gke/opencost-templates-values.yaml b/installation/config/gke/opencost-templates-values.yaml index 92397d3..417b1e2 100644 --- a/installation/config/gke/opencost-templates-values.yaml +++ b/installation/config/gke/opencost-templates-values.yaml @@ -1,2 +1,7 @@ +dashboards: true +opencost: + customPricing: + # -- This is only to enable custom pricing on on-premises or kind + enabled: false gke: - podmonitoring: true \ No newline at end of file + podmonitoring: true diff --git a/installation/config/kind/enabled.yaml b/installation/config/kind/enabled.yaml deleted file mode 100644 index 2c24881..0000000 --- a/installation/config/kind/enabled.yaml +++ /dev/null @@ -1,26 +0,0 @@ -# -- Enable / Disable the installation of Kyverno -kyverno: - enabled: true - -# -- Enable / Disable the installation of Kyverno FinOps Policies -finops-policies: - enabled: true -# -- Enable / Disable the installation of the VPA Controller -vpa: - enabled: true -# -- Enable / Disable the installation of the Grafana -grafana: - enabled: true -# -- Enable / Disable the installation of Prometheus -prometheus: - enabled: true -# -- Enable / Disable the installation of OpenCost Exporter -opencost-exporter: - enabled: true - -opencost-templates: - enabled: true - -# -- Enable / Disable the installation of Fairwinds' Goldilocks -goldilocks: - enabled: true diff --git a/installation/config/kind/opencost-templates-values.yaml b/installation/config/kind/opencost-templates-values.yaml index 93d7d52..c9efd85 100644 --- a/installation/config/kind/opencost-templates-values.yaml +++ b/installation/config/kind/opencost-templates-values.yaml @@ -1,3 +1,4 @@ +dashboards: true opencost: configFileName: default provider: kind diff --git a/installation/eks.md b/installation/eks.md new file mode 100644 index 0000000..879a30c --- /dev/null +++ b/installation/eks.md @@ -0,0 +1,81 @@ +# FinOps Stack on a EKS cluster + +This documentation focuses on installing the FinOps Stack in EKS clusters. + +## Using Helmfile + +Installing Helm charts with lots of dependencies and CRDs is challenging; these instructions use Helmfile to mitigate issues with Helm. + +## Pre-requisites + +- A EKS cluster with: + - kubectl access + - (Optional) If your cluster has Spot Instances, EKS Pod Identities need to be configured. See [documentation](https://www.opencost.io/docs/configuration/aws#eks-pod-identities). +- [Helmfile](https://helmfile.readthedocs.io/en/latest/#installation) installed on your local machine +- Unless you want to access the Grafana dashboard via `kubectl port-forward` you'll need a domain name or external public IP. + +## Installation + +### Configuration changes for your cluster environment + +1. To control which Finops Stack components to install, edit the [enabled.yaml](./installation/config/common/enabled.yaml) file +1. Copy `./env_eks.tmpl` to `./.env` and replace the env var values accordingly. + +### Install everything using Helmfile + +For the first run: + +```bash +set -a; source .env; set +a; helmfile apply --file Helmfile_eks.yaml --interactive +``` + +NOTE: it will take several minutes for all workloads to install and start running. Helmfile does display its progress in the terminal. All workloads get installed into the `finops-stack` namespace so you can also view progress using `kubectl`. + +To speed up subsequent runs: + +```bash +set -a; source .env; set +a; helmfile apply --file Helmfile_eks.yaml --interactive --skip-deps +``` + +## Optional: Making Grafana accessible via DNS + +### Pre-requisites + +Already have an FQDN setup and registered with a public IP, e.g. grafana.example.com + +### Grafana Helm values + +These are specified in `config/common/grafana-values.yaml`, `config/gke/grafana-values.yaml` and under the Grafana release in `helmfile.yaml`. Probably all the changes you will want to make can be done by changing the values in `helmfile.yaml`, e.g. the admin user and what type of ingress you require. + +General guidance when configuring ingress: +- Update the `.env` file with the FQDN and public IP for you domain. +- If you wish to enable tls, then ensure that cert-manager.enabled is set to true and update the values in `.env` accordingly. + +## Enable Goldilocks for namespaces + +For Goldilocks to analyse namespaces and add then to its dashboard you need to add this label to the namespace resource: `goldilocks.fairwinds.com/enabled=true`, e.g. +`kubectl label ns finops-stack goldilocks.fairwinds.com/enabled=true` + +## Useful commands + +To port forward to Grafana: + +```bash +kubectl --namespace finops-stack port-forward service/grafana 3000:80 +``` + +Access via http://localhost:3000 + +To port forward to the metrics endpoint of the Opencost Prometheus exporter (to examine what metrics are being scraped): + +```bash +kubectl --namespace finops-stack port-forward service/prometheus-opencost-exporter 9003:9003 +``` + +To access the Goldilocks dashboard (assuming you've enabled it): + +```bash +kubectl -n finops-stack port-forward svc/goldilocks-dashboard 8080:80 +``` + +Then goto http://localhost:8080 \ No newline at end of file diff --git a/installation/env_eks.tmpl b/installation/env_eks.tmpl new file mode 100644 index 0000000..5a8b849 --- /dev/null +++ b/installation/env_eks.tmpl @@ -0,0 +1,19 @@ +# Sub-dir under ./config that holds your hosting env specific Helm values.files, e.g. gke +HOST_ENV=eks + +# -- AWS secret access key and access key id +AWS_SECRET_ACCESS_KEY="" +AWS_ACCESS_KEY_ID="" + +# Grafana admin user credentials +GRAFANA_ADMIN_USER=finops +GRAFANA_ADMIN_PW=s7@ck + +# Grafana ingress settings +GRAFANA_INGRESS="false" +# GRAFANA_PUBLIC_IP_NAME="name-of-public-ip" +# GRAFANA_FQDN="grafana.host.name" + +## GCP SA for workload identity for cert-manager (need to be defined but only used if cert-manager is being installed) +CERT_MANAGER_SA_ANNOTATION="" +CERT_MANAGER_EMAIL="issuer@example.com" diff --git a/installation/gke.md b/installation/gke.md index 710cf35..378f4c3 100644 --- a/installation/gke.md +++ b/installation/gke.md @@ -1,9 +1,11 @@ -# Installation using Helmfile - -Installing Helm charts with lots of dependencies and CRDs is challenging; these instructions use Helmfile to mitigate issues with Helm. +# FinOps Stack on a GKE cluster This documentation focuses on installing the FinOps Stack in GKE standard/autopilot clusters. +## Using Helmfile + +Installing Helm charts with lots of dependencies and CRDs is challenging; these instructions use Helmfile to mitigate issues with Helm. + ## Pre-requisites - A GKE standard or autopilot cluster with: @@ -27,14 +29,14 @@ This documentation focuses on installing the FinOps Stack in GKE standard/autopi ### Configuration changes for your cluster environment 1. To control which Finops Stack components to install, edit the [enabled.yaml](./installation/config/common/enabled.yaml) file -1. Copy `./env.tmpl` to `./.env` and replace the env var values accordingly. As a minimum, you will need to change the `GCP_PROJECT`, `CSP_API_KEY`, `GRAFANA_SA_ANNOTATION` values. +1. Copy `./env_gke.tmpl` to `./.env` and replace the env var values accordingly. As a minimum, you will need to change the `GCP_PROJECT`, `CSP_API_KEY`, `GRAFANA_SA_ANNOTATION` values. ### Install everything using Helmfile For the first run: ```bash -set -a; source .env; set +a; helmfile apply --interactive +set -a; source .env; set +a; helmfile apply --file Helmfile_gke.yaml --interactive ``` NOTE: it will take several minutes for all workloads to install and start running. Helmfile does display its progress in the terminal. All workloads get installed into the `finops-stack` namespace so you can also view progress using `kubectl`. From 075ff61aa47f47eed827982e207711b65baf93ea Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 18 Feb 2025 11:58:18 +0000 Subject: [PATCH 5/8] Bump the python-dependencies group with 2 updates (#44) Bumps the python-dependencies group with 2 updates: [mkdocs-material](https://github.com/squidfunk/mkdocs-material) and [mkdocs-material[imaging]](https://github.com/squidfunk/mkdocs-material). Updates `mkdocs-material` from 9.6.3 to 9.6.4 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.3...9.6.4) Updates `mkdocs-material[imaging]` from 9.6.3 to 9.6.4 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.3...9.6.4) --- updated-dependencies: - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: mkdocs-material[imaging] dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 7724376..01ee76b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,8 +2,8 @@ mkdocs==1.6.1 mkdocs-get-deps==0.2.0 mkdocs-git-revision-date-localized-plugin==1.3.0 mkdocs-include-markdown-plugin==7.1.4 -mkdocs-material==9.6.3 -mkdocs-material[imaging]==9.6.3 +mkdocs-material==9.6.4 +mkdocs-material[imaging]==9.6.4 mkdocs-material-extensions==1.3.1 mkdocs-minify-plugin==0.8.0 pymdown-extensions==10.14.3 From abe803acb90616c065e8ed6cab3609e71188572a Mon Sep 17 00:00:00 2001 From: maria-reynoso Date: Thu, 13 Mar 2025 16:43:39 +0100 Subject: [PATCH 6/8] Update content --- content/architecture.md | 2 +- content/intro.md | 2 +- installation/gke.md | 5 +++-- 3 files changed, 5 insertions(+), 4 deletions(-) diff --git a/content/architecture.md b/content/architecture.md index 6426de2..eae2a65 100644 --- a/content/architecture.md +++ b/content/architecture.md @@ -7,7 +7,7 @@ FinOps Stack makes use of a wide range of software to provide a highly efficient - **[Goldilocks](https://www.fairwinds.com/goldilocks)**: Fairwinds Goldilocks is designed to provide 'just-right' recommendations for container requests and limits. It does this by using the Vertical Pod Autoscaler in recommendation mode. Additional guidance on interpresting and setting resource requests and limits can be found in our [GKE Autopilot guide](./distribution-gke-autopilot.md). - **[Vertical Pod Autoscaler](https://github.com/kubernetes/autoscaler/blob/master/vertical-pod-autoscaler/README.md)**: frees users from the necessity of setting up-to-date resource limits and requests for the containers in their pods. When configured, it will set the requests automatically based on usage and thus allow proper scheduling onto nodes so that appropriate resource amount is available for each pod. - **[Grafana](https://grafana.com/grafana/)**: An open-source platform used for monitoring and visualising time-series data from various sources, allowing users to create interactive and real-time dashboards for metrics, logs, and analytics. The FinOps Stack uses Grafana to provide visualisations of cost and efficiency metrics. -- **gmp-proxy**: A proxy designed to simplify the integration between open-source Grafana and Google Managed Prometheus. +- **gmp-proxy**: A proxy designed to simplify the integration between open-source Grafana and Google Managed Prometheus (if using a GKE cluster). - **[Cert-Manager](https://cert-manager.io/)**: An open source tool that provides certificate management for Kubernetes. In the FinOps Stack, cert-manager can be optionally installed to create a tls certificate if using ingress for Grafana. diff --git a/content/intro.md b/content/intro.md index f0c58cc..6011208 100644 --- a/content/intro.md +++ b/content/intro.md @@ -6,7 +6,7 @@ The FinOps Stack is the blueprint for a solution to automate FinOps best practic Our goal is to empower organisations with the tools they need to manage, visualise, and optimise their cloud resources in complex, ever-changing environments. -The FinOps Stack is designed to work out-of-the-box seamlessly with GKE standard/autopilot clusters using Google Managed Prometheus, and can be customised for an organisation’s business requirements and/or Kubernetes distribution. Additionally, there is an option to deploy the FinOps Stack on a Kind cluster for a quick setup, allowing you to explore its functionality. +The FinOps Stack is designed to work out-of-the-box seamlessly with GKE standard/autopilot clusters using [Google Managed Prometheus](https://cloud.google.com/stackdriver/docs/managed-prometheus), or with an EKS cluster using standard Prometheus. It can be customised for an organisation’s business requirements and/or Kubernetes distribution. Additionally, for a quick setup and exploration, the FinOps Stack can be deployed on a Kind cluster. ## Key Features and Capabilities diff --git a/installation/gke.md b/installation/gke.md index 378f4c3..ff3f12d 100644 --- a/installation/gke.md +++ b/installation/gke.md @@ -11,7 +11,8 @@ Installing Helm charts with lots of dependencies and CRDs is challenging; these - A GKE standard or autopilot cluster with: - kubectl access - cluster-admin permissions - - workload identity enabled + - workload identity enabled + - [Google Managed Prometheus](https://cloud.google.com/stackdriver/docs/managed-prometheus) enabled. - [Helmfile](https://helmfile.readthedocs.io/en/latest/#installation) installed on your local machine - A Google Service Account with the following: - roles/monitor.viewer and roles/iam.serviceAccountTokenCreator permissions @@ -29,7 +30,7 @@ Installing Helm charts with lots of dependencies and CRDs is challenging; these ### Configuration changes for your cluster environment 1. To control which Finops Stack components to install, edit the [enabled.yaml](./installation/config/common/enabled.yaml) file -1. Copy `./env_gke.tmpl` to `./.env` and replace the env var values accordingly. As a minimum, you will need to change the `GCP_PROJECT`, `CSP_API_KEY`, `GRAFANA_SA_ANNOTATION` values. +1. Copy `./env_gke.tmpl` to `./.env` and replace the env var values accordingly. As a minimum, you will need to change the `GCP_PROJECT`, `CSP_API_KEY`, `GRAFANA_SA_ANNOTATION` values. ### Install everything using Helmfile From 853e1e666959da7b2ba278da26933c31a51f07d8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 11 Jul 2025 16:47:50 +0100 Subject: [PATCH 7/8] Bump the python-dependencies group across 1 directory with 6 updates (#50) Bumps the python-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [mkdocs-git-revision-date-localized-plugin](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin) | `1.3.0` | `1.4.5` | | [mkdocs-include-markdown-plugin](https://github.com/mondeja/mkdocs-include-markdown-plugin) | `7.1.4` | `7.1.5` | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.6.4` | `9.6.12` | | [mkdocs-material[imaging]](https://github.com/squidfunk/mkdocs-material) | `9.6.4` | `9.6.12` | | [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) | `10.14.3` | `10.15` | | [diagrams](https://github.com/mingrammer/diagrams) | `0.24.1` | `0.24.4` | Updates `mkdocs-git-revision-date-localized-plugin` from 1.3.0 to 1.4.5 - [Release notes](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin/releases) - [Commits](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin/compare/v1.3.0...v1.4.5) Updates `mkdocs-include-markdown-plugin` from 7.1.4 to 7.1.5 - [Release notes](https://github.com/mondeja/mkdocs-include-markdown-plugin/releases) - [Commits](https://github.com/mondeja/mkdocs-include-markdown-plugin/compare/v7.1.4...v7.1.5) Updates `mkdocs-material` from 9.6.4 to 9.6.12 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.4...9.6.12) Updates `mkdocs-material[imaging]` from 9.6.4 to 9.6.12 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.4...9.6.12) Updates `pymdown-extensions` from 10.14.3 to 10.15 - [Release notes](https://github.com/facelessuser/pymdown-extensions/releases) - [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.14.3...10.15) Updates `diagrams` from 0.24.1 to 0.24.4 - [Release notes](https://github.com/mingrammer/diagrams/releases) - [Changelog](https://github.com/mingrammer/diagrams/blob/master/CHANGELOG.md) - [Commits](https://github.com/mingrammer/diagrams/compare/v0.24.1...v0.24.4) --- updated-dependencies: - dependency-name: mkdocs-git-revision-date-localized-plugin dependency-version: 1.4.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: mkdocs-include-markdown-plugin dependency-version: 7.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: mkdocs-material dependency-version: 9.6.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: mkdocs-material[imaging] dependency-version: 9.6.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pymdown-extensions dependency-version: '10.15' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: diagrams dependency-version: 0.24.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements.txt | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/requirements.txt b/requirements.txt index 01ee76b..0c11364 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,13 +1,13 @@ mkdocs==1.6.1 mkdocs-get-deps==0.2.0 -mkdocs-git-revision-date-localized-plugin==1.3.0 -mkdocs-include-markdown-plugin==7.1.4 -mkdocs-material==9.6.4 -mkdocs-material[imaging]==9.6.4 +mkdocs-git-revision-date-localized-plugin==1.4.5 +mkdocs-include-markdown-plugin==7.1.5 +mkdocs-material==9.6.12 +mkdocs-material[imaging]==9.6.12 mkdocs-material-extensions==1.3.1 mkdocs-minify-plugin==0.8.0 -pymdown-extensions==10.14.3 +pymdown-extensions==10.15 readtime==3.0.0 paginate==0.5.7 mkdocs-git-revision-date-localized-plugin -diagrams==0.24.1 +diagrams==0.24.4 From f55148ee97f313dca7ad25c4e9f2c8ddb6705787 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 11 Jul 2025 16:48:09 +0100 Subject: [PATCH 8/8] Bump golang.org/x/net in /scripts/chart-dep-updater (#46) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.28.0 to 0.33.0. - [Commits](https://github.com/golang/net/compare/v0.28.0...v0.33.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- scripts/chart-dep-updater/go.mod | 2 +- scripts/chart-dep-updater/go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/chart-dep-updater/go.mod b/scripts/chart-dep-updater/go.mod index 36b10e3..4c584af 100644 --- a/scripts/chart-dep-updater/go.mod +++ b/scripts/chart-dep-updater/go.mod @@ -90,7 +90,7 @@ require ( go.opentelemetry.io/otel/trace v1.28.0 // indirect go.starlark.net v0.0.0-20240725214946-42030a7cedce // indirect golang.org/x/crypto v0.31.0 // indirect - golang.org/x/net v0.28.0 // indirect + golang.org/x/net v0.33.0 // indirect golang.org/x/oauth2 v0.22.0 // indirect golang.org/x/sync v0.10.0 // indirect golang.org/x/sys v0.28.0 // indirect diff --git a/scripts/chart-dep-updater/go.sum b/scripts/chart-dep-updater/go.sum index 36ff1d5..68dc946 100644 --- a/scripts/chart-dep-updater/go.sum +++ b/scripts/chart-dep-updater/go.sum @@ -349,8 +349,8 @@ golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwY golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY= -golang.org/x/net v0.28.0 h1:a9JDOJc5GMUJ0+UDqmLT86WiEy7iWyIhz8gz8E4e5hE= -golang.org/x/net v0.28.0/go.mod h1:yqtgsTWOOnlGLG9GFRrK3++bGOUEkNBoHZc8MEDWPNg= +golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I= +golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4= golang.org/x/oauth2 v0.22.0 h1:BzDx2FehcG7jJwgWLELCdmLuxk2i+x9UDpSiss2u0ZA= golang.org/x/oauth2 v0.22.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI= golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=