prepare for v0.13.0 release

- update to Go 1.15.7
- add release artifacts script (copied from Helm)
- add KEYS file containing maintainer signing keys
- update Makefile to follow Helm release process
- update dependencies (including auth and storage)
- rename masterHandler to rootHandler
- add get-chartmuseum script (based on get-helm-3 script)
- remove unused scripts and make targets for old release process
- modify README with new install instructions and docker image
- rename scripts to use dashes vs underscores

Signed-off-by: Josh Dolitsky <[email protected]>

.github/workflows/build-pr.yml

@@ -14,7 +14,7 @@ jobs:
       - name: setup go environment
         uses: actions/setup-go@v1
         with:
-          go-version: '1.15.4'
+          go-version: '1.15.7'
       - name: download dependencies
         run: make bootstrap
       - name: run unit tests
@@ -35,4 +35,3 @@ jobs:
           name: chartmuseum-acceptance-report-${{ github.sha }}
           path: .robot/
         if: always()
-

.github/workflows/build.yml

@@ -1,13 +1,9 @@
 name: build
 
 on:
-
-  # TODO: renable cron after moving off of Docker Hub
-  # schedule:
-  #   - cron: '0 0 * * *' # everyday at midnight UTC
-
   push:
-    branches: main
+    branches:
+      - main
     tags:
       - v*
 
@@ -20,7 +16,7 @@ jobs:
       - name: setup go environment
         uses: actions/setup-go@v1
         with:
-          go-version: '1.15.4'
+          go-version: '1.15.7'
       - name: download dependencies
         run: make bootstrap
       - name: run unit tests
@@ -29,74 +25,70 @@ jobs:
         run: make build-linux
       - name: run acceptance tests
         run: sudo pip install virtualenv && make acceptance
-      - name: upload coverage report
-        uses: actions/upload-artifact@master
-        with:
-          name: chartmuseum-coverage-report-${{ github.sha }}
-          path: .cover/
-        if: always()
-      - name: upload acceptance test report
-        uses: actions/upload-artifact@master
-        with:
-          name: chartmuseum-acceptance-report-${{ github.sha }}
-          path: .robot/
-        if: always()
       - name: Prepare
         id: prepare
         run: |
-          DOCKER_IMAGE=chartmuseum/chartmuseum
+          DOCKER_IMAGE=ghcr.io/helm/chartmuseum
           DOCKER_PLATFORMS=linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/386
-          VERSION=edge
+          VERSION=canary
 
           if [[ $GITHUB_REF == refs/tags/* ]]; then
-            VERSION=${GITHUB_REF#refs/tags/v}
+            VERSION=${GITHUB_REF#refs/tags/}
           fi
 
-          if [ "${{ github.event_name }}" = "schedule" ]; then
-            VERSION=nightly
-          fi
-
-          TAGS="--tag ${DOCKER_IMAGE}:${VERSION} --tag ${DOCKER_IMAGE}:latest"
+          TAGS="--tag ${DOCKER_IMAGE}:${VERSION}"
 
           echo ::set-output name=docker_image::${DOCKER_IMAGE}
           echo ::set-output name=version::${VERSION}
           echo ::set-output name=buildx_args::--platform ${DOCKER_PLATFORMS} \
             --build-arg revision=$(git rev-parse --short HEAD) \
             ${TAGS} .
-      -
-        name: Set up QEMU
+      - name: Release artifacts
+        id: release-artifacts
+        env:
+          AZURE_STORAGE_CONNECTION_STRING: ${{ secrets.AZURE_STORAGE_CONNECTION_STRING }}
+          AZURE_STORAGE_CONTAINER_NAME: ${{ secrets.AZURE_STORAGE_CONTAINER_NAME }}
+        run: |
+          VERSION="${{ steps.prepare.outputs.version }}" ./scripts/release-artifacts.sh
+      - name: Set up QEMU
         uses: docker/setup-qemu-action@v1
         with:
           platforms: all
-      -
-        name: Set up Docker Buildx
+      - name: Set up Docker Buildx
         id: buildx
         uses: docker/setup-buildx-action@v1
         with:
           version: latest
-      -
-        name: Available platforms
+      - name: Available platforms
         run: echo ${{ steps.buildx.outputs.platforms }}
       - name: Docker Buildx (build)
         run: |
           docker buildx build --no-cache --pull --output "type=image,push=false" ${{ steps.prepare.outputs.buildx_args }}
       - name: Docker Login
-        if: success() && github.event_name != 'pull_request'
-        env:
-          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
-          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
-        run: |
-          echo "${DOCKER_PASSWORD}" | docker login --username "${DOCKER_USERNAME}" --password-stdin
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{ secrets.CR_USER_SCBIZU }}
+          password: ${{ secrets.CR_PAT_SCBIZU }}
       - name: Docker Buildx (push)
-        if: success() && github.event_name != 'pull_request'
         run: |
           docker buildx build --output "type=image,push=true" ${{ steps.prepare.outputs.buildx_args }}
       - name: Docker Check Manifest
-        if: always() && github.event_name != 'pull_request'
         run: |
           docker run --rm mplatform/mquery ${{ steps.prepare.outputs.docker_image }}:${{ steps.prepare.outputs.version }}
       - name: Clear
-        if: always() && github.event_name != 'pull_request'
+        if: always()
         run: |
           rm -f ${HOME}/.docker/config.json
-
+      - name: upload coverage report
+        uses: actions/upload-artifact@master
+        with:
+          name: chartmuseum-coverage-report-${{ github.sha }}
+          path: .cover/
+        if: always()
+      - name: upload acceptance test report
+        uses: actions/upload-artifact@master
+        with:
+          name: chartmuseum-acceptance-report-${{ github.sha }}
+          path: .robot/
+        if: always()

.gitignore

@@ -21,4 +21,5 @@ index.yaml
 mirror/
 testbin/
 cmd/chartmuseum/debug
-vendor
+vendor
+_dist/

Dockerfile

@@ -2,9 +2,9 @@
 
 FROM golang:alpine
 
-ARG version=0.12.0
+ARG version=0.13.0
 
-ARG revision=master
+ARG revision=main
 
 COPY . /go/src/github.com/helm/chartmuseum
 

KEYS

@@ -0,0 +1,137 @@
+This file contains the PGP keys of developers who have signed releases of ChartMuseum.
+
+For your convenience, commands are provided for those who use pgp and gpg.
+
+For users to import keys:
+       pgp < KEYS
+       or
+       gpg --import KEYS
+
+Developers to add their keys:
+        pgp -kxa <your name> and append it to this file.
+        or
+        (pgpk -ll <your name> && pgpk -xa <your name>) >> KEYS
+        or
+        (gpg --list-sigs <your name>
+             && gpg --armor --export <your name>) >> KEYS
+
+pub   rsa4096 2021-01-14 [C] [expires: 2031-01-12]
+      E97F9DA5AE2E39CF48A142B7852A7470A39FB81D
+uid           [ unknown] Josh Dolitsky <[email protected]>
+sig 3        852A7470A39FB81D 2021-01-14  Josh Dolitsky <[email protected]>
+sub   rsa4096 2021-01-14 [E] [expires: 2031-01-12]
+sig          852A7470A39FB81D 2021-01-14  Josh Dolitsky <[email protected]>
+sub   rsa4096 2021-01-14 [S] [expires: 2031-01-12]
+sig          852A7470A39FB81D 2021-01-14  Josh Dolitsky <[email protected]>
+sub   rsa4096 2021-01-14 [A] [expires: 2031-01-12]
+sig          852A7470A39FB81D 2021-01-14  Josh Dolitsky <[email protected]>
+
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQINBGAA1BEBEADQj7kE8cu7jXwdsYqTN35MJzhahwjKH211TU3+YkbWmBunGKCD
+T2xpgfTJZJFMYcNIp8t8UZ15PVi1dgLe+E4bL3n1YnzcC2BWZZKPYWPXr9IlnTqX
+COEk7kTpcHp2kKXjKIuh+kexzahtjHcgGSzORgY98bU6wiNF3CtRRGtHYJO4WdO6
+OiuO4h997D9MxXR5zvr7JdpdsBAZpF5e+o9Syyguon4bN1CYSwborqW4PBM2bt8N
+SWQ+kTv1Az7udAMjLyGq5fT7FouOpFXo1qxUv12vR1gXOoppDTbilVaewPGW0Jla
+BdgQZM5tHlnfa63N5fLbPz6HvdusoEGNpaq6lsE80imcyiWkyu1xZ1sgHqovSEeW
+1NP0CZtV/CvPl5FSUcNrPcNkA+UoM+uSEaz9De6W4w8A0x240NneVCE/WtlZBi0t
+/NWYVQpNJ+IjgYeee5jj1wo5cxubHotCoIunQwO54h42qWHhnOb3yCo+iYOFa179
+bBciq0m/k2ZSYeQizrT1IDQlSGS7YDpNSu5AZboxkC0fVZG65Dxea/pP/TrRmNZK
+e0uIEqgKm3mItmyuOiLxJT/HI5D/HF51IMbMz/+lqI5kmUMfhWH2v4EPRI4NWj+B
+WKOaRp3j/TiuAoh1LsVT8MlvU6fu+gakIuN/srUp4abOBjN/xfLwlp8pGQARAQAB
+tB5Kb3NoIERvbGl0c2t5IDxqb3NoQGRvbGl0LnNraT6JAlQEEwEIAD4WIQTpf52l
+ri45z0ihQreFKnRwo5+4HQUCYADUEQIbAQUJEswDAAULCQgHAgYVCgkICwIEFgID
+AQIeAQIXgAAKCRCFKnRwo5+4HSJFD/4q8xgdpz8QW9RM9DjUqwUvcYQgyF1uKxQr
+WXwvSD+Yfny76mQSIK5TjoTGYBWCAH+ANCveyeLPdLtxh+OsiRpyAW3ek3JtuCgz
+kTUO6zryq4yxsQA/xXb1jsUqyx9NZ7mZlJf1OZOgEVsRbEMAvA6XtH+UpcWY44yc
+hdiBSonCbVpteudFlskE/Ljp1zaQNirmPt87jo8lGBC3vFjoFmSisByDoJwzdkDF
+pCmDYXOKYA+yXSMTnKrpJhC6wnD9pOROM1zRQ/JVxxymH9NAVKTX0U5fvm/3AFKF
+QBSomqkEgVTYWmezeWW7z6hBcYILw0iXdf7Wf/lcaBHSLOpA9f6mQqM0NvUGFUPy
+JE6gUs/v6cHe2w/vsWn3ytcxelOrjlRCAMrS4hnKrJ2kJ2bfQdNXGGbw/ULWPqGj
+4w5XpH6rPSMYm/vEEXEBqCdo/ASf+pukoegv7UaqZF+a6B7sHU7wsyk1m6T2TIcA
+gKESt+qWXxvXYtvo03tGTw7ap7RXEw5ob3e2jSQzZd+WeMVB33orWJcaRyfZ3x+5
+yUhA6oBEP2pQEM0SRHhe/5X1tL96heeUoaJpHO5lQuNje0cJZhq6DPboT44iM1Ut
+yQsvMpoRkctCfi7brGoAHOJAxoQALZixyCwYyStN5wzjdb64UFIwtDckLHgp+tGe
+VhboNwQd/bkCDQRgANTcARAAvnpSk5lXtXoNoH3qDTyorqu+BG2WA8zGCLx1D0C/
+UKwr5TO0Hju5LN278Wzfl/kJYanDGutDVmy9I2EsWN0mgzYtVwF+MtZqCs87i5EU
+F0pX4fwUylDJfjvbuPEE6+BBZ7CMszzJrdgZ6xwJruWYDl4JOOUIfy//SXL3ff6J
+B32r8qTpC7/62sR3FH6EvdO65khgU4KLxyTR/WGNGcPmBRAyMPLqFkmKFwtCJpFg
+fH00+eM2foQmHYhBjjLihT25m1YWGy1xeCjTzoCWzU0QCQVCyDpAwWD6XsRT6Qo5
+M3j80abNm6JSjV2eWVloArlqh45MqeoDoNfd1Sj7BmhBXPLldz0H5jtdpaCOtBbV
+pdPovSa2vVJhh2B4LeTy11kHi6rQRjMtWdypHe8oSGfx/j3ysY9FJXduCRGZajw6
+SjhEMaefYEIAV5Pl4SM0dMrl37WLCJZy/RH6YIrxw9Z+W6srjR6jT0MLXJFP/iAg
+evGXWNWnhmFBIKUAp2H3H0BUaFjYg74IFY+4G2TSya53CWiQ4PRYZW+9LzzYROLe
+WW3t0xE+I8jx74uNrDP9IeLrch2PateN4Izn1cuAmoFFRjH+11IOXbGMJcE4VDaP
+i4p9x8gm8q0xWjG2K+lLUpvAf1CFD7KV4wkHq3xpVJyGBWEmuWjQAqsKAehNt2D5
+tfEAEQEAAYkCPAQYAQgAJhYhBOl/naWuLjnPSKFCt4UqdHCjn7gdBQJgANTcAhsM
+BQkSzAMAAAoJEIUqdHCjn7gdvQQP/2Q1P+Ir/D8wLgggEdGacDpDCWcXF2SsFcdP
+27YKf/t5SPsIBRiEs4smDX44lWQDOjN3kAIi/qgSNLdos8H2K86BN1mGkL76Ryo4
+eomJjALOeJKDG2fGR0aT1Dc4Nv/IkxumrcWF8UgNSxyzjTCginJWcbHGCGTxrwj3
+k/gqNunjgrUBw69lC7H5TiJH1CYRVYCgtnkrGK+26/fyzCcF7W5d7Vfy9z5iZcTa
+ElF4Lbs41XtF36l2Q3+OJmW38PYx8bGSzEG0rGnZklLZUJhQJenbOUjMO/5dNBt0
+n2c+TwTrwbY3GiB+wUVMtAWioGeT7FR05mz/qmfbdWShSJVvGqibcqpf6uhZ1h4g
+XjRmPiAuT2JDZioFB53xu/Kd66WYcbvWhzfhkoHHTotPK1jTdmixTEnpmGghG8X1
+8nj/dkuMoTpXefdMLJlNxXnRCV7filgl2xGKn8ekweo6dYz/DtLUW/b7UGUHN6oM
+x/zeWzzZZx8glB6y9CYOvLbkkU8AB73I+lehCXoo+nGLFfGZWjyqLWWIbTTt+116
+PuNzKlAJxko/QNLn3s7kvBWFjU2pAlY9e+ecV3yqPj2rQ/wMtOGwDks2ETc8JHvs
+lInKYqwP3leUG1E9rc4jI5kJt1WkMvLyrkAFhcCqImMxpi80V6tDuecLc02gP0o8
+yFnrUyXauQINBGAA1a8BEADu6Ru60JLvE84Xfgd4NQe7RDuEif22H8OxjK2RTniP
+Y7DZxebD0HqClcatMrBK6UUqDJkI8Y1iKQ84yElOlmLkFrLeow16s8vta8mCUgSY
+QgYDDVjVYheqKKrizjD4xBWPiVSWhELtN/rbeF1POB3zrJPe7z3Fi9pgVCd7OP3a
+O8EELOzxGoS1Hjw7xvyQQXp4CUDRUV7pLi217OYFx54nrmqzES+IZrIC2l4a0tOK
+BEh3Vp2ij0RPZUJrw4Z5+XfH2wiONzGA29dKCEUpQQ+bw+yya2Borjq7go7/frXB
+caUlVNSsxkhl9NTbenovxZZ3oxr32PUKz3N/kAf8eN+KFIBoBXsLrWaIa5UV7jnr
+NhD3WlEdtJs+nJ7zZ6PAE2P/AkChYmOP7S58XbhatH295Mea8fwo4UsY2H7X07lg
+Cjfl68VMQwIRzsTn7Zj8DNFpFVm+YXiRL14iNepWFpyONlDmkdt1uSrFxeau2mw7
+rdMyaSJaLhssTlv/ucQo8RT+xlU15mC3/B+3hD50vPcLaEnpmnUc6alKsFY3LYtZ
+mI8q+CPgo/30lbJ2c/vlSkZgbc95GPqaN+rCyTyVjmKGn+W5kwvSmCoF9jALcrdP
+EDveV+Jx5V9v/kNU8UyMAlXPs5A2HxY+XocQ7GlysnrUZ5Teojx2Ot565WSIT6tR
+3wARAQABiQRyBBgBCAAmFiEE6X+dpa4uOc9IoUK3hSp0cKOfuB0FAmAA1a8CGwIF
+CRLMAwACQAkQhSp0cKOfuB3BdCAEGQEIAB0WIQQ6ZPpjpSRSehAOwKmyuTZzJDpl
++wUCYADVrwAKCRCyuTZzJDpl+8rwD/0YcT4Zc2XNeZfNFLXpKzdhZNvbc+j9NLi2
+h3IdDU+Jh1QHyIZUPKjN+xpmuP+8NIzab8JDnoVPrhOx4vyFRlXEeQU492Y+UJ2z
+YeHirFJNO6P6jFnMCCnn4bOY1aiRqkFB8zWxGEfdPfVz1HMAX9AbCFjDx6FCLw82
+tlXbBH01sfsbC590RZh5K79GOQEcFYf10TEwDNOaft3d5/80RpOAa0kHV5SyMwPr
+s/+EWImfm6KkoMI7DiGCjR6n8UGQM6kmt4sMiDGa90ANcNN9ZTdClY1BS6bmAyyJ
+S0jqWv4i8mTBgNRHaSlLf/ECUJN4Fepsc6BB/BNyn1fIfl/g6kwxfqRuHURXUXLA
+MOGvB1/UaxoFiWeH0igJ1G8xPDVJv749UMKxw4epHtVRs7r8BGvCV7Jcih5kicp6
+XGcGnsSp4ckefel63VfsfCdXg9ZanyfFS0A4Lx0MoRBIKuKz1/vfIGuRpwl5ynHM
+i8hwo8P1D/QlKXgnJGLemtKhNdpKt7IiknG2S9HxJU4mO8zN/DoUShgBFzLFlm4q
+RAY9tLUt7NiKGzuY4JAqKO1ghI7I+BtbXV4r39QFHzZD6RF7Cy5hG4RAm6qNyWz7
+qydMGrMGZ+8332AqSsh2fZyI2v+iofbJEUrka1B661UVs5hXl6dC7h7z+pALhqgd
+JP2FDe8nw61zD/9DHHG3tMAcpOk8Thnz4ym39Z1dUsDtFeI+S5kUDee4n42PdKY9
+WHxZovQmiPNKwyDM/JME1fngnRCTa/Ovclfm0/RoYBqDVJE4cyXSlZcAnlsHl3K1
+mun6wEXONzgZrv1R6Vz+vz1Xbhd2g+NajW9reDOGjv4Clmbgqmo3xGXw2bZArFr5
+ixYCGmMLc2dx1FqfaHewyuUWClK6YwOxLZjnLyMD4IoxrMlslQfDXJT9xPNuWcSW
+Bp7ShYysf8Rg0/wkdhtP2rI2aI2F3HlqSSpfgSXuqCTx+BxA14kCH90ZN9/2/UZH
+LoloPEhfa2RkHHhpTG8ePJpZMsbJXbs6E60tmdrE7nWd/ALNIXEWAxnXB+ihjytc
+nwismGaUY7YVGfVH4u3G8WW+dPF3dJdxsPMTWYK06CVDBN31+XMG6UiKNSf1ueYn
+pDUCXKEs2NefO66oOYrWKaSXzBUt/tFjoGBbBQ3rLCCrvAQSLgtzpu3nRYdTZzMt
+yb57U3ybVc2ctqwOz4V5QIBZNDAqyVMyAOUPDbkaagGnbBmOYmTxyUg+hlXFLDV5
+yUwtJSekMpD8rqqAYn6qmMT+Q6xLmnsUuhuubivWOqBmoCFXldCMX1mVPjNOCNmk
+H5nQNUUoWCHM/BiQ3y7UUGF+63uYGPsmMBX/n0P0WxDkr4rL+GcwTrbixLkCDQRg
+ANXzARAA01L9vOMqENPb3LLe04G9LraTLxLI6Oq75yw0GpyZaeSllMPDx+EW4x3U
+6RMiZHsmD9xWMBffJuDtiUDFcxvJSgPcVSeMgWeV+6kd9mk5A70KsrPrS17/uizG
+BjH5MGyIpwJbSBdZD2Mk2eoURPhyR9OYPw1ho1lASVH2J3vN4c1rcVs9Gt7KXNfp
+S6/9vW/H1c9xCHv2Nv5o5+4kqEYDl54d8kFNUuOywUSw2V2b9ay33uCSqdxm/CHp
+1jM2fM/v4AY6+87Nvveo2G805PZ4WKyn9OqP1w+0m54mLT32jsMJ1eJmk+k/dBq+
+uZzgngXXcvBoP2r+ukGZjfXeDUfoLg5TssiFGr0sBl72ICEv5vNrMnvFg+MiDW/J
+yIi2zeZ2k8Fpk97V3mkj7DPNKOP32ng+cDigViwTmUaSjrd5yRrYOP2owsG/jdvb
+1TDLB2l3DT0lqBgyR/BMtQiy5upUZ5oLuKz5Nl6havMkQYHfwMxQHGR4mo5hrnH4
+CNj9zM4iNcGXmxCfOwSSUyOJZyTXggvic15KjFrDlE23e7sEh9yhuIScHrKm+q+6
+euDLp6JKYkAcuPBKAh4htMImHHnVY4l+vXIpONtpz/WWCkhEfS8GA/N7f9yMtLdS
+V3Ylsc7DrPpevv1SgAKqHuHOokOHlU4jOjAHoKXlfOvh3y2dyM0AEQEAAYkCPAQY
+AQgAJhYhBOl/naWuLjnPSKFCt4UqdHCjn7gdBQJgANXzAhsgBQkSzAMAAAoJEIUq
+dHCjn7gdXb4P/3ZBg4ngwgQWCKV/TGdWoNmJGQbyPzzO2vFGlz37VODyeenJOSHU
+sZzTuf2mKHaDtl77Mu8dpFALZVbmfp0a3teezF/Tpy2EtEQKIlDnzLQb8USOzQOK
+RA5Q8PG4m6hFcwCylIYL+M6YN9tGDEBZsh/wG5Blwuzp7Y3hd4UMEj6vTZOQ5vQv
+wrZ/jK8EUrqBJbB4pFZQxPWRNrZy0usPS24kU8EwegaV9qjDdjHIPfVwb9LPkNan
+9DxGe/2rdQdeFtiEyRR781BzFtL1QhWm7CpJyOWe4PioYUeN+dBgELi9w0FX5JaO
+7TpDUUYZj45+1Rr9lxhZQ/Y/kK46R1Ur4+01+YtgU9fu9ABPKPSeDmXtCDHapSzn
+dkyHZ5Ia1KSSxQegHDqXKxluUUxr+/XlFp128ZMJvOcRvnMzovL5Cahe8uVMKY0N
+Y++t8FEM/pPROP1VM4QORzStbT0UyriHsTDmIzOWd2hs7izs4nNDBUHaTm/iN8q2
+RfjfEI/WPhGnuW/Fx2FxaNWeXJYocSxHK/Koy3imrkNvCrWp+RfXCSCdWpnN+vCi
+qZRI3XlFaYW8sNx1l7nUUBgLCQuIaA6ooyGRI/sMm7esn9eoCrwqW3n/VrEi/vot
+ltoSftjahxmK/stXWFa0lmnRez7jcK4DV/wjtVuNt7cQa51Vfz/RMfze
+=uijW
+-----END PGP PUBLIC KEY BLOCK-----