[bitnami/openldap] Add support for setting the password crypt format

.github/workflows/ci-pipeline.yml

@@ -61,7 +61,7 @@ jobs:
       pull-requests: write
     needs: get-containers
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         name: Checkout Repository
         with:
           ref: ${{ github.event.pull_request.head.ref }}
@@ -89,10 +89,10 @@ jobs:
       needs.get-containers.outputs.result == 'ok' &&
       github.event.pull_request.user.login != 'bitnami-bot'
     name: VIB Verify
-    permissions: 
+    permissions:
       contents: read
     env:
-      CSP_API_URL: https://console.cloud.vmware.com
+      CSP_API_URL: https://console.tanzu.broadcom.com
       CSP_API_TOKEN: ${{ secrets.CSP_API_TOKEN }}
       VIB_PUBLIC_URL: https://cp.bromelia.vmware.com
     continue-on-error: false
@@ -102,7 +102,7 @@ jobs:
       matrix:
         container: ${{ fromJSON(needs.get-containers.outputs.containers) }}
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
         name: Checkout Repository
         with:
           # Full history is not required anymore

.github/workflows/markdown-linter.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Install mardownlint
         run: npm install -g [email protected]
       - name: Checkout project
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
       - name: Execute markdownlint
         env:
           DIFF_URL: "${{github.event.pull_request.diff_url}}"

.github/workflows/pr-reviews.yml

@@ -23,7 +23,7 @@ jobs:
           echo "::notice:: Comment on PR #${{ github.event.pull_request.number }}"
           jq -n --arg issue '${{ github.event.pull_request.number }}' --arg state '${{ github.event.review != null && github.event.review.state || '' }}' '{"issue": {"number": $issue }, "review": { "state": $state }}' > pull_request_info.json
       - name: Upload the PR info
-        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874
         with:
           name: pull_request_info.json
           path: ./pull_request_info.json

.vib/magento/vib-verify.json → .vib/chainloop-artifact-cas/vib-verify.json

@@ -3,8 +3,7 @@
     "resources": {
       "url": "{SHA_ARCHIVE}",
       "path": "{VIB_ENV_PATH}"
-    },
-    "runtime_parameters": "Y29tbWFuZDogWyJ0YWlsIiwgIi1mIiwgIi9kZXYvbnVsbCJd"
+    }
   },
   "phases": {
     "package": {
@@ -34,21 +33,6 @@
     },
     "verify": {
       "actions": [
-        {
-          "action_id": "goss",
-          "params": {
-            "resources": {
-              "path": "/.vib"
-            },
-            "tests_file": "magento/goss/goss.yaml",
-            "vars_file": "magento/goss/vars.yaml",
-            "remote": {
-              "pod": {
-                "workload": "deploy-magento"
-              }
-            }
-          }
-        },
         {
           "action_id": "trivy",
           "params": {

.vib/dokuwiki/vib-verify.json → .vib/chainloop-control-plane-migrations/vib-verify.json

@@ -3,8 +3,7 @@
     "resources": {
       "url": "{SHA_ARCHIVE}",
       "path": "{VIB_ENV_PATH}"
-    },
-    "runtime_parameters": "Y29tbWFuZDogWyJ0YWlsIiwgIi1mIiwgIi9kZXYvbnVsbCJd"
+    }
   },
   "phases": {
     "package": {
@@ -34,21 +33,6 @@
     },
     "verify": {
       "actions": [
-        {
-          "action_id": "goss",
-          "params": {
-            "resources": {
-              "path": "/.vib"
-            },
-            "tests_file": "dokuwiki/goss/goss.yaml",
-            "vars_file": "dokuwiki/goss/vars.yaml",
-            "remote": {
-              "pod": {
-                "workload": "deploy-dokuwiki"
-              }
-            }
-          }
-        },
         {
           "action_id": "trivy",
           "params": {

.vib/chainloop-control-plane/vib-verify.json

@@ -0,0 +1,57 @@
+{
+  "context": {
+    "resources": {
+      "url": "{SHA_ARCHIVE}",
+      "path": "{VIB_ENV_PATH}"
+    }
+  },
+  "phases": {
+    "package": {
+      "actions": [
+        {
+          "action_id": "container-image-package",
+          "params": {
+            "application": {
+              "details": {
+                "name": "{VIB_ENV_CONTAINER}",
+                "tag": "{VIB_ENV_TAG}"
+              }
+            },
+            "architectures": [
+              "linux/amd64",
+              "linux/arm64"
+            ]
+          }
+        },
+        {
+          "action_id": "container-image-lint",
+          "params": {
+            "threshold": "error"
+          }
+        }
+      ]
+    },
+    "verify": {
+      "actions": [
+        {
+          "action_id": "trivy",
+          "params": {
+            "threshold": "LOW",
+            "vuln_type": [
+              "OS"
+            ]
+          }
+        },
+        {
+          "action_id": "grype",
+          "params": {
+            "threshold": "CRITICAL",
+            "package_type": [
+              "OS"
+            ]
+          }
+        }
+      ]
+    }
+  }
+}

.vib/deepspeed/goss/deepspeed.yaml

@@ -9,5 +9,5 @@ user:
 command:
   check-necessary-libraries:
     exec: python -c 'import deepspeed; print(deepspeed.__version__); import torch; print(torch.__version__); import torchvision; print(torchvision.__version__)'
-    timeout: 8000
+    timeout: 20000
     exit-status: 0

.vib/grafana/goss/vars.yaml

@@ -2,10 +2,10 @@ binaries:
   - grafana
 root_dir: /opt/bitnami
 version:
-  # HACK: Temporary fix for Grafana 11.1.2 which had an incorrect version set
+  # HACK: Temporary fix for Grafana 11.1.3 which had an incorrect version set
   # https://github.com/grafana/grafana/issues/90947
   bin_name: bash
-  flag: -c "if [[ \"$APP_VERSION\" = \"11.1.2\" ]]; then echo 11.1.2; else grafana --version; fi"
+  flag: -c "if [[ \"$APP_VERSION\" = \"11.1.3\" ]]; then echo 11.1.3; else grafana --version; fi"
 files:
   - mode: "0664"
     paths:

.vib/mediawiki/goss/goss.yaml → .vib/keydb/goss/goss.yaml

@@ -3,8 +3,9 @@
 
 gossfile:
   # Goss tests exclusive to the current container
-  ../../mediawiki/goss/mediawiki.yaml: {}
+  ../../keydb/goss/keydb.yaml: {}
   # Load scripts from .vib/common/goss/templates
+  ../../common/goss/templates/check-app-version.yaml: {}
   ../../common/goss/templates/check-binaries.yaml: {}
   ../../common/goss/templates/check-broken-symlinks.yaml: {}
   ../../common/goss/templates/check-ca-certs.yaml: {}

.vib/keydb/goss/keydb.yaml

@@ -0,0 +1,31 @@
+# Copyright Broadcom, Inc. All Rights Reserved.
+# SPDX-License-Identifier: APACHE-2.0
+
+file:
+  /opt/bitnami/keydb/etc/keydb.conf:
+    exists: true
+    mode: "0664"
+    contents:
+      - /port.*6379/
+      - /dir.*/bitnami/keydb/data/
+      - /pidfile.*/opt/bitnami/keydb/tmp/keydb.pid/
+      - "daemonize yes"
+command:
+  check-keydb-server:
+    exec: keydb-server /opt/bitnami/keydb/etc/keydb.conf && sleep 5 && ps aux
+    exit-status: 0
+    timeout: 20000
+    stdout:
+      - /keydb-server.*(127.0.0.1|localhost).*6379/
+  check-keydb-server-ssl:
+    exec: ldd /opt/bitnami/keydb/bin/keydb-server
+    exit-status: 0
+    stdout:
+      - "libcrypto.so"
+      - "libssl.so"
+  check-keydb-cli-ssl:
+    exec: ldd /opt/bitnami/keydb/bin/keydb-cli
+    exit-status: 0
+    stdout:
+      - "libcrypto.so"
+      - "libssl.so"

.vib/keydb/goss/vars.yaml

@@ -0,0 +1,16 @@
+binaries:
+  - keydb-cli
+  - keydb-server
+  - wait-for-port
+directories:
+  - mode: "0775"
+    paths:
+      - /bitnami
+      - /bitnami/keydb
+      - /bitnami/keydb/data
+      - /opt/bitnami/keydb
+      - /opt/bitnami/keydb/etc
+root_dir: /opt/bitnami
+version:
+  bin_name: keydb-server
+  flag: --version