E2e cover uninstall

.devcontainer/devcontainer.json

@@ -0,0 +1,34 @@
+// For format details, see https://aka.ms/devcontainer.json. For config options, see the
+// README at: https://github.com/devcontainers/templates/tree/main/src/go
+{
+	"name": "Go",
+	// Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
+	"image": "mcr.microsoft.com/devcontainers/go:1-1.22-bookworm",
+	// Features to add to the dev container. More info: https://containers.dev/features.
+	"features": {
+		"ghcr.io/devcontainers/features/docker-in-docker:2": {},
+		"ghcr.io/devcontainers-contrib/features/kind:1": {},
+		"ghcr.io/rio/features/k9s:1": {},
+		"ghcr.io/devcontainers/features/kubectl-helm-minikube:1": {
+			"version": "latest",
+			"helm": "latest",
+			"minikube": "none"
+		}
+	},
+	// Configure tool-specific properties.
+	"customizations": {
+		"vscode": {
+			"extensions": [
+				"ms-vscode.makefile-tools",
+				"mutantdino.resourcemonitor",
+				"golang.go"
+			]
+		}
+	}
+	// Use 'forwardPorts' to make a list of ports inside the container available locally.
+	// "forwardPorts": [],
+	// Use 'postCreateCommand' to run commands after the container is created.
+	// "postCreateCommand": "go version",
+	// Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
+	// "remoteUser": "root"
+}

.github/dependabot.yaml

@@ -58,3 +58,7 @@ updates:
     labels:
       - "kind/cleanup"
       - "area/build-and-release"
+  - package-ecosystem: "devcontainers"
+    directory: "/"
+    schedule:
+      interval: weekly

.github/workflows/ci.yaml

@@ -1,6 +1,9 @@
 name: Run CI checks
 
-on: [pull_request, workflow_dispatch]
+on:
+  pull_request:
+    types: [opened, edited, synchronize, reopened, labeled, unlabeled]
+  workflow_dispatch:
 
 jobs:
   ci:

.github/workflows/codeql.yml

@@ -5,6 +5,7 @@ on:
     branches: [ "main", "release-*" ]
   pull_request:
     branches: [ "main" ]
+    types: [opened, edited, synchronize, reopened, labeled, unlabeled]
   schedule:
     - cron: '45 15 * * *'
 

.github/workflows/dependabot.yml

@@ -0,0 +1,36 @@
+name: dependabot
+
+on:
+  pull_request:
+    types: [opened, edited, synchronize, reopened, labeled, unlabeled]
+    branches:
+      - dependabot/**
+  push:
+    branches:
+      - dependabot/**
+  workflow_dispatch:
+
+permissions:
+  contents: write # Allow to update the PR.
+
+jobs:
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    steps:
+    - name: Set up Go 1.x
+      uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # tag=v3.5.0
+      with:
+        go-version: 1.22.0
+      id: go
+    - name: Check out code into the Go module directory
+      uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # tag=v3.3.0
+    - name: Update generated code
+      run: make generate
+    - uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # tag=v9.1.4
+      name: Commit changes
+      with:
+        author_name: dependabot[bot]
+        author_email: 49699333+dependabot[bot]@users.noreply.github.com
+        default_author: github_actor
+        message: 'Update generated code'

.github/workflows/e2e-long.yaml

@@ -2,47 +2,45 @@ name: Run nightly e2e tests
 
 on:
   schedule:
-   - cron: "0 0 1/2 * *"
+    - cron: "0 0 1/2 * *"
   workflow_dispatch:
 
 concurrency: ci_e2e_tests
 
 jobs:
   e2e_import_gitops:
-      uses: ./.github/workflows/run-e2e-suite.yaml
-      with:
-        test_suite: $(pwd)/test/e2e/suites/import-gitops
-        test_name: Import via GitOps
-        run_azure_janitor: false
-        artifact_name: artifacts_import_gitops
-      secrets: inherit
+    uses: ./.github/workflows/run-e2e-suite.yaml
+    with:
+      test_suite: $(pwd)/test/e2e/suites/import-gitops
+      test_name: Import via GitOps
+      run_azure_janitor: false
+      artifact_name: artifacts_import_gitops
+      use_eks: true
+    secrets: inherit
   e2e_v2prov:
-      if: ${{ always() }}
-      needs: e2e_import_gitops
-      uses: ./.github/workflows/run-e2e-suite.yaml
-      with:
-        test_suite: $(pwd)/test/e2e/suites/v2prov
-        test_name: v2 provisioning
-        run_azure_janitor: true
-        artifact_name: artifacts_v2prov
-      secrets: inherit
+    uses: ./.github/workflows/run-e2e-suite.yaml
+    with:
+      test_suite: $(pwd)/test/e2e/suites/v2prov
+      test_name: v2 provisioning
+      run_azure_janitor: true
+      artifact_name: artifacts_v2prov
+      use_eks: true
+    secrets: inherit
   e2e_update_labels:
-      if: ${{ always() }}
-      needs: e2e_v2prov
-      uses: ./.github/workflows/run-e2e-suite.yaml
-      with:
-        test_suite: $(pwd)/test/e2e/suites/update-labels
-        test_name: Update labels
-        run_azure_janitor: true
-        artifact_name: artifacts_update_labels
-      secrets: inherit
+    uses: ./.github/workflows/run-e2e-suite.yaml
+    with:
+      test_suite: $(pwd)/test/e2e/suites/update-labels
+      test_name: Update labels
+      run_azure_janitor: true
+      artifact_name: artifacts_update_labels
+      use_eks: true
+    secrets: inherit
   e2e_embedded_capi_disabled:
-      if: ${{ always() }}
-      needs: e2e_update_labels
-      uses: ./.github/workflows/run-e2e-suite.yaml
-      with:
-        test_suite: $(pwd)/test/e2e/suites/embedded-capi-disabled
-        test_name: Update labels
-        run_azure_janitor: false
-        artifact_name: artifacts_embedded_capi
-      secrets: inherit
+    uses: ./.github/workflows/run-e2e-suite.yaml
+    with:
+      test_suite: $(pwd)/test/e2e/suites/embedded-capi-disabled
+      test_name: Update labels
+      run_azure_janitor: false
+      artifact_name: artifacts_embedded_capi
+      use_eks: true
+    secrets: inherit

.github/workflows/e2e-short.yaml

@@ -2,24 +2,25 @@ name: Run short e2e tests
 
 on:
   pull_request:
+    types: [opened, edited, synchronize, reopened, labeled, unlabeled]
 
 jobs:
   e2e:
     runs-on: ubuntu-latest
     steps:
-    - name: Checkout
-      uses: actions/checkout@v4
-      with:
-        fetch-depth: 0
-    - name: setupGo
-      uses: actions/setup-go@v5
-      with:
-        go-version: '=1.22.0'
-    - name: Run e2e tests
-      run: ISOLATED_MODE=true GINKGO_LABEL_FILTER=short make test-e2e
-    - name: Collect run artifacts
-      if: always()
-      uses: actions/upload-artifact@v4
-      with:
-        name: artifacts
-        path: _artifacts
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: setupGo
+        uses: actions/setup-go@v5
+        with:
+          go-version: "=1.22.0"
+      - name: Run e2e tests
+        run: ISOLATED_MODE=true  USE_EKS=false GINKGO_LABEL_FILTER=short make test-e2e
+      - name: Collect run artifacts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: artifacts
+          path: _artifacts

.github/workflows/golangci-lint.yml

@@ -2,7 +2,7 @@ name: golangci-lint
 
 on:
   pull_request:
-    types: [opened, edited, synchronize, reopened]
+    types: [opened, edited, synchronize, reopened, labeled, unlabeled]
 
 # Remove all permissions from GITHUB_TOKEN except metadata.
 permissions: {}

.github/workflows/lint.yaml

@@ -2,7 +2,7 @@ name: Lint
 
 on:
   pull_request:
-    types: [opened, edited, synchronize, reopened]
+    types: [opened, edited, synchronize, reopened, labeled, unlabeled]
 
 # Remove all permissions from GITHUB_TOKEN except metadata.
 permissions: {}

.github/workflows/nightly-chart-and-image-publish.yaml

@@ -8,7 +8,7 @@ on:
 env:
   TAG: v0.0.0-${{ github.sha }}
   REGISTRY: ghcr.io
-  PROD_ORG: rancher-sandbox
+  PROD_ORG: rancher
 
 jobs:
   build-and-publish-ghcr:
@@ -52,7 +52,7 @@ jobs:
         with:
           ref: ${{ github.ref }}
       - name: Install Helm
-        uses: Azure/setup-helm@v3
+        uses: Azure/setup-helm@v4
         with:
           version: 3.8.0
       - name: Build Helm chart

.github/workflows/nightly-test-release.yaml

@@ -39,7 +39,7 @@ jobs:
     strategy:
       matrix:
         destination: [ghcr]
-        arch: [amd64, arm64, s390x]
+        arch: [amd64, arm64]
         include:
         - destination: ghcr
           registry: ghcr.io
@@ -96,7 +96,7 @@ jobs:
     runs-on: ubuntu-latest
     env:
       PROD_REGISTRY: ${{ secrets.REGISTRY_ENDPOINT }}
-      PROD_ORG: rancher-sandbox
+      PROD_ORG: rancher
       RELEASE_DIR: .cr-release-packages
     steps:
       - name: Checkout
@@ -155,7 +155,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: dev-drprasad/delete-tag-and-release@v1.0
+      - uses: dev-drprasad/delete-tag-and-release@v1.1
         with:
           tag_name: ${{ env.RELEASE_TAG }}
           github_token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pr-md-link-check.yaml

@@ -2,7 +2,7 @@ name: PR check Markdown links
 
 on:
   pull_request:
-    types: [opened, edited, synchronize, reopened]
+    types: [opened, edited, synchronize, reopened, labeled, unlabeled]
     paths:
       - '**.md'
 

.github/workflows/pr_size_labeler.yml

@@ -1,6 +1,8 @@
 name: PR Size Labeler
 
-on: [pull_request]
+on:
+  pull_request:
+    types: [opened, edited, synchronize, reopened, labeled, unlabeled]
 
 jobs:
   labeler:

.github/workflows/pr_type.yaml

@@ -2,12 +2,7 @@ name: PR Type
 
 on:
   pull_request:
-    types:
-      - opened
-      - synchronize
-      - reopened
-      - labeled
-      - unlabeled
+    types: [opened, edited, synchronize, reopened, labeled, unlabeled]
 
 jobs:
   check_pull_request_type:

.github/workflows/release-workflow.yml

@@ -40,7 +40,7 @@ on:
         type: string
         description: Organization part of the image name
         required: false
-        default: "rancher-sandbox"
+        default: "rancher"
 
 jobs:
   build:
@@ -87,7 +87,7 @@ jobs:
         with:
           image: ${{ format('{0}-{1}', vars[inputs.image], inputs.arch) }}
           digest: ${{ needs.build.outputs.digest }}
-          identity: https://github.com/${{ inputs.org }}/rancher-turtles/.github/workflows/release-workflow.yml@${{ github.ref }}
+          identity: https://github.com/${{ inputs.org }}/turtles/.github/workflows/release-workflow.yml@${{ github.ref }}
           oids-issuer: https://token.actions.githubusercontent.com
           registry: ${{ inputs.secret_registry && secrets[inputs.registry] || inputs.registry }}
           username: ${{ inputs.secret_registry && secrets[inputs.username] || inputs.username }}
@@ -99,7 +99,7 @@ jobs:
       actions: read
       id-token: write
       packages: write
-    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.9.0
+    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.10.0
     with:
       digest: ${{ needs.build.outputs.digest }}
       image: ${{ format('{0}-{1}', vars[inputs.image], inputs.arch) }}

.github/workflows/release.yaml

@@ -17,7 +17,7 @@ jobs:
     strategy:
       matrix:
         destination: [ghcr, prod]
-        arch: [amd64, arm64, s390x]
+        arch: [amd64, arm64]
         include:
         - destination: ghcr
           registry: ghcr.io
@@ -88,7 +88,7 @@ jobs:
       TAG: ${{ github.ref_name }}
       CONTROLLER_IMG: ${{ vars.REGISTRY_IMAGE }}
       PROD_REGISTRY: ${{ secrets.REGISTRY_ENDPOINT }}
-      PROD_ORG: rancher-sandbox
+      PROD_ORG: rancher
       RELEASE_DIR: .cr-release-packages
       CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
     steps:

.github/workflows/release_build/action.yaml

@@ -12,7 +12,7 @@ inputs:
   org:
     description: "Organization part of the image path"
     required: false
-    default: "rancher-sandbox"
+    default: "rancher"
     type: string
   registry:
     description: "The registry to login"

.github/workflows/release_sign/action.yaml

@@ -43,7 +43,7 @@ runs:
         registry: ${{ inputs.registry }}
         username: ${{ inputs.username }}
         password: ${{ inputs.password }}
-    - uses: sigstore/cosign-installer@v3.1.2
+    - uses: sigstore/cosign-installer@v3.4.0
     - name: Sign manifests
       shell: bash
       env: