Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migrate goformation under pkg/ as a local package and remove location re-write #8219

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

bryantbiggs
Copy link
Member

@bryantbiggs bryantbiggs commented Feb 14, 2025

Description

  • Migrate goformation under pkg/ as a local package and remove location re-write
    • This removes the second set of dependencies and treats it as a local package, not a remote module

This is to resolve the reported security findings shown here https://github.com/eksctl-io/eksctl/security/dependabot

This is a repeat of #8153 which was reverted since it was caught up in the changes with the failed build image #8157

The steps used to create this PR are as follows (to better understand due to large number of path re-write changes):

  1. Move the goformation directory under pkg/
  2. Remove the goformation references from the main go.mod file
  3. Remove go.mod and go.sum from pkg/goformation/*
  4. Re-write paths for goformation (find ./ -type f -name '*.go' -exec sed -i 's|awslabs/goformation/v4|weaveworks/eksctl/pkg/goformation|g' {} \;)
  5. Run go mod tidy
  6. Run make build
  7. Run make unit-test-no-generate to test

image

Checklist

  • Added tests that cover your change (if possible)
  • Added/modified documentation as required (such as the README.md, or the userdocs directory)
  • Manually tested
  • Made sure the title of the PR is a good description that can go into the release notes
  • (Core team) Added labels for change area (e.g. area/nodegroup) and kind (e.g. kind/improvement)

BONUS POINTS checklist: complete for good vibes and maybe prizes?! 🤯

  • Backfilled missing tests for code in same general area 🎉
  • Refactored something and made the world a better place 🌟

@bryantbiggs bryantbiggs added skip-release-notes Causes PR not to show in release notes dependencies Pull requests that update a dependency file area/tech-debt Leftover improvements in code, testing and building labels Feb 14, 2025
@cheeseandcereal
Copy link
Member

Thanks, running integration tests on this to see if anything breaks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/tech-debt Leftover improvements in code, testing and building dependencies Pull requests that update a dependency file skip-release-notes Causes PR not to show in release notes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants