Initial IBM VPC Block csi driver code

.secrets.baseline

@@ -0,0 +1,94 @@
+{
+  "exclude": {
+    "files": "go.sum|^.secrets.baseline$",
+    "lines": null
+  },
+  "generated_at": "2021-06-17T08:30:05Z",
+  "plugins_used": [
+    {
+      "name": "AWSKeyDetector"
+    },
+    {
+      "name": "ArtifactoryDetector"
+    },
+    {
+      "base64_limit": 4.5,
+      "name": "Base64HighEntropyString"
+    },
+    {
+      "name": "BasicAuthDetector"
+    },
+    {
+      "name": "BoxDetector"
+    },
+    {
+      "name": "CloudantDetector"
+    },
+    {
+      "ghe_instance": "github.ibm.com",
+      "name": "GheDetector"
+    },
+    {
+      "hex_limit": 3,
+      "name": "HexHighEntropyString"
+    },
+    {
+      "name": "IbmCloudIamDetector"
+    },
+    {
+      "name": "IbmCosHmacDetector"
+    },
+    {
+      "name": "JwtTokenDetector"
+    },
+    {
+      "keyword_exclude": null,
+      "name": "KeywordDetector"
+    },
+    {
+      "name": "MailchimpDetector"
+    },
+    {
+      "name": "PrivateKeyDetector"
+    },
+    {
+      "name": "SlackDetector"
+    },
+    {
+      "name": "SoftlayerDetector"
+    },
+    {
+      "name": "StripeDetector"
+    },
+    {
+      "name": "TwilioKeyDetector"
+    }
+  ],
+  "results": {
+    "Dockerfile.dependencycheck": [
+      {
+        "hashed_secret": "6184d6847d594ec75c4c07514d4bb490d5e166df",
+        "is_secret": false,
+        "is_verified": false,
+        "line_number": 2,
+        "type": "Secret Keyword",
+        "verified_result": null
+      }
+    ],
+    "examples/kubernetes/volume-tags-secret.yaml": [
+      {
+        "hashed_secret": "0106042722c6adff7499c14630c97f323a27f690",
+        "is_secret": false,
+        "is_verified": false,
+        "line_number": 3,
+        "type": "Base64 High Entropy String",
+        "verified_result": null
+      }
+    ]
+  },
+  "version": "0.13.1+ibm.38.dss",
+  "word_list": {
+    "file": null,
+    "hash": null
+  }
+}

Dockerfile

@@ -0,0 +1,30 @@
+#FROM alpine:3.7
+ARG PROXY_IMAGE_URL=blank
+FROM "${PROXY_IMAGE_URL}"/armada-master/ibm-storage-ubi8:8.4-200.16
+
+# Default values
+ARG git_commit_id=unknown
+ARG git_remote_url=unknown
+ARG build_date=unknown
+ARG jenkins_build_number=unknown
+ARG REPO_SOURCE_URL=blank
+ARG BUILD_URL=blank
+
+# Add Labels to image to show build details
+LABEL git-commit-id=${git_commit_id}
+LABEL git-remote-url=${git_remote_url}
+LABEL build-date=${build_date}
+LABEL jenkins-build-number=${jenkins_build_number}
+LABEL razee.io/source-url="${REPO_SOURCE_URL}"
+LABEL razee.io/build-url="${BUILD_URL}"
+
+#RUN apk update && apk --no-cache add ca-certificates nfs-utils rpcbind
+RUN microdnf update && microdnf install -y ca-certificates
+
+RUN mkdir -p /home/ibm-csi-drivers/
+ADD ibm-vpc-block-csi-driver /home/ibm-csi-drivers
+RUN chmod +x /home/ibm-csi-drivers/ibm-vpc-block-csi-driver
+
+USER 2121:2121
+
+ENTRYPOINT ["/home/ibm-csi-drivers/ibm-vpc-block-csi-driver"]

Dockerfile.builder

@@ -0,0 +1,10 @@
+FROM golang:1.16
+
+WORKDIR /go/src/github.com/IBM/ibm-vpc-block-csi-driver
+ADD . /go/src/github.com/IBM/ibm-vpc-block-csi-driver
+
+ARG TAG
+ARG OS
+ARG ARCH
+
+CMD ["./scripts/build-bin.sh"]

Dockerfile.dependencycheck

@@ -0,0 +1,12 @@
+FROM wcp-alchemy-containers-team-access-redhat-docker-remote.artifactory.swg-devops.com/ubi8/ubi-minimal
+ARG ARTIFACTORY_API_KEY=blank
+ENV DEP_CHECK_VER 5.3.2
+ENV JAVA_HOME /usr
+RUN microdnf update -y && microdnf install java-11-openjdk-devel zip findutils golang make
+RUN curl -sLH "X-JFrog-Art-Api:${ARTIFACTORY_API_KEY}" "https://na.artifactory.swg-devops.com/artifactory/wcp-alchemy-containers-team-github-generic-remote/jeremylong/DependencyCheck/releases/download/v${DEP_CHECK_VER}/dependency-check-${DEP_CHECK_VER}-release.zip" -o /tmp/dependency-check-${DEP_CHECK_VER}-release.zip
+RUN cd /tmp && unzip dependency-check-${DEP_CHECK_VER}-release.zip
+RUN chmod +x /tmp/dependency-check/bin/dependency-check.sh
+ADD . /src
+RUN rm -rf /src/build-tools /src/go*.tar.gz
+WORKDIR /src
+ENTRYPOINT [ "make", "analyzedeps" ]

Makefile

@@ -0,0 +1,132 @@
+#
+# Copyright 2019 IBM Corp.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+EXE_DRIVER_NAME=ibm-vpc-block-csi-driver
+DRIVER_NAME=vpcBlockDriver
+IMAGE = contsto2/${EXE_DRIVER_NAME}
+GOPACKAGES=$(shell go list ./... | grep -v /vendor/ | grep -v /cmd | grep -v /tests)
+VERSION := latest
+PROXY_IMAGE_URL:="registry.ng.bluemix.net"
+
+GIT_COMMIT_SHA="$(shell git rev-parse HEAD 2>/dev/null)"
+GIT_REMOTE_URL="$(shell git config --get remote.origin.url 2>/dev/null)"
+BUILD_DATE="$(shell date -u +"%Y-%m-%dT%H:%M:%SZ")"
+ARCH=$(shell docker version -f {{.Client.Arch}})
+OSS_FILES := go.mod Dockerfile
+
+# Jenkins vars. Set to `unknown` if the variable is not yet defined
+BUILD_NUMBER?=unknown
+GO111MODULE_FLAG?=on
+export GO111MODULE=$(GO111MODULE_FLAG)
+
+export LINT_VERSION="1.27.0"
+
+COLOR_YELLOW=\033[0;33m
+COLOR_RESET=\033[0m
+
+.PHONY: all
+all: deps fmt build test buildimage
+
+.PHONY: driver
+driver: deps buildimage
+
+.PHONY: deps
+deps:
+	echo "Installing dependencies ..."
+	#glide install --strip-vendor
+	go mod download
+	go get github.com/pierrre/gotestcover
+	@if ! which golangci-lint >/dev/null || [[ "$$(golangci-lint --version)" != *${LINT_VERSION}* ]]; then \
+		curl -sfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(shell go env GOPATH)/bin v${LINT_VERSION}; \
+	fi
+
+.PHONY: fmt
+fmt: lint
+	golangci-lint run --disable-all --enable=gofmt --timeout 600s
+	@if [ -n "$$(golangci-lint run)" ]; then echo 'Please run ${COLOR_YELLOW}make dofmt${COLOR_RESET} on your code.' && exit 1; fi
+
+.PHONY: dofmt
+dofmt:
+	golangci-lint run --disable-all --enable=gofmt --fix --timeout 600s
+
+.PHONY: lint
+lint:
+	golangci-lint run --timeout 600s
+
+.PHONY: build
+build:
+	CGO_ENABLED=0 GOOS=$(shell go env GOOS) GOARCH=$(shell go env GOARCH) go build -mod=vendor -a -ldflags '-X main.vendorVersion='"${DRIVER_NAME}-${GIT_COMMIT_SHA}"' -extldflags "-static"' -o ${GOPATH}/bin/${EXE_DRIVER_NAME} ./cmd/
+
+.PHONY: test
+test:
+	$(GOPATH)/bin/gotestcover -v -race -short -coverprofile=cover.out ${GOPACKAGES}
+	go tool cover -html=cover.out -o=cover.html  # Uncomment this line when UT in place.
+
+.PHONY: ut-coverage
+ut-coverage: deps fmt test
+
+.PHONY: buildimage
+buildimage: build-systemutil
+	docker build	\
+        --build-arg git_commit_id=${GIT_COMMIT_SHA} \
+        --build-arg git_remote_url=${GIT_REMOTE_URL} \
+        --build-arg build_date=${BUILD_DATE} \
+        --build-arg jenkins_build_number=${BUILD_NUMBER} \
+        --build-arg REPO_SOURCE_URL=${REPO_SOURCE_URL} \
+        --build-arg BUILD_URL=${BUILD_URL} \
+        --build-arg PROXY_IMAGE_URL=${PROXY_IMAGE_URL} \
+	-t $(IMAGE):$(VERSION)-$(ARCH) -f Dockerfile .
+ifeq ($(ARCH), amd64)
+	docker tag $(IMAGE):$(VERSION)-$(ARCH) $(IMAGE):$(VERSION)
+endif
+
+.PHONY: build-systemutil
+build-systemutil:
+	docker build --build-arg TAG=$(GIT_COMMIT_SHA) --build-arg OS=linux --build-arg ARCH=$(ARCH) -t csi-driver-builder --pull -f Dockerfile.builder .
+	docker run --env GHE_TOKEN=${GHE_TOKEN} csi-driver-builder
+	docker cp `docker ps -q -n=1`:/go/bin/${EXE_DRIVER_NAME} ./${EXE_DRIVER_NAME}
+
+.PHONY: test-sanity
+test-sanity: deps fmt
+	SANITY_PARAMS_FILE=./csi_sanity_params.yaml go test -timeout 60s ./tests/sanity -run ^TestSanity$$ -v
+
+.PHONY: clean
+clean:
+	rm -rf ${EXE_DRIVER_NAME}
+	rm -rf $(GOPATH)/bin/${EXE_DRIVER_NAME}
+
+.PHONY: runanalyzedeps
+runanalyzedeps:
+	@docker build --rm --build-arg ARTIFACTORY_API_KEY="${ARTIFACTORY_API_KEY}"  -t armada/analyze-deps -f Dockerfile.dependencycheck .
+	docker run -v `pwd`/dependency-check:/results armada/analyze-deps
+
+.PHONY: analyzedeps
+analyzedeps:
+	/tmp/dependency-check/bin/dependency-check.sh --enableExperimental --log /results/logfile --out /results --disableAssembly \
+		--suppress /src/dependency-check/suppression-file.xml --format JSON --prettyPrint --failOnCVSS 0 --scan /src
+
+.PHONY: showanalyzedeps
+showanalyzedeps:
+	grep "VULNERABILITY FOUND" dependency-check/logfile;
+	cat dependency-check/dependency-check-report.json |jq '.dependencies[] | select(.vulnerabilities | length>0)';
+
+.PHONY: updatebaseline
+updatebaseline:
+	detect-secrets scan --update .secrets.baseline --all-files --exclude-files go.sum --db2-scan
+
+.PHONY: auditbaseline
+auditbaseline:
+	detect-secrets audit .secrets.baseline