pepr 0.21.1 → 0.22.1

package/package.json

@@ -9,7 +9,7 @@
   "engines": {
     "node": ">=18.0.0"
   },
-  "version": "0.21.1",
+  "version": "0.22.1",
   "main": "dist/lib.js",
   "types": "dist/lib.d.ts",
   "scripts": {
@@ -17,14 +17,16 @@
     "prebuild": "rm -fr dist/* && npm run gen-data-json",
     "build": "tsc && node build.mjs",
     "test": "npm run test:unit && npm run test:journey",
-    "test:unit": "npm run gen-data-json && jest src --coverage --detectOpenHandles",
+    "test:unit": "npm run gen-data-json && jest src --coverage --detectOpenHandles --coverageDirectory=./coverage",
     "test:journey": "npm run test:journey:k3d && npm run test:journey:build && npm run test:journey:image && npm run test:journey:run",
+    "test:journey:prep": "git clone https://github.com/defenseunicorns/pepr-upgrade-test.git",
     "test:journey-wasm": "npm run test:journey:k3d && npm run test:journey:build && npm run test:journey:image && npm run test:journey:run-wasm",
     "test:journey:k3d": "k3d cluster delete pepr-dev && k3d cluster create pepr-dev --k3s-arg '--debug@server:0' --wait && kubectl rollout status deployment -n kube-system",
     "test:journey:build": "npm run build && npm pack",
     "test:journey:image": "docker buildx build --tag pepr:dev . && k3d image import pepr:dev -c pepr-dev",
-    "test:journey:run": "jest --detectOpenHandles journey/entrypoint.test.ts",
+    "test:journey:run": "jest --detectOpenHandles journey/entrypoint.test.ts && npm run test:journey:prep && npm run test:journey:upgrade",
     "test:journey:run-wasm": "jest --detectOpenHandles journey/entrypoint-wasm.test.ts",
+    "test:journey:upgrade": "npm run test:journey:k3d && npm run test:journey:image && jest --detectOpenHandles journey/pepr-upgrade.test.ts",
     "format:check": "eslint src && prettier src --check",
     "format:fix": "eslint src --fix && prettier src --write"
   },
@@ -39,17 +41,17 @@
     "ramda": "0.29.1"
   },
   "devDependencies": {
-    "@commitlint/cli": "18.4.3",
-    "@commitlint/config-conventional": "18.4.3",
+    "@commitlint/cli": "18.4.4",
+    "@commitlint/config-conventional": "18.4.4",
     "@jest/globals": "29.7.0",
-    "@types/eslint": "8.56.0",
+    "@types/eslint": "8.56.2",
     "@types/express": "4.17.21",
     "@types/node": "18.x.x",
-    "@types/node-forge": "1.3.10",
+    "@types/node-forge": "1.3.11",
     "@types/prompts": "2.4.9",
     "@types/uuid": "9.0.7",
     "jest": "29.7.0",
-    "nock": "13.4.0",
+    "nock": "13.5.0",
     "ts-jest": "29.1.1"
   },
   "peerDependencies": {

package/src/lib/assets/deploy.ts

@@ -14,7 +14,7 @@ import { peprStoreCRD } from "./store";
 import { webhookConfig } from "./webhooks";
 import { CapabilityExport } from "../types";
 
-export async function deploy(assets: Assets, webhookTimeout?: number) {
+export async function deploy(assets: Assets, force: boolean, webhookTimeout?: number) {
   Log.info("Establishing connection to Kubernetes");
 
   const { name, host, path } = assets;
@@ -26,7 +26,7 @@ export async function deploy(assets: Assets, webhookTimeout?: number) {
   const mutateWebhook = await webhookConfig(assets, "mutate", webhookTimeout);
   if (mutateWebhook) {
     Log.info("Applying mutating webhook");
-    await K8s(kind.MutatingWebhookConfiguration).Apply(mutateWebhook);
+    await K8s(kind.MutatingWebhookConfiguration).Apply(mutateWebhook, { force });
   } else {
     Log.info("Mutating webhook not needed, removing if it exists");
     await K8s(kind.MutatingWebhookConfiguration).Delete(name);
@@ -36,14 +36,14 @@ export async function deploy(assets: Assets, webhookTimeout?: number) {
   const validateWebhook = await webhookConfig(assets, "validate", webhookTimeout);
   if (validateWebhook) {
     Log.info("Applying validating webhook");
-    await K8s(kind.ValidatingWebhookConfiguration).Apply(validateWebhook);
+    await K8s(kind.ValidatingWebhookConfiguration).Apply(validateWebhook, { force });
   } else {
     Log.info("Validating webhook not needed, removing if it exists");
     await K8s(kind.ValidatingWebhookConfiguration).Delete(name);
   }
 
   Log.info("Applying the Pepr Store CRD if it doesn't exist");
-  await K8s(kind.CustomResourceDefinition).Apply(peprStoreCRD);
+  await K8s(kind.CustomResourceDefinition).Apply(peprStoreCRD, { force });
 
   // If a host is specified, we don't need to deploy the rest of the resources
   if (host) {
@@ -57,66 +57,66 @@ export async function deploy(assets: Assets, webhookTimeout?: number) {
     throw new Error("No code provided");
   }
 
-  await setupRBAC(name, assets.capabilities);
-  await setupController(assets, code, hash);
-  await setupWatcher(assets, hash);
+  await setupRBAC(name, assets.capabilities, force);
+  await setupController(assets, code, hash, force);
+  await setupWatcher(assets, hash, force);
 }
 
-async function setupRBAC(name: string, capabilities: CapabilityExport[]) {
+async function setupRBAC(name: string, capabilities: CapabilityExport[], force: boolean) {
   Log.info("Applying cluster role binding");
   const crb = clusterRoleBinding(name);
-  await K8s(kind.ClusterRoleBinding).Apply(crb);
+  await K8s(kind.ClusterRoleBinding).Apply(crb, { force });
 
   Log.info("Applying cluster role");
   const cr = clusterRole(name, capabilities);
-  await K8s(kind.ClusterRole).Apply(cr);
+  await K8s(kind.ClusterRole).Apply(cr, { force });
 
   Log.info("Applying service account");
   const sa = serviceAccount(name);
-  await K8s(kind.ServiceAccount).Apply(sa);
+  await K8s(kind.ServiceAccount).Apply(sa, { force });
 
   Log.info("Applying store role");
   const role = storeRole(name);
-  await K8s(kind.Role).Apply(role);
+  await K8s(kind.Role).Apply(role, { force });
 
   Log.info("Applying store role binding");
   const roleBinding = storeRoleBinding(name);
-  await K8s(kind.RoleBinding).Apply(roleBinding);
+  await K8s(kind.RoleBinding).Apply(roleBinding, { force });
 }
 
-async function setupController(assets: Assets, code: Buffer, hash: string) {
+async function setupController(assets: Assets, code: Buffer, hash: string, force: boolean) {
   const { name } = assets;
 
   Log.info("Applying module secret");
   const mod = moduleSecret(name, code, hash);
-  await K8s(kind.Secret).Apply(mod);
+  await K8s(kind.Secret).Apply(mod, { force });
 
   Log.info("Applying controller service");
   const svc = service(name);
-  await K8s(kind.Service).Apply(svc);
+  await K8s(kind.Service).Apply(svc, { force });
 
   Log.info("Applying TLS secret");
   const tls = tlsSecret(name, assets.tls);
-  await K8s(kind.Secret).Apply(tls);
+  await K8s(kind.Secret).Apply(tls, { force });
 
   Log.info("Applying API token secret");
   const apiToken = apiTokenSecret(name, assets.apiToken);
-  await K8s(kind.Secret).Apply(apiToken);
+  await K8s(kind.Secret).Apply(apiToken, { force });
 
   Log.info("Applying deployment");
   const dep = deployment(assets, hash);
-  await K8s(kind.Deployment).Apply(dep);
+  await K8s(kind.Deployment).Apply(dep, { force });
 }
 
-async function setupWatcher(assets: Assets, hash: string) {
+async function setupWatcher(assets: Assets, hash: string, force: boolean) {
   // If the module has a watcher, deploy it
   const watchDeployment = watcher(assets, hash);
   if (watchDeployment) {
     Log.info("Applying watcher deployment");
-    await K8s(kind.Deployment).Apply(watchDeployment);
+    await K8s(kind.Deployment).Apply(watchDeployment, { force });
 
     Log.info("Applying watcher service");
     const watchSvc = watcherService(assets.name);
-    await K8s(kind.Service).Apply(watchSvc);
+    await K8s(kind.Service).Apply(watchSvc, { force });
   }
 }

package/src/lib/assets/index.ts

@@ -37,9 +37,9 @@ export class Assets {
     this.apiToken = crypto.randomBytes(32).toString("hex");
   }
 
-  deploy = async (webhookTimeout?: number) => {
+  deploy = async (force: boolean, webhookTimeout?: number) => {
     this.capabilities = await loadCapabilities(this.path);
-    await deploy(this, webhookTimeout);
+    await deploy(this, force, webhookTimeout);
   };
 
   zarfYaml = (path: string) => zarfYaml(this, path);

package/src/lib/assets/pods.ts

@@ -63,6 +63,9 @@ export function watcher(assets: Assets, hash: string) {
       },
       template: {
         metadata: {
+          annotations: {
+            buildTimestamp: `${Date.now()}`,
+          },
           labels: {
             app,
             "pepr.dev/controller": "watcher",
@@ -70,6 +73,12 @@ export function watcher(assets: Assets, hash: string) {
         },
         spec: {
           serviceAccountName: name,
+          securityContext: {
+            runAsUser: 65532,
+            runAsGroup: 65532,
+            runAsNonRoot: true,
+            fsGroup: 65532,
+          },
           containers: [
             {
               name: "watcher",
@@ -105,6 +114,15 @@ export function watcher(assets: Assets, hash: string) {
                   cpu: "500m",
                 },
               },
+              securityContext: {
+                runAsUser: 65532,
+                runAsGroup: 65532,
+                runAsNonRoot: true,
+                allowPrivilegeEscalation: false,
+                capabilities: {
+                  drop: ["ALL"],
+                },
+              },
               volumeMounts: [
                 {
                   name: "tls-certs",
@@ -165,6 +183,9 @@ export function deployment(assets: Assets, hash: string): kind.Deployment {
       },
       template: {
         metadata: {
+          annotations: {
+            buildTimestamp: `${Date.now()}`,
+          },
           labels: {
             app,
             "pepr.dev/controller": "admission",
@@ -173,6 +194,12 @@ export function deployment(assets: Assets, hash: string): kind.Deployment {
         spec: {
           priorityClassName: "system-node-critical",
           serviceAccountName: name,
+          securityContext: {
+            runAsUser: 65532,
+            runAsGroup: 65532,
+            runAsNonRoot: true,
+            fsGroup: 65532,
+          },
           containers: [
             {
               name: "server",
@@ -209,6 +236,15 @@ export function deployment(assets: Assets, hash: string): kind.Deployment {
                 },
               },
               env: genEnv(config),
+              securityContext: {
+                runAsUser: 65532,
+                runAsGroup: 65532,
+                runAsNonRoot: true,
+                allowPrivilegeEscalation: false,
+                capabilities: {
+                  drop: ["ALL"],
+                },
+              },
               volumeMounts: [
                 {
                   name: "tls-certs",

package/src/lib/helpers.ts

@@ -1,6 +1,8 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-FileCopyrightText: 2023-Present The Pepr Authors
 
+import { K8s, kind } from "kubernetes-fluent-client";
+import Log from "./logger";
 import { CapabilityExport } from "./types";
 import { promises as fs } from "fs";
 
@@ -119,3 +121,43 @@ export function namespaceComplianceValidator(capability: CapabilityExport, ignor
     );
   }
 }
+
+// check to see if all replicas are ready for all deployments in the pepr-system namespace
+// returns true if all deployments are ready, false otherwise
+export async function checkDeploymentStatus(namespace: string) {
+  const deployments = await K8s(kind.Deployment).InNamespace(namespace).Get();
+  let status = false;
+  let readyCount = 0;
+
+  for (const deployment of deployments.items) {
+    const readyReplicas = deployment.status?.readyReplicas ? deployment.status?.readyReplicas : 0;
+    if (deployment.status?.readyReplicas !== deployment.spec?.replicas) {
+      Log.info(
+        `Waiting for deployment ${deployment.metadata?.name} rollout to finish: ${readyReplicas} of ${deployment.spec?.replicas} replicas are available`,
+      );
+    } else {
+      Log.info(
+        `Deployment ${deployment.metadata?.name} rolled out: ${readyReplicas} of ${deployment.spec?.replicas} replicas are available`,
+      );
+      readyCount++;
+    }
+  }
+  if (readyCount === deployments.items.length) {
+    status = true;
+  }
+  return status;
+}
+
+// wait for all deployments in the pepr-system namespace to be ready
+export async function namespaceDeploymentsReady(namespace: string = "pepr-system") {
+  Log.info(`Checking ${namespace} deployments status...`);
+  let ready = false;
+  while (!ready) {
+    ready = await checkDeploymentStatus(namespace);
+    if (ready) {
+      return ready;
+    }
+    await new Promise(resolve => setTimeout(resolve, 1000));
+  }
+  Log.info(`All ${namespace} deployments are ready`);
+}

package/website/.linkinator.config.json

@@ -1,8 +0,0 @@
-{
-  "recurse": true,
-  "skip": "^(https://example.com), ^(https://github.com), ^(https://twitter.com)",
-  "verbosity": "error",
-  "timeout": 0,
-  "markdown": true,
-  "directoryListing": true
-}

package/website/.markdownlint.json

@@ -1,6 +0,0 @@
-{
-  "default": true,
-  "MD033": false,
-  "MD013": false,
-  "MD036": false
-}

package/website/.prettierignore

@@ -1,12 +0,0 @@
-public/
-node_modules/
-.cache
-.history
-dist
-coverage
-docs/app
-__mocks__
-userguide/
-.release-please-manifest.json
-CHANGELOG.md
-.vscode/

package/website/LICENSE

@@ -1,201 +0,0 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright [2023] [Defense Unicorns]
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.

package/website/README.md

@@ -1,50 +0,0 @@
-# Doc Site Template
-
-[![CI Status](https://github.com/defenseunicorns/doc-site-template/actions/workflows/ci.yaml/badge.svg)](https://github.com/defenseunicorns/doc-site-template/actions)
-
-This site uses the [Defense Unicorns](https://github.com/defenseunicorns/defense-unicorns-hugo-theme) theme for Hugo
-which is a fork of the Google Docsy theme. The Docsy documentation can be used as a guide for [building content](https://www.docsy.dev/docs/adding-content/).
-
-## Contributing
-
-This repository enforces [Conventional Commit](https://www.conventionalcommits.org/en/v1.0.0/) messages. See the
-documentation for [`release-please`](https://github.com/googleapis/release-please#how-should-i-write-my-commits) for correctly formatting commit messages. [This video](https://www.youtube.com/watch?v=lwGcnDgwmFc&ab_channel=Syntax) does a good job of showing how to add the `Conventional Commit` VSCode extension to use when creating the commit messages.
-
-#### Prerequisites 
-
-[Hugo](https://gohugo.io/documentation/) is required in order to utilize the doc site template. You can run `brew install hugo` to quickly install or see the [installation page](https://gohugo.io/installation/) for additional install methods.
-
-## Getting Started
-
-Create a new repository from this template:
-
-![How to use](static/img/how-to-use.png)
-
-Clone your new site:
-
-```bash
-git clone <git repo>
-cd <new repo>
-npm ci
-```
-
-To run the site for local development:
-
-```bash
-npm start
-```
-
-Then navigate to [http://localhost:1313/](http://localhost:1313/)
-
-## Style guide
-
-You can modify the color theme to match your product's by changing the `$secondary` color variable in [_variables_project.scss](assets/scss/_variables_project.scss).
-
-[Color Palette](https://www.figma.com/file/aNnt9Ip7IFTs9hnfqrYGl4/Unicorn-UI?type=design&mode=design)
-
-To modify the favicon, replace the Doug icons in `static/favicons` with the icons of your choosing. You can use
-[IconGen](http://cthedot.de/icongen) to create the icons in the multiple sizes needed. Make sure and replace all of the
-sizes or it will use the theme's default of Doug.
-
-To modify the logo on your Navbar, change the `navbar_logo` setting under `params.ui` in `hugo.toml`. The logo should be
-an SVG.

package/website/archetypes/default.md

@@ -1,6 +0,0 @@
----
-title: "{{ replace .Name "-" " " | title }}"
-date: {{ .Date }}
-draft: true
----
-