chore(deps): update dependency kubernetes-sigs/kind to v0.20.0 - autoclosed

[renovate-bot]

This PR contains the following updates:

Package	Update	Change
kubernetes-sigs/kind	minor	0.17.0 -> 0.20.0

---

Release Notes

kubernetes-sigs/kind (kubernetes-sigs/kind)

v0.20.0

Compare Source

KIND v0.20.0 fixes runc 1.1.6+ / misc controller support as well as cgroupns support on cgroup v1 and begins the migration to private cgroupns for all kind nodes.

In a future release kind node images will drop support for kind binaries without cgroupns=private (which is already the default on all cgroup v2 hosts, and cgroup v1 in kind v0.20.0). This will allow us to ship a more consistent and reliable environment as the ecosystem heads towards dropping cgroup v1 more generally.

Breaking Changes

• Docker 20.10.0+ is now required, with no change for Podman.
• Node images built with kind v0.20.0+ will be required on cgroups v1 hosts for kind v0.20.0+
• The default node image is a Kubernetes v1.27.3 image: kindest/node:v1.27.2@​sha256:3966ac761ae0136263ffdb6cfd4db23ef8a83cba8a463690e98317add2c9ba72

Containerd CRI mirror config deprecation PSA

Additionally, we're asking that everyone using the local registry script update
to the latest version using config_path. https://kind.sigs.k8s.io/docs/user/local-registry/

Containerd deprecated the old CRI mirrors config approach and will remove support in v2.0.
Eventually KIND will enable this by default or have upgraded to containerd 2.0.

Containerd does not support CRI mirror config if the new hosts config_path is enabled.

New Features

• Improved Kubernetes source code path detection in kind build node-image.
  • Now searches in this order: $(pwd), ${GOPATH}/src/k8s.io/kubernetes, ${GOPATH}/src/github.com/kubernetes/kubernetes (default checkout location in Prow CI without path_alias).

New node images have been built for kind v0.20.0, please use these exact images (IE like kindest/node:v1.27.3@​sha256:3966ac761ae0136263ffdb6cfd4db23ef8a83cba8a463690e98317add2c9ba72 including the digest) or build your own as we may need to change the image format again in the future 😅

Images pre-built for this release:

• 1.27: kindest/node:v1.27.3@​sha256:3966ac761ae0136263ffdb6cfd4db23ef8a83cba8a463690e98317add2c9ba72
• 1.26: kindest/node:v1.26.6@​sha256:6e2d8b28a5b601defe327b98bd1c2d1930b49e5d8c512e1895099e4504007adb
• 1.25: kindest/node:v1.25.11@​sha256:227fa11ce74ea76a0474eeefb84cb75d8dad1b08638371ecf0e86259b35be0c8
• 1.24: kindest/node:v1.24.15@​sha256:7db4f8bea3e14b82d12e044e25e34bd53754b7f2b0e9d56df21774e6f66a70ab
• 1.23: kindest/node:v1.23.17@​sha256:59c989ff8a517a93127d4a536e7014d28e235fb3529d9fba91b3951d461edfdb
• 1.22: kindest/node:v1.22.17@​sha256:f5b2e5698c6c9d6d0adc419c0deae21a425c07d81bbf3b6a6834042f25d4fba2
• 1.21: kindest/node:v1.21.14@​sha256:8a4e9bb3f415d2bb81629ce33ef9c76ba514c14d707f9797a01e3216376ba093

Additional images built for this release:

• 1.28: kindest/node:v1.28.0@​sha256:b7a4cad12c197af3ba43202d3efe03246b3f0793f162afb40a33c923952d5b31

NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons.

See also:

• https://kind.sigs.k8s.io/docs/user/quick-start/#creating-a-cluster
• https://kind.sigs.k8s.io/docs/user/quick-start/#building-images

NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see https://github.com/kubernetes-sigs/kind/issues/2718

Fixes

• Upgraded runc to 1.1.7, containerd to 1.7.1
• Disabled unused misc controller on cgroups v1 hosts for KIND nodes
• Fixed cgroups on cgroup v1 hosts with cgroupns enabled
• Removed unnecessary flags from haproxy image
• Set kubelet systemd KillMode=process

Contributors

Thank you to everyone who contributed to this release! ❤️

Users whose commits are in this release (alphabetically by user name)

• @​BenTheElder
• @​dependabot[bot]
• @​k8s-ci-robot
• @​killianmuldoon
• @​lixin963
• @​maxerenberg

And thank you very much to everyone else not listed here who contributed in other ways like filing issues, giving feedback, testing fixes, helping users in slack, etc. 🙏

v0.19.0

Compare Source

KIND v0.19.0 contains a fix for airgapped node image usage and a significant overhaul over our base image and dependency management.

KIND node images now contain a LICENSE/ directory based on go-licenses for all external go binaries, all external go binaries are built from source and contain fully patched go as of the time of release, streamlining that process and decoupling versions.

Since this release comes shortly after v0.18.0, we highly recommend seeing v0.18.0 release notes as well.

Breaking Changes

• The default node image is a Kubernetes v1.27.1 image: kindest/node:v1.27.1@​sha256:b7d12ed662b873bd8510879c1846e87c7e676a79fefc93e17b2a52989d3ff42b
• Base distro is now Debian, not Ubuntu.
  • While it is not supported to depend on the contents of these images beyond providing what KIND needs to create a functioning Kubernetes cluster at a given version, we know some power users depend on this anyhow. This is your warning! This is subject to change again in the future. We also dropped some now-unnecessary packages from the image.
• Go 1.16+ is now required to build the kind binary or import kind as a library (much more recent Go 1.20.4 was used for release builds, but 1.16 is the minimum required version now)

New Features

• Smaller node image containerd binaries with unusable snapshotters compiled out
• LICENSES/ directory in all node / base images with license info for all dependent packages / binaries contained in images that don't come from the base distro (other packages are covered by distro standard metadata)

New node images have been built for kind v0.19.0, please use these exact images (IE like kindest/node:v1.26.3@​sha256: 61b92f38dff6ccc29969e7aa154d34e38b89443af1a2c14e6cfbd2df6419c66f including the digest) or build your own as we may need to change the image format again in the future 😅

Images pre-built for this release:

• 1.27: kindest/node:v1.27.1@​sha256:b7d12ed662b873bd8510879c1846e87c7e676a79fefc93e17b2a52989d3ff42b
• 1.26: kindest/node:v1.26.4@​sha256:f4c0d87be03d6bea69f5e5dc0adb678bb498a190ee5c38422bf751541cebe92e
• 1.25: kindest/node:v1.25.9@​sha256:c08d6c52820aa42e533b70bce0c2901183326d86dcdcbedecc9343681db45161
• 1.24: kindest/node:v1.24.13@​sha256:cea86276e698af043af20143f4bf0509e730ec34ed3b7fa790cc0bea091bc5dd
• 1.23: kindest/node:v1.23.17@​sha256:f77f8cf0b30430ca4128cc7cfafece0c274a118cd0cdb251049664ace0dee4ff
• 1.22: kindest/node:v1.22.17@​sha256:9af784f45a584f6b28bce2af84c494d947a05bd709151466489008f80a9ce9d5
• 1.21: kindest/node:v1.21.14@​sha256:220cfafdf6e3915fbce50e13d1655425558cb98872c53f802605aa2fb2d569cf

Additional images built for this release:

• 1.28: kindest/node:v1.28.0@​sha256:dad5a6238c5e41d7cac405fae3b5eda2ad1de6f1190fa8bfc64ff5bb86173213

NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons.

See also:

• https://kind.sigs.k8s.io/docs/user/quick-start/#creating-a-cluster
• https://kind.sigs.k8s.io/docs/user/quick-start/#building-images

NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see https://github.com/kubernetes-sigs/kind/issues/2718

Fixes

• Fixed airgap preloading for kindnetd and local-path-provisioner
• podman: detect disabled IPv6 and create IPv4 only network instead
• Overhauled image building, fully patched all dependencies and build toolchains
• Updated containerd, crictl, CNI plugins, local-path-provisioner ... etc
• Dropped unnecessary packages from image
• Fixed dockerized site build on non-amd64 hosts

Contributors

Thank you to everyone who contributed to this release! ❤️

Users whose commits are in this release (alphabetically by user name)

• @​aojea
• @​BenTheElder
• @​cpanato
• @​daman1807
• @​k8s-ci-robot
• @​m-Bilal
• @​orange-guo
• @​pohly
• @​RijulGulati
• @​rjsadow
• @​VibhorChinda
• @​wzshiming
• @​yanggangtony

And thank you very much to everyone else not listed here who contributed in other ways like filing issues, giving feedback, testing fixes, helping users in slack, etc. 🙏

In particular a shoutout to @​stmcginnis for helping with reviews and responding to support issues! 💟

v0.18.0: - Thanks Docker! 🐳

Compare Source

KIND v0.18.0 Comes with a big shoutout to Docker, Inc. for accepting us into the updated Docker Sponsored OSS Program. Thanks Docker! 🎉

Images should no longer have pull rate limits as a result.

The project will still consider mirroring on or switching primarily to registry.k8s.io in the future, after determining an updated immutable tagging scheme to comply with requirements there.

Otherwise of particular note are a fix for iptables nf_tables v1.8.8+, updated dependencies including runc v1.1.5 with CVE fixes, and a new networking option to control the DNS search list.

Breaking Changes

• The default node image is a Kubernetes v1.26.3 image: kindest/node:v1.26.3@​sha256:61b92f38dff6ccc29969e7aa154d34e38b89443af1a2c14e6cfbd2df6419c66f
• Dropped support for PPC64LE and S390x, which only had limited support previously
  • These platforms had very slow and flaky builds despite attempts at fixing and very limited demand. We've dropped these to focus on the vast majority of our users. These platforms never reached the point of having official node images.
• Removed registry mirror config for k8s.gcr.io => registry.k8s.io
  • k8s.gcr.io is partially redirected already now, and being phased out. Please update your references to use registry.k8s.io directly instead! See: https://registry.k8s.io, https://kubernetes.io/blog/2023/03/10/image-registry-redirect/

New Features

• New networking.dnsSearch config field for overriding the cluster nodes' DNS search list
• Documented how to use KIND on chromeOS
• Automated builds for most images
• Improved output for kind delete cluster

New Node images have been built for kind v0.18.0, please use these exact images (IE like kindest/node:v1.26.3@​sha256: 61b92f38dff6ccc29969e7aa154d34e38b89443af1a2c14e6cfbd2df6419c66f including the digest) or build your own as we may need to change the image format again in the future 😅

Images pre-built for this release:

• 1.26: kindest/node:v1.26.3@​sha256:61b92f38dff6ccc29969e7aa154d34e38b89443af1a2c14e6cfbd2df6419c66f
• 1.25: kindest/node:v1.25.8@​sha256:00d3f5314cc35327706776e95b2f8e504198ce59ac545d0200a89e69fce10b7f
• 1.24: kindest/node:v1.24.12@​sha256:1e12918b8bc3d4253bc08f640a231bb0d3b2c5a9b28aa3f2ca1aee93e1e8db16
• 1.23: kindest/node:v1.23.17@​sha256:e5fd1d9cd7a9a50939f9c005684df5a6d145e8d695e78463637b79464292e66c
• 1.22: kindest/node:v1.22.17@​sha256:c8a828709a53c25cbdc0790c8afe12f25538617c7be879083248981945c38693
• 1.21: kindest/node:v1.21.14@​sha256:27ef72ea623ee879a25fe6f9982690a3e370c68286f4356bf643467c552a3888

Additional Images built for this release:

• 1.27: kindest/node:v1.27.1@​sha256:9915f5629ef4d29f35b478e819249e89cfaffcbfeebda4324e5c01d53d937b09
• 1.27: kindest/node:v1.27.0@​sha256:c6b22e613523b1af67d4bc8a0c38a4c3ea3a2b8fbc5b367ae36345c9cb844518

See also:

• https://kind.sigs.k8s.io/docs/user/quick-start/#creating-a-cluster
• https://kind.sigs.k8s.io/docs/user/quick-start/#building-images

NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see https://github.com/kubernetes-sigs/kind/issues/2718

Fixes

• Fixed iptables rules when the host has iptables 1.8.8+ in nf_tables (not legacy) mode
• Updated all dependencies to latest as of release time (including go version, go modules, containerd, crictl, runc, local-path-provisioner, base images, ...)
  • Package updates are now installed against all packages in the base image when building the kindest/node base image, which should help us stay on top of these
• Fixed containerd snapshotter selection on ZFS hosts
• Generally made containerd snapshotter selection more robust
• Limited haproxy max connections for multiple control-plane node clusters to prevent excessive memory use
• Dedupe nodes correctly in kind load ...
• Documented how to configure and use kubeadmConfigPatches
• Documented default subnets
• Fixed ingress guide "usage" example
• cgroupsv2 CI updated to Fedora 37
• Updated README and site home to use go install and not go get (more detailed install docs remain at https://kind.sigs.k8s.io/docs/user/quick-start/#installation)
• Documented rootless podman systemd scope fix

Contributors

Thank you to everyone who contributed to this release! ❤️

Users whose commits are in this release (alphabetically by user name)

• @​AaronFriel
• @​AkihiroSuda
• @​aojea
• @​BenTheElder
• @​carslen
• @​daman1807
• @​devenes
• @​dex4er
• @​dlipovetsky
• @​elmiko
• @​em-r
• @​howardjohn
• @​jonas
• @​k8s-ci-robot
• @​ktKongTong
• @​liggitt
• @​lixin963
• @​mattcary
• @​mweibel
• @​mengjiao-liu
• @​nr-dbuckwalter
• @​oxr463 (thank you for your patience!)
• @​RijulGulati
• @​rmfitzpatrick
• @​saschagrunert
• @​VannTen

And thank you very much to everyone else not listed here who contributed in other ways like filing issues, giving feedback, testing fixes, helping users in slack, etc. 🙏

---

Configuration

📅 Schedule: Branch creation - "before 7am every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.