Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all github action dependencies (v1.14) (minor) #27776

Merged
merged 1 commit into from Sep 11, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Aug 29, 2023

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/setup-go action minor v4.0.1 -> v4.1.0
actions/upload-artifact action digest 0b7f8ab -> a8a3f3a
cilium/cilium action digest d86f33b -> 824192a
docker/build-push-action action minor v4.1.1 -> v4.2.1
docker/setup-buildx-action action minor v2.9.1 -> v2.10.0
github/codeql-action action minor v2.20.4 -> v2.21.5
golangci/golangci-lint-action action minor v3.6.0 -> v3.7.0
kubernetes-sigs/kind minor v0.17.0 -> v0.20.0
kubernetes/kubernetes minor v1.27.5 -> v1.28.1

Release Notes

actions/setup-go (actions/setup-go)

v4.1.0

Compare Source

What's Changed

In scope of this release, slow installation on Windows was fixed by @​dsame in https://github.com/actions/setup-go/pull/393 and OS version was added to primaryKey for Ubuntu runners to avoid conflicts (https://github.com/actions/setup-go/pull/383)

This release also includes the following changes:

New Contributors

Full Changelog: actions/setup-go@v4...v4.1.0

docker/build-push-action (docker/build-push-action)

v4.2.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

Full Changelog: docker/build-push-action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

Full Changelog: docker/build-push-action@v4.1.1...v4.2.0

docker/setup-buildx-action (docker/setup-buildx-action)

v2.10.0

Compare Source

What's Changed

Full Changelog: docker/setup-buildx-action@v2.9.1...v2.10.0

github/codeql-action (github/codeql-action)

v2.21.5

Compare Source

v2.21.4

Compare Source

v2.21.3

Compare Source

v2.21.2

Compare Source

v2.21.1

Compare Source

v2.21.0

Compare Source

golangci/golangci-lint-action (golangci/golangci-lint-action)

v3.7.0

Compare Source

What's Changed

Changes
Documentation
Dependencies

New Contributors

Full Changelog: golangci/golangci-lint-action@v3...v3.7.0

kubernetes-sigs/kind (kubernetes-sigs/kind)

v0.20.0

Compare Source

KIND v0.20.0 fixes runc 1.1.6+ / misc controller support as well as cgroupns support on cgroup v1 and begins the migration to private cgroupns for all kind nodes.

In a future release kind node images will drop support for kind binaries without cgroupns=private (which is already the default on all cgroup v2 hosts, and cgroup v1 in kind v0.20.0). This will allow us to ship a more consistent and reliable environment as the ecosystem heads towards dropping cgroup v1 more generally.

Breaking Changes

  • Docker 20.10.0+ is now required, with no change for Podman.
  • Node images built with kind v0.20.0+ will be required on cgroups v1 hosts for kind v0.20.0+
  • The default node image is a Kubernetes v1.27.3 image: kindest/node:v1.27.2@​sha256:3966ac761ae0136263ffdb6cfd4db23ef8a83cba8a463690e98317add2c9ba72
Containerd CRI mirror config deprecation PSA

Additionally, we're asking that everyone using the local registry script update
to the latest version using config_path. https://kind.sigs.k8s.io/docs/user/local-registry/

Containerd deprecated the old CRI mirrors config approach and will remove support in v2.0.
Eventually KIND will enable this by default or have upgraded to containerd 2.0.

Containerd does not support CRI mirror config if the new hosts config_path is enabled.

New Features

  • Improved Kubernetes source code path detection in kind build node-image.
    • Now searches in this order: $(pwd), ${GOPATH}/src/k8s.io/kubernetes, ${GOPATH}/src/github.com/kubernetes/kubernetes (default checkout location in Prow CI without path_alias).

New node images have been built for kind v0.20.0, please use these exact images (IE like kindest/node:v1.27.3@​sha256:3966ac761ae0136263ffdb6cfd4db23ef8a83cba8a463690e98317add2c9ba72 including the digest) or build your own as we may need to change the image format again in the future 😅

Images pre-built for this release:

  • 1.27: kindest/node:v1.27.3@​sha256:3966ac761ae0136263ffdb6cfd4db23ef8a83cba8a463690e98317add2c9ba72
  • 1.26: kindest/node:v1.26.6@​sha256:6e2d8b28a5b601defe327b98bd1c2d1930b49e5d8c512e1895099e4504007adb
  • 1.25: kindest/node:v1.25.11@​sha256:227fa11ce74ea76a0474eeefb84cb75d8dad1b08638371ecf0e86259b35be0c8
  • 1.24: kindest/node:v1.24.15@​sha256:7db4f8bea3e14b82d12e044e25e34bd53754b7f2b0e9d56df21774e6f66a70ab
  • 1.23: kindest/node:v1.23.17@​sha256:59c989ff8a517a93127d4a536e7014d28e235fb3529d9fba91b3951d461edfdb
  • 1.22: kindest/node:v1.22.17@​sha256:f5b2e5698c6c9d6d0adc419c0deae21a425c07d81bbf3b6a6834042f25d4fba2
  • 1.21: kindest/node:v1.21.14@​sha256:8a4e9bb3f415d2bb81629ce33ef9c76ba514c14d707f9797a01e3216376ba093

Additional images built for this release:

  • 1.28: kindest/node:v1.28.0@​sha256:b7a4cad12c197af3ba43202d3efe03246b3f0793f162afb40a33c923952d5b31

NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons.

See also:

NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see https://github.com/kubernetes-sigs/kind/issues/2718

Fixes

  • Upgraded runc to 1.1.7, containerd to 1.7.1
  • Disabled unused misc controller on cgroups v1 hosts for KIND nodes
  • Fixed cgroups on cgroup v1 hosts with cgroupns enabled
  • Removed unnecessary flags from haproxy image
  • Set kubelet systemd KillMode=process

Contributors

Thank you to everyone who contributed to this release! ❤️

Users whose commits are in this release (alphabetically by user name)

And thank you very much to everyone else not listed here who contributed in other ways like filing issues, giving feedback, testing fixes, helping users in slack, etc. 🙏

v0.19.0

Compare Source

KIND v0.19.0 contains a fix for airgapped node image usage and a significant overhaul over our base image and dependency management.

KIND node images now contain a LICENSE/ directory based on go-licenses for all external go binaries, all external go binaries are built from source and contain fully patched go as of the time of release, streamlining that process and decoupling versions.

Since this release comes shortly after v0.18.0, we highly recommend seeing v0.18.0 release notes as well.

Breaking Changes

  • The default node image is a Kubernetes v1.27.1 image: kindest/node:v1.27.1@​sha256:b7d12ed662b873bd8510879c1846e87c7e676a79fefc93e17b2a52989d3ff42b
  • Base distro is now Debian, not Ubuntu.
    • While it is not supported to depend on the contents of these images beyond providing what KIND needs to create a functioning Kubernetes cluster at a given version, we know some power users depend on this anyhow. This is your warning! This is subject to change again in the future. We also dropped some now-unnecessary packages from the image.
  • Go 1.16+ is now required to build the kind binary or import kind as a library (much more recent Go 1.20.4 was used for release builds, but 1.16 is the minimum required version now)

New Features

  • Smaller node image containerd binaries with unusable snapshotters compiled out
  • LICENSES/ directory in all node / base images with license info for all dependent packages / binaries contained in images that don't come from the base distro (other packages are covered by distro standard metadata)

New node images have been built for kind v0.19.0, please use these exact images (IE like kindest/node:v1.26.3@​sha256: 61b92f38dff6ccc29969e7aa154d34e38b89443af1a2c14e6cfbd2df6419c66f including the digest) or build your own as we may need to change the image format again in the future 😅

Images pre-built for this release:

  • 1.27: kindest/node:v1.27.1@​sha256:b7d12ed662b873bd8510879c1846e87c7e676a79fefc93e17b2a52989d3ff42b
  • 1.26: kindest/node:v1.26.4@​sha256:f4c0d87be03d6bea69f5e5dc0adb678bb498a190ee5c38422bf751541cebe92e
  • 1.25: kindest/node:v1.25.9@​sha256:c08d6c52820aa42e533b70bce0c2901183326d86dcdcbedecc9343681db45161
  • 1.24: kindest/node:v1.24.13@​sha256:cea86276e698af043af20143f4bf0509e730ec34ed3b7fa790cc0bea091bc5dd
  • 1.23: kindest/node:v1.23.17@​sha256:f77f8cf0b30430ca4128cc7cfafece0c274a118cd0cdb251049664ace0dee4ff
  • 1.22: kindest/node:v1.22.17@​sha256:9af784f45a584f6b28bce2af84c494d947a05bd709151466489008f80a9ce9d5
  • 1.21: kindest/node:v1.21.14@​sha256:220cfafdf6e3915fbce50e13d1655425558cb98872c53f802605aa2fb2d569cf

Additional images built for this release:

  • 1.28: kindest/node:v1.28.0@​sha256:dad5a6238c5e41d7cac405fae3b5eda2ad1de6f1190fa8bfc64ff5bb86173213

NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons.

See also:

NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see https://github.com/kubernetes-sigs/kind/issues/2718

Fixes

  • Fixed airgap preloading for kindnetd and local-path-provisioner
  • podman: detect disabled IPv6 and create IPv4 only network instead
  • Overhauled image building, fully patched all dependencies and build toolchains
  • Updated containerd, crictl, CNI plugins, local-path-provisioner ... etc
  • Dropped unnecessary packages from image
  • Fixed dockerized site build on non-amd64 hosts

Contributors

Thank you to everyone who contributed to this release! ❤️

Users whose commits are in this release (alphabetically by user name)

And thank you very much to everyone else not listed here who contributed in other ways like filing issues, giving feedback, testing fixes, helping users in slack, etc. 🙏

In particular a shoutout to @​stmcginnis for helping with reviews and responding to support issues! 💟

v0.18.0: - Thanks Docker! 🐳

Compare Source

KIND v0.18.0 Comes with a big shoutout to Docker, Inc. for accepting us into the updated Docker Sponsored OSS Program. Thanks Docker! 🎉

Images should no longer have pull rate limits as a result.

The project will still consider mirroring on or switching primarily to registry.k8s.io in the future, after determining an updated immutable tagging scheme to comply with requirements there.

Otherwise of particular note are a fix for iptables nf_tables v1.8.8+, updated dependencies including runc v1.1.5 with CVE fixes, and a new networking option to control the DNS search list.

Breaking Changes

  • The default node image is a Kubernetes v1.26.3 image: kindest/node:v1.26.3@​sha256:61b92f38dff6ccc29969e7aa154d34e38b89443af1a2c14e6cfbd2df6419c66f
  • Dropped support for PPC64LE and S390x, which only had limited support previously
    • These platforms had very slow and flaky builds despite attempts at fixing and very limited demand. We've dropped these to focus on the vast majority of our users. These platforms never reached the point of having official node images.
  • Removed registry mirror config for k8s.gcr.io => registry.k8s.io

New Features

  • New networking.dnsSearch config field for overriding the cluster nodes' DNS search list
  • Documented how to use KIND on chromeOS
  • Automated builds for most images
  • Improved output for kind delete cluster

New Node images have been built for kind v0.18.0, please use these exact images (IE like kindest/node:v1.26.3@​sha256: 61b92f38dff6ccc29969e7aa154d34e38b89443af1a2c14e6cfbd2df6419c66f including the digest) or build your own as we may need to change the image format again in the future 😅

Images pre-built for this release:

  • 1.26: kindest/node:v1.26.3@​sha256:61b92f38dff6ccc29969e7aa154d34e38b89443af1a2c14e6cfbd2df6419c66f
  • 1.25: kindest/node:v1.25.8@​sha256:00d3f5314cc35327706776e95b2f8e504198ce59ac545d0200a89e69fce10b7f
  • 1.24: kindest/node:v1.24.12@​sha256:1e12918b8bc3d4253bc08f640a231bb0d3b2c5a9b28aa3f2ca1aee93e1e8db16
  • 1.23: kindest/node:v1.23.17@​sha256:e5fd1d9cd7a9a50939f9c005684df5a6d145e8d695e78463637b79464292e66c
  • 1.22: kindest/node:v1.22.17@​sha256:c8a828709a53c25cbdc0790c8afe12f25538617c7be879083248981945c38693
  • 1.21: kindest/node:v1.21.14@​sha256:27ef72ea623ee879a25fe6f9982690a3e370c68286f4356bf643467c552a3888

Additional Images built for this release:

  • 1.27: kindest/node:v1.27.1@​sha256:9915f5629ef4d29f35b478e819249e89cfaffcbfeebda4324e5c01d53d937b09
  • 1.27: kindest/node:v1.27.0@​sha256:c6b22e613523b1af67d4bc8a0c38a4c3ea3a2b8fbc5b367ae36345c9cb844518

See also:

NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see https://github.com/kubernetes-sigs/kind/issues/2718

Fixes

  • Fixed iptables rules when the host has iptables 1.8.8+ in nf_tables (not legacy) mode
  • Updated all dependencies to latest as of release time (including go version, go modules, containerd, crictl, runc, local-path-provisioner, base images, ...)
    • Package updates are now installed against all packages in the base image when building the kindest/node base image, which should help us stay on top of these
  • Fixed containerd snapshotter selection on ZFS hosts
  • Generally made containerd snapshotter selection more robust
  • Limited haproxy max connections for multiple control-plane node clusters to prevent excessive memory use
  • Dedupe nodes correctly in kind load ...
  • Documented how to configure and use kubeadmConfigPatches
  • Documented default subnets
  • Fixed ingress guide "usage" example
  • cgroupsv2 CI updated to Fedora 37
  • Updated README and site home to use go install and not go get (more detailed install docs remain at https://kind.sigs.k8s.io/docs/user/quick-start/#installation)
  • Documented rootless podman systemd scope fix

Contributors

Thank you to everyone who contributed to this release! ❤️

Users whose commits are in this release (alphabetically by user name)

And thank you very much to everyone else not listed here who contributed in other ways like filing issues, giving feedback, testing fixes, helping users in slack, etc. 🙏

kubernetes/kubernetes (kubernetes/kubernetes)

v1.28.1: Kubernetes v1.28.1

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

v1.28.0: Kubernetes v1.28.0

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.


Configuration

📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot requested review from a team as code owners August 29, 2023 08:46
@renovate renovate bot requested a review from ldelossa August 29, 2023 08:46
@renovate renovate bot added kind/enhancement This would improve or streamline existing functionality. release-note/misc This PR makes changes that have no direct user impact. renovate/stop-updating Tell Renovate to stop updating PR labels Aug 29, 2023
@renovate renovate bot requested a review from nbusseneau August 29, 2023 08:46
@maintainer-s-little-helper maintainer-s-little-helper bot added backport/1.14 This PR represents a backport for Cilium 1.14.x of a PR that was merged to main. kind/backports This PR provides functionality previously merged into master. labels Aug 29, 2023
@github-actions github-actions bot added the kind/community-contribution This was a contribution made by a community member. label Aug 29, 2023
@aanm
Copy link
Member

aanm commented Aug 30, 2023

/test-backport-1.14

@renovate renovate bot force-pushed the renovate/v1.14-all-github-action branch from 4c82e79 to 0c2ac51 Compare August 30, 2023 15:07
@aanm
Copy link
Member

aanm commented Aug 30, 2023

/test-backport-1.14

@nbusseneau nbusseneau added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Aug 31, 2023
@aditighag
Copy link
Member

Hi @nbusseneau Can you add a note for the Smoke Test with IPv6 test failure? Thanks!

@nbusseneau nbusseneau removed the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Sep 1, 2023
@nbusseneau
Copy link
Member

The failure is legitimate, I had failed to notice it. Thanks for catching @aditighag.

@nbusseneau
Copy link
Member

It looks like the upgrade to Kind 0.20 breaks cluster creation with the IPv6 configuration.

@renovate renovate bot force-pushed the renovate/v1.14-all-github-action branch 2 times, most recently from 2f7b2bb to 68231d3 Compare September 11, 2023 08:26
@aanm
Copy link
Member

aanm commented Sep 11, 2023

/test-backport-1.14

Signed-off-by: renovate[bot] <bot@renovateapp.com>
@renovate renovate bot force-pushed the renovate/v1.14-all-github-action branch from 68231d3 to 0abfb17 Compare September 11, 2023 11:18
@julianwiedmann
Copy link
Member

/test-backport-1.14

@julianwiedmann julianwiedmann merged commit f607eb0 into v1.14 Sep 11, 2023
186 checks passed
@julianwiedmann julianwiedmann deleted the renovate/v1.14-all-github-action branch September 11, 2023 14:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport/1.14 This PR represents a backport for Cilium 1.14.x of a PR that was merged to main. kind/backports This PR provides functionality previously merged into master. kind/community-contribution This was a contribution made by a community member. kind/enhancement This would improve or streamline existing functionality. release-note/misc This PR makes changes that have no direct user impact. renovate/stop-updating Tell Renovate to stop updating PR
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants