[1.27.3] 1.27.3 release (#2427)

* [1.27.3] 1.27.3 release

* update kubernetes/kubernetes to 1.27.6 in go.mod

* .: bump golang.org/x/net to v0.17.0

Bumping golang.org/x/net in light of CVE-2023-39325 and CVE-2023-44487.

* Set git version variable during the build (#2252)

* Fix Manila tests

* Use dl.k8s.io instead of hardcoded GCS URIs (#2240)

The `storage.googleapis.com/kubernetes-release` URL is a hard coded path
to a GCS bucket location. To allow redirecting and spreading the load
across multiple hosting locations, the `dl.k8s.io` URL has been
introduced.

Signed-off-by: Sean McGinnis <stmcg@amazon.com>

---------

Signed-off-by: Sean McGinnis <stmcg@amazon.com>
Co-authored-by: Sean McGinnis <stmcg@amazon.com>

Makefile

@@ -36,7 +36,7 @@ VERSION         ?= $(shell git describe --dirty --tags --match='v*')
 GOARCH		:=
 GOFLAGS		:=
 TAGS		:=
-LDFLAGS		:= "-w -s -X 'k8s.io/component-base/version.gitVersion=$(VERSION)'"
+LDFLAGS		:= "-w -s -X 'k8s.io/component-base/version.gitVersion=$(VERSION)' -X 'k8s.io/cloud-provider-openstack/pkg/version.Version=$(VERSION)'"
 GOX_LDFLAGS	:= $(shell echo "$(LDFLAGS) -extldflags \"-static\"")
 REGISTRY	?= registry.k8s.io/provider-os
 IMAGE_OS	?= linux

charts/cinder-csi-plugin/Chart.yaml

@@ -1,8 +1,8 @@
 apiVersion: v1
-appVersion: v1.27.2
+appVersion: v1.27.3
 description: Cinder CSI Chart for OpenStack
 name: openstack-cinder-csi
-version: 2.27.2
+version: 2.27.3
 home: https://github.com/kubernetes/cloud-provider-openstack
 icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png
 maintainers:

charts/manila-csi-plugin/Chart.yaml

@@ -1,8 +1,8 @@
 apiVersion: v1
-appVersion: v1.27.2
+appVersion: v1.27.3
 description: Manila CSI Chart for OpenStack
 name: openstack-manila-csi
-version: 2.27.2
+version: 2.27.3
 home: http://github.com/kubernetes/cloud-provider-openstack
 icon: https://github.com/kubernetes/kubernetes/blob/master/logo/logo.png
 maintainers:

charts/openstack-cloud-controller-manager/Chart.yaml

@@ -1,10 +1,10 @@
 apiVersion: v1
-appVersion: v1.27.2
+appVersion: v1.27.3
 description: Openstack Cloud Controller Manager Helm Chart
 icon: https://object-storage-ca-ymq-1.vexxhost.net/swift/v1/6e4619c416ff4bd19e1c087f27a43eea/www-images-prod/openstack-logo/OpenStack-Logo-Vertical.png
 home: https://github.com/kubernetes/cloud-provider-openstack
 name: openstack-cloud-controller-manager
-version: 2.27.4
+version: 2.27.5
 maintainers:
   - name: eumel8
     email: f.kloeker@telekom.de

docs/keystone-auth/using-keystone-webhook-authenticator-and-authorizer.md

@@ -252,7 +252,7 @@ it as a service. There are several things we need to notice in the
 deployment manifest:
 
 - We are using image
-  `registry.k8s.io/provider-os/k8s-keystone-auth:v1.27.2`
+  `registry.k8s.io/provider-os/k8s-keystone-auth:v1.27.3`
 - We use `k8s-auth-policy` configmap created above.
 - The pod uses service account `keystone-auth` created above.
 - We use `keystone-auth-certs` secret created above to inject the

docs/magnum-auto-healer/using-magnum-auto-healer.md

@@ -73,7 +73,7 @@ user_id=ceb61464a3d341ebabdf97d1d4b97099
 user_project_id=b23a5e41d1af4c20974bf58b4dff8e5a
 password=password
 region=RegionOne
-image=registry.k8s.io/provider-os/magnum-auto-healer:v1.27.2
+image=registry.k8s.io/provider-os/magnum-auto-healer:v1.27.3
 
 cat <<EOF | kubectl apply -f -
 ---

docs/octavia-ingress-controller/using-octavia-ingress-controller.md

@@ -155,7 +155,7 @@ Here are several other config options are not included in the example configurat
 ### Deploy octavia-ingress-controller
 
 ```shell
-image="registry.k8s.io/provider-os/octavia-ingress-controller:v1.27.2"
+image="registry.k8s.io/provider-os/octavia-ingress-controller:v1.27.3"
 
 cat <<EOF > /etc/kubernetes/octavia-ingress-controller/deployment.yaml
 ---

examples/webhook/keystone-deployment.yaml

@@ -18,7 +18,7 @@ spec:
       serviceAccountName: k8s-keystone
       containers:
         - name: k8s-keystone-auth
-          image: registry.k8s.io/provider-os/k8s-keystone-auth:v1.27.2
+          image: registry.k8s.io/provider-os/k8s-keystone-auth:v1.27.3
           args:
             - ./bin/k8s-keystone-auth
             - --tls-cert-file

go.mod

@@ -20,24 +20,24 @@ require (
 	github.com/spf13/pflag v1.0.5
 	github.com/spf13/viper v1.15.0
 	github.com/stretchr/testify v1.8.2
-	golang.org/x/net v0.9.0
-	golang.org/x/sys v0.7.0
-	golang.org/x/term v0.7.0
+	golang.org/x/net v0.17.0
+	golang.org/x/sys v0.13.0
+	golang.org/x/term v0.13.0
 	google.golang.org/grpc v1.54.0
 	google.golang.org/protobuf v1.30.0
 	gopkg.in/gcfg.v1 v1.2.3
 	gopkg.in/godo.v2 v2.0.9
 	gopkg.in/yaml.v2 v2.4.0
-	k8s.io/api v0.27.5
-	k8s.io/apimachinery v0.27.5
-	k8s.io/apiserver v0.27.5
-	k8s.io/client-go v0.27.5
-	k8s.io/cloud-provider v0.27.5
-	k8s.io/component-base v0.27.5
+	k8s.io/api v0.27.6
+	k8s.io/apimachinery v0.27.6
+	k8s.io/apiserver v0.27.6
+	k8s.io/client-go v0.27.6
+	k8s.io/cloud-provider v0.27.6
+	k8s.io/component-base v0.27.6
 	k8s.io/klog/v2 v2.90.1
-	k8s.io/kms v0.27.5
-	k8s.io/kubernetes v1.27.5
-	k8s.io/mount-utils v0.27.5
+	k8s.io/kms v0.27.6
+	k8s.io/kubernetes v1.27.6
+	k8s.io/mount-utils v0.27.6
 	k8s.io/utils v0.0.0-20230406110748-d93618cff8a2
 	software.sslmate.com/src/go-pkcs12 v0.2.0
 )
@@ -123,11 +123,11 @@ require (
 	go.uber.org/atomic v1.10.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.24.0 // indirect
-	golang.org/x/crypto v0.8.0 // indirect
+	golang.org/x/crypto v0.14.0 // indirect
 	golang.org/x/exp v0.0.0-20230321023759-10a507213a29 // indirect
 	golang.org/x/oauth2 v0.7.0 // indirect
 	golang.org/x/sync v0.1.0 // indirect
-	golang.org/x/text v0.9.0 // indirect
+	golang.org/x/text v0.13.0 // indirect
 	golang.org/x/time v0.3.0 // indirect
 	golang.org/x/tools v0.7.0 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
@@ -137,48 +137,16 @@ require (
 	gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/apiextensions-apiserver v0.27.5 // indirect
-	k8s.io/component-helpers v0.27.5 // indirect
-	k8s.io/controller-manager v0.27.5 // indirect
-	k8s.io/csi-translation-lib v0.27.5 // indirect
+	k8s.io/apiextensions-apiserver v0.27.6 // indirect
+	k8s.io/component-helpers v0.27.6 // indirect
+	k8s.io/controller-manager v0.27.6 // indirect
+	k8s.io/csi-translation-lib v0.27.6 // indirect
 	k8s.io/kube-openapi v0.0.0-20230501164219-8b0f38b5fd1f // indirect
-	k8s.io/kubectl v0.27.5 // indirect
-	k8s.io/kubelet v0.0.0 // indirect
-	k8s.io/pod-security-admission v0.27.5 // indirect
+	k8s.io/kubectl v0.27.6 // indirect
+	k8s.io/kubelet v0.27.6 // indirect
+	k8s.io/pod-security-admission v0.27.6 // indirect
 	sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.1.2 // indirect
 	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
 	sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
 	sigs.k8s.io/yaml v1.3.0 // indirect
 )
-
-replace (
-	github.com/onsi/ginkgo/v2 => github.com/onsi/ginkgo/v2 v2.9.1
-	k8s.io/api => k8s.io/api v0.27.5
-	k8s.io/apiextensions-apiserver => k8s.io/apiextensions-apiserver v0.27.5
-	k8s.io/apimachinery => k8s.io/apimachinery v0.27.5
-	k8s.io/apiserver => k8s.io/apiserver v0.27.5
-	k8s.io/cli-runtime => k8s.io/cli-runtime v0.27.5
-	k8s.io/client-go => k8s.io/client-go v0.27.5
-	k8s.io/cloud-provider => k8s.io/cloud-provider v0.27.5
-	k8s.io/cluster-bootstrap => k8s.io/cluster-bootstrap v0.27.5
-	k8s.io/code-generator => k8s.io/code-generator v0.27.5
-	k8s.io/component-base => k8s.io/component-base v0.27.5
-	k8s.io/component-helpers => k8s.io/component-helpers v0.27.5
-	k8s.io/controller-manager => k8s.io/controller-manager v0.27.5
-	k8s.io/cri-api => k8s.io/cri-api v0.27.5
-	k8s.io/csi-translation-lib => k8s.io/csi-translation-lib v0.27.5
-	k8s.io/dynamic-resource-allocation => k8s.io/dynamic-resource-allocation v0.27.5
-	k8s.io/kube-aggregator => k8s.io/kube-aggregator v0.27.5
-	k8s.io/kube-controller-manager => k8s.io/kube-controller-manager v0.27.5
-	k8s.io/kube-proxy => k8s.io/kube-proxy v0.27.5
-	k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.27.5
-	k8s.io/kubectl => k8s.io/kubectl v0.27.5
-	k8s.io/kubelet => k8s.io/kubelet v0.27.5
-	k8s.io/legacy-cloud-providers => k8s.io/legacy-cloud-providers v0.27.5
-	k8s.io/metrics => k8s.io/metrics v0.27.5
-	k8s.io/mount-utils => k8s.io/mount-utils v0.27.5
-	k8s.io/pod-security-admission => k8s.io/pod-security-admission v0.27.5
-	k8s.io/sample-apiserver => k8s.io/sample-apiserver v0.27.5
-	k8s.io/sample-cli-plugin => k8s.io/sample-cli-plugin v0.27.5
-	k8s.io/sample-controller => k8s.io/sample-controller v0.27.5
-)