Skip to content

build(deps): bump the sigs-k8s-dependencies group across 1 directory with 9 updates#8691

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/sigs-k8s-dependencies-a7d4e1f9e8
Open

build(deps): bump the sigs-k8s-dependencies group across 1 directory with 9 updates#8691
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/sigs-k8s-dependencies-a7d4e1f9e8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 5, 2026

Bumps the sigs-k8s-dependencies group with 7 updates in the / directory:

Package From To
sigs.k8s.io/cluster-api 1.11.7 1.13.2
sigs.k8s.io/cluster-api-provider-aws/v2 2.10.0 2.11.1
sigs.k8s.io/cluster-api-provider-azure 1.22.0 1.24.1
sigs.k8s.io/cluster-api-provider-gcp 1.11.0 1.12.0
sigs.k8s.io/cluster-api-provider-kubevirt 0.11.1 0.11.2
sigs.k8s.io/cluster-api-provider-openstack 0.13.3 0.14.4
sigs.k8s.io/secrets-store-csi-driver 1.4.8 1.6.0

Updates sigs.k8s.io/cluster-api from 1.11.7 to 1.13.2

Release notes

Sourced from sigs.k8s.io/cluster-api's releases.

v1.13.2

👌 Kubernetes version support

  • Management Cluster: v1.32.x -> v1.36.x
  • Workload Cluster: v1.30.x -> v1.36.x

More information about version support can be found here

Changes since v1.13.1

📈 Overview

  • 10 new commits merged
  • 2 bugs fixed 🐛

🐛 Bug Fixes

  • Devtools: Fix Tilt kube-state-metrics deployment (#13678)
  • KCP: Fix KCP in-place update with InfraMachine webhooks with immutability validation (#13643)

🌱 Others

  • CI: Make it possible to exclude CVEs with govulncheck (#13671)
  • Dependency: Bump envtest 1.36 (#13658)
  • Dependency: Bumping corefile-migration to v1.0.32 (#13635)
  • Dependency: Go bump to 1.25.10 (#13666)
  • e2e: Start testing K8s 1.37 (#13638)
  • KCP: Add kubeadm cluster role (#13670)
  • KCP: KCP cleanup etcd members not started after a machine is remediated (#13688)

📖 Additionally, there has been 1 contribution to our documentation and book. (#13621)

Dependencies

Added

Nothing has changed.

Changed

Removed

Nothing has changed.

Thanks to all our contributors! 😊

v1.13.1

👌 Kubernetes version support

  • Management Cluster: v1.32.x -> v1.36.x
  • Workload Cluster: v1.30.x -> v1.36.x

More information about version support can be found here

Changes since v1.13.0

... (truncated)

Commits
  • ebd807c Merge pull request #13688 from k8s-infra-cherrypick-robot/cherry-pick-13685-t...
  • 9b814bc Address comments
  • f777b26 KCP cleanup etcd members not started after a machine is remediated
  • e218cef Merge pull request #13678 from k8s-infra-cherrypick-robot/cherry-pick-13677-t...
  • 502f5d5 Fix Tilt kube-state-metrics deployment
  • 0dcbb67 Merge pull request #13671 from k8s-infra-cherrypick-robot/cherry-pick-13669-t...
  • 05b6caf Make it possible to exclude CVEs with govulncheck
  • 8a163c9 Merge pull request #13670 from k8s-infra-cherrypick-robot/cherry-pick-13664-t...
  • bc5e594 Add kubeadm cluster role
  • 33bc5c1 Merge pull request #13666 from irapandey/go-bump
  • Additional commits viewable in compare view

Updates sigs.k8s.io/cluster-api-provider-aws/v2 from 2.10.0 to 2.11.1

Release notes

Sourced from sigs.k8s.io/cluster-api-provider-aws/v2's releases.

v2.11.1

Release notes for Cluster API Provider AWS (CAPA) v2.11.1

Documentation

Changelog since v2.11.0

Changes by Kind

Uncategorized

The images for this release are: registry.k8s.io/cluster-api-aws/cluster-api-aws-controller:v2.11.1

Thanks to all our contributors.

v2.11.0

Release notes for Cluster API Provider AWS (CAPA) v2.11.0

Documentation

Changelog since v2.10.2

Changes by Kind

Support

API Change

Feature

Bug or Regression

... (truncated)

Commits
  • eaa4c99 Merge pull request #5974 from k8s-infra-cherrypick-robot/cherry-pick-5973-to-...
  • 1d4b379 fix: isolate ROSAExpiredCreds test from local AWS credentials
  • 3ed12e9 Merge pull request #5972 from k8s-infra-cherrypick-robot/cherry-pick-5971-to-...
  • 4ca685d fix: grandfather hostAffinity validation on AWSMachine updates
  • afcd6d2 Merge pull request #5968 from k8s-infra-cherrypick-robot/cherry-pick-5962-to-...
  • 414a134 fix: return actual error from NAT gateway creation failures
  • 6c47002 Merge pull request #5967 from k8s-infra-cherrypick-robot/cherry-pick-5912-to-...
  • 3824be3 seedling: Bump google.golang.org/grpc from 1.75.1 to 1.79.3
  • ba84ea5 Merge pull request #5963 from k8s-infra-cherrypick-robot/cherry-pick-5910-to-...
  • 53ba0b2 Changed DHA to require hostAffinity to be host to prevent instance drift
  • Additional commits viewable in compare view

Updates sigs.k8s.io/cluster-api-provider-azure from 1.22.0 to 1.24.1

Release notes

Sourced from sigs.k8s.io/cluster-api-provider-azure's releases.

v1.24.1

Changes by Kind

Other (Cleanup or Flake)

Bug or Regression

  • Configure service-account-issuer on workload cluster apiserver in cluster templates to enable workload identity (#6290, @​andyzhangx)
  • Register Windows nodes with uninitialized cloud taint (#6294, @​mboersma)

Failing Tests

Dependencies

Added

  • github.com/go-openapi/testify/v2: v2.0.2

Changed

Removed

Nothing has changed.

Details

kubernetes-sigs/cluster-api-provider-azure@v1.24.0...v1.24.1

v1.24.0

Changes by Kind

Feature

  • Make tilt-up now runs a check that warns when the Azure CLI (az) is not installed or not on PATH, with optional VERBOSE=1 on make check-az-cli to print the detected binary path. (#6177, @​vishalanarase)

Other (Cleanup or Flake)

... (truncated)

Commits
  • 779da95 Merge pull request #6314 from k8s-infra-cherrypick-robot/cherry-pick-6313-to-...
  • a807d99 Merge pull request #6317 from k8s-infra-cherrypick-robot/cherry-pick-6315-to-...
  • b6f9ce9 test/e2e: make collectPodLogs log dump best-effort
  • aa9de1e Bump Azure Service Operator from v2.16.0 to v2.16.1
  • ca68295 Merge pull request #6311 from mboersma/cherry-pick-6309-to-release-1.24
  • 81e870a Bump CAPI to v1.13.2
  • 3ae4da7 Merge pull request #6307 from k8s-infra-cherrypick-robot/cherry-pick-6306-to-...
  • d87fe81 fix: propagate SERVICE_ACCOUNT_ISSUER to workload cluster
  • d7e35d5 Merge pull request #6300 from k8s-infra-cherrypick-robot/cherry-pick-6292-to-...
  • 1c00d62 Bump Go toolchain to v1.25.10
  • Additional commits viewable in compare view

Updates sigs.k8s.io/cluster-api-provider-gcp from 1.11.0 to 1.12.0

Release notes

Sourced from sigs.k8s.io/cluster-api-provider-gcp's releases.

v1.12.0

Urgent Upgrade Notes

(No, really, you MUST read this before you upgrade)

  • Action required If you are importing CAPG APIs and are using SetupWebhookWithManager you'll need to update your call sites. SetupWebhookWithManager methods have been removed from all api packages for all exported types. Callers importing CAPG as a Go library can no longer use these methods. (#1615, @​mdbooth)
  • Action required The short names for GCPManagedClusterTemplate, GCPManagedControlPlaneTemplate, and GCPManagedMachinePoolTemplate have changed from amct, amcpt, and ammpt to gcpmct, gcpmcpt, and gcpmmpt, respectively. If you have any automation that relies on the short names, they will need to be updated accordingly. (#1618, @​furkatgofurov7)

Changes by Kind

Feature

  • Add support for advanced firewall rule management in Network via the enhanced Firewall field. Users can now toggle default rule creation using DefaultRulesManagement or provide custom rules via FirewallRules (#1538, @​barbacbd)

Bug or Regression

  • Fix nil pointer dereference when creating GKE clusters with useIPAliases enabled and optional pod/service CIDR blocks omitted (#1624, @​pkieszcz)
  • Fix nil pointer dereferences when creating/reconciling private GKE clusters with PSC mode (#1591, @​pkieszcz)

Uncategorized

Dependencies

Added

  • cloud.google.com/go/pubsub/v2: v2.0.0
  • github.com/cenkalti/backoff/v5: v5.0.3
  • github.com/golang-jwt/jwt/v5: v5.2.2
  • github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1
  • github.com/grpc-ecosystem/go-grpc-middleware/v2: v2.3.0
  • github.com/moby/moby/api: v1.54.1
  • github.com/moby/moby/client: v0.4.0
  • github.com/olekukonko/cat: 50322a0
  • github.com/olekukonko/errors: v1.1.0
  • github.com/olekukonko/ll: v0.1.1
  • github.com/olekukonko/ts: 78ecb04
  • github.com/russross/blackfriday: v1.6.0
  • github.com/santhosh-tekuri/jsonschema/v5: v5.3.1
  • go.etcd.io/raft/v3: v3.6.0
  • pgregory.net/rapid: v1.2.0
  • sigs.k8s.io/structured-merge-diff/v6: v6.3.2

Changed

... (truncated)

Commits
  • b9b055d Merge pull request #1668 from damdo/testing-investigation
  • 26cd1a5 ci: dynamically compute Ginkgo parallel nodes based on available CPUs
  • 4ded539 Merge pull request #1667 from damdo/e2e-ccm-version-templated
  • 6a81d9c e2e: template cloud-controller-manager version as a variable
  • 72b0f05 Merge pull request #1664 from damdo/fix-upgrades-template-ccm-label
  • f67bdb5 fix: add missing cloud.config to upgrades cluster template
  • cafca0a e2e: pin cloud-controller-manager image to v34.2.0
  • c90374b fix: add missing ccm label to upgrades cluster template
  • 8e41d44 Merge pull request #1665 from damdo/ssh-log-collection
  • 830e2df Merge pull request #1663 from damdo/bump-capi-1.12.8
  • Additional commits viewable in compare view

Updates sigs.k8s.io/cluster-api-provider-kubevirt from 0.11.1 to 0.11.2

Release notes

Sourced from sigs.k8s.io/cluster-api-provider-kubevirt's releases.

v0.11.2

What's Changed

Full Changelog: kubernetes-sigs/cluster-api-provider-kubevirt@v0.11.1...v0.11.2

Commits
  • 2c2bb5b Merge pull request #376 from nunnatsa/r0.11-fix-drain-guest-node-name
  • 9a5c58b don't hold the PR if Coverall is down, ad fails the coverage github action
  • 6162f65 e2e: verify guest node is cordoned during eviction test
  • 65f182e fix: use guest node name when draining node on VM eviction
  • cf0e93d Merge pull request #372 from nunnatsa/r011-cherrypick-366
  • 88ae097 Expose dual-stack addresses in KubevirtMachine status
  • See full diff in compare view

Updates sigs.k8s.io/cluster-api-provider-openstack from 0.13.3 to 0.14.4

Release notes

Sourced from sigs.k8s.io/cluster-api-provider-openstack's releases.

v0.14.4

Highlights

NOTE: Release v0.14.3 was never published due to a build failure. Therefore we are jumping to v0.14.4. All changes for both these release are included below.

Changes since v0.14.3

📈 Overview

  • 1 new commit merged

🌱 Others

  • Bump cloudbuild image to support go 1.25 (#3137)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Thanks to all our contributors! 😊

Changes since v0.14.2

📈 Overview

  • 9 new commits merged

🌱 Others

Dependencies

Added

  • github.com/moby/moby/api: v1.54.1
  • github.com/moby/moby/client: v0.4.0

... (truncated)

Commits
  • 766e941 Merge pull request #3137 from k8s-infra-cherrypick-robot/cherry-pick-3030-to-...
  • dc67737 Bump cloudbuild image to support go 1.25
  • 6152cd6 Merge pull request #3133 from Nordix/uplift-capi-12.7
  • a4b1e2d Bump cluster-api to v1.12.7
  • 95188d0 Merge pull request #3130 from kubernetes-sigs/dependabot/go_modules/release-0...
  • 02d8902 Merge pull request #3129 from kubernetes-sigs/dependabot/github_actions/relea...
  • 29d6ea1 Update generated code
  • 6fa213e 🌱(deps): Bump the all-go-mod-patch-and-minor group across 1 director...
  • e044fee 🌱(deps): Bump the all-github-actions group with 4 updates
  • 6db6054 Merge pull request #3116 from Nordix/lentzi90/ignore-bsd-cve
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.3

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.23.3

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.2...v0.23.3

v0.23.2

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.1...v0.23.2

v0.23.1

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.0...v0.23.1

v0.23.0

🔆 Highlights

⚠️ Breaking changes

✨ Features

... (truncated)

Commits
  • f9589b9 Merge pull request #3469 from k8s-infra-cherrypick-robot/cherry-pick-3468-to-...
  • 25615ad Ensure DefaulterRemoveUnknownOrOmitableFields is still working even if object...
  • 8122a62 Merge pull request #3467 from k8s-infra-cherrypick-robot/cherry-pick-3463-to-...
  • 35093c6 Reduce memory usage of default webhooks
  • 4dbfa5c [release-0.23] 🐛 Fix fake client's SSA status patch resource version check (#...
  • f52bbb8 Merge pull request #3437 from k8s-infra-cherrypick-robot/cherry-pick-3430-to-...
  • 4f41337 Merge pull request #3438 from k8s-infra-cherrypick-robot/cherry-pick-3434-to-...
  • e29a1b9 seedling: Test cache reader waits for cache sync
  • 83c8dc3 bug: Fakeclient: Fix status apply if existing object has managedFields set
  • bf6bcd5 Merge pull request #3436 from k8s-infra-cherrypick-robot/cherry-pick-3431-to-...
  • Additional commits viewable in compare view

Updates sigs.k8s.io/secrets-store-csi-driver from 1.4.8 to 1.6.0

Release notes

Sourced from sigs.k8s.io/secrets-store-csi-driver's releases.

v1.6.0 - 2026-04-29

Secret Rotation via RequiresRepublish

The dedicated secret rotation controller has been replaced with the CSI RequiresRepublish mechanism. The CSIDriver now sets requiresRepublish: true, causing kubelet to periodically call NodePublishVolume, which re-fetches secrets from the provider when --enable-secret-rotation=true. The --rotation-poll-interval now acts as a minimum cache duration between rotations. This change removes the need for privileged RBAC permissions (listing pods, secrets, and creating service account tokens) that were previously required by the rotation controller. Rotation-specific RBAC resources (rbac-secretproviderrotation.yaml, rbac-secretprovidertokenrequest.yaml) have been removed and can be cleaned up from manual deployments.

Note: Please review the upgrade notes before upgrading.

Changelog

Bug Fixes 🐞

Build 🏭

Continuous Integration 💜

Documentation 📘

Features 🌈

Maintenance 🔧

... (truncated)

Commits
  • 4960f96 Merge pull request #2034aramase/automated-cherry-pick-of-#2033
  • 965710a Merge pull request #2031aramase/automated-cherry-pick-of-#2030
  • e5ecbca release: update manifest and helm charts for v1.6.0
  • a74b15f ci: replace broken setup-kind action with direct kind installation
  • 39e1762 Merge pull request #2029 from aramase/aramase/c/no_op_trigger_build
  • 3ef1c74 chore: no-op changes to trigger image-push postsubmit
  • e03584d Merge pull request #2028 from aramase/aramase/c/docker_build_fix
  • 6d320df fix(build): disable provenance and SBOM in buildx to fix manifest creation
  • 5690b4e Merge pull request #2027 from aramase/aramase/c/bump_release_1.6_v1.6.0_part2
  • 324d468 chore: bump gcb-docker-gcloud to latest in cloudbuild
  • Additional commits viewable in compare view

Updates sigs.k8s.io/structured-merge-diff/v6 from 6.3.2 to 6.4.0

Commits
  • d56620e Merge pull request #323 from aramase/aramase/f/fix_generators_inline
  • 6e51105 fix(value): detect inline fields structurally instead of matching ",inline" tag
  • 8fd4c42 Merge pull request #312 from alvaroaleman/unexported
  • eedc536 Merge pull request #320 from inteon/use_slices_funcs
  • ee54385 Merge pull request #322 from inteon/typed_allocator
  • f0a2e6e add benchmark for FromValue function
  • 7ba0b4e Merge pull request #314 from inteon/tests_add_state
  • 138fc0a fully clear freed objects
  • f7fc3d8 make freelist typed
  • 910648e Code cleanup: use modern slices.BinarySearchFunc and slices.Insert where poss...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

  • Chores
    • Updated Go toolchain from 1.25.7 to 1.25.9
    • Upgraded Kubernetes, AWS SDK, and related ecosystem dependencies
    • Optimized module graph by removing and updating indirect dependencies

…with 9 updates

Bumps the sigs-k8s-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [sigs.k8s.io/cluster-api](https://github.com/kubernetes-sigs/cluster-api) | `1.11.7` | `1.13.2` |
| [sigs.k8s.io/cluster-api-provider-aws/v2](https://github.com/kubernetes-sigs/cluster-api-provider-aws) | `2.10.0` | `2.11.1` |
| [sigs.k8s.io/cluster-api-provider-azure](https://github.com/kubernetes-sigs/cluster-api-provider-azure) | `1.22.0` | `1.24.1` |
| [sigs.k8s.io/cluster-api-provider-gcp](https://github.com/kubernetes-sigs/cluster-api-provider-gcp) | `1.11.0` | `1.12.0` |
| [sigs.k8s.io/cluster-api-provider-kubevirt](https://github.com/kubernetes-sigs/cluster-api-provider-kubevirt) | `0.11.1` | `0.11.2` |
| [sigs.k8s.io/cluster-api-provider-openstack](https://github.com/kubernetes-sigs/cluster-api-provider-openstack) | `0.13.3` | `0.14.4` |
| [sigs.k8s.io/secrets-store-csi-driver](https://github.com/kubernetes-sigs/secrets-store-csi-driver) | `1.4.8` | `1.6.0` |



Updates `sigs.k8s.io/cluster-api` from 1.11.7 to 1.13.2
- [Release notes](https://github.com/kubernetes-sigs/cluster-api/releases)
- [Commits](kubernetes-sigs/cluster-api@v1.11.7...v1.13.2)

Updates `sigs.k8s.io/cluster-api-provider-aws/v2` from 2.10.0 to 2.11.1
- [Release notes](https://github.com/kubernetes-sigs/cluster-api-provider-aws/releases)
- [Commits](kubernetes-sigs/cluster-api-provider-aws@v2.10.0...v2.11.1)

Updates `sigs.k8s.io/cluster-api-provider-azure` from 1.22.0 to 1.24.1
- [Release notes](https://github.com/kubernetes-sigs/cluster-api-provider-azure/releases)
- [Commits](kubernetes-sigs/cluster-api-provider-azure@v1.22.0...v1.24.1)

Updates `sigs.k8s.io/cluster-api-provider-gcp` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/kubernetes-sigs/cluster-api-provider-gcp/releases)
- [Commits](kubernetes-sigs/cluster-api-provider-gcp@v1.11.0...v1.12.0)

Updates `sigs.k8s.io/cluster-api-provider-kubevirt` from 0.11.1 to 0.11.2
- [Release notes](https://github.com/kubernetes-sigs/cluster-api-provider-kubevirt/releases)
- [Changelog](https://github.com/kubernetes-sigs/cluster-api-provider-kubevirt/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/cluster-api-provider-kubevirt@v0.11.1...v0.11.2)

Updates `sigs.k8s.io/cluster-api-provider-openstack` from 0.13.3 to 0.14.4
- [Release notes](https://github.com/kubernetes-sigs/cluster-api-provider-openstack/releases)
- [Changelog](https://github.com/kubernetes-sigs/cluster-api-provider-openstack/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/cluster-api-provider-openstack@v0.13.3...v0.14.4)

Updates `sigs.k8s.io/controller-runtime` from 0.22.4 to 0.23.3
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.22.4...v0.23.3)

Updates `sigs.k8s.io/secrets-store-csi-driver` from 1.4.8 to 1.6.0
- [Release notes](https://github.com/kubernetes-sigs/secrets-store-csi-driver/releases)
- [Changelog](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/docs/RELEASE.md)
- [Commits](kubernetes-sigs/secrets-store-csi-driver@v1.4.8...v1.6.0)

Updates `sigs.k8s.io/structured-merge-diff/v6` from 6.3.2 to 6.4.0
- [Release notes](https://github.com/kubernetes-sigs/structured-merge-diff/releases)
- [Changelog](https://github.com/kubernetes-sigs/structured-merge-diff/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/structured-merge-diff@v6.3.2...v6.4.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/cluster-api
  dependency-version: 1.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sigs-k8s-dependencies
- dependency-name: sigs.k8s.io/cluster-api-provider-aws/v2
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sigs-k8s-dependencies
- dependency-name: sigs.k8s.io/cluster-api-provider-azure
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sigs-k8s-dependencies
- dependency-name: sigs.k8s.io/cluster-api-provider-gcp
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sigs-k8s-dependencies
- dependency-name: sigs.k8s.io/cluster-api-provider-kubevirt
  dependency-version: 0.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: sigs-k8s-dependencies
- dependency-name: sigs.k8s.io/cluster-api-provider-openstack
  dependency-version: 0.14.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sigs-k8s-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.23.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sigs-k8s-dependencies
- dependency-name: sigs.k8s.io/secrets-store-csi-driver
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sigs-k8s-dependencies
- dependency-name: sigs.k8s.io/structured-merge-diff/v6
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: sigs-k8s-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added area/ci-tooling Indicates the PR includes changes for CI or tooling ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Jun 5, 2026
@openshift-merge-bot
Copy link
Copy Markdown
Contributor

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Jun 5, 2026

📝 Walkthrough

Walkthrough

The pull request updates the module dependency graph in go.mod. The Go toolchain version is bumped from 1.25.7 to 1.25.9. Direct dependencies on AWS SDK EC2 service and test frameworks (ginkgo/gomega) receive patch upgrades. A broad set of Kubernetes and cluster-related components is upgraded, including multiple k8s.io and sigs.k8s.io packages. In the indirect dependency set, an Azure SDK module is removed and AWS SDK indirect references are pruned. Indirect dependencies across observability (pprof, Prometheus, OpenTelemetry), gRPC, and additional Kubernetes components are upgraded to newer versions. The replace directives at the end of the file remain unchanged.

Suggested reviewers

  • enxebre
  • sjenning
  • bryan-cox
🚥 Pre-merge checks | ✅ 11
✅ Passed checks (11 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: bumping sigs.k8s.io dependencies with version updates across multiple packages.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed PR modifies go.mod dependencies only; no Ginkgo test files present or modified. Custom check for Ginkgo test name stability is not applicable to this go.mod dependency update PR.
Test Structure And Quality ✅ Passed PR contains only go.mod and go.sum changes (dependency version bumps); no Ginkgo test code or test files were modified, making the test quality check not applicable.
Topology-Aware Scheduling Compatibility ✅ Passed PR modifies only go.mod dependency versions (no deployment manifests, operator code, or controllers changed), so topology-aware scheduling check is not applicable.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed PR updates Go dependencies in go.mod and adds unit tests (using standard testing package). No Ginkgo e2e tests were added, so the IPv6/disconnected network check does not apply.
No-Weak-Crypto ✅ Passed Existing SHA1 usage is justified (AWS OIDC thumbprints and UUID generation) with nolint comments. No weak crypto in dependency updates.
Container-Privileges ✅ Passed PR modifies only go.mod/go.sum (dependency versions); the container-privileges check applies to K8s manifests/container configs which are not present in this PR's changes.
No-Sensitive-Data-In-Logs ✅ Passed This PR only modifies go.mod/go.sum/vendor files (dependency declarations), not source code. No executable logging statements with sensitive data exposure are present.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/go_modules/sigs-k8s-dependencies-a7d4e1f9e8

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci openshift-ci Bot requested review from csrwng and muraee June 5, 2026 22:37
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Jun 5, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign devguyio for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Jun 5, 2026

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@go.mod`:
- Line 218: go.mod currently pins indirect dependencies with pseudo-versions for
github.com/google/pprof (545e8a4df936) and
google.golang.org/genproto/googleapis/api (9d38bb4040a9) which are untagged
commits; either replace those pseudo-versions with the nearest stable tagged
releases (locate tags for github.com/google/pprof and google.golang.org/genproto
and run go get <module>@<tag> then go mod tidy to update go.sum) or add a short
rationale in the PR explaining why untagged commits are required and acceptable
for production (include link to upstream commit SHAs and any validation
performed); update go.mod entries for the modules named github.com/google/pprof
and google.golang.org/genproto/googleapis/api accordingly and ensure CI passes.
- Around line 298-300: The go.mod entry for k8s.io/kubelet (k8s.io/kubelet
v0.34.0 // indirect) creates a version mismatch with other k8s.io/* deps at
v0.35.x; run dependency cleanup (e.g., run make update or go mod tidy) to align
k8s.io/kubelet to the v0.35.x line or remove it if truly unused, and if you
intentionally must keep v0.34.0 add a brief comment in go.mod or the repo README
explaining why kubelet remains at v0.34.0 (reference the go.mod symbol
k8s.io/kubelet and the docs/content/reference/versioning-support.md mention in
your justification).
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 3e2df15b-7141-4dbf-81c6-db11d18a6a30

📥 Commits

Reviewing files that changed from the base of the PR and between ffa9791 and ce3f2aa.

⛔ Files ignored due to path filters (299)
  • go.sum is excluded by !**/*.sum
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/CHANGELOG.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/LICENSE.txt is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/assets.json is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/autorest.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/availabilitysets_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/build.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/capacityreservationgroups_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/capacityreservations_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/ci.yml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/client_factory.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudserviceoperatingsystems_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudserviceroleinstances_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudserviceroles_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudservices_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/cloudservicesupdatedomain_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/communitygalleries_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/communitygalleryimages_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/communitygalleryimageversions_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/constants.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/dedicatedhostgroups_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/dedicatedhosts_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/diskaccesses_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/diskencryptionsets_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/diskrestorepoint_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/disks_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleries_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryapplications_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryapplicationversions_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryimages_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/galleryimageversions_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/gallerysharingprofile_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/images_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/loganalytics_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/models.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/models_serde.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/operations_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/options.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/proximityplacementgroups_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/resourceskus_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/responses.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/restorepointcollections_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/restorepoints_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sharedgalleries_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sharedgalleryimages_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sharedgalleryimageversions_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/snapshots_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/sshpublickeys_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/time_rfc3339.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/usage_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineextensionimages_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineextensions_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineimages_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineimagesedgezone_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachineruncommands_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachines_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetextensions_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetrollingupgrades_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesets_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetvmextensions_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetvmruncommands_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinescalesetvms_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5/virtualmachinesizes_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/.gitignore is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/.travis.yml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/CODE_OF_CONDUCT.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/CONTRIBUTING.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/LICENSE is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/arrays.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/converter.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/doc.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/error.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/numerics.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/patterns.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/utils.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/validator.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/asaskevich/govalidator/v11/wercker.yml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/CHANGELOG.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_AttachVolume.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_CreateSecondaryNetwork.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_CreateSecondarySubnet.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_DeleteSecondaryNetwork.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_DeleteSecondarySubnet.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_DescribeSecondaryInterfaces.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_DescribeSecondaryNetworks.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_DescribeSecondarySubnets.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_DetachVolume.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_ModifyInstanceCpuOptions.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_ModifyInstanceMetadataDefaults.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_ModifyInstanceMetadataOptions.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_RunInstances.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_SearchTransitGatewayRoutes.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/deserializers.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/generated.json is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/go_module_metadata.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/serializers.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/types/enums.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/types/types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/ec2/validators.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/CHANGELOG.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/LICENSE.txt is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_AssociateAccessPolicy.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_AssociateEncryptionConfig.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_AssociateIdentityProviderConfig.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_CreateAccessEntry.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_CreateAddon.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_CreateCapability.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_CreateCluster.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_CreateEksAnywhereSubscription.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_CreateFargateProfile.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_CreateNodegroup.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_CreatePodIdentityAssociation.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DeleteAccessEntry.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DeleteAddon.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DeleteCapability.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DeleteCluster.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DeleteEksAnywhereSubscription.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DeleteFargateProfile.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DeleteNodegroup.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DeletePodIdentityAssociation.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DeregisterCluster.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeAccessEntry.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeAddon.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeAddonConfiguration.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeAddonVersions.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeCapability.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeCluster.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeClusterVersions.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeEksAnywhereSubscription.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeFargateProfile.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeIdentityProviderConfig.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeInsight.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeInsightsRefresh.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeNodegroup.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribePodIdentityAssociation.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DescribeUpdate.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_DisassociateAccessPolicy.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListAccessEntries.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListAccessPolicies.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListAddons.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListAssociatedAccessPolicies.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListCapabilities.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListClusters.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListEksAnywhereSubscriptions.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListFargateProfiles.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListIdentityProviderConfigs.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListInsights.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListNodegroups.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListPodIdentityAssociations.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListTagsForResource.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_ListUpdates.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_RegisterCluster.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_StartInsightsRefresh.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_TagResource.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_UntagResource.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_UpdateAccessEntry.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_UpdateAddon.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_UpdateCapability.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_UpdateClusterConfig.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_UpdateClusterVersion.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_UpdateNodegroupConfig.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_UpdateNodegroupVersion.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/api_op_UpdatePodIdentityAssociation.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/auth.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/deserializers.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/doc.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/endpoints.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/generated.json is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/go_module_metadata.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/internal/endpoints/endpoints.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/options.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/serializers.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/types/enums.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/types/errors.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/types/types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/aws/aws-sdk-go-v2/service/eks/validators.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/grpc-ecosystem/grpc-gateway/v2/runtime/handler.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/grpc-ecosystem/grpc-gateway/v2/runtime/mux.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/ginkgo/v2/CHANGELOG.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/ginkgo/v2/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/ginkgo/v2/ginkgo/command/program.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/ginkgo/v2/ginkgo/main.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/ginkgo/v2/ginkgo_t_dsl.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/ginkgo/v2/internal/testingtproxy/testing_t_proxy.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/ginkgo/v2/types/config.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/ginkgo/v2/types/flags.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/ginkgo/v2/types/version.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/CHANGELOG.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/gomega_dsl.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift-online/ocm-common/pkg/resource/validations/kms_arn_regex_validation.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/.golangci.yml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/Makefile.common is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/cpuinfo.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/cpuinfo_armx.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/cpuinfo_loong64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/cpuinfo_mipsx.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/cpuinfo_others.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/cpuinfo_ppcx.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/cpuinfo_riscvx.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/cpuinfo_s390x.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/cpuinfo_x86.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/fs_statfs_notype.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/fs_statfs_type.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/internal/util/sysreadfile.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/internal/util/sysreadfile_compat.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/kernel_hung.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/kernel_random.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/net_tcp.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_interrupts.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_maps.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_smaps.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_statm.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_status.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/vm.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/zoneinfo.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/exporters/otlp/otlptrace/internal/tracetransform/attribute.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/observ/instrumentation.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/version.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/exporters/otlp/otlptrace/version.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/semconv/v1.39.0/MIGRATION.md is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/semconv/v1.39.0/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/semconv/v1.39.0/attribute_group.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/semconv/v1.39.0/doc.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/semconv/v1.39.0/error_type.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/semconv/v1.39.0/exception.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/semconv/v1.39.0/otelconv/metric.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/semconv/v1.39.0/schema.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/proto/otlp/common/v1/common.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**, !**/*.pb.go
  • vendor/golang.org/x/crypto/blake2b/blake2b.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/crypto/blake2b/blake2bAVX2_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/crypto/blake2b/blake2bAVX2_amd64.s is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/crypto/blake2b/blake2b_amd64.s is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/crypto/blake2b/blake2b_generic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/crypto/blake2b/blake2b_ref.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/crypto/blake2b/blake2x.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/crypto/blake2b/go125.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/crypto/blake2b/register.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/genproto/googleapis/api/annotations/client.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**, !**/*.pb.go
  • vendor/google.golang.org/genproto/googleapis/api/annotations/field_behavior.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**, !**/*.pb.go
  • vendor/google.golang.org/genproto/googleapis/api/annotations/field_info.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**, !**/*.pb.go
  • vendor/google.golang.org/genproto/googleapis/api/annotations/http.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**, !**/*.pb.go
  • vendor/google.golang.org/genproto/googleapis/api/annotations/resource.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**, !**/*.pb.go
  • vendor/google.golang.org/genproto/googleapis/api/annotations/routing.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**, !**/*.pb.go
  • vendor/google.golang.org/genproto/googleapis/api/httpbody/httpbody.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**, !**/*.pb.go
  • vendor/google.golang.org/genproto/googleapis/api/launch_stage.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**, !**/*.pb.go
  • vendor/k8s.io/apimachinery/pkg/api/validate/union.go is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/apiserver/pkg/endpoints/filters/audit.go is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/client-go/kubernetes/fake/clientset_generated.go is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/klog/v2/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/klog/v2/internal/serialize/keyvalues.go is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/klog/v2/internal/serialize/keyvalues_no_slog.go is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/klog/v2/internal/serialize/keyvalues_slog.go is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/klog/v2/klog.go is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/klog/v2/klogr.go is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/klog/v2/klogr_slog.go is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/klog/v2/textlogger/options.go is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/klog/v2/textlogger/textlogger.go is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/kubelet/config/v1beta1/types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/k8s.io/utils/strings/slices/slices.go is excluded by !vendor/**, !**/vendor/**
  • vendor/modules.txt is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta1/awscluster_conversion.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta1/awsmachine_conversion.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta1/network_types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta1/types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta1/zz_generated.conversion.go is excluded by !vendor/**, !**/vendor/**, !**/zz_generated*.go, !**/zz_generated*
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awscluster_defaults.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awscluster_types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awscluster_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awsclustercontrolleridentity_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awsclusterroleidentity_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awsclusterstaticidentity_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awsclustertemplate_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awsmachine_types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awsmachine_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/awsmachinetemplate_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/bastion.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/defaults.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/network_types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/api/v1beta2/zz_generated.deepcopy.go is excluded by !vendor/**, !**/vendor/**, !**/zz_generated*.go, !**/zz_generated*
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/controlplane/rosa/api/v1beta2/rosacontrolplane_types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/controlplane/rosa/api/v1beta2/rosacontrolplane_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/controlplane/rosa/api/v1beta2/zz_generated.deepcopy.go is excluded by !vendor/**, !**/vendor/**, !**/zz_generated*.go, !**/zz_generated*
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/exp/api/v1beta2/OWNERS is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/exp/api/v1beta2/awsfargateprofile_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/exp/api/v1beta2/awsmachinepool_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/exp/api/v1beta2/awsmanagedmachinepool_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/exp/api/v1beta2/rosamachinepool_defaults.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/exp/api/v1beta2/rosamachinepool_types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/exp/api/v1beta2/rosamachinepool_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/exp/api/v1beta2/rosanetwork_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/exp/api/v1beta2/rosaroleconfig_webhook.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/exp/api/v1beta2/validation.go is excluded by !vendor/**, !**/vendor/**
  • vendor/sigs.k8s.io/cluster-api-provider-aws/v2/exp/api/v1beta2/zz_generated.deepcopy.go is excluded by !vendor/**, !**/vendor/**, !**/zz_generated*.go, !**/zz_generated*
📒 Files selected for processing (1)
  • go.mod

Comment thread go.mod
github.com/google/btree v1.1.3 // indirect
github.com/google/gnostic-models v0.7.1 // indirect
github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 // indirect
github.com/google/pprof v0.0.0-20260402051712-545e8a4df936 // indirect
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Verify pseudo-version commits exist and check release status

echo "=== Checking google/pprof commit 545e8a4df936 ==="
curl -s https://api.github.com/repos/google/pprof/commits/545e8a4df936 | jq -r '.commit.message, .commit.author.date'

echo -e "\n=== Checking if commit is part of a tagged release ==="
curl -s https://api.github.com/repos/google/pprof/tags | jq -r '.[].name' | head -10

echo -e "\n=== Checking googleapis/go-genproto commit 9d38bb4040a9 ==="
curl -s https://api.github.com/repos/googleapis/go-genproto/commits/9d38bb4040a9 2>/dev/null | jq -r '.commit.message, .commit.author.date' || echo "Note: googleapis may use different repo structure"

Repository: openshift/hypershift

Length of output: 1602


🏁 Script executed:

#!/bin/bash
set -euo pipefail

pprof_sha="545e8a4df936"
genproto_sha="9d38bb4040a9"

check_repo_tags() {
  local owner="$1" repo="$2" sha="$3"
  echo "=== ${owner}/${repo} commit ${sha}: searching matching tags ==="

  found=0
  for page in $(seq 1 10); do
    tags_json="$(curl -fsSL "https://api.github.com/repos/${owner}/${repo}/tags?per_page=100&page=${page}" 2>/dev/null || true)"
    if [[ -z "${tags_json}" || "${tags_json}" == "null" ]]; then
      break
    fi

    matches="$(echo "${tags_json}" | jq -r --arg sha "${sha}" '.[] | select(.commit.sha|endswith($sha)) | .name' | head -n 20)"
    if [[ -n "${matches}" ]]; then
      echo "Matched tag(s) (page ${page}):"
      echo "${matches}"
      found=1
      break
    fi

    # if fewer than per_page tags returned, likely last page
    count="$(echo "${tags_json}" | jq 'length')"
    if [[ "${count}" -lt 100 ]]; then
      break
    fi
  done

  if [[ "${found}" -eq 0 ]]; then
    echo "No matching tag found for commit ${sha} in the first 10 tag pages."
  fi
  echo
}

check_repo_tags "google" "pprof" "${pprof_sha}"
check_repo_tags "googleapis" "go-genproto" "${genproto_sha}"

Repository: openshift/hypershift

Length of output: 462


🏁 Script executed:

#!/bin/bash
set -euo pipefail

pprof_sha="545e8a4df936"
genproto_sha="9d38bb4040a9"

fetch_tags_match_commit() {
  local owner="$1" repo="$2" sha="$3"
  local per_page=100
  local page=1
  local found_any=0

  while true; do
    tags_json="$(curl -fsSL "https://api.github.com/repos/${owner}/${repo}/tags?per_page=${per_page}&page=${page}" 2>/dev/null || true)"
    if [[ -z "${tags_json}" || "${tags_json}" == "null" || "${tags_json}" == "[]" ]]; then
      break
    fi

    matches="$(echo "${tags_json}" | jq -r --arg sha "${sha}" '.[] | select(.commit.sha | endswith($sha)) | .name' | head -n 50)"
    if [[ -n "${matches}" ]]; then
      echo "${owner}/${repo} @${sha} matched tag(s) on page ${page}:"
      echo "${matches}"
      found_any=1
      break
    fi

    # Stop if we got less than a full page of tags (likely last page)
    count="$(echo "${tags_json}" | jq 'length')"
    if [[ "${count}" -lt "${per_page}" ]]; then
      break
    fi
    page=$((page+1))
    if [[ "${page}" -gt 50 ]]; then
      break
    fi
  done

  if [[ "${found_any}" -eq 0 ]]; then
    echo "${owner}/${repo} @${sha}: no matching tag found (searched up to page ${page})."
  fi
  echo
}

check_commit_exists() {
  local owner="$1" repo="$2" sha="$3"
  echo "=== Checking ${owner}/${repo} commit ${sha} exists ==="
  curl -fsSL "https://api.github.com/repos/${owner}/${repo}/commits/${sha}" >/dev/null \
    && echo "Commit exists (GitHub returned 200)." \
    || echo "Commit lookup failed."
  echo
}

query_osv_for_go_module_version() {
  local package="$1" version="$2"
  echo "=== OSV query: ${package} @ ${version} ==="
  cat <<JSON | curl -fsSL -H "Content-Type: application/json" -d `@-` https://api.osv.dev/v1/query
{
  "package": { "name": "${package}" },
  "version": "${version}"
}
JSON
  echo
}

check_commit_exists "google" "pprof" "${pprof_sha}"
check_commit_exists "googleapis" "go-genproto" "${genproto_sha}"

fetch_tags_match_commit "google" "pprof" "${pprof_sha}"
fetch_tags_match_commit "googleapis" "go-genproto" "${genproto_sha}"

# Module paths from go.mod snippet
query_osv_for_go_module_version "github.com/google/pprof" "v0.0.0-20260402051712-545e8a4df936"
query_osv_for_go_module_version "google.golang.org/genproto/googleapis/api" "v0.0.0-20260401024825-9d38bb4040a9"

Repository: openshift/hypershift

Length of output: 610


Review pseudo-version transitive deps for release provenance (pprof/genproto)

The indirect pseudo-versions at go.mod lines 218 (github.com/google/pprof ...-545e8a4df936) and 289 (google.golang.org/genproto/googleapis/api ...-9d38bb4040a9) point to real commits, but no corresponding upstream git tags were found for those SHAs (i.e., they’re untagged/unreleased commits). OSV shows no known advisories for these exact module versions. Request: justify using untagged commits for production, or prefer tagged releases if policy requires it.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` at line 218, go.mod currently pins indirect dependencies with
pseudo-versions for github.com/google/pprof (545e8a4df936) and
google.golang.org/genproto/googleapis/api (9d38bb4040a9) which are untagged
commits; either replace those pseudo-versions with the nearest stable tagged
releases (locate tags for github.com/google/pprof and google.golang.org/genproto
and run go get <module>@<tag> then go mod tidy to update go.sum) or add a short
rationale in the PR explaining why untagged commits are required and acceptable
for production (include link to upstream commit SHAs and any validation
performed); update go.mod entries for the modules named github.com/google/pprof
and google.golang.org/genproto/googleapis/api accordingly and ensure CI passes.

Comment thread go.mod
Comment on lines +298 to +300
k8s.io/kms v0.35.4 // indirect
k8s.io/kube-openapi v0.0.0-20251125145642-4e65d59e963e // indirect
k8s.io/kubelet v0.33.3 // indirect
k8s.io/kubelet v0.34.0 // indirect
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check why k8s.io/kubelet is one version behind

echo "=== Checking go.mod dependency graph for k8s.io/kubelet ==="
rg -A 2 "k8s.io/kubelet" go.mod

echo -e "\n=== Checking which direct dependency requires kubelet v0.34.0 ==="
go mod graph 2>/dev/null | rg "k8s.io/kubelet@v0.34.0" | head -10 || echo "Run 'go mod graph | grep kubelet' locally to trace"

Repository: openshift/hypershift

Length of output: 910


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== k8s.io/* versions in go.mod ==="
rg -n '^\s*k8s\.io/' go.mod | sed -E 's/^\s*//'

echo
echo "=== Any k8s.io/* pinned at v0.34.x (or other mismatches) ==="
rg -n '^\s*k8s\.io/.* v0\.34\.' go.mod || true

echo
echo "=== Read version skew policy doc section (versioning-support.md) ==="
ls -la docs/content/reference/versioning-support.md
python3 - <<'PY'
import re, pathlib
p = pathlib.Path("docs/content/reference/versioning-support.md")
txt = p.read_text(encoding="utf-8")
# Print lines mentioning skew/versioning/version differences
for pat in ["skew", "version", "minor", "compat", "v0.35", "v0.34", "kubelet", "k8s.io/kubelet"]:
    if pat:
        m = [line for line in txt.splitlines() if pat.lower() in line.lower()]
        if m:
            print("\n--- Matches for:", pat, "---")
            for line in m[:30]:
                print(line)
PY

Repository: openshift/hypershift

Length of output: 6981


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== Search for k8s.io/kubelet imports in repo ==="
rg -n --hidden --glob '!vendor/**' 'k8s\.io/kubelet' . || true

echo
echo "=== Show go.mod entries around kubelet ==="
sed -n '285,310p' go.mod

echo
echo "=== Check if any dependency also pins k8s.io/apiserver/apimachinery at v0.34 via imports ==="
rg -n --hidden --glob '!vendor/**' 'k8s\.io/(apiserver|api|apimachinery)' go.mod || true

Repository: openshift/hypershift

Length of output: 2741


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== Non-vendor references to k8s.io/kubelet in the repo (excluding all vendor dirs) ==="
rg -n --hidden --glob '!**/vendor/**' --glob '!**/go.sum' --glob '!**/go.mod' --glob '!**/hack/**/vendor/**' 'k8s\.io/kubelet/' . || true

echo
echo "=== go mod why k8s.io/kubelet (explanation of which module chain brings it) ==="
go mod why k8s.io/kubelet 2>/dev/null || go mod why k8s.io/kubelet || true

Repository: openshift/hypershift

Length of output: 420


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== api/go.mod k8s.io/kubelet entries ==="
rg -n '^\s*k8s\.io/kubelet ' api/go.mod || true

echo
echo "=== api module: non-vendor references to k8s.io/kubelet (excluding vendors) ==="
rg -n --hidden --glob '!**/vendor/**' --glob '!**/go.sum' --glob '!**/go.mod' 'k8s\.io/kubelet/' api || true

echo
echo "=== api module: go mod why k8s.io/kubelet ==="
( cd api && go mod why k8s.io/kubelet 2>/dev/null || cd api && go mod why k8s.io/kubelet ) || true

Repository: openshift/hypershift

Length of output: 487


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== go mod why for kubelet subpackages referenced by docs/comments ==="
go mod why k8s.io/kubelet/config/v1beta1 2>/dev/null || go mod why k8s.io/kubelet/config/v1beta1 || true
go mod why k8s.io/kubelet/pkg/apis/deviceplugin/v1alpha 2>/dev/null || go mod why k8s.io/kubelet/pkg/apis/deviceplugin/v1alpha || true
go mod why k8s.io/kubelet/pkg/apis 2>/dev/null || go mod why k8s.io/kubelet/pkg/apis || true

echo
echo "=== Where kubelet/config/v1beta1 is referenced (excluding vendor) ==="
rg -n --hidden --glob '!**/vendor/**' --glob '!**/go.sum' --glob '!**/go.mod' 'k8s\.io/kubelet/config/v1beta1' . || true

Repository: openshift/hypershift

Length of output: 755


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== Go files importing k8s.io/kubelet/config/v1beta1 (excluding vendor) ==="
rg -n --hidden --glob '!**/vendor/**' 'k8s\.io/kubelet/config/v1beta1' --glob '*.go' .

echo
echo "=== Go files importing k8s.io/kubelet (any package, excluding vendor) ==="
rg -n --hidden --glob '!**/vendor/**' 'k8s\.io/kubelet' --glob '*.go' . || true

Repository: openshift/hypershift

Length of output: 140


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== Search for kubelet config types in Go files (excluding vendor) ==="
rg -n --hidden --glob '!**/vendor/**' --glob '*.go' 'KubeletConfiguration|kubelet/config/v1beta1|k8s\.io/kubelet/config/v1beta1' . || true

echo
echo "=== Search for kubelet config types in repo (including vendor) ==="
rg -n --hidden --glob '*.go' 'KubeletConfiguration|k8s\.io/kubelet/config/v1beta1|k8s\.io/kubelet/config/v1beta1' . | head -50

echo
echo "=== Inspect hypershift-operator/controllers/nodepool for kubelet references ==="
rg -n --hidden --glob 'hypershift-operator/controllers/nodepool/**' --glob '*.go' 'k8s\.io/kubelet|KubeletConfiguration' hypershift-operator/controllers/nodepool || true

Repository: openshift/hypershift

Length of output: 18488


🌐 Web query:

Kubernetes version skew policy kubelet apiserver minor version skew allowed

💡 Result:

According to the official Kubernetes version skew policy, the relationship between kubelet and kube-apiserver is defined by the following rules [1]: 1. Kubelet must not be newer than the kube-apiserver [1]. 2. Kubelet may be up to three minor versions older than the kube-apiserver [1]. (Note: For versions earlier than 1.25, the limit was two minor versions older [1].) If a cluster has multiple kube-apiserver instances (e.g., in a highly available cluster) that are at different minor versions, the kubelet version must be compatible with the oldest kube-apiserver version in the cluster [1]. For example, if your control plane contains instances at version 1.36 and 1.35, the kubelet must be at version 1.35, 1.34, or 1.33; it cannot be at 1.36 because that would be newer than the 1.35 instance [1]. Specific deployment tools (such as kubeadm) may implement their own additional restrictions on version skew [1][2]. While the general policy allows a skew of three minor versions, it is recommended to keep components within closer proximity to avoid operational issues or upgrade complications [1]. Additionally, in-place minor version upgrades for kubelet are not supported; you must drain the node before upgrading [1].

Citations:


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "=== Inspect imports in client/applyconfiguration/utils.go around KubeletConfiguration ==="
sed -n '380,460p' client/applyconfiguration/utils.go

echo
echo "=== Inspect imports in client/applyconfiguration/karpenter/v1/kubeletconfiguration.go ==="
sed -n '1,140p' client/applyconfiguration/karpenter/v1/kubeletconfiguration.go

echo
echo "=== Inspect imports in hypershift-operator/controllers/nodepool (if any) ==="
rg -n --hidden --glob '!**/vendor/**' 'hypershift-operator/controllers/nodepool' 'k8s\.io/kubelet' hypershift-operator/controllers/nodepool || true

Repository: openshift/hypershift

Length of output: 14877


Clarify kubelet version-skew concern: k8s.io/kubelet is only an indirect/unreferenced module

  • go.mod is the only place with the mismatch: k8s.io/kubelet v0.34.0 // indirect while other k8s.io/* deps are v0.35.x.
  • go mod why k8s.io/kubelet says the main module doesn’t need the k8s.io/kubelet package; repo-wide non-vendor Go imports of k8s.io/kubelet/config/v1beta1 are not present (only api/AGENTS.md mentions it).
  • The referenced docs/content/reference/versioning-support.md section is about HostedCluster/NodePool version compatibility, not Kubernetes component (kubelet vs apiserver) skew—so those kubelet skew rules don’t apply here.

If the goal is dependency consistency, consider aligning k8s.io/kubelet to the v0.35.x line (e.g., via make update/go mod tidy), or add a short justification for why it must remain at v0.34.0.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` around lines 298 - 300, The go.mod entry for k8s.io/kubelet
(k8s.io/kubelet v0.34.0 // indirect) creates a version mismatch with other
k8s.io/* deps at v0.35.x; run dependency cleanup (e.g., run make update or go
mod tidy) to align k8s.io/kubelet to the v0.35.x line or remove it if truly
unused, and if you intentionally must keep v0.34.0 add a brief comment in go.mod
or the repo README explaining why kubelet remains at v0.34.0 (reference the
go.mod symbol k8s.io/kubelet and the
docs/content/reference/versioning-support.md mention in your justification).

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Jun 5, 2026

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/okd-scos-images ce3f2aa link true /test okd-scos-images
ci/prow/images ce3f2aa link true /test images

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@hypershift-jira-solve-ci
Copy link
Copy Markdown

Now I have all the information needed. Let me compile the complete analysis report.

Test Failure Analysis Complete

Job Information

Test Failure Analysis

Error

# hypershift-operator/controllers/hostedcluster
hypershift-operator/controllers/hostedcluster/hostedcluster_webhook.go:170:75:
  not enough arguments in call to conversion.NewWebhookHandler
    have (*"k8s.io/apimachinery/pkg/runtime".Scheme)
    want (*"k8s.io/apimachinery/pkg/runtime".Scheme,
          "sigs.k8s.io/controller-runtime/pkg/webhook/conversion".Registry)

go: go.mod requires go >= 1.25.9 (running go 1.25.8; GOTOOLCHAIN=local)

Summary

PR #8691 bumps sigs.k8s.io/controller-runtime from v0.22.4 → v0.23.3 (among other sigs-k8s dependencies). This upgrade introduces breaking API changes in the controller-runtime webhook and conversion packages. Specifically, conversion.NewWebhookHandler() now requires an additional conversion.Registry parameter, and the build environment's Go version (1.25.8) is older than the new minimum required by go.mod (1.25.9). All 9 failing jobs — Prow image builds, GitHub Actions unit tests, lint, verify, and Konflux builds — trace back to these two incompatibilities.

Root Cause

Two breaking changes introduced by the dependency bump:

1. controller-runtime v0.23.3 API breaking change (conversion.NewWebhookHandler)

The function signature changed between v0.22.4 and v0.23.3:

// OLD (v0.22.4)
func NewWebhookHandler(scheme *runtime.Scheme) http.Handler

// NEW (v0.23.3)
func NewWebhookHandler(scheme *runtime.Scheme, registry Registry) http.Handler

In hypershift-operator/controllers/hostedcluster/hostedcluster_webhook.go:170, the current code calls:

mgr.GetWebhookServer().Register("/convert", conversion.NewWebhookHandler(mgr.GetScheme()))

This is missing the second argument (Registry). The new Manager interface in v0.23.3 exposes a GetConverterRegistry() method to obtain the required Registry value.

2. Go toolchain version mismatch

The dependency bump updated go.mod to require go >= 1.25.9. The Prow CI build environment runs Go 1.25.8 with GOTOOLCHAIN=local, which prevents automatic toolchain download. GitHub Actions environments can auto-switch but then hit inconsistent vendoring because the vendor directory was generated with the older Go version.

All 9 failing CI jobs — both Prow (images, okd-scos-images) and GitHub Actions (Unit Tests ×3, Verify, Lint, Konflux ×2) — fail from these same two root causes.

Recommendations
  1. Fix the conversion.NewWebhookHandler call in hypershift-operator/controllers/hostedcluster/hostedcluster_webhook.go:170:

    // Update from:
    mgr.GetWebhookServer().Register("/convert", conversion.NewWebhookHandler(mgr.GetScheme()))
    // To:
    mgr.GetWebhookServer().Register("/convert", conversion.NewWebhookHandler(mgr.GetScheme(), mgr.GetConverterRegistry()))
  2. Update the vendored cluster-node-tuning-operator — the file vendor/github.com/openshift/cluster-node-tuning-operator/pkg/apis/performanceprofile/v1/performanceprofile_webhook.go also uses the old ctrl.NewWebhookManagedBy API. This vendored dependency must be updated to a version compatible with controller-runtime v0.23.3.

  3. Resolve Go toolchain version — either update the CI build images to include Go 1.25.9+, or adjust the go.mod toolchain directive if the older version is still functionally sufficient.

  4. Re-vendor dependencies after making code fixes: go mod vendor && go mod tidy to ensure the vendor directory is consistent with the new Go version and updated dependencies.

Evidence
Evidence Detail
Dependency bumped sigs.k8s.io/controller-runtime v0.22.4 → v0.23.3
Go version mismatch go.mod requires ≥1.25.9, Prow CI has 1.25.8 (GOTOOLCHAIN=local)
Compile error (webhook) hostedcluster_webhook.go:170conversion.NewWebhookHandler missing Registry param
Compile error (vendored) cluster-node-tuning-operator/.../performanceprofile_webhook.go:9ctrl.NewWebhookManagedBy signature mismatch
Prow images job Build ID 2063027383132229632 — hypershift-amd64 (go version), hypershift-operator-amd64 and hypershift-tests-amd64 (API change)
Prow okd-scos-images job Build ID 2063027383161589760 — same compilation failures
GH Actions Unit Tests ×3 All fail with identical not enough arguments compile errors
GH Actions Verify Fails with inconsistent vendoring after Go version auto-switch
GH Actions Lint 720 issues, root typecheck error is the same NewWebhookHandler signature mismatch
Konflux builds ×2 Same compilation failures in hypershift-operator and hypershift-release-mce-50

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/ci-tooling Indicates the PR includes changes for CI or tooling ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants