Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update go-containerregistry from v0.1.3 to v0.2.1. #3628

Merged
merged 1 commit into from
Dec 15, 2020

Conversation

dlorenc
Copy link
Contributor

@dlorenc dlorenc commented Dec 11, 2020

Changes

v0.1.3 contained a dependency (which contained another...) eventually including
a version of jwt-go with CVE-2018-20699 in it. That library has been abandoned,
so the Go ecosystem is slowly picking up various changes to remove this dependency.

This also required "unpinning" go-autorest, which we seemed to be doing because of
knative. Tests build and pass without this, so let's see what happens.

/kind cleanup

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you
review them:

  • Includes tests (if functionality changed/added)
  • Includes docs (if user facing)
  • Commit messages follow commit message best practices
  • Release notes block has been filled in or deleted (only if no user facing changes)

See the contribution guide for more details.

Double check this list of stuff that's easy to miss:

Reviewer Notes

If API changes are included, additive changes must be approved by at least two OWNERS and backwards incompatible changes must be approved by more than 50% of the OWNERS, and they must first be added in a backwards compatible way.

Release Notes

NONE

@tekton-robot tekton-robot added release-note-none Denotes a PR that doesnt merit a release note. kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Dec 11, 2020
@tekton-robot tekton-robot requested review from afrittoli and a user December 11, 2020 02:59
@vdemeester
Copy link
Member

/retest

@tekton-robot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: vdemeester

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Dec 11, 2020
@dlorenc
Copy link
Contributor Author

dlorenc commented Dec 11, 2020

Looks like tests are failing trying to pull hello:latest from Dockerhub. I think it's a rate limiting issue!

I'll try to figure out why we're pulling this image...

@dlorenc
Copy link
Contributor Author

dlorenc commented Dec 11, 2020

Hmm, that might be a red herring: This is in the dind-sidecar example test, where we first try to build an image then run it. There's no "set -e" in the bash script, so we continue after the image build fails:

        Status: Downloaded newer image for ubuntu:latest
         ---> f643c72bc252
        Step 2/3 : RUN apt-get update
         ---> Running in d0dd2faacc8c
        io.containerd.runc.v2: failed to adjust OOM score for shim: set shim OOM score: write /proc/343/oom_score_adj: invalid argument
        : exit status 1: unknown
        REPOSITORY   TAG       IMAGE ID       CREATED       SIZE
        busybox      latest    219ee5171f80   7 days ago    1.23MB
        ubuntu       latest    f643c72bc252   2 weeks ago   72.9MB
        Unable to find image 'hello:latest' locally
        docker: Error response from daemon: pull access denied for hello, repository does not exist or may require 'docker login': denied: requested access to the resource is denied.
        See 'docker run --help'.

@dlorenc
Copy link
Contributor Author

dlorenc commented Dec 11, 2020

/retest

This still isn't reproing for me...

dlorenc pushed a commit to dlorenc/build-pipeline that referenced this pull request Dec 11, 2020
I was bitten by this test not having one, when the "docker build"
failed but we continued on executing anyway. I did a cursory look
at the other tests, and they either already have this or are so
short/simple that it doesn't matter.

Ref tektoncd#3628
dlorenc pushed a commit to dlorenc/build-pipeline that referenced this pull request Dec 11, 2020
I was bitten by this test not having one, when the "docker build"
failed but we continued on executing anyway. I did a cursory look
at the other tests, and they either already have this or are so
short/simple that it doesn't matter.

Ref tektoncd#3628
dlorenc pushed a commit to dlorenc/build-pipeline that referenced this pull request Dec 11, 2020
I was bitten by this test not having one, when the "docker build"
failed but we continued on executing anyway. I did a cursory look
at the other tests, and they either already have this or are so
short/simple that it doesn't matter.

Ref tektoncd#3628
dlorenc pushed a commit to dlorenc/build-pipeline that referenced this pull request Dec 11, 2020
I was bitten by this test not having one, when the "docker build"
failed but we continued on executing anyway. I did a cursory look
at the other tests, and they either already have this or are so
short/simple that it doesn't matter.

Ref tektoncd#3628
dlorenc pushed a commit to dlorenc/build-pipeline that referenced this pull request Dec 12, 2020
I was bitten by this test not having one, when the "docker build"
failed but we continued on executing anyway. I did a cursory look
at the other tests, and they either already have this or are so
short/simple that it doesn't matter.

Ref tektoncd#3628
dlorenc pushed a commit to dlorenc/build-pipeline that referenced this pull request Dec 12, 2020
I was bitten by this test not having one, when the "docker build"
failed but we continued on executing anyway. I did a cursory look
at the other tests, and they either already have this or are so
short/simple that it doesn't matter.

Ref tektoncd#3628
v0.1.3 contained a dependency (which contained another...) eventually including
a version of jwt-go with CVE-2018-20699 in it. That library has been abandoned,
so the Go ecosystem is slowly picking up various changes to remove this dependency.

This also required "unpinning" go-autorest, which we seemed to be doing because of
knative. Tests build and pass without this, so let's see what happens.
@dlorenc dlorenc added kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. and removed kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. labels Dec 12, 2020
tekton-robot pushed a commit that referenced this pull request Dec 13, 2020
I was bitten by this test not having one, when the "docker build"
failed but we continued on executing anyway. I did a cursory look
at the other tests, and they either already have this or are so
short/simple that it doesn't matter.

Ref #3628
@ghost
Copy link

ghost commented Dec 14, 2020

/lgtm

@tekton-robot tekton-robot assigned ghost Dec 14, 2020
@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Dec 14, 2020
@dlorenc
Copy link
Contributor Author

dlorenc commented Dec 15, 2020

/test pull-tekton-pipeline-build-tests

@dlorenc
Copy link
Contributor Author

dlorenc commented Dec 15, 2020

/test pull-tekton-pipeline-integration-tests

@tekton-robot tekton-robot merged commit 77dc827 into tektoncd:master Dec 15, 2020
@dlorenc dlorenc deleted the upgoc branch December 15, 2020 02:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. lgtm Indicates that a PR is ready to be merged. release-note-none Denotes a PR that doesnt merit a release note. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants