gardener / cert-management

Manages TLS certificates in Kubernetes clusters using custom resources
Apache License 2.0
32 stars 22 forks source link

chore(deps): update module sigs.k8s.io/kind to v0.23.0 #252

Closed gardener-ci-robot closed 1 month ago

gardener-ci-robot commented 1 month ago

This PR contains the following updates:

Package Type Update Change
sigs.k8s.io/kind require minor v0.20.0 -> v0.23.0

Release Notes

kubernetes-sigs/kind (sigs.k8s.io/kind) ### [`v0.23.0`](https://togithub.com/kubernetes-sigs/kind/releases/tag/v0.23.0) [Compare Source](https://togithub.com/kubernetes-sigs/kind/compare/v0.22.0...v0.23.0) This release introduces initial limited support for `nerdctl` and kube-proxy nftables mode.

Breaking Changes

- The default node image is now Kubernetes 1.30.0: `kindest/node:v1.30.0@​sha256:047357ac0cfea04663786a612ba1eaba9702bef25227a794b52890dd8bcd692e` - `ipFamily` config field is now validated - While technically a breaking change, if the value you set here is now caught as invalid it was being silently ignored and creating an ipv4 cluster previously and you should correct your config - Go 1.17+ is required for `go install sigs.k8s.io/kind` / building the `kind` binary - Prebuilt binaries are available as an alternative to `go install` - For local development `make` will automatically setup the correct go version - Note that the go team only supports 1.21+ and major linux distros have 1.19+ - Future releases may increase this to a more current Go release - Future release may adopt `toolchain` in go.mod to make this seamless if you have go 1.21+ installed even without our makefile. We highly recommend installing go 1.21+

New Features

- Initial support for nodes created with [nerdctl](https://togithub.com/containerd/nerdctl) - Initial support for `kubeProxyMode: nftables` (ahead of Kubernetes 1.31+, see https://kind.sigs.k8s.io/docs/user/configuration/#kube-proxy-mode) - Sweeping dependency updates, see commits for full details. https://github.com/kubernetes-sigs/kind/compare/v0.22.0...v0.23.0 Images pre-built for this release: - v1.30.0: `kindest/node:v1.30.0@​sha256:047357ac0cfea04663786a612ba1eaba9702bef25227a794b52890dd8bcd692e` - v1.29.4: `kindest/node:v1.29.4@​sha256:3abb816a5b1061fb15c6e9e60856ec40d56b7b52bcea5f5f1350bc6e2320b6f8` - v1.28.9: `kindest/node:v1.28.9@​sha256:dca54bc6a6079dd34699d53d7d4ffa2e853e46a20cd12d619a09207e35300bd0` - v1.27.13: `kindest/node:v1.27.13@​sha256:17439fa5b32290e3ead39ead1250dca1d822d94a10d26f1981756cd51b24b9d8` - v1.26.15: `kindest/node:v1.26.15@​sha256:84333e26cae1d70361bb7339efb568df1871419f2019c80f9a12b7e2d485fe19` - v1.25.16: `kindest/node:v1.25.16@​sha256:5da57dfc290ac3599e775e63b8b6c49c0c85d3fec771cd7d55b45fae14b38d3b` **NOTE**: You *must* use the `@sha256` digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons. See also: - https://kind.sigs.k8s.io/docs/user/quick-start/#creating-a-cluster - https://kind.sigs.k8s.io/docs/user/quick-start/#building-images NOTE: These node images support amd64 and arm64, both of our supported platforms. **You must use the same platform as your host,** for more context see [https://github.com/kubernetes-sigs/kind/issues/2718](https://togithub.com/kubernetes-sigs/kind/issues/2718)

Fixes

- Correctly case `kubeProxyMode: "none"`

Contributors

**Thank you to everyone who contributed to this release! ❤️** Users whose commits are in this release (alphabetically by user name) - [@​aojea](https://togithub.com/aojea) - [@​AkihiroSuda](https://togithub.com/AkihiroSuda) - [@​BenTheElder](https://togithub.com/BenTheElder) - [@​dependabot](https://togithub.com/dependabot)\[bot] - [@​estesp](https://togithub.com/estesp) - [@​hp685](https://togithub.com/hp685) - [@​jizusun](https://togithub.com/jizusun) - [@​k8s-ci-robot](https://togithub.com/k8s-ci-robot) - [@​kevin85421](https://togithub.com/kevin85421) - [@​stmcginnis](https://togithub.com/stmcginnis) - [@​tnqn](https://togithub.com/tnqn) - [@​yankay](https://togithub.com/yankay) Thank you as well to everyone else not listed here who contributed in other ways like filing issues, giving feedback, testing fixes, and helping users in slack! ### [`v0.22.0`](https://togithub.com/kubernetes-sigs/kind/releases/tag/v0.22.0) [Compare Source](https://togithub.com/kubernetes-sigs/kind/compare/v0.21.0...v0.22.0) This release is a quick follow-up to [v0.21.0](https://togithub.com/kubernetes-sigs/kind/releases/tag/v0.21.0) with bug fixes including not overriding the host's binfmt_misc (a regression in v0.20.0, see: [https://github.com/kubernetes-sigs/kind/issues/3510](https://togithub.com/kubernetes-sigs/kind/issues/3510)).

Breaking Changes

- The default node image is now Kubernetes 1.29.2: `kindest/node:v1.29.2@​sha256:51a1434a5397193442f0be2a297b488b6c919ce8a3931be0ce822606ea5ca245` **If you haven't already, please see also [v0.21.0 release notes](https://togithub.com/kubernetes-sigs/kind/releases/tag/v0.21.0) given the short time between releases.**

New Features

- Remove `exclude-from-external-load-balancers` from single node clusters [https://github.com/kubernetes-sigs/kind/issues/3506](https://togithub.com/kubernetes-sigs/kind/issues/3506) - Support for building node images on hosts with proxies Images pre-built for this release: - v1.29.2: `kindest/node:v1.29.2@​sha256:51a1434a5397193442f0be2a297b488b6c919ce8a3931be0ce822606ea5ca245` - v1.29.1: `kindest/node:v1.29.1@​sha256:0c06baa545c3bb3fbd4828eb49b8b805f6788e18ce67bff34706ffa91866558b` - v1.28.7: `kindest/node:v1.28.7@​sha256:9bc6c451a289cf96ad0bbaf33d416901de6fd632415b076ab05f5fa7e4f65c58` - v1.28.6: `kindest/node:v1.28.6@​sha256:e9e59d321795595d0eed0de48ef9fbda50388dc8bd4a9b23fb9bd869f370ec7e` - v1.27.11: `kindest/node:v1.27.11@​sha256:681253009e68069b8e01aad36a1e0fa8cf18bb0ab3e5c4069b2e65cafdd70843` - v1.27.10: `kindest/node:v1.27.10@​sha256:e6b2f72f22a4de7b957cd5541e519a8bef3bae7261dd30c6df34cd9bdd3f8476` - v1.26.14: `kindest/node:v1.26.14@​sha256:5d548739ddef37b9318c70cb977f57bf3e5015e4552be4e27e57280a8cbb8e4f` - v1.26.13: `kindest/node:v1.26.13@​sha256:8cb4239d64ff897e0c21ad19fe1d68c3422d4f3c1c1a734b7ab9ccc76c549605` - v1.25.16: `kindest/node:v1.25.16@​sha256:e8b50f8e06b44bb65a93678a65a26248fae585b3d3c2a669e5ca6c90c69dc519` - v1.24.17: `kindest/node:v1.24.17@​sha256:bad10f9b98d54586cba05a7eaa1b61c6b90bfc4ee174fdc43a7b75ca75c95e51` - v1.23.17: `kindest/node:v1.23.17@​sha256:14d0a9a892b943866d7e6be119a06871291c517d279aedb816a4b4bc0ec0a5b3` **NOTE**: You *must* use the `@sha256` digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons. See also: - https://kind.sigs.k8s.io/docs/user/quick-start/#creating-a-cluster - https://kind.sigs.k8s.io/docs/user/quick-start/#building-images NOTE: These node images support amd64 and arm64, both of our supported platforms. **You must use the same platform as your host,** for more context see [https://github.com/kubernetes-sigs/kind/issues/2718](https://togithub.com/kubernetes-sigs/kind/issues/2718)

Fixes

- binfmt_misc no longer set by node images (regression in v0.20.0) - fix runc hooks when non-root / usernamespaces - Support multiple random extraPortMappings - Docs fixes for contour and WSL2

Contributors

**Thank you to everyone who contributed to this release! ❤️** Users whose commits are in this release (alphabetically by user name) - [@​BenTheElder](https://togithub.com/BenTheElder) - [@​dependabot](https://togithub.com/dependabot)\[bot] - [@​dgl](https://togithub.com/dgl) - [@​howardjohn](https://togithub.com/howardjohn) - [@​k8s-ci-robot](https://togithub.com/k8s-ci-robot) - [@​r-suke](https://togithub.com/r-suke) - [@​skriss](https://togithub.com/skriss) - [@​wouterh-dev](https://togithub.com/wouterh-dev) - [@​Zumium](https://togithub.com/Zumium) Thank you as well to everyone else not listed here who contributed in other ways like filing issues, giving feedback, testing fixes, and helping users in slack! ### [`v0.21.0`](https://togithub.com/kubernetes-sigs/kind/releases/tag/v0.21.0) [Compare Source](https://togithub.com/kubernetes-sigs/kind/compare/v0.20.0...v0.21.0) This release patches the recent [runc CVEs](https://togithub.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv), as well as an issue with `kind build node-image` and docker v25.0.0+

Breaking Changes

- The default node image is a Kubernetes `v1.29.1` image: `kindest/node:v1.29.1@​sha256:a0cc28af37cf39b019e2b448c54d1a3f789de32536cb5a5db61a49623e527144` **If you haven't already, please see also [v0.20.0 release notes](https://togithub.com/kubernetes-sigs/kind/releases/tag/v0.20.0) which had important announcements that still apply going forward**.

New Features

- Upgraded go to 1.20.13 - Upgraded crictl to 1.28 - Upgraded containerd fuse overlayfs to 1.0.6 - Began marking some core images pinned in containerd, which may eventually make enabling imageGC safer - kindnetd will ignore nodes with empty podCIDR, enabling some niche use-cases Images pre-built for this release: - v1.29.1: `kindest/node:v1.29.1@​sha256:a0cc28af37cf39b019e2b448c54d1a3f789de32536cb5a5db61a49623e527144` - v1.28.6: `kindest/node:v1.28.6@​sha256:b7e1cf6b2b729f604133c667a6be8aab6f4dde5bb042c1891ae248d9154f665b` - v1.27.10: `kindest/node:v1.27.10@​sha256:3700c811144e24a6c6181065265f69b9bf0b437c45741017182d7c82b908918f` - v1.26.13: `kindest/node:v1.26.13@​sha256:15ae92d507b7d4aec6e8920d358fc63d3b980493db191d7327541fbaaed1f789` - v1.25.16: `kindest/node:v1.25.16@​sha256:9d0a62b55d4fe1e262953be8d406689b947668626a357b5f9d0cfbddbebbc727` - v1.24.17: `kindest/node:v1.24.17@​sha256:ea292d57ec5dd0e2f3f5a2d77efa246ac883c051ff80e887109fabefbd3125c7` - v1.23.17: `kindest/node:v1.23.17@​sha256:fbb92ac580fce498473762419df27fa8664dbaa1c5a361b5957e123b4035bdcf` **NOTE**: You *must* use the `@sha256` digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons. See also: - https://kind.sigs.k8s.io/docs/user/quick-start/#creating-a-cluster - https://kind.sigs.k8s.io/docs/user/quick-start/#building-images NOTE: These node images support amd64 and arm64, both of our supported platforms. **You must use the same platform as your host,** for more context see [https://github.com/kubernetes-sigs/kind/issues/2718](https://togithub.com/kubernetes-sigs/kind/issues/2718)

Fixes

- Updated runc to v1.1.12, containerd to v1.7.13 including the fix for https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv - Fixed `kind build node-image` with docker v25.0.0+ - **NOTE**: `kind load docker-image` is still broken with Docker v25.0.0 due to a docker bug, which has a fix merged that should be included in Docker v25.0.1+ - Assorted docs fixes

Contributors

**Thank you to everyone who contributed to this release! ❤️** Users whose commits are in this release (alphabetically by user name) - [@​adelton](https://togithub.com/adelton) - [@​ameukam](https://togithub.com/ameukam) - [@​AkihiroSuda](https://togithub.com/AkihiroSuda) - [@​AryanSharma9917](https://togithub.com/AryanSharma9917) - [@​BenTheElder](https://togithub.com/BenTheElder) - [@​bpfoster](https://togithub.com/bpfoster) - [@​corneliusroemer](https://togithub.com/corneliusroemer) - [@​dependabot](https://togithub.com/dependabot)\[bot] - [@​k8s-ci-robot](https://togithub.com/k8s-ci-robot) - [@​kir4h](https://togithub.com/kir4h) - [@​liangyuanpeng](https://togithub.com/liangyuanpeng) - [@​lixin963](https://togithub.com/lixin963) - [@​matzew](https://togithub.com/matzew) - [@​mausearce](https://togithub.com/mausearce) - [@​ronaldpetty](https://togithub.com/ronaldpetty) - [@​roman-kiselenko](https://togithub.com/roman-kiselenko) - [@​saschagrunert](https://togithub.com/saschagrunert) Thank you as well to everyone else not listed here who contributed in other ways like filing issues, giving feedback, testing fixes, and helping users in slack!

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Renovate Bot.

MartinWeindel commented 1 month ago

/retest

gardener-prow[bot] commented 1 month ago

LGTM label has been added.

Git tree hash: 8fda5c0da97e74481226499ef58413a36f81019f

gardener-prow[bot] commented 1 month ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: MartinWeindel

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/gardener/cert-management/blob/master/OWNERS)~~ [MartinWeindel] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment