chore(deps): Bump the production-dependencies group with 1 update

[dependabot[bot]]

Bumps the production-dependencies group with 1 update: kubevirt.io/containerized-data-importer-api.

Updates kubevirt.io/containerized-data-importer-api from 1.58.3 to 1.59.0

Release notes

Sourced from kubevirt.io/containerized-data-importer-api's releases.

v1.59.0

This release follows v1.58.3 and consists of 90 changes, contributed by 25 people, leading to 2425 files changed, 184387 insertions(+), 101396 deletions(-).

The source code and selected binaries are available for download at: https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0.

Pre-built CDI containers are published on Quay.io and can be viewed at: https://quay.io/repository/kubevirt/cdi-controller/ https://quay.io/repository/kubevirt/cdi-importer/ https://quay.io/repository/kubevirt/cdi-cloner/ https://quay.io/repository/kubevirt/cdi-uploadproxy/ https://quay.io/repository/kubevirt/cdi-apiserver/ https://quay.io/repository/kubevirt/cdi-uploadserver/ https://quay.io/repository/kubevirt/cdi-operator/

Notable changes

Enhancement: Run a subset of functional tests in parallel Enhancement: Added ability to specify replicas for infra structure pods Enhancement: Add Prometheus alerts CDINoDefaultStorageClass and CDIDefaultStorageClassDegraded; add informative labels to existing alerts Enhancement: cdi.kubevirt.io/garbageCollected added to PVCs when DataVolumes are garbage collected Enhancement: DataVolume supports PVC adoption via DataVolumeClaimAdoption feature gate and cdi.kubevirt.io/allowClaimAdoption annotation on PVC Enhancement: k8s 1.28 dependencies bump Enhancement: Added option customizeComponents Enhancement: ReadWriteOncePod is now allowed to use with CDI DataVolumes Enhancement: Add PVC spec mutating webhook rendering based on StorageProfiles Enhancement: Check for cdi.kubevirt.io/allowClaimAdoption on DataVolume rather than PVC Enhancement: Get all no-provisioner storage capabilities from PVs Enhancement: Make importer datasource communication explicit Enhancement: Registry imports can now set PVC labels derived from env vars on containerdisks Enhancement: add forklift populators apps to cdi-importer image

BugFix: Fix Trident provisioner key for using csi-clone BugFix: Cephfs to Block cloning is creating empty block device BugFix: Add Trident RWO Filesystem capability BugFix: Fix DataImportCron PVC timestamping for garbage collection BugFix: Fix DataImportCron import DataVolume creation when last import is not found BugFix: StorageProfile ClaimPropertySets validation BugFix: Change CDI webhook failure policy to Ignore BugFix: Allow Deployed CDI to get out of Error Phase BugFix: Added the k8s.io/minikube-hostpath storage provider to the list of known storage providers BugFix: Watch DataImportCron-orphan cronjobs and cleanup them BugFix: Avoid race condition during importer termination BugFix: ns admin cannot create multiple user-facing CDI resources BugFix: Avoid XSS vulnerability in Upload proxy BugFix: cdi.kubevirt.io/allowClaimAdoption annotation broken BugFix: Add HPE RWX/Block capability

... (truncated)

Changelog

Sourced from kubevirt.io/containerized-data-importer-api's changelog.

v1.59.0 BugFix: Fix Trident provisioner key for using csi-clone Cleanup: When building CDI builder, use of podman fails to report image digest Enhancement: Run a subset of functional tests in parallel Enhancement: Added ability to specify replicas for infra structure pods Enhancement: Add Prometheus alerts CDINoDefaultStorageClass and CDIDefaultStorageClassDegraded; add informative labels to existing alerts Cleanup: Refactor monitoring code BugFix: Cephfs to Block cloning is creating empty block device BugFix: Add Trident RWO Filesystem capability BugFix: Fix DataImportCron PVC timestamping for garbage collection Enhancement: cdi.kubevirt.io/garbageCollected added to PVCs when DataVolumes are garbage collected Enhancement: DataVolume supports PVC adoption via DataVolumeClaimAdoption feature gate and cdi.kubevirt.io/allowClaimAdoption annotation on PVC BugFix: Fix DataImportCron import DataVolume creation when last import is not found Enhancement: k8s 1.28 dependencies bump Cleanup: Remove deprecated insecure registries config map from a CDI install Enhancement: Added option customizeComponents Enhancement: ReadWriteOncePod is now allowed to use with CDI DataVolumes BugFix: StorageProfile ClaimPropertySets validation Enhancement: Add PVC spec mutating webhook rendering based on StorageProfiles Cleanup: Refactor recording-rules and alerts code BugFix: Change CDI webhook failure policy to Ignore BugFix: Allow Deployed CDI to get out of Error Phase BugFix: Added the k8s.io/minikube-hostpath storage provider to the list of known storage providers Enhancement: Check for cdi.kubevirt.io/allowClaimAdoption on DataVolume rather than PVC BugFix: Watch DataImportCron-orphan cronjobs and cleanup them Cleanup: Replace cron expression golang library BugFix: Avoid race condition during importer termination Enhancement: Get all no-provisioner storage capabilities from PVs BugFix: ns admin cannot create multiple user-facing CDI resources Cleanup: Improve handling of unpopulated capacity field in clone populator BugFix: Avoid XSS vulnerability in Upload proxy BugFix: cdi.kubevirt.io/allowClaimAdoption annotation broken Enhancement: Make importer datasource communication explicit Enhancement: Registry imports can now set PVC labels derived from env vars on containerdisks BugFix: Add HPE RWX/Block capability Enhancement: add forklift populators apps to cdi-importer image Cleanup: Switch to using maintained non-archived go-jose

Commits

• 3d557e2 v1.59.0 release notes
• e262fb1 docs: Add docs for containerdisk labels (#3153)
• 3239d50 cleanup: Return modified labels added from termination message (#3147)
• bc72a38 Add goimports to golangci linters (#3097)
• 6a9a39c Improve readability of upload pod's creation code (#3151)
• 36fc5fe Switch version of go-jose (#3150)
• 627b6cb Run bazelisk run //robots/cmd/uploader:uploader -- -workspace /home/prow/go/s...
• fed4d7a Update kubevirtci, 1.29 lanes (#3023)
• 1a88a51 Improve readability of importer pod's creation code (#3118)
• ca8085a feat(import): Set PVC labels derived from env vars on containerdisks (#3103)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

[jcanocan]

/lgtm

[akrejcir]

/approve

[kubevirt-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: akrejcir

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/kubevirt/vm-console-proxy/blob/main/OWNERS)~~ [akrejcir] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment