search

phisco / crossplane

Cloud Native Control Planes
https://crossplane.io
Apache License 2.0
1 stars 0 forks source link

chore(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.7 [security] (release-1.13) #316

Open phisco-renovate[bot] opened 3 months ago

phisco-renovate[bot] commented 3 months ago

This PR contains the following updates:

Package Type Update Change
github.com/hashicorp/go-retryablehttp indirect patch v0.7.1 -> v0.7.7

go-retryablehttp can leak basic auth credentials to log files

CVE-2024-6104 / GHSA-v6v8-xj6m-xwqh / GO-2024-2947

More information #### Details go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7. #### Severity - CVSS Score: 6.0 / 10 (Medium) - Vector String: `CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N` #### References - [https://nvd.nist.gov/vuln/detail/CVE-2024-6104](https://nvd.nist.gov/vuln/detail/CVE-2024-6104) - [https://github.com/hashicorp/go-retryablehttp/commit/a99f07beb3c5faaa0a283617e6eb6bcf25f5049a](https://redirect.github.com/hashicorp/go-retryablehttp/commit/a99f07beb3c5faaa0a283617e6eb6bcf25f5049a) - [https://discuss.hashicorp.com/c/security](https://discuss.hashicorp.com/c/security) - [https://discuss.hashicorp.com/t/hcsec-2024-12-go-retryablehttp-can-leak-basic-auth-credentials-to-log-files/68027](https://discuss.hashicorp.com/t/hcsec-2024-12-go-retryablehttp-can-leak-basic-auth-credentials-to-log-files/68027) - [https://github.com/advisories/GHSA-v6v8-xj6m-xwqh](https://redirect.github.com/advisories/GHSA-v6v8-xj6m-xwqh) - [https://github.com/hashicorp/go-retryablehttp](https://redirect.github.com/hashicorp/go-retryablehttp) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-v6v8-xj6m-xwqh) and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).

Leak of sensitive information to log files in github.com/hashicorp/go-retryablehttp

CVE-2024-6104 / GHSA-v6v8-xj6m-xwqh / GO-2024-2947

More information #### Details URLs were not sanitized when writing them to log files. This could lead to writing sensitive HTTP basic auth credentials to the log file. #### Severity Unknown #### References - [https://github.com/advisories/GHSA-v6v8-xj6m-xwqh](https://redirect.github.com/advisories/GHSA-v6v8-xj6m-xwqh) - [https://github.com/hashicorp/go-retryablehttp/commit/a99f07beb3c5faaa0a283617e6eb6bcf25f5049a](https://redirect.github.com/hashicorp/go-retryablehttp/commit/a99f07beb3c5faaa0a283617e6eb6bcf25f5049a) - [https://discuss.hashicorp.com/t/hcsec-2024-12-go-retryablehttp-can-leak-basic-auth-credentials-to-log-files/68027](https://discuss.hashicorp.com/t/hcsec-2024-12-go-retryablehttp-can-leak-basic-auth-credentials-to-log-files/68027) This data is provided by [OSV](https://osv.dev/vulnerability/GO-2024-2947) and the [Go Vulnerability Database](https://redirect.github.com/golang/vulndb) ([CC-BY 4.0](https://redirect.github.com/golang/vulndb#license)).

Release Notes

hashicorp/go-retryablehttp (github.com/hashicorp/go-retryablehttp) ### [`v0.7.7`](https://redirect.github.com/hashicorp/go-retryablehttp/compare/v0.7.6...v0.7.7) [Compare Source](https://redirect.github.com/hashicorp/go-retryablehttp/compare/v0.7.6...v0.7.7) ### [`v0.7.6`](https://redirect.github.com/hashicorp/go-retryablehttp/compare/v0.7.5...v0.7.6) [Compare Source](https://redirect.github.com/hashicorp/go-retryablehttp/compare/v0.7.5...v0.7.6) ### [`v0.7.5`](https://redirect.github.com/hashicorp/go-retryablehttp/compare/v0.7.4...v0.7.5) [Compare Source](https://redirect.github.com/hashicorp/go-retryablehttp/compare/v0.7.4...v0.7.5) ### [`v0.7.4`](https://redirect.github.com/hashicorp/go-retryablehttp/compare/v0.7.3...v0.7.4) [Compare Source](https://redirect.github.com/hashicorp/go-retryablehttp/compare/v0.7.3...v0.7.4) ### [`v0.7.3`](https://redirect.github.com/hashicorp/go-retryablehttp/compare/v0.7.2...v0.7.3) [Compare Source](https://redirect.github.com/hashicorp/go-retryablehttp/compare/v0.7.2...v0.7.3) ### [`v0.7.2`](https://redirect.github.com/hashicorp/go-retryablehttp/compare/v0.7.1...v0.7.2) [Compare Source](https://redirect.github.com/hashicorp/go-retryablehttp/compare/v0.7.1...v0.7.2)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Renovate Bot.

phisco-renovate[bot] commented 3 months ago

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: go.mod
Command failed: install-tool golang $(grep -oP "^toolchain go\K.+" go.mod)
File name: go.mod
Command failed: make generate
go: downloading github.com/crossplane/crossplane-runtime v0.20.0
go: downloading github.com/alecthomas/kong v0.8.0
go: downloading github.com/google/go-containerregistry v0.16.1
go: downloading k8s.io/apimachinery v0.27.3
go: downloading k8s.io/client-go v0.27.3
go: downloading sigs.k8s.io/controller-runtime v0.15.0
go: downloading google.golang.org/protobuf v1.31.0
go: downloading github.com/google/uuid v1.3.0
go: downloading github.com/opencontainers/runtime-spec v1.1.0-rc.3.0.20230610073135-48415de180cf
go: downloading k8s.io/api v0.27.3
go: downloading k8s.io/apiextensions-apiserver v0.27.3
go: downloading github.com/spf13/afero v1.9.5
go: downloading dario.cat/mergo v1.0.0
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/google/go-cmp v0.5.9
go: downloading github.com/google/go-containerregistry/pkg/authn/k8schain v0.0.0-20230617045147-2472cbbbf289
go: downloading google.golang.org/grpc v1.56.2
go: downloading k8s.io/utils v0.0.0-20230505201702-9f6742963106
go: downloading sigs.k8s.io/yaml v1.3.0
go: downloading github.com/Masterminds/semver v1.5.0
go: downloading github.com/cyphar/filepath-securejoin v0.2.3
go: downloading golang.org/x/sys v0.20.0
go: downloading golang.org/x/sync v0.3.0
go: downloading kernel.org/pub/linux/libs/security/libcap/cap v1.2.69
go: downloading github.com/sirupsen/logrus v1.9.3
go: downloading github.com/bufbuild/buf v1.24.0
go: downloading github.com/jmattheis/goverter v0.17.4
go: downloading google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.3.0
go: downloading k8s.io/code-generator v0.27.3
go: downloading sigs.k8s.io/controller-tools v0.12.1
go: downloading github.com/go-logr/logr v1.2.4
go: downloading golang.org/x/time v0.3.0
go: downloading github.com/evanphx/json-patch/v5 v5.6.0
go: downloading github.com/go-logr/zapr v1.2.4
go: downloading go.uber.org/zap v1.24.0
go: downloading github.com/evanphx/json-patch v4.12.0+incompatible
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/docker/cli v24.0.4+incompatible
go: downloading github.com/mitchellh/go-homedir v1.1.0
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading k8s.io/klog/v2 v2.100.1
go: downloading sigs.k8s.io/structured-merge-diff/v4 v4.2.3
go: downloading github.com/google/gofuzz v1.2.0
go: downloading github.com/golang/protobuf v1.5.3
go: downloading github.com/google/gnostic v0.6.9
go: downloading golang.org/x/net v0.12.0
go: downloading github.com/containerd/stargz-snapshotter/estargz v0.14.3
go: downloading golang.org/x/text v0.11.0
go: downloading github.com/prometheus/client_golang v1.15.1
go: downloading gomodules.xyz/jsonpatch/v2 v2.3.0
go: downloading github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20230510185313-f5e39e5f34c7
go: downloading github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589
go: downloading github.com/google/go-containerregistry/pkg/authn/kubernetes v0.0.0-20230516205744-dbecb1de8cfa
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd
go: downloading gopkg.in/yaml.v2 v2.4.0
go: downloading kernel.org/pub/linux/libs/security/libcap/psx v1.2.69
go: downloading github.com/spf13/cobra v1.7.0
go: downloading google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1
go: downloading k8s.io/kube-openapi v0.0.0-20230525220651-2546d827e515
go: downloading go.uber.org/multierr v1.11.0
go: downloading go.uber.org/atomic v1.11.0
go: downloading github.com/docker/docker v24.0.4+incompatible
go: downloading github.com/json-iterator/go v1.1.12
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading golang.org/x/term v0.10.0
go: downloading golang.org/x/oauth2 v0.8.0
go: downloading github.com/docker/distribution v2.8.2+incompatible
go: downloading github.com/klauspost/compress v1.16.7
go: downloading github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
go: downloading github.com/vbatts/tar-split v0.11.3
go: downloading github.com/prometheus/client_model v0.4.0
go: downloading github.com/prometheus/common v0.44.0
go: downloading k8s.io/component-base v0.27.3
go: downloading github.com/fsnotify/fsnotify v1.6.0
go: downloading github.com/hashicorp/vault/api v1.9.2
go: downloading github.com/docker/docker-credential-helpers v0.7.0
go: downloading github.com/Azure/go-autorest/autorest/azure/auth v0.5.12
go: downloading github.com/opencontainers/image-spec v1.1.0-rc4
go: downloading github.com/Azure/go-autorest/autorest v0.11.29
go: downloading github.com/Azure/go-autorest v14.2.0+incompatible
go: downloading github.com/spf13/pflag v1.0.5
go: downloading github.com/gobuffalo/flect v1.0.2
go: downloading golang.org/x/tools v0.11.0
go: downloading github.com/fatih/color v1.16.0
go: downloading github.com/imdario/mergo v0.3.16
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.2
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.2.0
go: downloading github.com/prometheus/procfs v0.10.0
go: downloading github.com/matttproud/golang_protobuf_extensions v1.0.4
go: downloading github.com/aws/aws-sdk-go-v2 v1.18.0
go: downloading github.com/aws/aws-sdk-go-v2/config v1.18.25
go: downloading github.com/aws/aws-sdk-go-v2/service/ecr v1.18.11
go: downloading github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.16.2
go: downloading github.com/aws/smithy-go v1.13.5
go: downloading github.com/cenkalti/backoff/v3 v3.0.0
go: downloading github.com/go-jose/go-jose/v3 v3.0.0
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading github.com/hashicorp/go-cleanhttp v0.5.2
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/hashicorp/go-retryablehttp v0.7.7
go: downloading github.com/hashicorp/go-rootcerts v1.0.2
go: downloading github.com/hashicorp/go-secure-stdlib/parseutil v0.1.6
go: downloading github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
go: downloading github.com/hashicorp/hcl v1.0.0
go: downloading github.com/mitchellh/mapstructure v1.5.0
go: downloading github.com/Azure/azure-sdk-for-go v68.0.0+incompatible
go: downloading github.com/Azure/go-autorest/autorest/adal v0.9.23
go: downloading cloud.google.com/go/compute/metadata v0.2.3
go: downloading cloud.google.com/go/compute v1.19.3
go: downloading github.com/Azure/go-autorest/autorest/azure/cli v0.4.6
go: downloading github.com/Azure/go-autorest/logger v0.2.1
go: downloading github.com/dimchansky/utfbom v1.1.1
go: downloading github.com/mattn/go-colorable v0.1.13
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/dave/jennifer v1.6.0
go: downloading github.com/emicklei/go-restful/v3 v3.10.2
go: downloading github.com/go-openapi/swag v0.22.3
go: downloading github.com/bufbuild/connect-opentelemetry-go v0.4.0
go: downloading github.com/bufbuild/connect-go v1.9.0
go: downloading go.opentelemetry.io/otel v1.16.0
go: downloading github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8
go: downloading github.com/pkg/profile v1.7.0
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.13.24
go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.3
go: downloading github.com/aws/aws-sdk-go-v2/internal/ini v1.3.34
go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.12.10
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.10
go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.19.0
go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.33
go: downloading github.com/jmespath/go-jmespath v0.4.0
go: downloading github.com/hashicorp/go-sockaddr v1.0.2
go: downloading github.com/ryanuber/go-glob v1.0.0
go: downloading github.com/Azure/go-autorest/tracing v0.6.0
go: downloading github.com/Azure/go-autorest/autorest/date v0.3.0
go: downloading github.com/golang-jwt/jwt/v4 v4.5.0
go: downloading golang.org/x/crypto v0.11.0
go: downloading github.com/go-openapi/jsonreference v0.20.2
go: downloading github.com/mailru/easyjson v0.7.7
go: downloading go.opentelemetry.io/otel/trace v1.16.0
go: downloading github.com/bufbuild/protocompile v0.5.1
go: downloading github.com/jdxcode/netrc v0.0.0-20221124155335-4616370d1a84
go: downloading go.opentelemetry.io/otel/metric v1.16.0
go: downloading golang.org/x/mod v0.12.0
go: downloading github.com/tetratelabs/wazero v1.2.1
go: downloading github.com/rs/cors v1.9.0
go: downloading github.com/go-chi/chi/v5 v5.0.8
go: downloading github.com/cpuguy83/go-md2man/v2 v2.0.2
go: downloading go.opentelemetry.io/otel/sdk v1.16.0
go: downloading github.com/felixge/fgprof v0.9.3
go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.27
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.27
go: downloading github.com/go-openapi/jsonpointer v0.19.6
go: downloading github.com/josharian/intern v1.0.0
go: downloading github.com/klauspost/pgzip v1.2.6
go: downloading github.com/gofrs/uuid/v5 v5.0.0
go: downloading github.com/docker/go-connections v0.4.0
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/moby/term v0.5.0
go: downloading github.com/morikuni/aec v1.0.0
go: downloading github.com/russross/blackfriday/v2 v2.1.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading github.com/google/pprof v0.0.0-20230705174524-200ffdc848b8
panic: runtime error: invalid memory address or nil pointer dereference [recovered]
    panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0xa3f08f]

goroutine 96 [running]:
go/types.(*Checker).handleBailout(0xc00075cc40, 0xc000d3bd60)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/check.go:404 +0x88
panic({0xbfa960?, 0x131e940?})
    /opt/containerbase/tools/golang/1.23.2/src/runtime/panic.go:785 +0x132
go/types.(*StdSizes).Sizeof(0x0, {0xdff500, 0x13273a0})
    /opt/containerbase/tools/golang/1.23.2/src/go/types/sizes.go:229 +0x30f
go/types.(*Config).sizeof(...)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/sizes.go:334
go/types.representableConst.func1({0xdff500?, 0x13273a0?})
    /opt/containerbase/tools/golang/1.23.2/src/go/types/const.go:77 +0x86
go/types.representableConst({0xe05e70, 0x12f2120}, 0xc00075cc40, 0x13273a0, 0xc000d3a200)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/const.go:107 +0x2a7
go/types.(*Checker).representation(0xc00075cc40, 0xc001911f40, 0x13273a0)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/const.go:257 +0x65
go/types.(*Checker).representable(0xc00075cc40, 0xc001911f40, 0x13273a0)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/const.go:240 +0x26
go/types.(*Checker).shift(0xc00075cc40, 0xc001911f00, 0xc001911f40, {0xe03c38, 0xc0014a30b0}, 0x14)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/expr.go:652 +0x1eb
go/types.(*Checker).binary(0xc00075cc40, 0xc001911f00, {0xe03c38, 0xc0014a30b0}, {0xe04178, 0xc0014a1e00}, {0xe04178, 0xc0014a1e20}, 0x14, 0x2c4ea9)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/expr.go:798 +0x150
go/types.(*Checker).exprInternal(0xc00075cc40, 0x0, 0xc001911f00, {0xe03c38, 0xc0014a30b0}, {0x0, 0x0})
    /opt/containerbase/tools/golang/1.23.2/src/go/types/expr.go:1452 +0x206
go/types.(*Checker).rawExpr(0xc00075cc40, 0x0, 0xc001911f00, {0xe03c38?, 0xc0014a30b0?}, {0x0?, 0x0?}, 0x0)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/expr.go:981 +0x18c
go/types.(*Checker).expr(0xc00075cc40, 0x0?, 0xc001911f00, {0xe03c38?, 0xc0014a30b0?})
    /opt/containerbase/tools/golang/1.23.2/src/go/types/expr.go:1549 +0x30
go/types.(*Checker).constDecl(0xc00075cc40, 0xc0019060c0, {0x0, 0x0}, {0xe03c38, 0xc0014a30b0}, 0x0)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/decl.go:480 +0x2c8
go/types.(*Checker).objDecl(0xc00075cc40, {0xe0bc60, 0xc0019060c0}, 0x0)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/decl.go:185 +0xa09
go/types.(*Checker).ident(0xc00075cc40, 0xc001911ec0, 0xc0014a1880, 0x0, 0x0)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/typexpr.go:83 +0x30d
go/types.(*Checker).exprInternal(0xc00075cc40, 0x0, 0xc001911ec0, {0xe02738, 0xc0014a1880}, {0x0, 0x0})
    /opt/containerbase/tools/golang/1.23.2/src/go/types/expr.go:1064 +0x138
go/types.(*Checker).rawExpr(0xc00075cc40, 0x0, 0xc001911ec0, {0xe02738?, 0xc0014a1880?}, {0x0?, 0x0?}, 0x0)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/expr.go:981 +0x18c
go/types.(*Checker).expr(0xc00075cc40, 0xc0000924e0?, 0xc001911ec0, {0xe02738?, 0xc0014a1880?})
    /opt/containerbase/tools/golang/1.23.2/src/go/types/expr.go:1549 +0x30
go/types.(*Checker).binary(0xc00075cc40, 0xc001911e80, {0xe03c38, 0xc0014a2ff0}, {0xe02738, 0xc0014a1860}, {0xe02738, 0xc0014a1880}, 0xc, 0x2c462a)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/expr.go:786 +0xcc
go/types.(*Checker).exprInternal(0xc00075cc40, 0x0, 0xc001911e80, {0xe03c38, 0xc0014a2ff0}, {0x0, 0x0})
    /opt/containerbase/tools/golang/1.23.2/src/go/types/expr.go:1452 +0x206
go/types.(*Checker).rawExpr(0xc00075cc40, 0x0, 0xc001911e80, {0xe03c38?, 0xc0014a2ff0?}, {0x0?, 0x0?}, 0x0)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/expr.go:981 +0x18c
go/types.(*Checker).expr(0xc00075cc40, 0xc0017d2540?, 0xc001911e80, {0xe03c38?, 0xc0014a2ff0?})
    /opt/containerbase/tools/golang/1.23.2/src/go/types/expr.go:1549 +0x30
go/types.(*Checker).constDecl(0xc00075cc40, 0xc0017d2600, {0x0, 0x0}, {0xe03c38, 0xc0014a2ff0}, 0x0)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/decl.go:480 +0x2c8
go/types.(*Checker).objDecl(0xc00075cc40, {0xe0bc60, 0xc0017d2600}, 0x0)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/decl.go:185 +0xa09
go/types.(*Checker).packageObjects(0xc00075cc40)
    /opt/containerbase/tools/golang/1.23.2/src/go/types/resolver.go:714 +0x454
go/types.(*Checker).checkFiles(0xc00075cc40, {0xc00089c050, 0xa, 0xa})
    /opt/containerbase/tools/golang/1.23.2/src/go/types/check.go:459 +0x15a
go/types.(*Checker).Files(0xc00049b4b8?, {0xc00089c050?, 0xc0017373e0?, 0x4?})
    /opt/containerbase/tools/golang/1.23.2/src/go/types/check.go:422 +0x75
sigs.k8s.io/controller-tools/pkg/loader.(*loader).typeCheck(0xc000247770, 0xc00029f000)
    /home/ubuntu/go/pkg/mod/sigs.k8s.io/controller-tools@v0.12.1/pkg/loader/loader.go:286 +0x36a
sigs.k8s.io/controller-tools/pkg/loader.(*Package).NeedTypesInfo(0xc00029f000)
    /home/ubuntu/go/pkg/mod/sigs.k8s.io/controller-tools@v0.12.1/pkg/loader/loader.go:99 +0x39
sigs.k8s.io/controller-tools/pkg/loader.(*TypeChecker).check(0xc000813560, 0xc00029f000)
    /home/ubuntu/go/pkg/mod/sigs.k8s.io/controller-tools@v0.12.1/pkg/loader/refs.go:268 +0x2b2
sigs.k8s.io/controller-tools/pkg/loader.(*TypeChecker).check.func1(0x45?)
    /home/ubuntu/go/pkg/mod/sigs.k8s.io/controller-tools@v0.12.1/pkg/loader/refs.go:262 +0x4d
created by sigs.k8s.io/controller-tools/pkg/loader.(*TypeChecker).check in goroutine 68
    /home/ubuntu/go/pkg/mod/sigs.k8s.io/controller-tools@v0.12.1/pkg/loader/refs.go:260 +0x1bc
exit status 2
apis/generate.go:45: running "go": exit status 1
make[1]: *** [build/makelib/golang.mk:240: go.generate] Error 1
make: *** [build/makelib/common.mk:434: generate] Error 2