Commit Graph

16941 Commits

Author SHA1 Message Date
Kubernetes Prow Robot cb78aba437
Merge pull request #13430 from olemarkus/go118
Use golang 1.18 for building
2022-03-28 20:57:13 -07:00
Ole Markus With 59631a1fff Use golang 1.18 for building 2022-03-28 20:24:09 +02:00
Kubernetes Prow Robot d9bf1a4bd8
Merge pull request #13429 from kubernetes/dependabot/github_actions/actions/setup-go-3
Bump actions/setup-go from 2.2.0 to 3
2022-03-28 07:51:23 -07:00
Ciprian Hacman 641ef62230
Apply suggestions from code review 2022-03-28 17:05:02 +03:00
Guillaume Perrin 1235b63a0d Only authorize additionalRoute for private subnets
Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
2022-03-28 15:49:03 +02:00
dependabot[bot] a90c265a6f
Bump actions/setup-go from 2.2.0 to 3
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2.2.0 to 3.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](bfdd3570ce...f6164bd8c8)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-28 13:29:58 +00:00
Kubernetes Prow Robot e2acdce433
Merge pull request #13423 from naveensrinivasan/naveen/feat/dependabot-githubactions
Included githubactions in dependabot config
2022-03-28 06:29:23 -07:00
Guillaume Perrin db27c00fa0 Apply suggestions from code review
Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
2022-03-28 14:57:21 +02:00
Guillaume Perrin 19330df09f Add integration tests
Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
2022-03-28 14:57:21 +02:00
Guillaume Perrin 00d8ccb1b3 Fix route creation
Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
2022-03-28 14:57:21 +02:00
Guillaume Perrin 2b7f9a4aeb Do not add additional routes for shared subnets
Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
2022-03-28 14:57:21 +02:00
Guillaume Perrin 468b8e6874 Add documentation
Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
2022-03-28 14:57:21 +02:00
Guillaume Perrin e501ac62a4 Possibility to add additional routes in route tables of subnets
Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
2022-03-28 14:57:21 +02:00
Kubernetes Prow Robot dccdf9a7e7
Merge pull request #13428 from olemarkus/ko-images-to-staging
Push ko-built images to staging
2022-03-28 05:39:23 -07:00
Ole Markus With 2b6782e30d Push ko-built images to staging 2022-03-28 13:56:16 +02:00
Kubernetes Prow Robot 0bccca2b65
Merge pull request #13426 from zetaab/fixgcecsi
Run CSI controller in masters
2022-03-28 02:55:23 -07:00
Kubernetes Prow Robot 47e299e0c1
Merge pull request #13409 from olemarkus/more-cleanup-dist
Use non-bazel builds in kubetest2
2022-03-28 02:07:23 -07:00
Ole Markus With 6fa6c9b63a Reduce the amount of binaries built for CI 2022-03-28 10:21:46 +02:00
Kubernetes Prow Robot 3acf5b3634
Merge pull request #13378 from hierynomus/sshkey-output
Do not return a '-1' exit if no keys found and json/yaml output
2022-03-28 00:51:22 -07:00
Jesse Haka e75ccb2286 update expected 2022-03-28 09:25:35 +03:00
Jesse Haka 9329af80d2 Run CSI controller in masters 2022-03-28 09:18:18 +03:00
Kubernetes Prow Robot 6c0ee113de
Merge pull request #13422 from olemarkus/digest-images
Digest images during remapping
2022-03-27 21:11:21 -07:00
Naveen 0990ea2338
Update .github/dependabot.yml
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-27 20:57:40 -05:00
Kubernetes Prow Robot 17ed2ca063
Merge pull request #13395 from naveensrinivasan/naveen/feat/pin-deps
Pin actions to a full length commit SHA
2022-03-27 18:23:21 -07:00
naveensrinivasan 712bf7fcfb Included githubactions in dependabot config
- Included githubactions in the dependabot config

This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-03-27 18:09:23 +00:00
naveensrinivasan b832368bf7 Pin actions to a full length commit SHA
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

>Pin actions to a full length commit SHA

>Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload.

https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions

Also, dependabot supports upgrading based on SHA.

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-03-27 18:05:05 +00:00
naveensrinivasan f48e39c2a1 Pinned action by SHA and included the URL for verification 2022-03-27 18:02:41 +00:00
Kubernetes Prow Robot 45573f8611
Merge pull request #13420 from olemarkus/remove-unused-var
Remove id var, which is never used beyond that if test
2022-03-26 21:41:21 -07:00
Kubernetes Prow Robot dfe5903630
Merge pull request #13421 from olemarkus/update-security-docs
Update the security docs
2022-03-26 20:57:21 -07:00
Ole Markus With 93e35adebc update bazel 2022-03-26 18:50:14 +01:00
Kubernetes Prow Robot cd7aad276a
Merge pull request #13414 from zetaab/fix/lbdrain
fix member update when draining
2022-03-26 10:47:21 -07:00
Ole Markus With e053bf5635 Don't digest images in integration tests 2022-03-26 18:40:21 +01:00
Ole Markus With 0f3e3c793b Create feature flag that is default on for image digests 2022-03-26 18:40:21 +01:00
Ole Markus With e657a1a0f2 Remap images to add digest to them 2022-03-26 18:40:21 +01:00
Ole Markus With 420498174a Update the security docs 2022-03-26 10:11:54 +01:00
Ole Markus With 222eaebe35 Remove id var, which is never used beyond that if test 2022-03-26 09:48:51 +01:00
Kubernetes Prow Robot fe9351b68c
Merge pull request #13419 from olemarkus/fix-dev-upload
dev-upload from upload directory, not bazelupload
2022-03-25 23:59:21 -07:00
Ole Markus With 520283d7b7 dev-upload from upload directory, not bazelupload 2022-03-26 07:19:53 +01:00
Kubernetes Prow Robot 65226b1452
Merge pull request #13410 from mixja/s3-uri-gov-cloud
Correctly detect GovCloud regions
2022-03-25 21:01:21 -07:00
Kubernetes Prow Robot f6e64c8e1d
Merge pull request #13415 from MoShitrit/alpha-to-stable-2022-03-24-take-2
Promote alpha to stable
2022-03-25 12:11:58 -07:00
Moshe Shitrit 8b8ab3fc89 promote alpha to stable 2022-03-25 10:56:09 -04:00
Jesse Haka 2e71008d1d update bazel 2022-03-25 14:57:35 +02:00
Jesse Haka 7e65112096 update goimports 2022-03-25 14:39:54 +02:00
Jesse Haka e4162d2c8f fix member update when draining 2022-03-25 14:37:35 +02:00
Kubernetes Prow Robot 703422d584
Merge pull request #13412 from hakman/update_netlify_deps
Update netflify deps
2022-03-24 21:51:50 -07:00
Ciprian Hacman a77cf8aa94 Update netflify deps
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-03-25 06:13:21 +02:00
Justin Menga 210d072da9 Correctly detect GovCloud regions 2022-03-24 12:59:32 -07:00
Ole Markus With e2fbac6f38 Fix image dist targets 2022-03-24 12:10:08 +01:00
Ole Markus With ca484c9a0d Copy kops binary to expected location 2022-03-24 11:15:18 +01:00
Kubernetes Prow Robot 6844934e1a
Merge pull request #13405 from anthonyhaussman/feat/tone/set_version_pin_aws-node-termination
AWS-NODE-TERMINATION: Add possibility to set a tune image version
2022-03-24 00:56:41 -07:00