Some Golang CVEs get flagged in the suc binary as it was built with an
older golang version. Use go 1.22.6
Updating other go module deps.
SLES update is required for libc compatiblity with latest ginkgo
version.
Update golangci-lint. Most gingko and gomega changes are to fix linting
failures.
Update sonobuoy
docker bridge address is added to tls-san to avoid cert errors when
using the client to connect the KUBEHOST.
Drop deprecated version field in the docker compose manifests.
It is recommended that the next release be v0.15.0 as 0.14.0 was already
published and deleted in the past and gosumdb already has entries.
* Make pkg/apis a go module
system-upgrade-controller depends on k8s.io/kubernetes which makes it very
difficult to include as a dependency from another project. The main reason
a project would want to have a go dependency on system-upgrade-controller
would be for the types. This makes the apis package a first class module
that one can depend on without having to depend on k8s.io/kubernetes
* Swith to vendorless
* Update vendor
* Adapt to new client-go API
* Update generated code
* fix call to RegisterFailHandler
Co-authored-by: Jacob Blain Christen <jacob@rancher.com>
* implement ttlSecondsAfterFinished for jobs
- bump default backofflimit to the default for the job controller, aka 6
Addresses #24 by implementing cleanup of jobs based on configured .spec.ttlSecondsAfterFinished on jobs.
This should work pretty almost identically to the by-default, gated TTL Controll for Finished Resources.
See https://kubernetes.io/docs/concepts/workloads/controllers/ttlafterfinished/
* Update pkg/upgrade/handle_batch.go
Co-authored-by: Dax McDonald <dax@rancher.com>
This is a decent-sized refactor, primarily in how the controller is setup, that I think enhances readability. Additionally, wrangler has been upgraded which now supports openapi schema creation so norman has been dropped.
Primarily, however, this change is meant to address #25 (and possibly #36) caused by a bug in wrangler that:
- prevented the controller from properly replacing jobs that could not be patched (pod tempalte spec changes)
- prevented the controller from replacing a job generated with the `apply.WithNoDelete` option
- prevented the controller from processing external plan edits in a timely manner (no more long waits due to spurious replace-wait errors)
Fixes#25Fixes#34
Depends on rancher/wrangler#66
This fixes the use case where a channel resolves to (or a version value is) a legitimate SemVer with metadata by replacing all `+` with `-`.
i.e. in the case of k3s, git tag v1.17.2+k3s1 as the version becomes the docker tag v1.17.2-k3s1
Fixes#28
- includes removal of controller serviceAccountName references and envvar
- image tarballs a la `docker save` are added to dist/artifacts
- sonobuoy plugin yaml added to dist/artifacts
- introduces e2e-tests tag suffix image that can be used for the sonobuoy plugin