Backport kind/capd changes to 0.17 (#2416)

* Bump cluster-api, cert-manager and kind to latest versions (#2402) * Latest eks-d versions (#2401) * disable cgroupns in kind/capd (#2405) * revert runc and containerd in kind image (#2406) * revert runc and containerd in kind image * Update CHECKSUMS * do not lock containerd version (#2412) * do not lock containerd version * Update CHECKSUMS --------- Co-authored-by: Abhay Krishna <[email protected]>
aws · Aug 21, 2023 · a29f92f · a29f92f
1 parent bddf45d
commit a29f92f
Show file tree

Hide file tree

Showing 68 changed files with 749 additions and 434 deletions.
diff --git a/EKSD_LATEST_RELEASES b/EKSD_LATEST_RELEASES
@@ -15,18 +15,18 @@ releases:
   number: 28
   kubeVersion: v1.22.17
 - branch: 1-23
-  number: 28
+  number: 29
   kubeVersion: v1.23.17
 - branch: 1-24
-  number: 23
+  number: 24
   kubeVersion: v1.24.16
 - branch: 1-25
-  number: 19
+  number: 20
   kubeVersion: v1.25.12
 - branch: 1-26
-  number: 15
+  number: 16
   kubeVersion: v1.26.7
 - branch: 1-27
-  number: 9
+  number: 10
   kubeVersion: v1.27.4
 latest: 1-25
diff --git a/UPSTREAM_PROJECTS.yaml b/UPSTREAM_PROJECTS.yaml
@@ -61,7 +61,7 @@ projects:
     repos:
       - name: cert-manager
         versions:
-          - tag: v1.12.1
+          - tag: v1.12.2
             go_version: "1.20"
   - org: cilium
     repos:
@@ -175,7 +175,7 @@ projects:
     repos:
       - name: cluster-api
         versions:
-          - tag: v1.4.3
+          - tag: v1.4.5
             go_version: "1.19"
       - name: cluster-api-provider-cloudstack
         versions:
@@ -199,7 +199,7 @@ projects:
             go_version: N/A
       - name: kind
         versions:
-          - tag: v0.18.0
+          - tag: v0.20.0
             go_version: "1.20"
   - org: metallb
     repos:

diff --git a/projects/brancz/kube-rbac-proxy/README.md b/projects/brancz/kube-rbac-proxy/README.md
@@ -1,5 +1,5 @@
 ## **Kube RBAC Proxy**
-![Version](https://img.shields.io/badge/version-v0.14.1-blue)
+![Version](https://img.shields.io/badge/version-v0.14.2-blue)
 ![Build Status](https://codebuild.us-west-2.amazonaws.com/badges?uuid=eyJlbmNyeXB0ZWREYXRhIjoiZUxRMjRTYUl6NEhJWkI1YVh5QVB3UitEY1dCcExLTUxGR21DQ0IySUZUTEI4N3I4NnMwbnIxUW9OZ1dudm9VdTRoaHVzUHhyMjNwek9wYXY3amh3NlFVPSIsIml2UGFyYW1ldGVyU3BlYyI6ImdSc3ZLZmpxM1BMYnd0dGwiLCJtYXRlcmlhbFNldFNlcmlhbCI6MX0%3D&branch=main)
 
 The [kube-rbac-proxy](https://github.com/brancz/kube-rbac-proxy) is an HTTP proxy for a single upstream endpoint, that can perform RBAC authorization against the Kubernetes API using `SubjectAccessReview`. In Kubernetes clusters without NetworkPolicies, any Pod can perform requests to every other Pod in the cluster. This proxy serves to restrict requests to only those Pods that present a valid and RBAC-authorized token or client TLS certificate.

diff --git a/projects/cert-manager/cert-manager/CERT_MANAGER_ACMESOLVER_ATTRIBUTION.txt b/projects/cert-manager/cert-manager/CERT_MANAGER_ACMESOLVER_ATTRIBUTION.txt
@@ -2,7 +2,7 @@
 ** github.com/cert-manager/cert-manager; version v0.0.0-00010101000000-000000000000 --
 https://github.com/cert-manager/cert-manager
 
-** github.com/cert-manager/cert-manager/acmesolver-binary; version v1.12.1 --
+** github.com/cert-manager/cert-manager/acmesolver-binary; version v1.12.2 --
 https://github.com/cert-manager/cert-manager/acmesolver-binary
 
 ** github.com/go-logr/logr; version v1.2.4 --

diff --git a/projects/cert-manager/cert-manager/CERT_MANAGER_CAINJECTOR_ATTRIBUTION.txt b/projects/cert-manager/cert-manager/CERT_MANAGER_CAINJECTOR_ATTRIBUTION.txt
@@ -2,7 +2,7 @@
 ** github.com/cert-manager/cert-manager; version v0.0.0-00010101000000-000000000000 --
 https://github.com/cert-manager/cert-manager
 
-** github.com/cert-manager/cert-manager/cainjector-binary; version v1.12.1 --
+** github.com/cert-manager/cert-manager/cainjector-binary; version v1.12.2 --
 https://github.com/cert-manager/cert-manager/cainjector-binary
 
 ** github.com/go-logr/logr; version v1.2.4 --

diff --git a/projects/cert-manager/cert-manager/CERT_MANAGER_CONTROLLER_ATTRIBUTION.txt b/projects/cert-manager/cert-manager/CERT_MANAGER_CONTROLLER_ATTRIBUTION.txt
@@ -32,7 +32,7 @@ https://github.com/Azure/go-autorest/tracing
 ** github.com/cert-manager/cert-manager; version v0.0.0-00010101000000-000000000000 --
 https://github.com/cert-manager/cert-manager
 
-** github.com/cert-manager/cert-manager/controller-binary; version v1.12.1 --
+** github.com/cert-manager/cert-manager/controller-binary; version v1.12.2 --
 https://github.com/cert-manager/cert-manager/controller-binary
 
 ** github.com/coreos/go-semver/semver; version v0.3.0 --

diff --git a/projects/cert-manager/cert-manager/CERT_MANAGER_CTL_ATTRIBUTION.txt b/projects/cert-manager/cert-manager/CERT_MANAGER_CTL_ATTRIBUTION.txt
@@ -2,7 +2,7 @@
 ** github.com/cert-manager/cert-manager; version v1.12.1-0.20230524130037-7ea113504de2 --
 https://github.com/cert-manager/cert-manager
 
-** github.com/cert-manager/cert-manager/cmd/ctl; version v1.12.1 --
+** github.com/cert-manager/cert-manager/cmd/ctl; version v1.12.2 --
 https://github.com/cert-manager/cert-manager/cmd/ctl
 
 ** github.com/containerd/containerd; version v1.7.0 --

diff --git a/projects/cert-manager/cert-manager/CERT_MANAGER_WEBHOOK_ATTRIBUTION.txt b/projects/cert-manager/cert-manager/CERT_MANAGER_WEBHOOK_ATTRIBUTION.txt
@@ -2,7 +2,7 @@
 ** github.com/cert-manager/cert-manager; version v0.0.0-00010101000000-000000000000 --
 https://github.com/cert-manager/cert-manager
 
-** github.com/cert-manager/cert-manager/webhook-binary; version v1.12.1 --
+** github.com/cert-manager/cert-manager/webhook-binary; version v1.12.2 --
 https://github.com/cert-manager/cert-manager/webhook-binary
 
 ** github.com/go-logr/logr; version v1.2.4 --

diff --git a/projects/cert-manager/cert-manager/CHECKSUMS b/projects/cert-manager/cert-manager/CHECKSUMS
@@ -1,10 +1,10 @@
-b27e0f8fdde56522342b15531b586f1a1658d79f62c0b4dbb30e8f8cb72b1d7f  _output/bin/cert-manager/linux-amd64/cert-manager-acmesolver
-ec50b30c6650eb43f353b2c2012f83a9f9141dc7ace18c372c5b840ff0df1df9  _output/bin/cert-manager/linux-amd64/cert-manager-cainjector
-868f0e629002bd69d91c388f8fadd8563d28a7af4dd149c2cb76ada5fe4624f3  _output/bin/cert-manager/linux-amd64/cert-manager-controller
-a9e25f38de1f72c6438c488f199f95a59e37b91e987ce659612911ec0cd8d6f5  _output/bin/cert-manager/linux-amd64/cert-manager-ctl
-c61c06716d578cede28ffa1b85f21110dd47564adf95125d27999a100be579b5  _output/bin/cert-manager/linux-amd64/cert-manager-webhook
-ec169a43ebc6830c935dff29536c2d2dc799a4c34e2dfc6a1c5af7a9dc76b82a  _output/bin/cert-manager/linux-arm64/cert-manager-acmesolver
-58bdda035d98549df3829c085cc32ca8a7d141130fd3195e01c1bc8f69e4a47d  _output/bin/cert-manager/linux-arm64/cert-manager-cainjector
-33800139795ef5d4762092c57dcd5e32a0ca8fac4bd4ff1105f621b3ea46cd67  _output/bin/cert-manager/linux-arm64/cert-manager-controller
-9d1c1ae65ade567d3340d5b8b0f8f54ba852978af6b892d11505342d38d1df32  _output/bin/cert-manager/linux-arm64/cert-manager-ctl
-b9387c69c37ba6ab93cab8681b933e61493c60a9ee13842af19627358ee444e2  _output/bin/cert-manager/linux-arm64/cert-manager-webhook
+55bb3ab64e1b7800f5a44edd0b217dfad9f7eddb962bbf6f110c838c858595dd  _output/bin/cert-manager/linux-amd64/cert-manager-acmesolver
+e34ca2b8c8c47f2f05e2ea041695e8c7422b31e5ebfeba6241410453b0ebdc86  _output/bin/cert-manager/linux-amd64/cert-manager-cainjector
+a9e6a4c4a0ba8fc6d1d93f1a96832470023f31038e8b30e4c3628a0eeac9c7bd  _output/bin/cert-manager/linux-amd64/cert-manager-controller
+5ef1243565f0224ad4af2fcfb5c05a442435745db2faecd4bb044a675c72477e  _output/bin/cert-manager/linux-amd64/cert-manager-ctl
+788d265ec23993384d2a8cb77a724ba87fa66b7a39450a3a3d71e42f1f05f9af  _output/bin/cert-manager/linux-amd64/cert-manager-webhook
+b105c8f3e6cd7d844522f97ad27d21778b54b7554d30d849a15ce73cc33bb2de  _output/bin/cert-manager/linux-arm64/cert-manager-acmesolver
+d9e13b63b4a6e08009cd6e5512a3a514d89e5ac873a84acf3e97bba35bd75450  _output/bin/cert-manager/linux-arm64/cert-manager-cainjector
+f20795a19580f2a083f90d3abd9ac83a1b734b91a6b37412471e6962d9f0b915  _output/bin/cert-manager/linux-arm64/cert-manager-controller
+ba802dc58d3764b09384c0df28c6115d7afbd41e0e434b976603cfd8de16f96b  _output/bin/cert-manager/linux-arm64/cert-manager-ctl
+43db2e15a508b0fd47e8956cd437ef96605e01f9341a6702268d309db11fd227  _output/bin/cert-manager/linux-arm64/cert-manager-webhook
diff --git a/projects/cert-manager/cert-manager/GIT_TAG b/projects/cert-manager/cert-manager/GIT_TAG
@@ -1 +1 @@
-v1.12.1
+v1.12.2
diff --git a/projects/cert-manager/cert-manager/README.md b/projects/cert-manager/cert-manager/README.md
@@ -1,5 +1,5 @@
 ## **cert-manager**
-![Version](https://img.shields.io/badge/version-v1.12.1-blue)
+![Version](https://img.shields.io/badge/version-v1.12.2-blue)
 ![Build Status](https://codebuild.us-west-2.amazonaws.com/badges?uuid=eyJlbmNyeXB0ZWREYXRhIjoiUkphQkhWTUpOOVE1OFVLU0dHQmVFUXZJV0dJaGVLYmtEZHp0aGtDRnJBQUxtaHVqOWp3S0l6d0NlTytqNWpwc2tNTmF6RnNhMTZ3d1J1RXErR0lWcldZPSIsIml2UGFyYW1ldGVyU3BlYyI6IlQyU2lIcVVtU3ozZVZSVTgiLCJtYXRlcmlhbFNldFNlcmlhbCI6MX0%3D&branch=main)
 
 [cert-manager](https://github.com/cert-manager/cert-manager) is a Kubernetes add-on to automate the management and issuance of TLS certificates from various issuing sources, such as [Let’s Encrypt](https://letsencrypt.org), [HashiCorp Vault](https://www.vaultproject.io), [Venafi](https://www.venafi.com/), a simple signing key pair, or self signed. It periodically ensures that certificates are valid and up-to-date, and attempts to renew certificates at an appropriate time before expiry.