Add K8s 0.32 to the pull-requests pipeline

pipelines/pull-requests/pipeline.yml

@@ -10,7 +10,7 @@ meta:
   trivy_ignores: &trivy_ignores
     IGNORE_VULNERABILITY_IDS: |
       # Medium CVE in gopkg.in/square/go-jose.v2. That project is archived, so they will never fix this.
-      # That is an indirect dependency of our project, which we inherit from our direct dep of k8s.io/apiserver@v0.31.2.
+      # That is an indirect dependency of our project, which we inherit from our direct dep of k8s.io/apiserver@v0.32.0.
       # However, the Kubernetes maintainers say that k8s is not impacted and they won't upgrade to v3.
       # See https://github.com/kubernetes/kubernetes/issues/128039. So we will ignore this for now.
       CVE-2024-28180
@@ -105,8 +105,8 @@ meta:
   # so always check the tags using the above link.
   kube_version_v1-21-x: &kube_version_v1-21-x
     KUBE_VERSION: v1.21.14
-  kube_version_v1-31-x: &kube_version_v1-31-x
-    KUBE_VERSION: v1.31.2
+  kube_version_v1-32-x: &kube_version_v1-32-x
+    KUBE_VERSION: v1.32.0
   kube_version_k8s-main: &kube_version_k8s-main
     KUBE_VERSION: "k8s-main"
     KIND_NODE_IMAGE: "ghcr.io/pinniped-ci-bot/kind-node-image:latest"
@@ -115,7 +115,7 @@ meta:
   oldest_kind_kube_version: &oldest_kind_kube_version
     <<: *kube_version_v1-21-x
   latest_kind_kube_version: &latest_kind_kube_version
-    <<: *kube_version_v1-31-x
+    <<: *kube_version_v1-32-x
 
   okta_integration_env_vars: &okta_integration_env_vars
     OKTA_CLI_CALLBACK: ((okta-cli-callback))
@@ -372,6 +372,15 @@ resources:
       username: ((ci-ghcr-puller-username))
       password: ((ci-ghcr-puller-token))
 
+  - name: k8s-code-generator-1.32-image
+    type: registry-image
+    icon: docker
+    check_every: 3m
+    source:
+      repository: ((ci-ghcr-registry))/k8s-code-generator-1.32
+      username: ((ci-ghcr-puller-username))
+      password: ((ci-ghcr-puller-token))
+
 jobs:
 
   - name: start
@@ -462,6 +471,7 @@ jobs:
           - get: k8s-code-generator-1.29-image
           - get: k8s-code-generator-1.30-image
           - get: k8s-code-generator-1.31-image
+          - get: k8s-code-generator-1.32-image
       - { <<: *pr-status-on-pending, params: { <<: *pr-status-on-pending-params, context: verify-codegen } }
       - in_parallel:
           - task: verify-go-mod-tidy
@@ -521,6 +531,13 @@ jobs:
             image: k8s-code-generator-1.31-image
             params:
               KUBE_MINOR_VERSION: "1.31"
+          - task: codegen-1.32
+            timeout: 20m
+            <<: *pinniped-pr-input-mapping
+            file: pinniped-ci/pipelines/shared-tasks/run-verify-codegen/task.yml
+            image: k8s-code-generator-1.32-image
+            params:
+              KUBE_MINOR_VERSION: "1.32"
 
   - name: unit-test
     on_success: { <<: *pr-status-on-success, params: { <<: *pr-status-on-success-params, context: unit-test } }