Ryan Richard
0adc3838e0
upgrade golang in CI from 1.26.4 to 1.26.5
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-07-07 15:29:44 -07:00
Ryan Richard
9d4418cf89
add native FIPS build/test jobs to main pipeline
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-07-07 14:10:50 -07:00
Ryan Richard
7c125a5a15
debugging output in confirm-built-with-gofips140/task.sh
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-07-06 11:16:22 -07:00
Ryan Richard
f14a569761
handle expected ldd error in confirm-built-with-gofips140/task.sh
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-07-06 11:05:07 -07:00
Ryan Richard
d9d65c97af
CI changes for testing GOFIPS140 builds in PR pipeline
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-07-06 10:32:31 -07:00
Ryan Richard
9f272ef2b1
fix typo in dockerfile-builders/pipeline.yml
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-07-02 19:32:49 -07:00
Ryan Richard
28239d3f9e
update versions in dockerfile-builders/pipeline.yml
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-07-02 19:22:36 -07:00
Ryan Richard
7211c866be
Revert "use govulncheck v1.3.0 because v1.4.0 crashes"
...
This reverts commit 877779f4fa .
2026-07-02 07:18:09 -07:00
Ryan Richard
10728f6077
update NetworkPolicies for new Kind/k8s version
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-07-01 12:11:23 -07:00
Ryan Richard
d995d41a62
fix gce-init.sh for kind with k8s 1.36+
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-06-30 13:29:04 -07:00
Ryan Richard
60e53aa50b
increase kapp delete timeout
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-06-30 12:24:23 -07:00
Ryan Richard
085e18a2b2
use kube 1.36.1 for kind clusters in CI
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-06-30 12:02:57 -07:00
Volkan Özçelik
c691dfd8db
ci go version bump.
...
Signed-off-by: Volkan Özçelik <volkan.ozcelik@broadcom.com >
2026-06-25 11:51:26 -07:00
Ryan Richard
877779f4fa
use govulncheck v1.3.0 because v1.4.0 crashes
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-06-22 15:02:38 -07:00
Ryan Richard
4bdfb816af
stop using -json for govulncheck
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-06-22 14:59:31 -07:00
Ryan Richard
b1de07eed0
also search for old kind-node-builder orphan VMs
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-05-28 12:10:23 -07:00
Ryan Richard
847676350d
remove codegen tools for k8s 1.30
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-05-08 09:50:29 -07:00
Ryan Richard
276bd8f831
override test/cluster_capabilities/gke.yaml for acceptance cluster
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-05-07 15:03:51 -07:00
Ryan Richard
a8455337a9
upgrade Go in CI from 1.26.2 to 1.26.3
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-05-07 11:30:45 -07:00
Ryan Richard
9a4974150a
add 1.36 to verify-codegen
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-05-04 15:35:14 -07:00
Ryan Richard
605e67d152
add build-k8s-code-generator-1.36 job
...
Signed-off-by: Ryan Richard <richardry@vmware.com >
2026-05-04 15:26:49 -07:00
Ryan Richard
3704148e6e
bump several CI deps, including Go to 1.26.2
2026-04-20 10:10:00 -07:00
Ryan Richard
1967353213
temporarily remove trivy from main pipeline
2026-03-27 14:00:43 -07:00
Ryan Richard
92d37315c9
temporarily remove trivy from security-scan pipeline
2026-03-27 11:41:46 -07:00
Ryan Richard
782a58d002
remove CVE-2026-24051 from trivy ignores because we upgraded that dep
2026-03-27 10:32:07 -07:00
Ryan Richard
532c337938
temporarily remove trivy from PR pipeline
2026-03-27 10:27:49 -07:00
Ryan Richard
a2519a1b48
update versions for building codegen container images
2026-03-26 13:38:48 -07:00
Ryan Richard
965ad43331
task to run trivy does not need any GitHub personal access token
2026-03-23 10:47:46 -07:00
Ryan Richard
db82abde48
improve logic of dependency bump script to avoid undoing human commits
2026-03-20 10:00:50 -07:00
Ryan Richard
58d8b70024
upgrade Go in CI from 1.26.0 to 1.26.1
2026-03-13 11:27:14 -07:00
Ryan Richard
556dabd55b
update previous commit for more log output
2026-03-06 09:07:57 -08:00
Ryan Richard
5beba016ff
fix typo in previous commit
2026-03-06 08:53:56 -08:00
Ryan Richard
cd1b52231f
avoid force pushing to pinny/bump-deps when there are no new changes
2026-03-06 08:49:07 -08:00
Ryan Richard
51e724b6d8
move trivy image-scan exclusion to the right place
2026-03-03 10:14:01 -08:00
Ryan Richard
55db644832
also add trivy image-scan exclusion for CVE-2026-24051
2026-03-03 10:10:39 -08:00
Ryan Richard
6997d60c79
extend exclusion for CVE-2026-24051
2026-03-03 10:03:26 -08:00
Ryan Richard
a62391c12b
upgrade CI to use Go 1.26.0
2026-02-11 12:24:14 -08:00
Ryan Richard
370487be59
ignore CVE from indirect dep which does not impact us
2026-02-04 12:29:15 -08:00
Ryan Richard
b2c5a8f123
update version used in codegen container images
2026-01-27 11:27:28 -08:00
Ryan Richard
3d740e90c1
use slightly larger GKE nodes due to Insufficient cpu errors
...
Error observed during deploying the Pinniped Supervisor was...
Pending: Unschedulable, message: 0/3 nodes are available: 3 Insufficient
cpu. no new claims to deallocate, preemption: 0/3 nodes are available:
3 No preemption victims found for incoming pod.
2026-01-21 14:10:26 -08:00
Ryan Richard
801591fed0
update copyrights on changed files when creating auto dependency bump PR
2026-01-21 11:41:35 -08:00
Ryan Richard
47bcaefa65
also check for new major versions of Go deps in CI auto dep bump PRs
2026-01-21 10:51:44 -08:00
Ryan Richard
aef74185c3
upgrade CI from Go 1.25.5 to 1.25.6
2026-01-21 10:28:36 -08:00
Ryan Richard
902b5e575d
Revert "skip race detector for impersonator package for now"
...
This reverts commit e4d2c8ba07 .
2026-01-06 13:29:24 -08:00
Ryan Richard
cf2b3d7113
comment out AKS and EKS pipeline jobs
2026-01-06 13:17:48 -08:00
Ryan Richard
06f0728479
move manually triggered jobs earlier in main pipeline
...
So we can manually trigger them to run in parallel with other
jobs, so we don't have to wait for those other jobs to pass because
they can be flaky sometimes.
2025-12-23 14:18:35 -08:00
Ryan Richard
e551207055
update pipelines for kube 1.35
2025-12-22 10:54:43 -08:00
Ryan Richard
35f8c5876d
skip client-side validation of manifest when k8s server < 1.27
...
After upgrading libs to k8s 1.35, this stopped working on very old
versions of Kube. Not really a problem, because version 1.26 and below
are all over 3 years old. You can still install Pinniped on these old
version if you skip kubectl's client-side validation.
2025-12-19 13:15:53 -08:00
Ryan Richard
3640096b6c
bump k8s codegen versions and build 1.35 codegen container image
2025-12-18 12:41:01 -08:00
Ryan Richard
4f2481205e
update CI to use Go 1.25.5
2025-12-05 10:29:12 -08:00