186 Commits

Author SHA1 Message Date
Ryan Richard 0adc3838e0 upgrade golang in CI from 1.26.4 to 1.26.5
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-07-07 15:29:44 -07:00
Ryan Richard 9d4418cf89 add native FIPS build/test jobs to main pipeline
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-07-07 14:10:50 -07:00
Ryan Richard 7c125a5a15 debugging output in confirm-built-with-gofips140/task.sh
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-07-06 11:16:22 -07:00
Ryan Richard f14a569761 handle expected ldd error in confirm-built-with-gofips140/task.sh
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-07-06 11:05:07 -07:00
Ryan Richard d9d65c97af CI changes for testing GOFIPS140 builds in PR pipeline
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-07-06 10:32:31 -07:00
Ryan Richard 9f272ef2b1 fix typo in dockerfile-builders/pipeline.yml
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-07-02 19:32:49 -07:00
Ryan Richard 28239d3f9e update versions in dockerfile-builders/pipeline.yml
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-07-02 19:22:36 -07:00
Ryan Richard 7211c866be Revert "use govulncheck v1.3.0 because v1.4.0 crashes"
This reverts commit 877779f4fa.
2026-07-02 07:18:09 -07:00
Ryan Richard 10728f6077 update NetworkPolicies for new Kind/k8s version
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-07-01 12:11:23 -07:00
Ryan Richard d995d41a62 fix gce-init.sh for kind with k8s 1.36+
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-06-30 13:29:04 -07:00
Ryan Richard 60e53aa50b increase kapp delete timeout
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-06-30 12:24:23 -07:00
Ryan Richard 085e18a2b2 use kube 1.36.1 for kind clusters in CI
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-06-30 12:02:57 -07:00
Volkan Özçelik c691dfd8db ci go version bump.
Signed-off-by: Volkan Özçelik <volkan.ozcelik@broadcom.com>
2026-06-25 11:51:26 -07:00
Ryan Richard 877779f4fa use govulncheck v1.3.0 because v1.4.0 crashes
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-06-22 15:02:38 -07:00
Ryan Richard 4bdfb816af stop using -json for govulncheck
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-06-22 14:59:31 -07:00
Ryan Richard b1de07eed0 also search for old kind-node-builder orphan VMs
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-05-28 12:10:23 -07:00
Ryan Richard 847676350d remove codegen tools for k8s 1.30
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-05-08 09:50:29 -07:00
Ryan Richard 276bd8f831 override test/cluster_capabilities/gke.yaml for acceptance cluster
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-05-07 15:03:51 -07:00
Ryan Richard a8455337a9 upgrade Go in CI from 1.26.2 to 1.26.3
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-05-07 11:30:45 -07:00
Ryan Richard 9a4974150a add 1.36 to verify-codegen
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-05-04 15:35:14 -07:00
Ryan Richard 605e67d152 add build-k8s-code-generator-1.36 job
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-05-04 15:26:49 -07:00
Ryan Richard 3704148e6e bump several CI deps, including Go to 1.26.2 2026-04-20 10:10:00 -07:00
Ryan Richard 1967353213 temporarily remove trivy from main pipeline 2026-03-27 14:00:43 -07:00
Ryan Richard 92d37315c9 temporarily remove trivy from security-scan pipeline 2026-03-27 11:41:46 -07:00
Ryan Richard 782a58d002 remove CVE-2026-24051 from trivy ignores because we upgraded that dep 2026-03-27 10:32:07 -07:00
Ryan Richard 532c337938 temporarily remove trivy from PR pipeline 2026-03-27 10:27:49 -07:00
Ryan Richard a2519a1b48 update versions for building codegen container images 2026-03-26 13:38:48 -07:00
Ryan Richard 965ad43331 task to run trivy does not need any GitHub personal access token 2026-03-23 10:47:46 -07:00
Ryan Richard db82abde48 improve logic of dependency bump script to avoid undoing human commits 2026-03-20 10:00:50 -07:00
Ryan Richard 58d8b70024 upgrade Go in CI from 1.26.0 to 1.26.1 2026-03-13 11:27:14 -07:00
Ryan Richard 556dabd55b update previous commit for more log output 2026-03-06 09:07:57 -08:00
Ryan Richard 5beba016ff fix typo in previous commit 2026-03-06 08:53:56 -08:00
Ryan Richard cd1b52231f avoid force pushing to pinny/bump-deps when there are no new changes 2026-03-06 08:49:07 -08:00
Ryan Richard 51e724b6d8 move trivy image-scan exclusion to the right place 2026-03-03 10:14:01 -08:00
Ryan Richard 55db644832 also add trivy image-scan exclusion for CVE-2026-24051 2026-03-03 10:10:39 -08:00
Ryan Richard 6997d60c79 extend exclusion for CVE-2026-24051 2026-03-03 10:03:26 -08:00
Ryan Richard a62391c12b upgrade CI to use Go 1.26.0 2026-02-11 12:24:14 -08:00
Ryan Richard 370487be59 ignore CVE from indirect dep which does not impact us 2026-02-04 12:29:15 -08:00
Ryan Richard b2c5a8f123 update version used in codegen container images 2026-01-27 11:27:28 -08:00
Ryan Richard 3d740e90c1 use slightly larger GKE nodes due to Insufficient cpu errors
Error observed during deploying the Pinniped Supervisor was...

Pending: Unschedulable, message: 0/3 nodes are available: 3 Insufficient
cpu. no new claims to deallocate, preemption: 0/3 nodes are available:
3 No preemption victims found for incoming pod.
2026-01-21 14:10:26 -08:00
Ryan Richard 801591fed0 update copyrights on changed files when creating auto dependency bump PR 2026-01-21 11:41:35 -08:00
Ryan Richard 47bcaefa65 also check for new major versions of Go deps in CI auto dep bump PRs 2026-01-21 10:51:44 -08:00
Ryan Richard aef74185c3 upgrade CI from Go 1.25.5 to 1.25.6 2026-01-21 10:28:36 -08:00
Ryan Richard 902b5e575d Revert "skip race detector for impersonator package for now"
This reverts commit e4d2c8ba07.
2026-01-06 13:29:24 -08:00
Ryan Richard cf2b3d7113 comment out AKS and EKS pipeline jobs 2026-01-06 13:17:48 -08:00
Ryan Richard 06f0728479 move manually triggered jobs earlier in main pipeline
So we can manually trigger them to run in parallel with other
jobs, so we don't have to wait for those other jobs to pass because
they can be flaky sometimes.
2025-12-23 14:18:35 -08:00
Ryan Richard e551207055 update pipelines for kube 1.35 2025-12-22 10:54:43 -08:00
Ryan Richard 35f8c5876d skip client-side validation of manifest when k8s server < 1.27
After upgrading libs to k8s 1.35, this stopped working on very old
versions of Kube. Not really a problem, because version 1.26 and below
are all over 3 years old. You can still install Pinniped on these old
version if you skip kubectl's client-side validation.
2025-12-19 13:15:53 -08:00
Ryan Richard 3640096b6c bump k8s codegen versions and build 1.35 codegen container image 2025-12-18 12:41:01 -08:00
Ryan Richard 4f2481205e update CI to use Go 1.25.5 2025-12-05 10:29:12 -08:00