170 Commits

Author SHA1 Message Date
Ryan Richard
847676350d remove codegen tools for k8s 1.30
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-05-08 09:50:29 -07:00
Ryan Richard
276bd8f831 override test/cluster_capabilities/gke.yaml for acceptance cluster
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-05-07 15:03:51 -07:00
Ryan Richard
a8455337a9 upgrade Go in CI from 1.26.2 to 1.26.3
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-05-07 11:30:45 -07:00
Ryan Richard
9a4974150a add 1.36 to verify-codegen
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-05-04 15:35:14 -07:00
Ryan Richard
605e67d152 add build-k8s-code-generator-1.36 job
Signed-off-by: Ryan Richard <richardry@vmware.com>
2026-05-04 15:26:49 -07:00
Ryan Richard
3704148e6e bump several CI deps, including Go to 1.26.2 2026-04-20 10:10:00 -07:00
Ryan Richard
1967353213 temporarily remove trivy from main pipeline 2026-03-27 14:00:43 -07:00
Ryan Richard
92d37315c9 temporarily remove trivy from security-scan pipeline 2026-03-27 11:41:46 -07:00
Ryan Richard
782a58d002 remove CVE-2026-24051 from trivy ignores because we upgraded that dep 2026-03-27 10:32:07 -07:00
Ryan Richard
532c337938 temporarily remove trivy from PR pipeline 2026-03-27 10:27:49 -07:00
Ryan Richard
a2519a1b48 update versions for building codegen container images 2026-03-26 13:38:48 -07:00
Ryan Richard
965ad43331 task to run trivy does not need any GitHub personal access token 2026-03-23 10:47:46 -07:00
Ryan Richard
db82abde48 improve logic of dependency bump script to avoid undoing human commits 2026-03-20 10:00:50 -07:00
Ryan Richard
58d8b70024 upgrade Go in CI from 1.26.0 to 1.26.1 2026-03-13 11:27:14 -07:00
Ryan Richard
556dabd55b update previous commit for more log output 2026-03-06 09:07:57 -08:00
Ryan Richard
5beba016ff fix typo in previous commit 2026-03-06 08:53:56 -08:00
Ryan Richard
cd1b52231f avoid force pushing to pinny/bump-deps when there are no new changes 2026-03-06 08:49:07 -08:00
Ryan Richard
51e724b6d8 move trivy image-scan exclusion to the right place 2026-03-03 10:14:01 -08:00
Ryan Richard
55db644832 also add trivy image-scan exclusion for CVE-2026-24051 2026-03-03 10:10:39 -08:00
Ryan Richard
6997d60c79 extend exclusion for CVE-2026-24051 2026-03-03 10:03:26 -08:00
Ryan Richard
a62391c12b upgrade CI to use Go 1.26.0 2026-02-11 12:24:14 -08:00
Ryan Richard
370487be59 ignore CVE from indirect dep which does not impact us 2026-02-04 12:29:15 -08:00
Ryan Richard
b2c5a8f123 update version used in codegen container images 2026-01-27 11:27:28 -08:00
Ryan Richard
3d740e90c1 use slightly larger GKE nodes due to Insufficient cpu errors
Error observed during deploying the Pinniped Supervisor was...

Pending: Unschedulable, message: 0/3 nodes are available: 3 Insufficient
cpu. no new claims to deallocate, preemption: 0/3 nodes are available:
3 No preemption victims found for incoming pod.
2026-01-21 14:10:26 -08:00
Ryan Richard
801591fed0 update copyrights on changed files when creating auto dependency bump PR 2026-01-21 11:41:35 -08:00
Ryan Richard
47bcaefa65 also check for new major versions of Go deps in CI auto dep bump PRs 2026-01-21 10:51:44 -08:00
Ryan Richard
aef74185c3 upgrade CI from Go 1.25.5 to 1.25.6 2026-01-21 10:28:36 -08:00
Ryan Richard
902b5e575d Revert "skip race detector for impersonator package for now"
This reverts commit e4d2c8ba07.
2026-01-06 13:29:24 -08:00
Ryan Richard
cf2b3d7113 comment out AKS and EKS pipeline jobs 2026-01-06 13:17:48 -08:00
Ryan Richard
06f0728479 move manually triggered jobs earlier in main pipeline
So we can manually trigger them to run in parallel with other
jobs, so we don't have to wait for those other jobs to pass because
they can be flaky sometimes.
2025-12-23 14:18:35 -08:00
Ryan Richard
e551207055 update pipelines for kube 1.35 2025-12-22 10:54:43 -08:00
Ryan Richard
35f8c5876d skip client-side validation of manifest when k8s server < 1.27
After upgrading libs to k8s 1.35, this stopped working on very old
versions of Kube. Not really a problem, because version 1.26 and below
are all over 3 years old. You can still install Pinniped on these old
version if you skip kubectl's client-side validation.
2025-12-19 13:15:53 -08:00
Ryan Richard
3640096b6c bump k8s codegen versions and build 1.35 codegen container image 2025-12-18 12:41:01 -08:00
Ryan Richard
4f2481205e update CI to use Go 1.25.5 2025-12-05 10:29:12 -08:00
dependabot[bot]
dbb97f04b5 Bump golang in /pipelines/shared-helpers/test-binaries-image
Bumps golang from 1.25.3-bookworm to 1.25.4-bookworm.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.4-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-06 01:12:53 +00:00
Joshua Casey
f333b15a1d Use only the gcp-instance-admin service account 2025-10-17 07:45:08 -05:00
Joshua Casey
92a1e66b25 Bump test-binaries-image dockerfiles to golang:1.25.3-bookworm 2025-10-15 14:08:17 -05:00
Joshua Casey
6fa8895357 Add api key and username for nancy commands 2025-10-14 11:54:33 -05:00
Joshua Casey
be15eaf023 Run integration tests on latest k8s versions 2025-10-14 09:33:00 -05:00
Joshua Casey
21acb9e10a Bump go to 1.25.3 2025-10-14 09:28:03 -05:00
Joshua Casey
049653edb3 Add job to build k8s 0.34.0 codegen image 2025-09-09 09:58:57 -05:00
Joshua Casey
9ffdf3f568 Bump go to v1.25.1 2025-09-09 09:30:05 -05:00
Ryan Richard
8ad9585d64 update codegen versions in dockerfile pipeline 2025-08-28 10:47:32 -07:00
Ryan Richard
b65f53379a chmod the cache directory using the correct path 2025-08-21 12:29:12 -07:00
Ryan Richard
0c6f80c3db chmod the cache directory in task which runs integration tests 2025-08-21 12:18:53 -07:00
Ryan Richard
4d23e8d45a enhance confirm-built-with-fips for kube-vert-agent for Go 1.25 2025-08-18 12:36:59 -07:00
Ryan Richard
d160e9a23a upgrade CI from Go 1.24.6 to 1.25.0 2025-08-18 12:04:46 -07:00
dependabot[bot]
2554c7de6c Bump golang in /pipelines/shared-helpers/test-binaries-image
Bumps golang from 1.24.6-bullseye to 1.25rc3-bullseye.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25rc3-bullseye
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-14 02:03:43 +00:00
Joshua Casey
69f9e9b35c Bump go to 1.24.6 2025-08-13 08:59:08 -05:00
dependabot[bot]
e97a4e38d1 Bump golang in /pipelines/shared-helpers/test-binaries-image
Bumps golang from 1.24.5-bullseye to 1.24.6-bullseye.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.24.6-bullseye
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-07 03:32:18 +00:00