Commit Graph
159 Commits
Author SHA1 Message Date
Ryan Richard 965ad43331 task to run trivy does not need any GitHub personal access token 2026-03-23 10:47:46 -07:00
Ryan Richard db82abde48 improve logic of dependency bump script to avoid undoing human commits 2026-03-20 10:00:50 -07:00
Ryan Richard 58d8b70024 upgrade Go in CI from 1.26.0 to 1.26.1 2026-03-13 11:27:14 -07:00
Ryan Richard 556dabd55b update previous commit for more log output 2026-03-06 09:07:57 -08:00
Ryan Richard 5beba016ff fix typo in previous commit 2026-03-06 08:53:56 -08:00
Ryan Richard cd1b52231f avoid force pushing to pinny/bump-deps when there are no new changes 2026-03-06 08:49:07 -08:00
Ryan Richard 51e724b6d8 move trivy image-scan exclusion to the right place 2026-03-03 10:14:01 -08:00
Ryan Richard 55db644832 also add trivy image-scan exclusion for CVE-2026-24051 2026-03-03 10:10:39 -08:00
Ryan Richard 6997d60c79 extend exclusion for CVE-2026-24051 2026-03-03 10:03:26 -08:00
Ryan Richard a62391c12b upgrade CI to use Go 1.26.0 2026-02-11 12:24:14 -08:00
Ryan Richard 370487be59 ignore CVE from indirect dep which does not impact us 2026-02-04 12:29:15 -08:00
Ryan Richard b2c5a8f123 update version used in codegen container images 2026-01-27 11:27:28 -08:00
Ryan Richard 3d740e90c1 use slightly larger GKE nodes due to Insufficient cpu errors
Error observed during deploying the Pinniped Supervisor was...

Pending: Unschedulable, message: 0/3 nodes are available: 3 Insufficient
cpu. no new claims to deallocate, preemption: 0/3 nodes are available:
3 No preemption victims found for incoming pod.
2026-01-21 14:10:26 -08:00
Ryan Richard 801591fed0 update copyrights on changed files when creating auto dependency bump PR 2026-01-21 11:41:35 -08:00
Ryan Richard 47bcaefa65 also check for new major versions of Go deps in CI auto dep bump PRs 2026-01-21 10:51:44 -08:00
Ryan Richard aef74185c3 upgrade CI from Go 1.25.5 to 1.25.6 2026-01-21 10:28:36 -08:00
Ryan Richard 902b5e575d Revert "skip race detector for impersonator package for now"
This reverts commit e4d2c8ba07.
2026-01-06 13:29:24 -08:00
Ryan Richard cf2b3d7113 comment out AKS and EKS pipeline jobs 2026-01-06 13:17:48 -08:00
Ryan Richard 06f0728479 move manually triggered jobs earlier in main pipeline
So we can manually trigger them to run in parallel with other
jobs, so we don't have to wait for those other jobs to pass because
they can be flaky sometimes.
2025-12-23 14:18:35 -08:00
Ryan Richard e551207055 update pipelines for kube 1.35 2025-12-22 10:54:43 -08:00
Ryan Richard 35f8c5876d skip client-side validation of manifest when k8s server < 1.27
After upgrading libs to k8s 1.35, this stopped working on very old
versions of Kube. Not really a problem, because version 1.26 and below
are all over 3 years old. You can still install Pinniped on these old
version if you skip kubectl's client-side validation.
2025-12-19 13:15:53 -08:00
Ryan Richard 3640096b6c bump k8s codegen versions and build 1.35 codegen container image 2025-12-18 12:41:01 -08:00
Ryan Richard 4f2481205e update CI to use Go 1.25.5 2025-12-05 10:29:12 -08:00
dependabot[bot]andGitHub dbb97f04b5 Bump golang in /pipelines/shared-helpers/test-binaries-image
Bumps golang from 1.25.3-bookworm to 1.25.4-bookworm.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25.4-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-06 01:12:53 +00:00
Joshua Casey f333b15a1d Use only the gcp-instance-admin service account 2025-10-17 07:45:08 -05:00
Joshua Casey 92a1e66b25 Bump test-binaries-image dockerfiles to golang:1.25.3-bookworm 2025-10-15 14:08:17 -05:00
Joshua Casey 6fa8895357 Add api key and username for nancy commands 2025-10-14 11:54:33 -05:00
Joshua Casey be15eaf023 Run integration tests on latest k8s versions 2025-10-14 09:33:00 -05:00
Joshua Casey 21acb9e10a Bump go to 1.25.3 2025-10-14 09:28:03 -05:00
Joshua Casey 049653edb3 Add job to build k8s 0.34.0 codegen image 2025-09-09 09:58:57 -05:00
Joshua Casey 9ffdf3f568 Bump go to v1.25.1 2025-09-09 09:30:05 -05:00
Ryan Richard 8ad9585d64 update codegen versions in dockerfile pipeline 2025-08-28 10:47:32 -07:00
Ryan Richard b65f53379a chmod the cache directory using the correct path 2025-08-21 12:29:12 -07:00
Ryan Richard 0c6f80c3db chmod the cache directory in task which runs integration tests 2025-08-21 12:18:53 -07:00
Ryan Richard 4d23e8d45a enhance confirm-built-with-fips for kube-vert-agent for Go 1.25 2025-08-18 12:36:59 -07:00
Ryan Richard d160e9a23a upgrade CI from Go 1.24.6 to 1.25.0 2025-08-18 12:04:46 -07:00
dependabot[bot]andGitHub 2554c7de6c Bump golang in /pipelines/shared-helpers/test-binaries-image
Bumps golang from 1.24.6-bullseye to 1.25rc3-bullseye.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.25rc3-bullseye
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-14 02:03:43 +00:00
Joshua Casey 69f9e9b35c Bump go to 1.24.6 2025-08-13 08:59:08 -05:00
dependabot[bot]andGitHub e97a4e38d1 Bump golang in /pipelines/shared-helpers/test-binaries-image
Bumps golang from 1.24.5-bullseye to 1.24.6-bullseye.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.24.6-bullseye
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-07 03:32:18 +00:00
Ryan Richard c1fcb8a0fc more towards update version/docs after release by creating a PR 2025-08-04 14:15:38 -07:00
Ryan Richard 3ea7403b6f update version and docs on website after release by creating a PR
instead of doing a direct commit to the main branch
2025-08-04 14:04:12 -07:00
Ryan Richard 901b77dd4f fix username and password for jobs that push to git via https 2025-08-04 13:44:26 -07:00
Ryan Richard 5899ac8066 update homebrew formula task can use golang image instead of debian 2025-08-04 13:12:18 -07:00
Ryan Richard 0981780d6a account for move of repo from vmware-tanzu to vmware on GitHub 2025-08-02 15:01:00 -07:00
Ryan Richard f09c89dd43 use golang image in format-release task 2025-08-02 14:26:08 -07:00
Ryan Richard 22181a6361 use openssl instead of python to generate eks cluster names
because python is not part of Amazon's container image anymore
2025-08-02 12:05:34 -07:00
Ryan Richard bd0bdb49e2 use smaller/cheaper nodes for regional GKE clusters 2025-08-02 09:22:05 -07:00
Ryan Richard 7dbf91d5d2 Revert "try using a bigger node machine type for tmp GKE clusters"
This reverts commit 16dd97aff4.
2025-08-02 09:11:08 -07:00
Ryan Richard 07b4fb8dcc try using regional GKE clusters instead of zonal 2025-08-02 08:43:48 -07:00
Ryan Richard 16dd97aff4 try using a bigger node machine type for tmp GKE clusters 2025-08-01 17:35:56 -07:00