Wenkai Yin(尹文开) and lou
d7b4b0a770
Merge pull request #6917 from 27149chen/rm-improvement
...
support JSON Merge Patch and Strategic Merge Patch in Resource Modifiers
Signed-off-by: lou <alex1988@outlook.com >
2023-11-15 17:20:15 +08:00
Tiger Kaovilai
bb6c1f60ea
CVE-2023-44487 gRPC-Go HTTP/2 Rapid Reset vulnerability
...
`go get google.golang.org/grpc@v1.56 .3 && go mod tidy`
https://github.com/grpc/grpc-go/security/advisories/GHSA-m425-mq94-257g
Signed-off-by: Tiger Kaovilai <tkaovila@redhat.com >
2023-10-26 02:23:15 -04:00
Xun Jiang
af9697814e
Fix CVE-2023-39325.
...
Bump Velero and Restic golang.org/x/net to v0.17.0.
Bump golang version to v1.20.10.
Signed-off-by: Xun Jiang <jxun@vmware.com >
2023-10-13 14:22:18 +08:00
Daniel Jiang
6f1262d4c6
Switch the kopia repo to new org
...
Signed-off-by: Daniel Jiang <jiangd@vmware.com >
2023-09-14 11:19:43 +08:00
lyndon and GitHub
fd08848471
fix issue 6391 ( #6703 )
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2023-08-25 16:36:45 +08:00
Ming Qiu
3b45830012
Add performance E2E test
...
Signed-off-by: Ming Qiu <mqiu@vmware.com >
2023-08-15 01:46:36 +00:00
lyndon and GitHub
0945879a8a
Merge pull request #6472 from Lyndon-Li/add-wait-timeout-for-expose-prepare
...
Add timeout for backup/restore expose
2023-07-11 09:56:49 +08:00
Lyndon-Li
9f5162ece3
add wait timeout for expose prepare
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2023-07-10 17:32:10 +08:00
danfengl
bc8742566b
Install plugin for datamover pipeline
...
Signed-off-by: danfengl <danfengl@vmware.com >
2023-07-10 02:02:50 +00:00
Xun Jiang and Xun Jiang
7491ab1ec5
Remove Wait VolumeSnapshot to ReadyToUse logic.
...
Due to the logic moving to plugin, and the plugin cannot read the
Velero server's resourceTimeout setting, add the resourceTimeout
in the backup annotation to pass to plugin.
Remove VolumeSnapshotContent reset code from Velero server.
Signed-off-by: Xun Jiang <jxun@vmware.com >
2023-06-02 14:43:43 +08:00
Lyndon-Li
307b82a2ec
bump up kopia v0.13.0
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2023-05-15 07:23:38 +08:00
Xun Jiang
cb0ada1e1c
Enable staticcheck and resolve found issues.
...
Signed-off-by: Xun Jiang <blackpiglet@gmail.com >
2023-04-25 11:33:40 +08:00
qiuming and GitHub
086dbd344f
Handle backup of volume by resource policies ( #5901 )
...
* Handle backup of volume by resource policies
Signed-off-by: Ming <mqiu@vmware.com >
2023-03-21 14:39:25 +08:00
Tiger Kaovilai
6163df5da2
go get k8s.io/client-go@v0.25.6 && go mod tidy
...
Signed-off-by: Tiger Kaovilai <tkaovila@redhat.com >
2023-02-23 16:41:29 -05:00
Xun Jiang
0a2aed8967
Fix Dependabot alerts. Update Dockerfile. Modify Trivy daily scan.
...
Signed-off-by: Xun Jiang <blackpiglet@gmail.com >
2023-02-23 14:04:59 +08:00
Lyndon-Li
2b043f7bdf
bump up golang net
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2023-02-01 15:33:53 +08:00
95fcd8f63c
Bump github.com/Azure/azure-sdk-for-go ( #5709 )
...
Bumps [github.com/Azure/azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go ) from 61.4.0+incompatible to 67.2.0+incompatible.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases )
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md )
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v61.4.0...v67.2.0 )
---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-05 11:00:05 +08:00
Ming
2f3732fa44
Fix CVEs scanned by trivy
...
Signed-off-by: Ming <mqiu@vmware.com >
2022-12-02 06:57:49 +00:00
Ming
bf1122b633
Fix controller problematic log output
...
Signed-off-by: Ming <mqiu@vmware.com >
2022-11-09 06:46:45 +00:00
Lyndon-Li
b06cb9ec60
remove gofrs uuid
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2022-11-07 16:28:33 +08:00
Xun Jiang
41fc641298
Add credential file store in the backup deletion controller.
...
Signed-off-by: Xun Jiang <blackpiglet@gmail.com >
2022-10-31 16:59:26 +08:00
Kira Boyle and Wenkai Yin(尹文开)
b146a880c6
update k8s.io dependencies to 0.24.0
...
* This also required an update to use github.com/bombsimon/logrusr/v3
* 'WithClusterName' removed as per the k8s doc reasoning:
* https://github.com/kubernetes/apimachinery/blob/release-1.24/pkg/apis/meta/v1/types.go\#L257-L259
* ('ClusterName was a legacy field that was always cleared by the system and never used')
* Test was updated accordingly
Signed-off-by: Kira Boyle <kira@replicated.com >
2022-10-21 11:16:21 +08:00
Daniel Jiang and GitHub
ae3ebf7451
Merge pull request #5344 from kaovilai/CVE-2022-28948
...
Upgrade gopkg.in/yaml.v3 to v3.0.1
2022-10-19 16:25:24 +08:00
Daniel Jiang and GitHub
d0a6ff29ac
Merge pull request #5428 from weshayutin/CVE-2022-27191
...
Fix CVE-2022-27191
2022-10-19 16:12:58 +08:00
lyndon and GitHub
30b1ca87eb
Merge pull request #5313 from gliptak/go8
...
Bump Go to 1.18
2022-10-18 12:17:37 +08:00
Wesley Hayutin
1f6785275f
Fix CVE-2022-27191
...
https://nvd.nist.gov/vuln/detail/CVE-2022-27191
updates to:
* golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd
adds:
* golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2
Signed-off-by: Wesley Hayutin <weshayutin@gmail.com >
2022-10-11 07:47:48 -06:00
a80c96c8f8
update velero using klog to version v2.9.0 ( #5396 )
...
Signed-off-by: Xun Jiang <blackpiglet@gmail.com >
Signed-off-by: Xun Jiang <blackpiglet@gmail.com >
Co-authored-by: Xun Jiang <blackpiglet@gmail.com >
2022-09-30 14:08:43 +08:00
Gábor Lipták
648d56e541
Bump Go to 1.18
...
Signed-off-by: Gábor Lipták <gliptak@gmail.com >
2022-09-17 13:11:09 -04:00
Tiger Kaovilai
876238e33d
Resolve gopkg.in/yaml.v3 vulnerabilities
...
as shown from https://security.snyk.io/package/golang/gopkg.in%2Fyaml.v3
Signed-off-by: Tiger Kaovilai <tkaovila@redhat.com >
2022-09-14 10:48:52 -04:00
Xun Jiang
b49e39c021
Remove github.com/apex/log logger.
...
Signed-off-by: Xun Jiang <blackpiglet@gmail.com >
2022-09-07 08:52:16 +08:00
Shubham Pampattiwar and GitHub
94a9a7c795
Merge pull request #4943 from phuongatemc/refactor_plugin_biav1
...
Refactor BackupItemAction to backupitemaction/v1
2022-08-30 09:48:26 -04:00
Lyndon-Li
3769cd218a
kopia lib
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2022-08-26 15:25:20 +08:00
Scott Seago
4f2c2d2679
updated to newer protoc/protoc-gen-go
...
Signed-off-by: Scott Seago <sseago@redhat.com >
2022-08-25 21:28:03 -04:00
Lyndon-Li
d58abb2477
repo init
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2022-08-18 19:45:49 +08:00
Ming
49e151739f
Kopia Uploader integration on shim progress uploader
...
Signed-off-by: Ming <mqiu@vmware.com >
2022-08-10 11:35:24 +00:00
Wenkai Yin(尹文开)
34087fe5f4
Disable status as sub resource in CRDs
...
When enabling the status as sub resource in CRD, the status will be ignored when creating the CR with status, this will cause issues when syncing backups/pvbs
Fixes #4950
Signed-off-by: Wenkai Yin(尹文开) <yinw@vmware.com >
2022-06-09 07:52:08 +08:00
Daniel Jiang and GitHub
8411c735f6
Merge pull request #4870 from ywk253100/220428_grpc2
...
Bump up the version of library go-plugin
2022-05-06 13:12:40 +08:00
Xun Jiang
6421f8ad02
Make waiting VolumeSnapshot to ready process parallel.
...
Signed-off-by: Xun Jiang <jxun@vmware.com >
2022-05-05 14:32:55 +08:00
Wenkai Yin(尹文开)
3049f6ec8c
Bump up the version of library go-plugin
...
Bump up the version of library go-plugin to avoid blocking issue #4863
Signed-off-by: Wenkai Yin(尹文开) <yinw@vmware.com >
2022-04-28 17:04:04 +08:00
Daniel Jiang
04f59ce003
Bump up to v1 API for CSI snapshot
...
Signed-off-by: Daniel Jiang <jiangd@vmware.com >
2022-03-31 22:55:03 +08:00
danfengl
09cdf41d97
Add E2E test of bsl deletion
...
Signed-off-by: danfengl <danfengl@vmware.com >
2022-03-15 02:27:09 +00:00
Wenkai Yin(尹文开) and GitHub
f2542ba123
Merge pull request #4664 from danfengliu/add-e2e-verify-snapshot-in-vsl
...
Add e2e test to verify snapshot in vsl
2022-03-02 15:10:20 +08:00
danfengl
4ebf764ddc
Add e2e for verify snapshto in VSL
...
Signed-off-by: danfengl <danfengl@vmware.com >
2022-03-01 02:13:55 +00:00
MatthieuFin
f6bdfd09c5
Merge remote-tracking branch 'upstream/main'
...
Signed-off-by: MatthieuFin <matthieu2717@gmail.com >
2022-02-23 15:03:15 +01:00
danfengl
29b2cd1883
Add backup deletion e2e test
...
Test case description is "Deleted backups are deleted from object storage and backups deleted from object storage can be deleted locally",
in this test, only resource backup objects are target for verifition, restic repo verification is not included in this PR, and snapshot verification will be in later PR
Signed-off-by: danfengl <danfengl@vmware.com >
2021-12-23 12:45:31 +00:00
Daniel Jiang
a3d196ee85
Bump up Go to 1.17
...
Signed-off-by: Daniel Jiang <jiangd@vmware.com >
2021-12-06 20:16:24 +08:00
Xun Jiang
2c240c2830
Use logrusr instead of zap.
...
logrusr is a open source convertor, which can convert logrus logger into logr.
By using logrusr, velero can use exsiting formatted logrus logger, other than introducing zap as a new logger.
Signed-off-by: Xun Jiang <jxun@vmware.com >
2021-11-17 18:10:37 +08:00
Wenkai Yin(尹文开) and GitHub
9f0ea22c60
Fix CVE-2020-29652 and CVE-2020-26160 ( #4274 )
...
Bump up restic to v0.12.1 to fix CVE-2020-26160.
Bump up module "github.com/vmware-tanzu/crash-diagnostics" to v0.3.7 to fix CVE-2020-29652.
The "github.com/vmware-tanzu/crash-diagnostics" updates client-go to v0.22.2 which introduces several break changes, this commit updates the related codes as well
Signed-off-by: Wenkai Yin(尹文开) <yinw@vmware.com >
2021-11-03 13:30:26 -07:00
MatthieuFin
338af4e584
update dependancies
...
Signed-off-by: MatthieuFin <matthieu2717@gmail.com >
2021-08-31 17:27:18 +02:00
MatthieuFin
effa09a42f
Add full support for setting securityContext for restic restore container
...
Signed-off-by: MatthieuFin <matthieu2717@gmail.com >
2021-08-31 17:03:25 +02:00