Austin Vazquez
34a45cab2a
Publish attestation as release artifact
...
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
(cherry picked from commit 3961dc9c8cb0e31925e45a2273bbdc06412be262)
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
2024-11-26 19:47:08 -07:00
Derek McGowan
b4cab35e2b
Merge pull request #11053 from djdongjin/rocky-ci-fix-2.0
...
[release/2.0] Move rockylinux 9.4 to almalinux/9 in CI
2024-11-25 06:11:04 -08:00
Jin Dong
7dec6b4607
move rocky 9.4 to almalinux/9 in CI
...
Signed-off-by: Jin Dong <djdongjin95@gmail.com>
(cherry picked from commit 288001f68c5fd34cfbdc7284f14375a3762b8ff4)
Signed-off-by: Jin Dong <djdongjin95@gmail.com>
2024-11-25 13:16:08 +00:00
Fu Wei
952ad6b3a6
Merge pull request #11035 from k8s-infra-cherrypick-robot/cherry-pick-10906-to-release/2.0
...
[release/2.0] *: should align pipe's owner with init process
2024-11-20 15:46:56 -08:00
Wei Fu
cf07f28ee2
*: should align pipe's owner with init process
...
The containerd-shim creates pipes and passes them to the init container as
stdin, stdout, and stderr for logging purposes. By default, these pipes are
owned by the root user (UID/GID: 0/0). The init container can access them
directly through inheritance.
However, if the init container attempts to open any files pointing to these
pipes (e.g., /proc/1/fd/2, /dev/stderr), it will encounter a permission issue
since it is not the owner. To avoid this, we need to align the ownership of
the pipes with the init process.
Fixes : #10598
Signed-off-by: Wei Fu <fuweid89@gmail.com>
2024-11-20 18:01:26 +00:00
Derek McGowan
6e51f71621
Merge pull request #11031 from k8s-infra-cherrypick-robot/cherry-pick-10917-to-release/2.0
...
[release/2.0] fix: set the credentials even if not provided
2024-11-19 15:52:59 -08:00
Andrey Smirnov
9860888666
fix: set the credentials even if not provided
...
Fixes #10916
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-19 22:36:50 +00:00
Fu Wei
78795fa068
Merge pull request #10978 from austinvazquez/cherry-pick-pr-10972-to-2.0
...
[release/2.0] fsverity_test.go: fix nil pointer derefence, fix test fail, fix minor/major device numbers resolving
2024-11-19 10:43:47 -08:00
Akihiro Suda
376eb1d154
Merge pull request #11023 from austinvazquez/cherry-pick-runc-1.2.2-to-2.0
...
[release/2.0] update runc binary to 1.2.2
2024-11-19 14:32:26 +09:00
Austin Vazquez
9081e979f7
update runc binary to 1.2.2
...
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
(cherry picked from commit 9a7bc5423ef5f477705802e45c0b06869764caca)
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
2024-11-18 17:59:03 +00:00
Samuel Karp
30cbb03d49
Merge pull request #11009 from k8s-infra-cherrypick-robot/cherry-pick-11004-to-release/2.0
...
[release/2.0] Revert "Disable vagrant strict dependency checking"
2024-11-14 20:34:13 -08:00
Akhil Mohan
6399c936fa
Revert "Disable vagrant strict dependency checking"
...
This reverts commit ae73e30130
2024-11-15 03:41:44 +00:00
Fu Wei
da51d8ffd3
Merge pull request #11005 from k8s-infra-cherrypick-robot/cherry-pick-10981-to-release/2.0
...
[release/2.0] fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems
2024-11-14 15:48:50 -08:00
Alexey Lunev
a7f2b562f3
fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems
...
Signed-off-by: Alexey Lunev <cheembox573@gmail.com>
2024-11-14 17:34:00 +00:00
Phil Estes
abd8c4c39f
Merge pull request #10997 from dmcgowan/backport-2.0-typeurl
...
[release/2.0] bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
2024-11-12 15:29:20 -07:00
dependabot[bot]
389e781ea1
build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
...
Bumps [github.com/containerd/typeurl/v2](https://github.com/containerd/typeurl ) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/containerd/typeurl/releases )
- [Commits](https://github.com/containerd/typeurl/compare/v2.2.2...v2.2.3 )
Signed-off-by: Derek McGowan <derek@mcg.dev>
---
updated-dependencies:
- dependency-name: github.com/containerd/typeurl/v2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 01c489141c37e27b71370ab26ab28347b17f4284)
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-12 13:18:55 -08:00
Alexey Lunev
30b929ece7
fsverity_test.go: fix major/minor device number resolving
...
Signed-off-by: Alexey Lunev <cheembox573@gmail.com>
(cherry picked from commit f9537ae126fc2be685cc32d5c98b4189a72e02e9)
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
2024-11-09 10:27:46 -08:00
Alexey Lunev
10996a334b
fsverity_test.go: fix nil pointer dereference, fix test fail
...
Signed-off-by: Alexey Lunev <cheembox573@gmail.com>
(cherry picked from commit 8a8e50e6d7baf99ebe02e6ca04d9d842addcd36c)
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
2024-11-09 10:27:26 -08:00
Maksym Pavlenko
e21cb92182
Merge pull request #10973 from k8s-infra-cherrypick-robot/cherry-pick-10970-to-release/2.0
...
[release/2.0] update to go1.23.3 / go1.22.9
2024-11-08 09:50:45 -08:00
Akhil Mohan
5b879f30c0
update to go1.23.3 / go1.22.9
...
- go1.23.3 (released 2024-11-06) includes fixes to the linker, the
runtime, and the net/http, os, and syscall packages. See the
Go 1.23.3 milestone on our issue tracker for details.
- go1.22.9 (released 2024-11-06) includes fixes to the linker. See
the Go 1.22.9 milestone on our issue tracker for details
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
2024-11-08 09:04:33 +00:00
Maksym Pavlenko
aedb61c92a
Merge pull request #10963 from austinvazquez/enable-latest-release-on-2.0
...
[release/2.0] ci: enable marking 2.0 releases as latest
2024-11-07 15:46:34 -08:00
Mike Brown
124b718018
Merge pull request #10968 from dims/Avoid-arch-info-in-the-sed/replace-when-building-cri-cni-containerd.tar.gz-2.0
...
[release/2.0] Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz
2024-11-07 13:39:43 -06:00
Davanum Srinivas
e99c2b55c3
Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-11-07 11:36:03 -05:00
Austin Vazquez
458215f6cf
ci: enable marking 2.0 releases as latest
...
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
2024-11-07 15:09:45 +00:00
Derek McGowan
207ad711ea
Merge pull request #10939 from dmcgowan/prepare-v2.0.0
...
Prepare release notes for v2.0.0
2024-11-05 18:34:06 +00:00
Derek McGowan
03ba4ce1f7
Update release notes for v2.0.0
...
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-04 23:56:27 -08:00
Derek McGowan
f2da3fd688
Update release docs for v2.0.0
...
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-04 23:56:27 -08:00
Samuel Karp
6369206870
Merge pull request #10954 from dmcgowan/update-typeurl-2.2.2
...
Update typeurl to v2.2.2
2024-11-05 07:10:43 +00:00
Derek McGowan
ff09b428e1
Update typeurl to v2.2.2
...
Fixes panic when typeurl is not found
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-04 22:29:24 -08:00
Derek McGowan
18caa33fdc
Merge pull request #10944 from containerd/dependabot/github_actions/softprops/action-gh-release-2.0.9
...
build(deps): bump softprops/action-gh-release from 2.0.8 to 2.0.9
2024-11-04 21:12:32 -08:00
Derek McGowan
545605d5b4
Merge pull request #10945 from containerd/dependabot/github_actions/google-github-actions/auth-2.1.7
...
build(deps): bump google-github-actions/auth from 2.1.6 to 2.1.7
2024-11-04 21:12:07 -08:00
Derek McGowan
71c274bb81
Merge pull request #10947 from containerd/dependabot/go_modules/github.com/containerd/nri-0.8.0
...
build(deps): bump github.com/containerd/nri from 0.7.0 to 0.8.0
2024-11-04 20:35:15 -08:00
Derek McGowan
e841240997
Merge pull request #10946 from containerd/dependabot/go_modules/github.com/containerd/typeurl/v2-2.2.1
...
build(deps): bump github.com/containerd/typeurl/v2 from 2.2.0 to 2.2.1
2024-11-04 20:34:10 -08:00
Derek McGowan
9fe6f7c067
Merge pull request #10943 from containerd/dependabot/github_actions/google-github-actions/upload-cloud-storage-2.2.1
...
build(deps): bump google-github-actions/upload-cloud-storage from 2.2.0 to 2.2.1
2024-11-05 03:20:17 +00:00
dependabot[bot]
a43e7c1e2c
build(deps): bump softprops/action-gh-release from 2.0.8 to 2.0.9
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 2.0.8 to 2.0.9.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](c062e08bd5...e7a8f85e1c
2024-11-05 03:20:13 +00:00
Akihiro Suda
3b976a156c
Merge pull request #10951 from AkihiroSuda/k8s-0.31.2
...
go.mod: k8s.io/* v0.31.2
2024-11-05 03:17:22 +00:00
dependabot[bot]
edf367cabd
build(deps): bump github.com/containerd/nri from 0.7.0 to 0.8.0
...
Bumps [github.com/containerd/nri](https://github.com/containerd/nri ) from 0.7.0 to 0.8.0.
- [Release notes](https://github.com/containerd/nri/releases )
- [Changelog](https://github.com/containerd/nri/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/nri/compare/v0.7.0...v0.8.0 )
---
updated-dependencies:
- dependency-name: github.com/containerd/nri
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-11-05 03:07:56 +00:00
dependabot[bot]
21f636751a
build(deps): bump github.com/containerd/typeurl/v2 from 2.2.0 to 2.2.1
...
Bumps [github.com/containerd/typeurl/v2](https://github.com/containerd/typeurl ) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/containerd/typeurl/releases )
- [Commits](https://github.com/containerd/typeurl/compare/v2.2.0...v2.2.1 )
---
updated-dependencies:
- dependency-name: github.com/containerd/typeurl/v2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-11-05 03:07:51 +00:00
Derek McGowan
37922afa33
Merge pull request #10942 from dmcgowan/update-platforms-v1-rc
...
Update platforms to v1.0.0-rc.0
2024-11-04 19:06:49 -08:00
dependabot[bot]
1edc2147fa
build(deps): bump google-github-actions/auth from 2.1.6 to 2.1.7
...
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth ) from 2.1.6 to 2.1.7.
- [Release notes](https://github.com/google-github-actions/auth/releases )
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md )
- [Commits](8254fb75a3...6fc4af4b14
2024-11-05 01:26:56 +00:00
Akihiro Suda
2d8fec45a4
go.mod: k8s.io/* v0.31.2
...
No code change.
k8s.io/cri-api was accidentally updated to a non-stable version
v0.32.0-alpha.0 in PR 10552.
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-11-05 10:06:10 +09:00
dependabot[bot]
bef201fe6b
build(deps): bump google-github-actions/upload-cloud-storage
...
Bumps [google-github-actions/upload-cloud-storage](https://github.com/google-github-actions/upload-cloud-storage ) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/google-github-actions/upload-cloud-storage/releases )
- [Changelog](https://github.com/google-github-actions/upload-cloud-storage/blob/main/CHANGELOG.md )
- [Commits](e485962f2b...386ab77f37
2024-11-05 00:55:30 +00:00
Derek McGowan
bd10a60965
Update platforms to v1.0.0-rc.0
...
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-04 16:51:16 -08:00
Derek McGowan
c4f797eaba
Merge pull request #10950 from dmcgowan/vagrant-fix-dep-failure
...
Disable vagrant strict dependency checking
2024-11-04 16:50:17 -08:00
Derek McGowan
ae73e30130
Disable vagrant strict dependency checking
...
Fixes broken vagrant builds
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-04 16:18:51 -08:00
Phil Estes
255d2a54d7
Merge pull request #10938 from dmcgowan/update-api-v1.8.0
...
Update containerd API to v1.8.0 release
2024-11-04 16:59:32 +00:00
Derek McGowan
33677d56dd
Update containerd API to v1.8.0 release
...
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-03 23:14:24 -08:00
Derek McGowan
cf36acf6b6
Merge pull request #10935 from dmcgowan/prepare-api-v1.8.0
...
Prepare release notes for api/v1.8.0
2024-11-04 05:25:19 +00:00
Akihiro Suda
c017828c02
Merge pull request #10877 from AkihiroSuda/runc-1.2.0
...
update runc binary to 1.2.1
2024-11-03 22:43:46 +00:00
Fu Wei
716445af3a
Merge pull request #10933 from dmcgowan/test-container-resilience
...
Make TestContainerPids more resilient
2024-11-03 20:58:24 +00:00
