Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-02-25 09:11:24 -05:00
Code Issues Packages Projects Releases Wiki Activity
constellation/internal/versions/versions.go

377 lines
20 KiB
Go
Raw Permalink Normal View History

add license headers sed -i '1i/*\nCopyright (c) Edgeless Systems GmbH\n\nSPDX-License-Identifier: AGPL-3.0-only\n*/\n' `grep -rL --include='*.go' 'DO NOT EDIT'` gofumpt -w .
2022-09-05 09:06:08 +02:00
/*
Copyright (c) Edgeless Systems GmbH
SPDX-License-Identifier: AGPL-3.0-only
*/
dev-docs: Go package docs (#958) * Remove unused package * Add Go package docs to most packages Signed-off-by: Daniel Weiße <dw@edgeless.systems> Signed-off-by: Fabian Kammel <fk@edgeless.systems> Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> Co-authored-by: Fabian Kammel <fk@edgeless.systems>
2023-01-19 15:57:50 +01:00
/*
Package versions defines the supported versions of Constellation components.
Binaries and container image versions are pinned by their hashes, the generate tool can be found in the hash-generator subpackage.
*/
AB#2076: version specific images (#288) KubernetesVersion sent by the init command now controls all downloaded binaries, if they depend on the k8s version. * Move all download links into /internal/versions. * Unify files in /internal/versions package * Move image download links into VersionConfigs and thus make them dependant on the k8s version, where the image version is specific to the k8s version. * Don't specify patch version in k8sVersion
2022-07-21 14:41:07 +02:00
package versions
Pin container image hashes
2022-10-06 12:58:56 +02:00
import (
"fmt"
cli: change upgrade-plan to upgrade-check Upgrade check is used to find updates for the current cluster. Optionally the found upgrades can be persisted to the config for consumption by the upgrade-execute cmd. The old `upgrade execute` in this commit does not work with the new `upgrade plan`. The current versions are read from the cluster. Supported versions are read from the cli and the versionsapi. Adds a new config field MicroserviceVersion that will be used by `upgrade execute` to update the service versions. The field is optional until 2.7 A deprecation warning for the upgrade key is printed during config validation. Kubernetes versions now specify the patch version to make it explicit for users if an upgrade changes the k8s version.
2023-01-31 12:12:19 +01:00
"sort"
Pin container image hashes
2022-10-06 12:58:56 +02:00
"strings"
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
config: fix incorrect kubernetes version validation (#1155) Fix incorrect string comparison by replacing it with call to semver.Compare. Also add handling to check for missing v prefix.
2023-02-09 17:38:02 +01:00
"github.com/edgelesssys/constellation/v2/internal/compatibility"
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
"github.com/edgelesssys/constellation/v2/internal/constants"
internal: move components into their own package
2023-01-06 12:04:36 +01:00
"github.com/edgelesssys/constellation/v2/internal/versions/components"
cli: change upgrade-plan to upgrade-check Upgrade check is used to find updates for the current cluster. Optionally the found upgrades can be persisted to the config for consumption by the upgrade-execute cmd. The old `upgrade execute` in this commit does not work with the new `upgrade plan`. The current versions are read from the cluster. Supported versions are read from the cli and the versionsapi. Adds a new config field MicroserviceVersion that will be used by `upgrade execute` to update the service versions. The field is optional until 2.7 A deprecation warning for the upgrade key is printed during config validation. Kubernetes versions now specify the patch version to make it explicit for users if an upgrade changes the k8s version.
2023-01-31 12:12:19 +01:00
"golang.org/x/mod/semver"
Pin container image hashes
2022-10-06 12:58:56 +02:00
)
AB#2255: Fix kubeadm version incompatibility (#293) * Update image version * Introduce 'ValidK8sVersion' type. Ensures that consumers of the k8sVersion receive a valid version, without having to do their own validation. * Add testcase to check that kubeadm accepts the currently provided version.
2022-07-22 15:05:04 +02:00
cli: change upgrade-plan to upgrade-check Upgrade check is used to find updates for the current cluster. Optionally the found upgrades can be persisted to the config for consumption by the upgrade-execute cmd. The old `upgrade execute` in this commit does not work with the new `upgrade plan`. The current versions are read from the cluster. Supported versions are read from the cli and the versionsapi. Adds a new config field MicroserviceVersion that will be used by `upgrade execute` to update the service versions. The field is optional until 2.7 A deprecation warning for the upgrade key is printed during config validation. Kubernetes versions now specify the patch version to make it explicit for users if an upgrade changes the k8s version.
2023-01-31 12:12:19 +01:00
// SupportedK8sVersions returns a list (sorted) of supported Kubernetes versions.
func SupportedK8sVersions() []string {
validVersions := make([]string, len(VersionConfigs))
i := 0
for _, conf := range VersionConfigs {
config: fix incorrect kubernetes version validation (#1155) Fix incorrect string comparison by replacing it with call to semver.Compare. Also add handling to check for missing v prefix.
2023-02-09 17:38:02 +01:00
validVersions[i] = compatibility.EnsurePrefixV(conf.ClusterVersion)
cli: change upgrade-plan to upgrade-check Upgrade check is used to find updates for the current cluster. Optionally the found upgrades can be persisted to the config for consumption by the upgrade-execute cmd. The old `upgrade execute` in this commit does not work with the new `upgrade plan`. The current versions are read from the cluster. Supported versions are read from the cli and the versionsapi. Adds a new config field MicroserviceVersion that will be used by `upgrade execute` to update the service versions. The field is optional until 2.7 A deprecation warning for the upgrade key is printed during config validation. Kubernetes versions now specify the patch version to make it explicit for users if an upgrade changes the k8s version.
2023-01-31 12:12:19 +01:00
i++
}
validVersionsSorted := semver.ByVersion(validVersions)
sort.Sort(validVersionsSorted)
return validVersionsSorted
}
init
2023-08-25 16:11:36 +02:00
// SupportedValidK8sVersions returns a typed list of supported Kubernetes versions.
func SupportedValidK8sVersions() (res []ValidK8sVersion) {
for _, v := range SupportedK8sVersions() {
res = append(res, ValidK8sVersion(v))
}
return
}
AB#2255: Fix kubeadm version incompatibility (#293) * Update image version * Introduce 'ValidK8sVersion' type. Ensures that consumers of the k8sVersion receive a valid version, without having to do their own validation. * Add testcase to check that kubeadm accepts the currently provided version.
2022-07-22 15:05:04 +02:00
// ValidK8sVersion represents any of the three currently supported k8s versions.
type ValidK8sVersion string
// NewValidK8sVersion validates the given string and produces a new ValidK8sVersion object.
fixup! init
2023-08-28 11:21:52 +02:00
// It accepts a major minor version (e.g. 1.26) and transforms it into a supported patch version (e.g. 1.26.7).
// It also accepts a full version (e.g. 1.26.7) and validates it.
cli: skip k8s upgrade in case of outdated version (#1864) If an unsupported, outdated k8s patch version is used, the user should still be able to run upgrade apply.
2023-06-05 09:13:02 +02:00
// Returns an empty string if the given version is invalid.
// strict controls whether the patch version is checked or not.
fixup! init
2023-08-28 11:21:52 +02:00
// If strict is false, the patch version is ignored and the returned.
cli: skip k8s upgrade in case of outdated version (#1864) If an unsupported, outdated k8s patch version is used, the user should still be able to run upgrade apply.
2023-06-05 09:13:02 +02:00
func NewValidK8sVersion(k8sVersion string, strict bool) (ValidK8sVersion, error) {
init
2023-08-25 16:11:36 +02:00
prefixedVersion := compatibility.EnsurePrefixV(k8sVersion)
parsedVersion, err := resolveK8sPatchVersion(prefixedVersion)
if err != nil {
return "", fmt.Errorf("resolving kubernetes patch version from flag: %w", err)
}
cli: skip k8s upgrade in case of outdated version (#1864) If an unsupported, outdated k8s patch version is used, the user should still be able to run upgrade apply.
2023-06-05 09:13:02 +02:00
var supported bool
if strict {
init
2023-08-25 16:11:36 +02:00
supported = isSupportedK8sVersionStrict(parsedVersion)
cli: skip k8s upgrade in case of outdated version (#1864) If an unsupported, outdated k8s patch version is used, the user should still be able to run upgrade apply.
2023-06-05 09:13:02 +02:00
} else {
init
2023-08-25 16:11:36 +02:00
supported = isSupportedK8sVersion(parsedVersion)
cli: skip k8s upgrade in case of outdated version (#1864) If an unsupported, outdated k8s patch version is used, the user should still be able to run upgrade apply.
2023-06-05 09:13:02 +02:00
}
cli: allow helm upgrades with old k8s patch version (#2095)
2023-07-12 12:42:51 +02:00
if !supported {
init
2023-08-25 16:11:36 +02:00
return "", fmt.Errorf("invalid Kubernetes version: %s; supported versions are %v", parsedVersion, SupportedK8sVersions())
cli: allow helm upgrades with old k8s patch version (#2095)
2023-07-12 12:42:51 +02:00
}
init
2023-08-25 16:11:36 +02:00
return ValidK8sVersion(parsedVersion), nil
}
// UnmarshalYAML implements the yaml.Unmarshaler interface.
func (v *ValidK8sVersion) UnmarshalYAML(unmarshal func(interface{}) error) error {
var version string
if err := unmarshal(&version); err != nil {
return err
}
upgrade allows outdated patch version
2023-08-28 11:05:59 +02:00
valid, err := NewValidK8sVersion(version, false) // allow any patch version to not force K8s patch upgrades
init
2023-08-25 16:11:36 +02:00
if err != nil {
upgrade allows outdated patch version
2023-08-28 11:05:59 +02:00
return fmt.Errorf("unsupported Kubernetes version %s, supported versions are %s", version, strings.Join(SupportedK8sVersions(), ", "))
init
2023-08-25 16:11:36 +02:00
}
*v = valid
return nil
}
// resolveK8sPatchVersion takes the user input from --kubernetes and transforms a MAJOR.MINOR definition into a supported
// MAJOR.MINOR.PATCH release.
func resolveK8sPatchVersion(k8sVersion string) (string, error) {
if !semver.IsValid(k8sVersion) {
return "", fmt.Errorf("kubernetes flag does not specify a valid semantic version: %s", k8sVersion)
}
upgrade allows outdated patch version
2023-08-28 11:05:59 +02:00
fmt.Println("COMPARE", semver.MajorMinor(k8sVersion), k8sVersion)
init
2023-08-25 16:11:36 +02:00
if semver.MajorMinor(k8sVersion) != k8sVersion {
// patch version is specified
return k8sVersion, nil
AB#2255: Fix kubeadm version incompatibility (#293) * Update image version * Introduce 'ValidK8sVersion' type. Ensures that consumers of the k8sVersion receive a valid version, without having to do their own validation. * Add testcase to check that kubeadm accepts the currently provided version.
2022-07-22 15:05:04 +02:00
}
init
2023-08-25 16:11:36 +02:00
extendedVersion := K8sVersionFromMajorMinor(k8sVersion)
if extendedVersion == "" {
return "", fmt.Errorf("--kubernetes (%s) does not specify a valid Kubernetes version. Supported versions: %s", strings.TrimPrefix(k8sVersion, "v"), supportedVersions())
}
return extendedVersion, nil
}
cli: allow helm upgrades with old k8s patch version (#2095)
2023-07-12 12:42:51 +02:00
init
2023-08-25 16:11:36 +02:00
// K8sVersionFromMajorMinor takes a semver in format MAJOR.MINOR
// and returns the version in format MAJOR.MINOR.PATCH with the
// supported patch version as PATCH.
func K8sVersionFromMajorMinor(version string) string {
switch version {
case semver.MajorMinor(string(V1_26)):
return string(V1_26)
case semver.MajorMinor(string(V1_27)):
return string(V1_27)
case semver.MajorMinor(string(V1_28)):
return string(V1_28)
default:
return ""
}
}
// supportedVersions prints the supported version without v prefix and without patch version.
// Should only be used when accepting Kubernetes versions from --kubernetes.
func supportedVersions() string {
builder := strings.Builder{}
for i, version := range SupportedK8sVersions() {
if i > 0 {
builder.WriteString(" ")
}
builder.WriteString(strings.TrimPrefix(semver.MajorMinor(version), "v"))
}
return builder.String()
cli: skip k8s upgrade in case of outdated version (#1864) If an unsupported, outdated k8s patch version is used, the user should still be able to run upgrade apply.
2023-06-05 09:13:02 +02:00
}
// IsSupportedK8sVersion checks if a given Kubernetes minor version is supported by Constellation.
// Note: the patch version is not checked!
func isSupportedK8sVersion(version string) bool {
for _, valid := range SupportedK8sVersions() {
if semver.MajorMinor(valid) == semver.MajorMinor(version) {
return true
}
}
return false
AB#2255: Fix kubeadm version incompatibility (#293) * Update image version * Introduce 'ValidK8sVersion' type. Ensures that consumers of the k8sVersion receive a valid version, without having to do their own validation. * Add testcase to check that kubeadm accepts the currently provided version.
2022-07-22 15:05:04 +02:00
}
// IsSupportedK8sVersion checks if a given Kubernetes version is supported by Constellation.
cli: skip k8s upgrade in case of outdated version (#1864) If an unsupported, outdated k8s patch version is used, the user should still be able to run upgrade apply.
2023-06-05 09:13:02 +02:00
func isSupportedK8sVersionStrict(version string) bool {
cli: add `config kubernetes-versions` subcommand (#1224) Allows users to learn which k8s versions are supported by the current CLI. Extend respective docs section.
2023-02-22 09:52:47 +01:00
for _, valid := range SupportedK8sVersions() {
if valid == version {
return true
}
AB#2255: Fix kubeadm version incompatibility (#293) * Update image version * Introduce 'ValidK8sVersion' type. Ensures that consumers of the k8sVersion receive a valid version, without having to do their own validation. * Add testcase to check that kubeadm accepts the currently provided version.
2022-07-22 15:05:04 +02:00
}
cli: add `config kubernetes-versions` subcommand (#1224) Allows users to learn which k8s versions are supported by the current CLI. Extend respective docs section.
2023-02-22 09:52:47 +01:00
return false
AB#2255: Fix kubeadm version incompatibility (#293) * Update image version * Introduce 'ValidK8sVersion' type. Ensures that consumers of the k8sVersion receive a valid version, without having to do their own validation. * Add testcase to check that kubeadm accepts the currently provided version.
2022-07-22 15:05:04 +02:00
}
Kubernetes 1.25 preview Signed-off-by: Malte Poll <mp@edgeless.systems>
2022-09-02 14:05:44 +02:00
// IsPreviewK8sVersion checks if a given Kubernetes version is still in preview and not fully supported.
go: remove unused parameters Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-03-20 11:03:36 +01:00
func IsPreviewK8sVersion(_ ValidK8sVersion) bool {
Move k8s version window up
2022-10-06 10:43:46 +02:00
return false
Kubernetes 1.25 preview Signed-off-by: Malte Poll <mp@edgeless.systems>
2022-09-02 14:05:44 +02:00
}
AB#2076: version specific images (#288) KubernetesVersion sent by the init command now controls all downloaded binaries, if they depend on the k8s version. * Move all download links into /internal/versions. * Unify files in /internal/versions package * Move image download links into VersionConfigs and thus make them dependant on the k8s version, where the image version is specific to the k8s version. * Don't specify patch version in k8sVersion
2022-07-21 14:41:07 +02:00
const (
Document exported funcs,types,interfaces and enable check. (#475) * Include EXC0014 and fix issues. * Include EXC0012 and fix issues. Signed-off-by: Fabian Kammel <fk@edgeless.systems> Co-authored-by: Otto Bittner <cobittner@posteo.net>
2022-11-09 15:57:54 +01:00
//
AB#2076: version specific images (#288) KubernetesVersion sent by the init command now controls all downloaded binaries, if they depend on the k8s version. * Move all download links into /internal/versions. * Unify files in /internal/versions package * Move image download links into VersionConfigs and thus make them dependant on the k8s version, where the image version is specific to the k8s version. * Don't specify patch version in k8sVersion
2022-07-21 14:41:07 +02:00
// Constellation images.
// These images are built in a way that they support all versions currently listed in VersionConfigs.
Document exported funcs,types,interfaces and enable check. (#475) * Include EXC0014 and fix issues. * Include EXC0012 and fix issues. Signed-off-by: Fabian Kammel <fk@edgeless.systems> Co-authored-by: Otto Bittner <cobittner@posteo.net>
2022-11-09 15:57:54 +01:00
//
// KonnectivityAgentImage agent image for konnectivity service.
deps: update K8s version independent containers to v0.1.2 (#1376) Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-03-20 16:35:26 +01:00
KonnectivityAgentImage = "registry.k8s.io/kas-network-proxy/proxy-agent:v0.1.2@sha256:cd3046d253d26ffb5907c625e0d0c2be05c5693c90e12116980851739fc0ead8" // renovate:container
Document exported funcs,types,interfaces and enable check. (#475) * Include EXC0014 and fix issues. * Include EXC0012 and fix issues. Signed-off-by: Fabian Kammel <fk@edgeless.systems> Co-authored-by: Otto Bittner <cobittner@posteo.net>
2022-11-09 15:57:54 +01:00
// KonnectivityServerImage server image for konnectivity service.
deps: update K8s version independent containers to v0.1.2 (#1376) Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-03-20 16:35:26 +01:00
KonnectivityServerImage = "registry.k8s.io/kas-network-proxy/proxy-server:v0.1.2@sha256:79933c3779bc30e33bb7509dff913e70f6ba78ad441f4827f0f3e840ce5f3ddb" // renovate:container
Document exported funcs,types,interfaces and enable check. (#475) * Include EXC0014 and fix issues. * Include EXC0012 and fix issues. Signed-off-by: Fabian Kammel <fk@edgeless.systems> Co-authored-by: Otto Bittner <cobittner@posteo.net>
2022-11-09 15:57:54 +01:00
// GcpGuestImage image for GCP guest agent.
Build microservices on release branch
2022-10-07 17:50:59 +02:00
// Check for new versions at https://github.com/GoogleCloudPlatform/guest-agent/releases and update in /.github/workflows/build-gcp-guest-agent.yml.
deps: update ghcr.io/edgelesssys/gcp-guest-agent Docker tag to v20230811 (#2230) Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-08-15 16:28:54 +02:00
GcpGuestImage = "ghcr.io/edgelesssys/gcp-guest-agent:v20230811.0.0@sha256:c05d6273a1574af2564835a9cc989bed36ec3f76899f51908987263df5b0f231" // renovate:container
AB#2589: Deploy operators via Helm (#575) * Only deploy operators on GCP/Azure. * cert-manager is now deployed by default (GCP/Azure) * remove OLM
2022-11-21 10:35:40 +01:00
// NodeMaintenanceOperatorImage is the image for the node maintenance operator.
deps: update quay.io/medik8s/node-maintenance-operator Docker tag to v0.15.0 (#2064) * deps: update quay.io/medik8s/node-maintenance-operator Docker tag to v0.15.0 * upgrade vendored nmo api folder --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Malte Poll <mp@edgeless.systems>
2023-07-19 15:37:17 +02:00
NodeMaintenanceOperatorImage = "quay.io/medik8s/node-maintenance-operator:v0.15.0@sha256:8cb8dad93283268282c30e75c68f4bd76b28def4b68b563d2f9db9c74225d634" // renovate:container
debugd: add logcollector Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-11-17 15:25:25 +01:00
// LogstashImage is the container image of logstash, used for log collection by debugd.
ci: logcollection to OpenSearch in non-debug clusters (#2080) * refactor `debugd` file structure * create `hack`-tool to deploy logcollection to non-debug clusters * integrate changes into CI * update fields * update workflow input names * use `working-directory` * add opensearch creds to upgrade workflow * make template func generic * make templating func generic * linebreaks * remove magic defaults * move `os.Exit` to main package * make logging index configurable * make templating generic * remove excess brace * update fields * copy fields * fix flag name * fix linter warnings Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> * remove unused workflow inputs * remove makefiles * fix command * bazel: fix output paths of container This fixes the output paths of builds within the container by mounting directories to paths that exist on the host. We also explicitly set the output path in a .bazelrc to the user specific path. The rc file is mounted into the container and overrides the host rc. Also adding automatic stop in case start is called and a containers is already running. Sym links like bazel-out and paths bazel outputs should generally work with this change. Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> * tabs -> spaces --------- Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-08-21 08:01:33 +02:00
LogstashImage = "ghcr.io/edgelesssys/constellation/logstash-debugd:v2.9.0-pre.0.20230710124918-df09e04e0b4c@sha256:f3bad95b8f85801d61c7791a46488d75d942ef610f289d3362cfe09505cef6c8" // renovate:container
debugd: add logcollector Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-11-17 15:25:25 +01:00
// FilebeatImage is the container image of filebeat, used for log collection by debugd.
ci: logcollection to OpenSearch in non-debug clusters (#2080) * refactor `debugd` file structure * create `hack`-tool to deploy logcollection to non-debug clusters * integrate changes into CI * update fields * update workflow input names * use `working-directory` * add opensearch creds to upgrade workflow * make template func generic * make templating func generic * linebreaks * remove magic defaults * move `os.Exit` to main package * make logging index configurable * make templating generic * remove excess brace * update fields * copy fields * fix flag name * fix linter warnings Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> * remove unused workflow inputs * remove makefiles * fix command * bazel: fix output paths of container This fixes the output paths of builds within the container by mounting directories to paths that exist on the host. We also explicitly set the output path in a .bazelrc to the user specific path. The rc file is mounted into the container and overrides the host rc. Also adding automatic stop in case start is called and a containers is already running. Sym links like bazel-out and paths bazel outputs should generally work with this change. Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> * tabs -> spaces --------- Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-08-21 08:01:33 +02:00
FilebeatImage = "ghcr.io/edgelesssys/constellation/filebeat-debugd:v2.9.0-pre.0.20230710124918-df09e04e0b4c@sha256:438be5705d1886a5d85724cf55f5d7f05c240b4bd4680eff5f532fc346ad02ae" // renovate:container
debugd: add logcollector Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-11-17 15:25:25 +01:00
AB#2255: Fix kubeadm version incompatibility (#293) * Update image version * Introduce 'ValidK8sVersion' type. Ensures that consumers of the k8sVersion receive a valid version, without having to do their own validation. * Add testcase to check that kubeadm accepts the currently provided version.
2022-07-22 15:05:04 +02:00
// currently supported versions.
Feat/revive (#212) * enable revive as linter * fix var-naming revive issues * fix blank-imports revive issues * fix receiver-naming revive issues * fix exported revive issues * fix indent-error-flow revive issues * fix unexported-return revive issues * fix indent-error-flow revive issues Signed-off-by: Fabian Kammel <fk@edgeless.systems>
2022-10-05 15:02:46 +02:00
//nolint:revive
deps: update Kubernetes versions (#2195) Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-08-10 18:40:21 +02:00
V1_26 ValidK8sVersion = "v1.26.7" // renovate:kubernetes-release
deps: add Kubernetes v1.27, remove Kubernetes v1.24 (#1669) Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-05-05 13:22:53 +02:00
//nolint:revive
deps: update Kubernetes versions (#2195) Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-08-10 18:40:21 +02:00
V1_27 ValidK8sVersion = "v1.27.4" // renovate:kubernetes-release
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
//nolint:revive
V1_28 ValidK8sVersion = "v1.28.0" // renovate:kubernetes-release
Feat/revive (#212) * enable revive as linter * fix var-naming revive issues * fix blank-imports revive issues * fix receiver-naming revive issues * fix exported revive issues * fix indent-error-flow revive issues * fix unexported-return revive issues * fix indent-error-flow revive issues Signed-off-by: Fabian Kammel <fk@edgeless.systems>
2022-10-05 15:02:46 +02:00
Document exported funcs,types,interfaces and enable check. (#475) * Include EXC0014 and fix issues. * Include EXC0012 and fix issues. Signed-off-by: Fabian Kammel <fk@edgeless.systems> Co-authored-by: Otto Bittner <cobittner@posteo.net>
2022-11-09 15:57:54 +01:00
// Default k8s version deployed by Constellation.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
Default ValidK8sVersion = V1_27
AB#2076: version specific images (#288) KubernetesVersion sent by the init command now controls all downloaded binaries, if they depend on the k8s version. * Move all download links into /internal/versions. * Unify files in /internal/versions package * Move image download links into VersionConfigs and thus make them dependant on the k8s version, where the image version is specific to the k8s version. * Don't specify patch version in k8sVersion
2022-07-21 14:41:07 +02:00
)
kubernetes: add hashes to components
2022-11-10 15:20:10 +01:00
// Regenerate the hashes by running go generate.
// To add another Kubernetes version, add a new entry to the VersionConfigs map below and fill the Hash field with an empty string.
bazel: add go generate to //:generate target Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-03-29 13:58:37 +02:00
//go:generate hash-generator
kubernetes: add hashes to components
2022-11-10 15:20:10 +01:00
Document exported funcs,types,interfaces and enable check. (#475) * Include EXC0014 and fix issues. * Include EXC0012 and fix issues. Signed-off-by: Fabian Kammel <fk@edgeless.systems> Co-authored-by: Otto Bittner <cobittner@posteo.net>
2022-11-09 15:57:54 +01:00
// VersionConfigs holds download URLs for all required kubernetes components for every supported version.
Feat/revive (#212) * enable revive as linter * fix var-naming revive issues * fix blank-imports revive issues * fix receiver-naming revive issues * fix exported revive issues * fix indent-error-flow revive issues * fix unexported-return revive issues * fix indent-error-flow revive issues Signed-off-by: Fabian Kammel <fk@edgeless.systems>
2022-10-05 15:02:46 +02:00
var VersionConfigs = map[ValidK8sVersion]KubernetesVersion{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
V1_26: {
ClusterVersion: "v1.26.7", // renovate:kubernetes-release
internal: move components into their own package
2023-01-06 12:04:36 +01:00
KubernetesComponents: components.Components{
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz", // renovate:cni-plugins-release
Hash: "sha256:754a71ed60a4bd08726c3af705a7d55ee3df03122b12e389fdba4bea35d7dd7e",
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
InstallPath: constants.CniPluginsDir,
Extract: true,
},
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.28.0/crictl-v1.28.0-linux-amd64.tar.gz", // renovate:crictl-release
Hash: "sha256:8dc78774f7cbeaf787994d386eec663f0a3cf24de1ea4893598096cb39ef2508",
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
InstallPath: constants.BinDir,
Extract: true,
},
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://storage.googleapis.com/kubernetes-release/release/v1.26.7/bin/linux/amd64/kubelet", // renovate:kubernetes-release
Hash: "sha256:2926ea2cd7fcd644d24a258bdf21e1a8cfd95412b1079914ca46466dae1d74f2",
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
InstallPath: constants.KubeletPath,
Extract: false,
},
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://storage.googleapis.com/kubernetes-release/release/v1.26.7/bin/linux/amd64/kubeadm", // renovate:kubernetes-release
Hash: "sha256:812e6d0e94a3fc77d3e9d09dbe709190b77408936cc4e960d916e8401be11090",
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
InstallPath: constants.KubeadmPath,
Extract: false,
},
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://storage.googleapis.com/kubernetes-release/release/v1.26.7/bin/linux/amd64/kubectl", // renovate:kubernetes-release
Hash: "sha256:d9dc7741e5f279c28ef32fbbe1daa8ebc36622391c33470efed5eb8426959971",
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
InstallPath: constants.KubectlPath,
Extract: false,
},
kubernetes: add hashes to components
2022-11-10 15:20:10 +01:00
},
Add AWS CCM versions
2022-10-24 16:13:26 +02:00
// CloudControllerManagerImageAWS is the CCM image used on AWS.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
CloudControllerManagerImageAWS: "registry.k8s.io/provider-aws/cloud-controller-manager:v1.26.6@sha256:33445ab57f48938fe989ffe311dacee0044b82f2bd23cb7f7b563275926f0ce9", // renovate:container
AB#2077: add v1.24.3 support (#298) This is a squashed commit. * Necessary changes for 1.24 support. Trigger join-service build. * Update joinservice version. Image was created by manually triggered workflow, based on now squashed commit. microservice-demo can be deployed successfully. No errors during cluster setup.
2022-07-26 17:08:57 +02:00
// CloudControllerManagerImageAzure is the CCM image used on Azure.
deps: add Kubernetes v1.27, remove Kubernetes v1.24 (#1669) Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-05-05 13:22:53 +02:00
// Check for newer versions at https://github.com/kubernetes-sigs/cloud-provider-azure/blob/master/README.md.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
CloudControllerManagerImageAzure: "mcr.microsoft.com/oss/kubernetes/azure-cloud-controller-manager:v1.26.13@sha256:d44cd3490d3ab7a4bf11faa4c8b918864be041f8b183dcedc75caf6fb9d1fdf1", // renovate:container
AB#2077: add v1.24.3 support (#298) This is a squashed commit. * Necessary changes for 1.24 support. Trigger join-service build. * Update joinservice version. Image was created by manually triggered workflow, based on now squashed commit. microservice-demo can be deployed successfully. No errors during cluster setup.
2022-07-26 17:08:57 +02:00
// CloudNodeManagerImageAzure is the cloud-node-manager image used on Azure.
deps: add Kubernetes v1.27, remove Kubernetes v1.24 (#1669) Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-05-05 13:22:53 +02:00
// Check for newer versions at https://github.com/kubernetes-sigs/cloud-provider-azure/blob/master/README.md.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
CloudNodeManagerImageAzure: "mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.26.13@sha256:ba8c73fc49495ed69d4242eee3068609ff2752d4c3f51de740385b05a4c303f1", // renovate:container
versions: add OpenStack CCM image
2023-03-17 09:44:30 +01:00
// CloudControllerManagerImageGCP is the CCM image used on GCP.
todo responsibilities and cleanup (#1837) * chore: add TODO responsibilities * chore: remove not needed TODOs * chore: remove outdated migrations * chore: remove resolved goleak exception * chore: remove not needed cosign env * config: add link to our Azure snp docs
2023-06-01 12:33:06 +02:00
// TODO(3u13r): use newer "cloud-provider-gcp" from https://github.com/kubernetes/cloud-provider-gcp when newer releases are available.
deps: update ghcr.io/edgelesssys/cloud-provider-gcp Docker tag to v26.4.0 (#2276) * deps: update ghcr.io/edgelesssys/cloud-provider-gcp Docker tag to v26.4.0 * deps: bump gcp ccm for 1.27 and 1.28 --------- Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-08-23 11:22:17 +02:00
CloudControllerManagerImageGCP: "ghcr.io/edgelesssys/cloud-provider-gcp:v26.4.0@sha256:dbe983cceabb3df98112b083d844229c85a1bbdfef2060c79f4cd49afe2a07f3", // renovate:container
versions: add OpenStack CCM image
2023-03-17 09:44:30 +01:00
// CloudControllerManagerImageOpenStack is the CCM image used on OpenStack.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
CloudControllerManagerImageOpenStack: "docker.io/k8scloudprovider/openstack-cloud-controller-manager:v1.26.3@sha256:65f0945ea9fc17e64812befbf3fc52b06c13df1c3407cb8022e8110a2fe08a4a", // renovate:container
AB#2077: add v1.24.3 support (#298) This is a squashed commit. * Necessary changes for 1.24 support. Trigger join-service build. * Update joinservice version. Image was created by manually triggered workflow, based on now squashed commit. microservice-demo can be deployed successfully. No errors during cluster setup.
2022-07-26 17:08:57 +02:00
// External service image. Depends on k8s version.
deps: add Kubernetes v1.27, remove Kubernetes v1.24 (#1669) Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-05-05 13:22:53 +02:00
// Check for new versions at https://github.com/kubernetes/autoscaler/releases.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
ClusterAutoscalerImage: "registry.k8s.io/autoscaling/cluster-autoscaler:v1.26.4@sha256:f771284ff54ecfedf40c7af70c5450600786c98989aeb69cdcf7e7bb7ac5a20d", // renovate:container
AB#2077: add v1.24.3 support (#298) This is a squashed commit. * Necessary changes for 1.24 support. Trigger join-service build. * Update joinservice version. Image was created by manually triggered workflow, based on now squashed commit. microservice-demo can be deployed successfully. No errors during cluster setup.
2022-07-26 17:08:57 +02:00
},
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
V1_27: {
ClusterVersion: "v1.27.4", // renovate:kubernetes-release
internal: move components into their own package
2023-01-06 12:04:36 +01:00
KubernetesComponents: components.Components{
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz", // renovate:cni-plugins-release
Hash: "sha256:754a71ed60a4bd08726c3af705a7d55ee3df03122b12e389fdba4bea35d7dd7e",
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
InstallPath: constants.CniPluginsDir,
Extract: true,
},
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.28.0/crictl-v1.28.0-linux-amd64.tar.gz", // renovate:crictl-release
Hash: "sha256:8dc78774f7cbeaf787994d386eec663f0a3cf24de1ea4893598096cb39ef2508",
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
InstallPath: constants.BinDir,
Extract: true,
},
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://storage.googleapis.com/kubernetes-release/release/v1.27.4/bin/linux/amd64/kubelet", // renovate:kubernetes-release
Hash: "sha256:385f65878dc8b48df0f2bd369535ff273390518b5ac2cc1a1684d65619324704",
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
InstallPath: constants.KubeletPath,
Extract: false,
},
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://storage.googleapis.com/kubernetes-release/release/v1.27.4/bin/linux/amd64/kubeadm", // renovate:kubernetes-release
Hash: "sha256:7be21d6fb3707fbbe8f0db0403db6234c8af773b941f931bf8248759ee988bcd",
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
InstallPath: constants.KubeadmPath,
Extract: false,
},
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://storage.googleapis.com/kubernetes-release/release/v1.27.4/bin/linux/amd64/kubectl", // renovate:kubernetes-release
Hash: "sha256:4685bfcf732260f72fce58379e812e091557ef1dfc1bc8084226c7891dd6028f",
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
InstallPath: constants.KubectlPath,
Extract: false,
},
kubernetes: add hashes to components
2022-11-10 15:20:10 +01:00
},
Add AWS CCM versions
2022-10-24 16:13:26 +02:00
// CloudControllerManagerImageAWS is the CCM image used on AWS.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
CloudControllerManagerImageAWS: "registry.k8s.io/provider-aws/cloud-controller-manager:v1.27.2@sha256:42be09a2b13b4e69b42905639d6b005ebe1ca490aabefad427256abf2cc892c7", // renovate:container
kubernetes: add v1.26, default to v1.25 Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-12-09 16:30:21 +01:00
// CloudControllerManagerImageAzure is the CCM image used on Azure.
// Check for newer versions at https://github.com/kubernetes-sigs/cloud-provider-azure/blob/master/README.md.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
CloudControllerManagerImageAzure: "mcr.microsoft.com/oss/kubernetes/azure-cloud-controller-manager:v1.27.7@sha256:e27c4ddc8b9efdac8509a2f681eaa98152309f6b2f08d14230b11c60a9b8b87f", // renovate:container
kubernetes: add v1.26, default to v1.25 Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-12-09 16:30:21 +01:00
// CloudNodeManagerImageAzure is the cloud-node-manager image used on Azure.
// Check for newer versions at https://github.com/kubernetes-sigs/cloud-provider-azure/blob/master/README.md.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
CloudNodeManagerImageAzure: "mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.27.7@sha256:998453989b03ac6c24e53aabbf271fa181e054b3a061fe6caa565186ae79bd0c", // renovate:container
versions: add OpenStack CCM image
2023-03-17 09:44:30 +01:00
// CloudControllerManagerImageGCP is the CCM image used on GCP.
todo responsibilities and cleanup (#1837) * chore: add TODO responsibilities * chore: remove not needed TODOs * chore: remove outdated migrations * chore: remove resolved goleak exception * chore: remove not needed cosign env * config: add link to our Azure snp docs
2023-06-01 12:33:06 +02:00
// TODO(3u13r): use newer "cloud-provider-gcp" from https://github.com/kubernetes/cloud-provider-gcp when newer releases are available.
deps: update ghcr.io/edgelesssys/cloud-provider-gcp Docker tag to v26.4.0 (#2276) * deps: update ghcr.io/edgelesssys/cloud-provider-gcp Docker tag to v26.4.0 * deps: bump gcp ccm for 1.27 and 1.28 --------- Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-08-23 11:22:17 +02:00
CloudControllerManagerImageGCP: "ghcr.io/edgelesssys/cloud-provider-gcp:v27.1.6@sha256:b097b4e5382ea1987db5996a9eaffb94fa224639b3464876f0b1b17f64509ac4", // renovate:container
versions: add OpenStack CCM image
2023-03-17 09:44:30 +01:00
// CloudControllerManagerImageOpenStack is the CCM image used on OpenStack.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
CloudControllerManagerImageOpenStack: "docker.io/k8scloudprovider/openstack-cloud-controller-manager:v1.26.3@sha256:65f0945ea9fc17e64812befbf3fc52b06c13df1c3407cb8022e8110a2fe08a4a", // renovate:container
kubernetes: add v1.26, default to v1.25 Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-12-09 16:30:21 +01:00
// External service image. Depends on k8s version.
// Check for new versions at https://github.com/kubernetes/autoscaler/releases.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
ClusterAutoscalerImage: "registry.k8s.io/autoscaling/cluster-autoscaler:v1.27.3@sha256:0e1ab1bfeb1beaa82f59356ef36364503df22aeb8f8d0d7383bac449b4e808fb", // renovate:container
kubernetes: add v1.26, default to v1.25 Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-12-09 16:30:21 +01:00
},
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
V1_28: {
ClusterVersion: "v1.28.0", // renovate:kubernetes-release
internal: move components into their own package
2023-01-06 12:04:36 +01:00
KubernetesComponents: components.Components{
kubernetes: add v1.26, default to v1.25 Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-12-09 16:30:21 +01:00
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz", // renovate:cni-plugins-release
Hash: "sha256:754a71ed60a4bd08726c3af705a7d55ee3df03122b12e389fdba4bea35d7dd7e",
kubernetes: add v1.26, default to v1.25 Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-12-09 16:30:21 +01:00
InstallPath: constants.CniPluginsDir,
Extract: true,
},
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.28.0/crictl-v1.28.0-linux-amd64.tar.gz", // renovate:crictl-release
Hash: "sha256:8dc78774f7cbeaf787994d386eec663f0a3cf24de1ea4893598096cb39ef2508",
kubernetes: add v1.26, default to v1.25 Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-12-09 16:30:21 +01:00
InstallPath: constants.BinDir,
Extract: true,
},
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://storage.googleapis.com/kubernetes-release/release/v1.28.0/bin/linux/amd64/kubelet", // renovate:kubernetes-release
Hash: "sha256:bfb6b977100963f2879a33e5fbaa59a5276ba829a957a6819c936e9c1465f981",
kubernetes: add v1.26, default to v1.25 Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-12-09 16:30:21 +01:00
InstallPath: constants.KubeletPath,
Extract: false,
},
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://storage.googleapis.com/kubernetes-release/release/v1.28.0/bin/linux/amd64/kubeadm", // renovate:kubernetes-release
Hash: "sha256:12ea68bfef0377ccedc1a7c98a05ea76907decbcf1e1ec858a60a7b9b73211bb",
kubernetes: add v1.26, default to v1.25 Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-12-09 16:30:21 +01:00
InstallPath: constants.KubeadmPath,
Extract: false,
},
{
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
URL: "https://storage.googleapis.com/kubernetes-release/release/v1.28.0/bin/linux/amd64/kubectl", // renovate:kubernetes-release
Hash: "sha256:4717660fd1466ec72d59000bb1d9f5cdc91fac31d491043ca62b34398e0799ce",
kubernetes: add v1.26, default to v1.25 Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2022-12-09 16:30:21 +01:00
InstallPath: constants.KubectlPath,
Extract: false,
},
},
// CloudControllerManagerImageAWS is the CCM image used on AWS.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
CloudControllerManagerImageAWS: "registry.k8s.io/provider-aws/cloud-controller-manager:v1.28.0@sha256:47eb1c1e6a3bd6d0fb44ac4992885b6218f1448ea339de778d8b703df463c06f", // renovate:container
Kubernetes 1.25 preview Signed-off-by: Malte Poll <mp@edgeless.systems>
2022-09-02 14:05:44 +02:00
// CloudControllerManagerImageAzure is the CCM image used on Azure.
Bump k8s versions
2022-10-06 11:18:23 +02:00
// Check for newer versions at https://github.com/kubernetes-sigs/cloud-provider-azure/blob/master/README.md.
deps: update K8s constrained Azure versions (#2200) Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-08-10 19:20:56 +02:00
CloudControllerManagerImageAzure: "mcr.microsoft.com/oss/kubernetes/azure-cloud-controller-manager:v1.27.7@sha256:e27c4ddc8b9efdac8509a2f681eaa98152309f6b2f08d14230b11c60a9b8b87f", // renovate:container
Kubernetes 1.25 preview Signed-off-by: Malte Poll <mp@edgeless.systems>
2022-09-02 14:05:44 +02:00
// CloudNodeManagerImageAzure is the cloud-node-manager image used on Azure.
Bump k8s versions
2022-10-06 11:18:23 +02:00
// Check for newer versions at https://github.com/kubernetes-sigs/cloud-provider-azure/blob/master/README.md.
deps: update K8s constrained Azure versions (#2200) Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-08-10 19:20:56 +02:00
CloudNodeManagerImageAzure: "mcr.microsoft.com/oss/kubernetes/azure-cloud-node-manager:v1.27.7@sha256:998453989b03ac6c24e53aabbf271fa181e054b3a061fe6caa565186ae79bd0c", // renovate:container
versions: add OpenStack CCM image
2023-03-17 09:44:30 +01:00
// CloudControllerManagerImageGCP is the CCM image used on GCP.
todo responsibilities and cleanup (#1837) * chore: add TODO responsibilities * chore: remove not needed TODOs * chore: remove outdated migrations * chore: remove resolved goleak exception * chore: remove not needed cosign env * config: add link to our Azure snp docs
2023-06-01 12:33:06 +02:00
// TODO(3u13r): use newer "cloud-provider-gcp" from https://github.com/kubernetes/cloud-provider-gcp when newer releases are available.
deps: update ghcr.io/edgelesssys/cloud-provider-gcp Docker tag to v26.4.0 (#2276) * deps: update ghcr.io/edgelesssys/cloud-provider-gcp Docker tag to v26.4.0 * deps: bump gcp ccm for 1.27 and 1.28 --------- Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-08-23 11:22:17 +02:00
CloudControllerManagerImageGCP: "ghcr.io/edgelesssys/cloud-provider-gcp:v27.1.6@sha256:b097b4e5382ea1987db5996a9eaffb94fa224639b3464876f0b1b17f64509ac4", // renovate:container
versions: add OpenStack CCM image
2023-03-17 09:44:30 +01:00
// CloudControllerManagerImageOpenStack is the CCM image used on OpenStack.
deps: support Kubernetes 1.28 (#2242)
2023-08-18 11:13:24 +02:00
CloudControllerManagerImageOpenStack: "docker.io/k8scloudprovider/openstack-cloud-controller-manager:v1.26.3@sha256:65f0945ea9fc17e64812befbf3fc52b06c13df1c3407cb8022e8110a2fe08a4a", // renovate:container
Kubernetes 1.25 preview Signed-off-by: Malte Poll <mp@edgeless.systems>
2022-09-02 14:05:44 +02:00
// External service image. Depends on k8s version.
Bump k8s versions
2022-10-06 11:18:23 +02:00
// Check for new versions at https://github.com/kubernetes/autoscaler/releases.
deps: update K8s constrained GCP versions (#2194) Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-08-10 19:56:59 +02:00
ClusterAutoscalerImage: "registry.k8s.io/autoscaling/cluster-autoscaler:v1.27.3@sha256:0e1ab1bfeb1beaa82f59356ef36364503df22aeb8f8d0d7383bac449b4e808fb", // renovate:container
Kubernetes 1.25 preview Signed-off-by: Malte Poll <mp@edgeless.systems>
2022-09-02 14:05:44 +02:00
},
AB#2076: version specific images (#288) KubernetesVersion sent by the init command now controls all downloaded binaries, if they depend on the k8s version. * Move all download links into /internal/versions. * Unify files in /internal/versions package * Move image download links into VersionConfigs and thus make them dependant on the k8s version, where the image version is specific to the k8s version. * Don't specify patch version in k8sVersion
2022-07-21 14:41:07 +02:00
}
// KubernetesVersion bundles download URLs to all version-releated binaries necessary for installing/deploying a particular Kubernetes version.
type KubernetesVersion struct {
versions: add OpenStack CCM image
2023-03-17 09:44:30 +01:00
ClusterVersion string
KubernetesComponents components.Components
CloudControllerManagerImageAWS string // k8s version dependency.
CloudControllerManagerImageAzure string // k8s version dependency.
CloudControllerManagerImageGCP string // Using self-built image until resolved: https://github.com/kubernetes/cloud-provider-gcp/issues/289
CloudControllerManagerImageOpenStack string // k8s version dependency.
CloudNodeManagerImageAzure string // k8s version dependency. Same version as above.
ClusterAutoscalerImage string // Matches k8s versioning scheme.
kubernetes: verify Kubernetes components
2022-11-14 19:09:49 +01:00
}
Pin container image hashes
2022-10-06 12:58:56 +02:00
// versionFromDockerImage returns the version tag from the image name, e.g. "v1.22.2" from "foocr.io/org/repo:v1.22.2@sha256:3009fj0...".
func versionFromDockerImage(imageName string) string {
beforeAt, _, _ := strings.Cut(imageName, "@")
_, version, ok := strings.Cut(beforeAt, ":")
if !ok {
panic(fmt.Errorf("failed to extract version from image name, no ':' found in %s", imageName))
}
return version
}
Reference in New Issue Copy Permalink