Skip to content

v0.11.0
Compare
Choose a tag to compare
@puerco puerco released this 13 Sep 22:16
· 2695 commits to master since this release
v0.11.0
5f2f2cc
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Changes by Kind

API Change

  • Removed --dependencies flag from krel release-notes, because they will be added during release cut. (#2193, @saschagrunert) [SIG Release]

Feature

  • Cosign: Add a public key for testing
    Preliminary steps to sign/verify artifacts via cosign.
    The process or needs will evolve over time, so we've opted to generate
    a "test" key to start. (#2226, @justaugustus) [SIG Release]
  • Debian-base: Build bullseye-v1.0.0 images (#2209, @justaugustus) [SIG Release]
  • Debian-iptables: Build buster-v1.6.7 image (#2237, @wespanther) [SIG Release]
  • K8s-cloud-builder/k8s-ci-builder: Build image using go1.15.15 (#2200, @cpanato) [SIG Release]
  • K8s-cloud-builder: Update to v1.23.0-go1.17-buster.0 (#2222, @justaugustus) [SIG Release]
  • Kpromo: Initial image building configuration (#2231, @justaugustus) [SIG Release]
  • Kube-cross: Drop non-legacy go1.15 variant

    • kube-cross: Remove etcd from non-legacy builds

    • images: Enforce Debian codenames for Golang-based images
      When there are multiple image builds in flight both upstream and downstream,
      we can run into situations where a new Debian version becomes the default for
      image builds, which can have unintended side-effects across release branches.

      Here we use explicit pairings of Golang/Debian versions to retrieve images

      Example: FROM golang:1.16.7-buster

    • kube-cross: Use OS codenames to construct clearer versions for images

      Uses the following nomenclature:
      v<kubernetes-major>-go<go-major>-<os-codename>.<revision>

      Example: v1.23.0-go1.17-buster.0

    • [go1.17] Build images for go1.17

      • kube-cross:v1.23.0-go1.17-buster.0
      • go-runner:v2.3.1-go1.17-buster.0 (#2211, @justaugustus) [SIG Release]
  • SPDX: Fixed a bug where the VARIANT_OF relationship in multiarch container images was expressed backwards
    • New -l | --license flag to define the project's license from the command line (#2242, @puerco) [SIG Release]
  • Update cosign to v1.1.0 (#2229, @justaugustus) [SIG Release]
  • [go1.17] Default to go1.17
    • dependencies.yaml: Default to go1.17 for image builds
    • vulndash: Build v0.4.3-8 image
    • dependencies.yaml: Add entry for go.mod
    • packages/deb: Update module to go1.17
    • images/build/go-runner: Update module to go1.17
    • go.mod: Update module to go1.17 (#2223, @justaugustus) [SIG Release]
  • [go] Build go1.17.1 and go1.16.8 images (#2239, @cpanato) [SIG Release]

Design

  • Migrate gh2gcs to the promotion tooling repo
    • Migrate pkg/{git,github,release/regex} to sigs.k8s.io/release-sdk (#2245, @justaugustus) [SIG Release]

Documentation

Bug or Regression

  • Bom: fix panic when LICENSE file is not found (#2213, @hectorj2f) [SIG Release]
  • Fixed a bug in the SPDX package where layer references in single image manifests were not correctly formed (#2206, @puerco) [SIG Release]
  • When cutting the packages, we no longer upload .deb files to scratch bucket (#2216, @puerco) [SIG Release]

Other (Cleanup or Flake)

  • Images: Update gcb-docker-cloud image to v20210722-085d930 (#2230, @justaugustus) [SIG Release]
  • Migrate pkg/object and pkg/gcp/gcp.go to sigs.k8s.io/release-sdk (#2232, @justaugustus) [SIG Release]
  • When generating the packages for a release, we no longer update the /debian/latest marker in k8s-release-dev (#2217, @puerco) [SIG Release]

Dependencies

Added

  • cloud.google.com/go/containeranalysis: v0.1.0
  • cloud.google.com/go/errorreporting: v0.1.0
  • cloud.google.com/go/grafeas: 71387f0
  • github.com/google/go-github/v37: v37.0.0
  • sigs.k8s.io/release-sdk: v0.2.0

Changed

  • cloud.google.com/go/logging: v1.1.2 → v1.4.2
  • cloud.google.com/go/storage: v1.12.0 → v1.16.1
  • cloud.google.com/go: v0.90.0 → v0.93.3
  • github.com/cenkalti/backoff/v4: v4.1.0 → v4.1.1
  • github.com/go-logr/logr: v0.4.0 → v0.2.0
  • github.com/google/pprof: 4bb14d4 → f964ff6
  • github.com/googleapis/gax-go/v2: v2.0.5 → v2.1.0
  • github.com/kevinburke/ssh_config: 4977a11 → v1.1.0
  • github.com/mattn/go-isatty: v0.0.13 → v0.0.14
  • github.com/sergi/go-diff: v1.1.0 → v1.2.0
  • github.com/shirou/gopsutil/v3: v3.21.7 → v3.21.8
  • github.com/tklauser/go-sysconf: v0.3.7 → v0.3.9
  • github.com/tklauser/numcpus: v0.2.3 → v0.3.0
  • github.com/yuin/goldmark: v1.4.0 → v1.4.1
  • golang.org/x/crypto: 83a5a9b → 5ff15b2
  • golang.org/x/mod: v0.4.2 → v0.5.0
  • golang.org/x/oauth2: a41e5a7 → 2bc19b1
  • golang.org/x/sys: 0f9fa26 → 63515b4
  • google.golang.org/api: v0.51.0 → v0.56.0
  • google.golang.org/genproto: 7823e68 → 66f60bf
  • google.golang.org/grpc: v1.39.0 → v1.40.0
  • k8s.io/gengo: 83324d8 → 3a45101
  • k8s.io/klog/v2: v2.9.0 → v2.4.0
  • sigs.k8s.io/k8s-container-image-promoter: v1.337.0 → v1.339.0

Removed

  • github.com/joefitzgerald/rainbow-reporter: v0.1.0
  • k8s.io/code-generator: v0.19.7
Assets 2
Loading