Skip to content

[pull] master from kubernetes-sigs:master - #313

Open
pull[bot] wants to merge 3961 commits into
kubestone:masterfrom
kubernetes-sigs:master
Open

pull[bot] wants to merge 3961 commits into
kubestone:masterfrom
kubernetes-sigs:master

Conversation

@pull

@pull pull Bot commented Apr 27, 2021 •

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull Bot added the ⤵️ pull label Apr 27, 2021
kubernetes-prow Bot and others added 29 commits July 23, 2026 10:43
…ns/github/codeql-action/init-4.37.3

🌱 Bump github/codeql-action/init from 4.37.2 to 4.37.3
…ns/actions/checkout-7.0.1

🌱 Bump actions/checkout from 7.0.0 to 7.0.1
…ns/github/codeql-action/analyze-4.37.3

🌱 Bump github/codeql-action/analyze from 4.37.2 to 4.37.3
🌱 refactor(helm/v2-alpha): centralize label helpers in labels.go
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.3 to 2.4.4.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@4eaacf0...2d11466)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@6599ee8...6fc4b00)

---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.36.2 to 0.36.3.
- [Commits](kubernetes/apimachinery@v0.36.2...v0.36.3)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…ns/ossf/scorecard-action-2.4.4

🌱 Bump ossf/scorecard-action from 2.4.3 to 2.4.4
…ns/zizmorcore/zizmor-action-0.6.1

🌱  Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1
…8s.io/apimachinery-0.36.3

🌱  Bump k8s.io/apimachinery from 0.36.2 to 0.36.3
Follow-up to #5766: external path validation accepted a bare domain
(e.g. "example.com") because strings.Cut's found result was ignored,
letting invalid paths persist and fail later at build time. Now require
a package sub-path, add resource and plugin-layer tests, and restore the
[Optional] prefix on the --defaulting-path/--validation-path flag help.
…ects the kustomize output (true when a ServiceMonitor is present) instead of always defaulting to false.
✨ (go/v4, API): reject bare-domain external Resource.Path
🐛 (helm/v2-alpha): `prometheus.enabled` in the generated chart now reflects the kustomize output (true when a ServiceMonitor is present) instead of always defaulting to false.
…e-supplied

Signed-off-by: tanayarun <ankulwartanay@gmail.com>
🌱 (go/v4): Assert domain is preserved when external flags are not re-supplied
Replace shell-based cleanup with filepath.WalkDir and skip preserve
entries (.git, PROJECT). Cover cleanup scenarios with Ginkgo/Omega BDD
specs in the existing package suite.

Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca>
🐛 (CLI): clean alpha generate output dir without shell injection
Bumps [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml) from 3.0.4 to 3.0.5.
- [Commits](yaml/go-yaml@v3.0.4...v3.0.5)

---
updated-dependencies:
- dependency-name: go.yaml.in/yaml/v3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…o.yaml.in/yaml/v3-3.0.5

🌱  Bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5
🌱 (go/v4): revert #5887 scaffold change before release and document the Podman limitation. Keep CI check and enhance it.
…pi-config

🐛 fix(golang/v4): reuse external API config when creating webhooks
…ocs about registry config with Podman and others containers tools.
✨ (helm/v2-alpha): Allow `manager.args` values to be templated
✨ (go/v4): Allow overriding the manager build base image via BASE_IMAGE build argument
--group certmanager builds the API group certmanager.io, and with
--external-api-domain=cert-manager.io it builds certmanager.cert-manager.io.

Neither is cert-manager's group, so the RBAC markers shown under the examples
were never what they produce. Use --group cert-manager --external-api-domain=io,
as test/testdata/generate.sh already does.
kubernetes-prow Bot and others added 30 commits October 14, 2026 10:25
…ns/github/codeql-action/upload-sarif-4.38.3

🌱 Bump github/codeql-action/upload-sarif from 4.38.2 to 4.38.3
…ns/github/codeql-action/analyze-4.38.3

🌱 Bump github/codeql-action/analyze from 4.38.2 to 4.38.3
…ns/ossf/scorecard-action-2.5.0

🌱 Bump ossf/scorecard-action from 2.4.4 to 2.5.0
…olang.org/x/mod-0.42.0

🌱 Bump golang.org/x/mod from 0.41.0 to 0.42.0
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.33.0 to 2.33.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.33.0...v2.33.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.42.0 to 0.43.0.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: golang.org/x/text
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…ithub.com/onsi/ginkgo/v2-2.33.1

🌱 Bump github.com/onsi/ginkgo/v2 from 2.33.0 to 2.33.1
…4292

📖 docs: add guide for webhook self-signed certs without cert-manager
…ete the flags of the project plugins (#6070)

* fix(cli): report a bad plugins flag on command groups and complete the flags of the project plugins

The create and alpha command groups could not run, so Cobra skipped the root
check and printed their help with exit code 0 even when the plugins flag was
malformed. They now run and print their help, so the malformed flag is
reported. They still do not use the project configuration.

A completion request never read the project configuration, so TAB offered the
flags of the default plugin chain instead of the plugins the project layout
names. Completion now reads the configuration for the commands the plugin
chain builds (init, edit, create api and create webhook). A configuration that
cannot be used still falls back to the defaults, and completing other commands,
such as alpha generate, still leaves PROJECT unread.

* fix(cli): mark command groups on the command and cover them in every project state

A command group is now marked with an annotation by asCommandGroup, which also
sets the function that prints its help, and checkCommandLine reads that
annotation. The list of group names in root.go is gone, so a new group cannot
be added in one place and missed in the other.

New specs check that create and alpha print their help with no PROJECT and
with each PROJECT that cannot be used, that a bad plugins value on them is
reported in every project state without mentioning the configuration, that
help asked for next to the bad value is still printed, and that completing the
flags of create api falls back to the default plugins without opening a
PROJECT that is not a regular file.
…ress and allow turning it off (#6072)

* feat(helm/v2-alpha): expose the manager's health probe bind address

The chart exposed the health probe port as manager.healthProbe.port and
wrote the rest of the address from the project's manifest as literal text,
so the host could not be changed from the chart, and a project whose
manager has no --health-probe-bind-address still got its probes moved by
the port value.
📖 CronJob tutorial: ignore NotFound when deleting successful Jobs
…olang.org/x/text-0.43.0

🌱 Bump golang.org/x/text from 0.42.0 to 0.43.0
Signed-off-by: adarshkumaryadav <adarsh.kumar.yadav1@ibm.com>
🐛 fix(go/v4): resolve create api target when several resources share a GVK
✨ Add govulncheck workflow and make target
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.51.0 to 0.52.0.
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.51.0...v0.52.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…olang.org/x/tools-0.52.0

🌱  bump golang.org/x/tools from 0.51.0 to 0.52.0
The helper script and Makefile target from the "Webhook with
self-signed certificates" guide now live in files under
docs/book/src/reference/webhook-self-signed-cert/ and are pulled into
the page with an mdBook include, so the code that is tested is the
code that is published.

hack/docs/test_webhook_certs.sh runs the script against a stub kubectl
and checks that tls.crt verifies against the generated CA, carries both
service SANs, and that every caBundle patch carries that CA. make
test-book runs it, and so does a webhook-certs job in the E2E Book
Samples workflow, which now also triggers on these files.

It also applies the review suggestions on the original pull request:
encode the CA bundle with base64 piped through tr rather than the GNU
-w option, patch caBundle with "add" because the scaffolded manifests
do not set it, and use sentence case and no contractions in the page
and its SUMMARY entry.
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 7.2.3 to 7.3.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@f06c13b...a4f02ab)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…ns/goreleaser/goreleaser-action-7.3.0

🌱 bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0
📖 docs: test and include the self-signed webhook certificate script
Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.38.3 to 4.39.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@24c5418...6f2ac81)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.38.3 to 4.39.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@24c5418...6f2ac81)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.38.3 to 4.39.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@24c5418...6f2ac81)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(go/v4) Upgrade controller-tools from v0.22.0 to v0.23.0
…ns/github/codeql-action/analyze-4.39.0

🌱 bump github/codeql-action/analyze from 4.38.3 to 4.39.0
…ns/github/codeql-action/upload-sarif-4.39.0

🌱 bump github/codeql-action/upload-sarif from 4.38.3 to 4.39.0
…ns/github/codeql-action/init-4.39.0

🌱 bump github/codeql-action/init from 4.38.3 to 4.39.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.