Merge branch 'kyverno:main' into main

nirmata · Apr 30, 2024 · 8510941 · 8510941
2 parents 4c0895c + 77f1f97
commit 8510941
Show file tree

Hide file tree

Showing 255 changed files with 65,541 additions and 74,212 deletions.
diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:22.04@sha256:2b7412e6465c3c7fc5bb21d3e6f1917c167358449fecac8176c6e496e5c1f05f
+FROM ubuntu:24.04@sha256:562456a05a0dbd62a671c1854868862a4687bf979a96d48ae8e766642cd911e8
 
 RUN apt-get update && apt-get install -y sudo git curl apt-transport-https ca-certificates gnupg-agent software-properties-common
 ARG USERNAME=root

diff --git a/.github/ISSUE_TEMPLATE/bug-cli.yaml b/.github/ISSUE_TEMPLATE/bug-cli.yaml
@@ -14,12 +14,6 @@ body:
       description: >-
         What version of the Kyverno CLI are you running (`kyverno version`)?
       options:
-        - 1.7.0
-        - 1.7.1
-        - 1.7.2
-        - 1.7.3
-        - 1.7.4
-        - 1.7.5
         - 1.8.0
         - 1.8.1
         - 1.8.2
@@ -44,6 +38,7 @@ body:
         - 1.11.2
         - 1.11.3
         - 1.11.4
+        - 1.12.0
     validations:
       required: true
   - type: textarea

diff --git a/.github/ISSUE_TEMPLATE/bug-other.yaml b/.github/ISSUE_TEMPLATE/bug-other.yaml
@@ -13,12 +13,6 @@ body:
       label: Kyverno Version
       description: What version of Kyverno are you running?
       options:
-        - 1.7.0
-        - 1.7.1
-        - 1.7.2
-        - 1.7.3
-        - 1.7.4
-        - 1.7.5
         - 1.8.0
         - 1.8.1
         - 1.8.2
@@ -43,6 +37,7 @@ body:
         - 1.11.2
         - 1.11.3
         - 1.11.4
+        - 1.12.0
     validations:
       required: true
   - type: textarea

diff --git a/.github/ISSUE_TEMPLATE/bug-webhook.yaml b/.github/ISSUE_TEMPLATE/bug-webhook.yaml
@@ -13,12 +13,6 @@ body:
       label: Kyverno Version
       description: What version of Kyverno are you running?
       options:
-        - 1.7.0
-        - 1.7.1
-        - 1.7.2
-        - 1.7.3
-        - 1.7.4
-        - 1.7.5
         - 1.8.0
         - 1.8.1
         - 1.8.2
@@ -43,6 +37,7 @@ body:
         - 1.11.2
         - 1.11.3
         - 1.11.4
+        - 1.12.0
     validations:
       required: true
   - type: dropdown
@@ -51,7 +46,6 @@ body:
       label: Kubernetes Version
       description: What version of Kubernetes are you running?
       options:
-        - 1.20.x
         - 1.21.x
         - 1.22.x
         - 1.23.x
@@ -60,6 +54,7 @@ body:
         - 1.26.x
         - 1.27.x
         - 1.28.x
+        - 1.29.x
     validations:
       required: true
   - type: dropdown

diff --git a/.github/actions/setup-build-env/action.yaml b/.github/actions/setup-build-env/action.yaml
@@ -28,7 +28,7 @@ runs:
         git fetch --prune --unshallow
     - uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
       with:
-        go-version: ~1.21.3
+        go-version: ~1.22.2
     - shell: bash
       run: |
         go mod download

diff --git a/.github/workflows/check-actions.yaml b/.github/workflows/check-actions.yaml
@@ -18,9 +18,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
       - name: Ensure SHA pinned actions
-        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ba37328d4ea95eaf8b3bd6c6cef308f709a5f2ec # v3.0.3
+        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@19ebcb0babbd282ae1822a0b9c28f3f1f25cea45 # v3.0.4
         with:
           # slsa-github-generator requires using a semver tag for reusable workflows. 
           # See: https://github.com/slsa-framework/slsa-github-generator#referencing-slsa-builders-and-generators

diff --git a/.github/workflows/check-milestone.yaml b/.github/workflows/check-milestone.yaml
@@ -0,0 +1,37 @@
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+
+name: check-milestone
+
+permissions: {}
+
+on:
+  pull_request:
+    branches:
+      - 'main'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  check-milestone:
+    runs-on: ubuntu-latest
+    if: ${{ github.actor != 'dependabot[bot]' }}  # dependabot prs do not have to be in milestone
+    steps:
+      - name: Check milestone
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        with:
+          script: |
+            const { data } = await github.request("GET /repos/{owner}/{repo}/pulls/{pr}", {
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pr: context.payload.pull_request.number
+            });
+            if (data.milestone) {
+              core.info(`This pull request has a milestone set: ${data.milestone.title}`);
+            } else {
+              core.setFailed(`A milestone need to be set on this pull request.`);
+            }
+      - name: Debug failure
+        if: failure()
+        run: 'echo "GitHub Actor: ${{ github.actor }}"'
diff --git a/.github/workflows/cli.yaml b/.github/workflows/cli.yaml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
       - name: Setup caches
         uses: ./.github/actions/setup-caches
         timeout-minutes: 5
@@ -56,7 +56,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
       - name: Setup caches
         uses: ./.github/actions/setup-caches
         timeout-minutes: 5

diff --git a/.github/workflows/codecov.yaml b/.github/workflows/codecov.yaml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
     - name: Setup caches
       uses: ./.github/actions/setup-caches
       timeout-minutes: 5
@@ -50,13 +50,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
     - name: Download coverage
       uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
       with:
         name: coverage.out
     - name: Upload Report to Codecov
-      uses: codecov/codecov-action@54bcd8715eee62d40e33596ef5e8f0f48dbbccab # v4.1.0
+      uses: codecov/codecov-action@84508663e988701840491b86de86b666e8a86bed # v4.3.0
       with:
         files: ./coverage.out
         fail_ci_if_error: true