Ryan Richard
5beba016ff
fix typo in previous commit
2026-03-06 08:53:56 -08:00
Ryan Richard
cd1b52231f
avoid force pushing to pinny/bump-deps when there are no new changes
2026-03-06 08:49:07 -08:00
Ryan Richard
51e724b6d8
move trivy image-scan exclusion to the right place
2026-03-03 10:14:01 -08:00
Ryan Richard
55db644832
also add trivy image-scan exclusion for CVE-2026-24051
2026-03-03 10:10:39 -08:00
Ryan Richard
6997d60c79
extend exclusion for CVE-2026-24051
2026-03-03 10:03:26 -08:00
Ryan Richard
a62391c12b
upgrade CI to use Go 1.26.0
2026-02-11 12:24:14 -08:00
Ryan Richard
370487be59
ignore CVE from indirect dep which does not impact us
2026-02-04 12:29:15 -08:00
Ryan Richard
b2c5a8f123
update version used in codegen container images
2026-01-27 11:27:28 -08:00
Ryan Richard
3d740e90c1
use slightly larger GKE nodes due to Insufficient cpu errors
...
Error observed during deploying the Pinniped Supervisor was...
Pending: Unschedulable, message: 0/3 nodes are available: 3 Insufficient
cpu. no new claims to deallocate, preemption: 0/3 nodes are available:
3 No preemption victims found for incoming pod.
2026-01-21 14:10:26 -08:00
Ryan Richard
801591fed0
update copyrights on changed files when creating auto dependency bump PR
2026-01-21 11:41:35 -08:00
Ryan Richard
47bcaefa65
also check for new major versions of Go deps in CI auto dep bump PRs
2026-01-21 10:51:44 -08:00
Ryan Richard
aef74185c3
upgrade CI from Go 1.25.5 to 1.25.6
2026-01-21 10:28:36 -08:00
Ryan Richard
902b5e575d
Revert "skip race detector for impersonator package for now"
...
This reverts commit e4d2c8ba07
2026-01-06 13:29:24 -08:00
Ryan Richard
cf2b3d7113
comment out AKS and EKS pipeline jobs
2026-01-06 13:17:48 -08:00
Ryan Richard
06f0728479
move manually triggered jobs earlier in main pipeline
...
So we can manually trigger them to run in parallel with other
jobs, so we don't have to wait for those other jobs to pass because
they can be flaky sometimes.
2025-12-23 14:18:35 -08:00
Ryan Richard
e551207055
update pipelines for kube 1.35
2025-12-22 10:54:43 -08:00
Ryan Richard
35f8c5876d
skip client-side validation of manifest when k8s server < 1.27
...
After upgrading libs to k8s 1.35, this stopped working on very old
versions of Kube. Not really a problem, because version 1.26 and below
are all over 3 years old. You can still install Pinniped on these old
version if you skip kubectl's client-side validation.
2025-12-19 13:15:53 -08:00
Ryan Richard
3640096b6c
bump k8s codegen versions and build 1.35 codegen container image
2025-12-18 12:41:01 -08:00
Ryan Richard
4f2481205e
update CI to use Go 1.25.5
2025-12-05 10:29:12 -08:00
dependabot[bot]
dbb97f04b5
Bump golang in /pipelines/shared-helpers/test-binaries-image
...
Bumps golang from 1.25.3-bookworm to 1.25.4-bookworm.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.25.4-bookworm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-06 01:12:53 +00:00
Joshua Casey
f333b15a1d
Use only the gcp-instance-admin service account
2025-10-17 07:45:08 -05:00
Joshua Casey
92a1e66b25
Bump test-binaries-image dockerfiles to golang:1.25.3-bookworm
2025-10-15 14:08:17 -05:00
Joshua Casey
6fa8895357
Add api key and username for nancy commands
2025-10-14 11:54:33 -05:00
Joshua Casey
be15eaf023
Run integration tests on latest k8s versions
2025-10-14 09:33:00 -05:00
Joshua Casey
21acb9e10a
Bump go to 1.25.3
2025-10-14 09:28:03 -05:00
Joshua Casey
049653edb3
Add job to build k8s 0.34.0 codegen image
2025-09-09 09:58:57 -05:00
Joshua Casey
9ffdf3f568
Bump go to v1.25.1
2025-09-09 09:30:05 -05:00
Ryan Richard
8ad9585d64
update codegen versions in dockerfile pipeline
2025-08-28 10:47:32 -07:00
Ryan Richard
b65f53379a
chmod the cache directory using the correct path
2025-08-21 12:29:12 -07:00
Ryan Richard
0c6f80c3db
chmod the cache directory in task which runs integration tests
2025-08-21 12:18:53 -07:00
Ryan Richard
4d23e8d45a
enhance confirm-built-with-fips for kube-vert-agent for Go 1.25
2025-08-18 12:36:59 -07:00
Ryan Richard
d160e9a23a
upgrade CI from Go 1.24.6 to 1.25.0
2025-08-18 12:04:46 -07:00
dependabot[bot]
2554c7de6c
Bump golang in /pipelines/shared-helpers/test-binaries-image
...
Bumps golang from 1.24.6-bullseye to 1.25rc3-bullseye.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.25rc3-bullseye
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-14 02:03:43 +00:00
Joshua Casey
69f9e9b35c
Bump go to 1.24.6
2025-08-13 08:59:08 -05:00
dependabot[bot]
e97a4e38d1
Bump golang in /pipelines/shared-helpers/test-binaries-image
...
Bumps golang from 1.24.5-bullseye to 1.24.6-bullseye.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.24.6-bullseye
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-07 03:32:18 +00:00
Ryan Richard
c1fcb8a0fc
more towards update version/docs after release by creating a PR
2025-08-04 14:15:38 -07:00
Ryan Richard
3ea7403b6f
update version and docs on website after release by creating a PR
...
instead of doing a direct commit to the main branch
2025-08-04 14:04:12 -07:00
Ryan Richard
901b77dd4f
fix username and password for jobs that push to git via https
2025-08-04 13:44:26 -07:00
Ryan Richard
5899ac8066
update homebrew formula task can use golang image instead of debian
2025-08-04 13:12:18 -07:00
Ryan Richard
0981780d6a
account for move of repo from vmware-tanzu to vmware on GitHub
2025-08-02 15:01:00 -07:00
Ryan Richard
f09c89dd43
use golang image in format-release task
2025-08-02 14:26:08 -07:00
Ryan Richard
22181a6361
use openssl instead of python to generate eks cluster names
...
because python is not part of Amazon's container image anymore
2025-08-02 12:05:34 -07:00
Ryan Richard
bd0bdb49e2
use smaller/cheaper nodes for regional GKE clusters
2025-08-02 09:22:05 -07:00
Ryan Richard
7dbf91d5d2
Revert "try using a bigger node machine type for tmp GKE clusters"
...
This reverts commit 16dd97aff4
2025-08-02 09:11:08 -07:00
Ryan Richard
07b4fb8dcc
try using regional GKE clusters instead of zonal
2025-08-02 08:43:48 -07:00
Ryan Richard
16dd97aff4
try using a bigger node machine type for tmp GKE clusters
2025-08-01 17:35:56 -07:00
Ryan Richard
7dd407d1d2
update kube and crd-ref-docs versions for codegen images
2025-08-01 10:23:08 -07:00
Ryan Richard
58b7613824
use okta ldap in PR pipeline
2025-07-31 15:12:37 -07:00
Ryan Richard
f55990195f
auth before waiting for running GKE operations to finish
2025-07-31 12:07:05 -07:00
Ryan Richard
a457259302
wait for running GKE operations to finish before deleting a cluster
2025-07-31 11:20:21 -07:00
