Skip to content

chore(deps): update dependency cri-o/cri-o to v1.28.0 - autoclosed

Yellowhat requested to merge renovate/cri-o-cri-o-1.x into main

This MR contains the following updates:

Package Update Change
cri-o/cri-o minor 1.27.1 -> v1.28.0

Release Notes

cri-o/cri-o (cri-o/cri-o)

v1.28.0

Compare Source

CRI-O v1.28.0

The release notes have been generated for the commit range v1.27.0...v1.28.0 on Wed, 23 Aug 2023 16:11:56 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.28.0.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.28.0 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.28.0 \
    --signature cri-o.amd64.v1.28.0.tar.gz.sig \
    --certificate cri-o.amd64.v1.28.0.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.28.0.tar.gz
> bom validate -e cri-o.amd64.v1.28.0.tar.gz.spdx -d cri-o

Changelog since v1.27.0

Changes by Kind
Dependency-Change
Deprecation
Feature
  • Add DisableHostportMapping option to configuration, allowing users to disable hostport mapping for pods, which can be useful when other services provide it other than kube-proxy (like Cillium) (#​6589, @​hasan4791)
  • Add a new metric resources_stalled_at_stage to show when pods and containers are stuck at different stages of creation. (#​6923, @​haircommander)
  • Add containers_events_dropped_total metric (#​7210, @​surik)
  • Add platform_runtime_paths option to the runtime handler structure, which allows admins to define specific runtime paths based on different platforms. (#​7180, @​sohankunkerkar)
  • Add support for io.kubernetes.cri-o.LinkLogs annotation, which allows a pod's logs to be mounted into a specified empty-dir for inspection by a log aggregator (#​6990, @​haircommander)
  • Add support for pinned_images in crio configuration With this change, users can indicate to the kubelet not to perform garbage collection on certain images. (#​6862, @​sohankunkerkar)
  • Add version bump automation script (#​7173, @​anshgoyalevil)
  • Added support for namespaced signature policies via --signature-policy-dir / signature_policy_dir. See crio.conf.5.md for more details. (#​7016, @​saschagrunert)
  • Attempt to call c/storage Check() and Repair() when an unclean shutdown is detected (#​7190, @​MdSahil-oss)
  • Changes crio-status to be a sub command of crio. Example: crio status (#​6557, @​navisidhu)
  • Namespace for metrics exporter made configurable (#​6891, @​amarlearning)
  • Store PodLinuxOverhead and PodLinuxResources CRI fields received in RunPodSandbox() and then later pass them to NRI plugins so that the plugins do not need to cache the values. (#​6913, @​jukkar)
  • Support RegistryUnavailable error on container image pull. (#​6842, @​saschagrunert)
  • Support image policy verification error through the CRI. (#​6918, @​saschagrunert)
  • This MR extends the existing cpu-c-states.crio.io annotation in a backwards compatible manner, by adding a new max_latency option. The cpu-c-states.crio.io annotation now supports these values:
  • enable: enable all c-states (cpu-c-states.crio.io: "enable")
  • disable: disable all c-states (cpu-c-states.crio.io: "disable")
  • max_latency: enable c-states with a maximum latency in microseconds (for example, cpu-c-states.crio.io: "max_latency:10") (#​6718, @​bartwensley)
  • WIP: The user of Kubernetes v1.28 or later can omit the configuration of the kubelet cgroupDriver option if the Kubernetes KubeletCgroupDriverFromCRI feature flag in kubelet has been enabled. (#​7079, @​marquiz)
Bug or Regression
  • Failure in a PostStop hook does not prevent proper termination of a container anymore. (#​7032, @​MarSik)
  • Fix a bug where network metrics collection is broken with systemd cgroup driver and dropped infra containers. (#​6856, @​haircommander)
  • Fix a bug where sending information to cadvisor is stalled on taking the container's state lock (#​6925, @​haircommander)
  • Fix a bug where the PostStop runtime handler hooks weren't being called when a container exited gracefully (#​7058, @​haircommander)
  • Fix a bug where the cpu-quota.crio.io annotation was not propagated to the pod cgroup, meaning cpu quota was not disabled for the container (#​6917, @​haircommander)
  • Fix a bug with cpu quota annotation that manifests like: pod with cpu-quota.crio.io: disable fails with error: set CPU CFS quota: invalid slice name: /kubepods.slice Fix a bug where stopped containers break cpu load balancing being disabled (#​7000, @​haircommander)
  • Fix a segfault when a user namespace is requested but no OCI ID mappings are present (#​6834, @​haircommander)
  • Fix a very rare panic from a double closed channel in container stop (#​7129, @​haircommander)
  • Fixed an issue preventing the use of block devices with kata containers (#​7142, @​littlejawa)
  • Fixed bug where CRI-O runs with umask of 0. (#​6843, @​saschagrunert)
  • Fixed bug where ImageRef refers to a digest rather than an image ID, which negatively impacted kubelets garbage collection. (#​7149, @​saschagrunert)
  • Set mount type HostToContainer for mounts that include container storage root (#​7076, @​harche)
Other (Cleanup or Flake)

Dependencies

Added
  • cloud.google.com/go/recaptchaenterprise: v1.3.1
  • cloud.google.com/go/vision: v1.2.0
  • dario.cat/mergo: v1.0.0
  • gioui.org: 57750fc
  • git.sr.ht/~sbinet/gg: v0.3.1
  • github.com/AdamKorcz/go-fuzz-headers-1: e936619
  • github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.6.1
  • github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.3.0
  • github.com/Azure/azure-sdk-for-go/sdk/internal: v1.3.0
  • github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys: v0.12.0
  • github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v0.8.0
  • github.com/AzureAD/microsoft-authentication-library-for-go: v1.0.0
  • github.com/JohnCGriffin/overflow: 46fa312
  • github.com/Microsoft/cosesign1go: v0.0.1
  • github.com/Microsoft/didx509go: v0.0.2
  • github.com/ajstarks/deck/generate: c3f852c
  • github.com/ajstarks/deck: 30c9fc6
  • github.com/ajstarks/svgo: 1546f12
  • github.com/akavel/rsrc: v0.10.2
  • github.com/alessio/shellescape: v1.4.1
  • github.com/antlr/antlr4/runtime/Go/antlr/v4: 8188dc5
  • github.com/apache/arrow/go/v10: v10.0.1
  • github.com/apache/arrow/go/v11: v11.0.0
  • github.com/apache/thrift: v0.16.0
  • github.com/boombuler/barcode: v1.0.1
  • github.com/buildkite/agent/v3: v3.49.0
  • github.com/checkpoint-restore/go-criu/v4: v4.1.0
  • github.com/containerd/protobuild: v0.3.0
  • github.com/crc-org/vfkit: 3d57f09
  • github.com/digitorus/pkcs7: 001c36b
  • github.com/digitorus/timestamp: ef3b63b
  • github.com/elazarl/goproxy: a0805db
  • github.com/fogleman/gg: v1.3.0
  • github.com/gabriel-vasile/mimetype: v1.4.2
  • github.com/go-chi/chi/v5: v5.0.10
  • github.com/go-fonts/dejavu: v0.1.0
  • github.com/go-fonts/latin-modern: v0.2.0
  • github.com/go-fonts/liberation: v0.2.0
  • github.com/go-fonts/stix: v0.1.0
  • github.com/go-latex/latex: c0d11ff
  • github.com/go-pdf/fpdf: v0.6.0
  • github.com/go-redis/redismock/v9: v9.0.3
  • github.com/golang/freetype: e2365df
  • github.com/google/gnostic-models: v0.6.8
  • github.com/google/go-github/v53: v53.2.0
  • github.com/google/s2a-go: v0.1.4
  • github.com/googleapis/go-type-adapters: v1.0.0
  • github.com/iancoleman/strcase: v0.2.0
  • github.com/josephspurrier/goversioninfo: v1.4.0
  • github.com/jung-kurt/gofpdf: 24315ac
  • github.com/kballard/go-shellquote: 95032a8
  • github.com/klauspost/asmfmt: v1.3.2
  • github.com/lyft/protoc-gen-star: v0.6.1
  • github.com/minio/asm2plan9s: cdd7644
  • github.com/minio/c2goasm: 36a3d3b
  • github.com/pborman/uuid: v1.2.1
  • github.com/phpdave11/gofpdf: v1.4.2
  • github.com/phpdave11/gofpdi: v1.0.13
  • github.com/redis/go-redis/v9: v9.0.5
  • github.com/remyoudompheng/bigfft: eec4a21
  • github.com/ruudk/golang-pdf417: a7e3863
  • github.com/sassoftware/relic/v7: v7.5.5
  • github.com/sigstore/cosign/v2: v2.1.1
  • github.com/sigstore/protobuf-specs: v0.1.0
  • github.com/sigstore/sigstore/pkg/signature/kms/aws: v1.7.1
  • github.com/sigstore/sigstore/pkg/signature/kms/azure: v1.7.1
  • github.com/sigstore/sigstore/pkg/signature/kms/gcp: v1.7.1
  • github.com/sigstore/sigstore/pkg/signature/kms/hashivault: v1.7.1
  • github.com/sigstore/timestamp-authority: v1.1.1
  • github.com/uwu-tools/magex: v0.10.0
  • github.com/xhit/go-str2duration/v2: v2.1.0
  • github.com/ysmood/fetchup: v0.2.3
  • github.com/ysmood/got: v0.34.1
  • github.com/zeebo/assert: v1.3.0
  • github.com/zeebo/xxh3: v1.0.2
  • go.uber.org/mock: v0.2.0
  • gonum.org/v1/gonum: v0.11.0
  • gonum.org/v1/netlib: 8cb4219
  • gonum.org/v1/plot: v0.10.1
  • google.golang.org/genproto/googleapis/api: e85fd2c
  • google.golang.org/genproto/googleapis/rpc: e449d1e
  • k8s.io/kubernetes/staging/src/k8s.io/endpointslice: 855e7c4
  • lukechampine.com/uint128: v1.2.0
  • modernc.org/cc/v3: v3.36.3
  • modernc.org/ccgo/v3: v3.16.9
  • modernc.org/ccorpus: v1.11.6
  • modernc.org/httpfs: v1.0.6
  • modernc.org/libc: v1.17.1
  • modernc.org/mathutil: v1.5.0
  • modernc.org/memory: v1.2.1
  • modernc.org/opt: v0.1.3
  • modernc.org/sqlite: v1.18.1
  • modernc.org/strutil: v1.1.3
  • modernc.org/tcl: v1.13.1
  • modernc.org/token: v1.0.0
  • modernc.org/z: v1.5.1
  • software.sslmate.com/src/go-pkcs12: v0.2.0
Changed
Removed
  • bitbucket.org/creachadair/shell: v0.0.7
  • contrib.go.opencensus.io/exporter/stackdriver: v0.13.12
  • github.com/GoogleCloudPlatform/testgrid: v0.0.38
  • github.com/Masterminds/goutils: v1.1.1
  • github.com/Masterminds/semver: v1.5.0
  • github.com/Masterminds/sprig: v2.22.0+incompatible
  • github.com/alibabacloud-go/darabonba-string: v1.0.0
  • github.com/andreyvit/diff: c7f18ee
  • github.com/antlr/antlr4/runtime/Go/antlr: v1.4.10
  • github.com/apache/beam/sdks/v2: ef43645
  • github.com/arbovm/levenshtein: 48b4e1c
  • github.com/bytecodealliance/wasmtime-go: v1.0.0
  • github.com/carolynvs/magex: v0.9.0
  • github.com/certifi/gocertifi: 2c3bb06
  • github.com/cheggaaa/pb/v3: v3.1.0
  • github.com/cockroachdb/apd: v1.1.0
  • github.com/cockroachdb/cockroach-go/v2: v2.2.19
  • github.com/cockroachdb/errors: v1.2.4
  • github.com/cockroachdb/logtags: eb05cc2
  • github.com/codahale/rfc6979: 6a90f24
  • github.com/depcheck-test/depcheck-test: 199033a
  • github.com/dgraph-io/badger/v3: v3.2103.2
  • github.com/dgraph-io/ristretto: v0.1.0
  • github.com/dgryski/go-farm: a6ae236
  • github.com/dgryski/trifles: dd97f9a
  • github.com/form3tech-oss/jwt-go: v3.2.5+incompatible
  • github.com/fortytw2/leaktest: v1.3.0
  • github.com/foxcpp/go-mockdns: fb145fc
  • github.com/fullstorydev/grpcurl: v1.8.7
  • github.com/getsentry/raven-go: v0.2.0
  • github.com/go-playground/assert/v2: v2.2.0
  • github.com/go-redis/redis: v6.15.9+incompatible
  • github.com/go-zoo/bone: v1.3.0
  • github.com/goark/errs: v1.1.0
  • github.com/goark/go-cvss: v1.3.0
  • github.com/gofrs/flock: v0.8.1
  • github.com/golang-jwt/jwt: v3.2.2+incompatible
  • github.com/gomarkdown/markdown: 3b9f472
  • github.com/google/go-github/v45: v45.2.0
  • github.com/google/go-github/v47: v47.1.0
  • github.com/google/go-github/v48: v48.2.0
  • github.com/google/go-licenses: ce1d916
  • github.com/google/licenseclassifier/v2: v2.0.0
  • github.com/google/licenseclassifier: bb04aff
  • github.com/google/renameio/v2: v2.0.0
  • github.com/googleapis/gnostic: v0.5.5
  • github.com/hashicorp/go-hclog: v1.3.1
  • github.com/hashicorp/go-plugin: v1.4.5
  • github.com/hashicorp/go-secure-stdlib/mlock: v0.1.2
  • github.com/hashicorp/go-version: v1.6.0
  • github.com/hashicorp/vault/sdk: v0.6.0
  • github.com/hashicorp/yamux: v0.1.1
  • github.com/huandu/xstrings: v1.2.0
  • github.com/jackc/chunkreader/v2: v2.0.1
  • github.com/jackc/pgconn: v1.12.1
  • github.com/jackc/pgio: v1.0.0
  • github.com/jackc/pgpassfile: v1.0.0
  • github.com/jackc/pgproto3/v2: v2.3.0
  • github.com/jackc/pgservicefile: 2b9c447
  • github.com/jackc/pgtype: v1.11.0
  • github.com/jackc/pgx/v4: v4.16.1
  • github.com/jellydator/ttlcache/v2: v2.11.1
  • github.com/jhump/protoreflect: v1.14.0
  • github.com/kelseyhightower/envconfig: v1.4.0
  • github.com/lib/pq: v1.10.7
  • github.com/lufia/plan9stats: 39d0f17
  • github.com/mediocregopher/radix/v4: v4.1.2
  • github.com/mitchellh/copystructure: v1.2.0
  • github.com/mitchellh/reflectwalk: v1.0.2
  • github.com/mmarkdown/mmark: v2.0.40+incompatible
  • github.com/mwitkow/go-proto-validators: v0.2.0
  • github.com/oklog/run: v1.1.0
  • github.com/otiai10/copy: v1.2.0
  • github.com/package-url/packageurl-go: d704593
  • github.com/peterh/liner: bf27d3b
  • github.com/pierrec/lz4: v2.6.1+incompatible
  • github.com/power-devops/perfstat: 5aafc22
  • github.com/prometheus/prometheus: v2.5.0+incompatible
  • github.com/psampaz/go-mod-outdated: v0.9.0
  • github.com/pseudomuto/protoc-gen-doc: v1.5.1
  • github.com/pseudomuto/protokit: v0.2.0
  • github.com/rwtodd/Go.Sed: 5546468
  • github.com/sagikazarmark/crypt: v0.9.0
  • github.com/saschagrunert/ccli: b68f755
  • github.com/saschagrunert/go-modiff: v1.3.1
  • github.com/sendgrid/rest: v2.6.9+incompatible
  • github.com/sendgrid/sendgrid-go: v3.12.0+incompatible
  • github.com/shirou/gopsutil/v3: v3.22.12
  • github.com/shurcooL/githubv4: a14260e
  • github.com/shurcooL/graphql: 18c5c31
  • github.com/sigstore/cosign: v1.13.1
  • github.com/src-d/gcfg: v1.4.0
  • github.com/tent/canonical-json-go: 96e4ba3
  • github.com/tilinna/clock: v1.1.0
  • github.com/tj/go-spin: v1.1.0
  • github.com/tklauser/go-sysconf: v0.3.11
  • github.com/tklauser/numcpus: v0.6.0
  • github.com/tomasen/realip: f0c99a9
  • github.com/uber/jaeger-client-go: v2.30.0+incompatible
  • github.com/withfig/autocomplete-tools/integrations/cobra: v1.2.1
  • github.com/yusufpapurcu/wmi: v1.2.2
  • go.etcd.io/etcd/etcdctl/v3: v3.6.0-alpha.0
  • go.etcd.io/etcd/etcdutl/v3: v3.6.0-alpha.0
  • go.etcd.io/etcd/tests/v3: v3.6.0-alpha.0
  • go.etcd.io/etcd/v3: v3.6.0-alpha.0
  • go.uber.org/automaxprocs: v1.5.1
  • golang.org/dl: 82a15e2
  • golang.org/x/arch: v0.1.0
  • google.golang.org/grpc/examples: 3775f63
  • gopkg.in/cheggaaa/pb.v1: v1.0.28
  • gopkg.in/src-d/go-billy.v4: v4.3.2
  • gopkg.in/src-d/go-git.v4: v4.13.1
  • helm.sh/helm/v3: v3.10.3
  • k8s.io/release: v0.15.0
  • mvdan.cc/editorconfig: v0.2.0
  • mvdan.cc/sh/v3: v3.6.0
  • oras.land/oras-go: v1.2.0
  • sigs.k8s.io/bom: v0.4.1
  • sigs.k8s.io/mdtoc: v1.1.0
  • sigs.k8s.io/promo-tools/v3: v3.4.11
  • sigs.k8s.io/zeitgeist: v0.3.5

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Merge request reports