Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps: update dependency kubernetes-sigs/kustomize to v4 #575

Merged
merged 1 commit into from
Jan 10, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jan 10, 2023

Mend Renovate

This PR contains the following updates:

Package Update Change
kubernetes-sigs/kustomize major v3.8.7 -> v4.5.7

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.


Release Notes

kubernetes-sigs/kustomize

v4.5.7

Compare Source

Due to an oversight, kustomize v4.5.6 has the golang testing library compiled in unnecessarily. This is a rerelease with the same functionality, but without the unnecessary additional library compiled in.

Dependency changes

#​4743: Pin to kyaml v0.13.9
#​4744: pin to cmd/config 0.10.9
#​4745: pin to api v0.12.1

v4.5.6

Compare Source

Due to an oversight, kustomize v4.5.6 has the golang testing library compiled in unnecessarily. It is advised that you upgrade to v4.5.7, which doesn't have the testing library compiled in.

Small features

#​4704: Option to customize NamespaceTransformer role binding subject handling
#​4708: Option to customize NamespaceTransformer overwrite behaviour

Bug fixes

#​4700: Correctly detect ambiguity between potential referrers when targeting a name+namespace reference
#​4703: Fix NameReference transformer handling of self-references in annotations
#​4730: Emit a warning when env loading bug is being relied on
#​4667: Replacements: fix issue with create: true option when there is an existing field

Dependency Changes

#​4736: Pin to kyaml v0.13.8
#​4737: Pin cmd/config 0.10.8
#​4738: Pin to api v0.12.0
#​4675: Update dependency github.com/xlab/treeprint to v1.1.0

v4.5.5

Compare Source

This release is expected to have significant performance improvements for a good portion of inputs, due to #​4568.

Small features

#​4209: [Address #​3937] Add labels to template/metadata if includeTemplates is true
#​4364: Add tagsuffix to take image tag suffix
#​4567: Add support for remote OpenAPI schema

Bug fixes and performance improvements

#​4568: openapi parsing performance improvement with protobuffer
#​4489: Fix containerized function mounts issue
#​4577: Fix error message using replacement wildcard and create option
#​4565: Raise error for external generators or transformers

Dependency changes

#​4644: Update kyaml to v0.13.7
#​4645: Update cmd/config to v0.10.7
#​4646: Update api to v0.11.5

v4.5.4

Compare Source

#​4538: move to google/gnostic v0.5.7-v3refs (required for kubectl integration update)
https://github.com/kubernetes-sigs/kustomize/pull/4545: Add more name refs to PodTemplate for ConfigMap and Secret
#​4547: Update kyaml to v0.13.6
#​4549: Update cmd/config to v0.10.6
#​4550: Update api to api/v0.11.4

v4.5.3

Compare Source

Enhancements

97de780 Support expanding anchor tags (#​4383)
26b9af0 Allow setting every array element in replacements (https://github.com/kubernetes-sigs/kustomize/pull/4424)
d1d578c Support for multiple replacements in a single file (https://github.com/kubernetes-sigs/kustomize/pull/4485)

Bug Fixes

7b0ec99 Retain quotes in namespace transformer filter (#​4421)
cb80659 Preserve scalar types when using the replacement filter (https://github.com/kubernetes-sigs/kustomize/pull/4494)
7a3c426 Fix image name parsing with tag and digest (https://github.com/kubernetes-sigs/kustomize/pull/4406)
3421fcf bump dependency cobra to pick up latest vulnerability solution

v4.5.2

Compare Source

2f17803 Fix regression: Support for pseudo git HTTP urls in the git cloner had broken in 59c8265 (#​4453)
b73dfe7 Remove exclude statements from kustomize module (https://github.com/kubernetes-sigs/kustomize/pull/4387)

v4.5.1

Compare Source

Known issues:

a86723c Fix regression #​4388 (introduced in kustomize 4.5.0), which changed the order of resources produced by kustomize build. (#​4445)

v4.5.0

Compare Source

Known issues
New enhancements
Deprecations
  • 2554d69 Deprecate enable-managedby-label flag in favor of a field (#​4377)

v4.4.1

Compare Source

This release restores the Windows binary and introduces ppc64le and s390x binaries.

b6cb6c8 fix build annotations getting lost after applying JSON 6902 patch (#​4266)
d8f406d Fix: replacements entries get source and targets with null value appended (#​4271)
ef5f1d3 support label and annotation selection in replacement targets (#​4229)
ba051c8 fix issue with quote being dropped in configmap generation (#​4242)
0d8c107 fix issue with openapi schema from components (#​4210)

v4.4.0

Compare Source

The headline feature of this release is improved support for YAML anchors and aliases, which will be expanded by default as of this version. (Issue #​3675; PRs #​4114 and #​4187)

Additional features and fixes include:

  • 12c177a fixes 4123; added length check on originalFields of kustomizationFile to prevent panic when kustomization file began with a comment(or a blank line) followed by a document separator

v4.3.0

Compare Source

7b5e43d Feature: Add edit set annotation (#​4073)
0537b59 support yaml formatted openapi schema (#​4017)
1e1b9b4 exec function working dir is the kustomization that referenced it (#​4125)
38b2b33 update openapi to v1.21.2, fixing batch/v1 CronJob patching behavior (#​4112)
e1804cb Retain field order after running any arbitrary functions on resources (#​4021)
78737f5 Updated ByteReader to allow white space and comments on the same line after --- and throw an error if anything else is detected (#​4014)
16dcc98 deprecate some cfg commands (#​4048 )
3350c72 option for origin data as annotation (#​4065)
97e7cb1 remove annotations added by the kyaml reader (#​4091)

v4.2.0

Compare Source

New experimental command to automatically migrate vars to replacements: kustomize edit fix —vars. For details, run kustomize edit fix -h. Warning: converting vars to replacements will potentially overwrite many resource files and in rare scenarios may not produce the same output when kustomize build is run. We recommend doing this in a clean git repository where the change is easy to undo.

a1746f2 Pin to api v0.8.11
bb6f83f Pin to cmd/config v0.9.13
aa92d83 Pin to kyaml (#​4020)
217e5c7 fix openapi command help page
7fae7d1 Move api/filesys to kyaml/filesys (#​3997)
c19a972 expose --as-current-user via AddFunctionBasicsFlags
3b37fed convert vars to replacements: mapping value with dot
f121e74 convert vars to replacements
24294d3 upgrade json-patch 4.11.0
a3ed120 Handle errors
f6e6ac0 Back to development mode; unpin the modules

v4.1.3

Compare Source

  • New experimental ReplacementTransformer, docs on the way: https://github.com/kubernetes-sigs/cli-experimental/pull/158 (will end up here )
    This will replace the vars feature. Thanks @​natasha41575!
  • Fix for #​3705 (use k8s.io/kube-openapi instead of github.com/go-openapi/spec). Thanks @​gautierdelorme!
  • Allow pulls of openapi data from live API servers (openapi fetch command). Thanks @​natasha41575!
  • Remote git urls can specify a timeout parameter. Thanks to @​joshdk!
  • More examples of helm usage.
  • Speed up cluster-scoped type checks.
  • API changes towards 1.0
    • Gvk and Resid types moved to kyaml
    • Resource now inlines RNode rather than delegating to it
    • Resmap now accepts an kio.Filter visitor (that can change the ResMap size).

afaf7c6 Pin to api v0.8.10
c24daec Pin to cmd/config v0.9.12
51605be Pin to kyaml v0.10.20
3f3d3b1 Replace pkger with embed.FS compatibility
dca13a4 use assert statements for kustomize edit tests
3cf18ad fix test
2bec25b add new fields to ordered fields
6608472 Simplify gvk, speed up cluster-scoped checks.
a4db686 Unpin everything.
5a8a4d4 More pinning.
1235047 Establish pin state.
1e7260b Pin to cmd/config v0.9.11
3a508da Pin to kyaml/v0.10.18
45fc670 update openapi fetch command
bcbfa06 remove go-openapi/spec,validate,strfmt from kustomize/
38e9c34 Back to dev mode; unpin the modules.

v4.1.2

Compare Source

This is a patch release to downgrade a dependency on github.com/imdario/mergo from v0.3.7 to v0.3.5.
This is to avoid forcing downstream kubernetes to use a newer version of mergo than it currently has.

End users of the CLI can stay with v4.1.0. See that release for user-facing changes.

3f2b98f Pin to api v0.8.8
5ba45f1 Back to mergo v0.3.5
d8015d3 Back to development mode; unpin the modules

v4.1.1

Compare Source

This is a patch release to downgrade a dependency on
github.com/imdario/mergo from v0.3.12 to v0.3.7.

The newer version of mergo appears to cause a
test failure in client-go, so we'll keep mergo dependencies
lower than latest for now.

59af495 Pin to api v0.8.7
162b8f3 Unpin the api

v4.1.0

Compare Source

Patch kind and metadata/name

A patch can now change the kind or name of a resource, e.g. a
Deployment can become a StatefulSet.

These fields used to be a primary key for patch targetting, and thus
couldn't be patched.

See examples in the feature's patch regression coverage.

labels without selectors

A new labels field allows adding labels without also automatically
injecting corresponding selectors:

labels:
  pairs
    fruit: peach
    car: model-T
  includeSelectors: true # <-- false by default

This can be used instead of the commonLabels field, which always
adds selectors.

Updated helm generator

kustomize can use the helm command line to inflate charts as a
resource generator, allowing a helm chart to define the base of any
number of variants.

The kustomization.yaml file has two new fields:

helmGlobals *HelmGlobals  // helm config that's not chart specific.
helmCharts []HelmChart    // Chart instances.

These fields are documented in helmchartargs.go.

These fields replace the deprecated but still functional
helmChartInflationGenerator field, which combined the above data and
offered two fields that must now be ignored: helmBin and
extraArgs. These latter fields are risky for people who already
engage in the risky behavior of using remote configuration that they
do not control.

To use a helm chart as a kustomization base, define values for these
fields and run:

kustomize build --enable-helm {target}

The --enable-helm flag is new, and required to allow kustomize to
run a helm subprocess.

Look here for a complete helm example.

Requires user to have helm v3 installed.

Use a custom OpenAPI schema file

Kustomize uses OpenAPI data to get information about merge keys.

To use a custom schema, specify what file to use via the openapi field.

See the custom OpenAPI example for details.

Misc issues fixed/touched
  • #​1009 support for common labels that don't get set on selectors
  • #​3394 allow patch removal of emptyDir{}
  • #​3620 disappearing ports
  • #​2825 CRD custom schema parsing
Commits

See the api v0.8.6 release notes for more commits in this version.

e3ce616 Pin to api v0.8.6
6a708bc Pin to cmd/config v0.9.10
88911bb Pin to [email protected]
240cda0 Add flag --enable-helm
aa5b481 upgrade to helm 3.5.4 and imdario/mergo v0.3.12
c632880 Pin to kyaml v0.10.16
3255c73 Loader FS and empty env fix
ccb95ab add conflict check
e77c284 Do no require exec/go plugin home to use fn plugins
5ed2067 Add labels field to kustomization
123a5d6 Remove the wrappy layer.
f96ac2d allow general name and kind changes via an options field in patches
ddfb4ff Unpin all modules (back to dev mode).
e2e4950 Take provenance version into account for build test

v4.0.5

Compare Source

Candidate for kubectl integration

4d66f9a Pin to api v0.8.5
243e7cc Pin to cmd/config v0.9.7
711b4ff Pin to kyaml v0.10.15

a8b851f Reinstate configmap/secret generator env field (kustomization struct compatibility with v2.0.1)
f3a958b Extract flags that enable alpha function features (no starlark)
60bd8d1 upgraded to yaml.v2 v2.4.0
e9c97a4 updated go version to 1.16
722b013 return error for duplicate keys rather than panicking

v4.0.4

Compare Source

To facilitate kubectl integration, update generated code and deps. No change in behavior.

29bfdfc Pin to api v0.8.4
a45e90b Pin to cmd/config v0.9.5
4a2ed90 Pin to kyaml v0.10.13
be8d60f Unpin kyaml, cmd/config and api.

v4.0.3

Compare Source

Removed some code generation markers from copied code.

7965195 Pin to api api/v0.8.3
03c77ce Pin to cmd/config v0.9.4
821b14b Pin to kyaml v0.10.12

v4.0.2

Compare Source

This release trims some unnecessary dependencies from kustomize, and pins to a version of kyaml that likewise has trimmed deps, to facilitate reintegration with kubectl.

c9d9348 Drop commands replacement from go.mod
3da90db Pin to api v0.8.2
2b9c69f Pin to cmd/config v0.9.3
f96dfb5 Pin to kyaml v0.10.11
cd2b0fc Remove tool deps from shippable modules.
316e431 added experimental openapi fetch command to get schema from local cluster
c04cf01 fix test
5614852 fix edit commands remove metadata
c7a504c Add 4.0.1 to example tests and unpin.

v4.0.1

Compare Source

In flags, convert underscores to hyphens to be compatible with kubectl.

These v4 flags are now incompatible with v3.

81562a7 Pin for kustomize/v4.0.1 release.
6cf4844 Hyphenate flags and add more build command tests.
d7b2945 Back to development mode; unpin the modules

v4.0.0

Compare Source

Due to #​3578, and the fix (drop go-getter) in #​3586, the set of URLs accepted by kustomize build is reduced
to only file system paths or values compatible with git clone (so, for example, mercurial and S3 no longer supported).
This backward incompatibility triggers a major version increment.

The same goes for elements of the resources field in kustomization.yaml (details in #​3578).

Users that rely on special URLs in resource fields may use v3.10.0 or earlier.

We hope someone will write a plugin to restore this option, albeit with a new syntax.

Alternatively, we can refactor code to accept a new loader that would have to live outside kustomize/kustomize and outside kustomize/api (i.e. not on any path imported by kubectl or someone else).

1c3832f Increment major version from v3 to v4
cd0d416 Pin to api v0.8.1
8d75824 Pin to cmd/config v0.9.2
50bfa05 Pin to kyaml v0.10.10
b553997 Make more high level build methods public.
003b494 Delete --enable_kyaml flag.
9dc4004 Tidy go.sum after dropping go-getter.
a815774 Drop the go-getter dependence.
17ecec2 Kustomize file should be ignored when adding resources and components
e33addc Drop hashicorp multierror due to MPL
2d2fbe9 Unpin everything, back to development mode.

v3.10.0

Compare Source

In this version, build only works if the --enable_kyaml flag is left to its default value of true.
All k8s.io/* code has been removed.

This flag will be removed in v4.0.0, along with all code structures that allowed kyaml and k8s.io code to co-exist.

Fall back to v3.8.10 for k8s.io-backed behavior.

1fa3b22 Pin to api v0.8.0
3ae1aa7 Delete dependence on k8s.io/...
f98edf1 Unpin from api.

v3.9.4

Compare Source

Picks up two changes relevant to closing #​1500

0508c89 Pin to api
e036f85 Pin to cmd/config v0.9.1
b062ce0 Pin to kyaml v0.10.9
264bfa8 Unpin; back to development mode.
09bc6e7 Pin to cmd/config v0.9.0
adb2f22 Pin to kyaml v0.10.8
bbccee0 Fix message in generated code.
71f4cec fixed ports merging issue and refactored some kyaml.walk code
5db7928 Drop unused quantity protobuf - avoid bad init.

v3.9.3

Compare Source

Includes all fixes listed in api/v0.7.3.

Binary still has apimachinery deps, but --enable_kyaml is true by default.

For an equivalent version with kyaml disabled by default, use kustomize/v3.8.10, or just run

kustomize build --enable_kyaml=false .

41df2be Pin to api v0.7.3
a684592 Pin to api v0.6.9
b0cfa15 Pin to cmd/config v0.8.9
c077ed4 Pin to kyaml v0.10.7 and cli-utils v0.23.1
b9f05dd Expose some top level kustomize commands.
a54cd12 Delete fixgomod.sh
ae060cc Add documentation/help on preserving the digest
9b4fdcf Add support for setting the name while keeping the digest
bb2d63a Use raw string to avoid double escape
b501238 Add support for setting new tag while preserving the current name
0cf1898 Back to development mode; unpin the modules

v3.9.2

Compare Source

21 issues closed and 33 prs merged since release v3.9.1

Mostly bugs in merging and quoting using kyaml.

8a65ece Pin to api v0.7.2
40bf89a Pin to cmd/config v0.8.8
86e9983 Pin to kyaml v0.10.6 and cli-utils v0.22.4
8c6a9f6 Move plugin lister to avoid import cycle.
ce2ab48 Unpin kyaml, cmd/config, api

v3.9.1

Compare Source

This version of kustomize manipulates YAML using the kyaml module in this repo instead of the kubernetes apimachinery modules.
This is the way forward.

You can help kustomize by trying this version, and filing issues if you have trouble.

If you hit a blocking issue, you can use the legacy code paths for a build as follows:

kustomize build --enable_kyaml=false  {target}

Or, you can use kustomize v3.8.9, which is identical to v3.9.1 except that the default value of the --enable_kyaml flag is false. In some setups, it might be easier to install a different binary than to specify a flag on each build.

6977c83 Pin to api/v0.7.1 (--enableKyaml=true)
8732671 Pin to api/v0.6.8
0d6b232 Pin to cmd/confg v0.8.7
c63ed03 Pin to kyaml v0.10.5
f7b2f0c Pin to gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c
338910d In module replacements, drop specific version numbers.
002215d Unpin kyaml
c0a754e Unpin api module.
8dd6f2b describe the format of image tag that is allowed
d25e1ef Unpin api

v3.9.0

Compare Source

v3.8.10

Compare Source

Hopefully the last API release with apimachinery deps active by default.

a684592 Pin to api v0.6.9
b0cfa15 Pin to cmd/config v0.8.9
c077ed4 Pin to kyaml v0.10.7 and cli-utils v0.23.1
b9f05dd Expose some top level kustomize commands.
a54cd12 Delete fixgomod.sh
ae060cc Add documentation/help on preserving the digest
9b4fdcf Add support for setting the name while keeping the digest
bb2d63a Use raw string to avoid double escape
b501238 Add support for setting new tag while preserving the current name
0cf1898 Back to development mode; unpin the modules

v3.8.9

Compare Source

The 3.8 branch of kustomize has legacy apimachinery dependence.
Try the 3.9 branch, and if you have trouble, fall back to 3.8.

8732671 Pin to api/v0.6.8
0d6b232 Pin to cmd/confg v0.8.7
c63ed03 Pin to kyaml v0.10.5
f7b2f0c Pin to gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c
338910d In module replacements, drop specific version numbers.
002215d Unpin kyaml
c0a754e Unpin api module.
8dd6f2b describe the format of image tag that is allowed
d25e1ef Unpin api

v3.8.8

Compare Source

This release is a rollup of all bug fixes to 10 Dec 2020.
It depends on apimachinery code flows.

125762d Pin kustomize to api/v0.6.7
cb2b376 Pin to api v0.6.7
c04c13a Unpin kustomize from api.
b4ad4b6 Pin to api v0.6.6
e849b16 Pin to cmd/config v0.8.6
575b4ef Pin to kyaml v0.10.3 cliutils v0.22.1
e1fd74b Automated Go mod cache updates.
51ba54a Revert "helm values on inflator config"
f6e5eed helm values on inflator config spec.
724bbe9 connected allowresourcesidchanges bool to allow_id_changes flag
32dd194 Automated go.sum updates.
8f7bcb9 update Go version to 1.15
a5f3d5c Use DepProvider in tests to access kyaml impls.
a12db91 mark the list-builtin command alpha
c610e3a Add command to list builtin plugins
a2087f0 added kustomize edit set label
fa3caaa Unpin everything post v3.8.7 release


Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" in timezone Europe/Vienna, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@codecov
Copy link

codecov bot commented Jan 10, 2023

Codecov Report

Merging #575 (b9f82bd) into main (b482d96) will not change coverage.
The diff coverage is n/a.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #575   +/-   ##
=======================================
  Coverage   49.94%   49.94%           
=======================================
  Files          60       60           
  Lines        5528     5528           
=======================================
  Hits         2761     2761           
  Misses       2660     2660           
  Partials      107      107           
Flag Coverage Δ
component-tests 50.43% <ø> (+0.23%) ⬆️
keptn-lifecycle-operator 47.85% <ø> (ø)
scheduler 21.17% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

@mowies mowies merged commit 36a6169 into main Jan 10, 2023
@mowies mowies deleted the renovate/kubernetes-sigs-kustomize-4.x branch January 10, 2023 08:30
@keptn-bot keptn-bot mentioned this pull request Jan 10, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants