Bump Containerd to 1.5.9

[adisky]

Signed-off-by: Aditi Sharma [email protected]

What this PR does / why we need it:
There has been two CVE fix from 1.5.7 to 1.5.9
CVE-2021-43816.
CVE-2021-41190

https://github.com/containerd/containerd/releases/tag/v1.5.9
https://github.com/containerd/containerd/releases/tag/v1.5.8

Which issue(s) this PR fixes (optional, in fixes #(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged): Fixes #

Additional context
Add any other context for the reviewers

[linux-foundation-easycla]

• ❌ - Aditi Sharma The commit (51e0581) is not authorized under a signed CLA. Please click here to be authorized. For further assistance with EasyCLA, please submit a support request ticket.

[k8s-ci-robot]

Hi @adisky. Thanks for your PR.

I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[adisky]

/cc @endocrimes

[k8s-ci-robot]

@adisky: GitHub didn't allow me to request PR reviews from the following users: endocrimes.

Note that only kubernetes-sigs members and repo collaborators can review this PR, and authors cannot review their own PRs.

In response to this:

/cc @endocrimes

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[jsturtevant]

Looks like you have the CLA signed but the EasyCLA failed. You can leave a comment in kubernetes/org#3068 to report an issue. Not sure if you will be able to fix it using the link above but you can try it out.

/ok-to-test

[codenrhoden]

azure failure is a flake...

FAILED! => {"changed": false, "cmd": ["/usr/bin/pip3", "install", "azure-cli"]

/test pull-azure-vhds

[jsturtevant]

azure failure is a flake...

FAILED! => {"changed": false, "cmd": ["/usr/bin/pip3", "install", "azure-cli"]

/test pull-azure-vhds

this looks similar to something I saw a few weeks ago #766

[jsturtevant]

does look to be the same:

omplete output from command python setup.py egg_info:\n    Traceback (most recent call last):\n      File \"<string>\", line 1, in <module>\n      File \"/tmp/pip-build-grcnu6px/cryptography/setup.py\", line 14, in <module>\n        from setuptools_rust import RustExtension\n    ModuleNotFoundError: No module named 'setuptools_rust'\n    \n            =============================DEBUG ASSISTANCE==========================\n            If you are seeing an error here please try the following to\n            successfully install cryptography:\n    \n            Upgrade to the latest pip and try again. This will fix errors for most\n            users. See: https://pip.pypa.io/en/stable/installing/#upgrading-pip\n            =============================DEBUG ASSISTANCE==========================\n    \n    \n    ----------------------------------------\n\n:stderr: Command \"python setup.py egg_info\" failed with error code 1 in /tmp/pip-build-grcnu6px/cryptography/\n"}�[0m

It was transient, but probably need to look further into it as to why.... I left some notes on the issue #766

[jsturtevant]

/retest

[k8s-ci-robot]

@adisky: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-ova-all	51e0581	link	false	/test pull-ova-all

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[adisky]

Looks like you have the CLA signed but the EasyCLA failed. You can leave a comment in kubernetes/org#3068 to report an issue. Not sure if you will be able to fix it using the link above but you can try it out.

/ok-to-test

I already tried the given link & reported to k/org still have issue :)

[codenrhoden]

checksums look good, Azure test looks good. (broken) OVA test isn't going to pick up anything that the Azure installs won't.

/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: adisky, codenrhoden

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• images/capi/OWNERS [codenrhoden]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[jsturtevant]

EasyCLA is not blocking right now and the linux foundation cla is signed. https://groups.google.com/g/kubernetes-dev/c/-mdBNXLYZ_Y/m/Bp7B4W7IAAAJ

/lgtm