images: Build bullseye variants (part three)

[justaugustus]

What type of PR is this?

/kind feature
/area dependency release-eng/security

What this PR does / why we need it:

Builds on top of #2210.
/hold for rebase magic

• setcap: Build bullseye-v1.0.0 images
• images: Build go1.17-bullseye variants (part two)
  • kube-cross:v1.23.0-go1.17.1-bullseye.0
  • k8s-ci-builder

Which issue(s) this PR fixes:

Special notes for your reviewer:

Does this PR introduce a user-facing change?

- setcap: Build bullseye-v1.0.0 images
- images: Build go1.17-bullseye variants (part two)
  - kube-cross:v1.23.0-go1.17.1-bullseye.0
  - k8s-ci-builder

[k8s-ci-robot]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[justaugustus]

/hold cancel
(rebased out #2210)

Now to tackle those remaining test failures...

[cpanato]

status of setcap, after the change now it is building

for buster

$ docker run -it gcr.io/k8s-staging-releng-test/setcap-amd64:buster-v2.0.4@sha256:97b4f9b36fff603b94ec25c72730424778c0f213b67fba250c121d42b6ba91a4 /bin/sh
Unable to find image 'gcr.io/k8s-staging-releng-test/setcap-amd64:buster-v2.0.4@sha256:97b4f9b36fff603b94ec25c72730424778c0f213b67fba250c121d42b6ba91a4' locally
gcr.io/k8s-staging-releng-test/setcap-amd64@sha256:97b4f9b36fff603b94ec25c72730424778c0f213b67fba250c121d42b6ba91a4: Pulling from k8s-staging-releng-test/setcap-amd64
1d4352b29680: Already exists
314598cfe48d: Pull complete
Digest: sha256:97b4f9b36fff603b94ec25c72730424778c0f213b67fba250c121d42b6ba91a4
Status: Downloaded newer image for gcr.io/k8s-staging-releng-test/setcap-amd64@sha256:97b4f9b36fff603b94ec25c72730424778c0f213b67fba250c121d42b6ba91a4
# . /etc/os-release; echo $VERSION_CODENAME
buster
# apt list --installed | grep libcap

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

libcap-ng0/oldstable,now 0.7.9-2 amd64 [installed,automatic]
libcap2-bin/oldstable,now 1:2.25-2 amd64 [installed]
libcap2/oldstable,now 1:2.25-2 amd64 [installed,automatic]

for bullseye

$ docker run -it gcr.io/k8s-staging-releng-test/setcap:bullseye-v1.0.0@sha256:dcba6973863cb70b28ef3b1d3a9833aac725de158fd583f4ff433d704a833d2c  /bin/sh
Unable to find image 'gcr.io/k8s-staging-releng-test/setcap:bullseye-v1.0.0@sha256:dcba6973863cb70b28ef3b1d3a9833aac725de158fd583f4ff433d704a833d2c' locally
gcr.io/k8s-staging-releng-test/setcap@sha256:dcba6973863cb70b28ef3b1d3a9833aac725de158fd583f4ff433d704a833d2c: Pulling from k8s-staging-releng-test/setcap
2252ee688176: Already exists
d8ffcf087777: Pull complete
Digest: sha256:dcba6973863cb70b28ef3b1d3a9833aac725de158fd583f4ff433d704a833d2c
Status: Downloaded newer image for gcr.io/k8s-staging-releng-test/setcap@sha256:dcba6973863cb70b28ef3b1d3a9833aac725de158fd583f4ff433d704a833d2c
# . /etc/os-release; echo $VERSION_CODENAME
bullseye
# apt list --installed | grep libcap

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

libcap-ng0/stable,now 0.7.9-2.2+b1 amd64 [installed,automatic]
libcap2-bin/stable,now 1:2.44-1 amd64 [installed]
libcap2/stable,now 1:2.44-1 amd64 [installed]

[cpanato]

any issues if you use python3? I guess the other it is deprecated already

[cpanato]

/test pull-release-image-kube-cross

[cpanato]

looks like there is a bug releated to the issue we are seeing here: https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1924231

UPDATE: bump the multiarch/qemu-user-static

[cpanato]

two issues now:
1: looks like some network issue

#11 [8/9] RUN go get golang.org/x/tools/cmd/cover            golang.org/x/tools/cmd/goimports     && go clean -cache
#11 11.20 go get: module golang.org/x/tools/cmd/cover: Get "https://proxy.golang.org/golang.org/x/tools/cmd/cover/@v/list": net/http: TLS handshake timeout
#11 11.21 go get: module golang.org/x/tools/cmd/goimports: Get "https://proxy.golang.org/golang.org/x/tools/cmd/goimports/@v/list": net/http: TLS handshake timeout
#11 ERROR: process "/bin/sh -c go get golang.org/x/tools/cmd/cover            golang.org/x/tools/cmd/goimports     && go clean -cache" did not complete successfully: exit code: 1
------
 > [8/9] RUN go get golang.org/x/tools/cmd/cover            golang.org/x/tools/cmd/goimports     && go clean -cache:
#11 11.20 go get: module golang.org/x/tools/cmd/cover: Get "https://proxy.golang.org/golang.org/x/tools/cmd/cover/@v/list": net/http: TLS handshake timeout
#11 11.21 go get: module golang.org/x/tools/cmd/goimports: Get "https://proxy.golang.org/golang.org/x/tools/cmd/goimports/@v/list": net/http: TLS handshake timeout
------

2: cloudbuild job timeout

5b463c23923b: Pushed
make: *** [Makefile:96: push] Terminated
1dd58fe4cd5a: Pushed
TIMEOUT

[cpanato]

all green!

@justaugustus @puerco @Verolop

[cpanato]

/hold to check if upgrade python is ok
/priority important-soon

[k8s-ci-robot]

@justaugustus: you cannot LGTM your own PR.

In response to this:

/lgtm
/approve
/hold cancel

@cpanato -- Updating python should be fine.
@kubernetes/release-engineering -- Needs /lgtm :)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[justaugustus]

/lgtm
/approve
/hold cancel

@cpanato -- Updating python should be fine.
@kubernetes/release-engineering -- Needs /lgtm :)

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: justaugustus

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [justaugustus]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[justaugustus]

Thanks for working on this, Carlos! 💕

[puerco]

/lgtm

[justaugustus]

Promotion PR: kubernetes/k8s.io#2763