Support Kubernetes 1.28 (#721)

* Support Kubernetes 1.28

Signed-off-by: Masayuki Ishii <[email protected]>

Author: masa213f

.github/workflows/main.yaml

@@ -17,7 +17,7 @@ jobs:
           go-version-file: go.mod
       - name: Check auto-generated files
         run: make check-generate
-      - run: docker run -d --network host gcr.io/etcd-development/etcd:v3.5.10
+      - run: docker run -d --network host gcr.io/etcd-development/etcd:v3.5.13
       - run: make test
       - run: make install GOBIN=$(pwd)/docker
       - run: docker build -t ghcr.io/cybozu-go/cke:latest ./docker

CHANGELOG.md

@@ -5,110 +5,14 @@ This project employs a versioning scheme described in [RELEASE.md](RELEASE.md#ve
 
 ## [Unreleased]
 
-## [1.27.10]
-
-### Changed
-
-- change priorty of reboot queue cancel [#715](https://github.com/cybozu-go/cke/pull/715)
-- Embed root.hints file in unbound container [#716](https://github.com/cybozu-go/cke/pull/716)
-- Add test for too long repair execution [#713](https://github.com/cybozu-go/cke/pull/713)
-
-## [1.27.9]
-
-### Added
-
-- Add -output option to `ckecli reboot-queue list` [#708](https://github.com/cybozu-go/cke/pull/708)
-
-### Changed
-
-- Remove deprecated DualStack flag [#705](https://github.com/cybozu-go/cke/pull/705)
-- Update Vault to 1.15.6 [#709](https://github.com/cybozu-go/cke/pull/709)
-- Remove Unhealthy/Unreachable taint [#710](https://github.com/cybozu-go/cke/pull/710)
-- Add rw option to extra volumes [#712](https://github.com/cybozu-go/cke/pull/712)
-
-## [1.27.8]
-
-This release was canceled because the release workflow was failed.
-
-## [1.27.7]
-
-### Fixed
-
-- add setup-go in release-cke-image CI in [#703](https://github.com/cybozu-go/cke/pull/703)
-
-## [1.27.6]
-
-### Fixed
-
-- fix GO_VERSION in bin/env-sonobuoy in [#701](https://github.com/cybozu-go/cke/pull/701)
-
-## [1.27.5]
-
-### Changed
-
-- Fix condition of re-taint operation in [#699](https://github.com/cybozu-go/cke/pull/699)
-
-## [1.27.4]
-
-### Added
-
-- Implement repair queue in [#692](https://github.com/cybozu-go/cke/pull/692)
-
-## [1.27.3]
-
-### Changed
-
-- Adjustment network component resources in [#695](https://github.com/cybozu-go/cke/pull/695)
-- Update for Kubernetes 1.27.10 [#696](https://github.com/cybozu-go/cke/pull/696)
-
-## [1.27.2]
-
-### Changed
-
-- Update for Kubernetes 1.27.9 [#691](https://github.com/cybozu-go/cke/pull/691)
-
-## [1.27.1]
-
-### Added
-
-- Implement ckecli resource get [#688](https://github.com/cybozu-go/cke/pull/688)
-
-### Changed
-
-- Fix reboot_queue_running to report internal-state more precisely [#685](https://github.com/cybozu-go/cke/pull/685)
-- Update go modules [#689](https://github.com/cybozu-go/cke/pull/689)
-
-## [1.27.0]
-
-### Added
-
-- Implement reboot-queue status metrics [#678](https://github.com/cybozu-go/cke/pull/678)
-
-### Changed
-
-- Update for Kubernetes 1.27.8 [#672](https://github.com/cybozu-go/cke/pull/672)
-- Update Vault to 1.15.3 [#680](https://github.com/cybozu-go/cke/pull/680)
-- Migrate to ghcr.io [#683](https://github.com/cybozu-go/cke/pull/683)
-
-## [1.27.0-rc.2]
-
-### Added
-
-- Implement reboot-queue status metrics [#678](https://github.com/cybozu-go/cke/pull/678)
-
-### Changed
-
-- Update Vault to 1.15.3 [#680](https://github.com/cybozu-go/cke/pull/680)
-- Migrate to ghcr.io [#683](https://github.com/cybozu-go/cke/pull/683)
-
-## [1.27.0-rc.1]
-
 ### Changed
 
-- Update for Kubernetes 1.27.8 [#672](https://github.com/cybozu-go/cke/pull/672)
+- Update for Kubernetes 1.28 [#721](https://github.com/cybozu-go/cke/pull/721)
+- Update dependencies [#719](https://github.com/cybozu-go/cke/pull/719)
 
 ## Ancient changes
 
+- See [release-1.27/CHANGELOG.md](https://github.com/cybozu-go/cke/blob/release-1.27/CHANGELOG.md) for changes in CKE 1.27.
 - See [release-1.26/CHANGELOG.md](https://github.com/cybozu-go/cke/blob/release-1.26/CHANGELOG.md) for changes in CKE 1.26.
 - See [release-1.25/CHANGELOG.md](https://github.com/cybozu-go/cke/blob/release-1.25/CHANGELOG.md) for changes in CKE 1.25.
 - See [release-1.24/CHANGELOG.md](https://github.com/cybozu-go/cke/blob/release-1.24/CHANGELOG.md) for changes in CKE 1.24.
@@ -126,16 +30,3 @@ This release was canceled because the release workflow was failed.
 - See [release-1.12/CHANGELOG.md](https://github.com/cybozu-go/cke/blob/release-1.12/CHANGELOG.md) for changes in CKE 1.12.
 
 [Unreleased]: https://github.com/cybozu-go/cke/compare/v1.27.10...HEAD
-[1.27.10]: https://github.com/cybozu-go/cke/compare/v1.27.9...v1.27.10
-[1.27.9]: https://github.com/cybozu-go/cke/compare/v1.27.7...v1.27.9
-[1.27.8]: https://github.com/cybozu-go/cke/compare/v1.27.7...v1.27.8
-[1.27.7]: https://github.com/cybozu-go/cke/compare/v1.27.6...v1.27.7
-[1.27.6]: https://github.com/cybozu-go/cke/compare/v1.27.5...v1.27.6
-[1.27.5]: https://github.com/cybozu-go/cke/compare/v1.27.4...v1.27.5
-[1.27.4]: https://github.com/cybozu-go/cke/compare/v1.27.3...v1.27.4
-[1.27.3]: https://github.com/cybozu-go/cke/compare/v1.27.2...v1.27.3
-[1.27.2]: https://github.com/cybozu-go/cke/compare/v1.27.1...v1.27.2
-[1.27.1]: https://github.com/cybozu-go/cke/compare/v1.27.0...v1.27.1
-[1.27.0]: https://github.com/cybozu-go/cke/compare/v1.26.4...v1.27.0
-[1.27.0-rc.2]: https://github.com/cybozu-go/cke/compare/v1.27.0-rc.1...v1.27.0-rc.2
-[1.27.0-rc.1]: https://github.com/cybozu-go/cke/compare/v1.26.4...v1.27.0-rc.1

Makefile

@@ -1,6 +1,6 @@
 # Makefile for cke
 
-ETCD_VERSION = 3.5.10
+ETCD_VERSION = 3.5.13
 
 .PHONY: all
 all: test

README.md

@@ -133,7 +133,7 @@ Usage
 ```console
 $ docker run -d --read-only \
     --network host --name cke \
-    ghcr.io/cybozu-go/cke:1.27 [options...]
+    ghcr.io/cybozu-go/cke:1.28 [options...]
 ```
 
 ### Install `ckecli` and `cke-localproxy` to a host directory
@@ -142,7 +142,7 @@ $ docker run -d --read-only \
 $ docker run --rm -u root:root \
     --entrypoint /usr/local/cke/install-tools \
     --mount type=bind,src=DIR,target=/host \
-    ghcr.io/cybozu-go/cke:1.27
+    ghcr.io/cybozu-go/cke:1.28
 ```
 
 Docker images

example/docker-compose.yml

@@ -35,7 +35,7 @@ services:
     command: /opt/setup/setup.sh
   vault:
     container_name: vault
-    image: ghcr.io/cybozu/vault:1.15
+    image: ghcr.io/cybozu/vault:1.16
     networks:
       app_net:
         ipv4_address: 172.30.0.13

images.go

@@ -10,13 +10,13 @@ func (i Image) Name() string {
 
 // Container image definitions
 const (
-	EtcdImage            = Image("ghcr.io/cybozu/etcd:3.5.10.2")
-	KubernetesImage      = Image("ghcr.io/cybozu/kubernetes:1.27.10.1")
-	ToolsImage           = Image("ghcr.io/cybozu-go/cke-tools:1.27.1")
-	PauseImage           = Image("ghcr.io/cybozu/pause:3.9.0.4")
-	CoreDNSImage         = Image("ghcr.io/cybozu/coredns:1.11.1.2")
-	UnboundImage         = Image("ghcr.io/cybozu/unbound:1.18.0.4")
-	UnboundExporterImage = Image("ghcr.io/cybozu/unbound_exporter:0.4.4.2")
+	EtcdImage            = Image("ghcr.io/cybozu/etcd:3.5.13.1")
+	KubernetesImage      = Image("ghcr.io/cybozu/kubernetes:1.28.8.1")
+	ToolsImage           = Image("ghcr.io/cybozu-go/cke-tools:1.28.0")
+	PauseImage           = Image("ghcr.io/cybozu/pause:3.9.0.5")
+	CoreDNSImage         = Image("ghcr.io/cybozu/coredns:1.11.1.3")
+	UnboundImage         = Image("ghcr.io/cybozu/unbound:1.19.3.1")
+	UnboundExporterImage = Image("ghcr.io/cybozu/unbound_exporter:0.4.6.1")
 )
 
 // AllImages return container images list used by CKE

mtest/Makefile

@@ -1,11 +1,11 @@
 # Makefile for multi-host testing using ginkgo
 
 # tool versions
-MANAGEMENT_ETCD_VERSION = 3.5.10
-VAULT_VERSION = 1.15.6
-K8S_VERSION = 1.27.10
-CONTAINERD_VERSION = 1.7.9
-CRITOOLS_VERSION = 1.28.0
+MANAGEMENT_ETCD_VERSION = 3.5.13
+VAULT_VERSION = 1.16.0
+K8S_VERSION = 1.28.8
+CONTAINERD_VERSION = 1.7.14
+CRITOOLS_VERSION = 1.29.0
 CT_VERSION = 0.9.3
 
 # configuration variables

sonobuoy/Makefile

@@ -1,7 +1,7 @@
 ### Configurable variables
 SONOBUOY_VERSION = 0.57.1
-KUBECTL_VERSION = 1.27.10
-DOCKER_COMPOSE_VERSION = 2.23.3
+KUBECTL_VERSION = 1.28.8
+DOCKER_COMPOSE_VERSION = 2.26.1
 CT_VERSION = 0.9.3
 
 ### Unconfigurable

sonobuoy/docker-compose.yml

@@ -35,7 +35,7 @@ services:
     command: /opt/setup/setup.sh
   vault:
     container_name: vault
-    image: ghcr.io/cybozu/vault:1.15
+    image: ghcr.io/cybozu/vault:1.16
     networks:
       app_net:
         ipv4_address: 172.30.0.13