Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Kyverno Chainsaw Test Suite #341

Merged
merged 28 commits into from
Aug 9, 2024
Merged

Kyverno Chainsaw Test Suite #341

merged 28 commits into from
Aug 9, 2024

Conversation

itay-grudev
Copy link
Collaborator

@itay-grudev itay-grudev commented Jul 30, 2024

This implements a base set of tests for the following areas using Kyverno Chainsaw:

  • Backup/restore from a Backup using MinIO
  • Backup/restore from Object Store using MinIO
  • Backup/restore from Object Store with PITR (time target) using MinIO
  • Monitoring settings
  • Pooler (to maintain the same functionality of the existing test I am replacing)

I am going to stop here, but the following further tests could be addressed in a separate PR:

  • Azurite tests for Azure Data Store compatibility
  • type: postgis tests

This PR includes the fix in #345 for the MinIO backup/restore tests to work.

Closes #294

Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
@itay-grudev itay-grudev changed the title Kyverno Chainsaw basic test Kyverno Chainsaw Test Suite Jul 30, 2024
@itay-grudev itay-grudev added this to the release( cluster ): 1.0.0 milestone Jul 30, 2024
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
…erun after failure

Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
This reverts commit 93ad1f1.

Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
…er section

Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Signed-off-by: Itay Grudev <itay.grudev@essentim.com>
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is the original happy path test covering a cluster and a pooler installation which is now obsolete.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This action is no longer required as the original pooler test is now obsolete.

@itay-grudev itay-grudev requested review from sxd and phisco August 3, 2024 22:50
@itay-grudev itay-grudev marked this pull request as ready for review August 3, 2024 22:50
@itay-grudev itay-grudev merged commit 131a0d7 into main Aug 9, 2024
4 checks passed
@itay-grudev itay-grudev deleted the test-suite-chainsaw branch August 9, 2024 17:13
rouke-broersma pushed a commit to broersma-forslund/homelab that referenced this pull request Aug 22, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cloudnative-pg](https://cloudnative-pg.io)
([source](https://github.com/cloudnative-pg/charts)) | minor |
`0.21.6` -> `0.22.0` |

---

### Release Notes

<details>
<summary>cloudnative-pg/charts (cloudnative-pg)</summary>

###
[`v0.22.0`](https://github.com/cloudnative-pg/charts/releases/tag/cloudnative-pg-v0.22.0)

CloudNativePG Operator Helm Chart

#### What's Changed

- Kyverno Chainsaw Test Suite by
[@&#8203;itay-grudev](https://github.com/itay-grudev) in
[cloudnative-pg/charts#341
- chore(deps): update sigstore/cosign-installer action to v3.6.0 by
[@&#8203;renovate](https://github.com/renovate) in
[cloudnative-pg/charts#347
- chore(deps): update kyverno/action-install-chainsaw action to v0.2.8
by [@&#8203;renovate](https://github.com/renovate) in
[cloudnative-pg/charts#349
- Release cloudnative-pg-v0.22.0 by
[@&#8203;github-actions](https://github.com/github-actions) in
[cloudnative-pg/charts#352

**Full Changelog**:
cloudnative-pg/charts@cloudnative-pg-v0.21.6...cloudnative-pg-v0.22.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/broersma-forslund/homelab).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yNi4xIiwidXBkYXRlZEluVmVyIjoiMzguMjYuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
lumiere-bot bot added a commit to coolguy1771/home-ops that referenced this pull request Aug 25, 2024
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cloudnative-pg](https://cloudnative-pg.io)
([source](https://github.com/cloudnative-pg/charts)) | minor |
`0.21.6` -> `0.22.0` |

---

### Release Notes

<details>
<summary>cloudnative-pg/charts (cloudnative-pg)</summary>

###
[`v0.22.0`](https://github.com/cloudnative-pg/charts/releases/tag/cloudnative-pg-v0.22.0)

[Compare
Source](https://github.com/cloudnative-pg/charts/compare/cloudnative-pg-v0.21.6...cloudnative-pg-v0.22.0)

CloudNativePG Operator Helm Chart

#### What's Changed

- Kyverno Chainsaw Test Suite by
[@&#8203;itay-grudev](https://github.com/itay-grudev) in
[cloudnative-pg/charts#341
- chore(deps): update sigstore/cosign-installer action to v3.6.0 by
[@&#8203;renovate](https://github.com/renovate) in
[cloudnative-pg/charts#347
- chore(deps): update kyverno/action-install-chainsaw action to v0.2.8
by [@&#8203;renovate](https://github.com/renovate) in
[cloudnative-pg/charts#349
- Release cloudnative-pg-v0.22.0 by
[@&#8203;github-actions](https://github.com/github-actions) in
[cloudnative-pg/charts#352

**Full Changelog**:
cloudnative-pg/charts@cloudnative-pg-v0.21.6...cloudnative-pg-v0.22.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC41MC4wIiwidXBkYXRlZEluVmVyIjoiMzguNTAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvaGVsbSIsInR5cGUvbWlub3IiXX0=-->

Co-authored-by: lumiere-bot[bot] <98047013+lumiere-bot[bot]@users.noreply.github.com>
spiceratops added a commit to spiceratops/k8s-gitops that referenced this pull request Aug 27, 2024
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cloudnative-pg](https://cloudnative-pg.io)
([source](https://github.com/cloudnative-pg/charts)) | minor |
`0.21.6` -> `0.22.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>cloudnative-pg/charts (cloudnative-pg)</summary>

###
[`v0.22.0`](https://github.com/cloudnative-pg/charts/releases/tag/cloudnative-pg-v0.22.0)

[Compare
Source](https://github.com/cloudnative-pg/charts/compare/cloudnative-pg-v0.21.6...cloudnative-pg-v0.22.0)

CloudNativePG Operator Helm Chart

#### What's Changed

- Kyverno Chainsaw Test Suite by
[@&#8203;itay-grudev](https://github.com/itay-grudev) in
[cloudnative-pg/charts#341
- chore(deps): update sigstore/cosign-installer action to v3.6.0 by
[@&#8203;renovate](https://github.com/renovate) in
[cloudnative-pg/charts#347
- chore(deps): update kyverno/action-install-chainsaw action to v0.2.8
by [@&#8203;renovate](https://github.com/renovate) in
[cloudnative-pg/charts#349
- Release cloudnative-pg-v0.22.0 by
[@&#8203;github-actions](https://github.com/github-actions) in
[cloudnative-pg/charts#352

**Full Changelog**:
cloudnative-pg/charts@cloudnative-pg-v0.21.6...cloudnative-pg-v0.22.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC41MC4wIiwidXBkYXRlZEluVmVyIjoiMzguNTAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvaGVsbSIsInR5cGUvbWlub3IiXX0=-->
PrivatePuffin pushed a commit to truecharts/charts that referenced this pull request Sep 9, 2024
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|  | lockFileMaintenance | All locks refreshed |
| [localpv-provisioner](http://www.openebs.io/)
([source](https://github.com/openebs/dynamic-localpv-provisioner)) |
minor | `4.0.0` -> `4.1.0` |
|
[gpu-operator](https://docs.nvidia.com/datacenter/cloud-native/gpu-operator/overview.html)
([source](https://github.com/NVIDIA/gpu-operator)) | minor | `v24.3.0`
-> `v24.6.1` |
| [nvidia-device-plugin](https://github.com/NVIDIA/k8s-device-plugin)
| minor | `0.15.1` -> `0.16.2` |
|
[node-feature-discovery](https://github.com/kubernetes-sigs/node-feature-discovery)
| patch | `0.16.3` -> `0.16.4` |
| [metallb](https://metallb.universe.tf)
([source](https://github.com/metallb/metallb)) | patch | `0.14.5` ->
`0.14.8` |
| csi-driver-smb | minor | `v1.14.0` -> `v1.15.0` |
| csi-driver-nfs | minor | `v4.7.0` -> `v4.8.0` |
| [cloudnative-pg](https://cloudnative-pg.io)
([source](https://github.com/cloudnative-pg/charts)) | minor |
`0.21.5` -> `0.22.0` |
| [cert-manager](https://cert-manager.io)
([source](https://github.com/cert-manager/cert-manager)) | patch |
`v1.15.1` -> `v1.15.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Release Notes

<details>
<summary>openebs/dynamic-localpv-provisioner
(localpv-provisioner)</summary>

###
[`v4.1.0`](https://github.com/openebs/dynamic-localpv-provisioner/blob/HEAD/CHANGELOG.md#v410--2024-07-03)

[Compare
Source](https://github.com/openebs/dynamic-localpv-provisioner/compare/localpv-provisioner-4.0.0...localpv-provisioner-4.1.0)

\===================

- Add pod priorityClassName to prevent race condition due to pod
eviction
([#&#8203;182](https://github.com/openebs/dynamic-localpv-provisioner/pull/182),[@&#8203;bernardgut](https://github.com/bernardgut))
- Allow specifying additional labels to be applied to all helm chart
resources
([#&#8203;183](https://github.com/openebs/dynamic-localpv-provisioner/pull/183),[@&#8203;laverya](https://github.com/laverya))
- feat(provisioner): update analytics pkg
([#&#8203;188](https://github.com/openebs/dynamic-localpv-provisioner/pull/188),[@&#8203;niladrih](https://github.com/niladrih))
- build: update base alpine image version to 3.20.1
([#&#8203;189](https://github.com/openebs/dynamic-localpv-provisioner/pull/189),[@&#8203;niladrih](https://github.com/niladrih))

</details>

<details>
<summary>NVIDIA/gpu-operator (gpu-operator)</summary>

###
[`v24.6.1`](https://github.com/NVIDIA/gpu-operator/releases/tag/v24.6.1):
GPU Operator 24.6.1 Release

[Compare
Source](https://github.com/NVIDIA/gpu-operator/compare/v24.6.0...v24.6.1)


https://docs.nvidia.com/datacenter/cloud-native/gpu-operator/24.6.1/index.html

###
[`v24.6.0`](https://github.com/NVIDIA/gpu-operator/releases/tag/v24.6.0):
GPU Operator 24.6.0 Release

[Compare
Source](https://github.com/NVIDIA/gpu-operator/compare/v24.3.0...v24.6.0)


https://docs.nvidia.com/datacenter/cloud-native/gpu-operator/24.6.0/release-notes.html

</details>

<details>
<summary>NVIDIA/k8s-device-plugin (nvidia-device-plugin)</summary>

###
[`v0.16.2`](https://github.com/NVIDIA/k8s-device-plugin/blob/HEAD/CHANGELOG.md#v0162)

[Compare
Source](https://github.com/NVIDIA/k8s-device-plugin/compare/v0.16.1...v0.16.2)

- Add CAP_SYS_ADMIN if volume-mounts list strategy is included (fixes
[#&#8203;856](https://github.com/NVIDIA/k8s-device-plugin/issues/856))
-   Remove unneeded DEVICE_PLUGIN_MODE envvar
-   Fix applying SELinux label for MPS

###
[`v0.16.1`](https://github.com/NVIDIA/k8s-device-plugin/blob/HEAD/CHANGELOG.md#v0161)

[Compare
Source](https://github.com/NVIDIA/k8s-device-plugin/compare/v0.16.0...v0.16.1)

- Bump nvidia-container-toolkit to v1.16.1 to fix a bug with CDI spec
generation for MIG devices

###
[`v0.16.0`](https://github.com/NVIDIA/k8s-device-plugin/blob/HEAD/CHANGELOG.md#v0160)

[Compare
Source](https://github.com/NVIDIA/k8s-device-plugin/compare/v0.15.1...v0.16.0)

-   Fixed logic of atomic writing of the feature file
-   Replaced `WithDialer` with `WithContextDialer`
-   Fixed SELinux context of MPS pipe directory.
- Changed behavior for empty MIG devices to issue a warning instead of
an error when the mixed strategy is selected
-   Added a a GFD node label for the GPU mode.
-   Update CUDA base image version to 12.5.1

</details>

<details>
<summary>kubernetes-sigs/node-feature-discovery
(node-feature-discovery)</summary>

###
[`v0.16.4`](https://github.com/kubernetes-sigs/node-feature-discovery/releases/tag/v0.16.4)

[Compare
Source](https://github.com/kubernetes-sigs/node-feature-discovery/compare/v0.16.3...v0.16.4)

#### What's Changed

This patch release contains improvements to the Helm chart, adding
configurable liveness and readiness probes for all daemons and
configurable revision history limit for the nfd-worker and
nfd-topology-updater.

- Helm: Add revision history limit for worker daemonset
([#&#8203;1797](https://github.com/kubernetes-sigs/node-feature-discovery/issues/1797))
by [@&#8203;marquiz](https://github.com/marquiz) in
[kubernetes-sigs/node-feature-discovery#1799
- go.mod: bump kubernetes to v1.30.3 by
[@&#8203;marquiz](https://github.com/marquiz) in
[kubernetes-sigs/node-feature-discovery#1805
- helm: add configurable liveness\&readiness probes by
[@&#8203;marquiz](https://github.com/marquiz) in
[kubernetes-sigs/node-feature-discovery#1808
- Add helm migration guide by
[@&#8203;k8s-infra-cherrypick-robot](https://github.com/k8s-infra-cherrypick-robot)
in
[kubernetes-sigs/node-feature-discovery#1825

**Full Changelog**:
kubernetes-sigs/node-feature-discovery@v0.16.3...v0.16.4

</details>

<details>
<summary>metallb/metallb (metallb)</summary>

###
[`v0.14.8`](https://github.com/metallb/metallb/releases/tag/v0.14.8):
v0.14.18

[Compare
Source](https://github.com/metallb/metallb/compare/v0.14.7...v0.14.8)

See the release notes for the details

https://metallb.universe.tf/release-notes/#version-0-14-8

###
[`v0.14.7`](https://github.com/metallb/metallb/releases/tag/v0.14.7):
v0.14.17

[Compare
Source](https://github.com/metallb/metallb/compare/v0.14.6...v0.14.7)

See the release notes for the details

https://metallb.universe.tf/release-notes/#version-0-14-7

###
[`v0.14.6`](https://github.com/metallb/metallb/releases/tag/v0.14.6):
v0.14.16

[Compare
Source](https://github.com/metallb/metallb/compare/v0.14.5...v0.14.6)

See the release notes for the details

https://metallb.universe.tf/release-notes/#version-0-14-6

</details>

<details>
<summary>cloudnative-pg/charts (cloudnative-pg)</summary>

###
[`v0.22.0`](https://github.com/cloudnative-pg/charts/releases/tag/cloudnative-pg-v0.22.0)

[Compare
Source](https://github.com/cloudnative-pg/charts/compare/cloudnative-pg-v0.21.6...cloudnative-pg-v0.22.0)

CloudNativePG Operator Helm Chart

#### What's Changed

- Kyverno Chainsaw Test Suite by
[@&#8203;itay-grudev](https://github.com/itay-grudev) in
[cloudnative-pg/charts#341
- chore(deps): update sigstore/cosign-installer action to v3.6.0 by
[@&#8203;renovate](https://github.com/renovate) in
[cloudnative-pg/charts#347
- chore(deps): update kyverno/action-install-chainsaw action to v0.2.8
by [@&#8203;renovate](https://github.com/renovate) in
[cloudnative-pg/charts#349
- Release cloudnative-pg-v0.22.0 by
[@&#8203;github-actions](https://github.com/github-actions) in
[cloudnative-pg/charts#352

**Full Changelog**:
cloudnative-pg/charts@cloudnative-pg-v0.21.6...cloudnative-pg-v0.22.0

###
[`v0.21.6`](https://github.com/cloudnative-pg/charts/releases/tag/cloudnative-pg-v0.21.6)

[Compare
Source](https://github.com/cloudnative-pg/charts/compare/cloudnative-pg-v0.21.5...cloudnative-pg-v0.21.6)

CloudNativePG Operator Helm Chart

#### What's Changed

- Add walStorage capability and remove gkeEnvironment conflict in
cluster chart. by [@&#8203;rocket357](https://github.com/rocket357) in
[cloudnative-pg/charts#312
- chore(deps): update actions/setup-python action to v5.1.1 by
[@&#8203;renovate](https://github.com/renovate) in
[cloudnative-pg/charts#330
- chore(deps): update docker/login-action action to v3.3.0 by
[@&#8203;renovate](https://github.com/renovate) in
[cloudnative-pg/charts#333
- chore: add support for `hostNetwork` in chart by
[@&#8203;marckhair](https://github.com/marckhair) in
[cloudnative-pg/charts#324
- feat(cloudnative-pg): Configuration of PodMonitor relabeling rules by
[@&#8203;npdgm](https://github.com/npdgm) in
[cloudnative-pg/charts#148
- fix: linter - trailing white spaces by
[@&#8203;sxd](https://github.com/sxd) in
[cloudnative-pg/charts#339
- Release cloudnative-pg-v0.21.6 by
[@&#8203;github-actions](https://github.com/github-actions) in
[cloudnative-pg/charts#340

#### New Contributors

- [@&#8203;rocket357](https://github.com/rocket357) made their first
contribution in
[cloudnative-pg/charts#312
- [@&#8203;marckhair](https://github.com/marckhair) made their first
contribution in
[cloudnative-pg/charts#324
- [@&#8203;npdgm](https://github.com/npdgm) made their first
contribution in
[cloudnative-pg/charts#148

**Full Changelog**:
cloudnative-pg/charts@cloudnative-pg-v0.21.5...cloudnative-pg-v0.21.6

</details>

<details>
<summary>cert-manager/cert-manager (cert-manager)</summary>

###
[`v1.15.3`](https://github.com/cert-manager/cert-manager/releases/tag/v1.15.3)

[Compare
Source](https://github.com/cert-manager/cert-manager/compare/v1.15.2...v1.15.3)

cert-manager is the easiest way to automatically manage certificates in
Kubernetes and OpenShift clusters.

**🔗 [See
v1.15.0](https://github.com/cert-manager/cert-manager/releases/tag/v1.15.0)
for more information about cert-manager 1.15 and read-before-upgrade
info.**

#### 📜 Changes since
[`v1.15.2`](https://github.com/cert-manager/cert-manager/releases/tag/v1.15.2)

##### Bug or Regression

- BUGFIX: the dynamic certificate source used by the webhook TLS server
failed to detect a root CA approaching expiration, due to a calculation
error. This will cause the webhook TLS server to fail renewing its CA
certificate. Please upgrade before the expiration of this CA certificate
is reached.
([#&#8203;7232](https://github.com/cert-manager/cert-manager/issues/7232),
[@&#8203;cert-manager-bot](https://github.com/cert-manager-bot))

###
[`v1.15.2`](https://github.com/cert-manager/cert-manager/releases/tag/v1.15.2)

[Compare
Source](https://github.com/cert-manager/cert-manager/compare/v1.15.1...v1.15.2)

cert-manager is the easiest way to automatically manage certificates in
Kubernetes and OpenShift clusters.

**🔗 [See
v1.15.0](https://github.com/cert-manager/cert-manager/releases/tag/v1.15.0)
for more information about cert-manager 1.15 and read-before-upgrade
info.**

#### 📜 Changes since
[`v1.15.1`](https://github.com/cert-manager/cert-manager/releases/tag/v1.15.1)

##### Bug or Regression

- BUGFIX `route53`: explicitly set the `aws-global` STS region which is
now required by the `github.com/aws/aws-sdk-go-v2` library.
([#&#8203;7189](https://github.com/cert-manager/cert-manager/pull/7189),
[`@cert-manager-bot`](https://github.com/cert-manager-bot))
- Bump `grpc-go` to fix `GHSA-xr7q-jx4m-x55m`
([#&#8203;7167](https://github.com/cert-manager/cert-manager/pull/7167),
[`@SgtCoDFish`](https://github.com/SgtCoDFish))
- Fix Azure DNS causing panics whenever authentication error happens
([#&#8203;7188](https://github.com/cert-manager/cert-manager/pull/7188),
[`@cert-manager-bot`](https://github.com/cert-manager-bot))
- Fix incorrect value and indentation of `endpointAdditionalProperties`
in the `PodMonitor` template of the Helm chart
([#&#8203;7191](https://github.com/cert-manager/cert-manager/pull/7191),
[`@inteon`](https://github.com/inteon))
- Fixes ACME HTTP01 challenge behavior when using Gateway API to prevent
unbounded creation of `HTTPRoute` resources
([#&#8203;7186](https://github.com/cert-manager/cert-manager/pull/7186),
[`@cert-manager-bot`](https://github.com/cert-manager-bot))
- Upgrade `golang` from `1.22.3` to `1.22.5`
([#&#8203;7165](https://github.com/cert-manager/cert-manager/pull/7165),
[`@github-actions`](https://github.com/github-actions))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
Europe/Amsterdam, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNiIsInVwZGF0ZWRJblZlciI6IjM4LjUxLjAiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOlsidXBkYXRlL2hlbG0vc3lzdGVtIl19-->

---------

Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>
Co-authored-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

feat(cluster): Create a Kyverno Chainsaw test suite
2 participants