Skip to content

Bump containerd to v1.6.28 and runc to v.1.1.12 - #4398

Merged
louiseschmidtgen merged 2 commits into
masterfrom
KU-321/runc-containerd
Feb 8, 2024
Merged

Bump containerd to v1.6.28 and runc to v.1.1.12#4398
louiseschmidtgen merged 2 commits into
masterfrom
KU-321/runc-containerd

Conversation

@louiseschmidtgen

Copy link
Copy Markdown
Contributor

Summary

Bump containerd to v1.6.28 and runc to v1.1.12

Addresses CVEs, see release notes for details:

@louiseschmidtgen louiseschmidtgen self-assigned this Feb 6, 2024
@louiseschmidtgen
louiseschmidtgen marked this pull request as ready for review February 7, 2024 14:14

@neoaggelos neoaggelos left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@louiseschmidtgen
louiseschmidtgen merged commit 81d043a into master Feb 8, 2024
@louiseschmidtgen
louiseschmidtgen deleted the KU-321/runc-containerd branch February 8, 2024 07:30
louiseschmidtgen added a commit that referenced this pull request Feb 15, 2024
… (#4401)

* Bump containerd to v1.6.28 runc v.1.1.12 (#4398)

* fix source dir runc strict patches

* update runc 001 patch
louiseschmidtgen added a commit that referenced this pull request Feb 15, 2024
…4398) (#4403)

* Bump containerd to v1.6.28 runc v.1.1.12 (#4398)

* fix source dir runc strict patches

* update runc 001 patch
shayancanonical referenced this pull request in canonical/mysql-router-k8s-operator Aug 30, 2024
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [canonical/microk8s](https://togithub.com/canonical/microk8s) | minor
| `1.28` -> `1.31` |

---

### Release Notes

<details>
<summary>canonical/microk8s (canonical/microk8s)</summary>

###
[`v1.31`](https://togithub.com/canonical/microk8s/releases/tag/v1.31):
MicroK8s 1.31 released!

[Compare
Source](https://togithub.com/canonical/microk8s/compare/v1.30...v1.31)

#### In this release

##### Kubernetes 1.31

Read more at
https://kubernetes.io/blog/2024/08/13/kubernetes-v1-31-release/

##### Dqlite efficiency

We spent a lot of effort in improving the efficiency of the default
datastore, [dqlite](https://togithub.com/canonical/k8s-dqlite). You will
find improvements in the performance of concurrent queries and open
telemetry integration.

##### Important updates

-   helm upgrade to v3.14.4
-   cert-manager to v1.14.5
-   cilium to v1.15.2
-   gopaddle to v5.0
-   falco to v4.5.1
-   cloudnative pg to v1.23.3

##### Many thanks to our contributors

-   [@&#8203;TecIntelli](https://togithub.com/TecIntelli)
-   [@&#8203;jasonumiker](https://togithub.com/jasonumiker)
- [@&#8203;Gayathri-Bluemeric](https://togithub.com/Gayathri-Bluemeric)
-   [@&#8203;DLDClodio](https://togithub.com/DLDClodio)
-   [@&#8203;stalb](https://togithub.com/stalb)
-   [@&#8203;alphayax](https://togithub.com/alphayax)
-   [@&#8203;o0th](https://togithub.com/o0th)
-   [@&#8203;ShrishtiKarkera](https://togithub.com/ShrishtiKarkera)

###
[`v1.30`](https://togithub.com/canonical/microk8s/releases/tag/v1.30):
MicroK8s 1.30 released!

[Compare
Source](https://togithub.com/canonical/microk8s/compare/v1.29...v1.30)

#### Featured in this release

##### Kubernetes 1.30 obviously

Read more at
https://kubernetes.io/blog/2024/04/17/kubernetes-v1-30-release/

##### Dqlite stability

With the help of [@&#8203;miro-balaz](https://togithub.com/miro-balaz)
we identified and patched a few issued that improve the reliability of
our default datastore in resource limiting environments.

##### Important updates

Most notably

-   containerd to v1.6.28 and runc to v.1.1.12
-   gpu-operator to v23.9.1

##### New addon

- Stunner by [@&#8203;smeng9](https://togithub.com/smeng9), a Kubernetes
media gateway for WebRTC

#### In detail

##### What's changed in detail

- Do not set --hostname-override on kube-proxy when joining a cluster by
[@&#8203;neoaggelos](https://togithub.com/neoaggelos) in
[https://github.com/canonical/microk8s/pull/4360](https://togithub.com/canonical/microk8s/pull/4360)
- Use build-snaps instead of manually installing the go snap by
[@&#8203;IsaacJT](https://togithub.com/IsaacJT) in
[https://github.com/canonical/microk8s/pull/4377](https://togithub.com/canonical/microk8s/pull/4377)
- Bump containerd to v1.6.28 and runc to v.1.1.12 by
[@&#8203;louiseschmidtgen](https://togithub.com/louiseschmidtgen) in
[https://github.com/canonical/microk8s/pull/4398](https://togithub.com/canonical/microk8s/pull/4398)
- Fix erroneous microk8s join invocations by adding validation by
[@&#8203;skatsaounis](https://togithub.com/skatsaounis) in
[https://github.com/canonical/microk8s/pull/4397](https://togithub.com/canonical/microk8s/pull/4397)

##### External contributors

- [@&#8203;IsaacJT](https://togithub.com/IsaacJT) made their first
contribution in
[https://github.com/canonical/microk8s/pull/4377](https://togithub.com/canonical/microk8s/pull/4377)
- [@&#8203;skatsaounis](https://togithub.com/skatsaounis) made their
first contribution in
[https://github.com/canonical/microk8s/pull/4397](https://togithub.com/canonical/microk8s/pull/4397)
- [@&#8203;miro-balaz](https://togithub.com/miro-balaz) rewrote the
dqlite list query
[https://github.com/canonical/k8s-dqlite/pull/83](https://togithub.com/canonical/k8s-dqlite/pull/83)
- [@&#8203;smeng9](https://togithub.com/smeng9) contributed a new addon
Stunner
[https://github.com/canonical/microk8s-community-addons/pull/223](https://togithub.com/canonical/microk8s-community-addons/pull/223)
- [@&#8203;udit-uniyal](https://togithub.com/udit-uniyal) addressed
KubeArmor installation issue
[https://github.com/canonical/microk8s-community-addons/pull/216](https://togithub.com/canonical/microk8s-community-addons/pull/216)

###
[`v1.29`](https://togithub.com/canonical/microk8s/releases/tag/v1.29):
MicroK8s v1.29 released!

[Compare
Source](https://togithub.com/canonical/microk8s/compare/v1.28...v1.29)

#### Featured in this release

##### "Quality of life" improvements

A lot of effort has gone into the datastore, DQlite. In this release we
introduced the following improvements:

- DQlite node role reassignment in case of failure domain availability
changes
-   Optional admission control to ensure performance
-   Handling the out-of-disk-space cases
- Performance improvements related to static linking of DQlite and SQL
query preparation

##### New addons by our partners and community members

- Falco: the cloud-native security tool that employs custom rules on
kernel events to provide real-time alerts
- CloudNative PG Operator: Leveraging cloud native Postgres for
Kubernetes adds speed, efficiency and protection for your infrastructure
modernization
- ngrok: Ingress Controller instantly adds connectivity, load balancing,
authentication, and observability to your services

#### Detail list of updates since last release

##### Kubernetes core services

-   Kubernetes 1.29

##### Usability Improvements

-   Improved messaging in joining nodes
- Fix the default IP shown in ‘microk8s add-node’ output when using FRR
(thanks [@&#8203;nihr23](https://togithub.com/nihr43))
- Improve connectivity check in installers, thank you
[@&#8203;smithyuk](https://togithub.com/smithyuk)
-   Handle out of low disk capacity on dqlite nodes
-   Admission control to protect from dqlite performance degradation
-   Failure domain control plain datastore rebalance
- Memory argument warning in installer, thank you
[@&#8203;eddiesimeon](https://togithub.com/eddiesimeon)

##### Addon updates

-   New addon: nvidia, allows for enabling the gpu and network operators
- New addon: Falco v3.7.1, thank you
[@&#8203;jasonumiker](https://togithub.com/jasonumiker)
- New addon: CloudNativePG, thank you
[@&#8203;sxd](https://togithub.com/sxd)
- New addon: ngrok, thank you
[@&#8203;russorat](https://togithub.com/russorat)
- Added default-class option to hostpath-storage, thank you
[@&#8203;overtfuture](https://togithub.com/overtfuture)
- Upgraded sosivio to v1.7.1, thank you
[@&#8203;DanArlowski](https://togithub.com/DanArlowski)
- Upgrade linkerd to v2.14.3, thank you
[@&#8203;balchua](https://togithub.com/balchua)
- Upgraded KWasm operator to version v0.3.0, thank you
[@&#8203;0xE282B0](https://togithub.com/0xE282B0)
- Upgrade keda to v2.12.0, thank you
[@&#8203;balchua](https://togithub.com/balchua)
-   Upgraded hostpath-storage to v1.5.0
- Upgraded MICROCKS to v1.8.0, thank you
[@&#8203;yada](https://togithub.com/yada)
- hostpath-storage option not to be set as the default storage class,
courtesy of [@&#8203;overtfuture](https://togithub.com/overtfuture)
-   Removed ondat addon from the community repository

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 1am and before 3am every
weekday" in timezone Etc/UTC, Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/canonical/mysql-router-k8s-operator).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC41Ni4wIiwidXBkYXRlZEluVmVyIjoiMzguNTYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants