metal-stack · robertvolkmann · Sep 4, 2024 · Sep 3, 2024 · Sep 3, 2024 · Sep 3, 2024
@@ -27,5 +27,5 @@ jobs:
 
     - name: Verify
       run: |
-        make revendor
+        make tidy
         make verify
@@ -1,6 +1,6 @@
 .idea/
 .vscode
 
-hack/tools/bin/
+hack/tools/bin
 vendor
 VERSION
@@ -2,11 +2,16 @@ FROM golang:1.22 AS builder
 
 WORKDIR /go/src/github.com/metal-stack/gardener-extension-backup-s3
 
+# cache deps before building and copying source so that we don't need to re-download as much
+# and so that source changes don't invalidate our downloaded layer
+COPY go.mod go.sum ./
+RUN go mod download
+
 COPY . .
 
 RUN make install
 
-FROM alpine:3.19
+FROM gcr.io/distroless/static-debian12:nonroot
 
 WORKDIR /
 

@@ -3,6 +3,8 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
+ENSURE_GARDENER_MOD         := $(shell go get github.com/gardener/gardener@$$(go list -m -f "{{.Version}}" github.com/gardener/gardener))
+GARDENER_HACK_DIR    		:= $(shell go list -m -f "{{.Dir}}" github.com/gardener/gardener)/hack
 IMAGE_TAG                   := $(or ${GITHUB_TAG_NAME}, latest)
 REGISTRY                    := ghcr.io/metal-stack
 IMAGE_PREFIX                := $(REGISTRY)
@@ -24,8 +26,8 @@ endif
 
 export GO111MODULE := on
 
-TOOLS_DIR := hack/tools
--include vendor/github.com/gardener/gardener/hack/tools.mk
+TOOLS_DIR := $(HACK_DIR)/tools
+include $(GARDENER_HACK_DIR)/tools.mk
 
 
 #################################################################
@@ -37,9 +39,9 @@ build:
 	go build -ldflags $(LD_FLAGS) -tags netgo ./cmd/gardener-extension-backup-s3
 
 .PHONY: install
-install: revendor $(HELM)
+install: tidy $(HELM)
 	@LD_FLAGS="-w -X github.com/gardener/$(EXTENSION_PREFIX)-$(NAME)/pkg/version.Version=$(VERSION)" \
-	$(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/install.sh ./...
+	bash $(GARDENER_HACK_DIR)/install.sh ./...
 
 .PHONY: docker-image
 docker-image:
@@ -55,47 +57,44 @@ docker-push:
 # Rules for verification, formatting, linting, testing and cleaning #
 #####################################################################
 
-.PHONY: revendor
-revendor:
-	@GO111MODULE=on go mod vendor
+.PHONY: tidy
+tidy:
 	@GO111MODULE=on go mod tidy
-	@chmod +x $(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/*
-	@chmod +x $(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/.ci/*
+	@mkdir -p $(REPO_ROOT)/.ci/hack && cp $(GARDENER_HACK_DIR)/.ci/* $(REPO_ROOT)/.ci/hack/ && chmod +xw $(REPO_ROOT)/.ci/hack/*
 
 .PHONY: clean
 clean:
 	@$(shell find ./example -type f -name "controller-registration.yaml" -exec rm '{}' \;)
-	@$(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/clean.sh ./cmd/... ./pkg/...
+	@bash $(GARDENER_HACK_DIR)/clean.sh ./cmd/... ./pkg/...
 
 .PHONY: check-generate
 check-generate:
-	@$(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/check-generate.sh $(REPO_ROOT)
+	@bash $(GARDENER_HACK_DIR)/check-generate.sh $(REPO_ROOT)
 
 .PHONY: check
 check: $(GOIMPORTS) $(GOLANGCI_LINT) $(HELM)
-	@$(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/check.sh --golangci-lint-config=./.golangci.yaml ./cmd/... ./pkg/...
-	@$(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/check-charts.sh ./charts
+	@REPO_ROOT=$(REPO_ROOT) bash $(GARDENER_HACK_DIR)/check.sh --golangci-lint-config=./.golangci.yaml ./cmd/... ./pkg/...
+	@REPO_ROOT=$(REPO_ROOT) bash $(GARDENER_HACK_DIR)/check-charts.sh ./charts
 
 .PHONY: generate
-generate: $(HELM) $(YQ)
-	@$(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/generate.sh ./charts/... ./cmd/... ./pkg/...
+generate: $(VGOPATH) $(HELM) $(YQ)
+	@REPO_ROOT=$(REPO_ROOT) VGOPATH=$(VGOPATH) GARDENER_HACK_DIR=$(GARDENER_HACK_DIR) bash $(GARDENER_HACK_DIR)/generate-sequential.sh ./charts/... ./cmd/... ./pkg/...
 
 .PHONY: generate-in-container
-generate-in-container: revendor $(HELM)
+generate-in-container: tidy $(HELM)
 	echo $(shell git describe --abbrev=0 --tags) > VERSION
 	docker run --rm -i$(DOCKER_TTY_ARG) \
 		--env GOCACHE=/gocache \
 		--mount type=tmpfs,destination=/gocache,tmpfs-mode=1777 \
 		--user $$(id -u):$$(id -g) \
-		--userns=keep-id \
 		--volume $(PWD):/go/src/github.com/metal-stack/gardener-extension-backup-s3:z \
 		--workdir /go/src/github.com/metal-stack/gardener-extension-backup-s3 \
 		golang:$(GO_VERSION) \
 		/usr/bin/make generate
 
 .PHONY: format
 format: $(GOIMPORTS) $(GOIMPORTSREVISER)
-	@$(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/format.sh ./cmd ./pkg
+	@bash $(GARDENER_HACK_DIR)/format.sh ./cmd ./pkg
 
 .PHONY: verify
 verify: check format
@@ -3,7 +3,7 @@
 //
 // SPDX-License-Identifier: Apache-2.0
 
-//go:generate sh -c "../../vendor/github.com/gardener/gardener/hack/generate-controller-registration.sh backup-s3 . $(cat ../../VERSION) ../../example/controller-registration.yaml BackupBucket:S3 BackupEntry:S3"
+//go:generate sh -c "bash $GARDENER_HACK_DIR/generate-controller-registration.sh backup-s3 . $(cat ../../VERSION) ../../example/controller-registration.yaml BackupBucket:S3 BackupEntry:S3"
 
 // Package chart enables go:generate support for generating the correct controller registration.
 package chart
@@ -10,6 +10,3 @@ spec:
   selector:
     matchLabels:
 {{ include "labels" . | indent 6 }}
-{{- if semverCompare ">= 1.26-0" .Capabilities.KubeVersion.Version }}
-  unhealthyPodEvictionPolicy: AlwaysAllow
-{{- end }}
@@ -17,7 +17,6 @@ import (
 	"github.com/gardener/gardener/extensions/pkg/util"
 	gardenerhealthz "github.com/gardener/gardener/pkg/healthz"
 	"github.com/spf13/cobra"
-	"k8s.io/client-go/tools/leaderelection/resourcelock"
 	"k8s.io/component-base/version/verflag"
 	"sigs.k8s.io/controller-runtime/pkg/healthz"
 	"sigs.k8s.io/controller-runtime/pkg/manager"
@@ -34,11 +33,10 @@ func NewControllerManagerCommand(ctx context.Context) *cobra.Command {
 		generalOpts = &controllercmd.GeneralOptions{}
 		restOpts    = &controllercmd.RESTOptions{}
 		mgrOpts     = &controllercmd.ManagerOptions{
-			LeaderElection:             true,
-			LeaderElectionResourceLock: resourcelock.LeasesResourceLock,
-			LeaderElectionID:           controllercmd.LeaderElectionNameID(s3.Name),
-			LeaderElectionNamespace:    os.Getenv("LEADER_ELECTION_NAMESPACE"),
-			HealthBindAddress:          ":8081",
+			LeaderElection:          true,
+			LeaderElectionID:        controllercmd.LeaderElectionNameID(s3.Name),
+			LeaderElectionNamespace: os.Getenv("LEADER_ELECTION_NAMESPACE"),
+			HealthBindAddress:       ":8081",
 		}
 		configFileOpts = &s3cmd.ConfigOptions{}
 

@@ -5,7 +5,7 @@ metadata:
   name: backup-s3
 type: helm
 providerConfig:
-  chart: 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
+  chart: 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
   values:
     image:
       tag: v0.1.0

@@ -4,24 +4,24 @@ go 1.22
 
 require (
 	github.com/aws/aws-sdk-go v1.51.2
-	github.com/gardener/gardener v1.76.4
+	github.com/gardener/gardener v1.85.5
 	github.com/go-logr/logr v1.4.1
 	github.com/spf13/cobra v1.8.0
 	github.com/spf13/pflag v1.0.5
 	golang.org/x/tools v0.18.0
-	k8s.io/api v0.26.15
-	k8s.io/apimachinery v0.26.15
-	k8s.io/client-go v0.26.15
-	k8s.io/code-generator v0.26.15
-	k8s.io/component-base v0.26.15
+	k8s.io/api v0.28.3
+	k8s.io/apimachinery v0.28.3
+	k8s.io/code-generator v0.28.3
+	k8s.io/component-base v0.28.3
 	k8s.io/utils v0.0.0-20240102154912-e7106e64919e
-	sigs.k8s.io/controller-runtime v0.14.7
+	sigs.k8s.io/controller-runtime v0.16.3
 )
 
 require (
 	github.com/BurntSushi/toml v1.3.2 // indirect
 	github.com/Masterminds/goutils v1.1.1 // indirect
 	github.com/Masterminds/semver v1.5.0 // indirect
+	github.com/Masterminds/semver/v3 v3.2.1 // indirect
 	github.com/Masterminds/sprig v2.22.0+incompatible // indirect
 	github.com/ahmetb/gen-crd-api-reference-docs v0.3.0 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
@@ -36,7 +36,7 @@ require (
 	github.com/fsnotify/fsnotify v1.7.0 // indirect
 	github.com/gardener/etcd-druid v0.22.0 // indirect
 	github.com/gardener/hvpa-controller/api v0.5.0 // indirect
-	github.com/gardener/machine-controller-manager v0.49.3 // indirect
+	github.com/gardener/machine-controller-manager v0.50.0 // indirect
 	github.com/ghodss/yaml v1.0.0 // indirect
 	github.com/go-logr/zapr v1.3.0 // indirect
 	github.com/go-openapi/errors v0.21.0 // indirect
@@ -48,9 +48,8 @@ require (
 	github.com/gobwas/glob v0.2.3 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
-	github.com/golang/mock v1.6.0 // indirect
 	github.com/golang/protobuf v1.5.4 // indirect
-	github.com/google/gnostic v0.5.7-v3refs // indirect
+	github.com/google/gnostic-models v0.6.8 // indirect
 	github.com/google/go-cmp v0.6.0 // indirect
 	github.com/google/gofuzz v1.2.0 // indirect
 	github.com/google/pprof v0.0.0-20231212022811-ec68065c825e // indirect
@@ -60,6 +59,7 @@ require (
 	github.com/huandu/xstrings v1.4.0 // indirect
 	github.com/imdario/mergo v0.3.16 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
+	github.com/ironcore-dev/vgopath v0.1.3 // indirect
 	github.com/jmespath/go-jmespath v0.4.0 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
@@ -83,9 +83,11 @@ require (
 	github.com/prometheus/procfs v0.12.0 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/spf13/afero v1.11.0 // indirect
+	go.uber.org/mock v0.2.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.26.0 // indirect
 	golang.org/x/crypto v0.19.0 // indirect
+	golang.org/x/exp v0.0.0-20230321023759-10a507213a29 // indirect
 	golang.org/x/mod v0.15.0 // indirect
 	golang.org/x/net v0.21.0 // indirect
 	golang.org/x/oauth2 v0.17.0 // indirect
@@ -101,26 +103,22 @@ require (
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	istio.io/api v0.0.0-20230302172406-582f573dde0c // indirect
-	istio.io/client-go v1.18.0-alpha.0 // indirect
-	k8s.io/apiextensions-apiserver v0.26.10 // indirect
+	istio.io/api v1.19.2-0.20231011000955-f3015ebb5bd4 // indirect
+	istio.io/client-go v1.19.3 // indirect
+	k8s.io/apiextensions-apiserver v0.28.3 // indirect
 	k8s.io/autoscaler/vertical-pod-autoscaler v1.0.0 // indirect
+	k8s.io/client-go v0.28.3 // indirect
 	k8s.io/gengo v0.0.0-20230829151522-9cce18d56c01 // indirect
 	k8s.io/helm v2.17.0+incompatible // indirect
 	k8s.io/klog v1.0.0 // indirect
 	k8s.io/klog/v2 v2.110.1 // indirect
-	k8s.io/kube-aggregator v0.26.10 // indirect
+	k8s.io/kube-aggregator v0.28.3 // indirect
 	k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 // indirect
-	k8s.io/kubelet v0.26.10 // indirect
-	k8s.io/metrics v0.26.10 // indirect
+	k8s.io/kubelet v0.28.3 // indirect
+	k8s.io/metrics v0.28.3 // indirect
 	sigs.k8s.io/controller-runtime/tools/setup-envtest v0.0.0-20231015215740-bf15e44028f9 // indirect
-	sigs.k8s.io/controller-tools v0.11.4 // indirect
+	sigs.k8s.io/controller-tools v0.13.0 // indirect
 	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
 	sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
 	sigs.k8s.io/yaml v1.3.0 // indirect
 )
-
-replace (
-	k8s.io/client-go => k8s.io/client-go v0.26.15
-	k8s.io/kube-openapi => k8s.io/kube-openapi v0.0.0-20221012153701-172d655c2280
-)