Skip to content
This repository has been archived by the owner on Jul 11, 2023. It is now read-only.

chore(controller-runtime) : Update controller-runtime version #4227

Closed

Conversation

snehachhabria
Copy link
Contributor

@snehachhabria snehachhabria commented Oct 7, 2021

Description:

Update controller-runtime to v0.10.2

part of #4165

Signed-off-by: Sneha Chhabria snchh@microsoft.com

Affected area:

Functional Area
New Functionality [ ]
CI System [ ]
CLI Tool [ ]
Certificate Management [ ]
Control Plane [ ]
Demo [ ]
Documentation [ ]
Egress [ ]
Ingress [ ]
Install [ ]
Networking [ ]
Observability [ ]
Performance [ ]
SMI Policy [ ]
Security [ ]
Sidecar Injection [ ]
Tests [ ]
Upgrade [ ]
Other [X]

Please answer the following questions with yes/no.

  1. Does this change contain code from or inspired by another project? no

    • Did you notify the maintainers and provide attribution?
  2. Is this a breaking change? no

@snehachhabria snehachhabria requested a review from a team as a code owner October 7, 2021 18:21
@snehachhabria snehachhabria marked this pull request as draft October 7, 2021 18:25
@snehachhabria snehachhabria force-pushed the setTlsMinimum branch 3 times, most recently from 48462b7 to ae0766f Compare October 7, 2021 19:36
@snehachhabria snehachhabria marked this pull request as ready for review October 7, 2021 19:40
@trstringer trstringer self-requested a review October 7, 2021 19:41
Copy link
Member

@shashankram shashankram left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why is controller-runtime being updated? Is this a dependency to update the TLS version? If not, please keep this PR scoped to TLS version changes.

@@ -74,6 +74,10 @@ jobs:
steps:
- name: Checkout
uses: actions/checkout@v1
- name: Setup Go 1.16
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why is this required?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

runners don't have go preinstalled (according to this list) and we never have the "Setup Go" step this job. Not sure how it was running and validating all along

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's investigate why that's passing, and if this is even required. It also seems totally unrelated to this PR.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The mock check for this PR will not pass without this, so it can be very much a related fix to this PR

@snehachhabria
Copy link
Contributor Author

Why is controller-runtime being updated? Is this a dependency to update the TLS version? If not, please keep this PR scoped to TLS version changes.

Yes it is, please refer to this issue for more details : #4165

@trstringer
Copy link
Contributor

@shashankram from #4165 that CR needs to be 0.9.1+ to support configuring minimum TLS version.

@snehachhabria is there a reason we are defaulting to TLS 1.2 instead of TLS 1.3? Is it because of the Kubernetes support for TLS 1.3 requiring 1.17?

@shashankram
Copy link
Member

Why is controller-runtime being updated? Is this a dependency to update the TLS version? If not, please keep this PR scoped to TLS version changes.

Yes it is, please refer to this issue for more details : #4165

We do not use controller-runtime for TLS, it's just used for creating JSON patches and hence there should be no dependency on updating controller-runtime in a PR that suggests the TLS version is being fixed.

Please make the controller-runtime change in a separate PR if necessary, as I do not believe it is related to TLS in any way.

@snehachhabria snehachhabria changed the title chore(tlsversion) : Add a minimum tls version in webhooks chore(controller-runtime) : Update controller-runtime version Oct 7, 2021
Update controller-runtime to v0.10.2

part of  openservicemesh#4165

Signed-off-by: Sneha Chhabria <snchh@microsoft.com>
Copy link
Member

@shashankram shashankram left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd like to see this PR split up and scoped to the TLS version updates.

I don't believe controller-runtime needs to be updated, even though the issue suggests to update it, because we do not use controller-runtime other than for patching JSON.

Could you split this up and isolate this change to be specific to TLS config updates? Else it's just confusing to review.

@@ -74,6 +74,10 @@ jobs:
steps:
- name: Checkout
uses: actions/checkout@v1
- name: Setup Go 1.16
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's investigate why that's passing, and if this is even required. It also seems totally unrelated to this PR.

@snehachhabria
Copy link
Contributor Author

I'd like to see this PR split up and scoped to the TLS version updates.

I don't believe controller-runtime needs to be updated, even though the issue suggests to update it, because we do not use controller-runtime other than for patching JSON.

Could you split this up and isolate this change to be specific to TLS config updates? Else it's just confusing to review.

I've updated this PR to just update the controller runtime, I will send the TLS min version in a follow up PR

@snehachhabria
Copy link
Contributor Author

@shashankram from #4165 that CR needs to be 0.9.1+ to support configuring minimum TLS version.

@snehachhabria is there a reason we are defaulting to TLS 1.2 instead of TLS 1.3? Is it because of the Kubernetes support for TLS 1.3 requiring 1.17?

Since OSM is supported for k8s version 1.18 and above I guess we can bump this up to 1.3. I'll send the changes in a separate PR

@snehachhabria
Copy link
Contributor Author

synced with @shashankram offline and we will skip updating the controller-runtime version for now. I'll send a separate PR for the TLS min version

@snehachhabria snehachhabria deleted the setTlsMinimum branch October 7, 2021 20:42
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants