)]}'
{
  "commit": "6211e4dc404a285d858e1ecc69ac488c9cabb96b",
  "tree": "ff3b84efffb58982e0e55e61ed7fceb5df9609dc",
  "parents": [
    "2ac249bf8e571ae7fd134b586ff9c87dce520956"
  ],
  "author": {
    "name": "Lorenz Brun",
    "email": "lorenz@monogon.tech",
    "time": "Tue Nov 14 19:09:40 2023 +0100"
  },
  "committer": {
    "name": "Lorenz Brun",
    "email": "lorenz@monogon.tech",
    "time": "Mon Apr 15 14:45:53 2024 +0000"
  },
  "message": "treewide: k8s 1.28 and lots related updates\n\nFirst, this contains a bunch of dependency updates. Important ones in no\nparticular order:\nKubernetes 1.24.2 -\u003e 1.28.8\netcd 3.5.4 -\u003e 3.5.13\nProtobuf 1.32.0 -\u003e 1.33.0\nOpenTelemetry 0.20.0 -\u003e 1.20.0\ncontainerd 1.6.6 -\u003e 1.7.15\nCoreDNS 1.9.2 -\u003e 1.11.1\n\nWith Kubernetes 1.25 PodSecurityPolicies are removed, this replaces them\nwith a static PodSecurity admission configuration which behaves the same\nor is slightly more permissive in most ways. Only known exceptions are\nthat NET_RAW is no longer an allowed permission and non-standard SELinux\nlabels are no longer permitted (but these never did anything anyways).\nThe RBAC policies are intentionally not removed yet as we do not yet\nhave the capability to actually update these, so they will be removed\nwhen that is available (#288), until then they will stay in-place but\ndo nothing.\n\nWith the containerd upgrade the deprecated option for ignoring\npreseeded/pinned images for garbage collection in Kubelet can be\nremoved.\n\nThis change also contains some drive-by fixes to the controller-manager,\nlike passing the Service IP net and disabling cloud-related control\nloops which generate spurious warnings if enabled.\n\nThe containerd tracing patch is removed as we can now use OTel v1, thus\nthat patch is no longer necessary.\n\nAn actual upgrade test will be part of a future CL as this one is\nalready quite large and it works stand-alone.\n\nCo-authored-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nChange-Id: I8e5f51e6e6240a1b67590458b2f1c24d58c8e91e\nReviewed-on: https://review.monogon.dev/c/monogon/+/2315\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "e1e4e328552003542fa0454efd60f360f8fac111",
      "old_mode": 33188,
      "old_path": "go.mod",
      "new_id": "4d7bed3f59acf8f8cb2f5661d03d2be4f04cfb78",
      "new_mode": 33188,
      "new_path": "go.mod"
    },
    {
      "type": "modify",
      "old_id": "944539334c1e6ad7714d64506d50bde1baf075a8",
      "old_mode": 33188,
      "old_path": "go.sum",
      "new_id": "0e7d409facbbfe1212c45735ebe4286e5d05b724",
      "new_mode": 33188,
      "new_path": "go.sum"
    },
    {
      "type": "modify",
      "old_id": "a1549321e3d9df2c3542815d2b69c3dcd00c8753",
      "old_mode": 33188,
      "old_path": "metropolis/build/kube-code-generator/defs.bzl",
      "new_id": "77ee1b677888827a2811840ab6f170ce4dc4d5aa",
      "new_mode": 33188,
      "new_path": "metropolis/build/kube-code-generator/defs.bzl"
    },
    {
      "type": "modify",
      "old_id": "1dc927ff3c07fd54beda76b7aaad48de0c136bdc",
      "old_mode": 33188,
      "old_path": "metropolis/node/core/consensus/configuration.go",
      "new_id": "dc3cd0647b2cd22cc2c20a66fd3ddb41a8088b44",
      "new_mode": 33188,
      "new_path": "metropolis/node/core/consensus/configuration.go"
    },
    {
      "type": "modify",
      "old_id": "f48babc71670e7ddf3e2691a3fffd6c3e008cd6a",
      "old_mode": 33188,
      "old_path": "metropolis/node/core/consensus/consensus.go",
      "new_id": "efe3b439568506494786fd62cf125ad2c19fd602",
      "new_mode": 33188,
      "new_path": "metropolis/node/core/consensus/consensus.go"
    },
    {
      "type": "modify",
      "old_id": "8e68973e237828cbea40aa4d99347bda044f4ac8",
      "old_mode": 33188,
      "old_path": "metropolis/node/kubernetes/BUILD.bazel",
      "new_id": "d775c5058fcd2f2b20a870819117082416b8df09",
      "new_mode": 33188,
      "new_path": "metropolis/node/kubernetes/BUILD.bazel"
    },
    {
      "type": "modify",
      "old_id": "9c4132d36724429d9677b3625a1a433fda21587c",
      "old_mode": 33188,
      "old_path": "metropolis/node/kubernetes/apiserver.go",
      "new_id": "7da4490f4ef34ddc7bcbc2a58c862644f4e0d329",
      "new_mode": 33188,
      "new_path": "metropolis/node/kubernetes/apiserver.go"
    },
    {
      "type": "modify",
      "old_id": "363571dc7c7d902c40d3b2508325d5180be1e3dc",
      "old_mode": 33188,
      "old_path": "metropolis/node/kubernetes/controller-manager.go",
      "new_id": "252de5370a1702283141ef5cd66542f45701a07b",
      "new_mode": 33188,
      "new_path": "metropolis/node/kubernetes/controller-manager.go"
    },
    {
      "type": "modify",
      "old_id": "58c381a402ce753d94d8864048d78f0385050ad5",
      "old_mode": 33188,
      "old_path": "metropolis/node/kubernetes/csi.go",
      "new_id": "f150a13da9519927026413649c5dd64349b16e28",
      "new_mode": 33188,
      "new_path": "metropolis/node/kubernetes/csi.go"
    },
    {
      "type": "modify",
      "old_id": "136bc28c1305a3386224a406b8ef27c94cddaa35",
      "old_mode": 33188,
      "old_path": "metropolis/node/kubernetes/kubelet.go",
      "new_id": "e8c78367ac4da528111fe234f150056e6fc65de0",
      "new_mode": 33188,
      "new_path": "metropolis/node/kubernetes/kubelet.go"
    },
    {
      "type": "modify",
      "old_id": "a6d465724cf784a3af34e6762f801e317af76b4d",
      "old_mode": 33188,
      "old_path": "metropolis/node/kubernetes/plugins/kvmdevice/kvmdevice.go",
      "new_id": "b9b4fb47fd857c05b26d60d45d9354c239595d01",
      "new_mode": 33188,
      "new_path": "metropolis/node/kubernetes/plugins/kvmdevice/kvmdevice.go"
    },
    {
      "type": "modify",
      "old_id": "e4bc41dfde82ca4cb7ef742b05607facbd3c2504",
      "old_mode": 33188,
      "old_path": "metropolis/node/kubernetes/reconciler/BUILD.bazel",
      "new_id": "306c2737b9d63df6fe9a2a24f668bffe5878404b",
      "new_mode": 33188,
      "new_path": "metropolis/node/kubernetes/reconciler/BUILD.bazel"
    },
    {
      "type": "modify",
      "old_id": "6c13df04c0302292df7e8d327983dcc50a86fd68",
      "old_mode": 33188,
      "old_path": "metropolis/node/kubernetes/reconciler/reconciler.go",
      "new_id": "4ed48599f4fdec564bc8f0f5754eb0df854f3807",
      "new_mode": 33188,
      "new_path": "metropolis/node/kubernetes/reconciler/reconciler.go"
    },
    {
      "type": "delete",
      "old_id": "97a38dddc92686e838142f1a0c8b9ee54355405d",
      "old_mode": 33188,
      "old_path": "metropolis/node/kubernetes/reconciler/resources_podsecuritypolicy.go",
      "new_id": "0000000000000000000000000000000000000000",
      "new_mode": 0,
      "new_path": "/dev/null"
    },
    {
      "type": "modify",
      "old_id": "11c2fa01ee54da245f9760a62437f3f5fe8f7ba8",
      "old_mode": 33188,
      "old_path": "metropolis/node/kubernetes/reconciler/resources_runtimeclass.go",
      "new_id": "b41c2c9741ee704463290ee6f3f09a01b1c5113a",
      "new_mode": 33188,
      "new_path": "metropolis/node/kubernetes/reconciler/resources_runtimeclass.go"
    },
    {
      "type": "modify",
      "old_id": "d309009dc9786ab5b0427ce615db044135971398",
      "old_mode": 33188,
      "old_path": "metropolis/node/kubernetes/service_controller.go",
      "new_id": "ccb5b29979df38521241c40269384f837aa30d4b",
      "new_mode": 33188,
      "new_path": "metropolis/node/kubernetes/service_controller.go"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "3568b79911068ece7bec6c78276e55d43aeab67e",
      "new_mode": 33188,
      "new_path": "third_party/go/patches/containerd-grpc-inherit-unimplemented.patch"
    },
    {
      "type": "delete",
      "old_id": "ee6f8c87b668f3cedab493a550668508de2c8c45",
      "old_mode": 33188,
      "old_path": "third_party/go/patches/containerd-no-tracing.patch",
      "new_id": "0000000000000000000000000000000000000000",
      "new_mode": 0,
      "new_path": "/dev/null"
    },
    {
      "type": "modify",
      "old_id": "e95258562eb4080114d6a36c3389fc81d770fa48",
      "old_mode": 33188,
      "old_path": "third_party/go/patches/coredns-remove-unused-plugins.patch",
      "new_id": "c05b9a95926a49b009bf3beddccfc94b1f0f4c68",
      "new_mode": 33188,
      "new_path": "third_party/go/patches/coredns-remove-unused-plugins.patch"
    },
    {
      "type": "modify",
      "old_id": "87a20b3eac4a3507464d0a018dbe8abf57fe0c3c",
      "old_mode": 33188,
      "old_path": "third_party/go/patches/goimports-group-merging.patch",
      "new_id": "127f563d1d1be89f63e26dd6a287786e09ddfb25",
      "new_mode": 33188,
      "new_path": "third_party/go/patches/goimports-group-merging.patch"
    },
    {
      "type": "modify",
      "old_id": "a1a2dc77cf118f8b8453f4f0bf2c3005a9a465d6",
      "old_mode": 33188,
      "old_path": "third_party/go/patches/gvisor-containerd-compat.patch",
      "new_id": "5e7f61e496497571a619b0ba69c6ec58106708e3",
      "new_mode": 33188,
      "new_path": "third_party/go/patches/gvisor-containerd-compat.patch"
    },
    {
      "type": "modify",
      "old_id": "6f37db701ed3fcfd73677d5401341b752f4299d5",
      "old_mode": 33188,
      "old_path": "third_party/go/patches/k8s-drop-legacy-log-path.patch",
      "new_id": "1d7a28b9f39fe331b348932c8b0ad6e1df555f3f",
      "new_mode": 33188,
      "new_path": "third_party/go/patches/k8s-drop-legacy-log-path.patch"
    },
    {
      "type": "modify",
      "old_id": "8b37544c69268441aad7d76ffb12231208424bee",
      "old_mode": 33188,
      "old_path": "third_party/go/patches/k8s-fix-logs-path.patch",
      "new_id": "ff957064daafb00505fc84a6ecc29b2341a3d58d",
      "new_mode": 33188,
      "new_path": "third_party/go/patches/k8s-fix-logs-path.patch"
    },
    {
      "type": "delete",
      "old_id": "5219c0c1ff435cf70555a52d51ce3e03efc0e6e3",
      "old_mode": 33188,
      "old_path": "third_party/go/patches/k8s-jose-semver-fix.patch",
      "new_id": "0000000000000000000000000000000000000000",
      "new_mode": 0,
      "new_path": "/dev/null"
    },
    {
      "type": "modify",
      "old_id": "9a96db207b4daca2b8ba05b94f0a0ab212005dfe",
      "old_mode": 33188,
      "old_path": "third_party/go/patches/k8s-native-metrics.patch",
      "new_id": "5df5bf9396323b756e69d374c28bc9dd910741f8",
      "new_mode": 33188,
      "new_path": "third_party/go/patches/k8s-native-metrics.patch"
    },
    {
      "type": "modify",
      "old_id": "c8750f583e80b57d78589f16a3afb3a5043c03c6",
      "old_mode": 33188,
      "old_path": "third_party/go/patches/k8s-native-mounter.patch",
      "new_id": "2965f5edfda5471da3eb045080912c0d9426d3fb",
      "new_mode": 33188,
      "new_path": "third_party/go/patches/k8s-native-mounter.patch"
    },
    {
      "type": "modify",
      "old_id": "40a9ac6aaeb0af933f3b36858e34a1801f07eb96",
      "old_mode": 33188,
      "old_path": "third_party/go/patches/k8s-removed-block-device-pseudo-locks.patch",
      "new_id": "8ae3140e00191dc3dec25c6511a0c2b136d7c513",
      "new_mode": 33188,
      "new_path": "third_party/go/patches/k8s-removed-block-device-pseudo-locks.patch"
    },
    {
      "type": "modify",
      "old_id": "1756d7b6398c956ff8d1dd340c4c6ff262ea34e6",
      "old_mode": 33188,
      "old_path": "third_party/go/patches/k8s-reserve-metropolis-ports.patch",
      "new_id": "89cff4826d8bcab79ba7022f8904f5bd9fe0607e",
      "new_mode": 33188,
      "new_path": "third_party/go/patches/k8s-reserve-metropolis-ports.patch"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "8fc2826b77ac7c7df905a7ebf68eb17f36278731",
      "new_mode": 33188,
      "new_path": "third_party/go/patches/kubectl-fix-embed.patch"
    },
    {
      "type": "rename",
      "old_id": "9872e8bf84fa1e1cf57b6bfbe58ec0a4a02f2118",
      "old_mode": 33188,
      "old_path": "third_party/go/patches/nfproxy-adopt-to-k8s-1.24.patch",
      "new_id": "388a970b34d9f6e84e36d64ff0be7cafd61251f4",
      "new_mode": 33188,
      "new_path": "third_party/go/patches/nfproxy-adapt-to-k8s-1.28.patch",
      "score": 72
    },
    {
      "type": "modify",
      "old_id": "98eadfda6e142da7363e9e08cd9621efcf7e88ef",
      "old_mode": 33188,
      "old_path": "third_party/go/repositories.bzl",
      "new_id": "646e24abe7b669624c2aa2559ae0b9c4f1bb4d18",
      "new_mode": 33188,
      "new_path": "third_party/go/repositories.bzl"
    }
  ]
}