Repository: kubernetes-sigs/security-profiles-operator
Pull request #1621 (2023-04-12 12:16:12)

Bump CI Kubernetes to v1.27.0

#### What type of PR is this?


/kind cleanup


#### What this PR does / why we need it:
Update Kubernetes related dependencies to their latest release.
#### Which issue(s) this PR fixes:

<!--
*Automatically closes linked issue when PR is merged.
Usage: `Fixes #<issue number>`, or `Fixes (paste link of issue)`.

Fixes #

or

None
-->
None
#### Does this PR have test?
None
<!--
If tests aren't applicable just write N/A.
-->

#### Special notes for your reviewer:
None
#### Does this PR introduce a user-facing change?

<!--
If no, just write "NONE" in the release-note block below.
If yes, a release note is required:
Enter your extended release note in the block below. If the PR requires additional action from users switching to the new release, include the string "action required".

For more information on release notes see: https://git.k8s.io/community/contributors/guide/release-notes.md
-->

```release-note
None
```


k8s-ci-robot: [APPROVALNOTIFIER] This PR is **APPROVED**

This pull-request has been approved by: *<a href="https://github.com/kubernetes-sigs/security-profiles-operator/pull/1621#" title="Author self-approved">saschagrunert</a>*

The full list of commands accepted by this bot can be found [here](https://go.k8s.io/bot-commands?repo=kubernetes-sigs%2Fsecurity-profiles-operator).

The pull request process is described [here](https://git.k8s.io/community/contributors/guide/owners.md#the-code-review-process)

<details >
Needs approval from an approver in each of these files:

- ~~[OWNERS](https://github.com/kubernetes-sigs/security-profiles-operator/blob/main/OWNERS)~~ [saschagrunert]

Approvers can indicate their approval by writing `/approve` in a comment
Approvers can cancel approval by writing `/approve cancel` in a comment
</details>
<!-- META={"approvers":[]} -->
k8s-ci-robot: @saschagrunert: The following test **failed**, say `/retest` to rerun all failed tests or `/retest-required` to rerun all mandatory failed tests:

Test name | Commit | Details | Required | Rerun command
--- | --- | --- | --- | ---
pull-security-profiles-operator-verify | ba2e00d26b2d5f2e2ff9424efb26a2f493a14fc3 | [link](https://prow.k8s.io/view/gs/kubernetes-jenkins/pr-logs/pull/kubernetes-sigs_security-profiles-operator/1621/pull-security-profiles-operator-verify/1646125067467231232) | true | `/test pull-security-profiles-operator-verify`

[Full PR test history](https://prow.k8s.io/pr-history?org=kubernetes-sigs&repo=security-profiles-operator&pr=1621). [Your PR dashboard](https://prow.k8s.io/pr?query=is%3Apr%20state%3Aopen%20author%3Asaschagrunert). Please help us cut down on flakes by [linking to](https://git.k8s.io/community/contributors/devel/sig-testing/flaky-tests.md#filing-issues-for-flaky-tests) an [open issue](https://github.com/kubernetes-sigs/security-profiles-operator/issues?q=is:issue+is:open) when you hit one in your PR.

<details>

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md).  If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
</details>
<!-- test report -->
k8s-ci-robot: @saschagrunert: The following test **failed**, say `/retest` to rerun all failed tests or `/retest-required` to rerun all mandatory failed tests:

Test name | Commit | Details | Required | Rerun command
--- | --- | --- | --- | ---
pull-security-profiles-operator-test-e2e | 49dd2060c713f07b22d76265853083ea91e6cb92 | [link](https://prow.k8s.io/view/gs/kubernetes-jenkins/pr-logs/pull/kubernetes-sigs_security-profiles-operator/1621/pull-security-profiles-operator-test-e2e/1646151057216114688) | true | `/test pull-security-profiles-operator-test-e2e`

[Full PR test history](https://prow.k8s.io/pr-history?org=kubernetes-sigs&repo=security-profiles-operator&pr=1621). [Your PR dashboard](https://prow.k8s.io/pr?query=is%3Apr%20state%3Aopen%20author%3Asaschagrunert). Please help us cut down on flakes by [linking to](https://git.k8s.io/community/contributors/devel/sig-testing/flaky-tests.md#filing-issues-for-flaky-tests) an [open issue](https://github.com/kubernetes-sigs/security-profiles-operator/issues?q=is:issue+is:open) when you hit one in your PR.

<details>

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md).  If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
</details>
<!-- test report -->
saschagrunert: @kubernetes-sigs/security-profiles-operator-maintainers PTAL
pjbgf: /lgtm

Patch:
diff --git a/bundle/manifests/security-profiles-operator.clusterserviceversion.yaml b/bundle/manifests/security-profiles-operator.clusterserviceversion.yaml
index 0836f582f..295b167c2 100644
--- a/bundle/manifests/security-profiles-operator.clusterserviceversion.yaml
+++ b/bundle/manifests/security-profiles-operator.clusterserviceversion.yaml
@@ -853,7 +853,7 @@ spec:
                 - manager
                 env:
                 - name: RELATED_IMAGE_RBAC_PROXY
-                  value: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1
+                  value: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.0
                 - name: RELATED_IMAGE_SELINUXD
                   value: quay.io/security-profiles-operator/selinuxd
                 - name: OPERATOR_NAMESPACE
@@ -973,7 +973,7 @@ spec:
     name: Kubernetes SIGs
     url: https://github.com/kubernetes-sigs
   relatedImages:
-  - image: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1
+  - image: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.0
     name: rbac-proxy
   - image: quay.io/security-profiles-operator/selinuxd
     name: selinuxd
diff --git a/dependencies.yaml b/dependencies.yaml
index 28af132cf..e147f67c1 100644
--- a/dependencies.yaml
+++ b/dependencies.yaml
@@ -62,13 +62,13 @@ dependencies:
       match: cert-manager/cert-manager
 
   - name: kind
-    version: 0.17.0
+    version: 0.18.0
     refPaths:
     - path: test/suite_test.go
       match: kindVersion
 
   - name: kind-image
-    version: 1.26.2
+    version: 1.27.0
     refPaths:
     - path: test/suite_test.go
       match: kindImage
@@ -82,7 +82,7 @@ dependencies:
       match: QEMUVERSION
 
   - name: e2e-kubernetes
-    version: 1.26.2
+    version: 1.27.0
     refPaths:
     - path: hack/ci/install-kubernetes.sh
       match: VERSION
@@ -136,7 +136,7 @@ dependencies:
       match: NIX_VERSION
 
   - name: kube-rbac-proxy
-    version: 0.13.1
+    version: 0.14.0
     refPaths:
     - path: internal/pkg/manager/spod/bindata/spod.go
       match: gcr.io/kubebuilder/kube-rbac-proxy
@@ -144,6 +144,18 @@ dependencies:
       match: gcr.io/kubebuilder/kube-rbac-proxy
     - path: deploy/helm/templates/deployment.yaml
       match: gcr.io/kubebuilder/kube-rbac-proxy
+    - path: bundle/manifests/security-profiles-operator.clusterserviceversion.yaml
+      match: gcr.io/kubebuilder/kube-rbac-proxy
+    - path: deploy/openshift-downstream.yaml
+      match: gcr.io/kubebuilder/kube-rbac-proxy
+    - path: deploy/operator.yaml
+      match: gcr.io/kubebuilder/kube-rbac-proxy
+    - path: deploy/webhook-operator.yaml
+      match: gcr.io/kubebuilder/kube-rbac-proxy
+    - path: deploy/openshift-dev.yaml
+      match: gcr.io/kubebuilder/kube-rbac-proxy
+    - path: deploy/namespace-operator.yaml
+      match: gcr.io/kubebuilder/kube-rbac-proxy
 
   - name: gcb-docker-gcloud
     version: v20220617-174ad91c3a
diff --git a/deploy/helm/templates/deployment.yaml b/deploy/helm/templates/deployment.yaml
index 362511131..666f1151a 100644
--- a/deploy/helm/templates/deployment.yaml
+++ b/deploy/helm/templates/deployment.yaml
@@ -25,7 +25,7 @@ spec:
         - manager
         env:
         - name: RELATED_IMAGE_RBAC_PROXY
-          value: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1
+          value: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.0
         - name: RELATED_IMAGE_SELINUXD
           value: quay.io/security-profiles-operator/selinuxd
         - name: OPERATOR_NAMESPACE
diff --git a/deploy/kustomize-deployment/manager_deployment.yaml b/deploy/kustomize-deployment/manager_deployment.yaml
index 8b2b6ce1a..afa3d73fe 100644
--- a/deploy/kustomize-deployment/manager_deployment.yaml
+++ b/deploy/kustomize-deployment/manager_deployment.yaml
@@ -36,7 +36,7 @@ spec:
               cpu: 500m
           env:
             - name: RELATED_IMAGE_RBAC_PROXY
-              value: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1
+              value: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.0
             - name: RELATED_IMAGE_SELINUXD
               value: quay.io/security-profiles-operator/selinuxd
             - name: OPERATOR_NAMESPACE
diff --git a/deploy/namespace-operator.yaml b/deploy/namespace-operator.yaml
index 10ff10f5f..2f7f14b57 100644
--- a/deploy/namespace-operator.yaml
+++ b/deploy/namespace-operator.yaml
@@ -3023,7 +3023,7 @@ spec:
         - name: RESTRICT_TO_NAMESPACE
           value: NS_REPLACE
         - name: RELATED_IMAGE_RBAC_PROXY
-          value: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1
+          value: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.0
         - name: RELATED_IMAGE_SELINUXD
           value: quay.io/security-profiles-operator/selinuxd
         - name: OPERATOR_NAMESPACE
diff --git a/deploy/openshift-dev.yaml b/deploy/openshift-dev.yaml
index 5d61634cc..99198966c 100644
--- a/deploy/openshift-dev.yaml
+++ b/deploy/openshift-dev.yaml
@@ -3014,7 +3014,7 @@ spec:
         - manager
         env:
         - name: RELATED_IMAGE_RBAC_PROXY
-          value: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1
+          value: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.0
         - name: RELATED_IMAGE_SELINUXD
           value: quay.io/security-profiles-operator/selinuxd
         - name: OPERATOR_NAMESPACE
diff --git a/deploy/openshift-downstream.yaml b/deploy/openshift-downstream.yaml
index c56a8e663..dd5f25978 100644
--- a/deploy/openshift-downstream.yaml
+++ b/deploy/openshift-downstream.yaml
@@ -3034,7 +3034,7 @@ spec:
         - manager
         env:
         - name: RELATED_IMAGE_RBAC_PROXY
-          value: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1
+          value: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.0
         - name: RELATED_IMAGE_SELINUXD
           value: quay.io/security-profiles-operator/selinuxd
         - name: OPERATOR_NAMESPACE
diff --git a/deploy/operator.yaml b/deploy/operator.yaml
index 184fbf879..e889ea7b8 100644
--- a/deploy/operator.yaml
+++ b/deploy/operator.yaml
@@ -3021,7 +3021,7 @@ spec:
         - manager
         env:
         - name: RELATED_IMAGE_RBAC_PROXY
-          value: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1
+          value: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.0
         - name: RELATED_IMAGE_SELINUXD
           value: quay.io/security-profiles-operator/selinuxd
         - name: OPERATOR_NAMESPACE
diff --git a/deploy/webhook-operator.yaml b/deploy/webhook-operator.yaml
index cad32631d..d04cd502a 100644
--- a/deploy/webhook-operator.yaml
+++ b/deploy/webhook-operator.yaml
@@ -3021,7 +3021,7 @@ spec:
         - --webhook=false
         env:
         - name: RELATED_IMAGE_RBAC_PROXY
-          value: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1
+          value: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.0
         - name: RELATED_IMAGE_SELINUXD
           value: quay.io/security-profiles-operator/selinuxd
         - name: OPERATOR_NAMESPACE
diff --git a/hack/ci/Vagrantfile-ubuntu b/hack/ci/Vagrantfile-ubuntu
index 5a7c5afd7..8c0fc0817 100644
--- a/hack/ci/Vagrantfile-ubuntu
+++ b/hack/ci/Vagrantfile-ubuntu
@@ -33,7 +33,7 @@ Vagrant.configure("2") do |config|
       curl -fsSLo /etc/apt/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
       echo "deb [signed-by=/etc/apt/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" > /etc/apt/sources.list.d/kubernetes.list
       apt-get update
-      KUBERNETES_VERSION=1.26.2-00
+      KUBERNETES_VERSION=1.27.0-00
       apt-get install -y \
         build-essential \
         kubelet=$KUBERNETES_VERSION \
diff --git a/hack/ci/install-kubernetes.sh b/hack/ci/install-kubernetes.sh
index 2bbecafd7..f4f5c0456 100755
--- a/hack/ci/install-kubernetes.sh
+++ b/hack/ci/install-kubernetes.sh
@@ -19,7 +19,7 @@ ENVFILE=$(dirname "${BASH_SOURCE[0]}")/env-fedora.sh
 . "$ENVFILE"
 
 K8SPATH="$GOPATH/src/k8s.io"
-VERSION=v1.26.2
+VERSION=v1.27.0
 
 download-kubernetes() {
     export KUBERNETES_RELEASE=$VERSION
diff --git a/internal/pkg/manager/spod/bindata/spod.go b/internal/pkg/manager/spod/bindata/spod.go
index f1572c3c0..81bc00933 100644
--- a/internal/pkg/manager/spod/bindata/spod.go
+++ b/internal/pkg/manager/spod/bindata/spod.go
@@ -55,7 +55,7 @@ const (
 	SelinuxdPrivateDir                         = "/var/run/selinuxd"
 	SelinuxdSocketPath                         = SelinuxdPrivateDir + "/selinuxd.sock"
 	SelinuxdDBPath                             = SelinuxdPrivateDir + "/selinuxd.db"
-	MetricsImage                               = "gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1"
+	MetricsImage                               = "gcr.io/kubebuilder/kube-rbac-proxy:v0.14.0"
 	sysKernelDebugPath                         = "/sys/kernel/debug"
 	InitContainerIDNonRootenabler              = 0
 	InitContainerIDSelinuxSharedPoliciesCopier = 1


Test patch:
diff --git a/.github/workflows/olm_tests.yaml b/.github/workflows/olm_tests.yaml
index 546c0d79b..91acb08cc 100644
--- a/.github/workflows/olm_tests.yaml
+++ b/.github/workflows/olm_tests.yaml
@@ -6,7 +6,7 @@ on:
   pull_request:
 env:
   GO_VERSION: '1.20'
-  KIND_IMG_TAG: v1.26.2
+  KIND_IMG_TAG: v1.27.0
 
 permissions: {}
 
diff --git a/test/suite_test.go b/test/suite_test.go
index a910926e5..a654bc4fd 100644
--- a/test/suite_test.go
+++ b/test/suite_test.go
@@ -39,10 +39,10 @@ import (
 )
 
 const (
-	kindVersion      = "v0.17.0"
-	kindImage        = "kindest/node:v1.26.2@sha256:228590084990838f9f0418ee2c10d2648367286906358a97a47968fb151079c0"
-	kindDarwinSHA512 = "40ebb37b74b88d71854f73bc8d505e5cfb7ad14952657f0f9f46605632f2611277d09e8b00d05e95d10f913bd31d816131a3e26e7f34a6f2e50297d146f15050" //nolint:lll // full length SHA
-	kindLinuxSHA512  = "ae9b8ad431157c47bd034552e6b1656e46aa4033e96f25d5ff5d539308f17b2b003d25e02656f461d3eeed4e3ba0507b8523f6fa9180b59f37a5f083f62e5560" //nolint:lll // full length SHA
+	kindVersion      = "v0.18.0"
+	kindImage        = "kindest/node:v1.27.0@sha256:c6b22e613523b1af67d4bc8a0c38a4c3ea3a2b8fbc5b367ae36345c9cb844518"
+	kindDarwinSHA512 = "c5993d7257439dc8016f313b0126b76e4b61cc65cbd5183659755f7b660782cfb0621a31f94cf4565545c296461dfed203678d3ad81fe85a9835ecfb4f9f9b52" //nolint:lll // full length SHA
+	kindLinuxSHA512  = "73257bf705afa1cd095cd1469f4ec5259de1e5dc09745ed68b143e839151e9447133dd63417062bb9ea5fff557f75ec8c413dc4bceb4ffd54bf0fd4212667eb6" //nolint:lll // full length SHA
 )
 
 var (