Revendor to g/g 1.84.

Dockerfile

@@ -1,10 +1,10 @@
-FROM golang:1.22-alpine3.19 AS builder
+FROM golang:1.22-alpine3.20 AS builder
 RUN apk add make git gcc musl-dev
 WORKDIR /work
 COPY . .
 RUN make all
 
-FROM alpine:3.19 AS base
+FROM alpine:3.20 AS base
 WORKDIR /
 COPY charts /charts
 

Makefile

@@ -27,8 +27,8 @@ VERIFY                      := true
 LEADER_ELECTION             := false
 IGNORE_OPERATION_ANNOTATION := false
 
-GOLANGCI_LINT_VERSION := v1.48.0
-GO_VERSION := 1.21
+GOLANGCI_LINT_VERSION := v1.59.1
+GO_VERSION := 1.22
 
 ifeq ($(CI),true)
   DOCKER_TTY_ARG=""
@@ -66,8 +66,8 @@ revendor:
 	@chmod +x $(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/.ci/*
 
 .PHONY: generate
-generate: $(HELM)
-	@$(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/generate.sh ./charts/... ./cmd/... ./pkg/...
+generate: $(HELM) $(YQ)
+	@$(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/generate-sequential.sh ./charts/... ./cmd/... ./pkg/...
 
 .PHONE: generate-in-docker
 generate-in-docker: revendor $(HELM) $(YQ)

charts/os-metal/templates/deployment.yaml

@@ -31,7 +31,6 @@ spec:
         imagePullPolicy: {{ .Values.image.pullPolicy }}
         command:
         - /os-metal
-        - --leader-election-resource-lock={{ .Values.leaderElection.resourceLock }}
         - --max-concurrent-reconciles={{ .Values.controllers.concurrentSyncs }}
         - --heartbeat-namespace={{ .Release.Namespace }}
         - --heartbeat-renew-interval-seconds={{ .Values.controllers.heartbeat.renewIntervalSeconds }}

charts/os-metal/values.yaml

@@ -8,10 +8,7 @@ resources: {}
 controllers:
   concurrentSyncs: 5
   ignoreOperationAnnotation: false
-  heartbeat: 
+  heartbeat:
     renewIntervalSeconds: 30
 
-leaderElection:
-  resourceLock: leases
-
 disableControllers: []

cmd/app/app.go

@@ -31,7 +31,6 @@ import (
 	"github.com/gardener/gardener/extensions/pkg/util"
 	"github.com/metal-stack/os-metal-extension/pkg/generator"
 	"github.com/spf13/cobra"
-	"k8s.io/client-go/tools/leaderelection/resourcelock"
 	"sigs.k8s.io/controller-runtime/pkg/client"
 	runtimelog "sigs.k8s.io/controller-runtime/pkg/log"
 	"sigs.k8s.io/controller-runtime/pkg/manager"
@@ -53,10 +52,9 @@ func NewControllerCommand(ctx context.Context) *cobra.Command {
 		generalOpts = &controllercmd.GeneralOptions{}
 		restOpts    = &controllercmd.RESTOptions{}
 		mgrOpts     = &controllercmd.ManagerOptions{
-			LeaderElection:             true,
-			LeaderElectionResourceLock: resourcelock.LeasesResourceLock,
-			LeaderElectionID:           controllercmd.LeaderElectionNameID(ctrlName),
-			LeaderElectionNamespace:    os.Getenv("LEADER_ELECTION_NAMESPACE"),
+			LeaderElection:          true,
+			LeaderElectionID:        controllercmd.LeaderElectionNameID(ctrlName),
+			LeaderElectionNamespace: os.Getenv("LEADER_ELECTION_NAMESPACE"),
 		}
 		ctrlOpts = &controllercmd.ControllerOptions{
 			MaxConcurrentReconciles: 5,
@@ -100,8 +98,12 @@ func NewControllerCommand(ctx context.Context) *cobra.Command {
 			}, restOpts.Completed().Config)
 
 			completedMgrOpts := mgrOpts.Completed().Options()
-			completedMgrOpts.ClientDisableCacheFor = []client.Object{
-				&corev1.Secret{}, // applied for OperatingSystemConfig Secret references
+			completedMgrOpts.Client = client.Options{
+				Cache: &client.CacheOptions{
+					DisableFor: []client.Object{
+						&corev1.Secret{}, // applied for OperatingSystemConfig Secret references
+					},
+				},
 			}
 
 			mgr, err := manager.New(restOpts.Completed().Config, completedMgrOpts)

example/controller-registration.yaml

@@ -5,7 +5,7 @@ metadata:
   name: os-metal
 type: helm
 providerConfig:
-  chart: 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
+  chart: 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
   values:
     image:
       tag: 0.0.1
@@ -14,6 +14,8 @@ apiVersion: core.gardener.cloud/v1beta1
 kind: ControllerRegistration
 metadata:
   name: os-metal
+  annotations:
+    security.gardener.cloud/pod-security-enforce: baseline
 spec:
   deployment:
     deploymentRefs:

go.mod

@@ -5,32 +5,32 @@ go 1.22
 require (
 	github.com/ahmetb/gen-crd-api-reference-docs v0.3.0
 	github.com/flatcar/container-linux-config-transpiler v0.9.4
-	github.com/gardener/gardener v1.76.4
+	github.com/gardener/gardener v1.84.3
 	github.com/go-logr/logr v1.4.1
 	github.com/golang/mock v1.6.0
 	github.com/metal-stack/gardener-extension-provider-metal v0.22.4
 	github.com/onsi/ginkgo v1.16.5
-	github.com/spf13/cobra v1.8.0
-	k8s.io/api v0.26.10
-	k8s.io/apimachinery v0.28.2
-	k8s.io/client-go v11.0.1-0.20190409021438-1a26190bd76a+incompatible
-	k8s.io/code-generator v0.26.10
-	k8s.io/component-base v0.26.10
+	github.com/spf13/cobra v1.8.1
+	k8s.io/api v0.28.3
+	k8s.io/apimachinery v0.28.3
+	k8s.io/code-generator v0.28.3
+	k8s.io/component-base v0.28.3
 	k8s.io/utils v0.0.0-20230505201702-9f6742963106
-	sigs.k8s.io/controller-runtime v0.14.6
+	sigs.k8s.io/controller-runtime v0.16.3
 )
 
 require (
 	github.com/BurntSushi/toml v1.3.2 // indirect
 	github.com/Masterminds/goutils v1.1.1 // indirect
 	github.com/Masterminds/semver v1.5.0 // indirect
+	github.com/Masterminds/semver/v3 v3.2.1 // indirect
 	github.com/Masterminds/sprig v2.22.0+incompatible // indirect
 	github.com/ajeddeloh/go-json v0.0.0-20200220154158-5ae607161559 // indirect
 	github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/bronze1man/yaml2json v0.0.0-20211227013850-8972abeaea25 // indirect
 	github.com/cespare/xxhash/v2 v2.2.0 // indirect
-	github.com/coreos/go-semver v0.3.0 // indirect
+	github.com/coreos/go-semver v0.3.1 // indirect
 	github.com/coreos/go-systemd v0.0.0-20191104093116-d3cd4ed1dbcf // indirect
 	github.com/cyphar/filepath-securejoin v0.2.4 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
@@ -40,9 +40,9 @@ require (
 	github.com/flatcar/ignition v0.36.2 // indirect
 	github.com/fluent/fluent-operator/v2 v2.2.0 // indirect
 	github.com/fsnotify/fsnotify v1.7.0 // indirect
-	github.com/gardener/etcd-druid v0.18.4 // indirect
-	github.com/gardener/hvpa-controller v0.3.1 // indirect
-	github.com/gardener/machine-controller-manager v0.49.3 // indirect
+	github.com/gardener/etcd-druid v0.20.1 // indirect
+	github.com/gardener/hvpa-controller/api v0.5.0 // indirect
+	github.com/gardener/machine-controller-manager v0.50.0 // indirect
 	github.com/ghodss/yaml v1.0.0 // indirect
 	github.com/go-logr/zapr v1.3.0 // indirect
 	github.com/go-openapi/errors v0.21.0 // indirect
@@ -55,7 +55,6 @@ require (
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/protobuf v1.5.4 // indirect
-	github.com/google/gnostic v0.7.0 // indirect
 	github.com/google/gnostic-models v0.6.9-0.20230804172637-c7be7c783f49 // indirect
 	github.com/google/go-cmp v0.6.0 // indirect
 	github.com/google/gofuzz v1.2.0 // indirect
@@ -66,6 +65,7 @@ require (
 	github.com/huandu/xstrings v1.4.0 // indirect
 	github.com/imdario/mergo v0.3.16 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
+	github.com/ironcore-dev/vgopath v0.1.3 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/kubernetes-csi/external-snapshotter/client/v4 v4.2.0 // indirect
@@ -89,10 +89,12 @@ require (
 	github.com/spf13/afero v1.11.0 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/vincent-petithory/dataurl v1.0.0 // indirect
+	go.uber.org/mock v0.2.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.26.0 // indirect
 	go4.org v0.0.0-20230225012048-214862532bf5 // indirect
 	golang.org/x/crypto v0.21.0 // indirect
+	golang.org/x/exp v0.0.0-20230321023759-10a507213a29 // indirect
 	golang.org/x/mod v0.16.0 // indirect
 	golang.org/x/net v0.22.0 // indirect
 	golang.org/x/oauth2 v0.18.0 // indirect
@@ -111,25 +113,26 @@ require (
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	istio.io/api v0.0.0-20230217221049-9d422bf48675 // indirect
 	istio.io/client-go v1.17.1 // indirect
-	k8s.io/apiextensions-apiserver v0.26.10 // indirect
+	k8s.io/apiextensions-apiserver v0.28.3 // indirect
 	k8s.io/autoscaler v0.0.0-20190805135949-100e91ba756e // indirect
+	k8s.io/client-go v11.0.1-0.20190409021438-1a26190bd76a+incompatible // indirect
 	k8s.io/gengo v0.0.0-20230829151522-9cce18d56c01 // indirect
-	k8s.io/helm v2.16.1+incompatible // indirect
+	k8s.io/helm v2.17.0+incompatible // indirect
 	k8s.io/klog v1.0.0 // indirect
 	k8s.io/klog/v2 v2.110.1 // indirect
-	k8s.io/kube-aggregator v0.26.4 // indirect
+	k8s.io/kube-aggregator v0.28.3 // indirect
 	k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 // indirect
-	k8s.io/kubelet v0.26.4 // indirect
-	k8s.io/metrics v0.26.4 // indirect
-	sigs.k8s.io/controller-runtime/tools/setup-envtest v0.0.0-20221212190805-d4f1e822ca11 // indirect
-	sigs.k8s.io/controller-tools v0.11.3 // indirect
+	k8s.io/kubelet v0.28.3 // indirect
+	k8s.io/metrics v0.28.3 // indirect
+	sigs.k8s.io/controller-runtime/tools/setup-envtest v0.0.0-20231015215740-bf15e44028f9 // indirect
+	sigs.k8s.io/controller-tools v0.13.0 // indirect
 	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
 	sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
 	sigs.k8s.io/yaml v1.4.0 // indirect
 )
 
 replace (
-	k8s.io/client-go => k8s.io/client-go v0.26.3
+	k8s.io/client-go => k8s.io/client-go v0.28.3
 	// for some reason, newer gengo versions will fail with "hit an unsupported type"
 	k8s.io/gengo => k8s.io/gengo v0.0.0-20210813121822-485abfe95c7c // indirect
 )