STOR-2392: Rebase to upstream v1.14.0 for OCP 4.20

CHANGELOG/CHANGELOG-1.13.md

@@ -1,28 +1,3 @@
-# Release notes for 1.13.2
-
-[Documentation](https://kubernetes-csi.github.io)
-
-## Changes by Kind
-
-### Feature
-
-- Serve additional leader election, work queue, process, and Go runtime metrics ([#475](https://github.com/kubernetes-csi/external-resizer/pull/475), [@AndrewSirenko](https://github.com/AndrewSirenko))
-
-### Bug fix
-
-- Fix panic when attempting to modify non-CSI volumes ([#471](https://github.com/kubernetes-csi/external-resizer/pull/471), [@AndrewSirenko](https://github.com/AndrewSirenko))
-
-## Dependencies
-
-### Added
-_Nothing has changed._
-
-### Changed
-- github.com/kubernetes-csi/csi-lib-utils: [v0.20.0 → v0.21.0](https://github.com/kubernetes-csi/csi-lib-utils/compare/v0.20.0...v0.21.0)
-
-### Removed
-_Nothing has changed._
-
 # Release notes for 1.13.0
 
 [Documentation](https://kubernetes-csi.github.io)

CHANGELOG/CHANGELOG-1.14.md

@@ -0,0 +1,79 @@
+## Release notes for 1.14.0
+
+[Documentation](https://kubernetes-csi.github.io)
+
+# Changelog since 1.13.0
+
+### Feature
+
+- Add a new `--automaxprocs` flag to set the `GOMAXPROCS` environment variable to match the configured Linux container CPU quota. (#499, @nixpanic)
+- Serve additional leader election, work queue, process, and Go runtime metrics (#475, @AndrewSirenko)
+
+### Bug or Regression
+
+- Add VolumeModifyFailed PVC Event For Nonexistent VAC (#500, @sunnylovestiramisu)
+- Fix: CVE-2025-22872 (#495, @andyzhangx)
+- Fix panic when attempting to modify non-CSI volumes (#471, @AndrewSirenko)
+- Upgrade csi-translation-lib to fix in-tree to CSI migration for Portworx volumes, in clusters where Portworx security feature is enabled (it's a Portworx feature, not Kubernetes feature). It required secret data from the secret mentioned in-tree SC, to be passed in CSI ControllerExpandVolume request which was not happening before this fix. (#480, @gohilankit)
+
+## Dependencies
+- Update kubernetes dependencies to v1.33.0 (#501, @Aishwarya-Hebbar)
+
+### Added
+- github.com/prashantv/gostub: [v1.1.0](https://github.com/prashantv/gostub/tree/v1.1.0)
+- go.uber.org/automaxprocs: v1.6.0
+- gopkg.in/go-jose/go-jose.v2: v2.6.3
+- sigs.k8s.io/randfill: v1.0.0
+
+### Changed
+- cel.dev/expr: v0.18.0 → v0.19.1
+- github.com/coreos/go-oidc: [v2.2.1+incompatible → v2.3.0+incompatible](https://github.com/coreos/go-oidc/compare/v2.2.1...v2.3.0)
+- github.com/golang-jwt/jwt/v4: [v4.5.0 → v4.5.2](https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.2)
+- github.com/google/btree: [v1.0.1 → v1.1.3](https://github.com/google/btree/compare/v1.0.1...v1.1.3)
+- github.com/google/cel-go: [v0.22.0 → v0.23.2](https://github.com/google/cel-go/compare/v0.22.0...v0.23.2)
+- github.com/google/go-cmp: [v0.6.0 → v0.7.0](https://github.com/google/go-cmp/compare/v0.6.0...v0.7.0)
+- github.com/google/gofuzz: [v1.2.0 → v1.0.0](https://github.com/google/gofuzz/compare/v1.2.0...v1.0.0)
+- github.com/gorilla/websocket: [v1.5.0 → e064f32](https://github.com/gorilla/websocket/compare/v1.5.0...e064f32)
+- github.com/grpc-ecosystem/grpc-gateway/v2: [v2.20.0 → v2.24.0](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.20.0...v2.24.0)
+- github.com/klauspost/compress: [v1.17.11 → v1.18.0](https://github.com/klauspost/compress/compare/v1.17.11...v1.18.0)
+- github.com/kubernetes-csi/csi-lib-utils: [v0.20.0 → v0.22.0](https://github.com/kubernetes-csi/csi-lib-utils/compare/v0.20.0...v0.22.0)
+- github.com/prometheus/client_golang: [v1.20.5 → v1.22.0](https://github.com/prometheus/client_golang/compare/v1.20.5...v1.22.0)
+- github.com/prometheus/common: [v0.61.0 → v0.62.0](https://github.com/prometheus/common/compare/v0.61.0...v0.62.0)
+- github.com/stretchr/objx: [v0.1.0 → v0.5.2](https://github.com/stretchr/objx/compare/v0.1.0...v0.5.2)
+- go.etcd.io/etcd/api/v3: v3.5.16 → v3.5.21
+- go.etcd.io/etcd/client/pkg/v3: v3.5.16 → v3.5.21
+- go.etcd.io/etcd/client/v2: v2.305.16 → v2.305.21
+- go.etcd.io/etcd/client/v3: v3.5.16 → v3.5.21
+- go.etcd.io/etcd/pkg/v3: v3.5.16 → v3.5.21
+- go.etcd.io/etcd/raft/v3: v3.5.16 → v3.5.21
+- go.etcd.io/etcd/server/v3: v3.5.16 → v3.5.21
+- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.53.0 → v0.58.0
+- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.27.0 → v1.33.0
+- go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.28.0 → v1.33.0
+- go.opentelemetry.io/otel/sdk: v1.31.0 → v1.33.0
+- go.opentelemetry.io/proto/otlp: v1.3.1 → v1.4.0
+- golang.org/x/crypto: v0.32.0 → v0.37.0
+- golang.org/x/net: v0.34.0 → v0.39.0
+- golang.org/x/oauth2: v0.25.0 → v0.27.0
+- golang.org/x/sync: v0.10.0 → v0.13.0
+- golang.org/x/sys: v0.29.0 → v0.32.0
+- golang.org/x/term: v0.28.0 → v0.31.0
+- golang.org/x/text: v0.21.0 → v0.24.0
+- google.golang.org/genproto/googleapis/api: 796eee8 → e6fa225
+- google.golang.org/protobuf: v1.36.2 → v1.36.5
+- k8s.io/api: v0.32.0 → v0.33.0
+- k8s.io/apimachinery: v0.32.0 → v0.33.0
+- k8s.io/apiserver: v0.32.0 → v0.33.0
+- k8s.io/client-go: v0.32.0 → v0.33.0
+- k8s.io/component-base: v0.32.0 → v0.33.0
+- k8s.io/csi-translation-lib: v0.32.0 → v0.33.0
+- k8s.io/kms: v0.32.0 → v0.33.0
+- k8s.io/kube-openapi: 2c72e55 → c8a335a
+- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.31.0 → v0.31.2
+- sigs.k8s.io/structured-merge-diff/v4: v4.5.0 → v4.6.0
+
+### Removed
+- github.com/asaskevich/govalidator: [f61b66f](https://github.com/asaskevich/govalidator/tree/f61b66f)
+- github.com/go-kit/log: [v0.2.1](https://github.com/go-kit/log/tree/v0.2.1)
+- github.com/go-logfmt/logfmt: [v0.5.1](https://github.com/go-logfmt/logfmt/tree/v0.5.1)
+- gopkg.in/square/go-jose.v2: v2.6.0

README.md

@@ -96,8 +96,12 @@ Note that the external-resizer does not scale with more replicas. Only one exter
 
 * `--metrics-address`: (deprecated) The TCP network address where the prometheus metrics endpoint will run (example: `:8080` which corresponds to port 8080 on local host). The default is empty string, which means metrics endpoint is disabled.
 
+* `--automaxprocs`: Automatically set the `GOMAXPROCS` environment variable to match the configured Linux container CPU quota. Defaults to false.
+
 * `--version`: Prints current external-resizer version and quits.
 
+* `--automaxprocs`:  flag to set the `GOMAXPROCS` environment variable to match the configured Linux container CPU quota.
+
 * All glog / klog arguments are supported, such as `-v <log level>` or `-alsologtostderr`.
 
 ### HTTP endpoint

cmd/csi-resizer/main.go

@@ -34,6 +34,7 @@ import (
 	"k8s.io/client-go/util/workqueue"
 
 	"github.com/kubernetes-csi/csi-lib-utils/leaderelection"
+	"github.com/kubernetes-csi/csi-lib-utils/standardflags"
 	"github.com/kubernetes-csi/external-resizer/pkg/controller"
 	"github.com/kubernetes-csi/external-resizer/pkg/features"
 	"github.com/kubernetes-csi/external-resizer/pkg/modifier"
@@ -101,6 +102,7 @@ func main() {
 	c := logsapi.NewLoggingConfiguration()
 	logsapi.AddGoFlags(c, flag.CommandLine)
 	logs.InitLogs()
+	standardflags.AddAutomaxprocs(klog.Infof)
 	flag.Parse()
 	if err := logsapi.ValidateAndApply(c, fg); err != nil {
 		klog.ErrorS(err, "LoggingConfiguration is invalid")

go.mod

@@ -1,21 +1,22 @@
 module github.com/kubernetes-csi/external-resizer
 
-go 1.23.1
+go 1.24.0
+
+toolchain go1.24.3
 
 require (
 	github.com/container-storage-interface/spec v1.11.0
-	github.com/google/go-cmp v0.6.0
-	github.com/google/gofuzz v1.2.0 // indirect
-	github.com/kubernetes-csi/csi-lib-utils v0.21.0
-	golang.org/x/oauth2 v0.25.0 // indirect
-	golang.org/x/term v0.28.0 // indirect
+	github.com/google/go-cmp v0.7.0
+	github.com/kubernetes-csi/csi-lib-utils v0.22.0
+	golang.org/x/oauth2 v0.27.0 // indirect
+	golang.org/x/term v0.31.0 // indirect
 	google.golang.org/grpc v1.69.2
-	k8s.io/api v0.32.0
-	k8s.io/apimachinery v0.32.0
-	k8s.io/apiserver v0.32.0
-	k8s.io/client-go v1.5.2
-	k8s.io/component-base v0.32.0
-	k8s.io/csi-translation-lib v0.32.0
+	k8s.io/api v0.33.1
+	k8s.io/apimachinery v0.33.1
+	k8s.io/apiserver v0.33.0
+	k8s.io/client-go v0.33.1
+	k8s.io/component-base v0.33.1
+	k8s.io/csi-translation-lib v0.33.0
 	k8s.io/klog/v2 v2.130.1
 )
 
@@ -33,21 +34,19 @@ require (
 	github.com/go-openapi/jsonreference v0.21.0 // indirect
 	github.com/go-openapi/swag v0.23.0 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
-	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/google/gnostic-models v0.6.9 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
-	github.com/klauspost/compress v1.17.11 // indirect
 	github.com/mailru/easyjson v0.9.0 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
-	github.com/prometheus/client_golang v1.20.5 // indirect
+	github.com/prometheus/client_golang v1.22.0 // indirect
 	github.com/prometheus/client_model v0.6.1 // indirect
-	github.com/prometheus/common v0.61.0 // indirect
+	github.com/prometheus/common v0.62.0 // indirect
 	github.com/prometheus/procfs v0.15.1 // indirect
 	github.com/spf13/cobra v1.8.1 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
@@ -57,34 +56,36 @@ require (
 	go.opentelemetry.io/otel v1.33.0 // indirect
 	go.opentelemetry.io/otel/metric v1.33.0 // indirect
 	go.opentelemetry.io/otel/trace v1.33.0 // indirect
+	go.uber.org/automaxprocs v1.6.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.0 // indirect
-	golang.org/x/net v0.34.0 // indirect
-	golang.org/x/sys v0.29.0 // indirect
-	golang.org/x/text v0.21.0 // indirect
+	golang.org/x/net v0.39.0 // indirect
+	golang.org/x/sys v0.32.0 // indirect
+	golang.org/x/text v0.24.0 // indirect
 	golang.org/x/time v0.9.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250106144421-5f5ef82da422 // indirect
-	google.golang.org/protobuf v1.36.2 // indirect
+	google.golang.org/protobuf v1.36.5 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/kube-openapi v0.0.0-20241212222426-2c72e554b1e7 // indirect
+	k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect
 	k8s.io/utils v0.0.0-20241210054802-24370beab758 // indirect
 	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
-	sigs.k8s.io/structured-merge-diff/v4 v4.5.0 // indirect
+	sigs.k8s.io/randfill v1.0.0 // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.6.0 // indirect
 	sigs.k8s.io/yaml v1.4.0 // indirect
 )
 
-replace k8s.io/api => k8s.io/api v0.32.0
+replace k8s.io/api => k8s.io/api v0.33.0
 
-replace k8s.io/apimachinery => k8s.io/apimachinery v0.32.0
+replace k8s.io/apimachinery => k8s.io/apimachinery v0.33.0
 
-replace k8s.io/apiserver => k8s.io/apiserver v0.32.0
+replace k8s.io/apiserver => k8s.io/apiserver v0.33.0
 
-replace k8s.io/client-go => k8s.io/client-go v0.32.0
+replace k8s.io/client-go => k8s.io/client-go v0.33.0
 
-replace k8s.io/component-base => k8s.io/component-base v0.32.0
+replace k8s.io/component-base => k8s.io/component-base v0.33.0
 
-replace k8s.io/csi-translation-lib => k8s.io/csi-translation-lib v0.32.0
+replace k8s.io/csi-translation-lib => k8s.io/csi-translation-lib v0.33.0
 
-replace k8s.io/kms => k8s.io/kms v0.32.0
+replace k8s.io/kms => k8s.io/kms v0.33.0