Merge pull request #940 from pohly/release-0.9-backport

Prepare v0.9.1
intel · Apr 28, 2021 · e6bfb35 · e6bfb35
2 parents 9dc7cc1 + d949098
commit e6bfb35
Show file tree

Hide file tree

Showing 64 changed files with 558 additions and 433 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -5,7 +5,7 @@ ARG LINUX_BASE=debian:buster-slim
 FROM ${LINUX_BASE} AS build
 ARG APT_GET="env DEBIAN_FRONTEND=noninteractive apt-get"
 
-ARG GO_VERSION="1.15.2"
+ARG GO_VERSION="1.16.1"
 
 # CACHEBUST is set by the CI when building releases to ensure that apt-get really gets
 # run instead of just using some older, cached result.

diff --git a/Makefile b/Makefile
@@ -44,7 +44,7 @@ NO_PROXY=$(shell echo "$${NO_PROXY:-$${no_proxy}},$$(ip addr | grep inet6 | grep
 export HTTP_PROXY HTTPS_PROXY NO_PROXY
 
 REGISTRY_NAME?=$(shell . test/test-config.sh && echo $${TEST_BUILD_PMEM_REGISTRY})
-IMAGE_VERSION?=v0.9.0
+IMAGE_VERSION?=v0.9.1
 IMAGE_TAG=$(REGISTRY_NAME)/pmem-csi-driver$*:$(IMAGE_VERSION)
 # Pass proxy config via --build-arg only if these are set,
 # enabling proxy config other way, like ~/.docker/config.json

diff --git a/deploy/bindata_generated.go b/deploy/bindata_generated.go
diff --git a/deploy/common/pmem-app-cache.yaml b/deploy/common/pmem-app-cache.yaml
@@ -12,6 +12,12 @@ spec:
       labels:
         app: my-csi-app
     spec:
+      # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+      # This security context causes permissions of volume mounts
+      # to be adapted accordingly, see
+      # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+      securityContext:
+        fsGroup: 1000
       # make sure that no two Pods run on same node
       affinity:
         podAntiAffinity:
@@ -24,7 +30,7 @@ spec:
             topologyKey: "kubernetes.io/hostname"
       containers:
       - name: my-frontend
-        image: intel/pmem-csi-driver-test:v0.9.0
+        image: intel/pmem-csi-driver-test:v0.9.1
         command: [ "/bin/sh" ]
         args: [ "-c", "touch /data/$(POD_NAME); sleep 100000" ]
         env:

diff --git a/deploy/common/pmem-app-ephemeral.yaml b/deploy/common/pmem-app-ephemeral.yaml
@@ -5,9 +5,15 @@ apiVersion: v1
 metadata:
   name: my-csi-app-inline-volume
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"

diff --git a/deploy/common/pmem-app-generic-ephemeral.yaml b/deploy/common/pmem-app-generic-ephemeral.yaml
@@ -6,9 +6,15 @@ apiVersion: v1
 metadata:
   name: my-csi-app-inline-volume
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"

diff --git a/deploy/common/pmem-app-late-binding.yaml b/deploy/common/pmem-app-late-binding.yaml
@@ -3,9 +3,15 @@ apiVersion: v1
 metadata:
   name: my-csi-app
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"

diff --git a/deploy/common/pmem-app.yaml b/deploy/common/pmem-app.yaml
@@ -3,9 +3,15 @@ apiVersion: v1
 metadata:
   name: my-csi-app-1
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"
@@ -20,9 +26,15 @@ apiVersion: v1
 metadata:
   name: my-csi-app-2
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"

diff --git a/deploy/common/pmem-kata-app-ephemeral.yaml b/deploy/common/pmem-kata-app-ephemeral.yaml
@@ -5,13 +5,19 @@ metadata:
   labels:
     io.katacontainers.config.hypervisor.memory_offset: "2147483648" # 2Gi, must be at least as large as the PMEM volume
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   # see https://github.com/kata-containers/packaging/tree/1.11.0-rc0/kata-deploy#run-a-sample-workload
   runtimeClassName: kata-qemu
   nodeSelector:
     katacontainers.io/kata-runtime: "true"
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"

diff --git a/deploy/common/pmem-kata-app.yaml b/deploy/common/pmem-kata-app.yaml
@@ -5,13 +5,19 @@ metadata:
   labels:
     io.katacontainers.config.hypervisor.memory_offset: "2147483648" # 2Gi, must be at least as large as the PMEM volume
 spec:
+  # The 'pmem-csi-driver-test' container runs apps as user/group 1000/1000.
+  # This security context causes permissions of volume mounts
+  # to be adapted accordingly, see
+  # https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+  securityContext:
+    fsGroup: 1000
   # see https://github.com/kata-containers/packaging/tree/1.11.0-rc0/kata-deploy#run-a-sample-workload
   runtimeClassName: kata-qemu
   nodeSelector:
     katacontainers.io/kata-runtime: "true"
   containers:
     - name: my-frontend
-      image: intel/pmem-csi-driver-test:v0.9.0
+      image: intel/pmem-csi-driver-test:v0.9.1
       command: [ "sleep", "100000" ]
       volumeMounts:
       - mountPath: "/data"

diff --git a/deploy/kubernetes-1.17/direct/pmem-csi.yaml b/deploy/kubernetes-1.17/direct/pmem-csi.yaml
@@ -358,7 +358,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: intel/pmem-csi-driver:v0.9.0
+        image: intel/pmem-csi-driver:v0.9.1
         imagePullPolicy: IfNotPresent
         name: pmem-driver
         ports:
@@ -434,7 +434,7 @@ spec:
           value: pmem-csi.intel.com
         - name: TERMINATION_LOG_PATH
           value: /tmp/termination-log
-        image: intel/pmem-csi-driver:v0.9.0
+        image: intel/pmem-csi-driver:v0.9.1
         imagePullPolicy: IfNotPresent
         name: pmem-driver
         ports:
@@ -466,10 +466,11 @@ spec:
         - -v=3
         - --kubelet-registration-path=/var/lib/kubelet/plugins/$(PMEM_CSI_DRIVER_NAME)/csi.sock
         - --csi-address=/csi/csi.sock
+        - --timeout=10s
         env:
         - name: PMEM_CSI_DRIVER_NAME
           value: pmem-csi.intel.com
-        image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v1.2.0
+        image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.1.0
         imagePullPolicy: IfNotPresent
         name: driver-registrar
         securityContext:

diff --git a/deploy/kubernetes-1.17/direct/testing/pmem-csi.yaml b/deploy/kubernetes-1.17/direct/testing/pmem-csi.yaml
@@ -376,7 +376,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: intel/pmem-csi-driver-test:v0.9.0
+        image: intel/pmem-csi-driver-test:v0.9.1
         imagePullPolicy: IfNotPresent
         name: pmem-driver
         ports:
@@ -396,7 +396,7 @@ spec:
         - -R
         - pmem-csi:pmem-csi
         - /var/lib/pmem-csi-coverage
-        image: intel/pmem-csi-driver-test:v0.9.0
+        image: intel/pmem-csi-driver-test:v0.9.1
         imagePullPolicy: Always
         name: coverage-init
         securityContext:
@@ -474,7 +474,7 @@ spec:
           value: pmem-csi.intel.com
         - name: TERMINATION_LOG_PATH
           value: /tmp/termination-log
-        image: intel/pmem-csi-driver-test:v0.9.0
+        image: intel/pmem-csi-driver-test:v0.9.1
         imagePullPolicy: IfNotPresent
         name: pmem-driver
         ports:
@@ -508,11 +508,12 @@ spec:
         - -v=3
         - --kubelet-registration-path=/var/lib/kubelet/plugins/$(PMEM_CSI_DRIVER_NAME)/csi.sock
         - --csi-address=/csi/csi.sock
+        - --timeout=10s
         - -v=5
         env:
         - name: PMEM_CSI_DRIVER_NAME
           value: pmem-csi.intel.com
-        image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v1.2.0
+        image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.1.0
         imagePullPolicy: IfNotPresent
         name: driver-registrar
         securityContext:

diff --git a/deploy/kubernetes-1.17/lvm/pmem-csi.yaml b/deploy/kubernetes-1.17/lvm/pmem-csi.yaml
@@ -358,7 +358,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: intel/pmem-csi-driver:v0.9.0
+        image: intel/pmem-csi-driver:v0.9.1
         imagePullPolicy: IfNotPresent
         name: pmem-driver
         ports:
@@ -434,7 +434,7 @@ spec:
           value: pmem-csi.intel.com
         - name: TERMINATION_LOG_PATH
           value: /tmp/termination-log
-        image: intel/pmem-csi-driver:v0.9.0
+        image: intel/pmem-csi-driver:v0.9.1
         imagePullPolicy: IfNotPresent
         name: pmem-driver
         ports:
@@ -466,10 +466,11 @@ spec:
         - -v=3
         - --kubelet-registration-path=/var/lib/kubelet/plugins/$(PMEM_CSI_DRIVER_NAME)/csi.sock
         - --csi-address=/csi/csi.sock
+        - --timeout=10s
         env:
         - name: PMEM_CSI_DRIVER_NAME
           value: pmem-csi.intel.com
-        image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v1.2.0
+        image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.1.0
         imagePullPolicy: IfNotPresent
         name: driver-registrar
         securityContext:

diff --git a/deploy/kubernetes-1.17/lvm/testing/pmem-csi.yaml b/deploy/kubernetes-1.17/lvm/testing/pmem-csi.yaml
@@ -376,7 +376,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: intel/pmem-csi-driver-test:v0.9.0
+        image: intel/pmem-csi-driver-test:v0.9.1
         imagePullPolicy: IfNotPresent
         name: pmem-driver
         ports:
@@ -396,7 +396,7 @@ spec:
         - -R
         - pmem-csi:pmem-csi
         - /var/lib/pmem-csi-coverage
-        image: intel/pmem-csi-driver-test:v0.9.0
+        image: intel/pmem-csi-driver-test:v0.9.1
         imagePullPolicy: Always
         name: coverage-init
         securityContext:
@@ -474,7 +474,7 @@ spec:
           value: pmem-csi.intel.com
         - name: TERMINATION_LOG_PATH
           value: /tmp/termination-log
-        image: intel/pmem-csi-driver-test:v0.9.0
+        image: intel/pmem-csi-driver-test:v0.9.1
         imagePullPolicy: IfNotPresent
         name: pmem-driver
         ports:
@@ -508,11 +508,12 @@ spec:
         - -v=3
         - --kubelet-registration-path=/var/lib/kubelet/plugins/$(PMEM_CSI_DRIVER_NAME)/csi.sock
         - --csi-address=/csi/csi.sock
+        - --timeout=10s
         - -v=5
         env:
         - name: PMEM_CSI_DRIVER_NAME
           value: pmem-csi.intel.com
-        image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v1.2.0
+        image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.1.0
         imagePullPolicy: IfNotPresent
         name: driver-registrar
         securityContext:

diff --git a/deploy/kubernetes-1.17/pmem-csi-direct-testing.yaml b/deploy/kubernetes-1.17/pmem-csi-direct-testing.yaml
@@ -376,7 +376,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: intel/pmem-csi-driver-test:v0.9.0
+        image: intel/pmem-csi-driver-test:v0.9.1
         imagePullPolicy: IfNotPresent
         name: pmem-driver
         ports:
@@ -396,7 +396,7 @@ spec:
         - -R
         - pmem-csi:pmem-csi
         - /var/lib/pmem-csi-coverage
-        image: intel/pmem-csi-driver-test:v0.9.0
+        image: intel/pmem-csi-driver-test:v0.9.1
         imagePullPolicy: Always
         name: coverage-init
         securityContext:
@@ -474,7 +474,7 @@ spec:
           value: pmem-csi.intel.com
         - name: TERMINATION_LOG_PATH
           value: /tmp/termination-log
-        image: intel/pmem-csi-driver-test:v0.9.0
+        image: intel/pmem-csi-driver-test:v0.9.1
         imagePullPolicy: IfNotPresent
         name: pmem-driver
         ports:
@@ -508,11 +508,12 @@ spec:
         - -v=3
         - --kubelet-registration-path=/var/lib/kubelet/plugins/$(PMEM_CSI_DRIVER_NAME)/csi.sock
         - --csi-address=/csi/csi.sock
+        - --timeout=10s
         - -v=5
         env:
         - name: PMEM_CSI_DRIVER_NAME
           value: pmem-csi.intel.com
-        image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v1.2.0
+        image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.1.0
         imagePullPolicy: IfNotPresent
         name: driver-registrar
         securityContext:

diff --git a/deploy/kubernetes-1.17/pmem-csi-direct.yaml b/deploy/kubernetes-1.17/pmem-csi-direct.yaml
@@ -358,7 +358,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: intel/pmem-csi-driver:v0.9.0
+        image: intel/pmem-csi-driver:v0.9.1
         imagePullPolicy: IfNotPresent
         name: pmem-driver
         ports:
@@ -434,7 +434,7 @@ spec:
           value: pmem-csi.intel.com
         - name: TERMINATION_LOG_PATH
           value: /tmp/termination-log
-        image: intel/pmem-csi-driver:v0.9.0
+        image: intel/pmem-csi-driver:v0.9.1
         imagePullPolicy: IfNotPresent
         name: pmem-driver
         ports:
@@ -466,10 +466,11 @@ spec:
         - -v=3
         - --kubelet-registration-path=/var/lib/kubelet/plugins/$(PMEM_CSI_DRIVER_NAME)/csi.sock
         - --csi-address=/csi/csi.sock
+        - --timeout=10s
         env:
         - name: PMEM_CSI_DRIVER_NAME
           value: pmem-csi.intel.com
-        image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v1.2.0
+        image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.1.0
         imagePullPolicy: IfNotPresent
         name: driver-registrar
         securityContext: