Revendor to g/g v1.80.

Dockerfile

@@ -1,11 +1,11 @@
-FROM golang:1.21 AS builder
+FROM golang:1.22 AS builder
 
 WORKDIR /go/src/github.com/fi-ts/gardener-extension-authn
 COPY . .
 RUN make install \
  && strip /go/bin/gardener-extension-authn
 
-FROM alpine:3.18
+FROM alpine:3.20
 WORKDIR /
 COPY charts /charts
 COPY --from=builder /go/bin/gardener-extension-authn /gardener-extension-authn

Dockerfile.dev

@@ -1,3 +1,3 @@
-FROM alpine:3.18
+FROM alpine:3.20
 COPY bin/gardener-extension-authn /gardener-extension-authn
 CMD ["/gardener-extension-authn"]

Makefile

@@ -11,7 +11,7 @@ IGNORE_OPERATION_ANNOTATION := false
 WEBHOOK_CONFIG_URL          := localhost
 
 GOLANGCI_LINT_VERSION := v1.54.2
-GO_VERSION := 1.21
+GO_VERSION := 1.22
 
 ifeq ($(CI),true)
   DOCKER_TTY_ARG=""
@@ -75,16 +75,14 @@ check-generate:
 
 .PHONY: generate
 generate: $(HELM)
-	@$(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/generate.sh ./charts/... ./cmd/... ./pkg/...
+	@$(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/generate-sequential.sh ./charts/... ./cmd/... ./pkg/...
 
 .PHONY: generate-in-docker
 generate-in-docker: revendor $(HELM) $(YQ)
-	# comment back in after first release:
-	# echo $(shell git describe --abbrev=0 --tags) > VERSION
+	echo $(shell git describe --abbrev=0 --tags) > VERSION
 	docker run --rm -i$(DOCKER_TTY_ARG) -v $(PWD):/go/src/github.com/fi-ts/gardener-extension-authn golang:$(GO_VERSION) \
 		sh -c "cd /go/src/github.com/fi-ts/gardener-extension-authn \
 				&& make generate \
-				# && make install generate \
 				&& chown -R $(shell id -u):$(shell id -g) ."
 
 .PHONY: test

cmd/gardener-extension-authn/app/app.go

@@ -25,7 +25,7 @@ func NewControllerManagerCommand() *cobra.Command {
 
 	cmd := &cobra.Command{
 		Use:           "gardener-extension-authn",
-		Short:         "rovides cluster authentication and authorization in the shoot clusters.",
+		Short:         "provides cluster authentication and authorization in the shoot clusters.",
 		SilenceErrors: true,
 
 		RunE: func(cmd *cobra.Command, args []string) error {
@@ -56,7 +56,11 @@ func (o *Options) run(ctx context.Context) error {
 
 	mgrOpts := o.managerOptions.Completed().Options()
 
-	mgrOpts.ClientDisableCacheFor = []client.Object{
+	if mgrOpts.Client.Cache == nil {
+		mgrOpts.Client.Cache = &client.CacheOptions{}
+	}
+
+	mgrOpts.Client.Cache.DisableFor = []client.Object{
 		&corev1.Secret{},    // applied for ManagedResources
 		&corev1.ConfigMap{}, // applied for monitoring config
 	}
@@ -80,7 +84,7 @@ func (o *Options) run(ctx context.Context) error {
 	o.reconcileOptions.Completed().Apply(&controller.DefaultAddOptions.IgnoreOperationAnnotation)
 	o.heartbeatOptions.Completed().Apply(&heartbeatcontroller.DefaultAddOptions)
 
-	if err := o.controllerSwitches.Completed().AddToManager(mgr); err != nil {
+	if err := o.controllerSwitches.Completed().AddToManager(ctx, mgr); err != nil {
 		return fmt.Errorf("could not add controllers to manager: %w", err)
 	}
 

cmd/gardener-extension-authn/app/options.go

@@ -7,8 +7,6 @@ import (
 	heartbeatcmd "github.com/gardener/gardener/extensions/pkg/controller/heartbeat/cmd"
 	webhookcmd "github.com/gardener/gardener/extensions/pkg/webhook/cmd"
 
-	"k8s.io/client-go/tools/leaderelection/resourcelock"
-
 	authncmd "github.com/fi-ts/gardener-extension-authn/pkg/cmd"
 )
 
@@ -52,10 +50,9 @@ func NewOptions() *Options {
 		restOptions:    &controllercmd.RESTOptions{},
 		managerOptions: &controllercmd.ManagerOptions{
 			// These are default values.
-			LeaderElection:             true,
-			LeaderElectionID:           controllercmd.LeaderElectionNameID(ExtensionName),
-			LeaderElectionResourceLock: resourcelock.LeasesResourceLock,
-			LeaderElectionNamespace:    os.Getenv("LEADER_ELECTION_NAMESPACE"),
+			LeaderElection:          true,
+			LeaderElectionID:        controllercmd.LeaderElectionNameID(ExtensionName),
+			LeaderElectionNamespace: os.Getenv("LEADER_ELECTION_NAMESPACE"),
 		},
 		controllerOptions: &controllercmd.ControllerOptions{
 			// This is a default value.

example/controller-registration.yaml

@@ -8,12 +8,14 @@ providerConfig:
   chart: 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
   values:
     image:
-      tag: v0.1.0
+      tag: v0.1.6
 ---
 apiVersion: core.gardener.cloud/v1beta1
 kind: ControllerRegistration
 metadata:
   name: fits-authn
+  annotations:
+    security.gardener.cloud/pod-security-enforce: baseline
 spec:
   deployment:
     deploymentRefs:

go.mod

@@ -1,26 +1,26 @@
 module github.com/fi-ts/gardener-extension-authn
 
-go 1.21
+go 1.22
 
 require (
 	github.com/ahmetb/gen-crd-api-reference-docs v0.3.0
-	github.com/gardener/gardener v1.71.6
-	github.com/go-logr/logr v1.2.4
+	github.com/gardener/gardener v1.80.7
+	github.com/go-logr/logr v1.4.1
 	github.com/golang/mock v1.6.0
-	github.com/metal-stack/metal-lib v0.13.3
+	github.com/metal-stack/metal-lib v0.16.2
 	github.com/onsi/ginkgo v1.16.5
 	github.com/spf13/cobra v1.8.0
 	github.com/spf13/pflag v1.0.5
-	k8s.io/api v0.26.3
-	k8s.io/apimachinery v0.27.4
-	k8s.io/client-go v11.0.1-0.20190409021438-1a26190bd76a+incompatible
-	k8s.io/code-generator v0.26.3
-	k8s.io/component-base v0.26.3
-	sigs.k8s.io/controller-runtime v0.14.6
+	k8s.io/api v0.29.3
+	k8s.io/apimachinery v0.29.3
+	k8s.io/client-go v0.29.3
+	k8s.io/code-generator v0.29.3
+	k8s.io/component-base v0.29.3
+	sigs.k8s.io/controller-runtime v0.16.5
 )
 
 require (
-	github.com/BurntSushi/toml v1.0.0 // indirect
+	github.com/BurntSushi/toml v1.3.2 // indirect
 	github.com/Masterminds/goutils v1.1.1 // indirect
 	github.com/Masterminds/semver v1.5.0 // indirect
 	github.com/Masterminds/sprig v2.22.0+incompatible // indirect
@@ -29,34 +29,33 @@ require (
 	github.com/bronze1man/yaml2json v0.0.0-20211227013850-8972abeaea25 // indirect
 	github.com/cespare/xxhash/v2 v2.2.0 // indirect
 	github.com/coreos/go-systemd/v22 v22.5.0 // indirect
-	github.com/cyphar/filepath-securejoin v0.2.2 // indirect
-	github.com/davecgh/go-spew v1.1.1 // indirect
-	github.com/emicklei/go-restful/v3 v3.10.2 // indirect
-	github.com/evanphx/json-patch v5.6.0+incompatible // indirect
-	github.com/evanphx/json-patch/v5 v5.6.0 // indirect
-	github.com/fatih/color v1.15.0 // indirect
+	github.com/cyphar/filepath-securejoin v0.2.4 // indirect
+	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
+	github.com/emicklei/go-restful/v3 v3.12.0 // indirect
+	github.com/evanphx/json-patch/v5 v5.9.0 // indirect
+	github.com/fatih/color v1.16.0 // indirect
 	github.com/fluent/fluent-operator/v2 v2.2.0 // indirect
-	github.com/fsnotify/fsnotify v1.6.0 // indirect
-	github.com/gardener/etcd-druid v0.15.3 // indirect
-	github.com/gardener/hvpa-controller v0.3.1 // indirect
+	github.com/fsnotify/fsnotify v1.7.0 // indirect
+	github.com/gardener/etcd-druid v0.19.2 // indirect
+	github.com/gardener/hvpa-controller/api v0.5.0 // indirect
 	github.com/gardener/machine-controller-manager v0.48.1 // indirect
 	github.com/ghodss/yaml v1.0.0 // indirect
-	github.com/go-logr/zapr v1.2.3 // indirect
-	github.com/go-openapi/errors v0.20.4 // indirect
-	github.com/go-openapi/jsonpointer v0.20.0 // indirect
-	github.com/go-openapi/jsonreference v0.20.2 // indirect
-	github.com/go-openapi/swag v0.22.4 // indirect
+	github.com/go-logr/zapr v1.3.0 // indirect
+	github.com/go-openapi/errors v0.22.0 // indirect
+	github.com/go-openapi/jsonpointer v0.21.0 // indirect
+	github.com/go-openapi/jsonreference v0.21.0 // indirect
+	github.com/go-openapi/swag v0.23.0 // indirect
 	github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 // indirect
-	github.com/gobuffalo/flect v0.3.0 // indirect
+	github.com/gobuffalo/flect v1.0.2 // indirect
 	github.com/gobwas/glob v0.2.3 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
-	github.com/golang/protobuf v1.5.3 // indirect
-	github.com/google/gnostic v0.5.7-v3refs // indirect
-	github.com/google/go-cmp v0.5.9 // indirect
+	github.com/golang/protobuf v1.5.4 // indirect
+	github.com/google/gnostic-models v0.6.9-0.20230804172637-c7be7c783f49 // indirect
+	github.com/google/go-cmp v0.6.0 // indirect
 	github.com/google/gofuzz v1.2.0 // indirect
-	github.com/google/pprof v0.0.0-20230502171905-255e3b9b56de // indirect
-	github.com/google/uuid v1.3.0 // indirect
+	github.com/google/pprof v0.0.0-20231212022811-ec68065c825e // indirect
+	github.com/google/uuid v1.6.0 // indirect
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
 	github.com/huandu/xstrings v1.4.0 // indirect
@@ -67,67 +66,73 @@ require (
 	github.com/kubernetes-csi/external-snapshotter/client/v4 v4.2.0 // indirect
 	github.com/mailru/easyjson v0.7.7 // indirect
 	github.com/mattn/go-colorable v0.1.13 // indirect
-	github.com/mattn/go-isatty v0.0.19 // indirect
-	github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/mitchellh/copystructure v1.2.0 // indirect
 	github.com/mitchellh/hashstructure/v2 v2.0.2 // indirect
 	github.com/mitchellh/reflectwalk v1.0.2 // indirect
 	github.com/moby/spdystream v0.2.0 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
-	github.com/nxadm/tail v1.4.8 // indirect
-	github.com/onsi/ginkgo/v2 v2.9.3 // indirect
+	github.com/nxadm/tail v1.4.11 // indirect
+	github.com/onsi/ginkgo/v2 v2.17.1 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
-	github.com/prometheus/client_golang v1.15.1 // indirect
-	github.com/prometheus/client_model v0.3.0 // indirect
-	github.com/prometheus/common v0.42.0 // indirect
-	github.com/prometheus/procfs v0.9.0 // indirect
-	github.com/rogpeppe/go-internal v1.10.0 // indirect
+	github.com/prometheus/client_golang v1.19.0 // indirect
+	github.com/prometheus/client_model v0.6.0 // indirect
+	github.com/prometheus/common v0.51.0 // indirect
+	github.com/prometheus/procfs v0.13.0 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
-	github.com/spf13/afero v1.9.5 // indirect
+	github.com/spf13/afero v1.11.0 // indirect
+	go.uber.org/mock v0.4.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	go.uber.org/zap v1.25.0 // indirect
-	golang.org/x/crypto v0.12.0 // indirect
-	golang.org/x/mod v0.12.0 // indirect
-	golang.org/x/net v0.14.0 // indirect
-	golang.org/x/oauth2 v0.11.0 // indirect
-	golang.org/x/sys v0.11.0 // indirect
-	golang.org/x/term v0.11.0 // indirect
-	golang.org/x/text v0.12.0 // indirect
-	golang.org/x/time v0.3.0 // indirect
-	golang.org/x/tools v0.12.0 // indirect
-	gomodules.xyz/jsonpatch/v2 v2.2.0 // indirect
-	google.golang.org/appengine v1.6.7 // indirect
-	google.golang.org/genproto v0.0.0-20221018160656-63c7b68cfc55 // indirect
-	google.golang.org/protobuf v1.31.0 // indirect
+	go.uber.org/zap v1.27.0 // indirect
+	golang.org/x/crypto v0.22.0 // indirect
+	golang.org/x/exp v0.0.0-20240318143956-a85f2c67cd81 // indirect
+	golang.org/x/mod v0.16.0 // indirect
+	golang.org/x/net v0.24.0 // indirect
+	golang.org/x/oauth2 v0.19.0 // indirect
+	golang.org/x/sys v0.19.0 // indirect
+	golang.org/x/term v0.19.0 // indirect
+	golang.org/x/text v0.14.0 // indirect
+	golang.org/x/time v0.5.0 // indirect
+	golang.org/x/tools v0.19.0 // indirect
+	gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20240304212257-790db918fca8 // indirect
+	google.golang.org/protobuf v1.33.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	istio.io/api v0.0.0-20230217221049-9d422bf48675 // indirect
 	istio.io/client-go v1.17.1 // indirect
-	k8s.io/apiextensions-apiserver v0.26.3 // indirect
-	k8s.io/apiserver v0.26.3 // indirect
-	k8s.io/autoscaler v0.0.0-20190805135949-100e91ba756e // indirect
-	k8s.io/gengo v0.0.0-20220902162205-c0856e24416d // indirect
+	k8s.io/apiextensions-apiserver v0.28.3 // indirect
+	k8s.io/apiserver v0.28.3 // indirect
+	k8s.io/autoscaler/vertical-pod-autoscaler v0.14.0 // indirect
+	k8s.io/gengo v0.0.0-20230829151522-9cce18d56c01 // indirect
 	k8s.io/helm v2.16.1+incompatible // indirect
 	k8s.io/klog v1.0.0 // indirect
-	k8s.io/klog/v2 v2.90.1 // indirect
-	k8s.io/kube-aggregator v0.26.3 // indirect
-	k8s.io/kube-openapi v0.0.0-20230501164219-8b0f38b5fd1f // indirect
-	k8s.io/kubelet v0.26.3 // indirect
-	k8s.io/metrics v0.26.3 // indirect
-	k8s.io/utils v0.0.0-20230209194617-a36077c30491 // indirect
-	sigs.k8s.io/controller-runtime/tools/setup-envtest v0.0.0-20221212190805-d4f1e822ca11 // indirect
-	sigs.k8s.io/controller-tools v0.11.3 // indirect
+	k8s.io/klog/v2 v2.110.1 // indirect
+	k8s.io/kube-aggregator v0.28.3 // indirect
+	k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 // indirect
+	k8s.io/kubelet v0.28.3 // indirect
+	k8s.io/metrics v0.28.3 // indirect
+	k8s.io/utils v0.0.0-20240310230437-4693a0247e57 // indirect
+	sigs.k8s.io/controller-runtime/tools/setup-envtest v0.0.0-20231015215740-bf15e44028f9 // indirect
+	sigs.k8s.io/controller-tools v0.13.0 // indirect
 	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
-	sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
 	sigs.k8s.io/yaml v1.3.0 // indirect
 )
 
 replace (
-	k8s.io/client-go => k8s.io/client-go v0.26.3
+	k8s.io/api => k8s.io/api v0.28.3
+	k8s.io/apiextensions-apiserver => k8s.io/apiextensions-apiserver v0.28.3
+	k8s.io/apimachinery => k8s.io/apimachinery v0.28.3
+	k8s.io/client-go => k8s.io/client-go v0.28.3
+	k8s.io/code-generator => k8s.io/code-generator v0.28.3
+	k8s.io/component-base => k8s.io/component-base v0.28.3
+
 	// for some reason, newer gengo versions will fail with "hit an unsupported type"
-	k8s.io/gengo => k8s.io/gengo v0.0.0-20210813121822-485abfe95c7c // indirect
+	k8s.io/gengo => k8s.io/gengo v0.0.0-20220902162205-c0856e24416d // indirect
+	k8s.io/kube-openapi => k8s.io/kube-openapi v0.0.0-20230717233707-2695361300d9
 )