Skip to content

[CP 1597] fix(deps): bump k8s.io to v0.36.2 and controller-runtime to v0.24.1#601

Merged
spraveenio merged 2 commits into
ROCm:mainfrom
ci-penbot-01:CP.O2O.pensando.gpu-operator.1597.rocm.gpu-operator.main
Jul 11, 2026
Merged

[CP 1597] fix(deps): bump k8s.io to v0.36.2 and controller-runtime to v0.24.1#601
spraveenio merged 2 commits into
ROCm:mainfrom
ci-penbot-01:CP.O2O.pensando.gpu-operator.1597.rocm.gpu-operator.main

Conversation

@ci-penbot-01

Copy link
Copy Markdown
Contributor

cp of pensando/gpu-operator#1597


Source PR Description (pensando/gpu-operator#1597):

Summary

  • Bump all k8s.io/* packages from v0.33.1v0.36.2 (Kubernetes 1.36.2) to remediate CVE in bundled kubectl/k8s.io libraries
  • Co-upgrade sigs.k8s.io/controller-runtime from v0.20.3v0.24.1 (required — v0.24.x is the first release targeting k8s.io v0.36.x)
  • Pin kubectl binary in Dockerfile.build from v1.30.4v1.36.2, aligning the build container with the current stable release
  • Add Apply() method to MockClient to satisfy the new client.Client interface introduced in controller-runtime v0.22

Breaking changes evaluated

Change Impact
Result.Requeue deprecated (v0.21) Field still works; no code changes needed
Client-side rate limiter off by default (v0.21) No explicit QPS/Burst was set before; no behavioral change
client.Client.Apply added (v0.22) Fixed via MockClient update
Nil selector behavior flip (v0.22) No MatchingLabelsSelector/MatchingFieldsSelector usage in operator source
Webhook API compile break (v0.23) Not applicable — no webhook implementations in operator source

Test Plan

  • go build ./... passes
  • go test ./internal/... passes (all unit tests green)
  • e2e sanity tests pass in CI

Plan

Plan: docs-internal/knowledge/plans/2026-07-10-k8s-dependency-bump-v0.36.2.md

🤖 Generated with Claude Code

Cherrypick triggered by: ACP-Automation

yansun1996 and others added 2 commits July 11, 2026 15:45
…#1597)

* fix(deps): bump k8s.io to v0.36.2 and controller-runtime to v0.24.1

Update all k8s.io/* packages from v0.33.1 to v0.36.2 (Kubernetes 1.36.2)
and sigs.k8s.io/controller-runtime from v0.20.3 to v0.24.1 to remediate
CVE in bundled kubectl/k8s.io libraries.

Also pin kubectl binary in Dockerfile.build from v1.30.4 to v1.36.2,
aligning the build container with the current stable kubectl release.

MockClient updated to implement the Apply() method added to client.Client
in controller-runtime v0.22 as part of native SSA support.

Plan: docs-internal/knowledge/plans/2026-07-10-k8s-dependency-bump-v0.36.2.md

Co-Authored-By: Claude <noreply@anthropic.com>

* fix(lint): resolve SA1019 deprecation warnings from k8s.io v0.36.2 bump

- Replace scheme.Builder with runtime.SchemeBuilder in api/v1alpha1 to
  fix the controller-runtime v0.24 deprecation of scheme.Builder
- Replace result.Requeue check with result.RequeueAfter > 0 in
  remediation_handler.go per controller-runtime v0.21 deprecation

Co-Authored-By: Claude <noreply@anthropic.com>

* fix(scheme): restore metav1.AddToGroupVersion for amd.com/v1alpha1

The SA1019 lint cleanup (182be5a9) migrated api/v1alpha1 from
controller-runtime scheme.Builder to a bare runtime.SchemeBuilder,
dropping the metav1.AddToGroupVersion call that scheme.Builder.Register
performed implicitly. Without it, ListOptions/GetOptions conversions for
the group are unregistered and the controller-manager cannot list/watch
its own DeviceConfig CRD:

  v1.ListOptions is not suitable for converting to "amd.com/v1alpha1"

This crash-loops the manager, blocks Deployment availability, fails
E2ESuite.SetUpSuite, and cascades into 8 failed / 4 crashed e2e chunks.

Re-add metav1.AddToGroupVersion(s, GroupVersion) in both registration
funcs, preserving the lint fix while restoring runtime behavior.

Co-Authored-By: Claude <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>
(cherry picked from commit 40e9881c17f97e4ca39fbf5dcdfa77b4839bb682)

@spraveenio spraveenio left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lgtm

@spraveenio spraveenio merged commit d5fb83c into ROCm:main Jul 11, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants