Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update crossplane dependencies #70

Merged
merged 3 commits into from
Dec 2, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 2, 2024

This PR contains the following updates:

Package Update Change
crossplane-contrib/provider-helm minor v0.19.0 -> v0.20.0
crossplane-contrib/provider-kubernetes minor v0.15.0 -> v0.16.0
upbound/configuration-azure-network minor v0.9.0 -> v0.11.0
upbound/provider-azure minor v1.7.0 -> v1.9.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

crossplane-contrib/provider-helm (crossplane-contrib/provider-helm)

v0.20.0

Compare Source

What's Changed

[!NOTE]
Starting with v0.20.0, the image is published under the upbound organization in the Upbound Marketplace.
The new location for the image is xpkg.upbound.io/upbound/provider-helm:v0.20.0. Please use the new location when installing/upgrading the provider.

New Contributors

Full Changelog: crossplane-contrib/provider-helm@v0.19.0...v0.20.0

crossplane-contrib/provider-kubernetes (crossplane-contrib/provider-kubernetes)

v0.16.0

Compare Source

What's Changed

[!NOTE]
Starting with v0.16.0, the image is published under the upbound organization in the Upbound Marketplace.
The new location for the image is xpkg.upbound.io/upbound/provider-kubernetes:v0.16.0. Please use the new location when installing/upgrading the provider.

New Contributors

Full Changelog: crossplane-contrib/provider-kubernetes@v0.15.0...v0.16.0

upbound/configuration-azure-network (upbound/configuration-azure-network)

v0.11.0

Compare Source

What's Changed

New Contributors

Full Changelog: upbound/configuration-azure-network@v0.10.0...v0.11.0

v0.10.0

Compare Source

What's Changed

Full Changelog: upbound/configuration-azure-network@v0.9.0...v0.10.0

upbound/provider-azure (upbound/provider-azure)

v1.9.0

Compare Source

The v1.9.0 release introduces new resources, bug fixes (an important one https://github.com/crossplane/upjet/pull/449), enhancements, and dependency updates.

Support for New Resources
  • PrivateDNSResolverOutboundEndpoint.network.azure.upbound.io/v1beta1
  • TrustedAccessRoleBinding.authorization.azure.upbound.io/v1beta1

What's Changed

Full Changelog: crossplane-contrib/provider-upjet-azure@v1.8.0...v1.9.0

v1.8.0

Compare Source

The v1.8.0 release introduces the Terraform provider upgrade from 3.110.0 to 3.116.0, new resources, bug fixes, enhancements, and dependency updates.

Support for New Resources
  • PrivateDNSResolverInboundEndpoint.network.azure.upbound.io/v1beta1
  • RedisCacheAccessPolicy.cache.azure.upbound.io/v1beta1
  • RedisCacheAccessPolicyAssignment.cache.azure.upbound.io/v1beta1

What's Changed

New Contributors

Full Changelog: crossplane-contrib/provider-upjet-azure@v1.7.0...v1.8.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner December 2, 2024 11:34
@renovate renovate bot added the automated label Dec 2, 2024
Copy link

upbound/configuration-azure-aks #70

Change Summary

  • Version updates across multiple dependencies: Azure Container Service provider (v1.7.0 → v1.9.0), Azure Network configuration (v0.9.0 → v0.11.0)
  • Third-party provider updates: Helm provider (v0.19.0 → v0.20.0) and Kubernetes provider (v0.15.0 → v0.16.0)

Potential Vulnerabilities

  • File: crossplane.yaml:19-20
  • Code: version: "v1.9.0"
  • Explanation: Major version jumps in infrastructure providers (like Azure Container Service) should be carefully reviewed for breaking changes that could affect security configurations or access controls.

Code Smells

No significant code smells detected in the changes. The modifications are straightforward version updates in the dependency specification.

Debug Logs

No debug logs found in the changes.

Unintended Consequences

  1. Configuration Drift:
  • File: crossplane.yaml:19-22
  • Code:
version: "v1.9.0"
...
version: "v0.11.0"
  • Explanation: Multiple simultaneous provider version updates could lead to unexpected behavior if these versions haven't been tested together in a staging environment.
  1. Dependency Chain Impact:
  • File: crossplane.yaml:23-26
  • Code:
version: "v0.20.0"
...
version: "v0.16.0"
  • Explanation: Updates to both Helm and Kubernetes providers simultaneously could cause issues if there are incompatibilities between these versions and the existing cluster configurations.

Risk Score: 6

The relatively high risk score is due to:

  1. Multiple concurrent version updates across critical infrastructure components
  2. Two-version jump in the Azure Container Service provider (1.7 to 1.9)
  3. Potential for breaking changes across four different provider/configuration updates
  4. Critical nature of AKS configuration changes in production environments

@kaessert
Copy link
Contributor

kaessert commented Dec 2, 2024

/test-examples

Signed-off-by: Tobias Kässer <tobias.kasser@upbound.io>
@kaessert
Copy link
Contributor

kaessert commented Dec 2, 2024

/test-examples

Signed-off-by: Tobias Kässer <tobias.kasser@upbound.io>
@kaessert kaessert force-pushed the renovate/crossplane-dependencies branch from 1f85318 to 3899798 Compare December 2, 2024 16:06
@kaessert
Copy link
Contributor

kaessert commented Dec 2, 2024

/test-examples

@kaessert kaessert merged commit 39f020c into main Dec 2, 2024
2 checks passed
@kaessert kaessert deleted the renovate/crossplane-dependencies branch December 2, 2024 16:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant