1dependencies:
2 # zeitgeist (https://github.com/kubernetes-sigs/zeitgeist) was inspired by
3 # (and now replaces) the cmd/verifydependencies tool to verify external
4 # dependencies across the repo.
5 #
6 # The zeitgeist dependencies.yaml file format is intended to be
7 # backwards-compatible with the original tooling.
8 #
9 # In instances where the file format may change across versions, this meta
10 # dependency check exists to ensure we're pinned to a known good version.
11 #
12 # ref: https://github.com/kubernetes/kubernetes/pull/98845
13 - name: "zeitgeist"
14 version: "v0.2.0"
15 refPaths:
16 - path: hack/verify-external-dependencies-version.sh
17 match: sigs.k8s.io/zeitgeist@v.*
18
19 # CNI plugins
20 - name: "cni"
21 version: 1.4.0
22 refPaths:
23 - path: cluster/gce/config-common.sh
24 match: WINDOWS_CNI_VERSION=
25 - path: cluster/gce/gci/configure.sh
26 match: DEFAULT_CNI_VERSION=
27 - path: test/e2e_node/remote/utils.go
28 match: cniVersion[\t\n\f\r ]*=
29 - path: hack/local-up-cluster.sh
30 match: CNI_PLUGINS_VERSION=
31
32 # CoreDNS
33 - name: "coredns-kube-up"
34 version: 1.11.1
35 refPaths:
36 - path: cluster/addons/dns/coredns/coredns.yaml.base
37 match: registry.k8s.io/coredns
38 - path: cluster/addons/dns/coredns/coredns.yaml.in
39 match: registry.k8s.io/coredns
40 - path: cluster/addons/dns/coredns/coredns.yaml.sed
41 match: registry.k8s.io/coredns
42
43 - name: "coredns-kubeadm"
44 version: 1.11.1
45 refPaths:
46 - path: cmd/kubeadm/app/constants/constants.go
47 match: CoreDNSVersion =
48
49 # CRI Tools
50 - name: "crictl"
51 version: 1.29.0
52 refPaths:
53 - path: cluster/gce/windows/k8s-node-setup.psm1
54 match: CRICTL_VERSION =
55 - path: cluster/gce/gci/configure.sh
56 match: DEFAULT_CRICTL_VERSION=
57
58 # protoc
59 - name: "protoc"
60 version: 23.4
61 refPaths:
62 - path: hack/lib/protoc.sh
63 match: PROTOC_VERSION=
64
65 # etcd
66 - name: "etcd"
67 version: 3.5.12
68 refPaths:
69 - path: cluster/gce/manifests/etcd.manifest
70 match: etcd_docker_tag|etcd_version
71 - path: cluster/gce/upgrade-aliases.sh
72 match: ETCD_IMAGE|ETCD_VERSION
73 - path: cmd/kubeadm/app/constants/constants.go
74 match: DefaultEtcdVersion =
75 - path: hack/lib/etcd.sh
76 match: ETCD_VERSION=
77 - path: staging/src/k8s.io/sample-apiserver/artifacts/example/deployment.yaml
78 match: gcr.io/etcd-development/etcd
79 - path: test/utils/image/manifest.go
80 match: configs\[Etcd\] = Config{list\.GcEtcdRegistry, "etcd", "\d+\.\d+.\d+(-(alpha|beta|rc).\d+)?(-\d+)?"}
81
82 - name: "etcd-image"
83 version: 3.5.12
84 refPaths:
85 - path: cluster/images/etcd/Makefile
86 match: BUNDLED_ETCD_VERSIONS\?|LATEST_ETCD_VERSION\?
87 - path: cluster/images/etcd/migrate/options.go
88
89 - name: "node-problem-detector"
90 version: 0.8.16
91 refPaths:
92 - path: test/e2e_node/image_list.go
93 match: const defaultImage
94 - path: test/kubemark/resources/hollow-node_template.yaml
95 match: registry.k8s.io/node-problem-detector/node-problem-detector
96 - path: cluster/addons/node-problem-detector/npd.yaml
97 match: registry.k8s.io/node-problem-detector/node-problem-detector
98 - path: cluster/addons/node-problem-detector/npd.yaml
99 match: app.kubernetes.io/version
100 # TODO(dims): Ensure newer versions get uploaded to
101 # - https://console.cloud.google.com/storage/browser/gke-release/winnode/node-problem-detector
102 # - https://gcsweb.k8s.io/gcs/kubernetes-release/node-problem-detector/
103 # and then the following references get fixed.
104 #
105 - path: cluster/gce/gci/configure.sh
106 match: DEFAULT_NPD_VERSION=
107 #- path: cluster/gce/windows/k8s-node-setup.psm1
108 # match: DEFAULT_NPD_VERSION
109
110 # From https://github.com/etcd-io/etcd/blob/main/Makefile
111 - name: "golang: etcd release version"
112 version: 1.20.13 # https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.5.md
113 refPaths:
114 - path: cluster/images/etcd/Makefile
115 match: 'GOLANG_VERSION := \d+.\d+(alpha|beta|rc)?\.?(\d+)?'
116
117 # Golang
118 - name: "golang: upstream version"
119 version: 1.22.2
120 refPaths:
121 - path: .go-version
122 - path: build/build-image/cross/VERSION
123 - path: staging/publishing/rules.yaml
124 match: 'default-go-version\: \d+.\d+(alpha|beta|rc)?\.?(\d+)?'
125 - path: test/images/Makefile
126 match: GOLANG_VERSION=\d+.\d+(alpha|beta|rc)?\.?\d+
127
128 # Golang pre-releases are denoted as `1.y<pre-release stage>`
129 # Example: go1.16rc1
130 #
131 # This entry is a stub of the major version to allow dependency checks to
132 # pass when building Kubernetes using a pre-release of Golang.
133 - name: "golang: 1.<major>"
134 version: 1.22
135 refPaths:
136 - path: build/build-image/cross/VERSION
137 - path: hack/lib/golang.sh
138 match: minimum_go_version=go([0-9]+\.[0-9]+)
139
140 - name: "registry.k8s.io/kube-cross: dependents"
141 version: v1.30.0-go1.22.2-bullseye.0
142 refPaths:
143 - path: build/build-image/cross/VERSION
144
145 # Base images
146 - name: "registry.k8s.io/debian-base: dependents"
147 version: bookworm-v1.0.2
148 refPaths:
149 - path: cluster/images/etcd/Makefile
150 match: BASEIMAGE\?\=registry\.k8s\.io\/build-image\/debian-base:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
151 - path: cluster/images/etcd/Makefile
152 match: BASEIMAGE\?\=registry\.k8s\.io\/build-image\/debian-base-arm:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
153 - path: cluster/images/etcd/Makefile
154 match: BASEIMAGE\?\=registry\.k8s\.io\/build-image\/debian-base-arm64:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
155 - path: cluster/images/etcd/Makefile
156 match: BASEIMAGE\?\=registry\.k8s\.io\/build-image\/debian-base-ppc64le:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
157 - path: cluster/images/etcd/Makefile
158 match: BASEIMAGE\?\=registry\.k8s\.io\/build-image\/debian-base-s390x:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
159 - path: test/conformance/image/Makefile
160 match: BASE_IMAGE_VERSION\?=
161 - path: test/images/pets/peer-finder/BASEIMAGE
162 match: registry\.k8s\.io\/build-image\/debian-base-amd64:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
163 - path: test/images/resource-consumer/BASEIMAGE
164 match: registry\.k8s\.io\/build-image\/debian-base-amd64:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
165 - path: test/images/pets/zookeeper-installer/BASEIMAGE
166 match: registry\.k8s\.io\/build-image\/debian-base-amd64:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
167 - path: test/images/nonroot/BASEIMAGE
168 match: registry\.k8s\.io\/build-image\/debian-base-amd64:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
169 - path: test/images/regression-issue-74839/BASEIMAGE
170 match: registry\.k8s\.io\/build-image\/debian-base-amd64:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
171 - path: test/images/pets/redis-installer/BASEIMAGE
172 match: registry\.k8s\.io\/build-image\/debian-base-amd64:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
173 - path: cluster/gce/gci/configure-helper.sh
174 match: registry\.k8s\.io\/build-image\/debian-base:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
175 - path: pkg/volume/plugins.go
176 match: registry\.k8s\.io\/build-image\/debian-base:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)
177
178 - name: "registry.k8s.io/distroless-iptables: dependents"
179 version: v0.5.3
180 refPaths:
181 - path: build/common.sh
182 match: __default_distroless_iptables_version=
183 - path: test/utils/image/manifest.go
184 match: configs\[DistrolessIptables\] = Config{list\.BuildImageRegistry, "distroless-iptables", "v([0-9]+)\.([0-9]+)\.([0-9]+)"}
185
186 - name: "registry.k8s.io/go-runner: dependents"
187 version: v2.3.1-go1.22.2-bookworm.0
188 refPaths:
189 - path: build/common.sh
190 match: __default_go_runner_version=
191
192 - name: "registry.k8s.io/pause"
193 version: 3.9
194 refPaths:
195 - path: build/pause/Makefile
196 match: TAG\s*\?=
197
198 - name: "registry.k8s.io/pause: dependents"
199 version: 3.9
200 refPaths:
201 - path: cluster/gce/config-common.sh
202 match: registry.k8s.io\/pause:\d+\.\d+
203 - path: cluster/gce/gci/configure-helper.sh
204 match: registry.k8s.io\/pause:\d+\.\d+
205 - path: cluster/gce/windows/smoke-test.sh
206 match: registry.k8s.io\/pause:\d+\.\d+
207 - path: cmd/kubeadm/app/constants/constants.go
208 match: PauseVersion\s+=
209 - path: cmd/kubeadm/app/util/template_test.go
210 match: validTmpl\s+=
211 - path: cmd/kubeadm/app/util/template_test.go
212 match: validTmplOut\s+=
213 - path: cmd/kubeadm/app/util/template_test.go
214 match: doNothing\s+=
215 - path: cmd/kubelet/app/options/container_runtime.go
216 match: defaultPodSandboxImageVersion\s+=
217 - path: hack/testdata/pod-with-precision.json
218 match: registry.k8s.io\/pause:\d+\.\d+
219 - path: staging/src/k8s.io/kubectl/testdata/set/multi-resource-yaml.yaml
220 match: registry.k8s.io\/pause:\d+\.\d+
221 - path: staging/src/k8s.io/kubectl/testdata/set/namespaced-resource.yaml
222 match: registry.k8s.io\/pause:\d+\.\d+
223 - path: test/cmd/core.sh
224 match: registry.k8s.io\/pause:\d+\.\d+
225 - path: test/fixtures/pkg/kubectl/cmd/set/multi-resource-yaml.yaml
226 match: registry.k8s.io\/pause:\d+\.\d+
227 - path: test/fixtures/pkg/kubectl/cmd/set/namespaced-resource.yaml
228 match: registry.k8s.io\/pause:\d+\.\d+
229 - path: test/integration/benchmark-controller.json
230 match: registry.k8s.io\/pause:\d+\.\d+
231 - path: test/integration/scheduler_perf/config/pod-default.yaml
232 match: registry.k8s.io\/pause:\d+\.\d+
233 - path: test/integration/scheduler_perf/config/pod-with-node-affinity.yaml
234 match: registry.k8s.io\/pause:\d+\.\d+
235 - path: test/integration/scheduler_perf/config/pod-with-pod-affinity.yaml
236 match: registry.k8s.io\/pause:\d+\.\d+
237 - path: test/integration/scheduler_perf/config/pod-with-pod-anti-affinity.yaml
238 match: registry.k8s.io\/pause:\d+\.\d+
239 - path: test/integration/scheduler_perf/config/pod-with-preferred-pod-affinity.yaml
240 match: registry.k8s.io\/pause:\d+\.\d+
241 - path: test/integration/scheduler_perf/config/pod-with-preferred-pod-anti-affinity.yaml
242 match: registry.k8s.io\/pause:\d+\.\d+
243 - path: test/integration/scheduler_perf/config/pod-with-preferred-topology-spreading.yaml
244 match: registry.k8s.io\/pause:\d+\.\d+
245 - path: test/integration/scheduler_perf/config/pod-with-secret-volume.yaml
246 match: registry.k8s.io\/pause:\d+\.\d+
247 - path: test/integration/scheduler_perf/config/pod-with-topology-spreading.yaml
248 match: registry.k8s.io\/pause:\d+\.\d+
249 - path: test/utils/runners.go
250 match: registry.k8s.io\/pause:\d+\.\d+
251 - path: test/utils/image/manifest.go
252 match: configs\[Pause\] = Config{list\.GcRegistry, "pause", "\d+\.\d+(.\d+)?"}
253
254 - name: "registry.k8s.io/build-image/setcap: dependents"
255 version: bookworm-v1.0.2
256 refPaths:
257 - path: build/common.sh
258 match: __default_setcap_version=
259
260 # cadvisor
261 - name: "gcr.io/cadvisor/cadvisor: dependents"
262 version: "v0.47.2"
263 refPaths:
264 - path: test/e2e_node/resource_collector.go
265 match: gcr.io\/cadvisor\/cadvisor:v\d+\.\d+\.\d+
266 - path: test/e2e_node/image_list.go
267 mathc: gcr.io\/cadvisor\/cadvisor:v\d+\.\d+\.\d+
268
269 # GCB docker gcloud image
270 - name: "gcb-docker-gcloud: dependents"
271 version: v20230623-56e06d7c18
272 refPaths:
273 - path: build/pause/cloudbuild.yaml
274 match: gcr.io/k8s-staging-test-infra/gcb-docker-gcloud
275 - path: cluster/images/etcd/cloudbuild.yaml
276 match: gcr.io/k8s-staging-test-infra/gcb-docker-gcloud
277 - path: test/images/cloudbuild.yaml
278 match: gcr.io/k8s-staging-test-infra/gcb-docker-gcloud
View as plain text