Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fetch CNI Plugins from github.com/containernetworking/Plugins #16979

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

ameukam
Copy link
Member

@ameukam ameukam commented Dec 5, 2024

k8s-infra detected a credits leak on the infrastructure due to allowing
pulling from a multi-regional GCS bucket.
Switching to Github releases will help mitigate the resource abuse

@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign johngmyers for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Dec 5, 2024
k8s-infra detected a credits leak on the infrastructure due to allowing
pulling from a multi-regional GCS bucket.
Switching to Github releases will help mitigate the resource abuse

Signed-off-by: Arnaud Meukam <[email protected]>
@ameukam ameukam force-pushed the cni-plugins-github branch from 0913728 to 112b53d Compare December 5, 2024 14:43
@ameukam
Copy link
Member Author

ameukam commented Dec 5, 2024

/retest pull-kops-e2e-k8s-aws-amazonvpc
/milestone v1.32

@k8s-ci-robot
Copy link
Contributor

@ameukam: You must be a member of the kubernetes/kops-maintainers GitHub team to set the milestone. If you believe you should be able to issue the /milestone command, please contact your Kops Maintainers and have them propose you as an additional delegate for this responsibility.

In response to this:

/retest pull-kops-e2e-k8s-aws-amazonvpc
/milestone v1.32

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot
Copy link
Contributor

@ameukam: The /retest command does not accept any targets.
The following commands are available to trigger required jobs:

  • /test presubmit-kops-aws-boskos
  • /test presubmit-kops-aws-boskos-kubetest2
  • /test presubmit-kops-aws-scale-amazonvpc
  • /test presubmit-kops-aws-small-scale-amazonvpc-using-cl2
  • /test presubmit-kops-gce-scale-ipalias-using-cl2
  • /test presubmit-kops-gce-small-scale-ipalias-using-cl2
  • /test pull-kops-aws-distro-al2023
  • /test pull-kops-aws-distro-amazonlinux2
  • /test pull-kops-aws-distro-debian10
  • /test pull-kops-aws-distro-debian11
  • /test pull-kops-aws-distro-debian12
  • /test pull-kops-aws-distro-flatcar
  • /test pull-kops-aws-distro-rhel8
  • /test pull-kops-aws-distro-rhel9
  • /test pull-kops-aws-distro-rocky9
  • /test pull-kops-aws-distro-ubuntu2004
  • /test pull-kops-aws-distro-ubuntu2004arm64
  • /test pull-kops-aws-distro-ubuntu2204
  • /test pull-kops-aws-distro-ubuntu2204arm64
  • /test pull-kops-aws-distro-ubuntu2404
  • /test pull-kops-aws-distro-ubuntu2404arm64
  • /test pull-kops-build
  • /test pull-kops-e2e-arm64
  • /test pull-kops-e2e-aws-apiserver-nodes
  • /test pull-kops-e2e-aws-cloud-controller-manager
  • /test pull-kops-e2e-aws-dns-none
  • /test pull-kops-e2e-aws-external-dns
  • /test pull-kops-e2e-aws-ipv6-external-dns
  • /test pull-kops-e2e-aws-ipv6-karpenter
  • /test pull-kops-e2e-aws-ipv6-terraform
  • /test pull-kops-e2e-aws-karpenter
  • /test pull-kops-e2e-aws-load-balancer-controller
  • /test pull-kops-e2e-aws-nlb
  • /test pull-kops-e2e-aws-node-local-dns
  • /test pull-kops-e2e-aws-terraform
  • /test pull-kops-e2e-cni-amazonvpc
  • /test pull-kops-e2e-cni-calico
  • /test pull-kops-e2e-cni-canal
  • /test pull-kops-e2e-cni-cilium
  • /test pull-kops-e2e-cni-cilium-eni
  • /test pull-kops-e2e-cni-cilium-etcd
  • /test pull-kops-e2e-cni-flannel
  • /test pull-kops-e2e-k8s-aws-amazonvpc
  • /test pull-kops-e2e-k8s-aws-calico
  • /test pull-kops-e2e-k8s-ci
  • /test pull-kops-e2e-k8s-ci-ha
  • /test pull-kops-e2e-k8s-gce-calico-u2004-k22-containerd
  • /test pull-kops-e2e-k8s-gce-ci
  • /test pull-kops-e2e-k8s-gce-cilium
  • /test pull-kops-e2e-k8s-gce-cilium-etcd
  • /test pull-kops-e2e-k8s-gce-ipalias
  • /test pull-kops-e2e-k8s-gce-long-cluster-name
  • /test pull-kops-e2e-kubernetes-do-dns-none
  • /test pull-kops-e2e-kubernetes-do-fqdn
  • /test pull-kops-e2e-kubernetes-do-gossip
  • /test pull-kops-e2e-metrics-server
  • /test pull-kops-e2e-pod-identity-webhook
  • /test pull-kops-test
  • /test pull-kops-verify-boilerplate
  • /test pull-kops-verify-generated
  • /test pull-kops-verify-gofmt
  • /test pull-kops-verify-golangci-lint
  • /test pull-kops-verify-gomod
  • /test pull-kops-verify-govet
  • /test pull-kops-verify-hashes
  • /test pull-kops-verify-terraform

The following commands are available to trigger optional jobs:

  • /test presubmit-kops-aws-scale-amazonvpc-using-cl2
  • /test pull-kops-e2e-aws-upgrade-k129-ko129-to-k130-kolatest
  • /test pull-kops-e2e-aws-upgrade-k129-ko129-to-k130-kolatest-karpenter
  • /test pull-kops-e2e-aws-upgrade-k130-ko130-to-klatest-kolatest-many-addons
  • /test pull-kops-e2e-aws-upgrade-k130-kolatest-to-k131-kolatest
  • /test pull-kops-e2e-cni-amazonvpc-ipv6
  • /test pull-kops-e2e-cni-calico-ipv6
  • /test pull-kops-e2e-cni-cilium-ipv6
  • /test pull-kops-e2e-cni-kuberouter
  • /test pull-kops-e2e-gce-dns-none
  • /test pull-kops-kubernetes-e2e-cos-gce
  • /test pull-kops-kubernetes-e2e-cos-gce-serial
  • /test pull-kops-kubernetes-e2e-cos-gce-slow
  • /test pull-kops-kubernetes-e2e-ubuntu-gce-build

Use /test all to run the following jobs that were automatically triggered:

  • pull-kops-build
  • pull-kops-e2e-k8s-aws-amazonvpc
  • pull-kops-e2e-k8s-aws-calico
  • pull-kops-e2e-k8s-gce-cilium
  • pull-kops-e2e-k8s-gce-ipalias
  • pull-kops-test
  • pull-kops-verify-boilerplate
  • pull-kops-verify-generated
  • pull-kops-verify-gofmt
  • pull-kops-verify-golangci-lint
  • pull-kops-verify-gomod
  • pull-kops-verify-govet

In response to this:

/retest pull-kops-e2e-k8s-aws-amazonvpc
/milestone v1.32

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@ameukam
Copy link
Member Author

ameukam commented Dec 5, 2024

/test pull-kops-e2e-k8s-aws-amazonvpc

@ameukam
Copy link
Member Author

ameukam commented Dec 5, 2024

we don't have a generate function of cni assets like we do withrunc or k8s.
cc @hakman @rifelpet

@justinsb justinsb added this to the v1.31 milestone Dec 5, 2024
@upodroid
Copy link
Member

upodroid commented Dec 5, 2024

Can you also apply this diff? Part of kubernetes/k8s.io#7584

diff --git a/pkg/nodemodel/wellknownassets/cni.go b/pkg/nodemodel/wellknownassets/cni.go
index 4b61fc7784..188573f093 100644
--- a/pkg/nodemodel/wellknownassets/cni.go
+++ b/pkg/nodemodel/wellknownassets/cni.go
@@ -35,12 +35,12 @@ import (
 
 const (
        // CNI tarball for k8s >= 1.22
-       defaultCNIAssetAmd64K8s_22 = "https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz"
-       defaultCNIAssetArm64K8s_22 = "https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-arm64-v0.9.1.tgz"
+       defaultCNIAssetAmd64K8s_22 = "https://github.com/containernetworking/plugins/releases/download/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz"
+       defaultCNIAssetArm64K8s_22 = "https://github.com/containernetworking/plugins/releases/download/v0.9.1/cni-plugins-linux-arm64-v0.9.1.tgz"
 
        // CNI tarball for k8s >= 1.27
-       defaultCNIAssetAmd64K8s_27 = "https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz"
-       defaultCNIAssetArm64K8s_27 = "https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-arm64-v1.2.0.tgz"
+       defaultCNIAssetAmd64K8s_27 = "https://github.com/containernetworking/plugins/releases/download/v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz"
+       defaultCNIAssetArm64K8s_27 = "https://github.com/containernetworking/plugins/releases/download/v1.2.0/cni-plugins-linux-arm64-v1.2.0.tgz"
 
        // Environment variable for overriding CNI url
        ENV_VAR_CNI_ASSET_URL  = "CNI_VERSION_URL"
diff --git a/pkg/nodemodel/wellknownassets/cni_test.go b/pkg/nodemodel/wellknownassets/cni_test.go
index f9744ebd34..0c88358673 100644
--- a/pkg/nodemodel/wellknownassets/cni_test.go
+++ b/pkg/nodemodel/wellknownassets/cni_test.go
@@ -60,7 +60,7 @@ func Test_FindCNIAssetFromEnvironmentVariable(t *testing.T) {
 }
 
 func Test_FindCNIAssetFromDefaults122(t *testing.T) {
-       desiredCNIVersionURL := "https://storage.googleapis.com/k8s-artifacts-cni/release/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz"
+       desiredCNIVersionURL := "https://github.com/containernetworking/plugins/releases/download/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz"
        desiredCNIVersionHash := "sha256:962100bbc4baeaaa5748cdbfce941f756b1531c2eadb290129401498bfac21e7"
 
        cluster := &api.Cluster{}

@ameukam
Copy link
Member Author

ameukam commented Dec 5, 2024

@upodroid Not on this PR. kOps folx advise against it. Releases for 1.22 are no longer done so there is not really value of make this change.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/S Denotes a PR that changes 10-29 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants