OCPBUGS-2211: go getter update for terraform & terraform providers #6352

jhixson74 · 2022-09-15T02:18:31Z

This updates go-getter to v1.6.2 to address several vulnerabilities

This can be cherry-picked into 4.13, 4.12, and 4.11.

Update go-getter to v1.6.2 to address several vulnerabilities.

jhixson74 · 2022-09-15T15:44:53Z

/test e2e-azure
/test e2e-aws
/test e2e-gcp

openshift-ci · 2022-09-15T15:46:07Z

@jhixson74: The specified target(s) for /test were not found.
The following commands are available to trigger required jobs:

/test aro-unit
/test e2e-aws-ovn
/test e2e-aws-ovn-upi
/test e2e-azure-ovn
/test e2e-azure-ovn-upi
/test e2e-gcp-ovn
/test e2e-gcp-ovn-upi
/test e2e-metal-ipi-ovn-ipv6
/test e2e-vsphere-ovn
/test e2e-vsphere-upi
/test gofmt
/test golint
/test govet
/test images
/test okd-images
/test okd-unit
/test okd-verify-codegen
/test openstack-manifests
/test shellcheck
/test tf-lint
/test unit
/test verify-codegen
/test verify-vendor
/test yaml-lint

The following commands are available to trigger optional jobs:

/test e2e-alibaba
/test e2e-aws-disruptive
/test e2e-aws-ovn-fips
/test e2e-aws-ovn-imdsv2
/test e2e-aws-ovn-proxy
/test e2e-aws-ovn-shared-vpc
/test e2e-aws-ovn-single-node
/test e2e-aws-upgrade
/test e2e-aws-upi-proxy
/test e2e-aws-workers-rhel8
/test e2e-azure-ovn-resourcegroup
/test e2e-azure-ovn-shared-vpc
/test e2e-azurestack
/test e2e-azurestack-upi
/test e2e-crc
/test e2e-gcp-ovn-shared-vpc
/test e2e-gcp-upgrade
/test e2e-gcp-upi-xpn
/test e2e-ibmcloud-ovn
/test e2e-libvirt
/test e2e-metal-assisted
/test e2e-metal-ipi
/test e2e-metal-ipi-ovn-dualstack
/test e2e-metal-ipi-swapped-hosts
/test e2e-metal-ipi-virtualmedia
/test e2e-metal-single-node-live-iso
/test e2e-nutanix
/test e2e-openstack
/test e2e-openstack-kuryr
/test e2e-openstack-parallel
/test e2e-openstack-proxy
/test e2e-openstack-upi
/test e2e-ovirt
/test e2e-vsphere-zones
/test okd-e2e-aws-ovn
/test okd-e2e-aws-upgrade
/test okd-e2e-gcp
/test okd-e2e-gcp-ovn-upgrade
/test okd-e2e-vsphere
/test tf-fmt

Use /test all to run the following jobs that were automatically triggered:

pull-ci-openshift-installer-master-aro-unit
pull-ci-openshift-installer-master-e2e-alibaba
pull-ci-openshift-installer-master-e2e-aws-ovn
pull-ci-openshift-installer-master-e2e-azure-ovn
pull-ci-openshift-installer-master-e2e-azure-ovn-resourcegroup
pull-ci-openshift-installer-master-e2e-azure-ovn-shared-vpc
pull-ci-openshift-installer-master-e2e-azurestack
pull-ci-openshift-installer-master-e2e-gcp-ovn
pull-ci-openshift-installer-master-e2e-ibmcloud-ovn
pull-ci-openshift-installer-master-e2e-libvirt
pull-ci-openshift-installer-master-e2e-metal-assisted
pull-ci-openshift-installer-master-e2e-metal-ipi
pull-ci-openshift-installer-master-e2e-openstack
pull-ci-openshift-installer-master-e2e-ovirt
pull-ci-openshift-installer-master-e2e-vsphere-ovn
pull-ci-openshift-installer-master-gofmt
pull-ci-openshift-installer-master-golint
pull-ci-openshift-installer-master-govet
pull-ci-openshift-installer-master-images
pull-ci-openshift-installer-master-okd-e2e-aws-ovn
pull-ci-openshift-installer-master-okd-e2e-gcp-ovn-upgrade
pull-ci-openshift-installer-master-okd-images
pull-ci-openshift-installer-master-okd-unit
pull-ci-openshift-installer-master-okd-verify-codegen
pull-ci-openshift-installer-master-shellcheck
pull-ci-openshift-installer-master-tf-fmt
pull-ci-openshift-installer-master-tf-lint
pull-ci-openshift-installer-master-unit
pull-ci-openshift-installer-master-verify-codegen
pull-ci-openshift-installer-master-verify-vendor
pull-ci-openshift-installer-master-yaml-lint

Details

In response to this:

/test e2e-azure
/test e2e-aws
/test e2e-gcp

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

r4f4 · 2022-09-15T15:49:17Z

/test e2e-azure-ovn

r4f4 · 2022-09-16T15:06:24Z

/test e2e-azure-ovn

r4f4 · 2022-09-16T15:07:15Z

/test e2e-vsphere-ovn

r4f4 · 2022-09-16T15:08:40Z

/test e2e-aws-ovn

r4f4 · 2022-09-16T17:04:47Z

/test e2e-azure-ovn

r4f4 · 2022-09-16T19:14:17Z

e2e-azurestack: passed the terraform stage, should be enough to validate the changes in this PR
e2e-gcp-ovn: passed the cluster install phase, enough for this PR.
e2e-ibmcloud-ovn: passed e2e tests, failed in post-test steps. Enough for this PR.
e2e-libvirt: failed when gathering test results in a known permafailing spot. Enough for this PR.
e2e-azure-ovn: passed the cluster install phase.

I'm waiting on e2e-aws-ovn results before giving a LGTM.

r4f4 · 2022-09-16T19:15:32Z

/test e2e-aws-ovn

r4f4

terraform phase was successfull in the relevant test jobs.

/lgtm

jhixson74 · 2022-09-20T22:40:19Z

/cherry-pick release-4.13

openshift-cherrypick-robot · 2022-09-20T22:40:21Z

@jhixson74: once the present PR merges, I will cherry-pick it on top of release-4.13 in a new PR and assign it to you.

Details

In response to this:

/cherry-pick release-4.13
/cherry-pick release-4.12
/cherry-pick release-4.11

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

jhixson74 · 2022-09-20T22:41:25Z

/cherry-pick release-4.12

openshift-cherrypick-robot · 2022-09-20T22:41:26Z

@jhixson74: once the present PR merges, I will cherry-pick it on top of release-4.12 in a new PR and assign it to you.

Details

In response to this:

/cherry-pick release-4.12

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

jhixson74 · 2022-09-20T22:41:36Z

/cherry-pick release-4.11

openshift-cherrypick-robot · 2022-09-20T22:41:38Z

@jhixson74: once the present PR merges, I will cherry-pick it on top of release-4.11 in a new PR and assign it to you.

Details

In response to this:

/cherry-pick release-4.11

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

sadasu · 2022-09-21T15:22:12Z

/approve

openshift-ci · 2022-09-21T15:24:42Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: sadasu

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [sadasu]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci-robot · 2022-09-21T15:41:09Z

/retest-required

Remaining retests: 0 against base HEAD 9b0831e and 2 for PR HEAD 6daa70c in total

openshift-ci · 2022-09-21T18:24:34Z

@jhixson74: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-azurestack	`6daa70c`	link	false	`/test e2e-azurestack`
ci/prow/e2e-azure-ovn-resourcegroup	`6daa70c`	link	false	`/test e2e-azure-ovn-resourcegroup`

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

r4f4 · 2022-09-21T21:49:35Z

/test e2e-gcp-ovn

openshift-ci-robot · 2022-09-22T05:12:10Z

/retest-required

Remaining retests: 0 against base HEAD c55f785 and 1 for PR HEAD 6daa70c in total

r4f4 · 2022-09-22T08:07:12Z

/override ci/prow/e2e-libvirt

openshift-ci · 2022-09-22T08:07:44Z

@r4f4: Overrode contexts on behalf of r4f4: ci/prow/e2e-libvirt

Details

In response to this:

/override ci/prow/e2e-libvirt

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

r4f4 · 2022-09-22T13:30:11Z

/override ci/prow/e2e-azure-ovn
Only one e2e test failed, no need to run the entire job until it passes. The terraform change has been already tested by a successful install

openshift-ci · 2022-09-22T13:30:26Z

@r4f4: Overrode contexts on behalf of r4f4: ci/prow/e2e-azure-ovn

Details

In response to this:

/override ci/prow/e2e-azure-ovn
Only one e2e test failed, no need to run the entire job until it passes. The terraform change has been already tested by a successful install

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

r4f4 · 2022-09-22T13:32:09Z

/override ci/prow/e2e-ibmcloud-ovn
install and test phases succeeded. The job is failing on some post-gather step, not relevant to this PR.

openshift-ci · 2022-09-22T13:32:39Z

@r4f4: Overrode contexts on behalf of r4f4: ci/prow/e2e-ibmcloud-ovn

Details

In response to this:

/override ci/prow/e2e-ibmcloud-ovn
install and test phases succeeded. The job is failing on some post-gather step, not relevant to this PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

r4f4 · 2022-09-22T13:33:53Z

/override ci/prow/okd-e2e-gcp-ovn-upgrade
The first install succeeded, the job timed out during upgrade. The timeout is 4h, so let's not keep running this.

openshift-ci · 2022-09-22T13:35:07Z

@r4f4: Overrode contexts on behalf of r4f4: ci/prow/okd-e2e-gcp-ovn-upgrade

Details

In response to this:

/override ci/prow/okd-e2e-gcp-ovn-upgrade
The first install succeeded, the job timed out during upgrade. The timeout is 4h, so let's not keep running this.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-cherrypick-robot · 2022-09-22T13:46:00Z

@jhixson74: new pull request created: #6394

Details

In response to this:

/cherry-pick release-4.13

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-cherrypick-robot · 2022-09-22T13:47:07Z

@jhixson74: new pull request created: #6396

Details

In response to this:

/cherry-pick release-4.12

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-cherrypick-robot · 2022-09-22T13:48:13Z

@jhixson74: new pull request created: #6397

Details

In response to this:

/cherry-pick release-4.11

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

jhixson74 · 2022-09-22T23:42:58Z

/cherry-pick release-4.11

openshift-cherrypick-robot · 2022-09-22T23:44:25Z

@jhixson74: new pull request created: #6406

Details

In response to this:

/cherry-pick release-4.11

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

sadasu · 2022-10-11T13:28:03Z

/retitle OCPBUGS-2211: go getter update for terraform & terraform providers

openshift-ci-robot · 2022-10-11T13:28:54Z

@jhixson74: All pull requests linked via external trackers have merged:

Jira Issue OCPBUGS-2211 has been moved to the MODIFIED state.

Details

In response to this:

This updates go-getter to v1.6.2 to address several vulnerabilities

This can be cherry-picked into 4.13, 4.12, and 4.11.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

jhixson74 added 3 commits September 14, 2022 19:12

terraform & terraform providers: update go-getter to v1.6.2

00ac3a2

Update go-getter to v1.6.2 to address several vulnerabilities.

terraform & terraform providers: go mod tidy

3f4a6ab

Update go-getter to v1.6.2 to address several vulnerabilities.

terraform & terraform providers: go mod vendor

6daa70c

Update go-getter to v1.6.2 to address several vulnerabilities.

openshift-ci bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Sep 15, 2022

openshift-ci bot requested review from AnnaZivkovic and r4f4 September 15, 2022 02:20

r4f4 reviewed Sep 16, 2022

View reviewed changes

openshift-ci bot assigned r4f4 Sep 16, 2022

openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Sep 16, 2022

r4f4 removed their assignment Sep 16, 2022

jhixson74 changed the title ~~[wip] go getter update for terraform & terraform providers~~ go getter update for terraform & terraform providers Sep 20, 2022

openshift-ci bot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Sep 20, 2022

openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Sep 21, 2022

openshift-merge-robot merged commit 2d0389c into openshift:master Sep 22, 2022

openshift-cherrypick-robot mentioned this pull request Sep 22, 2022

[release-4.13] go getter update for terraform & terraform providers #6394

Closed

openshift-cherrypick-robot mentioned this pull request Sep 22, 2022

[release-4.12] go getter update for terraform & terraform providers #6396

Closed

openshift-cherrypick-robot mentioned this pull request Sep 22, 2022

[release-4.11] Bug 2101015: go getter update for terraform & terraform providers #6397

Closed

openshift-cherrypick-robot mentioned this pull request Sep 22, 2022

[release-4.11] Bug 2101015: go getter update for terraform & terraform providers #6406

Closed

sdodson mentioned this pull request Oct 11, 2022

[release-4.11] Bug 2101015: go getter update for terraform & terraform providers #6411

Merged

openshift-ci bot changed the title ~~go getter update for terraform & terraform providers~~ OCPBUGS-2211: go getter update for terraform & terraform providers Oct 11, 2022

OCPBUGS-2211: go getter update for terraform & terraform providers #6352

OCPBUGS-2211: go getter update for terraform & terraform providers #6352

Uh oh!

Conversation

jhixson74 commented Sep 15, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

jhixson74 commented Sep 15, 2022

Uh oh!

openshift-ci bot commented Sep 15, 2022

Uh oh!

r4f4 commented Sep 15, 2022

Uh oh!

r4f4 commented Sep 16, 2022

Uh oh!

r4f4 commented Sep 16, 2022

Uh oh!

r4f4 commented Sep 16, 2022

Uh oh!

r4f4 commented Sep 16, 2022

Uh oh!

r4f4 commented Sep 16, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

r4f4 commented Sep 16, 2022

Uh oh!

r4f4 left a comment

Choose a reason for hiding this comment

Uh oh!

jhixson74 commented Sep 20, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

openshift-cherrypick-robot commented Sep 20, 2022

Uh oh!

jhixson74 commented Sep 20, 2022

Uh oh!

openshift-cherrypick-robot commented Sep 20, 2022

Uh oh!

jhixson74 commented Sep 20, 2022

Uh oh!

openshift-cherrypick-robot commented Sep 20, 2022

Uh oh!

sadasu commented Sep 21, 2022

Uh oh!

openshift-ci bot commented Sep 21, 2022

Uh oh!

openshift-ci-robot commented Sep 21, 2022

Uh oh!

openshift-ci bot commented Sep 21, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

r4f4 commented Sep 21, 2022

Uh oh!

openshift-ci-robot commented Sep 22, 2022

Uh oh!

r4f4 commented Sep 22, 2022

Uh oh!

openshift-ci bot commented Sep 22, 2022

Uh oh!

r4f4 commented Sep 22, 2022

Uh oh!

openshift-ci bot commented Sep 22, 2022

Uh oh!

r4f4 commented Sep 22, 2022

Uh oh!

openshift-ci bot commented Sep 22, 2022

Uh oh!

r4f4 commented Sep 22, 2022

Uh oh!

openshift-ci bot commented Sep 22, 2022

Uh oh!

openshift-cherrypick-robot commented Sep 22, 2022

Uh oh!

openshift-cherrypick-robot commented Sep 22, 2022

Uh oh!

openshift-cherrypick-robot commented Sep 22, 2022

Uh oh!

jhixson74 commented Sep 22, 2022

Uh oh!

openshift-cherrypick-robot commented Sep 22, 2022

jhixson74 commented Sep 15, 2022 •

edited

Loading

r4f4 commented Sep 16, 2022 •

edited

Loading

jhixson74 commented Sep 20, 2022 •

edited

Loading

openshift-ci bot commented Sep 21, 2022 •

edited

Loading