kubernetes-sigs/kustomize
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kustomize.git synced 2026-09-15 12:18:57 +00:00
Code Issues Packages Projects Releases 1 Wiki Activity
7,127 Commits 147 Branches 359 Tags
12135e15630b99629ed2e582ca2798ae2f38dbcb
Commit Graph

7127 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kazuki Suda
12135e1563 fix: add CronJob Image Volume support to images transformer 
The default images field spec covers spec/volumes[]/image/reference
under Pod and PodTemplateSpec, but CronJob's Image Volume under
spec/jobTemplate/spec/template/spec was missing from the list. This
adds the missing path.
 2026-08-29 18:53:27 +09:00
kubernetes-prow[bot]
3fd96a0bfb Merge pull request #6236 from koba1t/chore/bump_stretchr_testify_to_remove_old_dependencies 
chore: bump stretch/testify pkg to remove old yaml dependencies
 2026-08-24 18:57:01 +00:00
kubernetes-prow[bot]
12f9e63914 Merge pull request #6235 from kubernetes-sigs/revert-6223-codex/fix-integer-key-json 
Revert "fix: support integer keys when marshaling resources to JSON"
 2026-08-20 16:59:14 +00:00
kubernetes-prow[bot]
cf33ea71bf Merge pull request #6229 from kubernetes-sigs/dependabot/go_modules/hack/software.sslmate.com/src/go-pkcs12-0.7.2 
build(deps): bump software.sslmate.com/src/go-pkcs12 from 0.7.0 to 0.7.2 in /hack
 2026-08-20 00:13:10 +00:00
Yugo Kobayashi
84168ddd1b chore: bump stretch/testify pkg to remove old yaml dependencies 2026-08-20 09:04:11 +09:00
yugo kobayashi
35875a0b55 Revert "fix: support integer keys when marshaling resources to JSON" 2026-08-20 08:52:50 +09:00
dependabot[bot]
e16545fb29 build(deps): bump software.sslmate.com/src/go-pkcs12 in /hack 
Bumps software.sslmate.com/src/go-pkcs12 from 0.7.0 to 0.7.2.

---
updated-dependencies:
- dependency-name: software.sslmate.com/src/go-pkcs12
  dependency-version: 0.7.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-17 22:55:35 +00:00
kubernetes-prow[bot]
db6d67b043 Merge pull request #6223 from iahsanGill/codex/fix-integer-key-json 
fix: support integer keys when marshaling resources to JSON
 2026-08-17 17:54:55 +00:00
kubernetes-prow[bot]
7565ccab0b Merge pull request #6222 from kubernetes-sigs/dependabot/github_actions/dorny/paths-filter-4.0.3 
build(deps): bump dorny/paths-filter from 4.0.2 to 4.0.3
 2026-08-12 21:33:35 +00:00
iahsanGill
cd2fd71797 fix: support integer keys when marshaling JSON 2026-08-13 01:36:17 +05:00
iahsanGill
1df43a9735 test: reproduce integer key marshal failure 2026-08-13 01:29:37 +05:00
dependabot[bot]
a4e5a1a23d build(deps): bump dorny/paths-filter from 4.0.2 to 4.0.3 
Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from 4.0.2 to 4.0.3.
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](7b450fff21...ceb8a2b8f2)

---
updated-dependencies:
- dependency-name: dorny/paths-filter
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-10 00:42:44 +00:00
kubernetes-prow[bot]
0fd1ae0ce9 Merge pull request #6190 from koba1t/agent/openapi-artifact-compiler 
chore: refactor read scheme to openapi from kubernetes api definition
 2026-08-03 01:55:25 +00:00
koba1t
9216c6f573 chore: refactor read scheme to openapi from kubernetes api definition 
Previously, only a single embedded Kubernetes API version could be specified, resulting in a lack of support for certain GVKs.
To address this, the goal is to create and utilize a unified scheme that consolidates Kubernetes API definitions.
As a preliminary step, the current method of loading API definitions will be improved.
 2026-08-02 22:39:33 +09:00
kubernetes-prow[bot]
3a4f8c5337 Merge pull request #6193 from kubernetes-sigs/dependabot/github_actions/actions/setup-go-7.0.0 
build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
 2026-07-27 09:25:58 +00:00
kubernetes-prow[bot]
1dfeee4a1f Merge pull request #6203 from kubernetes-sigs/dependabot/npm_and_yarn/site/postcss-8.5.23 
build(deps-dev): bump postcss from 8.4.31 to 8.5.23 in /site
 2026-07-27 09:20:00 +00:00
kubernetes-prow[bot]
caa78f7419 Merge pull request #6199 from kubernetes-sigs/dependabot/go_modules/hack/google.golang.org/grpc-1.82.1 
build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 in /hack
 2026-07-27 07:31:57 +00:00
dependabot[bot]
b7591e5efc build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](924ae3a1cd...b7ad1dad31)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-27 07:25:45 +00:00
dependabot[bot]
9ab73fbc4f build(deps-dev): bump postcss from 8.4.31 to 8.5.23 in /site 
Bumps [postcss](https://github.com/postcss/postcss) from 8.4.31 to 8.5.23.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.4.31...8.5.23)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.23
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-27 07:25:07 +00:00
kubernetes-prow[bot]
32a30dee8c Merge pull request #6202 from kubernetes-sigs/dependabot/github_actions/actions/checkout-7.0.1 
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
 2026-07-27 07:23:56 +00:00
dependabot[bot]
5db144fd72 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](9c091bb21b...3d3c42e5aa)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-27 00:42:30 +00:00
dependabot[bot]
f4b15c8c78 build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 in /hack 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.80.0 to 1.82.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.80.0...v1.82.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-25 06:18:20 +00:00
kubernetes-prow[bot]
f7d33c2610 Merge pull request #6164 from EdwardCooke/minifiedreleasejson 
fix: occasional minified JSON from GitHub release API
 2026-07-16 11:51:22 +00:00
Edward Cooke
f602af3858 Remove --short 2026-07-15 21:41:25 -06:00
Edward Cooke
a315a01185 Added test to install_kustomize to verify that minified releases work 2026-07-15 21:41:25 -06:00
Edward Cooke
f8488f94e6 Fix for the occasional minified JSON from GitHub release API 2026-07-15 21:41:25 -06:00
kubernetes-prow[bot]
f36fdc77d3 Merge pull request #6184 from arpitjain099/fix/image-match-invalid-regex 
fix: do not panic on an invalid image name regexp
 2026-07-15 18:51:24 +00:00
yugo kobayashi
79bb1aa2b2 update vuln dependencies at 2026/07 (#6187) 
* update dependencies

* sync modules
 2026-07-12 03:19:46 +00:00
kubernetes-prow[bot]
d3e1f975d8 Merge pull request #6181 from kubernetes-sigs/dependabot/github_actions/dorny/paths-filter-4.0.2 
build(deps): bump dorny/paths-filter from 4.0.1 to 4.0.2
 2026-07-11 14:05:44 +00:00
kubernetes-prow[bot]
f39f952d6d Merge pull request #6186 from koba1t/bump/go_v1.26.5 
bump/go v1.26.5
 2026-07-11 00:25:45 +00:00
koba1t
9bd009f427 fix: format mismatch 2026-07-11 07:42:00 +09:00
koba1t
81991821f6 bump: go v1.26.5 2026-07-11 07:42:00 +09:00
Arpit Jain
d32ba3f38c fix: do not panic on an invalid image name regexp 
IsImageMatched interpolates the image name from kustomization images[].name
straight into a regexp and discarded the compile error. When the name is not
a valid regexp (for example "["), regexp.Compile returns a nil *Regexp and
the following MatchString call dereferences it, so kustomize build crashes with
a SIGSEGV.

Capture the compile error and return false when it is set. A name that can't
compile matches no image, which leaves the resource untouched (the same result
you get for any name that doesn't match). Adds a unit test for the invalid name
and a krusty end-to-end case that builds without panicking.

Signed-off-by: Arpit Jain <arpitjain099@gmail.com>
 2026-07-11 05:50:05 +09:00
dependabot[bot]
f0abbe7735 build(deps): bump dorny/paths-filter from 4.0.1 to 4.0.2 
Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from 4.0.1 to 4.0.2.
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](fbd0ab8f3e...7b450fff21)

---
updated-dependencies:
- dependency-name: dorny/paths-filter
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-06 00:42:40 +00:00
kubernetes-prow[bot]
ecf3669e96 Merge pull request #6177 from kubernetes-sigs/dependabot/github_actions/actions/setup-go-6.5.0 
build(deps): bump actions/setup-go from 6.4.0 to 6.5.0
 2026-06-29 01:05:04 +00:00
dependabot[bot]
f5c0b73ea8 build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 6.5.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](4a3601121d...924ae3a1cd)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-29 00:42:26 +00:00
kubernetes-prow[bot]
a1f24af332 Merge pull request #6056 from HarshithaMS005/fix-vap-namespace-scope 
kyaml: mark ValidatingAdmissionPolicy resources as cluster-scoped
 2026-06-28 08:19:03 +00:00
kubernetes-prow[bot]
64ef0cb297 Merge pull request #6170 from kubernetes-sigs/dependabot/github_actions/actions/checkout-7.0.0 
build(deps): bump actions/checkout from 6.0.2 to 7.0.0
 2026-06-27 17:59:01 +00:00
Harshitha MS
fcef996b14 kyaml: mark ValidatingAdmissionPolicy resources as cluster-scoped 
Signed-off-by: Harshitha MS <harshitha.ms@ibm.com>
 2026-06-22 18:55:53 +05:30
dependabot[bot]
846f27fffd build(deps): bump actions/checkout from 6.0.2 to 7.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](de0fac2e45...9c091bb21b)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-22 00:42:23 +00:00
SEONGHYUN HONG
9f89960cf2 fix: match image digests with any algorithm, not only sha256 (#6167) 
* fix: match image digests with any algorithm, not only sha256

IsImageMatched hard-coded '@sha256:' in its regex, while Split accepts any
digest algorithm. An image pinned with a non-sha256 digest (e.g.
nginx@sha512:...) was not matched, so the ImageTagTransformer silently left
it unchanged and the user's images: override was ignored. Generalize the
digest algorithm in the regex to match what Split accepts.

Signed-off-by: Seonghyun Hong <s3onghyun.hong@gmail.com>

* Address review: match OCI digest grammar and test spec example algorithms

Broaden the digest-algorithm match to the OCI grammar (algorithm components
separated by +._-), so multihash+base58 and other registered/unregistered
algorithms match, not just [a-zA-Z][a-zA-Z0-9]*. Add test cases using the
descriptor example algorithms: a full-length sha512 digest and
multihash+base58.

Signed-off-by: Seonghyun Hong <s3onghyun.hong@gmail.com>

---------

Signed-off-by: Seonghyun Hong <s3onghyun.hong@gmail.com>
 2026-06-20 15:25:40 +05:30
Kubernetes Prow Robot
313aacedd3 Merge pull request #6138 from dims/update-kube-openapi 
bump k8s.io/kube-openapi, drop github.com/mailru/easyjson
 2026-05-02 21:33:24 +05:30
Davanum Srinivas
9a61304919 bump k8s.io/kube-openapi, drop github.com/mailru/easyjson 
Updates k8s.io/kube-openapi from v0.0.0-20241212222426-2c72e554b1e7 to
v0.0.0-20260502001324-b7f5293f4787 across api, kyaml, and kustomize modules,
then propagates the change across all workspace modules via make workspace-sync.

The new kube-openapi release switched from the monolithic go-openapi/swag
(v0.23.0) to the refactored split sub-modules (go-openapi/swag/* v0.25.4).
The old swag carried github.com/mailru/easyjson as a dependency; the new
sub-modules do not. After go mod tidy, easyjson and josharian/intern are
fully removed from all three module graphs.

Also upgraded: github.com/google/gnostic-models v0.6.9 → v0.7.0 (pulled
in by the same kube-openapi update).

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-05-02 10:47:24 -04:00
Ali jawwad
c43ab3cee1 docs: document config.kubernetes.io/local-config annotation (#6133) 
* docs: document config.kubernetes.io/local-config annotation

Adds a Concepts page covering the three documented use cases:
Replacement data source, name-reference anchor across objects, and
KRM Function shared configuration. Cross-references the existing
manifest-annotations.md and the Kubernetes well-known annotations
page.

Signed-off-by: jawwad-ali <33836051+jawwad-ali@users.noreply.github.com>

* docs: drop implementation details and deprecated kustomize cfg note

Per koba1t review feedback on the local-config Concepts page:
implementation details (IsLocalConfig filter, DropLocalNodes helper,
source-file references) belong in the code rather than user docs, and
`kustomize cfg` is deprecated and should not be promoted to new users.
Removes the "How kustomize processes local-config resources" section.

Signed-off-by: jawwad-ali <33836051+jawwad-ali@users.noreply.github.com>

---------

Signed-off-by: jawwad-ali <33836051+jawwad-ali@users.noreply.github.com>
 2026-05-02 01:29:24 +05:30
Kubernetes Prow Robot
7be21de377 Merge pull request #6114 from zerok/zerok/gotoolchain 
chore: set minimum Go toolchain to 1.25.8
 2026-05-01 17:39:24 +05:30
Horst Gutmann
d6bd9d9b08 Set minimum Go toolchain to 1.25.8 2026-05-01 11:30:18 +02:00
Kubernetes Prow Robot
0bb03d98ba Merge pull request #6137 from kubernetes-sigs/dependabot/go_modules/hack/github.com/go-jose/go-jose/v4-4.1.4 
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /hack
 2026-05-01 14:17:23 +05:30
dependabot[bot]
5e7858b8ea build(deps): bump github.com/go-jose/go-jose/v4 in /hack 
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.1.3 to 4.1.4.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-01 00:23:45 +00:00
yugo kobayashi
1c87a5063d drop 'go-spew' dependencies and update dependencies (#6134) 
* drop 'go-spew' dependencies

* update dependencies

* fix: change install method of golangci-lint
 2026-05-01 05:37:24 +05:30
Kubernetes Prow Robot
2f9dbe434d Merge pull request #6135 from koba1t/fix/github-actions-sha256-error 
fix: github actions require to sha 256 for external actions
 2026-04-28 05:42:47 +05:30