chore(deps): update module github.com/confidential-containers/cloud-api-adaptor/src/cloud-providers to v0.16.0

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/confidential-containers/cloud-api-adaptor/src/cloud-providers	v0.12.0 -> v0.16.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

confidential-containers/cloud-api-adaptor (github.com/confidential-containers/cloud-api-adaptor/src/cloud-providers)

v0.16.0

Compare Source

What's Changed

• workflows: Add scorecard workflow by @​stevenhorsman in #​2530
• cloud: Prioritise instance type annotation for selection by @​bpradipt in #​2536
• podvm_mkosi: Update s390x run_mkosi_in_container by @​stevenhorsman in #​2500
• scratch-space: Update old references by @​stevenhorsman in #​2541
• Post 0.15.0 tasks by @​stevenhorsman in #​2538
• test/e2e: Add DoTestPodWithInitContainer to libvirt by @​ajaypvictor in #​2543
• test/e2e: Run cloud-provider unit tests in CI by @​chathuryaadapa in #​2544
• aws: add support to use temporary credentials by @​wainersm in #​2551
• build(deps): bump github/codeql-action from 3.24.9 to 3.30.1 by @​dependabot[bot] in #​2556
• build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by @​dependabot[bot] in #​2522
• build(deps): bump actions/cache from 4.2.3 to 4.2.4 by @​dependabot[bot] in #​2521
• build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @​dependabot[bot] in #​2545
• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @​dependabot[bot] in #​2546
• webhook: Increase cert deployment timeout by @​ldoktor in #​2553
• test/e2e: fix undefined types.ContainerListOptions error in docker_common.go by @​wainersm in #​2557
• cloud-providers: fix AWS and docker unit tests by @​wainersm in #​2558
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.11.0 in /src/cloud-providers by @​dependabot[bot] in #​2526
• e2e: disable tdx e2e tests on azure temporarily by @​mkulke in #​2559
• Alibaba: add peerpodctrl support by @​Xynnn007 in #​2560
• entrypoint: ensure that comma-separate options don't have spaces by @​esposem in #​2529
• e2e: disable remaining tdx e2e jobs in az e2e test by @​mkulke in #​2562
• build(deps): bump github/codeql-action from 3.30.1 to 3.30.3 by @​dependabot[bot] in #​2566
• build(deps): bump oras-project/setup-oras from 1.2.3 to 1.2.4 by @​dependabot[bot] in #​2567
• Actions: Use x.y.z version string for gh actions by @​ldoktor in #​2571
• versions: Bump golang to 1.24.7 by @​stevenhorsman in #​2534
• build(deps): bump github.com/avast/retry-go/v4 from 4.5.1 to 4.6.1 in /src/cloud-providers by @​dependabot[bot] in #​2462
• build(deps): bump actions/stale from 9.1.0 to 10.0.0 by @​dependabot[bot] in #​2564
• build(deps): bump lycheeverse/lychee-action from 2.5.0 to 2.6.1 by @​dependabot[bot] in #​2572
• build(deps): bump actions/attest-build-provenance from 2.4.0 to 3.0.0 by @​dependabot[bot] in #​2573
• build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by @​dependabot[bot] in #​2568
• versions: Bump the builder image by @​stevenhorsman in #​2535
• build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.31.0 in /src/cloud-providers by @​dependabot[bot] in #​2569
• test/e2e: adding pvc options and refactoring pvc/secret binding by @​ramachandrach in #​2555
• build(deps): bump golang.org/x/net from 0.42.0 to 0.44.0 in /src/cloud-api-adaptor in the x-net group across 1 directory by @​dependabot[bot] in #​2576
• podvm: place scratch-space condition correctly by @​mkulke in #​2580
• ci: update terraform spec for nvme images on azure by @​mkulke in #​2582
• Daily e2e test name clarifications by @​stevenhorsman in #​2583
• test/e2e: Increase memory limit by @​stevenhorsman in #​2579
• ci(zizmor):adding GHA scan targets for PR events by @​eshantatIBM in #​2570
• ide: add DevContainer profiles to simplify onboarding by @​nmwael in #​2574
• build(deps): bump github.com/vishvananda/netlink from 1.2.1-beta.2 to 1.3.1 in /src/cloud-api-adaptor by @​dependabot[bot] in #​2460
• ci: add azure workflow + infra for podvm release by @​mkulke in #​2584
• Kata 3.21.0 bump by @​stevenhorsman in #​2586
• workflows: e2e_docker: Clean up space by @​stevenhorsman in #​2587
• ci: Check for AGENT_TOOLSDIRECTORY being set by @​stevenhorsman in #​2589
• Introduce Bring-Your-Own-Machine (BYOM) provider by @​bpradipt in #​2554
• build(deps): bump zizmorcore/zizmor-action from 0.1.2 to 0.2.0 by @​dependabot[bot] in #​2593
• ci: Introduce retry mechanism for yq parsing flakiness by @​BbolroC in #​2588
• Introduce CI for AWS - part 2 by @​wainersm in #​2552
• e2e-test: fix azure community gallery name by @​mkulke in #​2598
• versions: Pin operator version by @​stevenhorsman in #​2599
• release: 0.16.0 release pins & bumps by @​stevenhorsman in #​2602

New Contributors

• @​ramachandrach made their first contribution in #​2555
• @​eshantatIBM made their first contribution in #​2570
• @​nmwael made their first contribution in #​2574

Full Changelog: confidential-containers/cloud-api-adaptor@v0.15.0...v0.16.0

v0.15.0

Compare Source

What's Changed

• aws: Update sdk to fix imds issue on EKS by @​bpradipt in #​2438
• bump the x-net group across 5 directories with 1 update by @​dependabot[bot] in #​2428
• workflows: Pin action hashes by @​stevenhorsman in #​2445
• podvm: fix Makefile not working by @​frankbu in #​2444
• V0.14.0 post release tasks by @​stevenhorsman in #​2440
• workflows: Remove docker hub support by @​stevenhorsman in #​2452
• caa: handle unavailable VM IPs by @​squarti in #​2454
• workflows: Delete daily ibmcloud results by @​stevenhorsman in #​2451
• podvm: Wait for net ready before setup-nat-for-imds by @​ldoktor in #​2450
• azure: implement root-volume-size support by @​snir911 in #​2465
• gcp: adding ability to bind tags to instances by @​beraldoleal in #​2422
• caa: allow docker image pull secrets with username/password only by @​squarti in #​2456
• workflows: Remove inherit secrets by @​stevenhorsman in #​2457
• build(deps): bump the x-net group across 5 directories with 1 update by @​dependabot[bot] in #​2459
• Golang 1.23.10 part 1 by @​stevenhorsman in #​2467
• Golang 1.23.10 part2 by @​stevenhorsman in #​2468
• ibmcloud-powervs: install iptables during podvm image build by @​Amulyam24 in #​2470
• build(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0 by @​dependabot[bot] in #​2472
• build(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by @​dependabot[bot] in #​2473
• build(deps): bump the aws-sdk-go-v2 group across 1 directory with 6 updates by @​dependabot[bot] in #​2476
• build(deps): bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2 in /src/cloud-api-adaptor by @​dependabot[bot] in #​2475
• workflows: Add default permissions by @​stevenhorsman in #​2443
• aws: deprecate centos image by @​msalman-abid in #​2449
• tests/e2e : to verify caa logs with expected string by @​PrakashMuddana in #​2389
• podvm: Extract podvm smoke test into shell script by @​ldoktor in #​2376
• e2e-test: add id-token: write when invoking wf's by @​mkulke in #​2477
• build(deps): bump github.com/vishvananda/netns from 0.0.4 to 0.0.5 in /src/cloud-api-adaptor by @​dependabot[bot] in #​2474
• build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @​dependabot[bot] in #​2484
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.10.1 in /src/cloud-api-adaptor by @​dependabot[bot] in #​2482
• ibmcloud: add VPE gateway SG rule to ROKS setup doc by @​frankbu in #​2478
• azure: add az-copy-image tool by @​mkulke in #​2469
• podvm: add OCICRYPT CONFIG for image pulling by @​Xynnn007 in #​2489
• aws: Use dmi data for detecting AWS by @​bpradipt in #​2491
• ibmcloud-powervs: remove trailing zeros while printing instance details by @​Amulyam24 in #​2490
• build(deps): bump github/codeql-action from 3.29.0 to 3.29.1 by @​dependabot[bot] in #​2487
• Add disk storage support for container image store by @​bpradipt in #​2480
• agent-protocol-forwarder: daemon.json => apf.json by @​mkulke in #​2494
• scratch-space: only allow encrypted scratch space by @​mkulke in #​2495
• build(deps): bump github/codeql-action from 3.29.1 to 3.29.2 by @​dependabot[bot] in #​2497
• ibmcloud: add tip to use Trusted Profile to ROKS setup doc by @​Pacho20 in #​2499
• gcp: avoid printing credentials to log by @​snir911 in #​2498
• versions: Bump umoci to 0.5.0 by @​ajaypvictor in #​2507
• versions: Bump to kata 3.18.0 by @​stevenhorsman in #​2479
• versions: Bump kcli by @​stevenhorsman in #​2511
• ibmcloud: modify SG rule setup in ROKS setup doc by @​Pacho20 in #​2504
• build(deps): bump github/codeql-action from 3.29.2 to 3.29.4 by @​dependabot[bot] in #​2513
• build(deps): bump github/codeql-action from 3.29.4 to 3.29.5 by @​dependabot[bot] in #​2517
• podvm: backport setup-nat-for-imds.service configuration by @​snir911 in #​2518
• Readme: add openssf badge by @​mkulke in #​2519
• build(deps): bump github/codeql-action from 3.29.7 to 3.29.8 by @​dependabot[bot] in #​2524
• tests/e2e: libvirt: Attempts to stablise the libvirt e2e tests and resolve the webhook install issues by @​stevenhorsman in #​2515
• build(deps): bump golang.org/x/oauth2 from 0.12.0 to 0.27.0 in /src/webhook by @​dependabot[bot] in #​2508
• Kata 3.19.1 bump by @​stevenhorsman in #​2510
• versions: Bump github.com/docker/docker by @​stevenhorsman in #​2531
• build(deps): bump github/codeql-action from 3.29.8 to 3.29.9 by @​dependabot[bot] in #​2532
• build(deps): bump lycheeverse/lychee-action from 2.4.1 to 2.5.0 by @​dependabot[bot] in #​2523
• build(deps): bump docker/login-action from 3.4.0 to 3.5.0 by @​dependabot[bot] in #​2520
• 0.15.0 release by @​stevenhorsman in #​2533

New Contributors

• @​msalman-abid made their first contribution in #​2449
• @​Pacho20 made their first contribution in #​2499

Full Changelog: confidential-containers/cloud-api-adaptor@v0.14.0...v0.15.0

v0.14.0

Compare Source

What's Changed

• V0.13.0 post release tasks by @​stevenhorsman in #​2359
• workflow: podvm_mkosi: Fix docker image registry by @​stevenhorsman in #​2358
• tests/e2e: Add option to override CAA namespace by @​stevenhorsman in #​2329
• ibmcloud: add INITDATA to CLI peerpod properties by @​frankbu in #​2364
• ibmcloud: update vpc-go-sdk to v0.66.0 release by @​frankbu in #​2362
• podvm: support aarch64/ARM64 build by @​xutao323 in #​2357
• versions: Bump kcli to 99.0.202504041449 by @​BbolroC in #​2321
• ibmcloud-powervs: pass instance ID instead of instance while fetching VM IP by @​Amulyam24 in #​2368
• podvm: provide attested measurements in OCI by @​mkulke in #​2363
• version: Bump golang version in builder by @​stevenhorsman in #​2370
• Golang bump 1.23.8 by @​stevenhorsman in #​2371
• nvidia: set Nvidia's CDI annotation based on default_gpus by @​snir911 in #​2302
• Doc changes by @​bpradipt in #​2369
• tests/e2e : Add initdata related test cases, invalied initdata by @​rafsalr in #​2337
• podvm: Remove libtdx library install by @​stevenhorsman in #​2374
• build(deps): bump actions/attest-build-provenance from 1 to 2 by @​dependabot in #​2375
• caa: Enable running without Kubernetes by @​spotlesstofu in #​2301
• versions: Bump golang.org/x/net to v0.38.0 by @​stevenhorsman in #​2383
• ibmcloud: add Trustee instructions to ROKS demo doc by @​frankbu in #​2379
• ibmcloud: pod annotation to override image id by @​frankbu in #​2380
• ibmcloud: improve image selection logging by @​frankbu in #​2390
• podvm: remove --no-verify by @​ANJANA-A-R-K in #​2352
• ibmcloud: use SDK constant for TDX confidential compute mode. by @​frankbu in #​2391
• podvm-mkosi: Add a few useful remarks to README by @​ldoktor in #​2377
• ibmcloud: add instructions to deploy a sample Trustee. by @​frankbu in #​2394
• initdata: gunzip body by @​mkulke in #​2388
• azure-e2e: fix truncated digest test by @​mkulke in #​2398
• ibmcloud: gzip INITDATA in ROKS setup instructions. by @​frankbu in #​2399
• podvm: fix GO_ARCH env by @​Xynnn007 in #​2401
• podvm: add dependency and default images to rhel Dockerfiles by @​frankbu in #​2403
• ci: Skip checklinks job by @​stevenhorsman in #​2407
• ibmcloud-powervs: install oras and modify copy-files.sh for image build by @​Amulyam24 in #​2366
• caa: Refactor DISABLECVM setting by @​stevenhorsman in #​2360
• Bump: golang.org/x/oauth2 to address CVE by @​chathuryaadapa in #​2404
• gcp: improved image source format detection by @​pawelpros in #​2393
• ibmcloud: update ROKS demo doc image instructions by @​frankbu in #​2408
• Revert "ci: add yq shim for v3/v4 support" by @​stevenhorsman in #​2411
• docs: added gzip + base64 encoding info by @​pawelpros in #​2413
• caa: publish the cloud-api-adaptor image with ibmcloud_powervs provider by @​Amulyam24 in #​2410
• caa: update versions for IBM go dependencies by @​Amulyam24 in #​2418
• podvm-mkosi: update podvm image to fedora 41 by @​mkulke in #​2419
• 3.17.0 dependency bump by @​stevenhorsman in #​2421
• Add support for Alibaba Cloud by @​Xynnn007 in #​2396
• Dependabot go configuration by @​stevenhorsman in #​2402
• libvirt: Add podvm instance cpu and mem size support for libvirt by @​savitrilh in #​2116
• workflows: dependabot commit check skip by @​stevenhorsman in #​2432
• caa: Fix typo in initdata documentation by @​c3d in #​2417
• docker: bump fedora image to 41 by @​spotlesstofu in #​2330
• alibaba: update Community image id by @​Xynnn007 in #​2433
• tests/e2e:running all testcommands, erroring if pod not found by @​PrakashMuddana in #​2361
• caa: add map mutex in PeerPodService by @​squarti in #​2431
• peerpod-ctrl: Support multiple providers in peerpod-ctrl by @​squarti in #​2381
• AlibabaCloud: document and kustomization update by @​Xynnn007 in #​2434
• 0.14.0 release by @​stevenhorsman in #​2435

New Contributors

• @​rafsalr made their first contribution in #​2337
• @​spotlesstofu made their first contribution in #​2301
• @​Xynnn007 made their first contribution in #​2401
• @​pawelpros made their first contribution in #​2393
• @​savitrilh made their first contribution in #​2116
• @​c3d made their first contribution in #​2417
• @​PrakashMuddana made their first contribution in #​2361

Full Changelog: confidential-containers/cloud-api-adaptor@v0.13.0...v0.14.0

v0.13.0

Compare Source

What's Changed

• test/aws: disable, enable and fix tests by @​wainersm in #​2262
• gcp: add note on discard_unpacked_layers for GKE by @​beraldoleal in #​2257
• Docker provider e2e test by @​stevenhorsman in #​2188
• workflow: podvm_mkosi: Update registry by @​stevenhorsman in #​2271
• podvm: Add --pull option to import.sh and download-image.sh by @​frankbu in #​2268
• V0.12.0 post release tasks by @​stevenhorsman in #​2270
• gcp: handle image in two formats by @​beraldoleal in #​2282
• gcp: allow users to set podvm disk-type and align CLI options by @​beraldoleal in #​2281
• workflow: Add test_e2e_docker trigger by @​stevenhorsman in #​2277
• docker: Use iptables-wrapper in pod VM container image by @​yoheiueda in #​2275
• version: Bump golang to 1.22.12 by @​stevenhorsman in #​2286
• versions: Bump golang-fedora image version by @​stevenhorsman in #​2287
• Fix incorrect assignment of Image ID by @​bpradipt in #​2291
• ibmcloud: update vpc-go-sdk to v0.64.0 release by @​frankbu in #​2289
• ibmcloud: fix import.sh bucket selection by @​frankbu in #​2280
• Paremetrise peerpods socket and pods dir param by @​bpradipt in #​2292
• ibmcloud: add option to enable/disable confidential VM by @​frankbu in #​2295
• AWS: improve logging for clarity by @​EmmEff in #​2288
• ibmcloud: disable confidential VM in ROKS demo doc by @​frankbu in #​2298
• ibmcloud: Improvements to ROKS demo instructions by @​gcoon151 in #​2253
• libvirt: Remove SEV code by @​stevenhorsman in #​2299
• GCP: introducing provisioning code and tests by @​beraldoleal in #​2290
• version: Bump golang version in builder by @​stevenhorsman in #​2308
• Introduce CI for AWS - part 1 by @​wainersm in #​2274
• versions: Bump golang.org/x/crypto by @​stevenhorsman in #​2307
• workflow: e2e_libvirt running out of space by @​stevenhorsman in #​2309
• mkosi: fix Fedora GPG key issue in mkosi build by @​beraldoleal in #​2303
• ibmcloud: Use beta go vpc sdk to enable TDX configuration by @​frankbu in #​2306
• ci: add delay on podvm smoke-test by @​mkulke in #​2269
• test/e2e: Update testcases for HTTPS KBS by @​chathuryaadapa in #​2285
• workflow:e2e_run_all: Switch s390x image build runner by @​stevenhorsman in #​2312
• workflow: podvm_mkosi: Switch s390x image build runner by @​stevenhorsman in #​2313
• Update CLOUD_PROVIDER for iptables installation by @​ajaypvictor in #​2305
• adaptor: log error causing agent proxy connection failure by @​frankbu in #​2315
• podvm_mkosi: Use container to run mkosi on s390x by @​BbolroC in #​2317
• ibmcloud: add confidential mode instructions to ROKS demo doc by @​frankbu in #​2318
• ibmcloud: add another security group in ROKS demo instructions by @​frankbu in #​2319
• ibmcloud-powervs: fix processors config by @​squarti in #​2324
• GHA: Use 390x runners again for building libvirt test artifacts by @​BbolroC in #​2322
• Fixes for RHEL/s390x PODVM builds by @​ifireball in #​2320
• versions: Attempt to use Ubuntu 24.04 in packer by @​stevenhorsman in #​2293
• podvm: Set PROTOC_ARCH for s390x to s390_64 by @​BbolroC in #​2328
• ibmcloud: Move away from Ubuntu 20.04 by @​stevenhorsman in #​2326
• e2e: fix initdata templating by @​mkulke in #​2332
• ibmcloud-powervs: Set PodVM name maximum length to 47 by @​squarti in #​2334
• gcp: implement DISABLECVM logic by @​beraldoleal in #​2327
• CAA: add support to look up imagePullSecrets for pods by @​squarti in #​2232
• Misc fixes by @​bpradipt in #​2351
• ibmcloud-powervs: fix podvm image build by @​Amulyam24 in #​2339
• gcp: fetch disk image size dynamically and avoid using node's metadata service creds by @​beraldoleal in #​2345
• Support external network connectivity for the pod via pod VM network by @​bpradipt in #​2273
• ibmcloud-powervs: add powervs adaptor to peerpod controller by @​squarti in #​2347
• 3.15.0 dependency bump by @​stevenhorsman in #​2340
• ibmcloud-powervs: adjust systemType/processors/memory from annotations by @​squarti in #​2343
• ibmcloud: remove unneeded ns delete from ROKS doc by @​frankbu in #​2344
• provisioner: fix caa-provisioner-cli uninstall failures by @​frankbu in #​2341
• Go mod security bumps pre 0.13.0 by @​stevenhorsman in #​2355
• 0.13.0 release by @​stevenhorsman in #​2356

New Contributors

• @​gcoon151 made their first contribution in #​2253
• @​ifireball made their first contribution in #​2320

Full Changelog: confidential-containers/cloud-api-adaptor@v0.12.0...v0.13.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[gkurz]

/ok-to-test

[gkurz]

/hold

Shouldn't we be pulling from https://github.com/openshift/cloud-api-adaptor instead of upstream ?

WDYT @littlejawa @bpradipt ?

[openshift-ci]

@red-hat-konflux[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[gkurz]

Let's proceed with that bump. The switch to downstream CAA will be handled in another PR.

/unhold

/lgtm