Bump the go group in /integrations/kube-agent-updater with 2 updates

[dependabot]

Bumps the go group in /integrations/kube-agent-updater with 2 updates: k8s.io/api and sigs.k8s.io/controller-runtime.

Updates k8s.io/api from 0.28.0 to 0.28.1

Commits

• 4c04358 Update dependencies to v0.28.1 tag
• See full diff in compare view

Updates sigs.k8s.io/controller-runtime from 0.15.1 to 0.16.0

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.16.0

Highlights

• Granular cache configuration (#2421)
• New cache option to fail on missing informer on cache reads (#2406)
• Secure metrics serving (#2407)
• Upgrade to Kubernetes 1.28 libraries (#2393, #2405, #2449)

Changes since v0.15

⚠️ Breaking Changes

• Bump k8s.io/* dependencies to v1.28.0 by @​sbueringer (#2393, #2405, #2449)
• Allow configuring more granular cache filtering by @​alvaroaleman (#2421)
• Introduce Metrics Options & secure metrics serving by @​sbueringer (#2407)
• Return an error if the continue list option is set for the cache reader by @​shuheiktgw (#2439)
• Remove deprecated manager, webhook and cluster options by @​sbueringer (#2422)
• Remove deprecated MultiNamespacedCacheBuilder, NewFakeClientWithScheme, controllerutil.Object, envtest.Environment.KubeAPIServerFlags & zap.Options.DestWritter by @​sbueringer (#2423)
• controller builder: return error when multiple reconcilers are set by @​sbueringer (#2415)
• fake client: use correct RBAC apiGroup name when deciding if to allow unconditional updates by @​jaideepr97 (#2412)
• Minor improvements to godoc & code style in cache pkg by @​sbueringer (#2416)

✨ New Features

• Cache: add ReaderFailOnMissingInformer option by @​stevekuznetsov (#2406)
• Cache: allow non-blocking retrieval of informers by @​maxsmythe (#2371)

🐛 Bug Fixes

• Add missing return statement in admission.Decoder.DecodeRaw by @​lleshchi (#2433)
• fakeClient.Status().Update(...) cannot recognize resource version conflicts by @​iiiceoo (#2365)
• Fix Defaulting of the User Agent by @​alvaroaleman (#2435)
• Fix logs in the unstructured client by @​Poor12 (#2343)
• Fix unspecified KindsFor version by @​tenstad (#2346)
• Fix TerminalError(nil).Error() panic by @​sheidkamp (#2438)
• hasLabels and matchingLabels step on each other by @​shanshanying (#2363)
• SetLogger should work with nil sinks by @​vincepri (#2367)

🌱 Others

• Use NewRateLimitingQueueWithConfig instead of deprecated NewNamedRateLimitingQueue by @​sbueringer (#2411)
• Add a prefix to the stack trace printed after SetLogger timeout by @​vincepri (#2357)
• Minor improvements to godoc, code style in builder pkg by @​sbueringer (#2414)
• Add integration test to avoid manager.Start deadlocks by @​sbueringer (#2418)
• Automatically regenerate scratch env go mod file by @​sbueringer (#2413)
• Introduce a new runnable group for basic servers of the manager by @​zqzten (#2337)
• Add logs around Reconcile call, change webhook logs to log level 5 by @​sbueringer (#2419)
• Add action to update modules on dependabot PRs by @​sbueringer (#2447, #2448)
• Optimize Add/RemoveFinalizer by @​0xff-dev (#2348)

... (truncated)

Commits

• c20ea14 ✨ Allow non-blocking retrieval of informers (#2371)
• 304027b Merge pull request #2451 from sbueringer/pr-log-warn
• f4735b6 log warning if error and non-zero Result returned
• 480fc5b Merge pull request #2450 from sbueringer/pr-bump-ct-v0.13
• 96854e7 Bump to controller-tools v0.13
• f30e11d pkg/{cache,client}: add options for cache miss policy (#2406)
• d781099 Merge pull request #2449 from sbueringer/pr-bump-k8s-1.28
• 2291e7d Bump to k8s.io v1.28.0
• 6d99b58 Merge pull request #2433 from lleshchi/issue_2429
• 8a1ef8b Merge pull request #2446 from kubernetes-sigs/dependabot/go_modules/gomodules...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codingllama]

FYI @hugoShaka, would you mind taking a look and doing the necessary changes for the update? I believe sigs.k8s.io introduced a bunch of breaking changes.

[hugoShaka]

I made the required changes to our code to support the new controller-runtime version. However, we cannot update this dependency today.

Controller-runtime added a new deprecated opentelemetry dependency in kubernetes-sigs/controller-runtime#2407. Their otel import is too old and incompatible with the recent ones. Updating to controller-runtime v0.16 and onward would force us to downgrade many of our dependencies, including critical ones like cosign and rekor.

We must wait until kubernetes-sigs/controller-runtime#2460 is merged and a bugfix release issued.

[codingllama]

Thanks, Hugo. Do you want to keep this around while we wait for the new sigs?

[rosstimothy]

If we close this we will just get a new PR on Sunday without the context that is already here.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[hugoShaka]

Follow up: #31712