chore: bump kind and pin its image (#2905)

Author: rarescosma

scripts/local-cluster.sh

@@ -10,6 +10,10 @@ ROOT="$(dirname "${HERE}")"
 export HERE
 export ROOT
 
+# Check the kind releases page for available images, and always specify an image with its full SHA256 digest:
+# https://github.com/kubernetes-sigs/kind/releases
+export KIND_NODE_IMAGE="kindest/node:v1.33.4@sha256:25a6018e48dfcaee478f4a59af81157a437f15e6e140bf103f85a2e7cd0cbbf2"
+
 log.info.no_newline() {
   echo -en "[\e[34mck8s\e[0m] ${*}" 1>&2
 }

scripts/local-clusters/profiles/multi-node-cache.yaml

@@ -12,6 +12,7 @@ networking:
   serviceSubnet: 10.96.0.0/12
 nodes:
   - role: control-plane
+    image: "${KIND_NODE_IMAGE}"
     kubeadmConfigPatches:
       - |
         kind: ClusterConfiguration
@@ -42,6 +43,7 @@ nodes:
     labels:
       elastisys.io/node-group: control-plane
   - role: worker
+    image: "${KIND_NODE_IMAGE}"
     extraMounts:
       - containerPath: /etc/containerd/certs.d
         hostPath: ${ROOT}/scripts/local-clusters/registries
@@ -58,13 +60,15 @@ nodes:
     labels:
       elastisys.io/node-group: worker
   - role: worker
+    image: "${KIND_NODE_IMAGE}"
     extraMounts:
       - containerPath: /etc/containerd/certs.d
         hostPath: ${ROOT}/scripts/local-clusters/registries
         readOnly: true
     labels:
       elastisys.io/node-group: worker
   - role: worker
+    image: "${KIND_NODE_IMAGE}"
     extraMounts:
       - containerPath: /etc/containerd/certs.d
         hostPath: ${ROOT}/scripts/local-clusters/registries

scripts/local-clusters/profiles/multi-node.yaml

@@ -8,6 +8,7 @@ networking:
   serviceSubnet: 10.96.0.0/12
 nodes:
   - role: control-plane
+    image: "${KIND_NODE_IMAGE}"
     labels:
       elastisys.io/node-group: control-plane
     kubeadmConfigPatches:
@@ -35,6 +36,7 @@ nodes:
         containerPath: /etc/kubernetes/audit-policy/apiserver-audit-policy.yaml
         readOnly: true
   - role: worker
+    image: "${KIND_NODE_IMAGE}"
     extraPortMappings:
       - containerPort: 30080
         hostPort: 80
@@ -47,8 +49,10 @@ nodes:
     labels:
       elastisys.io/node-group: worker
   - role: worker
+    image: "${KIND_NODE_IMAGE}"
     labels:
       elastisys.io/node-group: worker
   - role: worker
+    image: "${KIND_NODE_IMAGE}"
     labels:
       elastisys.io/node-group: worker

scripts/local-clusters/profiles/single-node-cache.yaml

@@ -12,6 +12,7 @@ networking:
   serviceSubnet: 10.96.0.0/12
 nodes:
   - role: control-plane
+    image: "${KIND_NODE_IMAGE}"
     kubeadmConfigPatches:
       - |
         kind: ClusterConfiguration
@@ -42,6 +43,7 @@ nodes:
     labels:
       elastisys.io/node-group: control-plane
   - role: worker
+    image: "${KIND_NODE_IMAGE}"
     extraMounts:
       - containerPath: /etc/containerd/certs.d
         hostPath: ${ROOT}/scripts/local-clusters/registries

scripts/local-clusters/profiles/single-node.yaml

@@ -8,6 +8,7 @@ networking:
   serviceSubnet: 10.96.0.0/12
 nodes:
   - role: control-plane
+    image: "${KIND_NODE_IMAGE}"
     labels:
       elastisys.io/node-group: control-plane
     kubeadmConfigPatches:
@@ -35,6 +36,7 @@ nodes:
         containerPath: /etc/kubernetes/audit-policy/apiserver-audit-policy.yaml
         readOnly: true
   - role: worker
+    image: "${KIND_NODE_IMAGE}"
     extraPortMappings:
       - containerPort: 30080
         hostPort: 80

tests/Dockerfile

@@ -138,7 +138,7 @@ RUN apt-get update && \
     rm -rf /var/lib/apt/lists/* && \
     ln -s /usr/bin/podman-remote /usr/bin/podman
 
-ARG KIND_VERSION="0.27.0"
+ARG KIND_VERSION="0.30.0"
 RUN curl -LOs "https://github.com/kubernetes-sigs/kind/releases/download/v${KIND_VERSION}/kind-linux-amd64" && \
     install -Tm 755 kind-linux-amd64 /usr/local/bin/kind && \
     rm kind-linux-amd64