Add support for deploying K8s Agent as Helm Addon during cluster deployment

.github/workflows/blackduck.yaml

@@ -31,19 +31,24 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Install devbox
-        uses: jetify-com/devbox-install-action@v0.13.0
+        uses: jetify-com/devbox-install-action@v0.14.0
         with:
           enable-cache: true
 
+      - name: Export go version and mod cache path
+        id: export-go-version-and-mod-cache-path
+        run: |
+          echo go-version="$(devbox run -- go version | cut -d ' ' -f 3)" >>"${GITHUB_OUTPUT}"
+          echo mod-cache-path="$(devbox run -- go env GOMODCACHE)" >>"${GITHUB_OUTPUT}"
+
       - name: Go cache
         uses: actions/cache@v4
         with:
           path: |
-            ~/.cache/go-build
-            ~/go/pkg/mod
-          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+            ${{ steps.export-go-version-and-mod-cache-path.outputs.mod-cache-path }}
+          key: ${{ runner.os }}-${{ steps.export-go-version-and-mod-cache-path.outputs.go-version }}-${{ hashFiles('**/go.sum') }}
           restore-keys: |
-            ${{ runner.os }}-go-
+            ${{ runner.os }}-${{ steps.export-go-version-and-mod-cache-path.outputs.go-version }}-
 
       - name: Build Project
         run: devbox run -- make build-snapshot
@@ -61,7 +66,7 @@ jobs:
 
       - name: Black Duck Full Scan
         if: ${{ github.event_name != 'pull_request' }}
-        uses: blackduck-inc/black-duck-security-scan@v2.4.0
+        uses: blackduck-inc/black-duck-security-scan@v2.5.0
         with:
           blackducksca_url: ${{ secrets.BLACKDUCK_URL }}
           blackducksca_token: ${{ secrets.BLACKDUCK_API_TOKEN }}
@@ -71,7 +76,7 @@ jobs:
 
       - name: Black Duck PR Scan
         if: ${{ github.event_name == 'pull_request' }}
-        uses: blackduck-inc/black-duck-security-scan@v2.4.0
+        uses: blackduck-inc/black-duck-security-scan@v2.5.0
         env:
           DETECT_PROJECT_VERSION_NAME: ${{ github.base_ref }}
         with:

.github/workflows/checks.yml

@@ -31,19 +31,24 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Install devbox
-        uses: jetify-com/devbox-install-action@v0.13.0
+        uses: jetify-com/devbox-install-action@v0.14.0
         with:
           enable-cache: true
 
+      - name: Export go version and mod cache path
+        id: export-go-version-and-mod-cache-path
+        run: |
+          echo go-version="$(devbox run -- go version | cut -d ' ' -f 3)" >>"${GITHUB_OUTPUT}"
+          echo mod-cache-path="$(devbox run -- go env GOMODCACHE)" >>"${GITHUB_OUTPUT}"
+
       - name: Go cache
         uses: actions/cache@v4
         with:
           path: |
-            ~/.cache/go-build
-            ~/go/pkg/mod
-          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+            ${{ steps.export-go-version-and-mod-cache-path.outputs.mod-cache-path }}
+          key: ${{ runner.os }}-${{ steps.export-go-version-and-mod-cache-path.outputs.go-version }}-${{ hashFiles('**/go.sum') }}
           restore-keys: |
-            ${{ runner.os }}-go-
+            ${{ runner.os }}-${{ steps.export-go-version-and-mod-cache-path.outputs.go-version }}-
 
       - name: Run unit tests
         run: devbox run -- make test
@@ -67,9 +72,9 @@ jobs:
           - {"provider": "Nutanix", "kubernetesMinor": "v1.31", "kubernetesVersion": "v1.31.9", "baseOS": "rocky-9.5"}
           - {"provider": "Nutanix", "kubernetesMinor": "v1.32", "kubernetesVersion": "v1.32.3", "baseOS": "rocky-9.5"}
           - {"provider": "Nutanix", "kubernetesMinor": "v1.33", "kubernetesVersion": "v1.33.2", "baseOS": "rocky-9.6"}
-          - {"provider": "Docker", "kubernetesMinor": "v1.32", "kubernetesVersion": "v1.32.8"}
-          - {"provider": "Docker", "kubernetesMinor": "v1.33", "kubernetesVersion": "v1.33.4"}
-          - {"provider": "Docker", "kubernetesMinor": "v1.34", "kubernetesVersion": "v1.34.0"}
+          - {"provider": "Docker", "kubernetesMinor": "v1.32", "kubernetesVersion": "v1.32.9"}
+          - {"provider": "Docker", "kubernetesMinor": "v1.33", "kubernetesVersion": "v1.33.5"}
+          - {"provider": "Docker", "kubernetesMinor": "v1.34", "kubernetesVersion": "v1.34.1"}
           # Uncomment below once we have the ability to run e2e tests on other providers from GHA.
           # - {"provider": "AWS", "kubernetesMinor": "v1.29", "kubernetesVersion": "v1.29.6"}
       fail-fast: false
@@ -96,9 +101,9 @@ jobs:
     strategy:
       matrix:
         config:
-          - {"provider": "Docker", "kubernetesMinor": "v1.32", "kubernetesVersion": "v1.32.8"}
-          - {"provider": "Docker", "kubernetesMinor": "v1.33", "kubernetesVersion": "v1.33.4"}
-          - {"provider": "Docker", "kubernetesMinor": "v1.34", "kubernetesVersion": "v1.34.0"}
+          - {"provider": "Docker", "kubernetesMinor": "v1.32", "kubernetesVersion": "v1.32.9"}
+          - {"provider": "Docker", "kubernetesMinor": "v1.33", "kubernetesVersion": "v1.33.5"}
+          - {"provider": "Docker", "kubernetesMinor": "v1.34", "kubernetesVersion": "v1.34.1"}
           # Uncomment below once we have the ability to run e2e tests on other providers from GHA.
           # - {"provider": "Nutanix", "kubernetesMinor": "v1.29", "kubernetesVersion": "v1.29.6"}
           # - {"provider": "AWS", "kubernetesMinor": "v1.29", "kubernetesVersion": "v1.29.6"}
@@ -128,7 +133,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Install devbox
-        uses: jetify-com/devbox-install-action@v0.13.0
+        uses: jetify-com/devbox-install-action@v0.14.0
         with:
           enable-cache: true
 
@@ -166,19 +171,24 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Install devbox
-        uses: jetify-com/devbox-install-action@v0.13.0
+        uses: jetify-com/devbox-install-action@v0.14.0
         with:
           enable-cache: true
 
+      - name: Export go version and mod cache path
+        id: export-go-version-and-mod-cache-path
+        run: |
+          echo go-version="$(devbox run -- go version | cut -d ' ' -f 3)" >>"${GITHUB_OUTPUT}"
+          echo mod-cache-path="$(devbox run -- go env GOMODCACHE)" >>"${GITHUB_OUTPUT}"
+
       - name: Go cache
         uses: actions/cache@v4
         with:
           path: |
-            ~/.cache/go-build
-            ~/go/pkg/mod
-          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+            ${{ steps.export-go-version-and-mod-cache-path.outputs.mod-cache-path }}
+          key: ${{ runner.os }}-${{ steps.export-go-version-and-mod-cache-path.outputs.go-version }}-${{ hashFiles('**/go.sum') }}
           restore-keys: |
-            ${{ runner.os }}-go-
+            ${{ runner.os }}-${{ steps.export-go-version-and-mod-cache-path.outputs.go-version }}-
 
       - name: Set up pre-commit cache
         uses: actions/cache@v4
@@ -204,7 +214,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install devbox
-        uses: jetify-com/devbox-install-action@v0.13.0
+        uses: jetify-com/devbox-install-action@v0.14.0
         with:
           enable-cache: true
 

.github/workflows/codeql-analysis.yml

@@ -35,7 +35,7 @@ jobs:
         languages: ${{ matrix.language }}
 
     - name: Install devbox
-      uses: jetify-com/devbox-install-action@v0.13.0
+      uses: jetify-com/devbox-install-action@v0.14.0
       with:
         enable-cache: true
 

.github/workflows/devbox-update.yml

@@ -27,7 +27,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Install devbox
-        uses: jetify-com/devbox-install-action@v0.13.0
+        uses: jetify-com/devbox-install-action@v0.14.0
         with:
           enable-cache: true
 

.github/workflows/e2e.yml

@@ -38,30 +38,25 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 0
-
-      - name: Install Nix on self-hosted ARC runners
-        uses: DeterminateSystems/nix-installer-action@v20
-        if: inputs.runs-on == 'self-hosted-ncn-dind'
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          logger: pretty
-          extra-conf: experimental-features = ca-derivations fetch-closure
-
       - name: Install devbox
-        uses: jetify-com/devbox-install-action@v0.13.0
+        uses: jetify-com/devbox-install-action@v0.14.0
         with:
           enable-cache: ${{ inputs.runs-on != 'self-hosted-ncn-dind' }}
-          skip-nix-installation: ${{ inputs.runs-on == 'self-hosted-ncn-dind' }}
+
+      - name: Export go version and mod cache path
+        id: export-go-version-and-mod-cache-path
+        run: |
+          echo go-version="$(devbox run -- go version | cut -d ' ' -f 3)" >>"${GITHUB_OUTPUT}"
+          echo mod-cache-path="$(devbox run -- go env GOMODCACHE)" >>"${GITHUB_OUTPUT}"
 
       - name: Go cache
         uses: actions/cache@v4
         with:
           path: |
-            ~/.cache/go-build
-            ~/go/pkg/mod
-          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+            ${{ steps.export-go-version-and-mod-cache-path.outputs.mod-cache-path }}
+          key: ${{ runner.os }}-${{ steps.export-go-version-and-mod-cache-path.outputs.go-version }}-${{ hashFiles('**/go.sum') }}
           restore-keys: |
-            ${{ runner.os }}-go-
+            ${{ runner.os }}-${{ steps.export-go-version-and-mod-cache-path.outputs.go-version }}-
 
       # The default disk size of Github hosted runners is ~14GB, this is not enough to run the e2e tests.
       # Cleanup the disk, see upstream discussion https://github.com/actions/runner-images/issues/2840.

.github/workflows/github-pages.yml

@@ -39,7 +39,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Install devbox
-        uses: jetify-com/devbox-install-action@v0.13.0
+        uses: jetify-com/devbox-install-action@v0.14.0
         with:
           enable-cache: true
 

.github/workflows/govulncheck.yml

@@ -28,7 +28,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Install devbox
-        uses: jetify-com/devbox-install-action@v0.13.0
+        uses: jetify-com/devbox-install-action@v0.14.0
         with:
           enable-cache: true
 

.github/workflows/release-tag.yml

@@ -28,19 +28,24 @@ jobs:
           fetch-depth: 0
 
       - name: Install devbox
-        uses: jetify-com/devbox-install-action@v0.13.0
+        uses: jetify-com/devbox-install-action@v0.14.0
         with:
           enable-cache: true
 
+      - name: Export go version and mod cache path
+        id: export-go-version-and-mod-cache-path
+        run: |
+          echo go-version="$(devbox run -- go version | cut -d ' ' -f 3)" >>"${GITHUB_OUTPUT}"
+          echo mod-cache-path="$(devbox run -- go env GOMODCACHE)" >>"${GITHUB_OUTPUT}"
+
       - name: Go cache
         uses: actions/cache@v4
         with:
           path: |
-            ~/.cache/go-build
-            ~/go/pkg/mod
-          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+            ${{ steps.export-go-version-and-mod-cache-path.outputs.mod-cache-path }}
+          key: ${{ runner.os }}-${{ steps.export-go-version-and-mod-cache-path.outputs.go-version }}-${{ hashFiles('**/go.sum') }}
           restore-keys: |
-            ${{ runner.os }}-go-
+            ${{ runner.os }}-${{ steps.export-go-version-and-mod-cache-path.outputs.go-version }}-
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3

.pre-commit-config.yaml

@@ -69,19 +69,19 @@ repos:
     files: "^devbox.(yaml|lock)$"
     pass_filenames: false
 - repo: https://github.com/tekwizely/pre-commit-golang
-  rev: v1.0.0-rc.1
+  rev: v1.0.0-rc.2
   hooks:
   - id: go-mod-tidy
     exclude: ^docs/
 - repo: https://github.com/pre-commit/pre-commit-hooks
-  rev: v5.0.0
+  rev: v6.0.0
   hooks:
   - id: trailing-whitespace
     stages: [pre-commit]
   - id: check-yaml
     args: ["-m", "--unsafe"]
     stages: [pre-commit]
-    exclude: ^charts/.+/(templates|addons)/.+\.ya?ml$
+    exclude: (embedded/kubeletconfigpatch.yaml|^charts/.+/(templates|addons)/.+\.ya?ml)$
   - id: mixed-line-ending
     args: ["-f", "lf"]
     exclude: \.bat$
@@ -123,7 +123,7 @@ repos:
     stages: [pre-commit]
     exclude: ^\.envrc$
 - repo: https://github.com/shellcheck-py/shellcheck-py
-  rev: v0.10.0.1
+  rev: v0.11.0.1
   hooks:
   - id: shellcheck
     stages: [pre-commit]

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.33.1"
+  ".": "0.35.1"
 }

CHANGELOG.md

@@ -1,5 +1,86 @@
 # Changelog
 
+## 0.35.1 (2025-10-07)
+
+<!-- Release notes generated using configuration in .github/release.yaml at main -->
+
+## What's Changed
+### Fixes 🔧
+* fix: Remove Cilium chainingMode when kubeproxyreplacement is enabled by @supershal in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1340
+* fix: Align validation with upstream Kubeadm Bootstrap Provider types by @dlipovetsky in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1342
+### Other Changes
+* refactor: move handler directories by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1321
+
+
+**Full Changelog**: https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/compare/v0.35.0...v0.35.1
+
+## 0.35.0 (2025-10-02)
+
+<!-- Release notes generated using configuration in .github/release.yaml at main -->
+
+## What's Changed
+### Exciting New Features 🎉
+* feat: enable Cilium source IP preservation by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1295
+* feat: update capa with nutanix fork by @faiq in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1329
+* feat: additionalTags handlers for AWS and EKS by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1333
+### Fixes 🔧
+* fix: use nodeadm mutations by @faiq in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1332
+### Other Changes
+* build: downgrade clusterctl version by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1330
+
+
+**Full Changelog**: https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/compare/v0.34.0...v0.35.0
+
+## 0.34.0 (2025-09-29)
+
+<!-- Release notes generated using configuration in .github/release.yaml at main -->
+
+## What's Changed
+### Exciting New Features 🎉
+* feat: update AWS CSI to 2.48.0 by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1280
+* feat: Pull in EKS APIs by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1253
+* feat: Add EKS handlers by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1254
+* feat: enable Cilium kube-proxy replacement for new clusters by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1288
+* feat: automatically enable Cilium kube-proxy replacement feature by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1286
+* feat: update mindthegap version to v1.24.0 by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1305
+* feat: EKS ClusterClass and example by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1296
+* feat: Enable configurable parallel image pulls by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1306
+* feat: add identityRef for AWS and EKS clusters by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1311
+* feat: add volume APIs to AWS and EKS Nodes by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1309
+* feat: update Cilium to latest version by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1318
+* feat: cilium configuration overrides for EKS provider by @supershal in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1316
+### Fixes 🔧
+* fix: Correct placementGroup variable name in API by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1256
+* fix: hardcode the kubectl tag in registry syncer Pods by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1262
+* fix: include Generic config specs in EKS cluster API  by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1298
+* fix: Ciliums kube-proxy replacement rollout and wait by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1307
+### Other Changes
+* test: Add t.Helper() calls in nested tests by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1258
+* build: remove legacy kube-vip manifest by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1260
+* refactor: move deprecated Kubelet flags to KubeletConfiguration by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1259
+* build: Add kube-api-linter by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1209
+* docs: Remove redundant CRS enable env var by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1274
+* ci: Fix reviewdog run for pushes to main by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1275
+* test(e2e): Test against Kubernetes v1.34.0 via Docker provider by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1273
+* ci: Upgrade CAPI core minor releases in own dependabot group by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1276
+* refactor: Use declared builtin variable name rather than string by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1281
+* ci: Use DeterminateSystems/nix-installer-action instead of cachix action by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1284
+* perf: Enable compression of audit logs to increase retention, without changing disk space requirements by @dlipovetsky in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1270
+* build: use kustomize to generate failuredomain examples by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1294
+* refactor: keep only common types in Generic config specs by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1297
+* test: new LoadBalancer Service e2e test by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1304
+* build: Update Kubernetes patch versions for tests by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1310
+* test: reduce polling frequency on PC API by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1312
+* docs: Upgrade to docsy 0.12.0 with hugo >= 0.146.0 support by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1315
+* build: go1.25.1 to fix CVE by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1314
+* refactor: Use metallb APIs instead of unstructured by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1317
+* refactor: add new kube-proxy mode disable option by @dkoshkin in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1319
+* ci: Upgrade devbox install action and remove custom golangci-lint by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1322
+* build: Update all tools via devbox update by @jimmidyson in https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/pull/1328
+
+
+**Full Changelog**: https://github.com/nutanix-cloud-native/cluster-api-runtime-extensions-nutanix/compare/v0.33.1...v0.34.0
+
 ## 0.33.1 (2025-07-31)
 
 <!-- Release notes generated using configuration in .github/release.yaml at main -->