This is an automated email from the ASF dual-hosted git repository. kezhenxu94 pushed a commit to branch fix/cve-2026-03-20 in repository https://gitbox.apache.org/repos/asf/skywalking-swck.git
commit e59aa41bfd63c97ed7aeb3605babffc7917c4045 Author: kezhenxu94 <[email protected]> AuthorDate: Fri Mar 20 14:34:44 2026 +0800 fix: upgrade cert-manager from v1.8.0 to v1.11.5 in e2e tests cert-manager v1.8.0 (EOL since 2023) was causing e2e test failures where the skywalking-swck-system operator pod never became Ready. The root cause is that cert-manager v1.8.0's admission webhook appears to fail silently in newer GitHub Actions runner environments (ubuntu-latest updated since March 2026), preventing the Certificate resource from being processed and the TLS secret from being issued. cert-manager v1.11.5 is the latest version compatible with Kubernetes v1.21.10 (used by kind in the e2e tests). --- test/e2e/banyandb/e2e.yaml | 2 +- test/e2e/oap-agent-adapter-hpa/e2e.yaml | 2 +- test/e2e/oap-eventexporter/e2e.yaml | 2 +- test/e2e/oap-satellite-adapter-hpa/e2e.yaml | 2 +- test/e2e/oap-ui-agent-external-storage/e2e.yaml | 2 +- test/e2e/oap-ui-agent-internal-storage/e2e.yaml | 2 +- test/e2e/oap-ui-agent-oapserverconfig-oapserverdynamicconfig/e2e.yaml | 2 +- test/e2e/oap-ui-agent-satellite/e2e.yaml | 2 +- test/e2e/oap-ui-agent/e2e.yaml | 2 +- test/e2e/oap-ui-swagent-configmap/e2e.yaml | 2 +- test/e2e/oap-ui-swagent/e2e.yaml | 2 +- 11 files changed, 11 insertions(+), 11 deletions(-) diff --git a/test/e2e/banyandb/e2e.yaml b/test/e2e/banyandb/e2e.yaml index 3b95616..654d6a4 100644 --- a/test/e2e/banyandb/e2e.yaml +++ b/test/e2e/banyandb/e2e.yaml @@ -23,7 +23,7 @@ setup: command: | # kind k8s cluster is in $TMPDIR export KUBECONFIG=$TMPDIR/e2e-k8s.config - kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml + kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.5/cert-manager.yaml wait: - namespace: cert-manager resource: pod diff --git a/test/e2e/oap-agent-adapter-hpa/e2e.yaml b/test/e2e/oap-agent-adapter-hpa/e2e.yaml index 17af5e6..f8f6410 100644 --- a/test/e2e/oap-agent-adapter-hpa/e2e.yaml +++ b/test/e2e/oap-agent-adapter-hpa/e2e.yaml @@ -23,7 +23,7 @@ setup: command: | # kind k8s cluster is in $TMPDIR export KUBECONFIG=$TMPDIR/e2e-k8s.config - kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml + kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.5/cert-manager.yaml wait: - namespace: cert-manager resource: pod diff --git a/test/e2e/oap-eventexporter/e2e.yaml b/test/e2e/oap-eventexporter/e2e.yaml index 9116bd9..81d4034 100644 --- a/test/e2e/oap-eventexporter/e2e.yaml +++ b/test/e2e/oap-eventexporter/e2e.yaml @@ -23,7 +23,7 @@ setup: command: | # kind k8s cluster is in $TMPDIR export KUBECONFIG=$TMPDIR/e2e-k8s.config - kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml + kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.5/cert-manager.yaml wait: - namespace: cert-manager resource: pod diff --git a/test/e2e/oap-satellite-adapter-hpa/e2e.yaml b/test/e2e/oap-satellite-adapter-hpa/e2e.yaml index d9c5b9a..bae1701 100644 --- a/test/e2e/oap-satellite-adapter-hpa/e2e.yaml +++ b/test/e2e/oap-satellite-adapter-hpa/e2e.yaml @@ -23,7 +23,7 @@ setup: command: | # kind k8s cluster is in $TMPDIR export KUBECONFIG=$TMPDIR/e2e-k8s.config - kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml + kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.5/cert-manager.yaml wait: - namespace: cert-manager resource: pod diff --git a/test/e2e/oap-ui-agent-external-storage/e2e.yaml b/test/e2e/oap-ui-agent-external-storage/e2e.yaml index cdc26d4..f8e1c74 100644 --- a/test/e2e/oap-ui-agent-external-storage/e2e.yaml +++ b/test/e2e/oap-ui-agent-external-storage/e2e.yaml @@ -23,7 +23,7 @@ setup: command: | # kind k8s cluster is in $TMPDIR export KUBECONFIG=$TMPDIR/e2e-k8s.config - kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml + kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.5/cert-manager.yaml wait: - namespace: cert-manager resource: pod diff --git a/test/e2e/oap-ui-agent-internal-storage/e2e.yaml b/test/e2e/oap-ui-agent-internal-storage/e2e.yaml index a19264a..ad24aba 100644 --- a/test/e2e/oap-ui-agent-internal-storage/e2e.yaml +++ b/test/e2e/oap-ui-agent-internal-storage/e2e.yaml @@ -23,7 +23,7 @@ setup: command: | # kind k8s cluster is in $TMPDIR export KUBECONFIG=$TMPDIR/e2e-k8s.config - kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml + kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.5/cert-manager.yaml wait: - namespace: cert-manager resource: pod diff --git a/test/e2e/oap-ui-agent-oapserverconfig-oapserverdynamicconfig/e2e.yaml b/test/e2e/oap-ui-agent-oapserverconfig-oapserverdynamicconfig/e2e.yaml index 7385888..49329a8 100644 --- a/test/e2e/oap-ui-agent-oapserverconfig-oapserverdynamicconfig/e2e.yaml +++ b/test/e2e/oap-ui-agent-oapserverconfig-oapserverdynamicconfig/e2e.yaml @@ -23,7 +23,7 @@ setup: command: | # kind k8s cluster is in $TMPDIR export KUBECONFIG=$TMPDIR/e2e-k8s.config - kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml + kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.5/cert-manager.yaml wait: - namespace: cert-manager resource: pod diff --git a/test/e2e/oap-ui-agent-satellite/e2e.yaml b/test/e2e/oap-ui-agent-satellite/e2e.yaml index cf003fd..fb731cd 100644 --- a/test/e2e/oap-ui-agent-satellite/e2e.yaml +++ b/test/e2e/oap-ui-agent-satellite/e2e.yaml @@ -23,7 +23,7 @@ setup: command: | # kind k8s cluster is in $TMPDIR export KUBECONFIG=$TMPDIR/e2e-k8s.config - kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml + kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.5/cert-manager.yaml wait: - namespace: cert-manager resource: pod diff --git a/test/e2e/oap-ui-agent/e2e.yaml b/test/e2e/oap-ui-agent/e2e.yaml index 63ca84b..774fb61 100644 --- a/test/e2e/oap-ui-agent/e2e.yaml +++ b/test/e2e/oap-ui-agent/e2e.yaml @@ -23,7 +23,7 @@ setup: command: | # kind k8s cluster is in $TMPDIR export KUBECONFIG=$TMPDIR/e2e-k8s.config - kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml + kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.5/cert-manager.yaml wait: - namespace: cert-manager resource: pod diff --git a/test/e2e/oap-ui-swagent-configmap/e2e.yaml b/test/e2e/oap-ui-swagent-configmap/e2e.yaml index d158684..23510f5 100644 --- a/test/e2e/oap-ui-swagent-configmap/e2e.yaml +++ b/test/e2e/oap-ui-swagent-configmap/e2e.yaml @@ -23,7 +23,7 @@ setup: command: | # kind k8s cluster is in $TMPDIR export KUBECONFIG=${TMPDIR}/e2e-k8s.config - kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml + kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.5/cert-manager.yaml wait: - namespace: cert-manager resource: pod diff --git a/test/e2e/oap-ui-swagent/e2e.yaml b/test/e2e/oap-ui-swagent/e2e.yaml index 7bc1802..848a3d2 100644 --- a/test/e2e/oap-ui-swagent/e2e.yaml +++ b/test/e2e/oap-ui-swagent/e2e.yaml @@ -23,7 +23,7 @@ setup: command: | # kind k8s cluster is in $TMPDIR export KUBECONFIG=${TMPDIR}/e2e-k8s.config - kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml + kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.5/cert-manager.yaml wait: - namespace: cert-manager resource: pod
