auto update cri-o version

.github/workflows/update-cri-o-version.yml

@@ -0,0 +1,48 @@
+name: "update-cri-o-version"
+on:
+  workflow_dispatch:
+  schedule:
+    # every Monday at around 3 am pacific/10 am UTC
+    - cron: "0 10 * * 1"
+env:
+  GOPROXY: https://proxy.golang.org
+  GO_VERSION: '1.20.1'
+permissions:
+  contents: read
+
+jobs:
+  bump-cri-o-version:
+    runs-on: ubuntu-20.04
+    steps:
+      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568
+        with:
+          go-version: ${{env.GO_VERSION}}
+          cache: true
+          cache-dependency-path: ./go.sum
+      - name: Bump cri-o Version
+        id: bumpCrio
+        run: |
+          make update-cri-o-version
+          # The following is to support multiline with GITHUB_OUTPUT, see https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#multiline-strings
+          echo "changes<<EOF" >> $GITHUB_OUTPUT
+          echo "$(git status --porcelain)" >> $GITHUB_OUTPUT
+          echo "EOF" >> $GITHUB_OUTPUT
+      - name: Create PR
+        if: ${{ steps.bumpCrio.outputs.changes != '' }}
+        uses: peter-evans/create-pull-request@2b011faafdcbc9ceb11414d64d0573f37c774b04
+        with:
+          token: ${{ secrets.MINIKUBE_BOT_PAT }}
+          commit-message: bump cri-o version
+          committer: minikube-bot <minikube-bot@google.com>
+          author: minikube-bot <minikube-bot@google.com>
+          branch: auto_bump_cri-o_version
+          push-to-fork: minikube-bot/minikube
+          base: master
+          delete-branch: true
+          title: 'bump cri-o version'
+          labels: ok-to-test
+          body: |
+            cri-o Project released a [new version](https://github.com/cri-o/cri-o/releases),
+
+            This PR was auto-generated by `make update-cri-o-version` using [update-cri-o-version.yml](https://github.com/kubernetes/minikube/tree/master/.github/workflows/update-cri-o-version.yml) CI Workflow.

Makefile

@@ -1087,6 +1087,11 @@ update-buildkit-version:
 	(cd hack/update/buildkit_version && \
 	 go run update_buildkit_version.go)
 
+.PHONY: update-cri-o-version
+update-cri-o-version:
+	(cd hack/update/cri-o_version $$ \
+	 go run update_cri-o_version.go)
+
 .PHONY: generate-licenses
 generate-licenses:
 	./hack/generate_licenses.sh

hack/update/cri-o_version/update_cri-o_version.go

@@ -0,0 +1,106 @@
+/*
+Copyright 2023 The Kubernetes Authors All rights reserved.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package main
+
+import (
+	"context"
+	"crypto/sha256"
+	"fmt"
+	"io"
+	"net/http"
+	"os"
+	"strings"
+	"time"
+
+	"k8s.io/klog/v2"
+	"k8s.io/minikube/hack/update"
+)
+
+const cxTimeout = 5 * time.Minute
+
+var (
+	schema = map[string]update.Item{
+		"deploy/iso/minikube-iso/package/crio-bin/crio-bin.mk": {
+			Replace: map[string]string{
+				`CRIO_BIN_VERSION = .*`: `CRIO_BIN_VERSION = {{.Version}}`,
+				`CRIO_BIN_COMMIT = .*`:  `CRIO_BIN_COMMIT = {{.Commit}}`,
+			},
+		},
+	}
+)
+
+type Data struct {
+	Version string
+	Commit  string
+}
+
+func main() {
+	ctx, cancel := context.WithTimeout(context.Background(), cxTimeout)
+	defer cancel()
+
+	stable, _, _, err := update.GHReleases(ctx, "cri-o", "cri-o")
+	if err != nil {
+		klog.Fatalf("Unable to get cri-o stable version: %v", err)
+	}
+
+	data := Data{Version: stable.Tag, Commit: stable.Commit}
+
+	update.Apply(schema, data)
+
+	if err := updateHashFile(data.Version); err != nil {
+		klog.Fatalf("failed to update hash file: %v", err)
+	}
+}
+
+func updateHashFile(version string) error {
+	filePath := "../../../deploy/iso/minikube-iso/package/crio-bin/crio-bin.hash"
+	b, err := os.ReadFile(filePath)
+	if err != nil {
+		return fmt.Errorf("failed to read hash file: %v", err)
+	}
+	if strings.Contains(string(b), version) {
+		klog.Infof("hash file already contains %q", version)
+		return nil
+	}
+	r, err := http.Get(fmt.Sprintf("https://github.com/cri-o/cri-o/archive/%s.tar.gz", version))
+	if err != nil {
+		return fmt.Errorf("failed to download source code: %v", err)
+	}
+	defer r.Body.Close()
+	b, err = io.ReadAll(r.Body)
+	if err != nil {
+		return fmt.Errorf("failed to read response body: %v", err)
+	}
+	sum := sha256.Sum256(b)
+	b, err = os.ReadFile(filePath)
+	if err != nil {
+		return fmt.Errorf("failed to read hash file: %v", err)
+	}
+	if strings.Contains(string(b), version) {
+		klog.Infof("hash file already contains %q", version)
+		return nil
+	}
+	f, err := os.OpenFile(filePath, os.O_APPEND|os.O_WRONLY, 0644)
+	if err != nil {
+		return fmt.Errorf("failed to open hash file: %v", err)
+	}
+	defer f.Close()
+	if _, err := f.WriteString(fmt.Sprintf("sha256 %x %s.tar.gz\n", sum, version)); err != nil {
+		return fmt.Errorf("failed to write to hash file: %v", err)
+	}
+	return nil
+}

hack/update/golang_version/update_golang_version.go

@@ -140,6 +140,11 @@ var (
 				`GO_VERSION: .*`: `GO_VERSION: '{{.StableVersion}}'`,
 			},
 		},
+		".github/workflows/update-cri-o-version.yml": {
+			Replace: map[string]string{
+				`GO_VERSION: .*`: `GO_VERSION: '{{.StableVersion}}'`,
+			},
+		},
 		".github/workflows/sync-minikube.yml": {
 			Replace: map[string]string{
 				`GO_VERSION: .*`: `GO_VERSION: '{{.StableVersion}}'`,