fix(vendor/scoped): bump k8s version to 1.24, go version to 1.18 and fix scoped client (#2794)

* fix(vendor): bump k8s version to 1.24 and go version to 1.18

Signed-off-by: Vu Dinh <[email protected]>

* Update clock package from apimachinery to utils

The apimachinery/pkg/util/clock is deprecated and all clock utils is
on k8s.io/utils/clock repo instead.

Signed-off-by: Vu Dinh <[email protected]>

* fix(go.mod): pin opentelemetry packages into specific versions

Signed-off-by: Vu Dinh <[email protected]>
Co-authored-by: timflannagan <[email protected]>

* fix(scoped): update scoped client library to handle token secret

In k8s 1.24, token secret is no longer referenced in ServiceAccount.
By listing all secrets in the namespace and then filter them with
SA name via kubernetes.io/service-account.name annotation, the
token secret can be retrieved successfully.

Signed-off-by: Vu Dinh <[email protected]>

* fix(e2e): Fix several RBAC-related e2e test cases

Create token secret for ServiceAccount to ensure those SA
is valid for scoped client use.

Signed-off-by: Vu Dinh <[email protected]>

Co-authored-by: timflannagan <[email protected]>

Author: dinhxuanvu

.github/workflows/e2e-tests.yml

@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@v1
       - uses: actions/setup-go@v2
         with:
-          go-version: '~1.17'
+          go-version: '~1.18'
       - run: mkdir -p artifacts
       - run: make e2e-local E2E_TEST_CHUNK=${{ matrix.parallel-id }} E2E_TEST_NUM_CHUNKS=${{ strategy.job-total }} E2E_NODES=2 ARTIFACT_DIR=./artifacts/ SKIP='\[FLAKE\]'
       - name: Archive Test Artifacts # test results, failed or not, are always uploaded.

.github/workflows/flaky-e2e.yml

@@ -14,12 +14,12 @@ jobs:
       - uses: actions/checkout@v1
       - uses: actions/setup-go@v2
         with:
-          go-version: '~1.17'
+          go-version: '~1.18'
       - run: mkdir -p artifacts
       - run: make e2e-local E2E_NODES=1 TEST='\[FLAKE\]' ARTIFACT_DIR=./artifacts/
       - name: Archive Test Artifacts # test results, failed or not, are always uploaded.
         if: ${{ always() }}
         uses: actions/upload-artifact@v2
         with:
           name: e2e-test-output-${{(github.event.pull_request.head.sha||github.sha)}}-${{ github.run_id }}
-          path: ${{ github.workspace }}/bin/artifacts/*
+          path: ${{ github.workspace }}/bin/artifacts/*

.github/workflows/goreleaser.yaml

@@ -16,7 +16,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: '~1.17'
+          go-version: '~1.18'
 
       - name: Get the image tag
         if: startsWith(github.ref, 'refs/tags')

.github/workflows/run-kind-local.yml

@@ -11,7 +11,7 @@ jobs:
     - uses: actions/checkout@v1
     - uses: actions/setup-go@v2
       with:
-        go-version: '~1.17'
+        go-version: '~1.18'
     - name: Install kind
       run: |
         curl -sLo kind "$(curl -sL https://api.github.com/repos/kubernetes-sigs/kind/releases/latest | jq -r '[.assets[] | select(.name == "kind-linux-amd64")] | first | .browser_download_url')"

.github/workflows/run-minikube-local.yml

@@ -11,7 +11,7 @@ jobs:
     - uses: actions/checkout@v1
     - uses: actions/setup-go@v2
       with:
-        go-version: '~1.17'
+        go-version: '~1.18'
     - name: Install minikube
       run: |
         sudo apt-get install conntrack

.github/workflows/sanity.yaml

@@ -12,7 +12,7 @@ jobs:
     - uses: actions/checkout@v1
     - uses: actions/setup-go@v2
       with:
-        go-version: '~1.17'
+        go-version: '~1.18'
     - name: Run sanity checks
       run: make vendor && make diff
   lint:
@@ -22,4 +22,4 @@ jobs:
     - name: Run linting checks
       uses: "golangci/golangci-lint-action@v2"
       with:
-        version: "v1.45.2"
+        version: "v1.46.0"

.github/workflows/unit.yml

@@ -14,7 +14,7 @@ jobs:
       - uses: actions/checkout@v1
       - uses: actions/setup-go@v2
         with:
-          go-version: '~1.17'
+          go-version: '~1.18'
       - name: Envtest setup
         run: |
           go install sigs.k8s.io/controller-runtime/tools/setup-envtest@latest

.github/workflows/verify.yml

@@ -12,7 +12,7 @@ jobs:
       - uses: actions/checkout@v1
       - uses: actions/setup-go@v2
         with:
-          go-version: '~1.17'
+          go-version: '~1.18'
 
         # Note(tflannag): We need to explicitly setup the GOPATH as the generate-internal-groups.sh
         # codegen script still relies on $GOPATH being set and will return an error otherwise.

cmd/catalog/main.go

@@ -9,9 +9,9 @@ import (
 
 	configv1client "github.com/openshift/client-go/config/clientset/versioned/typed/config/v1"
 	"github.com/sirupsen/logrus"
-	utilclock "k8s.io/apimachinery/pkg/util/clock"
 	k8sscheme "k8s.io/client-go/kubernetes/scheme"
 	"k8s.io/client-go/tools/clientcmd"
+	utilclock "k8s.io/utils/clock"
 
 	"github.com/operator-framework/operator-lifecycle-manager/pkg/api/client"
 	"github.com/operator-framework/operator-lifecycle-manager/pkg/controller/operators/catalog"