Release checklist for v0.36.0

[cfryanr]

Release checklist

• Ensure that Pinniped's dependencies have been upgraded, to the extent desired by the team (refer to the diff output from the latest run of the all-golang-deps-updated CI job)
  • If you are updating golang in Pinniped, be sure to update golang in CI as well. Do a search-and-replace to update the version number everywhere in the pinniped ci branch.
  • If the Fosite library is being updated and the format of the content of the Supervisor's storage Secrets are changed, or if any change to our own code changes the format of the content of the Supervisor's session storage Secrets, then be sure to update the accessTokenStorageVersion, authorizeCodeStorageVersion, oidcStorageVersion, pkceStorageVersion, refreshTokenStorageVersion, variables in files such as internal/fositestorage/accesstoken/accesstoken.go. Failing tests should signal the need to update these values.
  • For go.mod direct dependencies that are v2 or above, such as github.com/google/go-github/vXX, check to see if there is a new major version available.
    • See New hack script to help us upgrade major versions of modules from go.mod #2149
  • Evaluate all replace directives in the go.mod file. Are they up to date versions? Can any replace directives be removed?
• Ensure that Pinniped's codegen is up-to-date with the latest Kubernetes releases by making sure this file is updated compared to the latest releases listed here for active branches and here for non-active branches
  • Also added to New hack script to help us upgrade major versions of modules from go.mod #2149
• Ensure that the k8s-code-generator CI job definitions are up-to-date with the latest Go, K8s, and controller-gen versions
  • See 9960c80
• All relevant feature and docs PRs are merged
  • One more dependency bump: Bump dependencies #2150
• The main pipeline is green, up to and including the ready-to-release job. Check that the expected git commit has passed the ready-to-release job.
• All merged user stories are accepted (manually tested)
• Only after all stories are accepted, manually trigger the release job to create a draft GitHub release
• Manually edit the draft release notes on the GitHub release to describe the contents of the release, using the format which was automatically added to the draft release
• Publish (i.e. make public) the draft release
• After making the release public, the jobs in the main pipeline beyond the release job should auto-trigger, so check to make sure that they passed
• Publicize the release via tweets, etc.
• Close this issue

[cfryanr]

DRAFT release notes

---

Changes

This release introduces new audit logging capabilities. It also includes other enhancements and upgrades all project dependencies.

Major Changes

• Authentication-related events are now audit-logged into the Supervisor and Concierge pod logs, allowing an administrator to trace a user's authentication journey across multiple clusters. They are marked with the JSON key-value pair "auditEvent":true. For more information, see the audit logging documentation. (Add audit logging for Supervisor and Concierge #2009, Small fixups prior to releasing audit log story #2154)

Minor Changes

• The Concierge's controller which creates the "cert agent" Deployment now pays attention to which nodes are marked as unschedulable. When there are multiple running controller-manager pods to choose from, the controller will prefer to co-locate the cert agent pod with one that is running on a node which allows scheduling pods (where spec.unschedulable is equal to false), if possible. This has the effect of moving the pod away from nodes that are cordoned or are being drained, when another node is available. (Cert agent controller avoids locating the agent pod on unschedulable nodes when possible #2143)
• Updates the Kubernetes libraries to v0.31.3, Golang to v1.23.4, and updates all other project dependencies. (Bump dependencies #2153, Bump dependencies #2152, Bump dependencies #2150, Bump dependencies #2147, Bump dependencies #2145, Bump dependencies #2142, Bump dependencies #2139, Bump dependencies #2123, Bump dependencies #2121, Bump dependencies #2119, Bump dependencies #2109, Bump dependencies #2107, Bump dependencies #2100)
• Some small refactors and test improvements. (plog.TestLogger returns a buffer instead of taking one in #2101, update test expectation to match new validation error text in new Kube #2095, fix test flake by removing memory limit from test pod #2094)

Diffs

A complete list of changes (120 commits, 136 changed files with 7,853 additions and 1,258 deletions) can be found here.

Acknowledgements

Thanks to @trouphaz for reporting the issue that led to the improvement made by #2143.

[cfryanr]

Released! https://github.com/vmware-tanzu/pinniped/releases/tag/v0.36.0