Merge branch 'main' into kubernetes-1.33

Author: jfbus

.github/dependabot.yml

@@ -19,10 +19,6 @@ inputs:
   oks_region:
     description: 'Region'
     required: true
-  public_cloud:
-    description: 'Create cluster in public cloud'
-    required: false
-    default: "false"
   image_name:
     description: 'OMI name'
     required: true
@@ -36,7 +32,7 @@ runs:
   using: "composite"
   steps:
     - name: ⬇️ Checkout CAPOSC
-      uses: actions/checkout@v5
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       with:
         repository: 'outscale/cluster-api-provider-outscale'
         path: "cluster-api-provider-outscale"
@@ -61,7 +57,7 @@ runs:
           -n kube-system
         echo "installing CCM"
         helm install --wait k8s-osc-ccm deploy/k8s-osc-ccm --set oscSecretName=osc-secret --set image.repository=${{ inputs.registry }}/outscale/cloud-provider-osc --set oscSecretFormat=v1 --set image.tag=${{ inputs.version }} \
-          --set extraLoadBalancerTags.clikey=clivalue
+          --set extraLoadBalancerTags.clikey=clivalue --set "extraNodeLabels.clilabel=\{\{ .SubRegion \}\}"
         echo "waiting for worker nodes"
         kubectl wait --for=condition=Ready nodes --all --timeout=900s
         kubectl get nodes -o wide
@@ -97,7 +93,7 @@ runs:
         kubectl create secret generic osc-secret-file --from-literal=config.json=$profile -n kube-system
         echo "updating CCM config"
         helm upgrade --wait k8s-osc-ccm deploy/k8s-osc-ccm --set oscSecretName=osc-secret-file --set oscCredentialsFromFile=true --set image.repository=${{ inputs.registry }}/outscale/cloud-provider-osc --set image.tag=${{ inputs.version }}\
-          --set extraLoadBalancerTags.clikey=clivalue
+          --set extraLoadBalancerTags.clikey=clivalue --set "extraNodeLabels.clilabel=\{\{ .SubRegion \}\}"
         sleep 5
         kubectl get pod -n kube-system -l "app=osc-cloud-controller-manager"
       shell: bash

.github/local_action/start_ccm_e2e/action.yml

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "github>outscale/oks-tools-team//renovate/default.json5#initial"
+  ],
+  "packageRules": [
+    {
+      "matchManagers": [
+        "gomod"
+      ],
+      "matchPackageNames": [
+        "k8s.io/**",
+        "sigs.k8s.io/**"
+      ],
+      "enabled": false
+    }
+  ]
+}

.github/renovate.json5

@@ -26,11 +26,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: ⬇️ Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
     - name: 🔎 Docker Lint
       run: bash -c "make dockerlint"
     - name: 🔎 golangci-lint
-      uses: golangci/golangci-lint-action@v9
+      uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9
       with:
         version: v2.7.1
         args: --timeout=300s

.github/workflows/build.yml

@@ -28,18 +28,18 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4
         with:
           languages: ${{ matrix.language }}
           queries: +security-and-quality
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v4
+        uses: github/codeql-action/autobuild@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/codeql.yml

@@ -13,7 +13,7 @@ jobs:
   cred-scan:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
     - name: Scan credentials
       uses: outscale/cred-scan@main
       with:

.github/workflows/cred-scan.yml

@@ -26,17 +26,17 @@ jobs:
     runs-on: [self-hosted, linux]
     steps:
     - name: ⬇️ Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
     - name: ⬇️ Install kubectl
-      uses: azure/setup-kubectl@v4
+      uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
       with:
         version: v1.34.2
     - name: ⬇️ Install Helm
-      uses: azure/setup-helm@v4
+      uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
     - name: ⬇️ Install Python
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6
     - name: ⬇️ Install Go
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6
       with:
         go-version-file: 'go.mod'
     - name: 🔐 Set AK/SK name based on runner region
@@ -67,14 +67,3 @@ jobs:
         image_name: "ubuntu-2204-kubernetes-v1.33.6-2025-11-17"
         version: ${{ format('{0}.{1}', github.sha, github.run_attempt) }}
         registry: ${{ vars.REGISTRY }}
-    ## Create Public Cloud Cluster
-    # - name: 🧪 Test on Public cluster
-    #   uses: ./.github/local_action/start_ccm_e2e
-    #   with:
-    #     osc_access_key: ${{ secrets[env.OSC_ACCESS_KEY_NAME] }}
-    #     osc_secret_key: ${{ secrets[env.OSC_SECRET_KEY_NAME] }}
-    #     osc_region: ${{ env.OSC_REGION }}
-    #     public_cloud: "true"
-    #     image_id: ${{ secrets.OMI_ID }}
-    #     version: ${{ format('{0}.{1}', github.sha, github.run_attempt) }}
-    #     registry: ${{ vars.REGISTRY }}

.github/workflows/e2e_test.yml

@@ -13,7 +13,7 @@ jobs:
   github-sanity-scan:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
     - name: Github sanity scanner
       uses: outscale/github-sanity-scan@main
       with:

.github/workflows/github-sanity-scan.yml

@@ -13,10 +13,10 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Check the repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           fetch-depth: 0
-      - uses: azure/setup-helm@v4
+      - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
         with:
           version: v3.18.3
       - name: Docker login

.github/workflows/publish-helm.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Check the repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       - name: Docker login
         run: docker login -u $DOCKER_USER -p $DOCKER_PASSWORD
         env: