Odp/gardener revendor

.github/ISSUE_TEMPLATE/bug.md

@@ -4,6 +4,8 @@ about: Report a bug encountered while working with this Gardener extension
 
 ---
 
+<!-- Please ensure that you do not include company internal information. -->
+
 **How to categorize this issue?**
 <!--
 Please select area, kind, and priority for this issue. This helps the community categorizing it.

.github/ISSUE_TEMPLATE/feature.md

@@ -4,6 +4,8 @@ about: Suggest an enhancement for this extension
 
 ---
 
+<!-- Please ensure that you do not include company internal information. -->
+
 **How to categorize this issue?**
 <!--
 Please select area, kind, and priority for this issue. This helps the community categorizing it.

.github/ISSUE_TEMPLATE/flaking-test.md

@@ -5,6 +5,8 @@ title: "[Flaky Test] FLAKING TEST/SUITE"
 
 ---
 
+<!-- Please ensure that you do not include company internal information. -->
+
 <!-- Please only use this template for submitting reports about flaky tests or jobs (pass or fail with no underlying change in code) in Gardener CI -->
 
 **How to categorize this issue?**

.github/ISSUE_TEMPLATE/support.md

@@ -9,5 +9,5 @@ STOP -- PLEASE READ!
 
 GitHub is not the right place for support requests.
 
-If you're looking for help, please post your question on the [Kubernetes Slack](http://slack.k8s.io/) ([#gardener](https://kubernetes.slack.com/messages/gardener) channel) or join our [bi-weekly meetings](https://gardener.cloud/docs/contribute/#bi-weekly-meetings).
+If you're looking for help, please post your question on [Slack](https://join.slack.com/t/gardener-cloud/shared_invite/zt-33c9daems-3oOorhnqOSnldZPWqGmIBw) or join our [bi-weekly meetings](https://gardener.cloud/community/).
 -->

.github/pull_request_template.md

@@ -1,3 +1,5 @@
+<!-- Please ensure that you do not include company internal information. -->
+
 **How to categorize this PR?**
 <!--
 Please select area, kind, and priority for this pull request. This helps the community categorizing it.
@@ -7,10 +9,11 @@ If multiple identifiers make sense you can also state the commands multiple time
   /area auto-scaling
   ...
 
+If the PR affects cryptography or security mechanisms (encryption, keys, ciphers, hashes, signatures, etc.), mark it as crypto relevant.
+/label crypto
+
 "/area" identifiers:     audit-logging|auto-scaling|backup|compliance|control-plane-migration|control-plane|cost|delivery|dev-productivity|disaster-recovery|documentation|high-availability|logging|metering|monitoring|networking|open-source|ops-productivity|os|performance|quality|robustness|scalability|security|storage|testing|usability|user-management
 "/kind" identifiers:     api-change|bug|cleanup|discussion|enhancement|epic|flake|impediment|poc|post-mortem|question|regression|task|technical-debt|test
-
-For Gardener Enhancement Proposals (GEPs), please check the following [documentation](https://github.com/gardener/gardener/tree/master/docs/proposals/README.md) before submitting this pull request.
 -->
 /area TODO
 /kind TODO

.github/renovate.json

@@ -18,7 +18,8 @@
     "forkProcessing": "enabled",
     "enabledManagers": [
         "gomod",
-        "custom.regex"
+        "custom.regex",
+        "github-actions"
     ],
     "prCreation": "immediate",
     "recreateWhen": "always",
@@ -62,11 +63,64 @@
             "matchManagers": [
                 "gomod"
             ],
-            "automerge": true,
             "addLabels": [
                 "go module"
             ]
         },
+        {
+            "matchManagers": [
+                "gomod"
+            ],
+            "groupName": "gardener",
+            "matchPackageNames": [
+                "github.com/gardener/gardener",
+                "github.com/gardener/gardener/pkg/apis",
+                "github.com/gardener/gardener/hack/tools"
+            ]
+        },
+        {
+            "matchManagers": [
+                "gomod"
+            ],
+            "matchPackageNames": [
+                "k8s.io/api",
+                "k8s.io/apiextensions-apiserver",
+                "k8s.io/apimachinery",
+                "k8s.io/apiserver",
+                "k8s.io/client-go",
+                "k8s.io/code-generator",
+                "k8s.io/component-base",
+                "k8s.io/kubelet"
+            ],
+            "allowedVersions": "<0.36.0"
+        },
+        {
+            "matchManagers": [
+                "gomod"
+            ],
+            "matchPackageNames": [
+                "sigs.k8s.io/controller-runtime"
+            ],
+            "allowedVersions": "<0.24.0"
+        },
+        {
+            "matchManagers": [
+                "gomod"
+            ],
+            "matchPackageNames": [
+                "sigs.k8s.io/controller-tools"
+            ],
+            "allowedVersions": "<0.21.0"
+        },
+        {
+            "matchManagers": [
+                "gomod"
+            ],
+            "matchPackageNames": [
+                "k8s.io/autoscaler/vertical-pod-autoscaler"
+            ],
+            "allowedVersions": "<1.7.0"
+        },
         {
             "matchFileNames": [
                 "charts/images.yaml"

.github/workflows/e2e.yaml

@@ -10,13 +10,13 @@ jobs:
     name: "End-to-End test"
     steps:
       - name: Checkout source
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7.0.0
       - name: install Dependencies
         run: sudo apt-get update && sudo apt-get install -y apache2 git curl make jq openssh-client
       - name: Setup Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v7.0.0
         with:
-          go-version: ">=1.21.0"
+          go-version-file: go.mod
       - name: Setup Gardener kubeconfig
         run: |
           echo "${{ secrets.GARDENER_KUBECONFIG }}" > hack/ci/secrets/gardener-kubeconfig.yaml
@@ -33,7 +33,7 @@ jobs:
         run: |
           bash hack/ci/01-shoot-for-seed.sh
       - name: Prepare and start Gardener
-        uses: nick-fields/retry@v3
+        uses: nick-fields/retry@v4.0.0
         env:
           CI: false
         with:

.github/workflows/on-pr-test.yml

@@ -9,13 +9,13 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        go-version: [ 1.21 ]
+        go-version: [ "1.26" ]
 
     steps:
     - name: Checkout commit
-      uses: actions/checkout@v2
+      uses: actions/checkout@v7.0.0
     - name: Set up Go ${{ matrix.go-version }}
-      uses: actions/setup-go@v2
+      uses: actions/setup-go@v7.0.0
       with:
         go-version: ${{ matrix.go-version }}
     - name: Execute build

.github/workflows/on-release-publish.yml

@@ -3,29 +3,34 @@ name: go:release
 on:
   push:
     tags: 'v*'
-
+  workflow_dispatch:
+
 jobs:
   create-release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
 
     steps:
     - name: Checkout commit
-      uses: actions/checkout@v3
+      uses: actions/checkout@v7.0.0
     - name: Update VERSION file
       run: |-
           echo "${{ github.ref_name }}" > VERSION
     - name: Setup Go
-      uses: actions/setup-go@v3
+      uses: actions/setup-go@v7.0.0
       with:
-        go-version: ">=1.21.0"
+        go-version-file: go.mod
     - name: Create controller-registration.yaml
       run: |-
-        GOPATH=$(go env GOPATH)
-        export GOPATH
-
+        # Populate the module cache before make: the Makefile resolves
+        # GARDENER_HACK_DIR and GARDENER_TOOL_DIR via `go list -m -f {{.Dir}}`
+        # at parse time, which returns empty for modules that are not extracted.
+        go mod download
+
         make generate
     - name: Create Release
-      uses: softprops/action-gh-release@v1
+      uses: softprops/action-gh-release@v3.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -36,6 +41,9 @@ jobs:
             example/controller-registration.yaml
   go-publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     strategy:
       matrix:
         include:
@@ -44,23 +52,23 @@ jobs:
 
     steps:
     - name: Checkout commit
-      uses: actions/checkout@v3
+      uses: actions/checkout@v7.0.0
     - name: Update VERSION file
       run: |-
           echo "${{ github.ref_name }}" > VERSION
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v1
+      uses: docker/setup-buildx-action@v4.2.0
     - name: Login to GitHub Container Registry
-      uses: docker/login-action@v1
+      uses: docker/login-action@v4.4.0
       with:
         registry: ghcr.io
         username: ${{ github.repository_owner }}
         password: ${{ secrets.GITHUB_TOKEN }}
     - name: Publish image
-      uses: docker/build-push-action@v2
+      uses: docker/build-push-action@v7.3.0
       with:
         target: ${{ matrix.name }}
         push: true
         tags: |
-          ghcr.io/23technologies/${{ matrix.name }}:latest
-          ghcr.io/23technologies/${{ matrix.name }}:${{ github.ref_name }}
+          ghcr.io/${{ github.repository_owner }}/${{ matrix.name }}:latest
+          ghcr.io/${{ github.repository_owner }}/${{ matrix.name }}:${{ github.ref_name }}

.github/workflows/renovate.yaml

@@ -10,9 +10,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@v7.0.0
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v40.1.4
+        uses: renovatebot/github-action@v46.1.19
         with:
           configurationFile: .github/renovate.json
           token: ${{ secrets.RENOVATE_TOKEN }}

CODEOWNERS

@@ -1,2 +1,2 @@
 # gardener-extension-provider-hcloud maintainers
-*   @23technologies/developers
+*   /developers

Dockerfile

@@ -1,8 +1,8 @@
 ############# builder
-FROM golang:1.23.0 AS builder
+FROM golang:1.26.5 AS builder
 
 ENV BINARY_PATH=/go/bin
-WORKDIR /go/src/github.com/23technologies/gardener-extension-provider-hcloud
+WORKDIR /go/src/github.com/opendefensecloud/gardener-extension-provider-hcloud
 
 # cache deps before building and copying source so that we don't need to re-download as much
 # and so that source changes don't invalidate our downloaded layer
@@ -16,13 +16,13 @@ ARG EFFECTIVE_VERSION
 RUN make install EFFECTIVE_VERSION=$EFFECTIVE_VERSION
 
 ############# base
-FROM gcr.io/distroless/static-debian11:nonroot as base
+FROM gcr.io/distroless/static-debian12:nonroot AS base
 
 WORKDIR /
 
 ############# gardener-extension-provider-hcloud
 FROM base AS gardener-extension-provider-hcloud
-LABEL org.opencontainers.image.source="https://github.com/23technologies/gardener-extension-provider-hcloud"
+LABEL org.opencontainers.image.source="https://github.com/opendefensecloud/gardener-extension-provider-hcloud"
 
 COPY charts /charts
 COPY --from=builder /go/bin/gardener-extension-provider-hcloud /gardener-extension-provider-hcloud
@@ -33,4 +33,3 @@ FROM base AS gardener-extension-admission-hcloud
 
 COPY --from=builder /go/bin/gardener-extension-admission-hcloud /gardener-extension-admission-hcloud
 ENTRYPOINT ["/gardener-extension-admission-hcloud"]
-

Makefile

@@ -17,13 +17,13 @@ GARDENER_HACK_DIR    		:= $(shell go list -m -f "{{.Dir}}" github.com/gardener/g
 EXTENSION_PREFIX            := gardener-extension
 NAME                        := provider-hcloud
 ADMISSION_NAME              := admission-hcloud
-REGISTRY                    := ghcr.io/23technologies
+REGISTRY                    := ghcr.io/opendefensecloud
 IMAGE_PREFIX                := $(REGISTRY)/gardener-extension-provider-hcloud
 REPO_ROOT                   := $(shell dirname $(realpath $(lastword ${MAKEFILE_LIST})))
 HACK_DIR                    := ${REPO_ROOT}/hack
 KUBECONFIG                  := dev/kubeconfig.yaml
 MANAGER_CONFIG_FILE         := example/00-componentconfig.yaml
-PROJECT_NAME                := 23technologies
+PROJECT_NAME                := opendefensecloud
 VERSION                     := $(shell cat "${REPO_ROOT}/VERSION")
 EFFECTIVE_VERSION           := $(VERSION)-$(shell git rev-parse HEAD)
 LD_FLAGS                    := "-w $(shell bash $(GARDENER_HACK_DIR)/get-build-ld-flags.sh k8s.io/component-base $(REPO_ROOT)/VERSION $(EXTENSION_PREFIX))"
@@ -141,8 +141,9 @@ check: $(GOIMPORTS) $(GOLANGCI_LINT)
 	@REPO_ROOT=$(REPO_ROOT) bash $(GARDENER_HACK_DIR)/check-charts.sh ./charts
 
 .PHONY: generate
-generate: $(VGOPATH) $(CONTROLLER_GEN) $(GEN_CRD_API_REFERENCE_DOCS) $(HELM) $(MOCKGEN) $(YQ)
-	@REPO_ROOT=$(REPO_ROOT) VGOPATH=$(VGOPATH) GARDENER_HACK_DIR=$(GARDENER_HACK_DIR) bash $(GARDENER_HACK_DIR)/generate-sequential.sh ./charts/... ./cmd/... ./example/... ./pkg/...
+generate: $(CONTROLLER_GEN) $(GEN_CRD_API_REFERENCE_DOCS) $(HELM) $(MOCKGEN) $(YQ)
+	@go mod download
+	@REPO_ROOT=$(REPO_ROOT) GARDENER_HACK_DIR=$(GARDENER_HACK_DIR) bash $(GARDENER_HACK_DIR)/generate-sequential.sh ./charts/... ./cmd/... ./example/... ./pkg/...
 	$(MAKE) format
 
 .PHONY: format

README.md

@@ -14,7 +14,7 @@ This way, we can keep Gardener core clean and independent.
 
 This controller implements Gardener's extension contract for the Hetzner cloud provider.
 
-The latest release's `ControllerRegistration` resource that can be used to register this controller to Gardener can be found [here](https://github.com/23technologies/gardener-extension-provider-hcloud/releases/latest/download/controller-registration.yaml).
+The latest release's `ControllerRegistration` resource that can be used to register this controller to Gardener can be found [here](https://github.com/opendefensecloud/gardener-extension-provider-hcloud/releases/latest/download/controller-registration.yaml).
 
 Please find more information regarding the extensibility concepts and a detailed proposal [here](https://github.com/gardener/gardener/blob/master/docs/proposals/01-extensibility.md).
 
@@ -42,7 +42,7 @@ Static code checks and tests can be executed by running `VERIFY=true make all`.
 
 ## Feedback and Support
 
-Feedback and contributions are always welcome. Please report bugs or suggestions as [GitHub issues](https://github.com/23technologies/gardener-extension-provider-hcloud/issues) or join our [Slack channel #gardener](https://kubernetes.slack.com/messages/gardener) (please invite yourself to the Kubernetes workspace [here](http://slack.k8s.io)).
+Feedback and contributions are always welcome. Please report bugs or suggestions as [GitHub issues](https://github.com/opendefensecloud/gardener-extension-provider-hcloud/issues) or join our [Slack channel #gardener](https://kubernetes.slack.com/messages/gardener) (please invite yourself to the Kubernetes workspace [here](http://slack.k8s.io)).
 
 ## Learn more!
 

VERSION

@@ -1 +1 @@
-v0.0.0-dev
+v0.7.0-odp.7

charts/gardener-extension-admission-hcloud/values.yaml

@@ -4,7 +4,7 @@ global:
     user:
       name: ""
   image:
-    repository: ghcr.io/23technologies/gardener-extension-provider-hcloud/admission
+    repository: ghcr.io/opendefensecloud/gardener-extension-admission-hcloud
     tag: latest
     pullPolicy: IfNotPresent
   replicaCount: 1

charts/gardener-extension-provider-hcloud/templates/rbac.yaml

@@ -55,6 +55,7 @@ rules:
   - get
   - watch
   - update
+  - patch
 - apiGroups:
   - ""
   - apps

charts/gardener-extension-provider-hcloud/templates/vpa.yaml

@@ -1,5 +1,5 @@
 {{- if .Values.vpa.enabled}}
-apiVersion: "autoscaling.k8s.io/v1beta2"
+apiVersion: "autoscaling.k8s.io/v1"
 kind: VerticalPodAutoscaler
 metadata:
   name: {{ include "name" . }}-vpa

charts/gardener-extension-provider-hcloud/values.yaml

@@ -1,5 +1,5 @@
 image:
-  repository: ghcr.io/23technologies/gardener-extension-provider-hcloud
+  repository: ghcr.io/opendefensecloud/gardener-extension-provider-hcloud
   tag: latest
   pullPolicy: IfNotPresent