[cherry-pick v20260514] fix(security): bump Go to 1.25.10 and golang.org/x/net to v0.55.0 #8558
Build #20260522.14 had test failures
Details
- Failed: 4 (2.17%)
- Passed: 180 (97.83%)
- Other: 0 (0.00%)
- Total: 184
Annotations
Check failure on line 1600 in Build log
azure-pipelines / Agentbaker Windows E2E
Build log #L1600
Script failed with exit code: 1
Check failure on line 1 in Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default
azure-pipelines / Agentbaker Windows E2E
Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default
Failed
Raw output
=== RUN Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default
=== PAUSE Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default
=== CONT Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default
test_helpers.go:390: [6.018s] TAGS {Name:Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default ImageName:windows-2022-containerd-gen2 OS:windows Arch:amd64 NetworkIsolated:false NonAnonymousACR:false GPU:false WASM:false BootstrapTokenFallback:true KubeletCustomConfig:false Scriptless:false VHDCaching:false MockAzureChinaCloud:false VMSeriesCoverageTest:false}
test_helpers.go:221: [11.787s] → running scenario...
test_helpers.go:258: [21.774s] → preparing AKS node...
vmss.go:476: [33.928s] → creating VMSS winqo6v...
vmss.go:384: [34.029s] VMSS portal link: https://ms.portal.azure.com/#@microsoft.onmicrosoft.com/resource/subscriptions/8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8/resourceGroups/MC_abe2e-westus3_abe2e-azure-network-v3-f69fa_westus3/providers/Microsoft.Compute/virtualMachineScaleSets/winqo6v/overview
vmss.go:390: [34.029s] Managed cluster portal link: https://ms.portal.azure.com/#@microsoft.onmicrosoft.com/resource/subscriptions/8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8/resourceGroups/MC_abe2e-westus3_abe2e-azure-network-v3-f69fa_westus3/providers/Microsoft.ContainerService/managedClusters/abe2e-azure-network-v3-f69fa/overview
vmss.go:509: [43.510s] VM will be automatically deleted after the test finishes, to preserve it for debugging purposes set KEEP_VMSS=true or pause the test with a breakpoint before the test finishes or failed
vmss.go:513: [43.510s] SSH Instructions: (may take a few minutes for the VM to be ready for SSH)
========================
az network bastion ssh --target-resource-id "/subscriptions/8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8/resourceGroups/MC_abe2e-westus3_abe2e-azure-network-v3-f69fa_westus3/providers/Microsoft.Compute/virtualMachineScaleSets/winqo6v/virtualMachines/0" --name "abe2e-azure-network-v3-f69fa-bastion" --resource-group MC_abe2e-westus3_abe2e-azure-network-v3-f69fa_westus3 --auth-type ssh-key --username azureuser --ssh-key /tmp/private-key-810124077
bastionssh.go:304: [241.554s] Attempt 1/5 establishing SSH over bastion to 10.224.0.94
vmss.go:563: [243.104s] VM reached running state
vmss.go:533: [243.104s] ✓ creating VMSS winqo6v done (209.2s)
test_helpers.go:461: [243.105s] saved Windows CSE output to scenario-logs/Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default/windows-cse-output.log
kube.go:152: [243.105s] → waiting for node winqo6v to be ready...
kube.go:174: [263.148s] node winqo6v000000 is ready. Taints: null Conditions: [{"type":"MemoryPressure","status":"False","lastHeartbeatTime":"2026-05-22T18:02:15Z","lastTransitionTime":"2026-05-22T18:02:15Z","reason":"KubeletHasSufficientMemory","message":"kubelet has sufficient memory available"},{"type":"DiskPressure","status":"False","lastHeartbeatTime":"2026-05-22T18:02:15Z","lastTransitionTime":"2026-05-22T18:02:15Z","reason":"KubeletHasNoDiskPressure","message":"kubelet has no disk pressure"},{"type":"PIDPressure","status":"False","lastHeartbeatTime":"2026-05-22T18:02:15Z","lastTransitionTime":"2026-05-22T18:02:15Z","reason":"KubeletHasSufficientPID","message":"kubelet has sufficient PID available"},{"type":"Ready","status":"True","lastHeartbeatTime":"2026-05-22T18:02:15Z","lastTransitionTime":"2026-05-22T18:02:15Z","reason":"KubeletReady","message":"kubelet is posting ready status"}]
kube.go:195: [263.148s] ✓ waiting for node winqo6v to be ready done (20.0s)
test_helpers.go:343: [263.148s] ⚠️ ##vso[task.logissue type=warning;] Node winqo6v took 3m29.176675952s to be created and 20.043425346s to be ready
... [The stack trace has been truncated as it exceeded the maximum allowed size. Please refer to the complete log available in the Test Run attachments for full details.]
Check failure on line 1 in Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback
azure-pipelines / Agentbaker Windows E2E
Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback
Failed
Raw output
=== RUN Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback
=== PAUSE Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback
=== CONT Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback
--- FAIL: Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback (0.03s)
Check failure on line 1 in Test_Windows23H2Gen2_WindowsCiliumNetworking
azure-pipelines / Agentbaker Windows E2E
Test_Windows23H2Gen2_WindowsCiliumNetworking
Failed
Raw output
=== RUN Test_Windows23H2Gen2_WindowsCiliumNetworking
=== PAUSE Test_Windows23H2Gen2_WindowsCiliumNetworking
=== CONT Test_Windows23H2Gen2_WindowsCiliumNetworking
--- FAIL: Test_Windows23H2Gen2_WindowsCiliumNetworking (0.00s)
Check failure on line 1 in Test_Windows23H2Gen2_WindowsCiliumNetworking/default
azure-pipelines / Agentbaker Windows E2E
Test_Windows23H2Gen2_WindowsCiliumNetworking/default
Failed
Raw output
=== RUN Test_Windows23H2Gen2_WindowsCiliumNetworking/default
=== PAUSE Test_Windows23H2Gen2_WindowsCiliumNetworking/default
=== CONT Test_Windows23H2Gen2_WindowsCiliumNetworking/default
azure.go:478: [0.000s] Looking up images in https://ms.portal.azure.com/#@microsoft.onmicrosoft.com/resource/subscriptions/c4c3550e-a965-4993-a50c-628fd38cd3e1/resourceGroups/aksvhdtestbuildrg/providers/Microsoft.Compute/galleries/PackerSigGalleryEastUS/images/aks-windows-23H2-gen2/overview
azure.go:567: [5.021s] Image version /subscriptions/c4c3550e-a965-4993-a50c-628fd38cd3e1/resourceGroups/aksvhdtestbuildrg/providers/Microsoft.Compute/galleries/PackerSigGalleryEastUS/images/windows-23H2-gen2/versions/260521.081002.1624 is already in region westus3
vhd.go:370: [5.021s] got version by tag branch=refs/heads/main: https://ms.portal.azure.com/#@microsoft.onmicrosoft.com/resource/subscriptions/c4c3550e-a965-4993-a50c-628fd38cd3e1/resourceGroups/aksvhdtestbuildrg/providers/Microsoft.Compute/galleries/PackerSigGalleryEastUS/images/aks-windows-23H2-gen2/versions/260521.081002.1624/overview
test_helpers.go:390: [5.022s] TAGS {Name:Test_Windows23H2Gen2_WindowsCiliumNetworking/default ImageName:windows-23H2-gen2 OS:windows Arch:amd64 NetworkIsolated:false NonAnonymousACR:false GPU:false WASM:false BootstrapTokenFallback:false KubeletCustomConfig:false Scriptless:false VHDCaching:false MockAzureChinaCloud:false VMSeriesCoverageTest:false}
test_helpers.go:221: [11.808s] → running scenario...
cluster.go:71: [11.808s] → preparing cluster...
cluster.go:251: [11.810s] → get or create cluster abe2e-azure-network-v3-f69fa...
cluster.go:259: [12.834s] ✓ get or create cluster abe2e-azure-network-v3-f69fa done (1.0s)
cluster.go:835: [12.834s] → setting up private DNS for API server...
aks_model.go:307: [13.398s] → adding firewall rules...
aks_model.go:336: [15.995s] Creating subnet AzureFirewallSubnet in VNet aks-vnet-30633331
aks_model.go:355: [16.778s] Created firewall subnet with ID: /subscriptions/8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8/resourceGroups/MC_abe2e-westus3_abe2e-azure-network-v3-f69fa_westus3/providers/Microsoft.Network/virtualNetworks/aks-vnet-30633331/subnets/AzureFirewallSubnet
aks_model.go:369: [16.778s] Creating public IP abe2e-fw-pip
cluster.go:874: [18.022s] private DNS zone "abe2e-azure-network-v3-vvz2js56.hcp.westus3.azmk8s.io" → [4.242.145.58]
cluster.go:875: [18.022s] ✓ setting up private DNS for API server done (5.2s)
aks_model.go:387: [19.171s] Created public IP with ID: /subscriptions/8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8/resourceGroups/MC_abe2e-westus3_abe2e-azure-network-v3-f69fa_westus3/providers/Microsoft.Network/publicIPAddresses/abe2e-fw-pip
aks_model.go:291: [19.171s] Firewall rules configured successfully
aks_model.go:405: [20.179s] Firewall private IP: 10.225.0.4
aks_model.go:436: [20.179s] Adding route "vnet-local" to AKS route table "abe2e-fw-rt"
aks_model.go:436: [20.946s] Adding route "default-route-to-firewall" to AKS route table "abe2e-fw-rt"
aks_model.go:447: [21.271s] Successfully added firewall routes to AKS route table "abe2e-fw-rt"
aks_model.go:448: [21.271s] ✓ adding firewall rules done (7.9s)
kube.go:379: [21.271s] Creating daemonset debug-mariner-tolerated with image mcr.microsoft.com/cbl-mariner/base/core:2.0
cluster.go:727: [21.271s] → collecting garbage VMSS...
kube.go:379: [21.387s] Creating daemonset debugnonhost-mariner-tolerated with image mcr.microsoft.com/cbl-mariner/base/core:2.0
kube.go:561: [21.456s] Creating proxy daemonset e2e-proxy with image mcr.microsoft.com/cbl-mariner/base/python:3
cluster.go:777: [21.717s] → collecting garbage K8s nodes...
cluster.go:805: [21.769s] deleted stale K8s node "winaei7000000" (VMSS "winae
... [The stack trace has been truncated as it exceeded the maximum allowed size. Please refer to the complete log available in the Test Run attachments for full details.]