Skip to content

fix(security): bump Go to 1.25.10 and golang.org/x/net to v0.55.0

65843a0
Select commit
Loading
Failed to load commit list.
Closed

[cherry-pick v20260514] fix(security): bump Go to 1.25.10 and golang.org/x/net to v0.55.0 #8558

fix(security): bump Go to 1.25.10 and golang.org/x/net to v0.55.0
65843a0
Select commit
Loading
Failed to load commit list.
Azure Pipelines / Agentbaker Windows E2E failed May 22, 2026 in 13m 19s

Build #20260522.14 had test failures

Details

Tests

  • Failed: 4 (2.17%)
  • Passed: 180 (97.83%)
  • Other: 0 (0.00%)
  • Total: 184

Annotations

Check failure on line 1600 in Build log

See this annotation in the file changed.

@azure-pipelines azure-pipelines / Agentbaker Windows E2E

Build log #L1600

Script failed with exit code: 1

Check failure on line 1 in Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default

See this annotation in the file changed.

@azure-pipelines azure-pipelines / Agentbaker Windows E2E

Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default

Failed
Raw output
=== RUN   Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default
=== PAUSE Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default
=== CONT  Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default
    test_helpers.go:390: [6.018s] TAGS {Name:Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default ImageName:windows-2022-containerd-gen2 OS:windows Arch:amd64 NetworkIsolated:false NonAnonymousACR:false GPU:false WASM:false BootstrapTokenFallback:true KubeletCustomConfig:false Scriptless:false VHDCaching:false MockAzureChinaCloud:false VMSeriesCoverageTest:false}
    test_helpers.go:221: [11.787s] → running scenario...
    test_helpers.go:258: [21.774s] → preparing AKS node...
    vmss.go:476: [33.928s] → creating VMSS winqo6v...
    vmss.go:384: [34.029s] VMSS portal link: https://ms.portal.azure.com/#@microsoft.onmicrosoft.com/resource/subscriptions/8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8/resourceGroups/MC_abe2e-westus3_abe2e-azure-network-v3-f69fa_westus3/providers/Microsoft.Compute/virtualMachineScaleSets/winqo6v/overview
    vmss.go:390: [34.029s] Managed cluster portal link: https://ms.portal.azure.com/#@microsoft.onmicrosoft.com/resource/subscriptions/8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8/resourceGroups/MC_abe2e-westus3_abe2e-azure-network-v3-f69fa_westus3/providers/Microsoft.ContainerService/managedClusters/abe2e-azure-network-v3-f69fa/overview
    vmss.go:509: [43.510s] VM will be automatically deleted after the test finishes, to preserve it for debugging purposes set KEEP_VMSS=true or pause the test with a breakpoint before the test finishes or failed
    vmss.go:513: [43.510s] SSH Instructions: (may take a few minutes for the VM to be ready for SSH)
        ========================
        az network bastion ssh --target-resource-id "/subscriptions/8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8/resourceGroups/MC_abe2e-westus3_abe2e-azure-network-v3-f69fa_westus3/providers/Microsoft.Compute/virtualMachineScaleSets/winqo6v/virtualMachines/0" --name "abe2e-azure-network-v3-f69fa-bastion" --resource-group MC_abe2e-westus3_abe2e-azure-network-v3-f69fa_westus3 --auth-type ssh-key --username azureuser --ssh-key /tmp/private-key-810124077
        
    bastionssh.go:304: [241.554s] Attempt 1/5 establishing SSH over bastion to 10.224.0.94
    vmss.go:563: [243.104s] VM reached running state
    vmss.go:533: [243.104s] ✓ creating VMSS winqo6v done (209.2s)
    test_helpers.go:461: [243.105s] saved Windows CSE output to scenario-logs/Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback/default/windows-cse-output.log
    kube.go:152: [243.105s] → waiting for node winqo6v to be ready...
    kube.go:174: [263.148s] node winqo6v000000 is ready. Taints: null Conditions: [{"type":"MemoryPressure","status":"False","lastHeartbeatTime":"2026-05-22T18:02:15Z","lastTransitionTime":"2026-05-22T18:02:15Z","reason":"KubeletHasSufficientMemory","message":"kubelet has sufficient memory available"},{"type":"DiskPressure","status":"False","lastHeartbeatTime":"2026-05-22T18:02:15Z","lastTransitionTime":"2026-05-22T18:02:15Z","reason":"KubeletHasNoDiskPressure","message":"kubelet has no disk pressure"},{"type":"PIDPressure","status":"False","lastHeartbeatTime":"2026-05-22T18:02:15Z","lastTransitionTime":"2026-05-22T18:02:15Z","reason":"KubeletHasSufficientPID","message":"kubelet has sufficient PID available"},{"type":"Ready","status":"True","lastHeartbeatTime":"2026-05-22T18:02:15Z","lastTransitionTime":"2026-05-22T18:02:15Z","reason":"KubeletReady","message":"kubelet is posting ready status"}]
    kube.go:195: [263.148s] ✓ waiting for node winqo6v to be ready done (20.0s)
    test_helpers.go:343: [263.148s] ⚠️ ##vso[task.logissue type=warning;] Node winqo6v took 3m29.176675952s to be created and 20.043425346s to be ready

... [The stack trace has been truncated as it exceeded the maximum allowed size. Please refer to the complete log available in the Test Run attachments for full details.]

Check failure on line 1 in Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback

See this annotation in the file changed.

@azure-pipelines azure-pipelines / Agentbaker Windows E2E

Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback

Failed
Raw output
=== RUN   Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback
=== PAUSE Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback
=== CONT  Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback
--- FAIL: Test_Windows2022_SecureTLSBootstrapping_BootstrapToken_Fallback (0.03s)

Check failure on line 1 in Test_Windows23H2Gen2_WindowsCiliumNetworking

See this annotation in the file changed.

@azure-pipelines azure-pipelines / Agentbaker Windows E2E

Test_Windows23H2Gen2_WindowsCiliumNetworking

Failed
Raw output
=== RUN   Test_Windows23H2Gen2_WindowsCiliumNetworking
=== PAUSE Test_Windows23H2Gen2_WindowsCiliumNetworking
=== CONT  Test_Windows23H2Gen2_WindowsCiliumNetworking
--- FAIL: Test_Windows23H2Gen2_WindowsCiliumNetworking (0.00s)

Check failure on line 1 in Test_Windows23H2Gen2_WindowsCiliumNetworking/default

See this annotation in the file changed.

@azure-pipelines azure-pipelines / Agentbaker Windows E2E

Test_Windows23H2Gen2_WindowsCiliumNetworking/default

Failed
Raw output
=== RUN   Test_Windows23H2Gen2_WindowsCiliumNetworking/default
=== PAUSE Test_Windows23H2Gen2_WindowsCiliumNetworking/default
=== CONT  Test_Windows23H2Gen2_WindowsCiliumNetworking/default
    azure.go:478: [0.000s] Looking up images in https://ms.portal.azure.com/#@microsoft.onmicrosoft.com/resource/subscriptions/c4c3550e-a965-4993-a50c-628fd38cd3e1/resourceGroups/aksvhdtestbuildrg/providers/Microsoft.Compute/galleries/PackerSigGalleryEastUS/images/aks-windows-23H2-gen2/overview
    azure.go:567: [5.021s] Image version /subscriptions/c4c3550e-a965-4993-a50c-628fd38cd3e1/resourceGroups/aksvhdtestbuildrg/providers/Microsoft.Compute/galleries/PackerSigGalleryEastUS/images/windows-23H2-gen2/versions/260521.081002.1624 is already in region westus3
    vhd.go:370: [5.021s] got version by tag branch=refs/heads/main: https://ms.portal.azure.com/#@microsoft.onmicrosoft.com/resource/subscriptions/c4c3550e-a965-4993-a50c-628fd38cd3e1/resourceGroups/aksvhdtestbuildrg/providers/Microsoft.Compute/galleries/PackerSigGalleryEastUS/images/aks-windows-23H2-gen2/versions/260521.081002.1624/overview
    test_helpers.go:390: [5.022s] TAGS {Name:Test_Windows23H2Gen2_WindowsCiliumNetworking/default ImageName:windows-23H2-gen2 OS:windows Arch:amd64 NetworkIsolated:false NonAnonymousACR:false GPU:false WASM:false BootstrapTokenFallback:false KubeletCustomConfig:false Scriptless:false VHDCaching:false MockAzureChinaCloud:false VMSeriesCoverageTest:false}
    test_helpers.go:221: [11.808s] → running scenario...
    cluster.go:71: [11.808s] → preparing cluster...
    cluster.go:251: [11.810s] → get or create cluster abe2e-azure-network-v3-f69fa...
    cluster.go:259: [12.834s] ✓ get or create cluster abe2e-azure-network-v3-f69fa done (1.0s)
    cluster.go:835: [12.834s] → setting up private DNS for API server...
    aks_model.go:307: [13.398s] → adding firewall rules...
    aks_model.go:336: [15.995s] Creating subnet AzureFirewallSubnet in VNet aks-vnet-30633331
    aks_model.go:355: [16.778s] Created firewall subnet with ID: /subscriptions/8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8/resourceGroups/MC_abe2e-westus3_abe2e-azure-network-v3-f69fa_westus3/providers/Microsoft.Network/virtualNetworks/aks-vnet-30633331/subnets/AzureFirewallSubnet
    aks_model.go:369: [16.778s] Creating public IP abe2e-fw-pip
    cluster.go:874: [18.022s] private DNS zone "abe2e-azure-network-v3-vvz2js56.hcp.westus3.azmk8s.io" → [4.242.145.58]
    cluster.go:875: [18.022s] ✓ setting up private DNS for API server done (5.2s)
    aks_model.go:387: [19.171s] Created public IP with ID: /subscriptions/8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8/resourceGroups/MC_abe2e-westus3_abe2e-azure-network-v3-f69fa_westus3/providers/Microsoft.Network/publicIPAddresses/abe2e-fw-pip
    aks_model.go:291: [19.171s] Firewall rules configured successfully
    aks_model.go:405: [20.179s] Firewall private IP: 10.225.0.4
    aks_model.go:436: [20.179s] Adding route "vnet-local" to AKS route table "abe2e-fw-rt"
    aks_model.go:436: [20.946s] Adding route "default-route-to-firewall" to AKS route table "abe2e-fw-rt"
    aks_model.go:447: [21.271s] Successfully added firewall routes to AKS route table "abe2e-fw-rt"
    aks_model.go:448: [21.271s] ✓ adding firewall rules done (7.9s)
    kube.go:379: [21.271s] Creating daemonset debug-mariner-tolerated with image mcr.microsoft.com/cbl-mariner/base/core:2.0
    cluster.go:727: [21.271s] → collecting garbage VMSS...
    kube.go:379: [21.387s] Creating daemonset debugnonhost-mariner-tolerated with image mcr.microsoft.com/cbl-mariner/base/core:2.0
    kube.go:561: [21.456s] Creating proxy daemonset e2e-proxy with image mcr.microsoft.com/cbl-mariner/base/python:3
    cluster.go:777: [21.717s] → collecting garbage K8s nodes...
    cluster.go:805: [21.769s] deleted stale K8s node "winaei7000000" (VMSS "winae
... [The stack trace has been truncated as it exceeded the maximum allowed size. Please refer to the complete log available in the Test Run attachments for full details.]