Updating vendir dependencies

Author: korifi-bot

tests/vendir.lock.yml

@@ -10,14 +10,14 @@ directories:
       url: https://api.github.com/repos/kubernetes-sigs/metrics-server/releases/229645413
     path: metrics-server-local
   - githubRelease:
-      tag: v1.19.0
-      url: https://api.github.com/repos/cert-manager/cert-manager/releases/252689218
+      tag: v1.19.1
+      url: https://api.github.com/repos/cert-manager/cert-manager/releases/254726664
     path: cert-manager
   - git:
-      commitTitle: Release updates for v3.30.3 (#10868)...
-      sha: 3302e8bfd48e6375013d1d79ccb2c693306400a9
+      commitTitle: Fix remaining EnvVars reference
+      sha: b370415ad69ddc139a0981f8c5c6773e4703846b
       tags:
-      - v3.30.3
+      - v3.30.4
     path: calico
   - git:
       commitTitle: Update Contour Docker image to v1.33.0....

tests/vendor/calico/operator-crds.yaml

@@ -27044,6 +27044,11 @@ spec:
                   kube-proxy always accepts endpoint slices. This option will be removed in
                   the next release.
                 type: boolean
+              bpfKubeProxyHealtzPort:
+                description: |-
+                  BPFKubeProxyHealtzPort, in BPF mode, controls the port that Felix's embedded kube-proxy health check server binds to.
+                  The health check server is used by external load balancers to determine if this node should receive traffic.  [Default: 10256]
+                type: integer
               bpfKubeProxyIptablesCleanupEnabled:
                 description: |-
                   BPFKubeProxyIptablesCleanupEnabled, if enabled in BPF mode, Felix will proactively clean up the upstream
@@ -27182,6 +27187,10 @@ spec:
                 - Disabled
                 - L2Only
                 type: string
+              cgroupV2Path:
+                description: CgroupV2Path overrides the default location where to
+                  find the cgroup hierarchy.
+                type: string
               chainInsertMode:
                 description: |-
                   ChainInsertMode controls whether Felix hooks the kernel's top-level iptables chains by inserting a rule

tests/vendor/calico/tigera-operator.yaml

@@ -156,6 +156,13 @@ rules:
       - list
       # We need this for Typha autoscaling
       - watch
+  - apiGroups:
+      - authentication.k8s.io
+    resources:
+      # The operator creates a token review to learn its identity.
+      - tokenreviews
+    verbs:
+      - create
   - apiGroups:
       - rbac.authorization.k8s.io
     resources:
@@ -558,7 +565,7 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       containers:
         - name: tigera-operator
-          image: quay.io/tigera/operator:v1.38.6
+          image: quay.io/tigera/operator:v1.38.7
           imagePullPolicy: IfNotPresent
           command:
             - operator
@@ -579,7 +586,7 @@ spec:
             - name: OPERATOR_NAME
               value: "tigera-operator"
             - name: TIGERA_OPERATOR_INIT_IMAGE_VERSION
-              value: v1.38.6
+              value: v1.38.7
           envFrom:
             - configMapRef:
                 name: kubernetes-services-endpoint

tests/vendor/cert-manager/cert-manager.crds.yaml

@@ -24,7 +24,7 @@ metadata:
     app.kubernetes.io/name: "cert-manager"
     app.kubernetes.io/instance: "cert-manager"
     app.kubernetes.io/component: "crds"
-    app.kubernetes.io/version: "v1.19.0"
+    app.kubernetes.io/version: "v1.19.1"
 spec:
   group: acme.cert-manager.io
   names:
@@ -96,12 +96,14 @@ spec:
                     Challenge will be marked as failed.
                   properties:
                     group:
-                      default: cert-manager.io
-                      description: Group of the issuer being referred to.
+                      description: |-
+                        Group of the issuer being referred to.
+                        Defaults to 'cert-manager.io'.
                       type: string
                     kind:
-                      default: Issuer
-                      description: Kind of the issuer being referred to.
+                      description: |-
+                        Kind of the issuer being referred to.
+                        Defaults to 'Issuer'.
                       type: string
                     name:
                       description: Name of the issuer being referred to.
@@ -3305,7 +3307,7 @@ metadata:
     app.kubernetes.io/name: "cert-manager"
     app.kubernetes.io/instance: "cert-manager"
     app.kubernetes.io/component: "crds"
-    app.kubernetes.io/version: "v1.19.0"
+    app.kubernetes.io/version: "v1.19.1"
 spec:
   group: acme.cert-manager.io
   names:
@@ -3396,12 +3398,14 @@ spec:
                     Order will be marked as failed.
                   properties:
                     group:
-                      default: cert-manager.io
-                      description: Group of the issuer being referred to.
+                      description: |-
+                        Group of the issuer being referred to.
+                        Defaults to 'cert-manager.io'.
                       type: string
                     kind:
-                      default: Issuer
-                      description: Kind of the issuer being referred to.
+                      description: |-
+                        Kind of the issuer being referred to.
+                        Defaults to 'Issuer'.
                       type: string
                     name:
                       description: Name of the issuer being referred to.
@@ -3579,7 +3583,7 @@ metadata:
     app.kubernetes.io/name: "cert-manager"
     app.kubernetes.io/instance: "cert-manager"
     app.kubernetes.io/component: "crds"
-    app.kubernetes.io/version: "v1.19.0"
+    app.kubernetes.io/version: "v1.19.1"
 spec:
   group: cert-manager.io
   names:
@@ -3698,12 +3702,14 @@ spec:
                     The `name` field of the reference must always be specified.
                   properties:
                     group:
-                      default: cert-manager.io
-                      description: Group of the issuer being referred to.
+                      description: |-
+                        Group of the issuer being referred to.
+                        Defaults to 'cert-manager.io'.
                       type: string
                     kind:
-                      default: Issuer
-                      description: Kind of the issuer being referred to.
+                      description: |-
+                        Kind of the issuer being referred to.
+                        Defaults to 'Issuer'.
                       type: string
                     name:
                       description: Name of the issuer being referred to.
@@ -3898,7 +3904,7 @@ metadata:
     app.kubernetes.io/name: "cert-manager"
     app.kubernetes.io/instance: "cert-manager"
     app.kubernetes.io/component: "crds"
-    app.kubernetes.io/version: "v1.19.0"
+    app.kubernetes.io/version: "v1.19.1"
 spec:
   group: cert-manager.io
   names:
@@ -4051,12 +4057,14 @@ spec:
                     The `name` field of the reference must always be specified.
                   properties:
                     group:
-                      default: cert-manager.io
-                      description: Group of the issuer being referred to.
+                      description: |-
+                        Group of the issuer being referred to.
+                        Defaults to 'cert-manager.io'.
                       type: string
                     kind:
-                      default: Issuer
-                      description: Kind of the issuer being referred to.
+                      description: |-
+                        Kind of the issuer being referred to.
+                        Defaults to 'Issuer'.
                       type: string
                     name:
                       description: Name of the issuer being referred to.
@@ -4714,7 +4722,7 @@ metadata:
     app.kubernetes.io/name: "cert-manager"
     app.kubernetes.io/instance: "cert-manager"
     app.kubernetes.io/component: "crds"
-    app.kubernetes.io/version: "v1.19.0"
+    app.kubernetes.io/version: "v1.19.1"
 spec:
   group: cert-manager.io
   names:
@@ -8531,7 +8539,7 @@ metadata:
     app.kubernetes.io/name: "cert-manager"
     app.kubernetes.io/instance: "cert-manager"
     app.kubernetes.io/component: "crds"
-    app.kubernetes.io/version: "v1.19.0"
+    app.kubernetes.io/version: "v1.19.1"
 spec:
   group: cert-manager.io
   names: