Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
是不是把 version 这玩意整成一个变量,放到前面去
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
只有一个地方用到,设不设变量无所谓
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
关键是保不齐下次又要改新版本。。。用变量传递的话,可以做到流水线直接传递。。就不需要改了
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
如果已经存在 golangci-lint 这个文件,更新版本号,
$(GOLANGCI_LINT):
不会再执行的。想要用流水线控制下载的版本,那需要 golangci-lint 文件不存在,每次都拉。There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
流水线更新 golang:1.12.9-stretch 镜像 就可以了。
为了保证一致性,Makefile 还是得更新
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
我个人建议,不要从外部以变量的方式传递到Makefile里。 编译整套系统(包括里面的工具)最好是紧跟代码(分支)走。(虽然当前我们受限于流水线系统也没真正做到,但自己能控制的尽量自己控制住)
否则,外部lint工具做了更新扫出新的一顿错误,那历史分支就挂了。
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
这个节奏还是你 @supereagle 定一下吧,proposal 里面写的是 follow 我们平台 k8 使用的 go 版本,但是我们平台的 k8 从来不升级小版本的。
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
同意
那就 follow k8s 的小版本吧,我们没有必要跟的这么紧,成本太高了
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
很多更新的主要原因都是有涉及到安全的 bug 导致的,例如 1.12.9 ->1.12.10 修复的一个比较严重的 CVE-2019-16276(net/http 的 bug,在一些配置情况下可以绕过 k8s 身份认证)。
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@ijumps 对于上面提到的安全问题,我们在 2.10 中打算升级 k8s 小版本吗?