cri-o: update to 1.23.1

Bumping cri-o to version v1.23.1-16-g1607c6ec2, which comprises the following commits:

    f2d8f69e3 config/sysctls: validate against invalid spaces
    b1932286d server: stop deleting pod from idIndex if already gone
    bccfd5110 [1.23] ci: use kubernetes 1.23, cri-tools 1.23
    2630e0f88 contrib/test/int/build/kubernetes: rm deprecated RunAsGroup
    e50405e5a hack/build-rpms.sh: fix yum-builddep failures
    574393461 image: use imageCache value for ImageStatus()
    4559c3328 oci: fix a leaked goroutine
    e19f812f9 Reuse createContainerIO in CreateContainer
    c9b4eb84e Fix vm containers couldn't restore after CRI-O restart
    3899601f9 release-notes: add args for checksum fields
    abe57a58b Updated format
    b2fba4cf7 Generate checksum files for artifacts
    0c619fc21 bump to v1.23.1
    24092dd77 test: add test for skipped sysctls
    b2ac1b7ca server: skip sysctls that would affect the host
    8d512cbac server: don't set memory swap when it's not enabled
    ac75b6cf0 deep copy List{PodSandbox,Container} structs
    76e9feca0 ci: use main branch for conmon
    54b6b7932 server: fix race with kubelet
    987bd1366 Fix runtime panic on pod sandbox stats retrieval
    a8513868c ci: use main version of runc
    a6d6d3dde openshift e2e: bump ci image
    8520be5fc server: fix a potential NULL-pointer dereference.
    bc38aa734 pass the main mount point to fix crypto profiles binding
    dc4bea916 test: update tests for allowed_devices
    0f57bf75c config: add AllowedDevices option
    dc224daf3 server: drop duplicate log message
    11ffa6cbe test: add test ensuring a stopped pod is restored
    a1ada429a sandbox stop: remove namespaces
    89eccb5fc restore: handle removed namespaces
    873414dbf Partially revert "restore: restore stop before managing namespace"
    fe0e69dc8 restore: ensure containers are wiped on reboot
    b905626d9 use cmdrunner singleton
    228f82dbb conmonmgr: refactor for new CommandRunner
    97bbe0637 cmdrunner: update mocks and add target to makefile
    8ec9ce138 config: prepend commands with taskset if InfraCtrCPUSet is configured
    81761eb2e cmdrunner: add tests for prepended commands
    9c915e269 cmdrunner: create singleton
    499540011 Use timeout for conmon cgroup move
    04e8e4081 Fixed a problem where metricImagePullsBytesTotal was getting updated twice and on second call getting incorrect labels
    021b5ba00 vendor: bump c/image to 5.17.0
    dba27ab7e Add new metrics that match Prometheus best practices and reduce cardinality * add metrics with new names that match naming best practices   * use _total for all counters   * use base unit seconds, bytes * metrics that do not follow best practices have been marked deprecated,   these can be removed in a future release, it is to ensure non-breaking change   for couple of releases
    e7aa30fdc unit test: fix relative log test
    acc746e52 unit tests: update pinns path in case it isn't found in PATH
    9f584ca4c test: skip target tests for userns
    972c29c2d test: add test for target namespace
    0176d5f92 add support for target PID namespaces
    da0de5373 test: give testunit sudo
    4b0d40ad4 oci: add managed pidns to container object
    1fa69c707 pkg/container: take container namespace configuration
    546732eed nsmgrtest: take some namespace related test code
    440ba9feb nsmgr: add function to pin existing namespace
    e122cb4f0 nsmgr: take (and rename) NamespacePathFromProc
    8db9a89a5 pkg/sandbox: take config initialization
    6f4e7bf8c Bump Kubernetes to v1.23.0
    da8f9a07e set user.max_user_namespaces in case it's not
    b8a766213 lint: bump cyclo complexity
    0864aed84 gh-actions/contrib: setup sub{g,u}id
    067551101 docs: add tutorial for setting up user namespaces
    5d3c5a67f oci: put conmon in infra ctr cpuset if it is in the pod cgroup
    231a358d2 test: add tests for user namespace annotations
    ce3699969 test: move workload creation function to helpers
    87aede8d5 cni manager: catch server shutdown
    f3d2c601e server: notify user when network isn't ready yet
    99e93ee58 stop using hardcoded "pod" const
    9f81e4a00 oci: always reap conmon zombies
    ab1b1aaaa clarify some error messages
    96679844e Drop intermediate CRI types
    3162e0552 Relabel containerenv files
    f154c7c3c Add minimum_mappable_(u|g)id settings
    bbc944cf6 Fix runtime panic on stats server shutdown
    efcf8afe6 restore: restore stop before managing namespace
    dec3bf5c9 server: add {,List}SandboxStats
    5ba5cb0be server: refactor sandbox list
    64870e3d8 server: use stats server to get container stats
    b17b7dfd9 container server: use stats server
    7f136833c stats: add stats server
    43db34fb6 config: add StatsCollectionPeriod field
    2569255c9 cgmgr: move most of stats handling to cgmgr
    c6efa96ee oci: make changes in preparation for moving stats functionality:
    536c08423 server: stub {List,}PodSandboxStats
    542eb5580 server/cri: add PodSandboxStats support
    ad71bd9ff vendor: bump cri-api
    c5dd30dd1 server/cri: refactor to make stats processing unified
    a598debac pkg/config: use iota
    40dcd6da9 Add go 1.17+ go:build tags
    6fbd6773f Remove redundant build tags
    3064a9d7a Add containerenv file to containers This file indicates that the current environment is inside a container environment. The same technique is used by podman and docker. The same file name/path as podman was used, as it is vendor agnostic.
    86538358a build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
    5fb7618d5 config: merge runtime and workload allowed annotations
    28b01dad2 Updates kubeadm.md: The cgroup property is removed in [kubeadm-config.v1beta3](https://kubernetes.io/docs/reference/config-api/kubeadm-config.v1beta3/)
    5a510ad7f build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    99027c321 Specify runtime table format in  the error message
    1f7b886d7 build(deps): bump github.com/containerd/ttrpc from 1.0.2 to 1.1.0
    cbfab09d5 server: fix segfault when using cgroupv2
    0f99f3348 gh-actions: add sed for kube e2e
    880744562 release-notes: update to main
    60615f0a3 build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
    8530f0a38 build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
    8daa9039a Bug 2012838: fix override storage options from storage.conf
    0ce45a372 oci: fix deadlock in container stop code
    cf7f6f5af build(deps): bump google.golang.org/grpc from 1.41.0 to 1.42.0
    a216d3d24 oci: always close chControl
    1e8e40aaa oci: make some channels buffered
    3036101b0 build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
    cf3524471 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    2e1048422 build(deps): bump github.com/godbus/dbus/v5 from 5.0.5 to 5.0.6
    10f8f17c4 Add annotation that makes /sys/fs/cgroup writable
    7f747dde0 Add support for CNI plugins v1.0.1
    ec6305762 bump(deps-opentelemetry)
    37418e122 pin go.opentelemetry grpc/otelgrpc v0.25.0
    c16429eb1 opentelemetry: add gRPC tracing
    2a5623a2e build(deps): bump k8s.io/klog/v2 from 2.20.0 to 2.30.0
    3571d9c74 build(deps): bump github.com/go-logr/logr from 1.1.0 to 1.2.0
    ca38caa74 version: bump to 1.23.0
    808681227 build(deps): bump github.com/containers/podman/v3 from 3.3.1 to 3.4.1
    0b1b2061f build(deps): bump github.com/containers/common from 0.43.2 to 0.46.0
    8f1daefc6 test: drop swap disable playbook
    f253acb15 server: add support for CRI unified field
    cd8bc4c1f server: implement swap support
    9ab385d44 server/cri: add support for 1.22 features
    aca331db3 test: bump cri-tools version
    518fceb63 scripts: pin cri-tools version
    97773983e server: reduce needless copying for sb.NamespaceOptions
    b8b2f308d oci: refactor internal structure to use CRI type
    9c813715d oci: use server CRI metadata type for containers
    91289b929 sandbox: refactor internal structure to use CRI type
    e45403022 sandbox: save createdAt as a int64
    99cb4a362 build(deps): bump github.com/containerd/cgroups from 1.0.1 to 1.0.2
    c119e253d build(deps): bump github.com/creack/pty from 1.1.16 to 1.1.17
    6845b4233 build(deps): bump github.com/Microsoft/go-winio from 0.5.0 to 0.5.1
    f61a4e097 Bump Kubernetes to v1.22.2
    2cf307d2e sandbox: use server CRI metadata type
    01ee37390 docs: emphasize deprecation notice
    b7a80f137 update documentation for workloads
    83518f098 add allowed annotations to workloads
    b6b3f4cbb Log HTTP response writer message instead an error
    20ad4f609 oci: use c/common signal parsing function
    13182e64b Skip volume relabel for super privileged containers
    cd2b0028a oci: chown stdin pipe to user in the container
    c0a8f339c test: fix selinux test failures
    f27efb28a build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
    cd7f7cb46 Fix runtime handler docs
    63d69d2a7 build(deps): bump github.com/containers/image/v5 from 5.15.2 to 5.16.1
    b753b04a2 scripts: fix release branch forward script
    87b8e5d05 server: FilterDisallowedAnnotations of containers earlier
    0e02798d6 server: conditionally relabel volumes given annotation
    99dac5fb8 build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
    6ec1ec47c test: refactor allowed_annotation tests
    e70542f26 server: reduce args in addOCIBindMounts
    f3106693c build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
    74177a645 test: add label for openshift e2e in dockerfile
    b2e665754 build(deps): bump github.com/containerd/containerd from 1.5.5 to 1.5.7
    28043f5a9 test: skip certificate check for downloading parallel
    086386bb1 Remove usge of deprecated apt-key in Ubuntu install
    7ca329409 Fix install.md links
    0f455e285 build(deps): bump google.golang.org/grpc from 1.40.0 to 1.41.0
    245a88040 use a more appropriate console with code block
    8c088319f build(deps): bump k8s.io/api from 0.22.1 to 0.22.2
    ef861e8c7 build(deps): bump k8s.io/cri-api from 0.22.1 to 0.22.2
    c7e8c26f5 build(deps): bump sigs.k8s.io/yaml from 1.2.0 to 1.3.0
    757c863d5 build(deps): bump github.com/creack/pty from 1.1.15 to 1.1.16
    5dd999e05 build(deps): bump k8s.io/apimachinery from 0.22.1 to 0.22.2
    683428d75 fix node e2e
    756543ec8 build(deps): bump github.com/intel/goresctrl from 0.1.0 to 0.2.0
    d56449c4c bump crio commit used by node e2e installer
    615ba94fd server: mount cgroup if hostNetwork
    77b1a6e62 server: use container level host network setting
    45366c8c7 server: don't recalculate hostnet
    6493d8640 Fix typo in install.md
    7071e5b3d Remove one of the explanations for `bind_mount_prefix` because it is duplicated.
    7fe435d7d node e2e: keep infra container
    c6f1ed4d5 add unit test for the `server/sandbox_remove`.
    ce96d93c2 test: fix journald test for new conmon
    9ada36be0 fix shfmt
    19fb1db10 update `install.md` for debian and ubuntu
    5b1c43bbb build(deps): bump github.com/json-iterator/go from 1.1.11 to 1.1.12
    0833f62f3 build(deps): bump k8s.io/client-go from 0.22.1 to 0.22.2
    f5ebb6c23 fix shfmt
    61e08418a server: set spec when dropping infra
    68c8989f8 Update 'master' branch links to 'main'
    7fc2f88ce bumps pause image to 3.6
    3fd1cd226 server: don't wait forever on conmon cgroup move fail
    a9add6909 build(deps): bump github.com/containers/storage from 1.34.1 to 1.36.0
    d7cc66fe8 Remove bashism in sh script
    15f7f7e4e Do not log if Intel RDT is not supported
    b9ad2de69 build(deps): bump github.com/godbus/dbus/v5 from 5.0.4 to 5.0.5
    eb45b4891 Fix cluster.yaml for kubectl create
    69e88512a call cmd.Wait() in all cases we call Start()
    07328622a oci: call wait on conmon if cgroup move fails
    a377aec52 build(deps): bump github.com/go-logr/logr from 1.0.0 to 1.1.0
    38f41c16a Fix `crio_image_pulls_layer_size_` metrics docs
    9195a3417 Adapt to klog incompatible changes
    a5716420b build(deps): bump k8s.io/klog/v2 from 2.10.0 to 2.20.0
    6b96358ef Add `--profile-cpu` and `--profile-mem` options
    ed0eca0f1 build(deps): bump github.com/containers/podman/v3 from 3.3.0 to 3.3.1
    88f5e154d server: remove ineffective `updateLock`.
    05e662469 Fix missing quantile in `latency_microseconds_total` metrics
    681aa32ed Update crio commit for node e2e
    94b9b8688 build(deps): bump github.com/fsnotify/fsnotify from 1.4.9 to 1.5.1
    c8ecab3da Bump runc binary to 1.0.2
    0d640e6f9 Switch to go1.17 for CI
    8bbbbf2b5 fix debian 10 build doc
    639d494cd test/testdata/sandbox_config.json: fix the dns_config
    af555c038 adds updating instructions to install.md

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

1 files changed, 3 insertions, 3 deletions

diff --git a/recipes-containers/cri-o/cri-o_git.bb b/recipes-containers/cri-o/cri-o_git.bb
index 826d9aa3..7940bbd2 100644
--- a/recipes-containers/cri-o/cri-o_git.bb
+++ b/recipes-containers/cri-o/cri-o_git.bb
@@ -14,9 +14,9 @@ At a high level, we expect the scope of cri-o to be restricted to the following
  - Resource isolation as required by the CRI \
  "
 
-SRCREV_cri-o = "e3dfe61cafa3922bf7ad9b0a2ac3dc7e6873209b"
+SRCREV_cri-o = "1607c6ec2eddc927ef736db5525761e49df13e24"
 SRC_URI = "\
-        git://github.com/kubernetes-sigs/cri-o.git;branch=release-1.22;name=cri-o;protocol=https \
+        git://github.com/kubernetes-sigs/cri-o.git;branch=release-1.23;name=cri-o;protocol=https \
         file://0001-Makefile-force-symlinks.patch \
         file://crio.conf \
         "
@@ -27,7 +27,7 @@ LIC_FILES_CHKSUM = "file://src/import/LICENSE;md5=e3fc50a88d0a364313df4b21ef20c2
 
 GO_IMPORT = "import"
 
-PV = "1.22.1+git${SRCREV_cri-o}"
+PV = "1.23.1+git${SRCREV_cri-o}"
 
 inherit features_check
 REQUIRED_DISTRO_FEATURES ?= "seccomp"