ILB: Optimize shared resource lock with fixed hashed pool and OCC

.github/dependabot.yml

@@ -1,66 +1,36 @@
 version: 2
 updates:
-- package-ecosystem: docker
-  directory: /cluster/gce/gci/mounter
+- package-ecosystem: "github-actions"
+  directory: "/"
   schedule:
-    interval: weekly
-  labels:
-  - 'area/dependency'
-  - 'release-note-none'
-  - 'ok-to-test'
-- package-ecosystem: docker
-  directory: /cluster/addons/addon-manager
-  schedule:
-    interval: weekly
-  labels:
-  - 'area/dependency'
-  - 'release-note-none'
-  - 'ok-to-test'
-- package-ecosystem: gomod
-  directory: /providers
-  schedule:
-    interval: weekly
-  labels:
-  - 'area/dependency'
-  - 'release-note-none'
-  - 'ok-to-test'
-  groups:
-    gomod-dependencies:
-      patterns:
-      - '*'
-- package-ecosystem: gomod
-  directory: /
-  schedule:
-    interval: weekly
+    interval: "weekly"
+    day: "sunday"
   labels:
+  - "ok-to-test"
   - 'area/dependency'
   - 'release-note-none'
-  - 'ok-to-test'
-  groups:
-    gomod-dependencies:
-      patterns:
-      - '*'
 - package-ecosystem: gomod
-  directory: /crd
+  directories:
+  - "/"
+  - "/providers"
+  - "/metis"
+  - "/test/e2e"
   schedule:
     interval: weekly
   labels:
   - 'area/dependency'
   - 'release-note-none'
   - 'ok-to-test'
   groups:
-    gomod-dependencies:
+    k8s-dependencies:
       patterns:
-      - '*'
-- package-ecosystem: gomod
-  directory: /crd/hack
-  schedule:
-    interval: weekly
-  labels:
-  - 'area/dependency'
-  - 'release-note-none'
-  - 'ok-to-test'
-  groups:
-    gomod-dependencies:
+      - "k8s.io/*"
+      - "sigs.k8s.io/*"
+    workspace-deps:
       patterns:
-      - '*'
+        - "*"
+      exclude-patterns:
+        - "k8s.io/*"
+        - "sigs.k8s.io/*"
+
+

.github/release.yml

@@ -0,0 +1,15 @@
+changelog:
+  exclude:
+    labels:
+      - ignore-for-release
+    authors:
+      - dependabot[bot]
+  categories:
+    - title: Features
+      labels:
+        - feature
+        - enhancement
+    - title: Bug Fixes
+      labels:
+        - bug
+        - fix

.github/workflows/auto-tag.yml

@@ -0,0 +1,28 @@
+name: Auto Tag release branches
+
+on:
+  push:
+    branches:
+      - 'release-1.*'
+
+jobs:
+  auto-tag:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        with:
+          fetch-depth: 0 # Fetch all history and tags
+
+      - name: Configure Git User
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+      - name: Run auto-tag script
+        env:
+          DRY_RUN: "false"
+          FORCE_BRANCH: ${{ github.ref_name }}
+        run: ./tools/auto-tag.sh

.github/workflows/dependabot-sync.yml

@@ -0,0 +1,37 @@
+name: Dependabot Go Work Sync
+
+on:
+  pull_request:
+    paths:
+      - '**/go.mod'
+      - '**/go.sum'
+
+permissions:
+  contents: write
+
+jobs:
+  go-work-sync:
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]'
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
+
+      - name: Setup Go
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c
+        with:
+          go-version-file: 'go.work'
+
+      - name: Sync Go Workspace
+        run: go work sync
+
+      - name: Commit and Push changes
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git add go.work.sum
+          # Only commit if there are actual changes
+          git diff --quiet && git diff --staged --quiet || git commit -m "chore: update go.work.sum"
+          git push

.github/workflows/release.yml

@@ -0,0 +1,24 @@
+name: Create GitHub Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          fetch-depth: 0 # Important for generating release notes
+
+      - name: Create Draft Release
+        uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2
+        with:
+          draft: true
+          generate_release_notes: true

.gitignore

@@ -1,6 +1,11 @@
-bazel-*
 cluster/bin
 MERGED_LICENSES
 release/*
-.vscode/
+.go-cache/
 .idea/
+.vscode/
+_artifacts/
+_rundir/
+_tmp/
+/bin/
+__pycache__/

Dockerfile

@@ -1,4 +1,5 @@
-FROM golang:1.24.10 AS builder
+FROM --platform=${BUILDPLATFORM} golang:1.25.8 AS builder
+
 # golang envs
 ARG TARGETARCH
 ARG GOOS=linux
@@ -16,7 +17,7 @@ COPY providers/ providers/
 
 RUN CGO_ENABLED=0 go build -o /go/bin/cloud-controller-manager ./cmd/cloud-controller-manager
 
-FROM registry.k8s.io/build-image/go-runner:v2.4.0-go1.24.10-bookworm.0
+FROM registry.k8s.io/build-image/go-runner:v2.4.0-go1.25.8-bookworm.0
 COPY --from=builder --chown=root:root /go/bin/cloud-controller-manager /cloud-controller-manager
 CMD ["/cloud-controller-manager"]
 ENTRYPOINT ["/cloud-controller-manager"]