Update dependencies to v0.34.1 tag

go.mod

@@ -25,8 +25,8 @@ require (
 	golang.org/x/time v0.9.0
 	google.golang.org/protobuf v1.36.5
 	gopkg.in/evanphx/json-patch.v4 v4.12.0
-	k8s.io/api v0.34.2
-	k8s.io/apimachinery v0.34.2
+	k8s.io/api v0.34.1
+	k8s.io/apimachinery v0.34.1
 	k8s.io/klog/v2 v2.130.1
 	k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b
 	k8s.io/utils v0.0.0-20250604170112-4c0f3b243397

go.sum

@@ -150,10 +150,10 @@ gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-k8s.io/api v0.34.2 h1:fsSUNZhV+bnL6Aqrp6O7lMTy6o5x2C4XLjnh//8SLYY=
-k8s.io/api v0.34.2/go.mod h1:MMBPaWlED2a8w4RSeanD76f7opUoypY8TFYkSM+3XHw=
-k8s.io/apimachinery v0.34.2 h1:zQ12Uk3eMHPxrsbUJgNF8bTauTVR2WgqJsTmwTE/NW4=
-k8s.io/apimachinery v0.34.2/go.mod h1:/GwIlEcWuTX9zKIg2mbw0LRFIsXwrfoVxn+ef0X13lw=
+k8s.io/api v0.34.1 h1:jC+153630BMdlFukegoEL8E/yT7aLyQkIVuwhmwDgJM=
+k8s.io/api v0.34.1/go.mod h1:SB80FxFtXn5/gwzCoN6QCtPD7Vbu5w2n1S0J5gFfTYk=
+k8s.io/apimachinery v0.34.1 h1:dTlxFls/eikpJxmAC7MVE8oOeP1zryV7iRyIjB0gky4=
+k8s.io/apimachinery v0.34.1/go.mod h1:/GwIlEcWuTX9zKIg2mbw0LRFIsXwrfoVxn+ef0X13lw=
 k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
 k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
 k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA=

tools/leaderelection/resourcelock/leaselock.go

@@ -77,9 +77,6 @@ func (ll *LeaseLock) Update(ctx context.Context, ler LeaderElectionRecord) error
 	ll.lease.Spec = LeaderElectionRecordToLeaseSpec(&ler)
 
 	if ll.Labels != nil {
-		if ll.lease.Labels == nil {
-			ll.lease.Labels = map[string]string{}
-		}
 		// Only overwrite the labels that are specifically set
 		for k, v := range ll.Labels {
 			ll.lease.Labels[k] = v

tools/leaderelection/resourcelock/leaselock_test.go

@@ -266,7 +266,7 @@ func TestLeaseConversion(t *testing.T) {
 	}
 }
 
-func TestUpdateWithNilLabelsOnLease(t *testing.T) {
+func TestUpdateWithNilLabels(t *testing.T) {
 	setup()
 
 	// Create initial lease
@@ -278,33 +278,23 @@ func TestUpdateWithNilLabelsOnLease(t *testing.T) {
 		t.Fatalf("Failed to get lease: %v", err)
 	}
 
-	leaseLock.lease.Labels = nil
-
-	leaseLock.Labels = map[string]string{"custom-key": "custom-val"}
-
-	// Update should succeed even with nil Labels on the lease itself
-	if err := leaseLock.Update(context.Background(), testRecord); err != nil {
-		t.Errorf("Update failed with nil Labels: %v", err)
-	}
-}
-
-func TestUpdateWithNilLabelsOnLeaseLock(t *testing.T) {
-	setup()
-
-	// Create initial lease
-	if err := leaseLock.Create(context.Background(), testRecord); err != nil {
-		t.Fatalf("Failed to create lease: %v", err)
-	}
-	// Get the lease to initialize leaseLock.lease
-	if _, _, err := leaseLock.Get(context.Background()); err != nil {
-		t.Fatalf("Failed to get lease: %v", err)
-	}
-
-	leaseLock.Labels = nil
-
 	leaseLock.lease.Labels = map[string]string{"custom-key": "custom-val"}
 
-	// Update should succeed even with nil Labels on the leaselock
+	// Update labels
+	lease, err := leaseLock.Client.Leases(testNamespace).Update(context.Background(), leaseLock.lease, metav1.UpdateOptions{})
+	if err != nil {
+		t.Fatalf("Failed to update lease labels: %v", err)
+	}
+
+	val, exists := lease.Labels["custom-key"]
+	if !exists {
+		t.Error("Label was overidden on the lease")
+	}
+	if val != "custom-val" {
+		t.Errorf("Label value mismatch, got %q want %q", val, "custom-val")
+	}
+
+	// Update should succeed even with nil Labels
 	if err := leaseLock.Update(context.Background(), testRecord); err != nil {
 		t.Errorf("Update failed with nil Labels: %v", err)
 	}

util/cert/cert.go

@@ -75,15 +75,13 @@ func NewSelfSignedCACert(cfg Config, key crypto.Signer) (*x509.Certificate, erro
 			CommonName:   cfg.CommonName,
 			Organization: cfg.Organization,
 		},
+		DNSNames:              []string{cfg.CommonName},
 		NotBefore:             notBefore,
 		NotAfter:              now.Add(duration365d * 10).UTC(),
 		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,
 		BasicConstraintsValid: true,
 		IsCA:                  true,
 	}
-	if len(cfg.CommonName) > 0 {
-		tmpl.DNSNames = []string{cfg.CommonName}
-	}
 
 	certDERBytes, err := x509.CreateCertificate(cryptorand.Reader, &tmpl, &tmpl, key.Public(), key)
 	if err != nil {