Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

⬆️ Update Helm release metallb to v0.14.8 #1496

Merged
merged 1 commit into from
Nov 9, 2024
Merged

⬆️ Update Helm release metallb to v0.14.8 #1496

merged 1 commit into from
Nov 9, 2024

Conversation

gitops-updater[bot]
Copy link
Contributor

@gitops-updater gitops-updater bot commented Jan 29, 2024 •
edited
Loading

This PR contains the following updates:

Package Update Change
metallb (source) minor 0.13.11 -> 0.14.8

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

metallb/metallb (metallb)

v0.14.8

Compare Source

See the release notes for the details

https://metallb.universe.tf/release-notes/#version-0-14-8

v0.14.7

Compare Source

See the release notes for the details

https://metallb.universe.tf/release-notes/#version-0-14-7

v0.14.6

Compare Source

See the release notes for the details

https://metallb.universe.tf/release-notes/#version-0-14-6

v0.14.5

Compare Source

See the release notes for details:

https://metallb.universe.tf/release-notes/#version-0-14-5

v0.14.4

Compare Source

See https://metallb.universe.tf/release-notes/ for details

v0.14.3

Compare Source

See https://metallb.universe.tf/release-notes/ for details

v0.14.2

Compare Source

See https://metallb.universe.tf/release-notes/ for details

v0.13.12

Compare Source

See https://metallb.universe.tf/release-notes/ for details

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@github-actions GitHub Actions
Copy link

Path: cluster/core/metallb-system/helm-release.yaml
Version: 0.13.11 -> 0.14.2

@@ -670,6 +670,7 @@
             - --port=7472
             - --log-level=info
             - --cert-service-name=metallb-webhook-service
+            - --tls-min-version=VersionTLS12
           env:
             - name: METALLB_ML_SECRET_NAME
               value: metallb-memberlist

@gitops-updater gitops-updater bot changed the title ⬆️ Update Helm release metallb to v0.14.2 ⬆️ Update Helm release metallb to v0.14.3 Jan 30, 2024
@gitops-updater gitops-updater bot force-pushed the renovate/metallb-0.x branch from d5d06bc to 02487cc Compare January 30, 2024 17:13
@github-actions GitHub Actions
Copy link

Path: cluster/core/metallb-system/helm-release.yaml
Version: 0.13.11 -> 0.14.3

@@ -670,6 +670,7 @@
             - --port=7472
             - --log-level=info
             - --cert-service-name=metallb-webhook-service
+            - --tls-min-version=VersionTLS12
           env:
             - name: METALLB_ML_SECRET_NAME
               value: metallb-memberlist
@@ -732,26 +733,6 @@
   - admissionReviewVersions:
       - v1
     clientConfig:
-      service:
-        name: metallb-webhook-service
-        namespace: default
-        path: /validate-metallb-io-v1beta1-addresspool
-    failurePolicy: Fail
-    name: addresspoolvalidationwebhook.metallb.io
-    rules:
-      - apiGroups:
-          - metallb.io
-        apiVersions:
-          - v1beta1
-        operations:
-          - CREATE
-          - UPDATE
-        resources:
-          - addresspools
-    sideEffects: None
-  - admissionReviewVersions:
-      - v1
-    clientConfig:
       service:
         name: metallb-webhook-service
         namespace: default

@gitops-updater gitops-updater bot changed the title ⬆️ Update Helm release metallb to v0.14.3 ⬆️ Update Helm release metallb to v0.14.4 Mar 26, 2024
@gitops-updater gitops-updater bot force-pushed the renovate/metallb-0.x branch from 02487cc to 02a8bdb Compare March 26, 2024 16:17
@github-actions GitHub Actions
Copy link

Path: cluster/core/metallb-system/helm-release.yaml
Version: 0.13.11 -> 0.14.4

@@ -27,7 +27,7 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: webhook-server-cert
+  name: metallb-webhook-cert
   namespace: "default"
   labels:
     app.kubernetes.io/name: metallb
@@ -40,6 +40,10 @@
 metadata:
   name: metallb-excludel2
   namespace: "default"
+  labels:
+    app.kubernetes.io/name: metallb
+    app.kubernetes.io/instance: metallb
+    app.kubernetes.io/managed-by: Helm
 data:
   excludel2.yaml: |
     announcedInterfacesToExclude:
@@ -194,7 +198,7 @@
     verbs: ["list", "watch"]
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
-    resourceNames: ["addresspools.metallb.io", "bfdprofiles.metallb.io", "bgpadvertisements.metallb.io", "bgppeers.metallb.io", "ipaddresspools.metallb.io", "l2advertisements.metallb.io", "communities.metallb.io"]
+    resourceNames: ["bfdprofiles.metallb.io", "bgpadvertisements.metallb.io", "bgppeers.metallb.io", "ipaddresspools.metallb.io", "l2advertisements.metallb.io", "communities.metallb.io"]
     verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
@@ -219,6 +223,9 @@
   - apiGroups: [""]
     resources: ["events"]
     verbs: ["create", "patch"]
+  - apiGroups: ["metallb.io"]
+    resources: ["servicel2statuses", "servicel2statuses/status"]
+    verbs: ["*"]
 ---
 # Source: metallb/templates/rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -277,9 +284,6 @@
     resources: ["configmaps"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
-    resources: ["addresspools"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metallb.io"]
     resources: ["bfdprofiles"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
@@ -324,9 +328,6 @@
     resources: ["secrets"]
     verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
   - apiGroups: ["metallb.io"]
-    resources: ["addresspools"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metallb.io"]
     resources: ["ipaddresspools"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
@@ -452,7 +453,7 @@
       initContainers:
         # Copies the initial config files with the right permissions to the shared volume.
         - name: cp-frr-files
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.0.2
           securityContext:
             runAsUser: 100
             runAsGroup: 101
@@ -558,7 +559,7 @@
                 - NET_RAW
                 - SYS_ADMIN
                 - NET_BIND_SERVICE
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.0.2
           env:
             - name: TINI_SUBREAPER
               value: "true"
@@ -583,7 +584,7 @@
               tail -f /etc/frr/frr.log
           livenessProbe:
             httpGet:
-              path: /livez
+              path: livez
               port: 7473
             initialDelaySeconds: 10
             periodSeconds: 10
@@ -597,7 +598,7 @@
             failureThreshold: 30
             periodSeconds: 5
         - name: reloader
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.0.2
           command: ["/etc/frr_reloader/frr-reloader.sh"]
           volumeMounts:
             - name: frr-sockets
@@ -607,7 +608,7 @@
             - name: reloader
               mountPath: /etc/frr_reloader
         - name: frr-metrics
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.0.2
           command: ["/etc/frr_metrics/frr-metrics"]
           args:
             - --metrics-port=7473
@@ -669,7 +670,7 @@
           args:
             - --port=7472
             - --log-level=info
-            - --cert-service-name=metallb-webhook-service
+            - --tls-min-version=VersionTLS12
           env:
             - name: METALLB_ML_SECRET_NAME
               value: metallb-memberlist
@@ -717,7 +718,7 @@
         - name: cert
           secret:
             defaultMode: 420
-            secretName: webhook-server-cert
+            secretName: metallb-webhook-cert
 ---
 # Source: metallb/templates/webhooks.yaml
 apiVersion: admissionregistration.k8s.io/v1
@@ -732,26 +733,6 @@
   - admissionReviewVersions:
       - v1
     clientConfig:
-      service:
-        name: metallb-webhook-service
-        namespace: default
-        path: /validate-metallb-io-v1beta1-addresspool
-    failurePolicy: Fail
-    name: addresspoolvalidationwebhook.metallb.io
-    rules:
-      - apiGroups:
-          - metallb.io
-        apiVersions:
-          - v1beta1
-        operations:
-          - CREATE
-          - UPDATE
-        resources:
-          - addresspools
-    sideEffects: None
-  - admissionReviewVersions:
-      - v1
-    clientConfig:
       service:
         name: metallb-webhook-service
         namespace: default

@gitops-updater gitops-updater bot changed the title ⬆️ Update Helm release metallb to v0.14.4 ⬆️ Update Helm release metallb to v0.14.5 Apr 19, 2024
@gitops-updater gitops-updater bot force-pushed the renovate/metallb-0.x branch from 02a8bdb to 498dacf Compare April 19, 2024 15:14
@github-actions GitHub Actions
Copy link

Path: cluster/core/metallb-system/helm-release.yaml
Version: 0.13.11 -> 0.14.5

@@ -27,7 +27,7 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: webhook-server-cert
+  name: metallb-webhook-cert
   namespace: "default"
   labels:
     app.kubernetes.io/name: metallb
@@ -40,6 +40,10 @@
 metadata:
   name: metallb-excludel2
   namespace: "default"
+  labels:
+    app.kubernetes.io/name: metallb
+    app.kubernetes.io/instance: metallb
+    app.kubernetes.io/managed-by: Helm
 data:
   excludel2.yaml: |
     announcedInterfacesToExclude:
@@ -194,7 +198,7 @@
     verbs: ["list", "watch"]
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
-    resourceNames: ["addresspools.metallb.io", "bfdprofiles.metallb.io", "bgpadvertisements.metallb.io", "bgppeers.metallb.io", "ipaddresspools.metallb.io", "l2advertisements.metallb.io", "communities.metallb.io"]
+    resourceNames: ["bfdprofiles.metallb.io", "bgpadvertisements.metallb.io", "bgppeers.metallb.io", "ipaddresspools.metallb.io", "l2advertisements.metallb.io", "communities.metallb.io"]
     verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
@@ -219,6 +223,9 @@
   - apiGroups: [""]
     resources: ["events"]
     verbs: ["create", "patch"]
+  - apiGroups: ["metallb.io"]
+    resources: ["servicel2statuses", "servicel2statuses/status"]
+    verbs: ["*"]
 ---
 # Source: metallb/templates/rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -277,9 +284,6 @@
     resources: ["configmaps"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
-    resources: ["addresspools"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metallb.io"]
     resources: ["bfdprofiles"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
@@ -324,9 +328,6 @@
     resources: ["secrets"]
     verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
   - apiGroups: ["metallb.io"]
-    resources: ["addresspools"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metallb.io"]
     resources: ["ipaddresspools"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
@@ -452,7 +453,7 @@
       initContainers:
         # Copies the initial config files with the right permissions to the shared volume.
         - name: cp-frr-files
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.0.2
           securityContext:
             runAsUser: 100
             runAsGroup: 101
@@ -558,7 +559,7 @@
                 - NET_RAW
                 - SYS_ADMIN
                 - NET_BIND_SERVICE
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.0.2
           env:
             - name: TINI_SUBREAPER
               value: "true"
@@ -583,7 +584,7 @@
               tail -f /etc/frr/frr.log
           livenessProbe:
             httpGet:
-              path: /livez
+              path: livez
               port: 7473
             initialDelaySeconds: 10
             periodSeconds: 10
@@ -597,7 +598,7 @@
             failureThreshold: 30
             periodSeconds: 5
         - name: reloader
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.0.2
           command: ["/etc/frr_reloader/frr-reloader.sh"]
           volumeMounts:
             - name: frr-sockets
@@ -607,7 +608,7 @@
             - name: reloader
               mountPath: /etc/frr_reloader
         - name: frr-metrics
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.0.2
           command: ["/etc/frr_metrics/frr-metrics"]
           args:
             - --metrics-port=7473
@@ -669,7 +670,7 @@
           args:
             - --port=7472
             - --log-level=info
-            - --cert-service-name=metallb-webhook-service
+            - --tls-min-version=VersionTLS12
           env:
             - name: METALLB_ML_SECRET_NAME
               value: metallb-memberlist
@@ -717,7 +718,7 @@
         - name: cert
           secret:
             defaultMode: 420
-            secretName: webhook-server-cert
+            secretName: metallb-webhook-cert
 ---
 # Source: metallb/templates/webhooks.yaml
 apiVersion: admissionregistration.k8s.io/v1
@@ -732,26 +733,6 @@
   - admissionReviewVersions:
       - v1
     clientConfig:
-      service:
-        name: metallb-webhook-service
-        namespace: default
-        path: /validate-metallb-io-v1beta1-addresspool
-    failurePolicy: Fail
-    name: addresspoolvalidationwebhook.metallb.io
-    rules:
-      - apiGroups:
-          - metallb.io
-        apiVersions:
-          - v1beta1
-        operations:
-          - CREATE
-          - UPDATE
-        resources:
-          - addresspools
-    sideEffects: None
-  - admissionReviewVersions:
-      - v1
-    clientConfig:
       service:
         name: metallb-webhook-service
         namespace: default

@gitops-updater gitops-updater bot changed the title ⬆️ Update Helm release metallb to v0.14.5 ⬆️ Update Helm release metallb to v0.14.6 Jul 16, 2024
@gitops-updater gitops-updater bot force-pushed the renovate/metallb-0.x branch from 498dacf to 3617898 Compare July 16, 2024 12:29
@github-actions GitHub Actions
Copy link

Path: cluster/core/metallb-system/helm-release.yaml
Version: 0.13.11 -> 0.14.6

@@ -27,7 +27,7 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: webhook-server-cert
+  name: metallb-webhook-cert
   namespace: "default"
   labels:
     app.kubernetes.io/name: metallb
@@ -40,6 +40,10 @@
 metadata:
   name: metallb-excludel2
   namespace: "default"
+  labels:
+    app.kubernetes.io/name: metallb
+    app.kubernetes.io/instance: metallb
+    app.kubernetes.io/managed-by: Helm
 data:
   excludel2.yaml: |
     announcedInterfacesToExclude:
@@ -157,7 +161,7 @@
   frr.conf: |
     ! This file gets overriden the first time the speaker renders a config.
     ! So anything configured here is only temporary.
-    frr version 7.5.1
+    frr version 8.0
     frr defaults traditional
     hostname Router
     line vty
@@ -194,7 +198,7 @@
     verbs: ["list", "watch"]
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
-    resourceNames: ["addresspools.metallb.io", "bfdprofiles.metallb.io", "bgpadvertisements.metallb.io", "bgppeers.metallb.io", "ipaddresspools.metallb.io", "l2advertisements.metallb.io", "communities.metallb.io"]
+    resourceNames: ["bfdprofiles.metallb.io", "bgpadvertisements.metallb.io", "bgppeers.metallb.io", "ipaddresspools.metallb.io", "l2advertisements.metallb.io", "communities.metallb.io"]
     verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
@@ -219,6 +223,9 @@
   - apiGroups: [""]
     resources: ["events"]
     verbs: ["create", "patch"]
+  - apiGroups: ["metallb.io"]
+    resources: ["servicel2statuses", "servicel2statuses/status"]
+    verbs: ["*"]
 ---
 # Source: metallb/templates/rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -269,7 +276,7 @@
 rules:
   - apiGroups: [""]
     resources: ["pods"]
-    verbs: ["list"]
+    verbs: ["list", "get"]
   - apiGroups: [""]
     resources: ["secrets"]
     verbs: ["get", "list", "watch"]
@@ -277,9 +284,6 @@
     resources: ["configmaps"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
-    resources: ["addresspools"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metallb.io"]
     resources: ["bfdprofiles"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
@@ -324,9 +328,6 @@
     resources: ["secrets"]
     verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
   - apiGroups: ["metallb.io"]
-    resources: ["addresspools"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metallb.io"]
     resources: ["ipaddresspools"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
@@ -452,7 +453,7 @@
       initContainers:
         # Copies the initial config files with the right permissions to the shared volume.
         - name: cp-frr-files
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           securityContext:
             runAsUser: 100
             runAsGroup: 101
@@ -465,14 +466,14 @@
         # Copies the reloader to the shared volume between the speaker and reloader.
         - name: cp-reloader
           image: quay.io/metallb/speaker:v0.13.11
-          command: ["/bin/sh", "-c", "cp -f /frr-reloader.sh /etc/frr_reloader/"]
+          command: ["/cp-tool", "/frr-reloader.sh", "/etc/frr_reloader/frr-reloader.sh"]
           volumeMounts:
             - name: reloader
               mountPath: /etc/frr_reloader
         # Copies the metrics exporter
         - name: cp-metrics
           image: quay.io/metallb/speaker:v0.13.11
-          command: ["/bin/sh", "-c", "cp -f /frr-metrics /etc/frr_metrics/"]
+          command: ["/cp-tool", "/frr-metrics", "/etc/frr_metrics/frr-metrics"]
           volumeMounts:
             - name: metrics
               mountPath: /etc/frr_metrics
@@ -508,6 +509,10 @@
               value: /etc/frr_reloader/reloader.pid
             - name: METALLB_BGP_TYPE
               value: frr
+            - name: METALLB_POD_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
           ports:
             - name: monitoring
               containerPort: 7472
@@ -558,7 +563,7 @@
                 - NET_RAW
                 - SYS_ADMIN
                 - NET_BIND_SERVICE
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           env:
             - name: TINI_SUBREAPER
               value: "true"
@@ -583,7 +588,7 @@
               tail -f /etc/frr/frr.log
           livenessProbe:
             httpGet:
-              path: /livez
+              path: livez
               port: 7473
             initialDelaySeconds: 10
             periodSeconds: 10
@@ -597,7 +602,7 @@
             failureThreshold: 30
             periodSeconds: 5
         - name: reloader
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           command: ["/etc/frr_reloader/frr-reloader.sh"]
           volumeMounts:
             - name: frr-sockets
@@ -607,10 +612,13 @@
             - name: reloader
               mountPath: /etc/frr_reloader
         - name: frr-metrics
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           command: ["/etc/frr_metrics/frr-metrics"]
           args:
             - --metrics-port=7473
+          env:
+            - name: VTYSH_HISTFILE
+              value: /dev/null
           ports:
             - containerPort: 7473
               name: monitoring
@@ -669,7 +677,7 @@
           args:
             - --port=7472
             - --log-level=info
-            - --cert-service-name=metallb-webhook-service
+            - --tls-min-version=VersionTLS12
           env:
             - name: METALLB_ML_SECRET_NAME
               value: metallb-memberlist
@@ -717,7 +725,7 @@
         - name: cert
           secret:
             defaultMode: 420
-            secretName: webhook-server-cert
+            secretName: metallb-webhook-cert
 ---
 # Source: metallb/templates/webhooks.yaml
 apiVersion: admissionregistration.k8s.io/v1
@@ -732,26 +740,6 @@
   - admissionReviewVersions:
       - v1
     clientConfig:
-      service:
-        name: metallb-webhook-service
-        namespace: default
-        path: /validate-metallb-io-v1beta1-addresspool
-    failurePolicy: Fail
-    name: addresspoolvalidationwebhook.metallb.io
-    rules:
-      - apiGroups:
-          - metallb.io
-        apiVersions:
-          - v1beta1
-        operations:
-          - CREATE
-          - UPDATE
-        resources:
-          - addresspools
-    sideEffects: None
-  - admissionReviewVersions:
-      - v1
-    clientConfig:
       service:
         name: metallb-webhook-service
         namespace: default

@gitops-updater gitops-updater bot changed the title ⬆️ Update Helm release metallb to v0.14.6 ⬆️ Update Helm release metallb to v0.14.7 Jul 16, 2024
@gitops-updater gitops-updater bot force-pushed the renovate/metallb-0.x branch from 3617898 to c40eec1 Compare July 16, 2024 20:16
@github-actions GitHub Actions
Copy link

Path: cluster/core/metallb-system/helm-release.yaml
Version: 0.13.11 -> 0.14.7

@@ -27,7 +27,7 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: webhook-server-cert
+  name: metallb-webhook-cert
   namespace: "default"
   labels:
     app.kubernetes.io/name: metallb
@@ -40,6 +40,10 @@
 metadata:
   name: metallb-excludel2
   namespace: "default"
+  labels:
+    app.kubernetes.io/name: metallb
+    app.kubernetes.io/instance: metallb
+    app.kubernetes.io/managed-by: Helm
 data:
   excludel2.yaml: |
     announcedInterfacesToExclude:
@@ -157,7 +161,7 @@
   frr.conf: |
     ! This file gets overriden the first time the speaker renders a config.
     ! So anything configured here is only temporary.
-    frr version 7.5.1
+    frr version 8.0
     frr defaults traditional
     hostname Router
     line vty
@@ -194,7 +198,7 @@
     verbs: ["list", "watch"]
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
-    resourceNames: ["addresspools.metallb.io", "bfdprofiles.metallb.io", "bgpadvertisements.metallb.io", "bgppeers.metallb.io", "ipaddresspools.metallb.io", "l2advertisements.metallb.io", "communities.metallb.io"]
+    resourceNames: ["bfdprofiles.metallb.io", "bgpadvertisements.metallb.io", "bgppeers.metallb.io", "ipaddresspools.metallb.io", "l2advertisements.metallb.io", "communities.metallb.io"]
     verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
@@ -219,6 +223,9 @@
   - apiGroups: [""]
     resources: ["events"]
     verbs: ["create", "patch"]
+  - apiGroups: ["metallb.io"]
+    resources: ["servicel2statuses", "servicel2statuses/status"]
+    verbs: ["*"]
 ---
 # Source: metallb/templates/rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -269,7 +276,7 @@
 rules:
   - apiGroups: [""]
     resources: ["pods"]
-    verbs: ["list"]
+    verbs: ["list", "get"]
   - apiGroups: [""]
     resources: ["secrets"]
     verbs: ["get", "list", "watch"]
@@ -277,9 +284,6 @@
     resources: ["configmaps"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
-    resources: ["addresspools"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metallb.io"]
     resources: ["bfdprofiles"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
@@ -324,9 +328,6 @@
     resources: ["secrets"]
     verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
   - apiGroups: ["metallb.io"]
-    resources: ["addresspools"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metallb.io"]
     resources: ["ipaddresspools"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
@@ -452,7 +453,7 @@
       initContainers:
         # Copies the initial config files with the right permissions to the shared volume.
         - name: cp-frr-files
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           securityContext:
             runAsUser: 100
             runAsGroup: 101
@@ -465,14 +466,14 @@
         # Copies the reloader to the shared volume between the speaker and reloader.
         - name: cp-reloader
           image: quay.io/metallb/speaker:v0.13.11
-          command: ["/bin/sh", "-c", "cp -f /frr-reloader.sh /etc/frr_reloader/"]
+          command: ["/cp-tool", "/frr-reloader.sh", "/etc/frr_reloader/frr-reloader.sh"]
           volumeMounts:
             - name: reloader
               mountPath: /etc/frr_reloader
         # Copies the metrics exporter
         - name: cp-metrics
           image: quay.io/metallb/speaker:v0.13.11
-          command: ["/bin/sh", "-c", "cp -f /frr-metrics /etc/frr_metrics/"]
+          command: ["/cp-tool", "/frr-metrics", "/etc/frr_metrics/frr-metrics"]
           volumeMounts:
             - name: metrics
               mountPath: /etc/frr_metrics
@@ -508,6 +509,10 @@
               value: /etc/frr_reloader/reloader.pid
             - name: METALLB_BGP_TYPE
               value: frr
+            - name: METALLB_POD_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
           ports:
             - name: monitoring
               containerPort: 7472
@@ -558,7 +563,7 @@
                 - NET_RAW
                 - SYS_ADMIN
                 - NET_BIND_SERVICE
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           env:
             - name: TINI_SUBREAPER
               value: "true"
@@ -583,7 +588,7 @@
               tail -f /etc/frr/frr.log
           livenessProbe:
             httpGet:
-              path: /livez
+              path: livez
               port: 7473
             initialDelaySeconds: 10
             periodSeconds: 10
@@ -597,7 +602,7 @@
             failureThreshold: 30
             periodSeconds: 5
         - name: reloader
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           command: ["/etc/frr_reloader/frr-reloader.sh"]
           volumeMounts:
             - name: frr-sockets
@@ -607,10 +612,13 @@
             - name: reloader
               mountPath: /etc/frr_reloader
         - name: frr-metrics
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           command: ["/etc/frr_metrics/frr-metrics"]
           args:
             - --metrics-port=7473
+          env:
+            - name: VTYSH_HISTFILE
+              value: /dev/null
           ports:
             - containerPort: 7473
               name: monitoring
@@ -669,7 +677,7 @@
           args:
             - --port=7472
             - --log-level=info
-            - --cert-service-name=metallb-webhook-service
+            - --tls-min-version=VersionTLS12
           env:
             - name: METALLB_ML_SECRET_NAME
               value: metallb-memberlist
@@ -717,7 +725,7 @@
         - name: cert
           secret:
             defaultMode: 420
-            secretName: webhook-server-cert
+            secretName: metallb-webhook-cert
 ---
 # Source: metallb/templates/webhooks.yaml
 apiVersion: admissionregistration.k8s.io/v1
@@ -732,26 +740,6 @@
   - admissionReviewVersions:
       - v1
     clientConfig:
-      service:
-        name: metallb-webhook-service
-        namespace: default
-        path: /validate-metallb-io-v1beta1-addresspool
-    failurePolicy: Fail
-    name: addresspoolvalidationwebhook.metallb.io
-    rules:
-      - apiGroups:
-          - metallb.io
-        apiVersions:
-          - v1beta1
-        operations:
-          - CREATE
-          - UPDATE
-        resources:
-          - addresspools
-    sideEffects: None
-  - admissionReviewVersions:
-      - v1
-    clientConfig:
       service:
         name: metallb-webhook-service
         namespace: default

@gitops-updater gitops-updater bot changed the title ⬆️ Update Helm release metallb to v0.14.7 ⬆️ Update Helm release metallb to v0.14.8 Jul 23, 2024
@gitops-updater gitops-updater bot force-pushed the renovate/metallb-0.x branch from c40eec1 to 9ce815e Compare July 23, 2024 13:19
@github-actions GitHub Actions
Copy link

Path: cluster/core/metallb-system/helm-release.yaml
Version: 0.13.11 -> 0.14.8

@@ -27,7 +27,7 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: webhook-server-cert
+  name: metallb-webhook-cert
   namespace: "default"
   labels:
     app.kubernetes.io/name: metallb
@@ -40,6 +40,10 @@
 metadata:
   name: metallb-excludel2
   namespace: "default"
+  labels:
+    app.kubernetes.io/name: metallb
+    app.kubernetes.io/instance: metallb
+    app.kubernetes.io/managed-by: Helm
 data:
   excludel2.yaml: |
     announcedInterfacesToExclude:
@@ -157,7 +161,7 @@
   frr.conf: |
     ! This file gets overriden the first time the speaker renders a config.
     ! So anything configured here is only temporary.
-    frr version 7.5.1
+    frr version 8.0
     frr defaults traditional
     hostname Router
     line vty
@@ -194,7 +198,7 @@
     verbs: ["list", "watch"]
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
-    resourceNames: ["addresspools.metallb.io", "bfdprofiles.metallb.io", "bgpadvertisements.metallb.io", "bgppeers.metallb.io", "ipaddresspools.metallb.io", "l2advertisements.metallb.io", "communities.metallb.io"]
+    resourceNames: ["bfdprofiles.metallb.io", "bgpadvertisements.metallb.io", "bgppeers.metallb.io", "ipaddresspools.metallb.io", "l2advertisements.metallb.io", "communities.metallb.io"]
     verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
@@ -219,6 +223,9 @@
   - apiGroups: [""]
     resources: ["events"]
     verbs: ["create", "patch"]
+  - apiGroups: ["metallb.io"]
+    resources: ["servicel2statuses", "servicel2statuses/status"]
+    verbs: ["*"]
 ---
 # Source: metallb/templates/rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -269,7 +276,7 @@
 rules:
   - apiGroups: [""]
     resources: ["pods"]
-    verbs: ["list"]
+    verbs: ["list", "get"]
   - apiGroups: [""]
     resources: ["secrets"]
     verbs: ["get", "list", "watch"]
@@ -277,9 +284,6 @@
     resources: ["configmaps"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
-    resources: ["addresspools"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metallb.io"]
     resources: ["bfdprofiles"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
@@ -324,9 +328,6 @@
     resources: ["secrets"]
     verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
   - apiGroups: ["metallb.io"]
-    resources: ["addresspools"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metallb.io"]
     resources: ["ipaddresspools"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
@@ -452,7 +453,7 @@
       initContainers:
         # Copies the initial config files with the right permissions to the shared volume.
         - name: cp-frr-files
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           securityContext:
             runAsUser: 100
             runAsGroup: 101
@@ -465,14 +466,14 @@
         # Copies the reloader to the shared volume between the speaker and reloader.
         - name: cp-reloader
           image: quay.io/metallb/speaker:v0.13.11
-          command: ["/bin/sh", "-c", "cp -f /frr-reloader.sh /etc/frr_reloader/"]
+          command: ["/cp-tool", "/frr-reloader.sh", "/etc/frr_reloader/frr-reloader.sh"]
           volumeMounts:
             - name: reloader
               mountPath: /etc/frr_reloader
         # Copies the metrics exporter
         - name: cp-metrics
           image: quay.io/metallb/speaker:v0.13.11
-          command: ["/bin/sh", "-c", "cp -f /frr-metrics /etc/frr_metrics/"]
+          command: ["/cp-tool", "/frr-metrics", "/etc/frr_metrics/frr-metrics"]
           volumeMounts:
             - name: metrics
               mountPath: /etc/frr_metrics
@@ -508,6 +509,10 @@
               value: /etc/frr_reloader/reloader.pid
             - name: METALLB_BGP_TYPE
               value: frr
+            - name: METALLB_POD_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
           ports:
             - name: monitoring
               containerPort: 7472
@@ -558,7 +563,7 @@
                 - NET_RAW
                 - SYS_ADMIN
                 - NET_BIND_SERVICE
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           env:
             - name: TINI_SUBREAPER
               value: "true"
@@ -583,7 +588,7 @@
               tail -f /etc/frr/frr.log
           livenessProbe:
             httpGet:
-              path: /livez
+              path: livez
               port: 7473
             initialDelaySeconds: 10
             periodSeconds: 10
@@ -597,7 +602,7 @@
             failureThreshold: 30
             periodSeconds: 5
         - name: reloader
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           command: ["/etc/frr_reloader/frr-reloader.sh"]
           volumeMounts:
             - name: frr-sockets
@@ -607,10 +612,13 @@
             - name: reloader
               mountPath: /etc/frr_reloader
         - name: frr-metrics
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           command: ["/etc/frr_metrics/frr-metrics"]
           args:
             - --metrics-port=7473
+          env:
+            - name: VTYSH_HISTFILE
+              value: /dev/null
           ports:
             - containerPort: 7473
               name: monitoring
@@ -669,7 +677,7 @@
           args:
             - --port=7472
             - --log-level=info
-            - --cert-service-name=metallb-webhook-service
+            - --tls-min-version=VersionTLS12
           env:
             - name: METALLB_ML_SECRET_NAME
               value: metallb-memberlist
@@ -717,7 +725,7 @@
         - name: cert
           secret:
             defaultMode: 420
-            secretName: webhook-server-cert
+            secretName: metallb-webhook-cert
 ---
 # Source: metallb/templates/webhooks.yaml
 apiVersion: admissionregistration.k8s.io/v1
@@ -732,26 +740,6 @@
   - admissionReviewVersions:
       - v1
     clientConfig:
-      service:
-        name: metallb-webhook-service
-        namespace: default
-        path: /validate-metallb-io-v1beta1-addresspool
-    failurePolicy: Fail
-    name: addresspoolvalidationwebhook.metallb.io
-    rules:
-      - apiGroups:
-          - metallb.io
-        apiVersions:
-          - v1beta1
-        operations:
-          - CREATE
-          - UPDATE
-        resources:
-          - addresspools
-    sideEffects: None
-  - admissionReviewVersions:
-      - v1
-    clientConfig:
       service:
         name: metallb-webhook-service
         namespace: default

@gitops-updater
⬆️ Update Helm release metallb to v0.14.8
7040315 
| datasource | package | from    | to     |
| ---------- | ------- | ------- | ------ |
| helm       | metallb | 0.13.11 | 0.14.8 |
@gitops-updater gitops-updater bot force-pushed the renovate/metallb-0.x branch from 9ce815e to 7040315 Compare October 20, 2024 14:26
@github-actions GitHub Actions
Copy link

Path: cluster/core/metallb-system/helm-release.yaml
Version: 0.13.11 -> 0.14.8

@@ -27,7 +27,7 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: webhook-server-cert
+  name: metallb-webhook-cert
   namespace: "default"
   labels:
     app.kubernetes.io/name: metallb
@@ -40,6 +40,10 @@
 metadata:
   name: metallb-excludel2
   namespace: "default"
+  labels:
+    app.kubernetes.io/name: metallb
+    app.kubernetes.io/instance: metallb
+    app.kubernetes.io/managed-by: Helm
 data:
   excludel2.yaml: |
     announcedInterfacesToExclude:
@@ -157,7 +161,7 @@
   frr.conf: |
     ! This file gets overriden the first time the speaker renders a config.
     ! So anything configured here is only temporary.
-    frr version 7.5.1
+    frr version 8.0
     frr defaults traditional
     hostname Router
     line vty
@@ -194,7 +198,7 @@
     verbs: ["list", "watch"]
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
-    resourceNames: ["addresspools.metallb.io", "bfdprofiles.metallb.io", "bgpadvertisements.metallb.io", "bgppeers.metallb.io", "ipaddresspools.metallb.io", "l2advertisements.metallb.io", "communities.metallb.io"]
+    resourceNames: ["bfdprofiles.metallb.io", "bgpadvertisements.metallb.io", "bgppeers.metallb.io", "ipaddresspools.metallb.io", "l2advertisements.metallb.io", "communities.metallb.io"]
     verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
   - apiGroups: ["apiextensions.k8s.io"]
     resources: ["customresourcedefinitions"]
@@ -219,6 +223,9 @@
   - apiGroups: [""]
     resources: ["events"]
     verbs: ["create", "patch"]
+  - apiGroups: ["metallb.io"]
+    resources: ["servicel2statuses", "servicel2statuses/status"]
+    verbs: ["*"]
 ---
 # Source: metallb/templates/rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -269,7 +276,7 @@
 rules:
   - apiGroups: [""]
     resources: ["pods"]
-    verbs: ["list"]
+    verbs: ["list", "get"]
   - apiGroups: [""]
     resources: ["secrets"]
     verbs: ["get", "list", "watch"]
@@ -277,9 +284,6 @@
     resources: ["configmaps"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
-    resources: ["addresspools"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metallb.io"]
     resources: ["bfdprofiles"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
@@ -324,9 +328,6 @@
     resources: ["secrets"]
     verbs: ["create", "delete", "get", "list", "patch", "update", "watch"]
   - apiGroups: ["metallb.io"]
-    resources: ["addresspools"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metallb.io"]
     resources: ["ipaddresspools"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["metallb.io"]
@@ -452,7 +453,7 @@
       initContainers:
         # Copies the initial config files with the right permissions to the shared volume.
         - name: cp-frr-files
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           securityContext:
             runAsUser: 100
             runAsGroup: 101
@@ -465,14 +466,14 @@
         # Copies the reloader to the shared volume between the speaker and reloader.
         - name: cp-reloader
           image: quay.io/metallb/speaker:v0.13.11
-          command: ["/bin/sh", "-c", "cp -f /frr-reloader.sh /etc/frr_reloader/"]
+          command: ["/cp-tool", "/frr-reloader.sh", "/etc/frr_reloader/frr-reloader.sh"]
           volumeMounts:
             - name: reloader
               mountPath: /etc/frr_reloader
         # Copies the metrics exporter
         - name: cp-metrics
           image: quay.io/metallb/speaker:v0.13.11
-          command: ["/bin/sh", "-c", "cp -f /frr-metrics /etc/frr_metrics/"]
+          command: ["/cp-tool", "/frr-metrics", "/etc/frr_metrics/frr-metrics"]
           volumeMounts:
             - name: metrics
               mountPath: /etc/frr_metrics
@@ -508,6 +509,10 @@
               value: /etc/frr_reloader/reloader.pid
             - name: METALLB_BGP_TYPE
               value: frr
+            - name: METALLB_POD_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
           ports:
             - name: monitoring
               containerPort: 7472
@@ -558,7 +563,7 @@
                 - NET_RAW
                 - SYS_ADMIN
                 - NET_BIND_SERVICE
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           env:
             - name: TINI_SUBREAPER
               value: "true"
@@ -583,7 +588,7 @@
               tail -f /etc/frr/frr.log
           livenessProbe:
             httpGet:
-              path: /livez
+              path: livez
               port: 7473
             initialDelaySeconds: 10
             periodSeconds: 10
@@ -597,7 +602,7 @@
             failureThreshold: 30
             periodSeconds: 5
         - name: reloader
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           command: ["/etc/frr_reloader/frr-reloader.sh"]
           volumeMounts:
             - name: frr-sockets
@@ -607,10 +612,13 @@
             - name: reloader
               mountPath: /etc/frr_reloader
         - name: frr-metrics
-          image: quay.io/frrouting/frr:8.5.2
+          image: quay.io/frrouting/frr:9.1.0
           command: ["/etc/frr_metrics/frr-metrics"]
           args:
             - --metrics-port=7473
+          env:
+            - name: VTYSH_HISTFILE
+              value: /dev/null
           ports:
             - containerPort: 7473
               name: monitoring
@@ -669,7 +677,7 @@
           args:
             - --port=7472
             - --log-level=info
-            - --cert-service-name=metallb-webhook-service
+            - --tls-min-version=VersionTLS12
           env:
             - name: METALLB_ML_SECRET_NAME
               value: metallb-memberlist
@@ -717,7 +725,7 @@
         - name: cert
           secret:
             defaultMode: 420
-            secretName: webhook-server-cert
+            secretName: metallb-webhook-cert
 ---
 # Source: metallb/templates/webhooks.yaml
 apiVersion: admissionregistration.k8s.io/v1
@@ -732,26 +740,6 @@
   - admissionReviewVersions:
       - v1
     clientConfig:
-      service:
-        name: metallb-webhook-service
-        namespace: default
-        path: /validate-metallb-io-v1beta1-addresspool
-    failurePolicy: Fail
-    name: addresspoolvalidationwebhook.metallb.io
-    rules:
-      - apiGroups:
-          - metallb.io
-        apiVersions:
-          - v1beta1
-        operations:
-          - CREATE
-          - UPDATE
-        resources:
-          - addresspools
-    sideEffects: None
-  - admissionReviewVersions:
-      - v1
-    clientConfig:
       service:
         name: metallb-webhook-service
         namespace: default

@VoliKoN VoliKoN merged commit 1c1f9ff into main Nov 9, 2024
3 checks passed
@gitops-updater gitops-updater bot deleted the renovate/metallb-0.x branch November 9, 2024 15:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
renovate/helm type/minor
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@VoliKoN