feat(helm): update chart cilium to 1.16.5 #403
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
github-actions
bot
added
the
area/kubernetes
--- kubernetes/apps/kube-system/cilium/app Kustomization: flux-system/cluster-apps-cilium HelmRelease: kube-system/cilium
+++ kubernetes/apps/kube-system/cilium/app Kustomization: flux-system/cluster-apps-cilium HelmRelease: kube-system/cilium
@@ -12,13 +12,13 @@
spec:
chart: cilium
sourceRef:
kind: HelmRepository
name: cilium
namespace: flux-system
- version: 1.14.6
+ version: 1.15.4
install:
remediation:
retries: 3
interval: 30m
maxHistory: 2
uninstall: |
--- HelmRelease: kube-system/cilium ConfigMap: kube-system/cilium-dashboard
+++ HelmRelease: kube-system/cilium ConfigMap: kube-system/cilium-dashboard
@@ -39,13 +39,16 @@
"error": "#890f02",
"warning": "#c15c17"
},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -143,13 +146,16 @@
"aliasColors": {
"avg": "#cffaff"
},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -283,13 +289,16 @@
"MAX_virtual_memory_bytes": "#e5ac0e",
"Max Virtual Memory": "#584477"
},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -406,13 +415,16 @@
"aliasColors": {
"MAX_resident_memory_bytes_max": "#e5ac0e"
},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -523,13 +535,16 @@
"aliasColors": {
"all nodes": "#e5a8e2"
},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -648,13 +663,16 @@
"aliasColors": {
"MAX_resident_memory_bytes_max": "#e5ac0e"
},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"description": "BPF memory usage in the entire system including components not managed by Cilium.",
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
@@ -771,13 +789,16 @@
},
{
"aliasColors": {},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"description": "Fill percentage of BPF maps, tagged by map name",
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
@@ -882,13 +903,16 @@
},
{
"aliasColors": {},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -983,13 +1007,16 @@
},
{
"aliasColors": {},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -1084,13 +1111,16 @@
},
{
"aliasColors": {},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -1185,13 +1215,16 @@
},
{
"aliasColors": {},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -1286,13 +1319,16 @@
},
{
"aliasColors": {},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -1387,13 +1423,16 @@
},
{
"aliasColors": {},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -1523,13 +1562,16 @@
},
{
"aliasColors": {},
"bars": true,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -1624,13 +1666,16 @@
},
{
"aliasColors": {},
"bars": true,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"decimals": 2,
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
@@ -1727,13 +1772,16 @@
},
{
"aliasColors": {},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -1828,13 +1876,16 @@
},
{
"aliasColors": {},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -1927,13 +1978,16 @@
},
{
"aliasColors": {},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -2028,13 +2082,16 @@
},
{
"aliasColors": {},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -2129,13 +2186,16 @@
},
{
"aliasColors": {},
"bars": false,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
},
@@ -2251,13 +2311,16 @@
},
{
"aliasColors": {},
"bars": true,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
+ "type": "prometheus",
+ "uid": "${DS_PROMETHEUS}"
+ },
"decimals": 2,
"fieldConfig": {
"defaults": {
"custom": {}
},
"overrides": []
@@ -2354,13 +2417,16 @@
},
{
"aliasColors": {},
"bars": true,
"dashLength": 10,
"dashes": false,
- "datasource": "prometheus",
+ "datasource": {
[Diff truncated by flux-local]
--- HelmRelease: kube-system/cilium ConfigMap: kube-system/cilium-config
+++ HelmRelease: kube-system/cilium ConfigMap: kube-system/cilium-config
@@ -11,13 +11,15 @@
cilium-endpoint-gc-interval: 5m0s
nodes-gc-interval: 5m0s
skip-cnp-status-startup-clean: 'false'
debug: 'false'
debug-verbose: ''
enable-policy: default
+ policy-cidr-match-mode: ''
prometheus-serve-addr: :9962
+ controller-group-metrics: write-cni-file sync-host-ips sync-lb-maps-with-k8s-services
proxy-prometheus-port: '9964'
operator-prometheus-serve-addr: :9963
enable-metrics: 'true'
enable-ipv4: 'true'
enable-ipv6: 'false'
custom-cni-conf: 'false'
@@ -30,32 +32,37 @@
bpf-lb-map-max: '65536'
bpf-lb-external-clusterip: 'false'
preallocate-bpf-maps: 'false'
sidecar-istio-proxy-image: cilium/istio_proxy
cluster-name: home-cluster
cluster-id: '1'
- routing-mode: native
+ routing-mode: tunnel
+ tunnel-protocol: vxlan
+ service-no-backend-response: reject
enable-l7-proxy: 'true'
enable-ipv4-masquerade: 'true'
enable-ipv4-big-tcp: 'false'
enable-ipv6-big-tcp: 'false'
enable-ipv6-masquerade: 'true'
enable-bpf-masquerade: 'true'
+ enable-masquerade-to-route-source: 'false'
enable-xt-socket-fallback: 'true'
install-no-conntrack-iptables-rules: 'false'
auto-direct-node-routes: 'true'
enable-local-redirect-policy: 'true'
ipv4-native-routing-cidr: ${CLUSTER_CIDR}
kube-proxy-replacement: 'true'
kube-proxy-replacement-healthz-bind-address: 0.0.0.0:10256
bpf-lb-sock: 'false'
enable-health-check-nodeport: 'true'
+ enable-health-check-loadbalancer-ip: 'false'
node-port-bind-protection: 'true'
enable-auto-protect-node-port-range: 'true'
bpf-lb-mode: dsr
bpf-lb-algorithm: maglev
+ bpf-lb-acceleration: disabled
enable-svc-source-range-check: 'true'
enable-l2-neigh-discovery: 'true'
arping-refresh-period: 30s
enable-endpoint-routes: 'true'
enable-k8s-networkpolicy: 'true'
write-cni-conf-when-ready: /host/etc/cni/net.d/05-cilium.conflist
@@ -69,21 +76,21 @@
operator-api-serve-addr: 127.0.0.1:9234
enable-hubble: 'true'
hubble-socket-path: /var/run/cilium/hubble.sock
hubble-metrics-server: :9965
hubble-metrics: dns:query drop tcp flow port-distribution icmp http
enable-hubble-open-metrics: 'false'
+ hubble-export-file-max-size-mb: '10'
+ hubble-export-file-max-backups: '5'
hubble-listen-address: :4244
hubble-disable-tls: 'false'
hubble-tls-cert-file: /var/lib/cilium/tls/hubble/server.crt
hubble-tls-key-file: /var/lib/cilium/tls/hubble/server.key
hubble-tls-client-ca-files: /var/lib/cilium/tls/hubble/client-ca.crt
ipam: kubernetes
ipam-cilium-node-update-rate: 15s
- disable-cnp-status-updates: 'true'
- cnp-node-status-gc-interval: 0s
egress-gateway-reconciliation-trigger-interval: 1s
enable-vtep: 'false'
vtep-endpoint: ''
vtep-cidr: ''
vtep-mask: ''
vtep-mac: ''
@@ -93,14 +100,14 @@
l2-announcements-retry-period: 1s
enable-bgp-control-plane: 'false'
bpf-root: /sys/fs/bpf
cgroup-root: /run/cilium/cgroupv2
enable-k8s-terminating-endpoint: 'true'
enable-sctp: 'false'
- k8s-client-qps: '5'
- k8s-client-burst: '10'
+ k8s-client-qps: '10'
+ k8s-client-burst: '20'
remove-cilium-node-taints: 'true'
set-cilium-node-taints: 'true'
set-cilium-is-up-condition: 'true'
unmanaged-pod-watcher-interval: '15'
dnsproxy-enable-transparent-mode: 'true'
tofqdns-dns-reject-response-code: refused
@@ -115,7 +122,8 @@
mesh-auth-rotated-identities-queue-size: '1024'
mesh-auth-gc-interval: 5m0s
proxy-connect-timeout: '2'
proxy-max-requests-per-connection: '0'
proxy-max-connection-duration-seconds: '0'
external-envoy-proxy: 'false'
+ max-connected-clusters: '255'
--- HelmRelease: kube-system/cilium ConfigMap: kube-system/hubble-ui-nginx
+++ HelmRelease: kube-system/cilium ConfigMap: kube-system/hubble-ui-nginx
@@ -15,8 +15,10 @@
\ range,keep-alive,user-agent,cache-control,content-type,content-transfer-encoding,x-accept-content-transfer-encoding,x-accept-response-streaming,x-user-agent,x-grpc-web,grpc-timeout;\n\
\ if ($request_method = OPTIONS) {\n return 204;\n }\n\
\ # /CORS\n\n location /api {\n proxy_http_version 1.1;\n\
\ proxy_pass_request_headers on;\n proxy_hide_header Access-Control-Allow-Origin;\n\
\ proxy_pass http://127.0.0.1:8090;\n }\n location /\
\ {\n # double `/index.html` is required here \n try_files\
- \ $uri $uri/ /index.html /index.html;\n }\n }\n}"
+ \ $uri $uri/ /index.html /index.html;\n }\n\n # Liveness probe\n\
+ \ location /healthz {\n access_log off;\n add_header\
+ \ Content-Type text/plain;\n return 200 'ok';\n }\n }\n}"
--- HelmRelease: kube-system/cilium ConfigMap: kube-system/hubble-dashboard
+++ HelmRelease: kube-system/cilium ConfigMap: kube-system/hubble-dashboard
@@ -3238,11 +3238,11 @@
"2d",
"7d",
"30d"
]
},
"timezone": "",
- "title": "Hubble",
+ "title": "Hubble Metrics and Monitoring",
"uid": "5HftnJAWz",
"version": 24
}
--- HelmRelease: kube-system/cilium ClusterRole: kube-system/cilium
+++ HelmRelease: kube-system/cilium ClusterRole: kube-system/cilium
@@ -54,12 +54,15 @@
- get
- apiGroups:
- cilium.io
resources:
- ciliumloadbalancerippools
- ciliumbgppeeringpolicies
+ - ciliumbgpnodeconfigs
+ - ciliumbgpadvertisements
+ - ciliumbgppeerconfigs
- ciliumclusterwideenvoyconfigs
- ciliumclusterwidenetworkpolicies
- ciliumegressgatewaypolicies
- ciliumendpoints
- ciliumendpointslices
- ciliumenvoyconfigs
@@ -108,9 +111,10 @@
resources:
- ciliumnetworkpolicies/status
- ciliumclusterwidenetworkpolicies/status
- ciliumendpoints/status
- ciliumendpoints
- ciliuml2announcementpolicies/status
+ - ciliumbgpnodeconfigs/status
verbs:
- patch
--- HelmRelease: kube-system/cilium ClusterRole: kube-system/cilium-operator
+++ HelmRelease: kube-system/cilium ClusterRole: kube-system/cilium-operator
@@ -116,12 +116,15 @@
- update
- apiGroups:
- cilium.io
resources:
- ciliumendpointslices
- ciliumenvoyconfigs
+ - ciliumbgppeerconfigs
+ - ciliumbgpadvertisements
+ - ciliumbgpnodeconfigs
verbs:
- create
- update
- get
- list
- watch
@@ -142,12 +145,17 @@
- customresourcedefinitions
verbs:
- update
resourceNames:
- ciliumloadbalancerippools.cilium.io
- ciliumbgppeeringpolicies.cilium.io
+ - ciliumbgpclusterconfigs.cilium.io
+ - ciliumbgppeerconfigs.cilium.io
+ - ciliumbgpadvertisements.cilium.io
+ - ciliumbgpnodeconfigs.cilium.io
+ - ciliumbgpnodeconfigoverrides.cilium.io
- ciliumclusterwideenvoyconfigs.cilium.io
- ciliumclusterwidenetworkpolicies.cilium.io
- ciliumegressgatewaypolicies.cilium.io
- ciliumendpoints.cilium.io
- ciliumendpointslices.cilium.io
- ciliumenvoyconfigs.cilium.io
@@ -162,12 +170,14 @@
- ciliumpodippools.cilium.io
- apiGroups:
- cilium.io
resources:
- ciliumloadbalancerippools
- ciliumpodippools
+ - ciliumbgpclusterconfigs
+ - ciliumbgpnodeconfigoverrides
verbs:
- get
- list
- watch
- apiGroups:
- cilium.io
--- HelmRelease: kube-system/cilium DaemonSet: kube-system/cilium
+++ HelmRelease: kube-system/cilium DaemonSet: kube-system/cilium
@@ -16,21 +16,21 @@
rollingUpdate:
maxUnavailable: 2
type: RollingUpdate
template:
metadata:
annotations:
- cilium.io/cilium-configmap-checksum: 08d1b987525060dd3fa1cb445d7d467e645b3f18388f6e86b2d7f1a48139d963
+ cilium.io/cilium-configmap-checksum: 038c6dab4bc719d37bb4a2a8b4d532664cab51cdbcf2cf59d68d468e011c31a0
labels:
k8s-app: cilium
app.kubernetes.io/name: cilium-agent
app.kubernetes.io/part-of: cilium
spec:
containers:
- name: cilium-agent
- image: quay.io/cilium/cilium:v1.14.6@sha256:37a49f1abb333279a9b802ee8a21c61cde9dd9138b5ac55f77bdfca733ba852a
+ image: quay.io/cilium/cilium:v1.15.4@sha256:b760a4831f5aab71c711f7537a107b751d0d0ce90dd32d8b358df3c5da385426
imagePullPolicy: IfNotPresent
command:
- cilium-agent
args:
- --config-dir=/tmp/cilium/config-map
startupProbe:
@@ -42,12 +42,13 @@
httpHeaders:
- name: brief
value: 'true'
failureThreshold: 105
periodSeconds: 2
successThreshold: 1
+ initialDelaySeconds: 5
livenessProbe:
httpGet:
host: 127.0.0.1
path: /healthz
port: 9879
scheme: HTTP
@@ -81,12 +82,17 @@
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
- name: CILIUM_CLUSTERMESH_CONFIG
value: /var/lib/cilium/clustermesh/
+ - name: GOMEMLIMIT
+ valueFrom:
+ resourceFieldRef:
+ resource: limits.memory
+ divisor: '1'
- name: KUBERNETES_SERVICE_HOST
value: ${KUBE_VIP_ADDR}
- name: KUBERNETES_SERVICE_PORT
value: '6443'
lifecycle:
postStart:
@@ -158,16 +164,16 @@
mountPath: /var/lib/cilium/tls/hubble
readOnly: true
- name: tmp
mountPath: /tmp
initContainers:
- name: config
- image: quay.io/cilium/cilium:v1.14.6@sha256:37a49f1abb333279a9b802ee8a21c61cde9dd9138b5ac55f77bdfca733ba852a
- imagePullPolicy: IfNotPresent
- command:
- - cilium
+ image: quay.io/cilium/cilium:v1.15.4@sha256:b760a4831f5aab71c711f7537a107b751d0d0ce90dd32d8b358df3c5da385426
+ imagePullPolicy: IfNotPresent
+ command:
+ - cilium-dbg
- build-config
env:
- name: K8S_NODE_NAME
valueFrom:
fieldRef:
apiVersion: v1
@@ -183,13 +189,13 @@
value: '6443'
volumeMounts:
- name: tmp
mountPath: /tmp
terminationMessagePolicy: FallbackToLogsOnError
- name: mount-cgroup
- image: quay.io/cilium/cilium:v1.14.6@sha256:37a49f1abb333279a9b802ee8a21c61cde9dd9138b5ac55f77bdfca733ba852a
+ image: quay.io/cilium/cilium:v1.15.4@sha256:b760a4831f5aab71c711f7537a107b751d0d0ce90dd32d8b358df3c5da385426
imagePullPolicy: IfNotPresent
env:
- name: CGROUP_ROOT
value: /run/cilium/cgroupv2
- name: BIN_PATH
value: /opt/cni/bin
@@ -206,13 +212,13 @@
- name: cni-path
mountPath: /hostbin
terminationMessagePolicy: FallbackToLogsOnError
securityContext:
privileged: true
- name: apply-sysctl-overwrites
- image: quay.io/cilium/cilium:v1.14.6@sha256:37a49f1abb333279a9b802ee8a21c61cde9dd9138b5ac55f77bdfca733ba852a
+ image: quay.io/cilium/cilium:v1.15.4@sha256:b760a4831f5aab71c711f7537a107b751d0d0ce90dd32d8b358df3c5da385426
imagePullPolicy: IfNotPresent
env:
- name: BIN_PATH
value: /opt/cni/bin
command:
- sh
@@ -227,13 +233,13 @@
- name: cni-path
mountPath: /hostbin
terminationMessagePolicy: FallbackToLogsOnError
securityContext:
privileged: true
- name: clean-cilium-state
- image: quay.io/cilium/cilium:v1.14.6@sha256:37a49f1abb333279a9b802ee8a21c61cde9dd9138b5ac55f77bdfca733ba852a
+ image: quay.io/cilium/cilium:v1.15.4@sha256:b760a4831f5aab71c711f7537a107b751d0d0ce90dd32d8b358df3c5da385426
imagePullPolicy: IfNotPresent
command:
- /init-container.sh
env:
- name: CILIUM_ALL_STATE
valueFrom:
@@ -243,12 +249,18 @@
optional: true
- name: CILIUM_BPF_STATE
valueFrom:
configMapKeyRef:
name: cilium-config
key: clean-cilium-bpf-state
+ optional: true
+ - name: WRITE_CNI_CONF_WHEN_READY
+ valueFrom:
+ configMapKeyRef:
+ name: cilium-config
+ key: write-cni-conf-when-ready
optional: true
- name: KUBERNETES_SERVICE_HOST
value: ${KUBE_VIP_ADDR}
- name: KUBERNETES_SERVICE_PORT
value: '6443'
terminationMessagePolicy: FallbackToLogsOnError
@@ -260,13 +272,13 @@
- name: cilium-cgroup
mountPath: /run/cilium/cgroupv2
mountPropagation: HostToContainer
- name: cilium-run
mountPath: /var/run/cilium
- name: install-cni-binaries
- image: quay.io/cilium/cilium:v1.14.6@sha256:37a49f1abb333279a9b802ee8a21c61cde9dd9138b5ac55f77bdfca733ba852a
+ image: quay.io/cilium/cilium:v1.15.4@sha256:b760a4831f5aab71c711f7537a107b751d0d0ce90dd32d8b358df3c5da385426
imagePullPolicy: IfNotPresent
command:
- /install-plugin.sh
resources:
requests:
cpu: 100m
--- HelmRelease: kube-system/cilium Deployment: kube-system/cilium-operator
+++ HelmRelease: kube-system/cilium Deployment: kube-system/cilium-operator
@@ -20,22 +20,22 @@
maxSurge: 25%
maxUnavailable: 100%
type: RollingUpdate
template:
metadata:
annotations:
- cilium.io/cilium-configmap-checksum: 08d1b987525060dd3fa1cb445d7d467e645b3f18388f6e86b2d7f1a48139d963
+ cilium.io/cilium-configmap-checksum: 038c6dab4bc719d37bb4a2a8b4d532664cab51cdbcf2cf59d68d468e011c31a0
labels:
io.cilium/app: operator
name: cilium-operator
app.kubernetes.io/part-of: cilium
app.kubernetes.io/name: cilium-operator
spec:
containers:
- name: cilium-operator
- image: quay.io/cilium/operator-generic:v1.14.6@sha256:2f0bf8fb8362c7379f3bf95036b90ad5b67378ed05cd8eb0410c1afc13423848
+ image: quay.io/cilium/operator-generic:v1.15.4@sha256:404890a83cca3f28829eb7e54c1564bb6904708cdb7be04ebe69c2b60f164e9a
imagePullPolicy: IfNotPresent
command:
- cilium-operator-generic
args:
- --config-dir=/tmp/cilium/config-map
- --debug=$(CILIUM_DEBUG)
--- HelmRelease: kube-system/cilium Deployment: kube-system/hubble-relay
+++ HelmRelease: kube-system/cilium Deployment: kube-system/hubble-relay
@@ -34,27 +34,35 @@
capabilities:
drop:
- ALL
runAsGroup: 65532
runAsNonRoot: true
runAsUser: 65532
- image: quay.io/cilium/hubble-relay:v1.14.6@sha256:adeb90adae481bb952211483f511afee40825707953ed7ac118902d3bc8dd37f
+ image: quay.io/cilium/hubble-relay:v1.15.4@sha256:03ad857feaf52f1b4774c29614f42a50b370680eb7d0bfbc1ae065df84b1070a
imagePullPolicy: IfNotPresent
command:
- hubble-relay
args:
- serve
ports:
- name: grpc
containerPort: 4245
readinessProbe:
- tcpSocket:
- port: grpc
+ grpc:
+ port: 4222
+ timeoutSeconds: 3
livenessProbe:
- tcpSocket:
- port: grpc
+ grpc:
+ port: 4222
+ timeoutSeconds: 3
+ startupProbe:
+ grpc:
+ port: 4222
+ timeoutSeconds: 3
+ failureThreshold: 20
+ periodSeconds: 3
volumeMounts:
- name: config
mountPath: /etc/hubble-relay
readOnly: true
- name: tls
mountPath: /var/lib/hubble-relay/tls
--- HelmRelease: kube-system/cilium Deployment: kube-system/hubble-ui
+++ HelmRelease: kube-system/cilium Deployment: kube-system/hubble-ui
@@ -17,38 +17,46 @@
rollingUpdate:
maxUnavailable: 1
type: RollingUpdate
template:
metadata:
annotations:
- cilium.io/hubble-ui-nginx-configmap-checksum: 02d6b04b131029fae39270192dcff10fa3a64af9d1d4d0049f1efbc3f5526a34
+ cilium.io/hubble-ui-nginx-configmap-checksum: e8acee96ed990156efd0291c8c33709d2c7902d2ec993eefa16c7cd3d1a9d84b
labels:
k8s-app: hubble-ui
app.kubernetes.io/name: hubble-ui
app.kubernetes.io/part-of: cilium
spec:
priorityClassName: null
serviceAccount: hubble-ui
serviceAccountName: hubble-ui
automountServiceAccountToken: true
containers:
- name: frontend
- image: quay.io/cilium/hubble-ui:v0.12.1@sha256:9e5f81ee747866480ea1ac4630eb6975ff9227f9782b7c93919c081c33f38267
+ image: quay.io/cilium/hubble-ui:v0.13.0@sha256:7d663dc16538dd6e29061abd1047013a645e6e69c115e008bee9ea9fef9a6666
imagePullPolicy: IfNotPresent
ports:
- name: http
containerPort: 8081
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: 8081
+ readinessProbe:
+ httpGet:
+ path: /
+ port: 8081
volumeMounts:
- name: hubble-ui-nginx-conf
mountPath: /etc/nginx/conf.d/default.conf
subPath: nginx.conf
- name: tmp-dir
mountPath: /tmp
terminationMessagePolicy: FallbackToLogsOnError
- name: backend
- image: quay.io/cilium/hubble-ui-backend:v0.12.1@sha256:1f86f3400827a0451e6332262467f894eeb7caf0eb8779bd951e2caa9d027cbe
+ image: quay.io/cilium/hubble-ui-backend:v0.13.0@sha256:1e7657d997c5a48253bb8dc91ecee75b63018d16ff5e5797e5af367336bc8803
imagePullPolicy: IfNotPresent
env:
- name: EVENTS_SERVER_PORT
value: '8090'
- name: FLOWS_API_ADDR
value: hubble-relay:80
--- HelmRelease: kube-system/cilium ConfigMap: kube-system/hubble-dns-namespace
+++ HelmRelease: kube-system/cilium ConfigMap: kube-system/hubble-dns-namespace
@@ -0,0 +1,240 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: hubble-dns-namespace
+ namespace: kube-system
+ labels:
+ k8s-app: hubble
+ app.kubernetes.io/name: hubble
+ app.kubernetes.io/part-of: cilium
+ grafana_dashboard: '1'
+ annotations:
+ grafana_folder: Cilium
+data:
+ hubble-dns-namespace.json: "{\n \"__inputs\": [\n {\n \"name\": \"\
+ DS_PROMETHEUS\",\n \"label\": \"Prometheus\",\n \"description\"\
+ : \"\",\n \"type\": \"datasource\",\n \"pluginId\": \"prometheus\"\
+ ,\n \"pluginName\": \"Prometheus\"\n }\n ],\n \"__elements\"\
+ : {},\n \"__requires\": [\n {\n \"type\": \"panel\",\n \"\
+ id\": \"bargauge\",\n \"name\": \"Bar gauge\",\n \"version\": \"\
+ \"\n },\n {\n \"type\": \"grafana\",\n \"id\": \"grafana\"\
+ ,\n \"name\": \"Grafana\",\n \"version\": \"9.4.7\"\n },\n\
+ \ {\n \"type\": \"datasource\",\n \"id\": \"prometheus\",\n\
+ \ \"name\": \"Prometheus\",\n \"version\": \"1.0.0\"\n },\n\
+ \ {\n \"type\": \"panel\",\n \"id\": \"timeseries\",\n \
+ \ \"name\": \"Time series\",\n \"version\": \"\"\n }\n ],\n\
+ \ \"annotations\": {\n \"list\": [\n {\n \"builtIn\":\
+ \ 1,\n \"datasource\": {\n \"type\": \"datasource\",\n \
+ \ \"uid\": \"grafana\"\n },\n \"enable\": true,\n \
+ \ \"hide\": true,\n \"iconColor\": \"rgba(0, 211, 255, 1)\",\n\
+ \ \"name\": \"Annotations & Alerts\",\n \"target\": {\n \
+ \ \"limit\": 100,\n \"matchAny\": false,\n \"tags\"\
+ : [],\n \"type\": \"dashboard\"\n },\n \"type\":\
+ \ \"dashboard\"\n }\n ]\n },\n \"description\": \"\",\n \"\
+ editable\": true,\n \"fiscalYearStartMonth\": 0,\n \"gnetId\": 16612,\n\
+ \ \"graphTooltip\": 0,\n \"id\": null,\n \"links\": [\n {\n \
+ \ \"asDropdown\": true,\n \"icon\": \"external link\",\n \"includeVars\"\
+ : true,\n \"keepTime\": true,\n \"tags\": [\n \"cilium-overview\"\
+ \n ],\n \"targetBlank\": false,\n \"title\": \"Cilium Overviews\"\
+ ,\n \"tooltip\": \"\",\n \"type\": \"dashboards\",\n \"url\"\
+ : \"\"\n },\n {\n \"asDropdown\": true,\n \"icon\": \"\
+ external link\",\n \"includeVars\": false,\n \"keepTime\": true,\n\
+ \ \"tags\": [\n \"hubble\"\n ],\n \"targetBlank\"\
+ : false,\n \"title\": \"Hubble\",\n \"tooltip\": \"\",\n \
+ \ \"type\": \"dashboards\",\n \"url\": \"\"\n }\n ],\n \"liveNow\"\
+ : false,\n \"panels\": [\n {\n \"collapsed\": false,\n \"\
+ gridPos\": {\n \"h\": 1,\n \"w\": 24,\n \"x\": 0,\n\
+ \ \"y\": 0\n },\n \"id\": 2,\n \"panels\": [],\n\
+ \ \"title\": \"DNS\",\n \"type\": \"row\"\n },\n {\n \
+ \ \"datasource\": {\n \"type\": \"prometheus\",\n \"uid\"\
+ : \"${DS_PROMETHEUS}\"\n },\n \"description\": \"\",\n \"\
+ fieldConfig\": {\n \"defaults\": {\n \"color\": {\n \
+ \ \"mode\": \"palette-classic\"\n },\n \"custom\"\
+ : {\n \"axisCenteredZero\": false,\n \"axisColorMode\"\
+ : \"text\",\n \"axisLabel\": \"\",\n \"axisPlacement\"\
+ : \"auto\",\n \"barAlignment\": 0,\n \"drawStyle\":\
+ \ \"line\",\n \"fillOpacity\": 10,\n \"gradientMode\"\
+ : \"none\",\n \"hideFrom\": {\n \"legend\": false,\n\
+ \ \"tooltip\": false,\n \"viz\": false\n \
+ \ },\n \"lineInterpolation\": \"linear\",\n \"\
+ lineWidth\": 1,\n \"pointSize\": 5,\n \"scaleDistribution\"\
+ : {\n \"type\": \"linear\"\n },\n \"\
+ showPoints\": \"auto\",\n \"spanNulls\": false,\n \"\
+ stacking\": {\n \"group\": \"A\",\n \"mode\": \"\
+ normal\"\n },\n \"thresholdsStyle\": {\n \
+ \ \"mode\": \"off\"\n }\n },\n \"mappings\"\
+ : [],\n \"min\": 0,\n \"thresholds\": {\n \"\
+ mode\": \"absolute\",\n \"steps\": [\n {\n \
+ \ \"color\": \"green\",\n \"value\": null\n \
+ \ },\n {\n \"color\": \"red\",\n \
+ \ \"value\": 80\n }\n ]\n },\n\
+ \ \"unit\": \"reqps\"\n },\n \"overrides\": []\n\
+ \ },\n \"gridPos\": {\n \"h\": 9,\n \"w\": 12,\n\
+ \ \"x\": 0,\n \"y\": 1\n },\n \"id\": 37,\n \
+ \ \"options\": {\n \"legend\": {\n \"calcs\": [\n \
+ \ \"mean\",\n \"lastNotNull\"\n ],\n \
+ \ \"displayMode\": \"table\",\n \"placement\": \"bottom\",\n \
+ \ \"showLegend\": true\n },\n \"tooltip\": {\n \
+ \ \"mode\": \"single\",\n \"sort\": \"none\"\n }\n\
+ \ },\n \"targets\": [\n {\n \"datasource\":\
+ \ {\n \"type\": \"prometheus\",\n \"uid\": \"${DS_PROMETHEUS}\"\
+ \n },\n \"editorMode\": \"code\",\n \"expr\"\
+ : \"sum(rate(hubble_dns_queries_total{cluster=~\\\"$cluster\\\", source_namespace=~\\\
+ \"$source_namespace\\\", destination_namespace=~\\\"$destination_namespace\\\"\
+ }[$__rate_interval])) by (source) > 0\",\n \"legendFormat\": \"{{source}}\"\
+ ,\n \"range\": true,\n \"refId\": \"A\"\n }\n \
+ \ ],\n \"title\": \"DNS queries\",\n \"type\": \"timeseries\"\
+ \n },\n {\n \"datasource\": {\n \"type\": \"prometheus\"\
+ ,\n \"uid\": \"${DS_PROMETHEUS}\"\n },\n \"fieldConfig\"\
+ : {\n \"defaults\": {\n \"color\": {\n \"mode\"\
+ : \"thresholds\"\n },\n \"mappings\": [],\n \"\
+ min\": 0,\n \"thresholds\": {\n \"mode\": \"absolute\"\
+ ,\n \"steps\": [\n {\n \"color\"\
+ : \"green\",\n \"value\": null\n }\n \
+ \ ]\n },\n \"unit\": \"reqps\"\n },\n \
+ \ \"overrides\": []\n },\n \"gridPos\": {\n \"h\":\
+ \ 9,\n \"w\": 12,\n \"x\": 12,\n \"y\": 1\n \
+ \ },\n \"id\": 41,\n \"options\": {\n \"displayMode\":\
+ \ \"gradient\",\n \"minVizHeight\": 10,\n \"minVizWidth\": 0,\n\
+ \ \"orientation\": \"horizontal\",\n \"reduceOptions\": {\n\
+ \ \"calcs\": [\n \"lastNotNull\"\n ],\n \
+ \ \"fields\": \"\",\n \"values\": false\n },\n \
+ \ \"showUnfilled\": true\n },\n \"pluginVersion\": \"9.4.7\"\
+ ,\n \"targets\": [\n {\n \"datasource\": {\n \
+ \ \"type\": \"prometheus\",\n \"uid\": \"${DS_PROMETHEUS}\"\
+ \n },\n \"editorMode\": \"code\",\n \"expr\"\
+ : \"topk(10, sum(rate(hubble_dns_queries_total{cluster=~\\\"$cluster\\\", source_namespace=~\\\
+ \"$source_namespace\\\", destination_namespace=~\\\"$destination_namespace\\\"\
+ }[$__rate_interval])*60) by (query))\",\n \"legendFormat\": \"{{query}}\"\
+ ,\n \"range\": true,\n \"refId\": \"A\"\n }\n \
+ \ ],\n \"title\": \"Top 10 DNS queries\",\n \"type\": \"bargauge\"\
+ \n },\n {\n \"datasource\": {\n \"type\": \"prometheus\"\
+ ,\n \"uid\": \"${DS_PROMETHEUS}\"\n },\n \"fieldConfig\"\
+ : {\n \"defaults\": {\n \"color\": {\n \"mode\"\
+ : \"palette-classic\"\n },\n \"custom\": {\n \
+ \ \"axisCenteredZero\": false,\n \"axisColorMode\": \"text\",\n\
+ \ \"axisLabel\": \"\",\n \"axisPlacement\": \"auto\"\
+ ,\n \"barAlignment\": 0,\n \"drawStyle\": \"line\",\n\
+ \ \"fillOpacity\": 10,\n \"gradientMode\": \"none\"\
+ ,\n \"hideFrom\": {\n \"legend\": false,\n \
+ \ \"tooltip\": false,\n \"viz\": false\n },\n\
+ \ \"lineInterpolation\": \"linear\",\n \"lineWidth\"\
+ : 1,\n \"pointSize\": 5,\n \"scaleDistribution\": {\n\
+ \ \"type\": \"linear\"\n },\n \"showPoints\"\
+ : \"auto\",\n \"spanNulls\": false,\n \"stacking\":\
+ \ {\n \"group\": \"A\",\n \"mode\": \"normal\"\n\
[Diff truncated by flux-local]
--- HelmRelease: kube-system/cilium ConfigMap: kube-system/hubble-network-overview-namespace
+++ HelmRelease: kube-system/cilium ConfigMap: kube-system/hubble-network-overview-namespace
@@ -0,0 +1,396 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: hubble-network-overview-namespace
+ namespace: kube-system
+ labels:
+ k8s-app: hubble
+ app.kubernetes.io/name: hubble
+ app.kubernetes.io/part-of: cilium
+ grafana_dashboard: '1'
+ annotations:
+ grafana_folder: Cilium
+data:
+ hubble-network-overview-namespace.json: "{\n \"__inputs\": [\n {\n \
+ \ \"name\": \"DS_PROMETHEUS\",\n \"label\": \"Prometheus\",\n \
+ \ \"description\": \"\",\n \"type\": \"datasource\",\n \"pluginId\"\
+ : \"prometheus\",\n \"pluginName\": \"Prometheus\"\n }\n ],\n \
+ \ \"__elements\": {},\n \"__requires\": [\n {\n \"type\": \"\
+ panel\",\n \"id\": \"bargauge\",\n \"name\": \"Bar gauge\",\n \
+ \ \"version\": \"\"\n },\n {\n \"type\": \"grafana\",\n\
+ \ \"id\": \"grafana\",\n \"name\": \"Grafana\",\n \"version\"\
+ : \"9.4.7\"\n },\n {\n \"type\": \"datasource\",\n \"\
+ id\": \"prometheus\",\n \"name\": \"Prometheus\",\n \"version\"\
+ : \"1.0.0\"\n },\n {\n \"type\": \"panel\",\n \"id\":\
+ \ \"timeseries\",\n \"name\": \"Time series\",\n \"version\": \"\
+ \"\n }\n ],\n \"annotations\": {\n \"list\": [\n {\n \
+ \ \"builtIn\": 1,\n \"datasource\": {\n \"type\": \"\
+ datasource\",\n \"uid\": \"grafana\"\n },\n \"enable\"\
+ : true,\n \"hide\": true,\n \"iconColor\": \"rgba(0, 211, 255,\
+ \ 1)\",\n \"name\": \"Annotations & Alerts\",\n \"target\":\
+ \ {\n \"limit\": 100,\n \"matchAny\": false,\n \
+ \ \"tags\": [],\n \"type\": \"dashboard\"\n },\n \
+ \ \"type\": \"dashboard\"\n }\n ]\n },\n \"description\":\
+ \ \"\",\n \"editable\": true,\n \"fiscalYearStartMonth\": 0,\n \"gnetId\"\
+ : 16612,\n \"graphTooltip\": 0,\n \"id\": null,\n \"links\": [\n \
+ \ {\n \"asDropdown\": true,\n \"icon\": \"external link\",\n \
+ \ \"includeVars\": true,\n \"keepTime\": true,\n \"tags\":\
+ \ [\n \"cilium-overview\"\n ],\n \"targetBlank\": false,\n\
+ \ \"title\": \"Cilium Overviews\",\n \"tooltip\": \"\",\n \
+ \ \"type\": \"dashboards\",\n \"url\": \"\"\n },\n {\n \
+ \ \"asDropdown\": true,\n \"icon\": \"external link\",\n \"includeVars\"\
+ : false,\n \"keepTime\": true,\n \"tags\": [\n \"hubble\"\
+ \n ],\n \"targetBlank\": false,\n \"title\": \"Hubble\",\n\
+ \ \"tooltip\": \"\",\n \"type\": \"dashboards\",\n \"url\"\
+ : \"\"\n }\n ],\n \"liveNow\": false,\n \"panels\": [\n {\n\
+ \ \"collapsed\": false,\n \"gridPos\": {\n \"h\": 1,\n\
+ \ \"w\": 24,\n \"x\": 0,\n \"y\": 0\n },\n \
+ \ \"id\": 8,\n \"panels\": [],\n \"title\": \"Flows processed\"\
+ ,\n \"type\": \"row\"\n },\n {\n \"datasource\": {\n \
+ \ \"type\": \"prometheus\",\n \"uid\": \"${DS_PROMETHEUS}\"\n\
+ \ },\n \"fieldConfig\": {\n \"defaults\": {\n \
+ \ \"color\": {\n \"mode\": \"palette-classic\"\n },\n\
+ \ \"custom\": {\n \"axisCenteredZero\": false,\n \
+ \ \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \
+ \ \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n\
+ \ \"drawStyle\": \"line\",\n \"fillOpacity\": 10,\n\
+ \ \"gradientMode\": \"none\",\n \"hideFrom\": {\n \
+ \ \"legend\": false,\n \"tooltip\": false,\n \
+ \ \"viz\": false\n },\n \"lineInterpolation\"\
+ : \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n\
+ \ \"scaleDistribution\": {\n \"type\": \"linear\"\n\
+ \ },\n \"showPoints\": \"auto\",\n \"spanNulls\"\
+ : false,\n \"stacking\": {\n \"group\": \"A\",\n \
+ \ \"mode\": \"normal\"\n },\n \"thresholdsStyle\"\
+ : {\n \"mode\": \"off\"\n }\n },\n \
+ \ \"mappings\": [],\n \"min\": 0,\n \"thresholds\"\
+ : {\n \"mode\": \"absolute\",\n \"steps\": [\n \
+ \ {\n \"color\": \"green\",\n \"value\"\
+ : null\n },\n {\n \"color\": \"\
+ red\",\n \"value\": 80\n }\n ]\n\
+ \ },\n \"unit\": \"ops\"\n },\n \"overrides\"\
+ : []\n },\n \"gridPos\": {\n \"h\": 9,\n \"w\"\
+ : 12,\n \"x\": 0,\n \"y\": 1\n },\n \"id\": 12,\n\
+ \ \"options\": {\n \"legend\": {\n \"calcs\": [],\n\
+ \ \"displayMode\": \"list\",\n \"placement\": \"bottom\"\
+ ,\n \"showLegend\": true\n },\n \"tooltip\": {\n\
+ \ \"mode\": \"single\",\n \"sort\": \"none\"\n \
+ \ }\n },\n \"targets\": [\n {\n \"datasource\"\
+ : {\n \"type\": \"prometheus\",\n \"uid\": \"${DS_PROMETHEUS}\"\
+ \n },\n \"editorMode\": \"code\",\n \"expr\"\
+ : \"sum(rate(hubble_flows_processed_total{cluster=~\\\"$cluster\\\", source_namespace=~\\\
+ \"$source_namespace\\\", destination_namespace=~\\\"$destination_namespace\\\"\
+ }[$__rate_interval])) by (type, subtype)\",\n \"legendFormat\": \"\
+ {{type}}/{{subtype}}\",\n \"range\": true,\n \"refId\":\
+ \ \"A\"\n }\n ],\n \"title\": \"Flows processed by type\"\
+ ,\n \"type\": \"timeseries\"\n },\n {\n \"datasource\"\
+ : {\n \"type\": \"prometheus\",\n \"uid\": \"${DS_PROMETHEUS}\"\
+ \n },\n \"fieldConfig\": {\n \"defaults\": {\n \
+ \ \"color\": {\n \"mode\": \"palette-classic\"\n },\n\
+ \ \"custom\": {\n \"axisCenteredZero\": false,\n \
+ \ \"axisColorMode\": \"text\",\n \"axisLabel\": \"\",\n \
+ \ \"axisPlacement\": \"auto\",\n \"barAlignment\": 0,\n\
+ \ \"drawStyle\": \"line\",\n \"fillOpacity\": 10,\n\
+ \ \"gradientMode\": \"none\",\n \"hideFrom\": {\n \
+ \ \"legend\": false,\n \"tooltip\": false,\n \
+ \ \"viz\": false\n },\n \"lineInterpolation\"\
+ : \"linear\",\n \"lineWidth\": 1,\n \"pointSize\": 5,\n\
+ \ \"scaleDistribution\": {\n \"type\": \"linear\"\n\
+ \ },\n \"showPoints\": \"auto\",\n \"spanNulls\"\
+ : false,\n \"stacking\": {\n \"group\": \"A\",\n \
+ \ \"mode\": \"normal\"\n },\n \"thresholdsStyle\"\
+ : {\n \"mode\": \"off\"\n }\n },\n \
+ \ \"mappings\": [],\n \"min\": 0,\n \"thresholds\"\
+ : {\n \"mode\": \"absolute\",\n \"steps\": [\n \
+ \ {\n \"color\": \"green\",\n \"value\"\
+ : null\n },\n {\n \"color\": \"\
+ red\",\n \"value\": 80\n }\n ]\n\
+ \ },\n \"unit\": \"ops\"\n },\n \"overrides\"\
+ : []\n },\n \"gridPos\": {\n \"h\": 9,\n \"w\"\
+ : 12,\n \"x\": 12,\n \"y\": 1\n },\n \"id\": 35,\n\
+ \ \"options\": {\n \"legend\": {\n \"calcs\": [],\n\
+ \ \"displayMode\": \"list\",\n \"placement\": \"bottom\"\
+ ,\n \"showLegend\": true\n },\n \"tooltip\": {\n\
+ \ \"mode\": \"single\",\n \"sort\": \"none\"\n \
+ \ }\n },\n \"targets\": [\n {\n \"datasource\"\
+ : {\n \"type\": \"prometheus\",\n \"uid\": \"${DS_PROMETHEUS}\"\
+ \n },\n \"editorMode\": \"code\",\n \"expr\"\
+ : \"sum(rate(hubble_flows_processed_total{cluster=~\\\"$cluster\\\", source_namespace=~\\\
+ \"$source_namespace\\\", destination_namespace=~\\\"$destination_namespace\\\"\
+ }[$__rate_interval])) by (verdict)\",\n \"legendFormat\": \"{{verdict}}\"\
+ ,\n \"range\": true,\n \"refId\": \"A\"\n }\n \
+ \ ],\n \"title\": \"Flows processed by verdict\",\n \"type\"\
+ : \"timeseries\"\n },\n {\n \"datasource\": {\n \"type\"\
+ : \"prometheus\",\n \"uid\": \"${DS_PROMETHEUS}\"\n },\n \
[Diff truncated by flux-local] |
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
from
82ec7a9 to
b086c58
Compare
renovate
bot
changed the title
github-actions
bot
added
area/ansible
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
from
b086c58 to
4fa20b3
Compare
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
from
4fa20b3 to
ef99762
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
from
ef99762 to
634ed3c
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
2 times, most recently
from
6879de9 to
7bd4cbc
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
from
7bd4cbc to
e3bf226
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
from
e3bf226 to
95785fe
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
from
95785fe to
f5fdf06
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
from
f5fdf06 to
9cd0ba1
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
from
9cd0ba1 to
345408a
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
from
345408a to
41fe121
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
from
41fe121 to
422738b
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/cilium-1.x
branch
from
422738b to
cbd771a
Compare
renovate
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.15.0->1.16.51.15.4->1.16.5Release Notes
cilium/cilium (cilium)
v1.16.5: 1.16.5Compare Source
Summary of Changes
Minor Changes:
Bugfixes:
strconv.Itoainstead ofstring()for the correct behavior when convertingkafka.ErrorCodefromint32tostring. Add relevant unit tests for Kafka plugin and handler. (Backport PR #36066, Upstream PR #35856, @nddq)CI Changes:
Misc Changes:
147f428(v1.16) (#36222, @cilium-renovate[bot])Other Changes:
Docker Manifests
cilium
quay.io/cilium/cilium:v1.16.5@​sha256:758ca0793f5995bb938a2fa219dcce63dc0b3fa7fc4ce5cc851125281fb7361dquay.io/cilium/cilium:stable@sha256:758ca0793f5995bb938a2fa219dcce63dc0b3fa7fc4ce5cc851125281fb7361dclustermesh-apiserver
quay.io/cilium/clustermesh-apiserver:v1.16.5@​sha256:37a7fdbef806b78ef63df9f1a9828fdddbf548d1f0e43b8eb10a6bdc8fa03958quay.io/cilium/clustermesh-apiserver:stable@sha256:37a7fdbef806b78ef63df9f1a9828fdddbf548d1f0e43b8eb10a6bdc8fa03958docker-plugin
quay.io/cilium/docker-plugin:v1.16.5@​sha256:d6b4ed076ae921535c2a543d4b5b63af474288ee4501653a1f442c935beb5768quay.io/cilium/docker-plugin:stable@sha256:d6b4ed076ae921535c2a543d4b5b63af474288ee4501653a1f442c935beb5768hubble-relay
quay.io/cilium/hubble-relay:v1.16.5@​sha256:6cfae1d1afa566ba941f03d4d7e141feddd05260e5cd0a1509aba1890a45ef00quay.io/cilium/hubble-relay:stable@sha256:6cfae1d1afa566ba941f03d4d7e141feddd05260e5cd0a1509aba1890a45ef00operator-alibabacloud
quay.io/cilium/operator-alibabacloud:v1.16.5@​sha256:c0edf4c8d089e76d6565d3c57128b98bc6c73d14bb4590126ee746aeaedba5e0quay.io/cilium/operator-alibabacloud:stable@sha256:c0edf4c8d089e76d6565d3c57128b98bc6c73d14bb4590126ee746aeaedba5e0operator-aws
quay.io/cilium/operator-aws:v1.16.5@​sha256:97e1fe0c2b522583033138eb10c170919d8de49d2788ceefdcff229a92210476quay.io/cilium/operator-aws:stable@sha256:97e1fe0c2b522583033138eb10c170919d8de49d2788ceefdcff229a92210476operator-azure
quay.io/cilium/operator-azure:v1.16.5@​sha256:265e2b78f572c76b523f91757083ea5f0b9b73b82f2d9714e5a8fb848e4048f9quay.io/cilium/operator-azure:stable@sha256:265e2b78f572c76b523f91757083ea5f0b9b73b82f2d9714e5a8fb848e4048f9operator-generic
quay.io/cilium/operator-generic:v1.16.5@​sha256:f7884848483bbcd7b1e0ccfd34ba4546f258b460cb4b7e2f06a1bcc96ef88039quay.io/cilium/operator-generic:stable@sha256:f7884848483bbcd7b1e0ccfd34ba4546f258b460cb4b7e2f06a1bcc96ef88039operator
quay.io/cilium/operator:v1.16.5@​sha256:617896e1b23a2c4504ab2c84f17964e24dade3b5845f733b11847202230ca940quay.io/cilium/operator:stable@sha256:617896e1b23a2c4504ab2c84f17964e24dade3b5845f733b11847202230ca940v1.16.4: 1.16.4Compare Source
Security Advisories
This release addresses GHSA-xg58-75qf-9r67.
Summary of Changes
Minor Changes:
hubble.tls.auto.certValidityDurationto 365 days (Backport PR #35781, Upstream PR #35630, @chancez)Bugfixes:
timeout waiting for responseerror is encountered. (Backport PR #35781, Upstream PR #35589, @bimmlerd)bpf-lb-sock-terminate-pod-connections(Backport PR #35781, Upstream PR #35703, @solidDoWant)netlinkfunctions that may fail withErrDumpInterrupted(Backport PR #35654, Upstream PR #35614, @gandro)CI Changes:
Misc Changes:
0ca97f4(v1.16) (#35730, @cilium-renovate[bot])b274ff1(v1.16) (#35379, @cilium-renovate[bot])Other Changes:
PolicyMatch{L3Proto,L4Only}case (#35681, @gandro)Docker Manifests
cilium
quay.io/cilium/cilium:v1.16.4@​sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bfquay.io/cilium/cilium:stable@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bfclustermesh-apiserver
quay.io/cilium/clustermesh-apiserver:v1.16.4@​sha256:b41ba9c1b32e31308e17287a24a5b8e8ed0931f70d168087001c9679bc6c5dd2quay.io/cilium/clustermesh-apiserver:stable@sha256:b41ba9c1b32e31308e17287a24a5b8e8ed0931f70d168087001c9679bc6c5dd2docker-plugin
quay.io/cilium/docker-plugin:v1.16.4@​sha256:0e55f80fa875a1bcce87d87eae9a72b32c9db1fe9741c1f8d1bf308ef4b1193equay.io/cilium/docker-plugin:stable@sha256:0e55f80fa875a1bcce87d87eae9a72b32c9db1fe9741c1f8d1bf308ef4b1193ehubble-relay
quay.io/cilium/hubble-relay:v1.16.4@​sha256:fb2c7d127a1c809f6ba23c05973f3dd00f6b6a48e4aee2da95db925a4f0351d2quay.io/cilium/hubble-relay:stable@sha256:fb2c7d127a1c809f6ba23c05973f3dd00f6b6a48e4aee2da95db925a4f0351d2operator-alibabacloud
quay.io/cilium/operator-alibabacloud:v1.16.4@​sha256:8d59d1c9043d0ccf40f3e16361e5c81e8044cb83695d32d750b0c352f690c686quay.io/cilium/operator-alibabacloud:stable@sha256:8d59d1c9043d0ccf40f3e16361e5c81e8044cb83695d32d750b0c352f690c686operator-aws
quay.io/cilium/operator-aws:v1.16.4@​sha256:355051bbebab73ea3067bb7f0c28cfd43b584d127570cb826f794f468e2d31bequay.io/cilium/operator-aws:stable@sha256:355051bbebab73ea3067bb7f0c28cfd43b584d127570cb826f794f468e2d31beoperator-azure
quay.io/cilium/operator-azure:v1.16.4@​sha256:475594628af6d6a807d58fcb6b7d48f5a82e0289f54ae372972b1d0536c0b6dequay.io/cilium/operator-azure:stable@sha256:475594628af6d6a807d58fcb6b7d48f5a82e0289f54ae372972b1d0536c0b6deoperator-generic
quay.io/cilium/operator-generic:v1.16.4@​sha256:c55a7cbe19fe0b6b28903a085334edb586a3201add9db56d2122c8485f7a51c5quay.io/cilium/operator-generic:stable@sha256:c55a7cbe19fe0b6b28903a085334edb586a3201add9db56d2122c8485f7a51c5operator
quay.io/cilium/operator:v1.16.4@​sha256:c77643984bc17e1a93d83b58fa976d7e72ad1485ce722257594f8596899fdfffquay.io/cilium/operator:stable@sha256:c77643984bc17e1a93d83b58fa976d7e72ad1485ce722257594f8596899fdfffv1.16.3: 1.16.3Compare Source
Summary of Changes
Bugfixes:
CI Changes:
Configuration
📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.