Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(metallb): update helm-release to v0.14.4 #2732

Merged
merged 1 commit into from
Mar 26, 2024

Conversation

tyriis-automation[bot]
Copy link
Contributor

This PR contains the following updates:

Package Update Change OpenSSF
metallb (source) patch 0.14.3 -> 0.14.4 OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

metallb/metallb (metallb)

v0.14.4

Compare Source

See https://metallb.universe.tf/release-notes/ for details


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@tyriis-automation tyriis-automation bot added renovate/flux renovate flux manager renovate/helm renovate helm datasource type/patch a patch for a bug labels Mar 26, 2024
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@tyriis-automation
Copy link
Contributor Author

--- kubernetes/talos-flux/apps/metallb-system/metallb/app Kustomization: flux-system/apps-metallb HelmRelease: metallb-system/metallb

+++ kubernetes/talos-flux/apps/metallb-system/metallb/app Kustomization: flux-system/apps-metallb HelmRelease: metallb-system/metallb

@@ -12,13 +12,13 @@

     spec:
       chart: metallb
       sourceRef:
         kind: HelmRepository
         name: metallb-charts
         namespace: flux-system
-      version: 0.14.3
+      version: 0.14.4
   install:
     crds: CreateReplace
     createNamespace: true
     remediation:
       retries: 3
     replace: true

@tyriis-automation
Copy link
Contributor Author

--- HelmRelease: metallb-system/metallb ConfigMap: metallb-system/metallb-excludel2

+++ HelmRelease: metallb-system/metallb ConfigMap: metallb-system/metallb-excludel2

@@ -1,12 +1,16 @@

 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: metallb-excludel2
   namespace: metallb-system
+  labels:
+    app.kubernetes.io/name: metallb
+    app.kubernetes.io/instance: metallb
+    app.kubernetes.io/managed-by: Helm
 data:
   excludel2.yaml: |
     announcedInterfacesToExclude:
     - ^docker.*
     - ^cbr.*
     - ^dummy.*
--- HelmRelease: metallb-system/metallb ClusterRole: metallb-system/metallb:controller

+++ HelmRelease: metallb-system/metallb ClusterRole: metallb-system/metallb:controller

@@ -61,13 +61,12 @@

   - watch
 - apiGroups:
   - apiextensions.k8s.io
   resources:
   - customresourcedefinitions
   resourceNames:
-  - addresspools.metallb.io
   - bfdprofiles.metallb.io
   - bgpadvertisements.metallb.io
   - bgppeers.metallb.io
   - ipaddresspools.metallb.io
   - l2advertisements.metallb.io
   - communities.metallb.io
--- HelmRelease: metallb-system/metallb ClusterRole: metallb-system/metallb:speaker

+++ HelmRelease: metallb-system/metallb ClusterRole: metallb-system/metallb:speaker

@@ -31,7 +31,14 @@

   - ''
   resources:
   - events
   verbs:
   - create
   - patch
+- apiGroups:
+  - metallb.io
+  resources:
+  - servicel2statuses
+  - servicel2statuses/status
+  verbs:
+  - '*'
 
--- HelmRelease: metallb-system/metallb Role: metallb-system/metallb-pod-lister

+++ HelmRelease: metallb-system/metallb Role: metallb-system/metallb-pod-lister

@@ -24,20 +24,12 @@

   - list
   - watch
 - apiGroups:
   - ''
   resources:
   - configmaps
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - metallb.io
-  resources:
-  - addresspools
   verbs:
   - get
   - list
   - watch
 - apiGroups:
   - metallb.io
--- HelmRelease: metallb-system/metallb Role: metallb-system/metallb-controller

+++ HelmRelease: metallb-system/metallb Role: metallb-system/metallb-controller

@@ -46,20 +46,12 @@

   - patch
   - update
   - watch
 - apiGroups:
   - metallb.io
   resources:
-  - addresspools
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - metallb.io
-  resources:
   - ipaddresspools
   verbs:
   - get
   - list
   - watch
 - apiGroups:
--- HelmRelease: metallb-system/metallb DaemonSet: metallb-system/metallb-speaker

+++ HelmRelease: metallb-system/metallb DaemonSet: metallb-system/metallb-speaker

@@ -46,13 +46,13 @@

       - name: reloader
         emptyDir: {}
       - name: metrics
         emptyDir: {}
       initContainers:
       - name: cp-frr-files
-        image: quay.io/frrouting/frr:8.5.2
+        image: quay.io/frrouting/frr:9.0.2
         securityContext:
           runAsUser: 100
           runAsGroup: 101
         command:
         - /bin/sh
         - -c
@@ -60,33 +60,33 @@

         volumeMounts:
         - name: frr-startup
           mountPath: /tmp/frr
         - name: frr-conf
           mountPath: /etc/frr
       - name: cp-reloader
-        image: quay.io/metallb/speaker:v0.14.3
+        image: quay.io/metallb/speaker:v0.14.4
         command:
         - /bin/sh
         - -c
         - cp -f /frr-reloader.sh /etc/frr_reloader/
         volumeMounts:
         - name: reloader
           mountPath: /etc/frr_reloader
       - name: cp-metrics
-        image: quay.io/metallb/speaker:v0.14.3
+        image: quay.io/metallb/speaker:v0.14.4
         command:
         - /bin/sh
         - -c
         - cp -f /frr-metrics /etc/frr_metrics/
         volumeMounts:
         - name: metrics
           mountPath: /etc/frr_metrics
       shareProcessNamespace: true
       containers:
       - name: speaker
-        image: quay.io/metallb/speaker:v0.14.3
+        image: quay.io/metallb/speaker:v0.14.4
         args:
         - --port=7472
         - --log-level=info
         env:
         - name: METALLB_NODE_NAME
           valueFrom:
@@ -159,13 +159,13 @@

           capabilities:
             add:
             - NET_ADMIN
             - NET_RAW
             - SYS_ADMIN
             - NET_BIND_SERVICE
-        image: quay.io/frrouting/frr:8.5.2
+        image: quay.io/frrouting/frr:9.0.2
         env:
         - name: TINI_SUBREAPER
           value: 'true'
         volumeMounts:
         - name: frr-sockets
           mountPath: /var/run/frr
@@ -181,13 +181,13 @@

             sleep 1
             attempts=$(( $attempts + 1 ))
           done
           tail -f /etc/frr/frr.log
         livenessProbe:
           httpGet:
-            path: /livez
+            path: livez
             port: 7473
           initialDelaySeconds: 10
           periodSeconds: 10
           timeoutSeconds: 1
           successThreshold: 1
           failureThreshold: 3
@@ -195,24 +195,24 @@

           httpGet:
             path: /livez
             port: 7473
           failureThreshold: 30
           periodSeconds: 5
       - name: reloader
-        image: quay.io/frrouting/frr:8.5.2
+        image: quay.io/frrouting/frr:9.0.2
         command:
         - /etc/frr_reloader/frr-reloader.sh
         volumeMounts:
         - name: frr-sockets
           mountPath: /var/run/frr
         - name: frr-conf
           mountPath: /etc/frr
         - name: reloader
           mountPath: /etc/frr_reloader
       - name: frr-metrics
-        image: quay.io/frrouting/frr:8.5.2
+        image: quay.io/frrouting/frr:9.0.2
         command:
         - /etc/frr_metrics/frr-metrics
         args:
         - --metrics-port=7473
         ports:
         - containerPort: 7473
--- HelmRelease: metallb-system/metallb Deployment: metallb-system/metallb-controller

+++ HelmRelease: metallb-system/metallb Deployment: metallb-system/metallb-controller

@@ -29,17 +29,16 @@

       securityContext:
         fsGroup: 65534
         runAsNonRoot: true
         runAsUser: 65534
       containers:
       - name: controller
-        image: quay.io/metallb/controller:v0.14.3
+        image: quay.io/metallb/controller:v0.14.4
         args:
         - --port=7472
         - --log-level=error
-        - --cert-service-name=metallb-webhook-service
         - --tls-min-version=VersionTLS12
         env:
         - name: METALLB_ML_SECRET_NAME
           value: metallb-memberlist
         - name: METALLB_DEPLOYMENT
           value: metallb-controller
@@ -82,8 +81,8 @@

       nodeSelector:
         kubernetes.io/os: linux
       volumes:
       - name: cert
         secret:
           defaultMode: 420
-          secretName: webhook-server-cert
+          secretName: metallb-webhook-cert
 

@tyriis-automation
Copy link
Contributor Author

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ EDITORCONFIG editorconfig-checker 1 0 0.01s
✅ REPOSITORY gitleaks yes no 2.01s
✅ YAML prettier 1 0 0.92s
✅ YAML yamllint 1 0 0.26s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

@tyriis-automation tyriis-automation bot merged commit 27581d0 into main Mar 26, 2024
15 checks passed
@tyriis-automation tyriis-automation bot deleted the renovate/metallb-0.14.x branch March 26, 2024 17:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/kubernetes cluster/talos-flux renovate/flux renovate flux manager renovate/helm renovate helm datasource type/patch a patch for a bug
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants