chore(deps): update helm release cilium to v1.15.3 #2733
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![tyriis-automation[bot]](https://avatars.githubusercontent.com/in/334186?s=60&v=4){kind=small}
tyriis-automation
bot
added
renovate/flux
|
--- kubernetes/kube-nas/apps/kube-system/cilium/app Kustomization: flux-system/apps-cilium HelmRelease: kube-system/cilium
+++ kubernetes/kube-nas/apps/kube-system/cilium/app Kustomization: flux-system/apps-cilium HelmRelease: kube-system/cilium
@@ -12,13 +12,13 @@
spec:
chart: cilium
sourceRef:
kind: HelmRepository
name: cilium-charts
namespace: flux-system
- version: 1.15.2
+ version: 1.15.3
install:
remediation:
retries: 3
interval: 30m
maxHistory: 2
uninstall: |
--- kubernetes/talos-flux/apps/metallb-system/metallb/app Kustomization: flux-system/apps-metallb HelmRelease: metallb-system/metallb
+++ kubernetes/talos-flux/apps/metallb-system/metallb/app Kustomization: flux-system/apps-metallb HelmRelease: metallb-system/metallb
@@ -12,13 +12,13 @@
spec:
chart: metallb
sourceRef:
kind: HelmRepository
name: metallb-charts
namespace: flux-system
- version: 0.14.4
+ version: 0.14.3
install:
crds: CreateReplace
createNamespace: true
remediation:
retries: 3
replace: true |
--- HelmRelease: kube-system/cilium DaemonSet: kube-system/cilium
+++ HelmRelease: kube-system/cilium DaemonSet: kube-system/cilium
@@ -26,13 +26,13 @@
k8s-app: cilium
app.kubernetes.io/name: cilium-agent
app.kubernetes.io/part-of: cilium
spec:
containers:
- name: cilium-agent
- image: quay.io/cilium/cilium:v1.15.2@sha256:bfeb3f1034282444ae8c498dca94044df2b9c9c8e7ac678e0b43c849f0b31746
+ image: quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0
imagePullPolicy: IfNotPresent
command:
- cilium-agent
args:
- --config-dir=/tmp/cilium/config-map
startupProbe:
@@ -162,13 +162,13 @@
mountPath: /var/lib/cilium/tls/hubble
readOnly: true
- name: tmp
mountPath: /tmp
initContainers:
- name: config
- image: quay.io/cilium/cilium:v1.15.2@sha256:bfeb3f1034282444ae8c498dca94044df2b9c9c8e7ac678e0b43c849f0b31746
+ image: quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0
imagePullPolicy: IfNotPresent
command:
- cilium-dbg
- build-config
env:
- name: K8S_NODE_NAME
@@ -183,13 +183,13 @@
fieldPath: metadata.namespace
volumeMounts:
- name: tmp
mountPath: /tmp
terminationMessagePolicy: FallbackToLogsOnError
- name: mount-cgroup
- image: quay.io/cilium/cilium:v1.15.2@sha256:bfeb3f1034282444ae8c498dca94044df2b9c9c8e7ac678e0b43c849f0b31746
+ image: quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0
imagePullPolicy: IfNotPresent
env:
- name: CGROUP_ROOT
value: /run/cilium/cgroupv2
- name: BIN_PATH
value: /opt/cni/bin
@@ -206,13 +206,13 @@
- name: cni-path
mountPath: /hostbin
terminationMessagePolicy: FallbackToLogsOnError
securityContext:
privileged: true
- name: apply-sysctl-overwrites
- image: quay.io/cilium/cilium:v1.15.2@sha256:bfeb3f1034282444ae8c498dca94044df2b9c9c8e7ac678e0b43c849f0b31746
+ image: quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0
imagePullPolicy: IfNotPresent
env:
- name: BIN_PATH
value: /opt/cni/bin
command:
- sh
@@ -227,13 +227,13 @@
- name: cni-path
mountPath: /hostbin
terminationMessagePolicy: FallbackToLogsOnError
securityContext:
privileged: true
- name: clean-cilium-state
- image: quay.io/cilium/cilium:v1.15.2@sha256:bfeb3f1034282444ae8c498dca94044df2b9c9c8e7ac678e0b43c849f0b31746
+ image: quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0
imagePullPolicy: IfNotPresent
command:
- /init-container.sh
env:
- name: CILIUM_ALL_STATE
valueFrom:
@@ -262,13 +262,13 @@
- name: cilium-cgroup
mountPath: /run/cilium/cgroupv2
mountPropagation: HostToContainer
- name: cilium-run
mountPath: /var/run/cilium
- name: install-cni-binaries
- image: quay.io/cilium/cilium:v1.15.2@sha256:bfeb3f1034282444ae8c498dca94044df2b9c9c8e7ac678e0b43c849f0b31746
+ image: quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0
imagePullPolicy: IfNotPresent
command:
- /install-plugin.sh
resources:
requests:
cpu: 100m
--- HelmRelease: kube-system/cilium Deployment: kube-system/cilium-operator
+++ HelmRelease: kube-system/cilium Deployment: kube-system/cilium-operator
@@ -31,13 +31,13 @@
name: cilium-operator
app.kubernetes.io/part-of: cilium
app.kubernetes.io/name: cilium-operator
spec:
containers:
- name: cilium-operator
- image: quay.io/cilium/operator-generic:v1.15.2@sha256:4dd8f67630f45fcaf58145eb81780b677ef62d57632d7e4442905ad3226a9088
+ image: quay.io/cilium/operator-generic:v1.15.3@sha256:c97f23161906b82f5c81a2d825b0646a5aa1dfb4adf1d49cbb87815079e69d61
imagePullPolicy: IfNotPresent
command:
- cilium-operator-generic
args:
- --config-dir=/tmp/cilium/config-map
- --debug=$(CILIUM_DEBUG)
--- HelmRelease: kube-system/cilium Deployment: kube-system/hubble-relay
+++ HelmRelease: kube-system/cilium Deployment: kube-system/hubble-relay
@@ -34,13 +34,13 @@
capabilities:
drop:
- ALL
runAsGroup: 65532
runAsNonRoot: true
runAsUser: 65532
- image: quay.io/cilium/hubble-relay:v1.15.2@sha256:48480053930e884adaeb4141259ff1893a22eb59707906c6d38de2fe01916cb0
+ image: quay.io/cilium/hubble-relay:v1.15.3@sha256:b9c6431aa4f22242a5d0d750c621d9d04bdc25549e4fb1116bfec98dd87958a2
imagePullPolicy: IfNotPresent
command:
- hubble-relay
args:
- serve
ports: |
--- HelmRelease: metallb-system/metallb ConfigMap: metallb-system/metallb-excludel2
+++ HelmRelease: metallb-system/metallb ConfigMap: metallb-system/metallb-excludel2
@@ -1,16 +1,12 @@
---
apiVersion: v1
kind: ConfigMap
metadata:
name: metallb-excludel2
namespace: metallb-system
- labels:
- app.kubernetes.io/name: metallb
- app.kubernetes.io/instance: metallb
- app.kubernetes.io/managed-by: Helm
data:
excludel2.yaml: |
announcedInterfacesToExclude:
- ^docker.*
- ^cbr.*
- ^dummy.*
--- HelmRelease: metallb-system/metallb ClusterRole: metallb-system/metallb:controller
+++ HelmRelease: metallb-system/metallb ClusterRole: metallb-system/metallb:controller
@@ -61,12 +61,13 @@
- watch
- apiGroups:
- apiextensions.k8s.io
resources:
- customresourcedefinitions
resourceNames:
+ - addresspools.metallb.io
- bfdprofiles.metallb.io
- bgpadvertisements.metallb.io
- bgppeers.metallb.io
- ipaddresspools.metallb.io
- l2advertisements.metallb.io
- communities.metallb.io
--- HelmRelease: metallb-system/metallb ClusterRole: metallb-system/metallb:speaker
+++ HelmRelease: metallb-system/metallb ClusterRole: metallb-system/metallb:speaker
@@ -31,14 +31,7 @@
- ''
resources:
- events
verbs:
- create
- patch
-- apiGroups:
- - metallb.io
- resources:
- - servicel2statuses
- - servicel2statuses/status
- verbs:
- - '*'
--- HelmRelease: metallb-system/metallb Role: metallb-system/metallb-pod-lister
+++ HelmRelease: metallb-system/metallb Role: metallb-system/metallb-pod-lister
@@ -24,12 +24,20 @@
- list
- watch
- apiGroups:
- ''
resources:
- configmaps
+ verbs:
+ - get
+ - list
+ - watch
+- apiGroups:
+ - metallb.io
+ resources:
+ - addresspools
verbs:
- get
- list
- watch
- apiGroups:
- metallb.io
--- HelmRelease: metallb-system/metallb Role: metallb-system/metallb-controller
+++ HelmRelease: metallb-system/metallb Role: metallb-system/metallb-controller
@@ -46,12 +46,20 @@
- patch
- update
- watch
- apiGroups:
- metallb.io
resources:
+ - addresspools
+ verbs:
+ - get
+ - list
+ - watch
+- apiGroups:
+ - metallb.io
+ resources:
- ipaddresspools
verbs:
- get
- list
- watch
- apiGroups:
--- HelmRelease: metallb-system/metallb DaemonSet: metallb-system/metallb-speaker
+++ HelmRelease: metallb-system/metallb DaemonSet: metallb-system/metallb-speaker
@@ -46,13 +46,13 @@
- name: reloader
emptyDir: {}
- name: metrics
emptyDir: {}
initContainers:
- name: cp-frr-files
- image: quay.io/frrouting/frr:9.0.2
+ image: quay.io/frrouting/frr:8.5.2
securityContext:
runAsUser: 100
runAsGroup: 101
command:
- /bin/sh
- -c
@@ -60,33 +60,33 @@
volumeMounts:
- name: frr-startup
mountPath: /tmp/frr
- name: frr-conf
mountPath: /etc/frr
- name: cp-reloader
- image: quay.io/metallb/speaker:v0.14.4
+ image: quay.io/metallb/speaker:v0.14.3
command:
- /bin/sh
- -c
- cp -f /frr-reloader.sh /etc/frr_reloader/
volumeMounts:
- name: reloader
mountPath: /etc/frr_reloader
- name: cp-metrics
- image: quay.io/metallb/speaker:v0.14.4
+ image: quay.io/metallb/speaker:v0.14.3
command:
- /bin/sh
- -c
- cp -f /frr-metrics /etc/frr_metrics/
volumeMounts:
- name: metrics
mountPath: /etc/frr_metrics
shareProcessNamespace: true
containers:
- name: speaker
- image: quay.io/metallb/speaker:v0.14.4
+ image: quay.io/metallb/speaker:v0.14.3
args:
- --port=7472
- --log-level=info
env:
- name: METALLB_NODE_NAME
valueFrom:
@@ -159,13 +159,13 @@
capabilities:
add:
- NET_ADMIN
- NET_RAW
- SYS_ADMIN
- NET_BIND_SERVICE
- image: quay.io/frrouting/frr:9.0.2
+ image: quay.io/frrouting/frr:8.5.2
env:
- name: TINI_SUBREAPER
value: 'true'
volumeMounts:
- name: frr-sockets
mountPath: /var/run/frr
@@ -181,13 +181,13 @@
sleep 1
attempts=$(( $attempts + 1 ))
done
tail -f /etc/frr/frr.log
livenessProbe:
httpGet:
- path: livez
+ path: /livez
port: 7473
initialDelaySeconds: 10
periodSeconds: 10
timeoutSeconds: 1
successThreshold: 1
failureThreshold: 3
@@ -195,24 +195,24 @@
httpGet:
path: /livez
port: 7473
failureThreshold: 30
periodSeconds: 5
- name: reloader
- image: quay.io/frrouting/frr:9.0.2
+ image: quay.io/frrouting/frr:8.5.2
command:
- /etc/frr_reloader/frr-reloader.sh
volumeMounts:
- name: frr-sockets
mountPath: /var/run/frr
- name: frr-conf
mountPath: /etc/frr
- name: reloader
mountPath: /etc/frr_reloader
- name: frr-metrics
- image: quay.io/frrouting/frr:9.0.2
+ image: quay.io/frrouting/frr:8.5.2
command:
- /etc/frr_metrics/frr-metrics
args:
- --metrics-port=7473
ports:
- containerPort: 7473
--- HelmRelease: metallb-system/metallb Deployment: metallb-system/metallb-controller
+++ HelmRelease: metallb-system/metallb Deployment: metallb-system/metallb-controller
@@ -29,16 +29,17 @@
securityContext:
fsGroup: 65534
runAsNonRoot: true
runAsUser: 65534
containers:
- name: controller
- image: quay.io/metallb/controller:v0.14.4
+ image: quay.io/metallb/controller:v0.14.3
args:
- --port=7472
- --log-level=error
+ - --cert-service-name=metallb-webhook-service
- --tls-min-version=VersionTLS12
env:
- name: METALLB_ML_SECRET_NAME
value: metallb-memberlist
- name: METALLB_DEPLOYMENT
value: metallb-controller
@@ -81,8 +82,8 @@
nodeSelector:
kubernetes.io/os: linux
volumes:
- name: cert
secret:
defaultMode: 420
- secretName: metallb-webhook-cert
+ secretName: webhook-server-cert
|
🦙 MegaLinter status: ✅ SUCCESS
See detailed report in MegaLinter reports MegaLinter is graciously provided by OX Security |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.15.2->1.15.31.15.2->1.15.3Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
cilium/cilium (cilium)
v1.15.3: 1.15.3Compare Source
Summary of Changes
Minor Changes:
cilium-dbg encrypt flush --staleflag to remove XFRM states and policies with stale node IDs. (Backport PR #31342, Upstream PR #31159, @pchaigno)Bugfixes:
Potentially it could have impacted connectivity in large clusters (>4k nodes) with IPSec or Mutual Auth enabled.
Otherwise, it was merely generating unnecessary error log messages. (Backport PR #31490, Upstream PR #31380, @marseel)
CI Changes:
Misc Changes:
8560736(v1.15) (#31450, @renovate[bot])55c6361(v1.15) (#31453, @renovate[bot])declare_tailcall_ifwith logic in the loader (Backport PR #31554, Upstream PR #30467, @dylandreimerink)Other Changes:
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.