Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Helm release cilium to v1.16.6 #20

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 26, 2023

This PR contains the following updates:

Package Update Change
cilium (source) minor v1.13.2 -> 1.16.6

Release Notes

cilium/cilium (cilium)

v1.16.6: 1.16.6

Compare Source

Summary of Changes

Major Changes:

Minor Changes:

Bugfixes:

CI Changes:

Misc Changes:

Other Changes:

Docker Manifests

cilium

quay.io/cilium/cilium:v1.16.6@​sha256:1e0896b1c4c188b4812c7e0bed7ec3f5631388ca88325c1391a0ef9172c448da
quay.io/cilium/cilium:stable@sha256:1e0896b1c4c188b4812c7e0bed7ec3f5631388ca88325c1391a0ef9172c448da

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.16.6@​sha256:ab2070ea48a52a55d961b81b7b5fbac7d40a3f428be9b1b6b9071d47f194456a
quay.io/cilium/clustermesh-apiserver:stable@sha256:ab2070ea48a52a55d961b81b7b5fbac7d40a3f428be9b1b6b9071d47f194456a

docker-plugin

quay.io/cilium/docker-plugin:v1.16.6@​sha256:f8f5833a60900b0264fd8982b11329e130c1a326afe2e4653e9f2d2e3fb2af66
quay.io/cilium/docker-plugin:stable@sha256:f8f5833a60900b0264fd8982b11329e130c1a326afe2e4653e9f2d2e3fb2af66

hubble-relay

quay.io/cilium/hubble-relay:v1.16.6@​sha256:ca8dcaa5a81a37743b1397ba2221d16d5d63e4a47607584f1bf50a3b0882bf3b
quay.io/cilium/hubble-relay:stable@sha256:ca8dcaa5a81a37743b1397ba2221d16d5d63e4a47607584f1bf50a3b0882bf3b

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.16.6@​sha256:0e3c7fbcb6bde9a247cd2dd3d25230e2859d40d2eb58aba6265a2aab216775a9
quay.io/cilium/operator-alibabacloud:stable@sha256:0e3c7fbcb6bde9a247cd2dd3d25230e2859d40d2eb58aba6265a2aab216775a9

operator-aws

quay.io/cilium/operator-aws:v1.16.6@​sha256:d11ee1cfa3465defe2df7ec1c6e8a77bcaf280b44d2c61aa7496c58b29550f6d
quay.io/cilium/operator-aws:stable@sha256:d11ee1cfa3465defe2df7ec1c6e8a77bcaf280b44d2c61aa7496c58b29550f6d

operator-azure

quay.io/cilium/operator-azure:v1.16.6@​sha256:0a05d7aea760923897aabd715213ab11a706051673d41fab3874a37f897c1bdd
quay.io/cilium/operator-azure:stable@sha256:0a05d7aea760923897aabd715213ab11a706051673d41fab3874a37f897c1bdd

operator-generic

quay.io/cilium/operator-generic:v1.16.6@​sha256:13d32071d5a52c069fb7c35959a56009c6914439adc73e99e098917646d154fc
quay.io/cilium/operator-generic:stable@sha256:13d32071d5a52c069fb7c35959a56009c6914439adc73e99e098917646d154fc

operator

quay.io/cilium/operator:v1.16.6@​sha256:09ab2878e103fa32a00fd1fe4469f7042cfb053627b44c82fa03a04a820c0b46
quay.io/cilium/operator:stable@sha256:09ab2878e103fa32a00fd1fe4469f7042cfb053627b44c82fa03a04a820c0b46

v1.16.5: 1.16.5

Compare Source

Summary of Changes

Minor Changes:

Bugfixes:

  • Address potential connectivity disruption when using either L7 / DNS Network policies in combination with per-endpoint routes and hostLegacyRouting, or L7 / DNS network policies in combination with IPsec network encryption. (Backport PR #​36540, Upstream PR #​36484, @​julianwiedmann)
  • bgp: fix race in bgp stores (Backport PR #​36066, Upstream PR #​35971, @​harsimran-pabla)
  • BGPv1: Fix race by reconciliation of services with externalTrafficPolicy=Local by populating locally available services after performing service diff (Backport PR #​36286, Upstream PR #​36230, @​rastislavs)
  • BGPv2: Fix race by reconciliation of services with externalTrafficPolicy=Local by populating locally available services after performing service diff (Backport PR #​36286, Upstream PR #​36165, @​rastislavs)
  • Cilium agent now waits until endpoints have restored before starting accepting new xDS streams. (Backport PR #​36049, Upstream PR #​35984, @​jrajahalme)
  • Cilium no longer keeps old DNS-IP mappings alive while reaping newer ones, leading to spurious drops in connections to domains with many IPs associated. (Backport PR #​36462, Upstream PR #​36252, @​bimmlerd)
  • cilium-health-ep controller is made to be more robust against successive failures. (Backport PR #​36066, Upstream PR #​35936, @​jrajahalme)
  • DNS proxy port is no longer released when endpoint with a DNS policy fails to regenerate successfully. A potential deadlock between CEC/CCEC parser and endpoint policy update is removed. (Backport PR #​36468, Upstream PR #​36142, @​jrajahalme)
  • Envoy "initial fetch timeout" warnings are now demoted to info level, as they are expected to happen during Cilium Agent restart. (Backport PR #​36049, Upstream PR #​36060, @​jrajahalme)
  • Fix an issue where pod-to-world traffic goes up stack when BPF host routing is enabled with tunnel. (Backport PR #​35861, Upstream PR #​35098, @​jschwinger233)
  • Fix identity leak for kvstore identity mode (Backport PR #​36066, Upstream PR #​34893, @​odinuge)
  • Fix potential Cilium agent panic during endpoint restoration, occurring if the corresponding pod gets deleted while the agent is restarting. This regression only affects Cilium v1.16.4. (Backport PR #​36302, Upstream PR #​36292, @​giorio94)
  • gateway-api: Fix gateway checks for namespace (Backport PR #​36462, Upstream PR #​35452, @​sayboras)
  • gha: Remove hostLegacyRouting in clustermesh (Backport PR #​36357, Upstream PR #​35418, @​sayboras)
  • helm: Use an absolute FQDN for the Hubble peer-service endpoint to avoid incorrect DNS resolution outside the cluster (Backport PR #​36066, Upstream PR #​36005, @​devodev)
  • hubble: consistently use v as prefix for the Hubble version (Backport PR #​36286, Upstream PR #​35891, @​rolinh)
  • iptables: Fix data race in iptables manager (Backport PR #​36066, Upstream PR #​35902, @​pippolo84)
  • lrp: update LRP services with stale backends on agent restart (Backport PR #​36106, Upstream PR #​36036, @​ysksuzuki)
  • policy: Fix bug that allowed port ranges to be attached to L7 policies, which is not permitted. (#​36050, @​nathanjsweet)
  • Unbreak the cilium-dbg preflight migrate-identity command (Backport PR #​36286, Upstream PR #​36089, @​giorio94)
  • Use strconv.Itoa instead of string() for the correct behavior when converting kafka.ErrorCode from int32 to string. Add relevant unit tests for Kafka plugin and handler. (Backport PR #​36066, Upstream PR #​35856, @​nddq)

CI Changes:

Misc Changes:

Other Changes:

Docker Manifests

cilium

quay.io/cilium/cilium:v1.16.5@​sha256:758ca0793f5995bb938a2fa219dcce63dc0b3fa7fc4ce5cc851125281fb7361d
quay.io/cilium/cilium:stable@sha256:758ca0793f5995bb938a2fa219dcce63dc0b3fa7fc4ce5cc851125281fb7361d

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.16.5@​sha256:37a7fdbef806b78ef63df9f1a9828fdddbf548d1f0e43b8eb10a6bdc8fa03958
quay.io/cilium/clustermesh-apiserver:stable@sha256:37a7fdbef806b78ef63df9f1a9828fdddbf548d1f0e43b8eb10a6bdc8fa03958

docker-plugin

quay.io/cilium/docker-plugin:v1.16.5@​sha256:d6b4ed076ae921535c2a543d4b5b63af474288ee4501653a1f442c935beb5768
quay.io/cilium/docker-plugin:stable@sha256:d6b4ed076ae921535c2a543d4b5b63af474288ee4501653a1f442c935beb5768

hubble-relay

quay.io/cilium/hubble-relay:v1.16.5@​sha256:6cfae1d1afa566ba941f03d4d7e141feddd05260e5cd0a1509aba1890a45ef00
quay.io/cilium/hubble-relay:stable@sha256:6cfae1d1afa566ba941f03d4d7e141feddd05260e5cd0a1509aba1890a45ef00

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.16.5@​sha256:c0edf4c8d089e76d6565d3c57128b98bc6c73d14bb4590126ee746aeaedba5e0
quay.io/cilium/operator-alibabacloud:stable@sha256:c0edf4c8d089e76d6565d3c57128b98bc6c73d14bb4590126ee746aeaedba5e0

operator-aws

quay.io/cilium/operator-aws:v1.16.5@​sha256:97e1fe0c2b522583033138eb10c170919d8de49d2788ceefdcff229a92210476
quay.io/cilium/operator-aws:stable@sha256:97e1fe0c2b522583033138eb10c170919d8de49d2788ceefdcff229a92210476

operator-azure

quay.io/cilium/operator-azure:v1.16.5@​sha256:265e2b78f572c76b523f91757083ea5f0b9b73b82f2d9714e5a8fb848e4048f9
quay.io/cilium/operator-azure:stable@sha256:265e2b78f572c76b523f91757083ea5f0b9b73b82f2d9714e5a8fb848e4048f9

operator-generic

quay.io/cilium/operator-generic:v1.16.5@​sha256:f7884848483bbcd7b1e0ccfd34ba4546f258b460cb4b7e2f06a1bcc96ef88039
quay.io/cilium/operator-generic:stable@sha256:f7884848483bbcd7b1e0ccfd34ba4546f258b460cb4b7e2f06a1bcc96ef88039

operator

quay.io/cilium/operator:v1.16.5@​sha256:617896e1b23a2c4504ab2c84f17964e24dade3b5845f733b11847202230ca940
quay.io/cilium/operator:stable@sha256:617896e1b23a2c4504ab2c84f17964e24dade3b5845f733b11847202230ca940

v1.16.4: 1.16.4

Compare Source

Security Advisories

This release addresses GHSA-xg58-75qf-9r67.

Summary of Changes

Minor Changes:

  • Added Helm option 'envoy.initialFetchTimeoutSeconds' (default 30 seconds) to override the Envoy default (15 seconds). (Backport PR #​35908, Upstream PR #​35809, @​jrajahalme)
  • clustermesh: add guardrails for known broken ENI/aws-chaining + cluster ID combination (Backport PR #​35543, Upstream PR #​35349, @​giorio94)
  • helm: Lower default hubble.tls.auto.certValidityDuration to 365 days (Backport PR #​35781, Upstream PR #​35630, @​chancez)
  • helm: New socketLB.tracing flag (Backport PR #​35781, Upstream PR #​35747, @​pchaigno)
  • hubble-relay: Return underlying connection errors when connecting to peer manager (Backport PR #​35781, Upstream PR #​35632, @​chancez)
  • netkit: Fix issue where traffic originating from the host namespace fails to reach the pod when using endpoint routes and network policies. (Backport PR #​35543, Upstream PR #​35306, @​jrife)

Bugfixes:

CI Changes:

Misc Changes:


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title Update Helm release cilium to v1.13.3 Update Helm release cilium to v1.13.4 Jun 15, 2023
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 5cdd9e0 to 3255034 Compare June 15, 2023 17:08
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 3255034 to 4902619 Compare July 27, 2023 15:43
@renovate renovate bot changed the title Update Helm release cilium to v1.13.4 Update Helm release cilium to v1.14.0 Jul 27, 2023
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 4902619 to 5ebda76 Compare August 15, 2023 13:28
@renovate renovate bot changed the title Update Helm release cilium to v1.14.0 Update Helm release cilium to v1.14.1 Aug 15, 2023
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 5ebda76 to b211668 Compare September 13, 2023 01:13
@renovate renovate bot changed the title Update Helm release cilium to v1.14.1 Update Helm release cilium to v1.14.2 Sep 13, 2023
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from b211668 to 2e55fb6 Compare October 18, 2023 23:05
@renovate renovate bot changed the title Update Helm release cilium to v1.14.2 Update Helm release cilium to v1.14.3 Oct 18, 2023
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 2e55fb6 to 61469dc Compare November 13, 2023 22:32
@renovate renovate bot changed the title Update Helm release cilium to v1.14.3 Update Helm release cilium to v1.14.4 Nov 13, 2023
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 61469dc to d53e5bb Compare December 13, 2023 23:18
@renovate renovate bot changed the title Update Helm release cilium to v1.14.4 Update Helm release cilium to v1.14.5 Dec 13, 2023
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from d53e5bb to ca7190c Compare January 18, 2024 17:37
@renovate renovate bot changed the title Update Helm release cilium to v1.14.5 Update Helm release cilium to v1.14.6 Jan 18, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from ca7190c to 31f0eda Compare January 31, 2024 21:23
@renovate renovate bot changed the title Update Helm release cilium to v1.14.6 Update Helm release cilium to v1.15.0 Jan 31, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 31f0eda to a7a14b3 Compare February 15, 2024 03:01
@renovate renovate bot changed the title Update Helm release cilium to v1.15.0 Update Helm release cilium to v1.15.1 Feb 15, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from a7a14b3 to fcce869 Compare March 13, 2024 17:50
@renovate renovate bot changed the title Update Helm release cilium to v1.15.1 Update Helm release cilium to v1.15.2 Mar 13, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from fcce869 to 4b851e4 Compare March 26, 2024 18:34
@renovate renovate bot changed the title Update Helm release cilium to v1.15.2 Update Helm release cilium to v1.15.3 Mar 26, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 4b851e4 to 9a20708 Compare April 12, 2024 03:34
@renovate renovate bot changed the title Update Helm release cilium to v1.15.3 Update Helm release cilium to v1.15.4 Apr 12, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 9a20708 to 1eaad61 Compare May 15, 2024 19:46
@renovate renovate bot changed the title Update Helm release cilium to v1.15.4 Update Helm release cilium to v1.15.5 May 15, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 1eaad61 to 5f4e42d Compare June 10, 2024 19:48
@renovate renovate bot changed the title Update Helm release cilium to v1.15.5 Update Helm release cilium to v1.15.6 Jun 10, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 5f4e42d to 03dab93 Compare July 11, 2024 20:25
@renovate renovate bot changed the title Update Helm release cilium to v1.15.6 Update Helm release cilium to v1.15.7 Jul 11, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 03dab93 to b0190cc Compare July 24, 2024 17:24
@renovate renovate bot changed the title Update Helm release cilium to v1.15.7 Update Helm release cilium to v1.16.0 Jul 24, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from b0190cc to 0ea7293 Compare August 14, 2024 14:39
@renovate renovate bot changed the title Update Helm release cilium to v1.16.0 Update Helm release cilium to v1.16.1 Aug 18, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 0ea7293 to cf063de Compare September 26, 2024 14:40
@renovate renovate bot changed the title Update Helm release cilium to v1.16.1 Update Helm release cilium to v1.16.2 Sep 26, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from cf063de to 541c67e Compare October 15, 2024 12:24
@renovate renovate bot changed the title Update Helm release cilium to v1.16.2 Update Helm release cilium to v1.16.3 Oct 15, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 541c67e to 6081faa Compare November 20, 2024 10:49
@renovate renovate bot changed the title Update Helm release cilium to v1.16.3 Update Helm release cilium to v1.16.4 Nov 23, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 6081faa to 6afdf36 Compare December 18, 2024 00:30
@renovate renovate bot changed the title Update Helm release cilium to v1.16.4 Update Helm release cilium to v1.16.5 Dec 25, 2024
@renovate renovate bot force-pushed the renovate/cilium-1.x branch from 6afdf36 to 05a2de5 Compare January 22, 2025 05:56
@renovate renovate bot changed the title Update Helm release cilium to v1.16.5 Update Helm release cilium to v1.16.6 Jan 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants