chore(deps): update kubezero-network-dependencies - autoclosed #74
Loading…
Reference in New Issue
No description provided.
Delete Branch "renovate/kubezero-network-parentdir-dependencies"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
1.13.5
->1.14.4
0.13.9
->0.13.12
Release Notes
cilium/cilium (cilium)
v1.14.4
: 1.14.4Compare Source
We are pleased to release Cilium v1.14.4. This release includes several network policy performance improvements, improvements and fixes for IPSec, and numerous bug fixes and architectural improvements.
Summary of Changes
Minor Changes:
cilium encrypt status
. (Backport PR #28759, Upstream PR #28640, @pchaigno)Bugfixes:
CI Changes:
Misc Changes:
91ca472
(v1.14) (#28731, @renovate[bot])linuxNodeHandler
IPsec functions to their own file (Backport PR #29030, Upstream PR #28941, @pchaigno)encrypt flush
command (Backport PR #29030, Upstream PR #28795, @pchaigno)Other Changes:
v1.14.3
: 1.14.3Compare Source
We are pleased to release Cilium v1.14.3. This is bug fix release addressing the recent HTTP/2 Stream Cancellation Attack (CVE-2023-44487) and other bugs:
Summary of Changes
Minor Changes:
Bugfixes:
CI Changes:
--flush-ct
for key rotation (Backport PR #28105, Upstream PR #27883, @pchaigno)Misc Changes:
6c12a0f
(v1.14) (#28075, @renovate[bot])8b7844d
(v1.14) (#28196, @renovate[bot])098d628
(v1.14) (#28623, @renovate[bot])6e1a67e
(v1.14) (#28197, @renovate[bot])2b7412e
(v1.14) (#28630, @renovate[bot])990350f
(v1.14) (#28579, @renovate[bot])9b8dec3
(v1.14) (#28384, @renovate[bot])aabed32
(v1.14) (#28076, @renovate[bot])92d40ee
(v1.14) (#27941, @renovate[bot])RouteTableInterfacesOffset
in system requirements (Backport PR #28442, Upstream PR #28358, @gandro)cilium/values.yaml
target to.PHONY
(Backport PR #28282, Upstream PR #28225, @nbusseneau)Other Changes:
v1.14.2
: 1.14.2Compare Source
We are pleased to release Cilium v1.14.2.
Known IPsec related issues have been fixed. We encourage users to test this release and report any potentially remaining issues.
Summary of Changes
Minor Changes:
cilium status
(Backport PR #27649, Upstream PR #26896, @meyskens)Bugfixes:
cilium encrypt status
when IPsec is enabled. (Backport PR #27917, Upstream PR #27656, @pchaigno)from-container
for reply traffic to the proxy. (Backport PR #27917, Upstream PR #27872, @pchaigno)CI Changes:
Misc Changes:
741d6f9
(v1.14) (#27768, @renovate[bot])700d726
(v1.14) (#28049, @renovate[bot])ec050c3
(v1.14) (#27546, @renovate[bot])Other Changes:
v1.14.1
: 1.14.1Compare Source
We are pleased to release Cilium v1.14.1. This release comes with fixes for IPsec, performance and resilience improvements and many CI and doc changes.
Remaining issues on the IPSec stack may cause interrupted connections during key rotations. Users may upgrade to this release only if this is considered acceptable.
Summary of Changes
Minor Changes:
Bugfixes:
CI Changes:
Misc Changes:
DROP_NO_NODE_ID
for IPsec (Backport PR #27345, Upstream PR #27184, @pchaigno)Other Changes:
Docker Manifests
cilium
docker.io/cilium/cilium:v1.14.1@​sha256:edc1d05ea1365c4a8f6ac6982247d5c145181704894bb698619c3827b6963a72
quay.io/cilium/cilium:v1.14.1@​sha256:edc1d05ea1365c4a8f6ac6982247d5c145181704894bb698619c3827b6963a72
docker.io/cilium/cilium:stable@sha256:edc1d05ea1365c4a8f6ac6982247d5c145181704894bb698619c3827b6963a72
quay.io/cilium/cilium:stable@sha256:edc1d05ea1365c4a8f6ac6982247d5c145181704894bb698619c3827b6963a72
clustermesh-apiserver
docker.io/cilium/clustermesh-apiserver:v1.14.1@​sha256:a7353669b1f7cb96cd600d98c7dd12e909d876843a7a272a1bc407e114ed225c
quay.io/cilium/clustermesh-apiserver:v1.14.1@​sha256:a7353669b1f7cb96cd600d98c7dd12e909d876843a7a272a1bc407e114ed225c
docker.io/cilium/clustermesh-apiserver:stable@sha256:a7353669b1f7cb96cd600d98c7dd12e909d876843a7a272a1bc407e114ed225c
quay.io/cilium/clustermesh-apiserver:stable@sha256:a7353669b1f7cb96cd600d98c7dd12e909d876843a7a272a1bc407e114ed225c
docker-plugin
docker.io/cilium/docker-plugin:v1.14.1@​sha256:e8654c133119dff2447ebd93342a11ddaa5472eae1625c1c6866eea8d99c74ad
quay.io/cilium/docker-plugin:v1.14.1@​sha256:e8654c133119dff2447ebd93342a11ddaa5472eae1625c1c6866eea8d99c74ad
docker.io/cilium/docker-plugin:stable@sha256:e8654c133119dff2447ebd93342a11ddaa5472eae1625c1c6866eea8d99c74ad
quay.io/cilium/docker-plugin:stable@sha256:e8654c133119dff2447ebd93342a11ddaa5472eae1625c1c6866eea8d99c74ad
hubble-relay
docker.io/cilium/hubble-relay:v1.14.1@​sha256:db30e85a7abc10589ce2a97d61ee18696a03dc5ea04d44b4d836d88bd75b59d8
quay.io/cilium/hubble-relay:v1.14.1@​sha256:db30e85a7abc10589ce2a97d61ee18696a03dc5ea04d44b4d836d88bd75b59d8
docker.io/cilium/hubble-relay:stable@sha256:db30e85a7abc10589ce2a97d61ee18696a03dc5ea04d44b4d836d88bd75b59d8
quay.io/cilium/hubble-relay:stable@sha256:db30e85a7abc10589ce2a97d61ee18696a03dc5ea04d44b4d836d88bd75b59d8
kvstoremesh
docker.io/cilium/kvstoremesh:v1.14.1@​sha256:6a4083b79290d1278462c4e1269e927e71c2df05cc80f999d58b66b6b501bc8e
quay.io/cilium/kvstoremesh:v1.14.1@​sha256:6a4083b79290d1278462c4e1269e927e71c2df05cc80f999d58b66b6b501bc8e
docker.io/cilium/kvstoremesh:stable@sha256:6a4083b79290d1278462c4e1269e927e71c2df05cc80f999d58b66b6b501bc8e
quay.io/cilium/kvstoremesh:stable@sha256:6a4083b79290d1278462c4e1269e927e71c2df05cc80f999d58b66b6b501bc8e
operator-alibabacloud
docker.io/cilium/operator-alibabacloud:v1.14.1@​sha256:edecc162279afba4af27f38afc4bc716a2e91df6b5ca6f88714029b27fb5920b
quay.io/cilium/operator-alibabacloud:v1.14.1@​sha256:edecc162279afba4af27f38afc4bc716a2e91df6b5ca6f88714029b27fb5920b
docker.io/cilium/operator-alibabacloud:stable@sha256:edecc162279afba4af27f38afc4bc716a2e91df6b5ca6f88714029b27fb5920b
quay.io/cilium/operator-alibabacloud:stable@sha256:edecc162279afba4af27f38afc4bc716a2e91df6b5ca6f88714029b27fb5920b
operator-aws
docker.io/cilium/operator-aws:v1.14.1@​sha256:ff57964aefd903456745e53a4697a4f6a026d8fffdb06f53f624a23d23ade37a
quay.io/cilium/operator-aws:v1.14.1@​sha256:ff57964aefd903456745e53a4697a4f6a026d8fffdb06f53f624a23d23ade37a
docker.io/cilium/operator-aws:stable@sha256:ff57964aefd903456745e53a4697a4f6a026d8fffdb06f53f624a23d23ade37a
quay.io/cilium/operator-aws:stable@sha256:ff57964aefd903456745e53a4697a4f6a026d8fffdb06f53f624a23d23ade37a
operator-azure
docker.io/cilium/operator-azure:v1.14.1@​sha256:2cba2cee3463c9349c47b2deb8736ffe6d8589d5e4c29b7c442b992fe0ef1fb7
quay.io/cilium/operator-azure:v1.14.1@​sha256:2cba2cee3463c9349c47b2deb8736ffe6d8589d5e4c29b7c442b992fe0ef1fb7
docker.io/cilium/operator-azure:stable@sha256:2cba2cee3463c9349c47b2deb8736ffe6d8589d5e4c29b7c442b992fe0ef1fb7
quay.io/cilium/operator-azure:stable@sha256:2cba2cee3463c9349c47b2deb8736ffe6d8589d5e4c29b7c442b992fe0ef1fb7
operator-generic
docker.io/cilium/operator-generic:v1.14.1@​sha256:e061de0a930534c7e3f8feda8330976367971238ccafff42659f104effd4b5f7
quay.io/cilium/operator-generic:v1.14.1@​sha256:e061de0a930534c7e3f8feda8330976367971238ccafff42659f104effd4b5f7
docker.io/cilium/operator-generic:stable@sha256:e061de0a930534c7e3f8feda8330976367971238ccafff42659f104effd4b5f7
quay.io/cilium/operator-generic:stable@sha256:e061de0a930534c7e3f8feda8330976367971238ccafff42659f104effd4b5f7
operator
docker.io/cilium/operator:v1.14.1@​sha256:f15b3252dfa3fc71897fd9276a1d75c8d0ff8c9dd930832586491c8e4e4b77a5
quay.io/cilium/operator:v1.14.1@​sha256:f15b3252dfa3fc71897fd9276a1d75c8d0ff8c9dd930832586491c8e4e4b77a5
docker.io/cilium/operator:stable@sha256:f15b3252dfa3fc71897fd9276a1d75c8d0ff8c9dd930832586491c8e4e4b77a5
quay.io/cilium/operator:stable@sha256:f15b3252dfa3fc71897fd9276a1d75c8d0ff8c9dd930832586491c8e4e4b77a5
v1.14.0
: 1.14.0Compare Source
Changelog
The Cilium core team are excited to announce the Cilium 1.14 release. 🎉
⚠️ Warning - IPsec ⚠️
Do NOT upgrade to this release if you are using IPsec.
Summary of Changes
Major Changes:
This prevents pods from being scheduled on nodes without Cilium.
The CNI configuration file is no longer removed on agent shutdown.
This means that pod deletion will always succeed; previously it would fail if Cilium was down for an upgrade.
This should help prevent nodes accidentally entering an unmanageable state.
It also means that nodes are not removed from cloud LoadBalancer backends during Cilium upgrades. (#23486, @squeed)
Minor Changes:
CESWriteQPSLimit
toand
CESWriteQPSBurst`.The processed work queue items always trigger a single CES create, update or write request to the kube-apiserver.
The work queue rate limiting effectively limits the rate of writes to the kube-apiserver for CES api objects.
CESWriteQPSLimit
to10
andCESWriteQPSBurst
to20
.50
and burst100
. These values cannot be exceeded regardless of any configuration.CESMaxCEPsInCES
andCESSlicingMode
flags from appearing in logs whenCES
is enabled. (#24675, @dlapcevic)--hubble-monitor-events
flag, to control the event types that get to the hubble subsystem. (#24828, @epk)ingressclass.kubernetes.io/is-default-class
annotation on Cilium's IngressClass (#23719, @meyskens)peerPort
field to CiliumBGPPeeringPolicy for specifying the port of a BGP neighbor. If unspecified, port 179 is used. (#25809, @danehans)--tunnel
in favor of--routing-mode
and--tunnel-protocol
. (#24561, @pchaigno)go_sched_latencies_seconds
(#24745, @derailed)CiliumPodIPPool
resources in multi-pool IPAM mode (#25991, @gandro)ipam.cilium.io/ip-pool
annotation (#25511, @gandro)sec_label
field in remote_endpoint_info structure tosec_identity
(#25057, @ldelossa)enable-endpoint-routes
withenable-high-scale-ipcache
. (#25601, @pchaigno)Bugfixes:
--hubble-monitor-events
logic to be an allowlist (#25167, @epk)toServices
policy where service backend churn left stale CIDR identities (#25687, @christarazi)CI Changes:
MAX_*_OPTIONS
and support for 5.10 (#24122, @pchaigno)useDigest=false
for Hubble Relay (Backport PR #26914, Upstream PR #26890, @gandro)useDigest=false
for Hubble Relay (Backport PR #26887, Upstream PR #26869, @gandro)K8sAgentIstioTest
(#24476, @nbusseneau)2023042
.212204 LVH images (#25681, @brb)master
>main
) (#24958, @nbusseneau)SkipGKEQuarantined
helper (#23354, @pchaigno)tests-smoke
conformance workflow (#25493, @bleggett)--config
when unnecessary (#24567, @pchaigno)Misc Changes:
dev-doctor
- if path togo.mod
invalid, look in current directory (#25327, @bleggett)pkg/fqdn
(#22519, @AdamKorcz).clang-format
for editor-agnostic C formatting hints (#25488, @bleggett)make run_bpf_tests
target to run eBPF unit tests in the Cilium builder container (#25173, @ldelossa)c7g
,m6idn
,m6in
,m7g,
r6idn,
r6in, and
r7g` (#23835, @muratso)cilium bpf migrate-map
sub-command (#25196, @tklauser)MARK_MAGIC_
constants (#23125, @pchaigno)removeIfEmpty
with more effiicientos.ReadDir
(#24566, @Juneezee)959cbb7
to 2.1.39 (#23196, @dependabot[bot])Fix operator panic that occurs when Endpoint CRD is disabled and CiliumEndpointSlice is enabled (#25798, @doniacld)
207512c
(main) (#25397, @renovate[bot])ff6bdca
(master) (#24354, @renovate[bot])572f680
(master) (#23575, @renovate[bot])52921e6
(master) (#24103, @renovate[bot])690e413
(main) (#25277, @renovate[bot])6b3fa4b
(main) (#26050, @renovate[bot])8f958bf
(main) (#26283, @renovate[bot])fd9306e
(v1.14) (#26696, @renovate[bot])0bced47
(v1.14) (#26697, @renovate[bot])2a357c4
(main) (#26284, @renovate[bot])ac58ff7
(main) (#25295, @renovate[bot])f05532b
(master) (#23477, @renovate[bot])149531e
(master) (#24614, @renovate[bot])21e5d22
(master) (#23726, @renovate[bot])26d07ba
(master) (#23352, @renovate[bot])42ddd0c
(master) (#23602, @renovate[bot])48e033b
(master) (#23654, @renovate[bot])6b01107
(master) (#23498, @renovate[bot])9ecc53c
(main) (#25398, @renovate[bot])9ecc53c
(main) (#26285, @renovate[bot])ddde70b
(master) (#24254, @renovate[bot])cilium endpoint regenerate
command (#25949, @christarazi)const
qualifiers to BPF code (#24606, @qmonnet)net.IP*
for ingress IPs (#26045, @christarazi)policy_implementation_delay
to metrics (#22998, @learnitall)cluster-pool-v2beta
(#25767, @gandro)PRELOAD_VM
for local CI VM (#22902, @Shunpoco)pkg/datapath/ipcache/listener.go
. (#23963, @hxysayhi)pkg/bgpv1
(#25686, @danehans)nodeEncryption
is only supported with WireGuard (#25770, @gandro)notifyOnDNSMsg()
(#22341, @christarazi)PrefixString()
(#23201, @christarazi)NodeEncryptionOptOutLabels
when marshalling to json (#24470, @gandro)make generate-k8s-api
(#23428, @ldelossa)--metrics
(#22888, @christarazi)slackin
system hosted on heroku, to just a simple generated badge. (#26416, @thebsdbox)Other Changes:
v1.13.9
: 1.13.9Compare Source
We are pleased to release Cilium v1.13.9. This release includes several network policy performance improvements, improvements and fixes for IPSec, and numerous bug fixes and architectural improvements.
Summary of Changes
Minor Changes:
cilium encrypt status
. (Backport PR #28761, Upstream PR #28640, @pchaigno)Bugfixes:
CI Changes:
Misc Changes:
linuxNodeHandler
IPsec functions to their own file (Backport PR #29034, Upstream PR #28941, @pchaigno)encrypt flush
command (Backport PR #29034, Upstream PR #28795, @pchaigno)Other Changes:
v1.13.8
: 1.13.8Compare Source
We are pleased to release Cilium v1.13.8. This is bug fix release addressing the recent HTTP/2 Stream Cancellation Attack (CVE-2023-44487) and other bugs:
Summary of Changes
Minor Changes:
Bugfixes:
CI Changes:
--flush-ct
for key rotation (Backport PR #28120, Upstream PR #27883, @pchaigno)Misc Changes:
6b29720
(v1.13) (#28212, @renovate[bot])700d726
(v1.13) (#28083, @renovate[bot])9b8dec3
(v1.13) (#28385, @renovate[bot])a903800
(v1.13) (#28581, @renovate[bot])aabed32
(v1.13) (#27897, @renovate[bot])RouteTableInterfacesOffset
in system requirements (Backport PR #28443, Upstream PR #28358, @gandro)cilium/values.yaml
target to.PHONY
(Backport PR #28350, Upstream PR #28225, @nbusseneau)Other Changes:
v1.13.7
: 1.13.7Compare Source
We are pleased to release Cilium v1.13.7.
Known IPsec related issues have been fixed. We encourage users to test this release and report any potentially remaining issues.
Summary of Changes
Minor Changes:
Bugfixes:
cilium encrypt status
when IPsec is enabled. (Backport PR #27925, Upstream PR #27656, @pchaigno)CI Changes:
Misc Changes:
741d6f9
(v1.13) (#27779, @renovate[bot])ec050c3
(v1.13) (#27554, @renovate[bot])DROP_NO_NODE_ID
for IPsec (Backport PR #27393, Upstream PR #27184, @pchaigno)Other Changes:
v1.13.6
: 1.13.6Compare Source
We are pleased to release Cilium v1.13.6. This release comes with many docs updates, health check bug fixes, an IPsec fix and many other changes!
Remaining issues on the IPSec stack may cause interrupted connections during key rotations. Users may upgrade to this release only if this is considered acceptable.
Summary of Changes
Minor Changes:
Bugfixes:
Fix a bug that could cause IPsec-encrypted packets to be sent to the wrong destination node when node churn is high. (Backport PR #27107, Upstream PR #27029, @pchaigno)
CI Changes:
Misc Changes:
Other Changes:
Docker Manifests
cilium
docker.io/cilium/cilium:v1.13.6@​sha256:994b8b3b26d8a1ef74b51a163daa1ac02aceb9b16f794f8120f15a12011739dc
quay.io/cilium/cilium:v1.13.6@​sha256:994b8b3b26d8a1ef74b51a163daa1ac02aceb9b16f794f8120f15a12011739dc
clustermesh-apiserver
docker.io/cilium/clustermesh-apiserver:v1.13.6@​sha256:9b4f3f849c3d994adc42f30900ce99e39f01aeb370e33e10403f0ffe8edf28a2
quay.io/cilium/clustermesh-apiserver:v1.13.6@​sha256:9b4f3f849c3d994adc42f30900ce99e39f01aeb370e33e10403f0ffe8edf28a2
docker-plugin
docker.io/cilium/docker-plugin:v1.13.6@​sha256:06d3be87c59f5bdf34e26ab6e236896bb76d84a0182ddaf46bd78b0a785d7ed2
quay.io/cilium/docker-plugin:v1.13.6@​sha256:06d3be87c59f5bdf34e26ab6e236896bb76d84a0182ddaf46bd78b0a785d7ed2
hubble-relay
docker.io/cilium/hubble-relay:v1.13.6@​sha256:da96840b638d3e9705cfc48af2bddfe92d17eb4f5a776b075bef9ac50efbb042
quay.io/cilium/hubble-relay:v1.13.6@​sha256:da96840b638d3e9705cfc48af2bddfe92d17eb4f5a776b075bef9ac50efbb042
operator-alibabacloud
docker.io/cilium/operator-alibabacloud:v1.13.6@​sha256:e9ab58faf4e4fec9519474c18d166ba8cc144de85035c93b73b7dd40b6cf308b
quay.io/cilium/operator-alibabacloud:v1.13.6@​sha256:e9ab58faf4e4fec9519474c18d166ba8cc144de85035c93b73b7dd40b6cf308b
operator-aws
docker.io/cilium/operator-aws:v1.13.6@​sha256:f49f26454b4406c8f6438ca25de0a4f4b5392036ee6a4620d38353d94a2466d7
quay.io/cilium/operator-aws:v1.13.6@​sha256:f49f26454b4406c8f6438ca25de0a4f4b5392036ee6a4620d38353d94a2466d7
operator-azure
docker.io/cilium/operator-azure:v1.13.6@​sha256:028fe39733a64b36bb043e7d67d8aa6f2e3f0b46b5ab08865db5afdcae1133fb
quay.io/cilium/operator-azure:v1.13.6@​sha256:028fe39733a64b36bb043e7d67d8aa6f2e3f0b46b5ab08865db5afdcae1133fb
operator-generic
docker.io/cilium/operator-generic:v1.13.6@​sha256:753c1d0549032da83ec45333feec6f4b283331618a1f7fed2f7e2d36efbd4bc9
quay.io/cilium/operator-generic:v1.13.6@​sha256:753c1d0549032da83ec45333feec6f4b283331618a1f7fed2f7e2d36efbd4bc9
operator
docker.io/cilium/operator:v1.13.6@​sha256:d2196d141384d325b343c2e9bd7cdecbe4f2384e2ce95a3184c1cfff21475279
quay.io/cilium/operator:v1.13.6@​sha256:d2196d141384d325b343c2e9bd7cdecbe4f2384e2ce95a3184c1cfff21475279
metallb/metallb (metallb)
v0.13.12
Compare Source
See https://metallb.universe.tf/release-notes/ for details
v0.13.11
Compare Source
See https://metallb.universe.tf/release-notes/ for details
v0.13.10
Compare Source
See https://metallb.universe.tf/release-notes/ for details
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
41876babf7
toa691a9f338
a691a9f338
to7f644c8aa9
7f644c8aa9
to4a649771d5
4a649771d5
toec78c87961
ec78c87961
to1bd1d5dd27
1bd1d5dd27
to0eff62c877
0eff62c877
to8e66085d93
chore(deps): update kubezero-network-dependenciesto chore(deps): update kubezero-network-dependencies - autoclosedPull request closed