fix(deps): update all k8s pkg go dependencies main (patch) #11

renovate · 2023-10-23T05:19:20Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/cilium/cilium	`v1.14.2` -> `v1.14.18`
k8s.io/apiextensions-apiserver	`v0.27.6` -> `v0.27.16`
k8s.io/apimachinery	`v0.27.6` -> `v0.27.16`
k8s.io/client-go	`v0.27.6` -> `v0.27.16`
k8s.io/code-generator	`v0.27.6` -> `v0.27.16`

Release Notes

cilium/cilium (github.com/cilium/cilium)

`v1.14.18`: 1.14.18

Compare Source

Summary of Changes

Bugfixes:

cilium-health-ep controller is made to be more robust against successive failures. (Backport PR #36074, Upstream PR #35936, @jrajahalme)
Unbreak the cilium-dbg preflight migrate-identity command (Backport PR #36284, Upstream PR #36089, @giorio94)

CI Changes:

[v1.14] ci: modularize chart CI push workflow (#35964, @ferozsalam)
[v1.14] gha: Upgrade helm/kind-action to the latest upstream (#36416, @aanm)
gha: configure environment in build-images-base/image-digests job (Backport PR #36465, Upstream PR #36318, @giorio94)
github: Pass the workflow step timeout to go test (Backport PR #36074, Upstream PR #35814, @jrajahalme)
Remove unnecessary hubble port-forward commands (Backport PR #36074, Upstream PR #33523, @michi-covalent)

Misc Changes:

[v1.14] docs: egress masquerade selector (#36408, @nbusseneau)
chore(deps): update all github action dependencies (v1.14) (#36163, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.14) (#36282, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.14) (#36160, @cilium-renovate[bot])
chore(deps): update cilium/little-vm-helper action to v0.0.19 (v1.14) (#36161, @cilium-renovate[bot])
chore(deps): update dependency cilium/cilium-cli to v0.16.22 (v1.14) (#36507, @cilium-renovate[bot])
chore(deps): update dependency cilium/hubble to v1.16.4 (v1.14) (#36147, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.22.9 docker digest to 147f428 (v1.14) (#36224, @cilium-renovate[bot])
chore(deps): update go to v1.22.10 (v1.14) (#36455, @cilium-renovate[bot])
chore(deps): update old stable lvh-images (v1.14) (patch) (#36162, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.7-1733138674-96535afceef9d9f5c28a96cabe4068bf4472d053 (v1.14) (#36182, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.8-1733718623-70f73cfb053b8039d0541fdd0c120afc5f57a43d (v1.14) (#36457, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.8-1733837904-eaae5aca0fb988583e5617170a65ac5aa51c0aa8 (v1.14) (#36497, @cilium-renovate[bot])
docs: In k0s guide, remove dashes to fix invalid Bash variable names. (Backport PR #36074, Upstream PR #35923, @yilas)
envoy: Configure internal_address_config to avoid warning log (Backport PR #36202, Upstream PR #35943, @sayboras)
fix(deps): update module golang.org/x/crypto to v0.31.0 [security] (v1.14) (#36532, @cilium-renovate[bot])
images: bump cni plugins to v1.6.0 (Backport PR #36088, Upstream PR #36075, @ferozsalam)
Makefile: fix swagger definition for automatic renovate updates (Backport PR #36074, Upstream PR #35979, @aanm)

Other Changes:

[1.14] xdp: make cilium_calls_xdp map per-endpoint (#36098, @ti-mo)
install: Update image digests for v1.14.17 (#36045, @cilium-release-bot[bot])

Docker Manifests

cilium

docker.io/cilium/cilium:v1.14.18@sha256:a09bd4ee7345ccdb42679985bf3e5a696ad8416e31a70a3609129bc745804123
quay.io/cilium/cilium:v1.14.18@sha256:a09bd4ee7345ccdb42679985bf3e5a696ad8416e31a70a3609129bc745804123

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.14.18@sha256:2264b7e3ed698f38652fc18d036de1ede4e1a03c67bcb51b42a5ddc5f87df603
quay.io/cilium/clustermesh-apiserver:v1.14.18@sha256:2264b7e3ed698f38652fc18d036de1ede4e1a03c67bcb51b42a5ddc5f87df603

docker-plugin

docker.io/cilium/docker-plugin:v1.14.18@sha256:60bb79fd8571cca182ad53f84fe4e5aa5e45c70ec1b2a48810e685fe87e7a8c5
quay.io/cilium/docker-plugin:v1.14.18@sha256:60bb79fd8571cca182ad53f84fe4e5aa5e45c70ec1b2a48810e685fe87e7a8c5

hubble-relay

docker.io/cilium/hubble-relay:v1.14.18@sha256:a0a05a3b1aeb1429b76a00c8f6d9217427806faacbca2f7c6e340e51a683d476
quay.io/cilium/hubble-relay:v1.14.18@sha256:a0a05a3b1aeb1429b76a00c8f6d9217427806faacbca2f7c6e340e51a683d476

kvstoremesh

docker.io/cilium/kvstoremesh:v1.14.18@sha256:e4e96cfeb112acf9e8d88bd9ccebf1d3b9e5139eb8c632075341b623bb7105c4
quay.io/cilium/kvstoremesh:v1.14.18@sha256:e4e96cfeb112acf9e8d88bd9ccebf1d3b9e5139eb8c632075341b623bb7105c4

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.14.18@sha256:ccfc60f0f90ec12229f68f4ec1559dd0160424499860636c664b488dc553e05e
quay.io/cilium/operator-alibabacloud:v1.14.18@sha256:ccfc60f0f90ec12229f68f4ec1559dd0160424499860636c664b488dc553e05e

operator-aws

docker.io/cilium/operator-aws:v1.14.18@sha256:2240199f83156dd73b993524334fd924bbc176b5101a5276cd538cb6eb325580
quay.io/cilium/operator-aws:v1.14.18@sha256:2240199f83156dd73b993524334fd924bbc176b5101a5276cd538cb6eb325580

operator-azure

docker.io/cilium/operator-azure:v1.14.18@sha256:6c6576198e785232c8d26464fb5a9dabdddaeea22f26ce8eb06e2d5912451a82
quay.io/cilium/operator-azure:v1.14.18@sha256:6c6576198e785232c8d26464fb5a9dabdddaeea22f26ce8eb06e2d5912451a82

operator-generic

docker.io/cilium/operator-generic:v1.14.18@sha256:f41a9f3d899e14ba34a9696e7327147cd9811fc563c255668d59658ad90aa69e
quay.io/cilium/operator-generic:v1.14.18@sha256:f41a9f3d899e14ba34a9696e7327147cd9811fc563c255668d59658ad90aa69e

operator

docker.io/cilium/operator:v1.14.18@sha256:a94ffab61cb69549ec885aa70d4061e3acac3736c9dccf3f6b9c4e25241c950b
quay.io/cilium/operator:v1.14.18@sha256:a94ffab61cb69549ec885aa70d4061e3acac3736c9dccf3f6b9c4e25241c950b

`v1.14.17`: 1.14.17

Compare Source

Summary of Changes

CI Changes:

.github/conformance-ginkgo: replace deprecated jq flag (Backport PR #35470, Upstream PR #35399, @aanm)
[v1.14] gha: fix incorrect go version in lint-build-commits workflow (#35313, @giorio94)
Additionally test KVStore mode in E2E/IPSec workflows (Backport PR #35913, Upstream PR #35679, @giorio94)
ci: conformance-kind: re-enable flaky Aggregator test (Backport PR #35588, Upstream PR #35286, @julianwiedmann)
gha: Correct number of connect retry param in LVH (Backport PR #35777, Upstream PR #32598, @sayboras)
gha: Update chmod command (Backport PR #35470, Upstream PR #35400, @sayboras)
Refactor and set a default for GH_RUNNER_EXTRA_POWER (Backport PR #35332, Upstream PR #35267, @aanm)

Misc Changes:

.github/build-images-base: checkout base branch to get scripts (Backport PR #35332, Upstream PR #35236, @aanm)
.github: remove retention days for image digests (Backport PR #35470, Upstream PR #35457, @aanm)
Accurately manage the teardown sequence of an Endpoint's BPF resources (Backport PR #35888, Upstream PR #32167, @ti-mo)
chore(deps): update all github action dependencies (v1.14) (#35447, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.14) (#35717, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.14) (#35445, @cilium-renovate[bot])
chore(deps): update dependency cilium/hubble to v1.16.3 (v1.14) (#35665, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.22.8 docker digest to 0ca97f4 (v1.14) (#35446, @cilium-renovate[bot])
chore(deps): update go to v1.22.9 (v1.14) (#35829, @cilium-renovate[bot])
chore(deps): update module github.com/golang-jwt/jwt/v4 to v4.5.1 [security] (v1.14) (#35754, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1729635771-fa4efeff33a344a45e14a4068c61dc438b3d2270 (v1.14) (#35493, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1729775735-a37f7d6081718666dab500533cfda5cecb4febf5 (v1.14) (#35548, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.7-1730450803-0a83534f8c57b4d24405b213ed4b65e4e4987d8d (v1.14) (#35716, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.7-1730965050-cd22d9ffa21eb4f214bf059bcc5d2f40f0c47882 (v1.14) (#35837, @cilium-renovate[bot])
cilium: Small health cleanup improvements (Backport PR #35640, Upstream PR #33700, @borkmann)
contrib/kind: custom kind values (Backport PR #35913, Upstream PR #28155, @mhofstetter)
dnsproxy: fix error when sessionUDPFactory fails (Backport PR #35588, Upstream PR #33998, @marseel)
docs: Change invalid Helm option --agent.enabled with --agent=false in upgrade documentation (Backport PR #35332, Upstream PR #35288, @oneumyvakin)
docs: tuning: XDP LB also supports tunnel routing (Backport PR #35588, Upstream PR #35574, @julianwiedmann)
Envoy simplify listener setup (Backport PR #35769, Upstream PR #35642, @jrajahalme)
envoy: Configure internal_address_config to avoid warning log (Backport PR #35473, Upstream PR #35090, @sayboras)
fqdn: Skip "open ports" check for statically configured ports (Backport PR #35886, Upstream PR #33230, @gandro)
ipam: lower loglevel from error to warn if eni link list can't be listed (Backport PR #35470, Upstream PR #32602, @mhofstetter)
makefile: add target to install Cilium in kvstore mode (Backport PR #35913, Upstream PR #35646, @giorio94)
Makefile: Refactor hubble-relay target (Backport PR #35332, Upstream PR #29867, @chancez)
Proxy persist proxy ports (Backport PR #35686, Upstream PR #32973, @jrajahalme)
proxy: Ensure proxy ports are written on shutdown (Backport PR #35940, Upstream PR #35839, @jrajahalme)

Other Changes:

[v1.14] envoy: Bump envoy version from 1.29.x to 1.30.x (#35565, @sayboras)
chore(deps): update all-dependencies (v1.14) (#35912, @cilium-renovate[bot])
install: Update image digests for v1.14.16 (#35358, @cilium-release-bot[bot])

Docker Manifests

cilium

docker.io/cilium/cilium:v1.14.17@sha256:19952c9cb6ede01233ae5c4cd28e3ed2de266e80fa8b6bf34f878373f2c18de5
quay.io/cilium/cilium:v1.14.17@sha256:19952c9cb6ede01233ae5c4cd28e3ed2de266e80fa8b6bf34f878373f2c18de5

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.14.17@sha256:097166b9ed8a8f104bdd2193f7b58570ef64d6b455b168ddf65707753b1d8d68
quay.io/cilium/clustermesh-apiserver:v1.14.17@sha256:097166b9ed8a8f104bdd2193f7b58570ef64d6b455b168ddf65707753b1d8d68

docker-plugin

docker.io/cilium/docker-plugin:v1.14.17@sha256:6410f968dfc76dd6847e740133e2679f07dd907949ee28de35198be124538bd4
quay.io/cilium/docker-plugin:v1.14.17@sha256:6410f968dfc76dd6847e740133e2679f07dd907949ee28de35198be124538bd4

hubble-relay

docker.io/cilium/hubble-relay:v1.14.17@sha256:f4e581e6b51ccf80ba4d642a23a79e823401e6b9073de8590be7ead84a383e95
quay.io/cilium/hubble-relay:v1.14.17@sha256:f4e581e6b51ccf80ba4d642a23a79e823401e6b9073de8590be7ead84a383e95

kvstoremesh

docker.io/cilium/kvstoremesh:v1.14.17@sha256:b42821b9c210c1f1a6f0e69f2f54ce84287ffdeb41e077ffcbb83dc4078eb774
quay.io/cilium/kvstoremesh:v1.14.17@sha256:b42821b9c210c1f1a6f0e69f2f54ce84287ffdeb41e077ffcbb83dc4078eb774

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.14.17@sha256:d1e03489fb9afdb6b3e8ec42168fd11d84dbe8c90fcf4efda1eafcd3d45181a6
quay.io/cilium/operator-alibabacloud:v1.14.17@sha256:d1e03489fb9afdb6b3e8ec42168fd11d84dbe8c90fcf4efda1eafcd3d45181a6

operator-aws

docker.io/cilium/operator-aws:v1.14.17@sha256:78c5815933e2fa4af7848d92589fc91032551912981005e76ea68285bfbb46cb
quay.io/cilium/operator-aws:v1.14.17@sha256:78c5815933e2fa4af7848d92589fc91032551912981005e76ea68285bfbb46cb

operator-azure

docker.io/cilium/operator-azure:v1.14.17@sha256:14663398d0213db3b341d0517033a3e0acea797b5c4e913b3dd5b691200f4d68
quay.io/cilium/operator-azure:v1.14.17@sha256:14663398d0213db3b341d0517033a3e0acea797b5c4e913b3dd5b691200f4d68

operator-generic

docker.io/cilium/operator-generic:v1.14.17@sha256:79541e670c0cdb735129496355d08f9035ec28f276b9f826698b7a61a9116ae5
quay.io/cilium/operator-generic:v1.14.17@sha256:79541e670c0cdb735129496355d08f9035ec28f276b9f826698b7a61a9116ae5

operator

docker.io/cilium/operator:v1.14.17@sha256:09be92cea0520f754e1857392a07f78075222203cf118a08b7321a17031688f9
quay.io/cilium/operator:v1.14.17@sha256:09be92cea0520f754e1857392a07f78075222203cf118a08b7321a17031688f9

`v1.14.16`: 1.14.16

Compare Source

Summary of Changes

Bugfixes:

datapath: Fix redirect from from L3 netdev to tunnel (Backport PR #35265, Upstream PR #33421, @brb)
Fixed bug in tracking policy changes that could have resulted in revert not woking in failure cases as expected. (Backport PR #35279, Upstream PR #35109, @jrajahalme)
Fixed bug where service id allocator would loop infinity when out of service ids (Backport PR #35279, Upstream PR #35033, @WeeNews)
Fixes startup fatal error when updating CiliumNode resource. (Backport PR #34916, Upstream PR #34862, @harsimran-pabla)

CI Changes:

.github/lint-build-commits: fix workflow for push events (Backport PR #35279, Upstream PR #35264, @aanm)
.github: create cache directories on cache miss (Backport PR #35176, Upstream PR #35088, @aanm)
.github: do not push floating tag from PRs (Backport PR #35229, Upstream PR #35227, @aanm)
.github: install golang action after checkout (Backport PR #35176, Upstream PR #34843, @aanm)
.github: re-enable configurations in e2e-upgrade (Backport PR #35176, Upstream PR #34800, @aanm)
.github: specify cache-dependency-path in lint-workflows (Backport PR #35176, Upstream PR #34845, @aanm)
ci: conformance-[gateway-api|ginkgo|ingress] wait for images before matrix generation (Backport PR #34916, Upstream PR #34820, @aanm)
fix: repository nil value handled on workflow_dispatch context for renovate updates (Backport PR #34916, Upstream PR #34902, @Artyop)

Misc Changes:

.github: add cache to cilium-cli and hubble-cli build workflows (Backport PR #35176, Upstream PR #34847, @aanm)
.github: clean up disk for lint-build workflow (Backport PR #35176, Upstream PR #35141, @aanm)
.github: fix build image process to commit changes (Backport PR #35279, Upstream PR #35262, @aanm)
.github: fix lvh-kind warnings (Backport PR #35176, Upstream PR #34811, @aanm)
.github: fix runtime image digests (Backport PR #35119, Upstream PR #35107, @aanm)
.github: push floating tag for push events for stable branches (#35234, @aanm)
[v1.14] contrib/scripts: set 755 permissions for builder.sh (#35266, @aanm)
Change GH runners to GH's default (Backport PR #35176, Upstream PR #33451, @aanm)
chart: define the envoy image variable in the makefile (Backport PR #35113, Upstream PR #27725, @weizhoublue)
chore(deps): update all github action dependencies (v1.14) (#35029, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.14) (#35087, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.14) (#35252, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.14) (#35028, @cilium-renovate[bot])
chore(deps): update dependency cilium/cilium-cli to v0.16.18 (v1.14) (#35001, @cilium-renovate[bot])
chore(deps): update dependency cilium/cilium-cli to v0.16.19 (v1.14) (#35204, @cilium-renovate[bot])
chore(deps): update dependency cilium/hubble to v1.16.2 (v1.14) (#35242, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.22.7 docker digest to ddad330 (v1.14) (#35093, @cilium-renovate[bot])
chore(deps): update go to v1.22.8 (v1.14) (#35205, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1727272937-c0c0c5f38d338b330d891b304ab5ed6c6d7bcec4 (v1.14) (#35085, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1727272937-c0c0c5f38d338b330d891b304ab5ed6c6d7bcec4 (v1.14) (#35108, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1727997080-b094128ed01b784b63ada19b54f8c7fdc3042e6e (v1.14) (#35220, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1728346947-0d05e48bfbb8c4737ec40d5781d970a550ed2bbd (v1.14) (#35285, @cilium-renovate[bot])
helm: set key usages for hubble certificates with cert-manager (Backport PR #35038, Upstream PR #34946, @kaworu)
images/builder: get rid of annoying git ownership warnings (Backport PR #35279, Upstream PR #31538, @ti-mo)
Improve speed on lint commits GH workflow (Backport PR #35176, Upstream PR #34848, @aanm)
Re-write GitHub cache usages across workflows (Backport PR #35176, Upstream PR #34866, @aanm)

Other Changes:

[v1.14] image: Update runtime, builder images (#35097, @sayboras)
install: Update image digests for v1.14.15 (#35050, @cilium-release-bot[bot])

Docker Manifests

cilium

docker.io/cilium/cilium:v1.14.16@sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2
quay.io/cilium/cilium:v1.14.16@sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.14.16@sha256:19c1318e555d8ee9dbec9d86fe8e7e6c43a2dd7eeb29eb88ea7af28d21971186
quay.io/cilium/clustermesh-apiserver:v1.14.16@sha256:19c1318e555d8ee9dbec9d86fe8e7e6c43a2dd7eeb29eb88ea7af28d21971186

docker-plugin

docker.io/cilium/docker-plugin:v1.14.16@sha256:ccb1aee7af60693fe434924b0bbbb0a625382335ca2767d485a0bc855df5943d
quay.io/cilium/docker-plugin:v1.14.16@sha256:ccb1aee7af60693fe434924b0bbbb0a625382335ca2767d485a0bc855df5943d

hubble-relay

docker.io/cilium/hubble-relay:v1.14.16@sha256:ba715eaa50036c45ac39b2e4d08ee1794ac8dbfe6af339c48dba1402416da8f9
quay.io/cilium/hubble-relay:v1.14.16@sha256:ba715eaa50036c45ac39b2e4d08ee1794ac8dbfe6af339c48dba1402416da8f9

kvstoremesh

docker.io/cilium/kvstoremesh:v1.14.16@sha256:c22860631b97e671d08a21524da5283322ec6b7750760e78df5718169a987fa0
quay.io/cilium/kvstoremesh:v1.14.16@sha256:c22860631b97e671d08a21524da5283322ec6b7750760e78df5718169a987fa0

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.14.16@sha256:a647eae904c9210c3fa566a540c28bc6de525a92fd5049de1a3331c0b224d8b7
quay.io/cilium/operator-alibabacloud:v1.14.16@sha256:a647eae904c9210c3fa566a540c28bc6de525a92fd5049de1a3331c0b224d8b7

operator-aws

docker.io/cilium/operator-aws:v1.14.16@sha256:013da30c41a2ca04c56b3b4b51ebda57bac2aec8a0107031e445d636e913dca1
quay.io/cilium/operator-aws:v1.14.16@sha256:013da30c41a2ca04c56b3b4b51ebda57bac2aec8a0107031e445d636e913dca1

operator-azure

docker.io/cilium/operator-azure:v1.14.16@sha256:91b811091e98456543b4b7569039213bef954881a079a9796481275430994448
quay.io/cilium/operator-azure:v1.14.16@sha256:91b811091e98456543b4b7569039213bef954881a079a9796481275430994448

operator-generic

docker.io/cilium/operator-generic:v1.14.16@sha256:21243c0dcbc3d505ddf661835fc9a6aa6393e439893cbfd86c20b381c709d2b8
quay.io/cilium/operator-generic:v1.14.16@sha256:21243c0dcbc3d505ddf661835fc9a6aa6393e439893cbfd86c20b381c709d2b8

operator

docker.io/cilium/operator:v1.14.16@sha256:d5f68e5238d9fa608537f05abfa1296c188715439329128a9f78a7d0f6c078ef
quay.io/cilium/operator:v1.14.16@sha256:d5f68e5238d9fa608537f05abfa1296c188715439329128a9f78a7d0f6c078ef

`v1.14.15`: 1.14.15

Compare Source

We are happy to release Cilium v1.14.15!

This release brings us upstream filter chains for L7 LB policy enforcement, bugfixes, CI fixes and many many more! See summary of changes below!

Summary of Changes

Minor Changes:

cilium-envoy now uses upstream filter chains for L7 LB policy enforcement. (Backport PR #34458, Upstream PR #32119, @jrajahalme)
docs: Update examples for CNP L7 Host (Backport PR #34646, Upstream PR #34578, @sayboras)

Bugfixes:

config: fix disabling config 'Debug' (Backport PR #34471, Upstream PR #34401, @mhofstetter)
envoy: fix log level mapping when changing log level via API (Backport PR #34459, Upstream PR #34400, @mhofstetter)
ipcache: Yet another refcounting fix with mix of APIs (Backport PR #34713, Upstream PR #34715, @gandro)

CI Changes:

.github: change nick-invision/retry -> nick-fields/retry. (#34737, @michi-covalent)
ci: clean disk only on ubuntu-latest runners (Backport PR #34829, Upstream PR #34711, @marseel)
ci: Confromance E2E wait for images before matrix generation (Backport PR #34829, Upstream PR #34707, @marseel)
ci: multi pool run tests concurrently (Backport PR #34364, Upstream PR #33945, @viktor-kurchenko)
ci: Wait for images before generating test matrix (Backport PR #34829, Upstream PR #34727, @marseel)
Fix: push PR changes when renovate build images under the workflow_call context (Backport PR #34829, Upstream PR #34650, @Artyop)
gha: Add disk cleanup step for build and test workflow (Backport PR #34364, Upstream PR #34339, @sayboras)
gha: Free up Github runner disk space (Backport PR #34364, Upstream PR #34247, @sayboras)
gha: Remove ci-aks workflow (#34606, @sayboras)

Misc Changes:

[v1.14] hive: prevent goleak error due to race condition (#34658, @marseel)
Add source IP visibility info to Ingress and Gateway API docs (Backport PR #34369, Upstream PR #34137, @youngnick)
Add source IP visibility info to Ingress and Gateway API docs (Backport PR #34459, Upstream PR #34137, @youngnick)
chore(deps): update all github action dependencies (v1.14) (#34572, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.14) (#34763, @cilium-renovate[bot])
chore(deps): update dependency cilium/cilium-cli to v0.16.15 (v1.14) (#34120, @cilium-renovate[bot])
chore(deps): update dependency cilium/cilium-cli to v0.16.16 (v1.14) (#34508, @cilium-renovate[bot])
chore(deps): update dependency cilium/cilium-cli to v0.16.17 (v1.14) (#34885, @cilium-renovate[bot])
chore(deps): update dependency cilium/hubble to v1.16.1 (v1.14) (#34854, @cilium-renovate[bot])
chore(deps): update docker.io/library/alpine docker tag to v3.18.9 (v1.14) (#34762, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.22.7 docker digest to 4594271 (v1.14) (#34901, @cilium-renovate[bot])
chore(deps): update docker.io/library/ubuntu:22.04 docker digest to adbb901 (v1.14) (#34697, @cilium-renovate[bot])
chore(deps): update gcr.io/etcd-development/etcd docker tag to v3.5.16 (v1.14) (#34905, @cilium-renovate[bot])
chore(deps): update go to v1.22.7 (v1.14) (#34734, @cilium-renovate[bot])
chore(deps): update kindest/node docker tag to v1.27.16 (v1.14) (#34509, @cilium-renovate[bot])
chore: Avoid docker warning due to casing (Backport PR #34859, Upstream PR #34125, @sayboras)
cilium-dbg: add Envoy admin commands (Backport PR #34495, Upstream PR #34398, @mhofstetter)
docs: Avoid using wildcard TLS certificate (Backport PR #34829, Upstream PR #34609, @sayboras)
docs: Improve Ingress documentation (Backport PR #34369, Upstream PR #33698, @youngnick)
docs: Improve Ingress documentation (Backport PR #34459, Upstream PR #33698, @youngnick)
Documentation: Update readthedocs configuration (Backport PR #34364, Upstream PR #34190, @joestringer)
fix: base image update workflow will now be triggered on renovate branches with a workflow_call event type (Backport PR #34459, Upstream PR #34372, @Artyop)
images: fix path script (Backport PR #34766, Upstream PR #34764, @aanm)
ipsec: Document a new cause of XfrmInStateProtoError (Backport PR #34495, Upstream PR #34221, @jschwinger233)

Other Changes:

[v1.14] CODEOWNERS: switch cilium/tophat to cilium/committers (#34888, @julianwiedmann)
[v1.14] envoy: Bump envoy version from v1.29.7 to v1.29.9 (#34963, @sayboras)
[v1.14] envoy: Switch to image with timestamp tag (#34393, @sayboras)
envoy: Bump golang version (#34329, @sayboras)
install: Update image digests for v1.14.14 (#34377, @cilium-release-bot[bot])

Docker Manifests

cilium

docker.io/cilium/cilium:v1.14.15@sha256:9a7977e8a685ac8ef8477c6be76a10d2aabf680bfe13916fa8ba7fec4429705d
quay.io/cilium/cilium:v1.14.15@sha256:9a7977e8a685ac8ef8477c6be76a10d2aabf680bfe13916fa8ba7fec4429705d

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.14.15@sha256:1254404bd6a9c9cd0702727f5fe9bf26477a3dac3fa6cb144a57c84b328d079b
quay.io/cilium/clustermesh-apiserver:v1.14.15@sha256:1254404bd6a9c9cd0702727f5fe9bf26477a3dac3fa6cb144a57c84b328d079b

docker-plugin

docker.io/cilium/docker-plugin:v1.14.15@sha256:5d123a4fd747b42a5ea3153930b23b93b0803ea881a6dbac26531deeb926cb9f
quay.io/cilium/docker-plugin:v1.14.15@sha256:5d123a4fd747b42a5ea3153930b23b93b0803ea881a6dbac26531deeb926cb9f

hubble-relay

docker.io/cilium/hubble-relay:v1.14.15@sha256:f104b07f38d0fa206bc41d5bd7a02ea42e32b18de7022f8401492bad35bbedc7
quay.io/cilium/hubble-relay:v1.14.15@sha256:f104b07f38d0fa206bc41d5bd7a02ea42e32b18de7022f8401492bad35bbedc7

kvstoremesh

docker.io/cilium/kvstoremesh:v1.14.15@sha256:93d81162805edf7145a9b6f2b22790c51a730f439f7644399d55cfc083c665e0
quay.io/cilium/kvstoremesh:v1.14.15@sha256:93d81162805edf7145a9b6f2b22790c51a730f439f7644399d55cfc083c665e0

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.14.15@sha256:db526ebf79874a0376c37fa987a820ff572a5a9b9c23697c393ab5d8721a20dd
quay.io/cilium/operator-alibabacloud:v1.14.15@sha256:db526ebf79874a0376c37fa987a820ff572a5a9b9c23697c393ab5d8721a20dd

operator-aws

docker.io/cilium/operator-aws:v1.14.15@sha256:e17ee0a65edf75f13e9fb380ef2dc4c80096d8a08581f8b8a65386e35589a175
quay.io/cilium/operator-aws:v1.14.15@sha256:e17ee0a65edf75f13e9fb380ef2dc4c80096d8a08581f8b8a65386e35589a175

operator-azure

docker.io/cilium/operator-azure:v1.14.15@sha256:e4ce4f4bce9431493efc59aba38277dd831836c3112af34e48e97c3d6bf4d668
quay.io/cilium/operator-azure:v1.14.15@sha256:e4ce4f4bce9431493efc59aba38277dd831836c3112af34e48e97c3d6bf4d668

operator-generic

docker.io/cilium/operator-generic:v1.14.15@sha256:233c4ab72cd6a06e8b4c8bed4991d625df8389e6225b27bc72f088c10036b870
quay.io/cilium/operator-generic:v1.14.15@sha256:233c4ab72cd6a06e8b4c8bed4991d625df8389e6225b27bc72f088c10036b870

operator

docker.io/cilium/operator:v1.14.15@sha256:064d2449a4ceaaf8bab2f14fb49544061bb4a9d508d78ea3596b3be03c20b82f
quay.io/cilium/operator:v1.14.15@sha256:064d2449a4ceaaf8bab2f14fb49544061bb4a9d508d78ea3596b3be03c20b82f

`v1.14.14`: 1.14.14

Compare Source

Security Advisories

This release addresses GHSA-q7w8-72mr-vpgw.

Summary of Changes

Bugfixes:

DNS Proxy: Allow SO_LINGER to be set to the socket to upstream (Backport PR #33815, Upstream PR #33592, @gandro)
Fix bug causing etcd upsertion/deletion events to be potentially missed during the initial synchronization, when Cilium operates in KVStore mode, or Cluster Mesh is enabled. (Backport PR #34184, Upstream PR #34091, @giorio94)
Fix rare race condition afflicting clustermesh while stopping the retrieval of the remote cluster configuration, possibly causing a deadlock (Backport PR #33815, Upstream PR #33735, @giorio94)
pkg/metrics: fix data race warning on metrics init hook. (Backport PR #33963, Upstream PR #33823, @tommyp1ckles)
Report the correct drop reason when a packet is dropped by the bpf_lxc program. (Backport PR #31735, Upstream PR #33551, @julianwiedmann)
The cilium agent will now recover from stale nodeID mappings which could occur in clusters with high node churn, possibly manifesting itself in dropped IPsec traffic. (Backport PR #34150, Upstream PR #33666, @bimmlerd)

CI Changes:

[v1.14] ci/ipsec: add missing config for patch-upgrade test with 6.6 kernel (#33737, @julianwiedmann)
gha: Add http client timeout in Ingress (Backport PR #33815, Upstream PR #33683, @sayboras)
gha: add spot input to setup-eks-cluster action (#33848, @giorio94)
gha: don't fail if all cloud provider matrix entries are filtered out (Backport PR #33963, Upstream PR #33819, @giorio94)
gha: ensure that helm values.schema.json is not accidentally backported (Backport PR #33963, Upstream PR #33845, @giorio94)
gha: lint absence of trailing spaces in workflow files (Backport PR #34150, Upstream PR #33908, @giorio94)
gha: simplify the call-backport-label-updater workflow (Backport PR #33963, Upstream PR #33934, @giorio94)
test: use cgr.dev/chainguard/busybox:latest instead of docker.io image. (Backport PR #34150, Upstream PR #34004, @tommyp1ckles)
workflow: Use per-tunnel keys for the IPsec upgrade test (Backport PR #34150, Upstream PR #33769, @pchaigno)

Misc Changes:

[v1.14] Update Docker dependency (#34189, @ferozsalam)
chore(deps): update all github action dependencies (v1.14) (#34054, [@c

Configuration

📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2023-10-23T05:19:22Z

⚠ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Post-upgrade command '/tmp/install-buildx' has not been added to the allowed list in allowedPostUpgradeCommands

File name: undefined

Post-upgrade command 'make codegen' has not been added to the allowed list in allowedPostUpgradeCommands

File name: undefined

Post-upgrade command 'make generate' has not been added to the allowed list in allowedPostUpgradeCommands

renovate · 2024-05-09T17:58:31Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Post-upgrade command '/tmp/install-buildx' has not been added to the allowed list in allowedPostUpgradeCommands

File name: undefined

Post-upgrade command 'make codegen' has not been added to the allowed list in allowedPostUpgradeCommands

File name: undefined

Post-upgrade command 'make generate' has not been added to the allowed list in allowedPostUpgradeCommands

Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.noreply.github.com>

renovate bot added release-blocker release-note/dependency labels Oct 23, 2023

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch 2 times, most recently from a61bd62 to fbd4d3a Compare November 16, 2023 08:45

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch from fbd4d3a to e323862 Compare December 12, 2023 08:05

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch from e323862 to 93341b7 Compare December 21, 2023 05:40

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch 2 times, most recently from 2a21361 to 650222e Compare January 19, 2024 09:04

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch 2 times, most recently from a5a9b60 to 8aa7172 Compare February 15, 2024 02:39

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch 2 times, most recently from 23b121e to 3b530e2 Compare March 16, 2024 08:43

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch from 3b530e2 to 8350a6b Compare March 27, 2024 09:08

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch 2 times, most recently from 0d9d416 to 7110d5c Compare April 17, 2024 00:08

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch from 7110d5c to c8cab75 Compare May 9, 2024 17:58

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch from c8cab75 to 071cf38 Compare May 22, 2024 23:56

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch 2 times, most recently from edabc98 to 0cb8668 Compare June 11, 2024 09:06

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch from 0cb8668 to ca8a968 Compare June 15, 2024 05:47

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch 2 times, most recently from ee04586 to 00a4c97 Compare July 18, 2024 21:01

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch from 00a4c97 to 2e2793e Compare August 15, 2024 06:08

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch from 2e2793e to 57d492f Compare September 12, 2024 08:58

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch from 57d492f to 42fb999 Compare September 26, 2024 17:49

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch from 42fb999 to 34ab99e Compare October 12, 2024 05:38

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch 2 times, most recently from 5c14fdd to 5578409 Compare November 20, 2024 05:57

fix(deps): update all k8s pkg go dependencies main

b6efe21

Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/patch-all-k8s-pkg-go-deps-main branch from 5578409 to b6efe21 Compare December 21, 2024 03:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all k8s pkg go dependencies main (patch) #11

fix(deps): update all k8s pkg go dependencies main (patch) #11

renovate bot commented Oct 23, 2023 •

edited

Loading

renovate bot commented Oct 23, 2023

renovate bot commented May 9, 2024

fix(deps): update all k8s pkg go dependencies main (patch) #11

Are you sure you want to change the base?

fix(deps): update all k8s pkg go dependencies main (patch) #11

Conversation

renovate bot commented Oct 23, 2023 • edited Loading

Release Notes

v1.14.18: 1.14.18

Summary of Changes

Docker Manifests

cilium

clustermesh-apiserver

docker-plugin

hubble-relay

kvstoremesh

operator-alibabacloud

operator-aws

operator-azure

operator-generic

operator

v1.14.17: 1.14.17

Summary of Changes

Docker Manifests

cilium

clustermesh-apiserver

docker-plugin

hubble-relay

kvstoremesh

operator-alibabacloud

operator-aws

operator-azure

operator-generic

operator

v1.14.16: 1.14.16

Summary of Changes

Docker Manifests

cilium

clustermesh-apiserver

docker-plugin

hubble-relay

kvstoremesh

operator-alibabacloud

operator-aws

operator-azure

operator-generic

operator

v1.14.15: 1.14.15

Summary of Changes

Docker Manifests

cilium

clustermesh-apiserver

docker-plugin

hubble-relay

kvstoremesh

operator-alibabacloud

operator-aws

operator-azure

operator-generic

operator

v1.14.14: 1.14.14

Security Advisories

Summary of Changes

Configuration

renovate bot commented Oct 23, 2023

⚠ Artifact update problem

File name: undefined

File name: undefined

File name: undefined

renovate bot commented May 9, 2024

⚠️ Artifact update problem

File name: undefined

File name: undefined

File name: undefined

renovate bot commented Oct 23, 2023 •

edited

Loading

`v1.14.18`: 1.14.18

`v1.14.17`: 1.14.17

`v1.14.16`: 1.14.16

`v1.14.15`: 1.14.15

`v1.14.14`: 1.14.14