Update Helm release cilium to v1.16.5 #433

Merged
tom merged 1 commit from renovate/cilium-1.x into main 2024-12-19 12:24:13 +01:00
Collaborator

This PR contains the following updates:

Package Update Change
cilium (source) patch 1.16.4 -> 1.16.5

Release Notes

cilium/cilium (cilium)

v1.16.5: 1.16.5

Compare Source

Summary of Changes

Minor Changes:

Bugfixes:

  • Address potential connectivity disruption when using either L7 / DNS Network policies in combination with per-endpoint routes and hostLegacyRouting, or L7 / DNS network policies in combination with IPsec network encryption. (Backport PR #​36540, Upstream PR #​36484, @​julianwiedmann)
  • bgp: fix race in bgp stores (Backport PR #​36066, Upstream PR #​35971, @​harsimran-pabla)
  • BGPv1: Fix race by reconciliation of services with externalTrafficPolicy=Local by populating locally available services after performing service diff (Backport PR #​36286, Upstream PR #​36230, @​rastislavs)
  • BGPv2: Fix race by reconciliation of services with externalTrafficPolicy=Local by populating locally available services after performing service diff (Backport PR #​36286, Upstream PR #​36165, @​rastislavs)
  • Cilium agent now waits until endpoints have restored before starting accepting new xDS streams. (Backport PR #​36049, Upstream PR #​35984, @​jrajahalme)
  • Cilium no longer keeps old DNS-IP mappings alive while reaping newer ones, leading to spurious drops in connections to domains with many IPs associated. (Backport PR #​36462, Upstream PR #​36252, @​bimmlerd)
  • cilium-health-ep controller is made to be more robust against successive failures. (Backport PR #​36066, Upstream PR #​35936, @​jrajahalme)
  • DNS proxy port is no longer released when endpoint with a DNS policy fails to regenerate successfully. A potential deadlock between CEC/CCEC parser and endpoint policy update is removed. (Backport PR #​36468, Upstream PR #​36142, @​jrajahalme)
  • Envoy "initial fetch timeout" warnings are now demoted to info level, as they are expected to happen during Cilium Agent restart. (Backport PR #​36049, Upstream PR #​36060, @​jrajahalme)
  • Fix an issue where pod-to-world traffic goes up stack when BPF host routing is enabled with tunnel. (Backport PR #​35861, Upstream PR #​35098, @​jschwinger233)
  • Fix identity leak for kvstore identity mode (Backport PR #​36066, Upstream PR #​34893, @​odinuge)
  • Fix potential Cilium agent panic during endpoint restoration, occurring if the corresponding pod gets deleted while the agent is restarting. This regression only affects Cilium v1.16.4. (Backport PR #​36302, Upstream PR #​36292, @​giorio94)
  • gateway-api: Fix gateway checks for namespace (Backport PR #​36462, Upstream PR #​35452, @​sayboras)
  • gha: Remove hostLegacyRouting in clustermesh (Backport PR #​36357, Upstream PR #​35418, @​sayboras)
  • helm: Use an absolute FQDN for the Hubble peer-service endpoint to avoid incorrect DNS resolution outside the cluster (Backport PR #​36066, Upstream PR #​36005, @​devodev)
  • hubble: consistently use v as prefix for the Hubble version (Backport PR #​36286, Upstream PR #​35891, @​rolinh)
  • iptables: Fix data race in iptables manager (Backport PR #​36066, Upstream PR #​35902, @​pippolo84)
  • lrp: update LRP services with stale backends on agent restart (Backport PR #​36106, Upstream PR #​36036, @​ysksuzuki)
  • policy: Fix bug that allowed port ranges to be attached to L7 policies, which is not permitted. (#​36050, @​nathanjsweet)
  • Unbreak the cilium-dbg preflight migrate-identity command (Backport PR #​36286, Upstream PR #​36089, @​giorio94)
  • Use strconv.Itoa instead of string() for the correct behavior when converting kafka.ErrorCode from int32 to string. Add relevant unit tests for Kafka plugin and handler. (Backport PR #​36066, Upstream PR #​35856, @​nddq)

CI Changes:

Misc Changes:

Other Changes:

Docker Manifests

cilium

quay.io/cilium/cilium:v1.16.5@​sha256:758ca0793f5995bb938a2fa219dcce63dc0b3fa7fc4ce5cc851125281fb7361d
quay.io/cilium/cilium:stable@sha256:758ca0793f5995bb938a2fa219dcce63dc0b3fa7fc4ce5cc851125281fb7361d

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.16.5@​sha256:37a7fdbef806b78ef63df9f1a9828fdddbf548d1f0e43b8eb10a6bdc8fa03958
quay.io/cilium/clustermesh-apiserver:stable@sha256:37a7fdbef806b78ef63df9f1a9828fdddbf548d1f0e43b8eb10a6bdc8fa03958

docker-plugin

quay.io/cilium/docker-plugin:v1.16.5@​sha256:d6b4ed076ae921535c2a543d4b5b63af474288ee4501653a1f442c935beb5768
quay.io/cilium/docker-plugin:stable@sha256:d6b4ed076ae921535c2a543d4b5b63af474288ee4501653a1f442c935beb5768

hubble-relay

quay.io/cilium/hubble-relay:v1.16.5@​sha256:6cfae1d1afa566ba941f03d4d7e141feddd05260e5cd0a1509aba1890a45ef00
quay.io/cilium/hubble-relay:stable@sha256:6cfae1d1afa566ba941f03d4d7e141feddd05260e5cd0a1509aba1890a45ef00

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.16.5@​sha256:c0edf4c8d089e76d6565d3c57128b98bc6c73d14bb4590126ee746aeaedba5e0
quay.io/cilium/operator-alibabacloud:stable@sha256:c0edf4c8d089e76d6565d3c57128b98bc6c73d14bb4590126ee746aeaedba5e0

operator-aws

quay.io/cilium/operator-aws:v1.16.5@​sha256:97e1fe0c2b522583033138eb10c170919d8de49d2788ceefdcff229a92210476
quay.io/cilium/operator-aws:stable@sha256:97e1fe0c2b522583033138eb10c170919d8de49d2788ceefdcff229a92210476

operator-azure

quay.io/cilium/operator-azure:v1.16.5@​sha256:265e2b78f572c76b523f91757083ea5f0b9b73b82f2d9714e5a8fb848e4048f9
quay.io/cilium/operator-azure:stable@sha256:265e2b78f572c76b523f91757083ea5f0b9b73b82f2d9714e5a8fb848e4048f9

operator-generic

quay.io/cilium/operator-generic:v1.16.5@​sha256:f7884848483bbcd7b1e0ccfd34ba4546f258b460cb4b7e2f06a1bcc96ef88039
quay.io/cilium/operator-generic:stable@sha256:f7884848483bbcd7b1e0ccfd34ba4546f258b460cb4b7e2f06a1bcc96ef88039

operator

quay.io/cilium/operator:v1.16.5@​sha256:617896e1b23a2c4504ab2c84f17964e24dade3b5845f733b11847202230ca940
quay.io/cilium/operator:stable@sha256:617896e1b23a2c4504ab2c84f17964e24dade3b5845f733b11847202230ca940


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [cilium](https://cilium.io/) ([source](https://github.com/cilium/cilium)) | patch | `1.16.4` -> `1.16.5` | --- ### Release Notes <details> <summary>cilium/cilium (cilium)</summary> ### [`v1.16.5`](https://github.com/cilium/cilium/releases/tag/v1.16.5): 1.16.5 [Compare Source](https://github.com/cilium/cilium/compare/1.16.4...1.16.5) ## Summary of Changes **Minor Changes:** - hubble: Stop building 32-bit binaries (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;35974](https://github.com/cilium/cilium/issues/35974), [@&#8203;michi-covalent](https://github.com/michi-covalent)) **Bugfixes:** - Address potential connectivity disruption when using either L7 / DNS Network policies in combination with per-endpoint routes and hostLegacyRouting, or L7 / DNS network policies in combination with IPsec network encryption. (Backport PR [#&#8203;36540](https://github.com/cilium/cilium/issues/36540), Upstream PR [#&#8203;36484](https://github.com/cilium/cilium/issues/36484), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - bgp: fix race in bgp stores (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;35971](https://github.com/cilium/cilium/issues/35971), [@&#8203;harsimran-pabla](https://github.com/harsimran-pabla)) - BGPv1: Fix race by reconciliation of services with externalTrafficPolicy=Local by populating locally available services after performing service diff (Backport PR [#&#8203;36286](https://github.com/cilium/cilium/issues/36286), Upstream PR [#&#8203;36230](https://github.com/cilium/cilium/issues/36230), [@&#8203;rastislavs](https://github.com/rastislavs)) - BGPv2: Fix race by reconciliation of services with externalTrafficPolicy=Local by populating locally available services after performing service diff (Backport PR [#&#8203;36286](https://github.com/cilium/cilium/issues/36286), Upstream PR [#&#8203;36165](https://github.com/cilium/cilium/issues/36165), [@&#8203;rastislavs](https://github.com/rastislavs)) - Cilium agent now waits until endpoints have restored before starting accepting new xDS streams. (Backport PR [#&#8203;36049](https://github.com/cilium/cilium/issues/36049), Upstream PR [#&#8203;35984](https://github.com/cilium/cilium/issues/35984), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - Cilium no longer keeps old DNS-IP mappings alive while reaping newer ones, leading to spurious drops in connections to domains with many IPs associated. (Backport PR [#&#8203;36462](https://github.com/cilium/cilium/issues/36462), Upstream PR [#&#8203;36252](https://github.com/cilium/cilium/issues/36252), [@&#8203;bimmlerd](https://github.com/bimmlerd)) - cilium-health-ep controller is made to be more robust against successive failures. (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;35936](https://github.com/cilium/cilium/issues/35936), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - DNS proxy port is no longer released when endpoint with a DNS policy fails to regenerate successfully. A potential deadlock between CEC/CCEC parser and endpoint policy update is removed. (Backport PR [#&#8203;36468](https://github.com/cilium/cilium/issues/36468), Upstream PR [#&#8203;36142](https://github.com/cilium/cilium/issues/36142), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - Envoy "initial fetch timeout" warnings are now demoted to info level, as they are expected to happen during Cilium Agent restart. (Backport PR [#&#8203;36049](https://github.com/cilium/cilium/issues/36049), Upstream PR [#&#8203;36060](https://github.com/cilium/cilium/issues/36060), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - Fix an issue where pod-to-world traffic goes up stack when BPF host routing is enabled with tunnel. (Backport PR [#&#8203;35861](https://github.com/cilium/cilium/issues/35861), Upstream PR [#&#8203;35098](https://github.com/cilium/cilium/issues/35098), [@&#8203;jschwinger233](https://github.com/jschwinger233)) - Fix identity leak for kvstore identity mode (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;34893](https://github.com/cilium/cilium/issues/34893), [@&#8203;odinuge](https://github.com/odinuge)) - Fix potential Cilium agent panic during endpoint restoration, occurring if the corresponding pod gets deleted while the agent is restarting. This regression only affects Cilium v1.16.4. (Backport PR [#&#8203;36302](https://github.com/cilium/cilium/issues/36302), Upstream PR [#&#8203;36292](https://github.com/cilium/cilium/issues/36292), [@&#8203;giorio94](https://github.com/giorio94)) - gateway-api: Fix gateway checks for namespace (Backport PR [#&#8203;36462](https://github.com/cilium/cilium/issues/36462), Upstream PR [#&#8203;35452](https://github.com/cilium/cilium/issues/35452), [@&#8203;sayboras](https://github.com/sayboras)) - gha: Remove hostLegacyRouting in clustermesh (Backport PR [#&#8203;36357](https://github.com/cilium/cilium/issues/36357), Upstream PR [#&#8203;35418](https://github.com/cilium/cilium/issues/35418), [@&#8203;sayboras](https://github.com/sayboras)) - helm: Use an absolute FQDN for the Hubble peer-service endpoint to avoid incorrect DNS resolution outside the cluster (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;36005](https://github.com/cilium/cilium/issues/36005), [@&#8203;devodev](https://github.com/devodev)) - hubble: consistently use v as prefix for the Hubble version (Backport PR [#&#8203;36286](https://github.com/cilium/cilium/issues/36286), Upstream PR [#&#8203;35891](https://github.com/cilium/cilium/issues/35891), [@&#8203;rolinh](https://github.com/rolinh)) - iptables: Fix data race in iptables manager (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;35902](https://github.com/cilium/cilium/issues/35902), [@&#8203;pippolo84](https://github.com/pippolo84)) - lrp: update LRP services with stale backends on agent restart (Backport PR [#&#8203;36106](https://github.com/cilium/cilium/issues/36106), Upstream PR [#&#8203;36036](https://github.com/cilium/cilium/issues/36036), [@&#8203;ysksuzuki](https://github.com/ysksuzuki)) - policy: Fix bug that allowed port ranges to be attached to L7 policies, which is not permitted. ([#&#8203;36050](https://github.com/cilium/cilium/issues/36050), [@&#8203;nathanjsweet](https://github.com/nathanjsweet)) - Unbreak the cilium-dbg preflight migrate-identity command (Backport PR [#&#8203;36286](https://github.com/cilium/cilium/issues/36286), Upstream PR [#&#8203;36089](https://github.com/cilium/cilium/issues/36089), [@&#8203;giorio94](https://github.com/giorio94)) - Use `strconv.Itoa` instead of `string()` for the correct behavior when converting `kafka.ErrorCode` from `int32` to `string`. Add relevant unit tests for Kafka plugin and handler. (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;35856](https://github.com/cilium/cilium/issues/35856), [@&#8203;nddq](https://github.com/nddq)) **CI Changes:** - \[v1.16] ci: modularize chart CI push workflow ([#&#8203;35958](https://github.com/cilium/cilium/issues/35958), [@&#8203;ferozsalam](https://github.com/ferozsalam)) - gh: conformance-clustermesh: test with IPsec + BPF NodePort (Backport PR [#&#8203;36462](https://github.com/cilium/cilium/issues/36462), Upstream PR [#&#8203;36384](https://github.com/cilium/cilium/issues/36384), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - gha: configure environment in build-images-base/image-digests job (Backport PR [#&#8203;36462](https://github.com/cilium/cilium/issues/36462), Upstream PR [#&#8203;36318](https://github.com/cilium/cilium/issues/36318), [@&#8203;giorio94](https://github.com/giorio94)) - node_local_store: prevent racey tests while using mock node store. (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;35945](https://github.com/cilium/cilium/issues/35945), [@&#8203;tommyp1ckles](https://github.com/tommyp1ckles)) - Remove unnecessary hubble port-forward commands (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;33523](https://github.com/cilium/cilium/issues/33523), [@&#8203;michi-covalent](https://github.com/michi-covalent)) **Misc Changes:** - \[v1.16] docs: egress masquerade selector ([#&#8203;36333](https://github.com/cilium/cilium/issues/36333), [@&#8203;viktor-kurchenko](https://github.com/viktor-kurchenko)) - \[v1.16] images: bump cni plugins to v1.6.0 ([#&#8203;36092](https://github.com/cilium/cilium/issues/36092), [@&#8203;ferozsalam](https://github.com/ferozsalam)) - bugtool: dump tail-call map for bpf_wireguard (Backport PR [#&#8203;36286](https://github.com/cilium/cilium/issues/36286), Upstream PR [#&#8203;36183](https://github.com/cilium/cilium/issues/36183), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - chore(deps): update all github action dependencies (v1.16) ([#&#8203;36155](https://github.com/cilium/cilium/issues/36155), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.16) ([#&#8203;36275](https://github.com/cilium/cilium/issues/36275), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.16) ([#&#8203;36443](https://github.com/cilium/cilium/issues/36443), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.16) (patch) ([#&#8203;36277](https://github.com/cilium/cilium/issues/36277), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.16) ([#&#8203;35546](https://github.com/cilium/cilium/issues/35546), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.16) ([#&#8203;36152](https://github.com/cilium/cilium/issues/36152), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.16) ([#&#8203;36279](https://github.com/cilium/cilium/issues/36279), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.16) ([#&#8203;36444](https://github.com/cilium/cilium/issues/36444), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update cilium/little-vm-helper action to v0.0.19 (v1.16) ([#&#8203;36153](https://github.com/cilium/cilium/issues/36153), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.22.9 docker digest to [`147f428`](https://github.com/cilium/cilium/commit/147f428) (v1.16) ([#&#8203;36222](https://github.com/cilium/cilium/issues/36222), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update go to v1.22.10 (v1.16) ([#&#8203;36441](https://github.com/cilium/cilium/issues/36441), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.7-1732605705-2aa20ee3acb68cd38d57669af19508bea8f0ba62 (v1.16) ([#&#8203;36180](https://github.com/cilium/cilium/issues/36180), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.8-1733837904-eaae5aca0fb988583e5617170a65ac5aa51c0aa8 (v1.16) ([#&#8203;36495](https://github.com/cilium/cilium/issues/36495), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/lvh-images/kind docker tag to bpf-20241129.013349 (v1.16) ([#&#8203;36278](https://github.com/cilium/cilium/issues/36278), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/lvh-images/kind docker tag to bpf-20241206.013345 (v1.16) ([#&#8203;36442](https://github.com/cilium/cilium/issues/36442), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.16) (patch) ([#&#8203;36154](https://github.com/cilium/cilium/issues/36154), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - docs: Add the tls:// prefix before the IP address (Backport PR [#&#8203;36286](https://github.com/cilium/cilium/issues/36286), Upstream PR [#&#8203;36118](https://github.com/cilium/cilium/issues/36118), [@&#8203;liyihuang](https://github.com/liyihuang)) - docs: Fix typo in multi-pool section title (Backport PR [#&#8203;36312](https://github.com/cilium/cilium/issues/36312), Upstream PR [#&#8203;36305](https://github.com/cilium/cilium/issues/36305), [@&#8203;joestringer](https://github.com/joestringer)) - docs: In k0s guide, remove dashes to fix invalid Bash variable names. (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;35923](https://github.com/cilium/cilium/issues/35923), [@&#8203;yilas](https://github.com/yilas)) - docs: lrp: fix kernel version requirement for skipRedirectFromBackend (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;35921](https://github.com/cilium/cilium/issues/35921), [@&#8203;ysksuzuki](https://github.com/ysksuzuki)) - docs: system-requirements: require 5.4 kernel (Backport PR [#&#8203;36462](https://github.com/cilium/cilium/issues/36462), Upstream PR [#&#8203;36386](https://github.com/cilium/cilium/issues/36386), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - docs: WireGuard doesn't require overlay port in Network Firewalls (Backport PR [#&#8203;36286](https://github.com/cilium/cilium/issues/36286), Upstream PR [#&#8203;36208](https://github.com/cilium/cilium/issues/36208), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - Endpoint populate new policymap early if empty (Backport PR [#&#8203;36479](https://github.com/cilium/cilium/issues/36479), Upstream PR [#&#8203;36361](https://github.com/cilium/cilium/issues/36361), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - envoy: Configure internal_address_config to avoid warning log (Backport PR [#&#8203;36015](https://github.com/cilium/cilium/issues/36015), Upstream PR [#&#8203;35943](https://github.com/cilium/cilium/issues/35943), [@&#8203;sayboras](https://github.com/sayboras)) - envoy: Pass tofqdns-proxy-response-max-delay to Envoy (Backport PR [#&#8203;36468](https://github.com/cilium/cilium/issues/36468), Upstream PR [#&#8203;36330](https://github.com/cilium/cilium/issues/36330), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - fix(deps): update module golang.org/x/crypto to v0.31.0 \[security] (v1.16) ([#&#8203;36530](https://github.com/cilium/cilium/issues/36530), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - Fixed BGP documentation (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;35953](https://github.com/cilium/cilium/issues/35953), [@&#8203;seadog007](https://github.com/seadog007)) - images: Use cilium-builder image instead of golang to build hubble (Backport PR [#&#8203;36312](https://github.com/cilium/cilium/issues/36312), Upstream PR [#&#8203;35697](https://github.com/cilium/cilium/issues/35697), [@&#8203;learnitall](https://github.com/learnitall)) - lrp: fix kernel version requirement in warning log (Backport PR [#&#8203;36286](https://github.com/cilium/cilium/issues/36286), Upstream PR [#&#8203;36141](https://github.com/cilium/cilium/issues/36141), [@&#8203;ysksuzuki](https://github.com/ysksuzuki)) - Makefile: fix swagger definition for automatic renovate updates (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;35979](https://github.com/cilium/cilium/issues/35979), [@&#8203;aanm](https://github.com/aanm)) - proxy: Take proxy port reference for new redirects immediately (Backport PR [#&#8203;36468](https://github.com/cilium/cilium/issues/36468), Upstream PR [#&#8203;36435](https://github.com/cilium/cilium/issues/36435), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - proxyports: Resolve data races in test (Backport PR [#&#8203;36468](https://github.com/cilium/cilium/issues/36468), Upstream PR [#&#8203;36399](https://github.com/cilium/cilium/issues/36399), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - proxyports: Sleep a bit longer in tests (Backport PR [#&#8203;36468](https://github.com/cilium/cilium/issues/36468), Upstream PR [#&#8203;36389](https://github.com/cilium/cilium/issues/36389), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - Remove duplicated watch on services and endpoint in the cilium-agent (Backport PR [#&#8203;36066](https://github.com/cilium/cilium/issues/36066), Upstream PR [#&#8203;35838](https://github.com/cilium/cilium/issues/35838), [@&#8203;MrFreezeex](https://github.com/MrFreezeex)) - Rework error handling logic in neighbor discovery (Backport PR [#&#8203;36093](https://github.com/cilium/cilium/issues/36093), Upstream PR [#&#8203;35144](https://github.com/cilium/cilium/issues/35144), [@&#8203;pippolo84](https://github.com/pippolo84)) - Silence spurious clustermesh-related warnings (Backport PR [#&#8203;36225](https://github.com/cilium/cilium/issues/36225), Upstream PR [#&#8203;35867](https://github.com/cilium/cilium/issues/35867), [@&#8203;giorio94](https://github.com/giorio94)) - Update documentation for egress masquerading behavior (Backport PR [#&#8203;36462](https://github.com/cilium/cilium/issues/36462), Upstream PR [#&#8203;36267](https://github.com/cilium/cilium/issues/36267), [@&#8203;liyihuang](https://github.com/liyihuang)) **Other Changes:** - \[1.16] ci/ipsec-upgrade: increase cilium status wait duration ([#&#8203;36082](https://github.com/cilium/cilium/issues/36082), [@&#8203;harsimran-pabla](https://github.com/harsimran-pabla)) - \[v1.16] cilium, service: Fix checkLBSrcRange propagation to LB map ([#&#8203;36511](https://github.com/cilium/cilium/issues/36511), [@&#8203;borkmann](https://github.com/borkmann)) - install: Update image digests for v1.16.4 ([#&#8203;36047](https://github.com/cilium/cilium/issues/36047), [@&#8203;cilium-release-bot](https://github.com/cilium-release-bot)\[bot]) - jrajahalme/v1.16 cilium cli ([#&#8203;36541](https://github.com/cilium/cilium/issues/36541), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - Revert "workflows/ipsec: Cover Ingress" ([#&#8203;36116](https://github.com/cilium/cilium/issues/36116), [@&#8203;harsimran-pabla](https://github.com/harsimran-pabla)) #### Docker Manifests ##### cilium `quay.io/cilium/cilium:v1.16.5@&#8203;sha256:758ca0793f5995bb938a2fa219dcce63dc0b3fa7fc4ce5cc851125281fb7361d` `quay.io/cilium/cilium:stable@sha256:758ca0793f5995bb938a2fa219dcce63dc0b3fa7fc4ce5cc851125281fb7361d` ##### clustermesh-apiserver `quay.io/cilium/clustermesh-apiserver:v1.16.5@&#8203;sha256:37a7fdbef806b78ef63df9f1a9828fdddbf548d1f0e43b8eb10a6bdc8fa03958` `quay.io/cilium/clustermesh-apiserver:stable@sha256:37a7fdbef806b78ef63df9f1a9828fdddbf548d1f0e43b8eb10a6bdc8fa03958` ##### docker-plugin `quay.io/cilium/docker-plugin:v1.16.5@&#8203;sha256:d6b4ed076ae921535c2a543d4b5b63af474288ee4501653a1f442c935beb5768` `quay.io/cilium/docker-plugin:stable@sha256:d6b4ed076ae921535c2a543d4b5b63af474288ee4501653a1f442c935beb5768` ##### hubble-relay `quay.io/cilium/hubble-relay:v1.16.5@&#8203;sha256:6cfae1d1afa566ba941f03d4d7e141feddd05260e5cd0a1509aba1890a45ef00` `quay.io/cilium/hubble-relay:stable@sha256:6cfae1d1afa566ba941f03d4d7e141feddd05260e5cd0a1509aba1890a45ef00` ##### operator-alibabacloud `quay.io/cilium/operator-alibabacloud:v1.16.5@&#8203;sha256:c0edf4c8d089e76d6565d3c57128b98bc6c73d14bb4590126ee746aeaedba5e0` `quay.io/cilium/operator-alibabacloud:stable@sha256:c0edf4c8d089e76d6565d3c57128b98bc6c73d14bb4590126ee746aeaedba5e0` ##### operator-aws `quay.io/cilium/operator-aws:v1.16.5@&#8203;sha256:97e1fe0c2b522583033138eb10c170919d8de49d2788ceefdcff229a92210476` `quay.io/cilium/operator-aws:stable@sha256:97e1fe0c2b522583033138eb10c170919d8de49d2788ceefdcff229a92210476` ##### operator-azure `quay.io/cilium/operator-azure:v1.16.5@&#8203;sha256:265e2b78f572c76b523f91757083ea5f0b9b73b82f2d9714e5a8fb848e4048f9` `quay.io/cilium/operator-azure:stable@sha256:265e2b78f572c76b523f91757083ea5f0b9b73b82f2d9714e5a8fb848e4048f9` ##### operator-generic `quay.io/cilium/operator-generic:v1.16.5@&#8203;sha256:f7884848483bbcd7b1e0ccfd34ba4546f258b460cb4b7e2f06a1bcc96ef88039` `quay.io/cilium/operator-generic:stable@sha256:f7884848483bbcd7b1e0ccfd34ba4546f258b460cb4b7e2f06a1bcc96ef88039` ##### operator `quay.io/cilium/operator:v1.16.5@&#8203;sha256:617896e1b23a2c4504ab2c84f17964e24dade3b5845f733b11847202230ca940` `quay.io/cilium/operator:stable@sha256:617896e1b23a2c4504ab2c84f17964e24dade3b5845f733b11847202230ca940` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuMiIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate added 1 commit 2024-12-18 01:02:36 +01:00
Update Helm release cilium to v1.16.5
All checks were successful
ci/woodpecker/push/yamllint Pipeline was successful
62a81327d4
tom merged commit 28f6bd5c80 into main 2024-12-19 12:24:13 +01:00
tom deleted branch renovate/cilium-1.x 2024-12-19 12:24:13 +01:00
Sign in to join this conversation.
No description provided.