Update image quay.io/cilium/charts/cilium (1.19.6 ➔ 1.20.0) - #2277
Merged
Conversation
Contributor
Author
konflate — summaryNote +0 added · 8 changed · −0 removed — 8 resources · 2 apps Warning ⚠ Caution
Image changes
konflate · rendered |
github-actions
Bot
added
area/bootstrap
area/kubernetes
Contributor
Author
HelmRelease diff@@ data.cilium-dashboard.json @@
# v1/ConfigMap/kube-system/cilium-dashboard
! ± value change in multiline text (one insert, one deletion)
{
"annotations": {
"list": [
{
[8243 lines unchanged)]
"datasource": {
"type": "prometheus",
"uid": "${DS_PROMETHEUS}"
},
- "expr": "sum(cilium_policy_change_total{k8s_app=\"cilium\", pod=~\"$pod\", outcome=\"fail\"}) by (pod)",
+ "expr": "sum(cilium_policy_change_total{k8s_app=\"cilium\", pod=~\"$pod\", outcome=\"failure\"}) by (pod)",
"format": "time_series",
"intervalFactor": 1,
"legendFormat": "policy change errors",
"refId": "D"
[2948 lines unchanged)]
"uid": "vtuWtdumz",
"version": 1,
"weekStart": ""
}
@@ data @@
# v1/ConfigMap/kube-system/cilium-config
! + nine map entries added:
+ clustermesh-default-global-namespace: "true"
+ datapath-plugins-state-dir: /var/run/cilium/plugins
+ devices:
+ enable-datapath-plugins: "false"
+ enable-dynamic-source-lookup-nodeport: "false"
+ envoy-access-log-enabled: "true"
+ envoy-node-locality-enabled: "false"
+ envoy-xds-mode: ads
+ proxy-cluster-max-pending-requests: "1024"
@@ rules @@
# rbac.authorization.k8s.io/v1/ClusterRole/cilium
! - two list entries removed:
- - resources:
- - namespaces
- - services
- - pods
- - endpoints
- - nodes
- apiGroups:
- -
- verbs:
- - get
- - list
- - watch
- - resources:
- - ciliumloadbalancerippools
- - ciliumbgppeeringpolicies
- - ciliumbgpnodeconfigs
- - ciliumbgpadvertisements
- - ciliumbgppeerconfigs
- - ciliumclusterwideenvoyconfigs
- - ciliumclusterwidenetworkpolicies
- - ciliumegressgatewaypolicies
- - ciliumendpoints
- - ciliumendpointslices
- - ciliumenvoyconfigs
- - ciliumidentities
- - ciliumlocalredirectpolicies
- - ciliumnetworkpolicies
- - ciliumnodes
- - ciliumnodeconfigs
- - ciliumcidrgroups
- - ciliuml2announcementpolicies
- - ciliumpodippools
- apiGroups:
- - cilium.io
- verbs:
- - list
- - watch
! + two list entries added:
+ - resources:
+ - namespaces
+ - services
+ - pods
+ - nodes
+ apiGroups:
+ -
+ verbs:
+ - get
+ - list
+ - watch
+ - resources:
+ - ciliumloadbalancerippools
+ - ciliumbgpnodeconfigs
+ - ciliumbgpadvertisements
+ - ciliumbgppeerconfigs
+ - ciliumclusterwideenvoyconfigs
+ - ciliumclusterwidenetworkpolicies
+ - ciliumegressgatewaypolicies
+ - ciliumendpoints
+ - ciliumendpointslices
+ - ciliumenvoyconfigs
+ - ciliumidentities
+ - ciliumlocalredirectpolicies
+ - ciliumnetworkpolicies
+ - ciliumnodes
+ - ciliumnodeconfigs
+ - ciliumcidrgroups
+ - ciliuml2announcementpolicies
+ - ciliumpodippools
+ - ciliumdatapathplugins
+ apiGroups:
+ - cilium.io
+ verbs:
+ - list
+ - watch
@@ rules @@
# rbac.authorization.k8s.io/v1/ClusterRole/cilium-operator
! - five list entries removed:
- - resources:
- - namespaces
- - secrets
- apiGroups:
- -
- verbs:
- - get
- - list
- - watch
- - resources:
- - services
- - endpoints
- apiGroups:
- -
- verbs:
- - get
- - list
- - watch
- - resources:
- - ciliumendpointslices
- - ciliumenvoyconfigs
- - ciliumbgppeerconfigs
- - ciliumbgpadvertisements
- - ciliumbgpnodeconfigs
- apiGroups:
- - cilium.io
- verbs:
- - create
- - update
- - get
- - list
- - watch
- - delete
- - patch
- - resources:
- - customresourcedefinitions
- apiGroups:
- - apiextensions.k8s.io
- resourceNames:
- - ciliumloadbalancerippools.cilium.io
- - ciliumbgpclusterconfigs.cilium.io
- - ciliumbgppeerconfigs.cilium.io
- - ciliumbgpadvertisements.cilium.io
- - ciliumbgpnodeconfigs.cilium.io
- - ciliumbgpnodeconfigoverrides.cilium.io
- - ciliumclusterwideenvoyconfigs.cilium.io
- - ciliumclusterwidenetworkpolicies.cilium.io
- - ciliumegressgatewaypolicies.cilium.io
- - ciliumendpoints.cilium.io
- - ciliumendpointslices.cilium.io
- - ciliumenvoyconfigs.cilium.io
- - ciliumidentities.cilium.io
- - ciliumlocalredirectpolicies.cilium.io
- - ciliumnetworkpolicies.cilium.io
- - ciliumnodes.cilium.io
- - ciliumnodeconfigs.cilium.io
- - ciliumcidrgroups.cilium.io
- - ciliuml2announcementpolicies.cilium.io
- - ciliumpodippools.cilium.io
- - ciliumgatewayclassconfigs.cilium.io
- verbs:
- - update
- - resources:
- - ciliumloadbalancerippools
- - ciliumpodippools
- - ciliumbgppeeringpolicies
- - ciliumbgpclusterconfigs
- - ciliumbgpnodeconfigoverrides
- - ciliumbgppeerconfigs
- apiGroups:
- - cilium.io
- verbs:
- - get
- - list
- - watch
! + six list entries added:
+ - resources:
+ - namespaces
+ - secrets
+ - serviceaccounts
+ apiGroups:
+ -
+ verbs:
+ - get
+ - list
+ - watch
+ - resources:
+ - services
+ apiGroups:
+ -
+ verbs:
+ - get
+ - list
+ - watch
+ - resources:
+ - ciliumendpointslices
+ - ciliumenvoyconfigs
+ - ciliumbgpclusterconfigs
+ - ciliumbgpnodeconfigoverrides
+ - ciliumbgppeerconfigs
+ - ciliumbgpadvertisements
+ - ciliumbgpnodeconfigs
+ - ciliumcidrgroups
+ apiGroups:
+ - cilium.io
+ verbs:
+ - create
+ - update
+ - get
+ - list
+ - watch
+ - delete
+ - patch
+ - resources:
+ - customresourcedefinitions
+ apiGroups:
+ - apiextensions.k8s.io
+ resourceNames:
+ - ciliumloadbalancerippools.cilium.io
+ - ciliumbgpclusterconfigs.cilium.io
+ - ciliumbgppeerconfigs.cilium.io
+ - ciliumbgpadvertisements.cilium.io
+ - ciliumbgpnodeconfigs.cilium.io
+ - ciliumbgpnodeconfigoverrides.cilium.io
+ - ciliumclusterwideenvoyconfigs.cilium.io
+ - ciliumclusterwidenetworkpolicies.cilium.io
+ - ciliumegressgatewaypolicies.cilium.io
+ - ciliumendpoints.cilium.io
+ - ciliumendpointslices.cilium.io
+ - ciliumenvoyconfigs.cilium.io
+ - ciliumidentities.cilium.io
+ - ciliumlocalredirectpolicies.cilium.io
+ - ciliumnetworkpolicies.cilium.io
+ - ciliumnodes.cilium.io
+ - ciliumnodeconfigs.cilium.io
+ - ciliumcidrgroups.cilium.io
+ - ciliuml2announcementpolicies.cilium.io
+ - ciliumpodippools.cilium.io
+ - ciliumgatewayclassconfigs.cilium.io
+ - ciliumdatapathplugins.cilium.io
+ verbs:
+ - update
+ - resources:
+ - customresourcedefinitions/status
+ apiGroups:
+ - apiextensions.k8s.io
+ resourceNames:
+ - ciliumbgpclusterconfigs.cilium.io
+ - ciliumbgppeerconfigs.cilium.io
+ - ciliumbgpadvertisements.cilium.io
+ - ciliumbgpnodeconfigs.cilium.io
+ - ciliumbgpnodeconfigoverrides.cilium.io
+ verbs:
+ - update
+ - resources:
+ - ciliumloadbalancerippools
+ - ciliumpodippools
+ - ciliumbgppeerconfigs
+ - ciliumdatapathplugins
+ apiGroups:
+ - cilium.io
+ verbs:
+ - get
+ - list
+ - watch
@@ rules @@
# rbac.authorization.k8s.io/v1/Role/kube-system/cilium-operator-ztunnel
! + one list entry added:
+ - resources:
+ - serviceaccounts
+ apiGroups:
+ -
+ verbs:
+ - get
+ - list
+ - watch
@@ spec.template.metadata.annotations.cilium.io/cilium-configmap-checksum @@
# apps/v1/DaemonSet/kube-system/cilium
! ± value change
- d4a5287f9abfd2399b8ab8b3b1439860ae007509deec531a7b4aae89d26b4344
+ 4553669ba77c2a96a61234f0b8d69a1e0421bb08b3dcdb2c802f9b8c7931a30b
@@ spec.template.spec @@
# apps/v1/DaemonSet/kube-system/cilium
! + one map entry added:
+ hostUsers: true
@@ spec.template.spec.containers.cilium-agent.image @@
# apps/v1/DaemonSet/kube-system/cilium
! ± value change
- quay.io/cilium/cilium:v1.19.6@sha256:0df5b2750b64c49843aba1d649e9eaf61467cb0645ad3171db6f6962c095ac92
+ quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa6196045643558f4cc9518a207b9335cb24a0e93
@@ spec.template.spec.initContainers.config.image @@
# apps/v1/DaemonSet/kube-system/cilium
! ± value change
- quay.io/cilium/cilium:v1.19.6@sha256:0df5b2750b64c49843aba1d649e9eaf61467cb0645ad3171db6f6962c095ac92
+ quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa6196045643558f4cc9518a207b9335cb24a0e93
@@ spec.template.spec.initContainers.mount-cgroup.image @@
# apps/v1/DaemonSet/kube-system/cilium
! ± value change
- quay.io/cilium/cilium:v1.19.6@sha256:0df5b2750b64c49843aba1d649e9eaf61467cb0645ad3171db6f6962c095ac92
+ quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa6196045643558f4cc9518a207b9335cb24a0e93
@@ spec.template.spec.initContainers.apply-sysctl-overwrites.image @@
# apps/v1/DaemonSet/kube-system/cilium
! ± value change
- quay.io/cilium/cilium:v1.19.6@sha256:0df5b2750b64c49843aba1d649e9eaf61467cb0645ad3171db6f6962c095ac92
+ quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa6196045643558f4cc9518a207b9335cb24a0e93
@@ spec.template.spec.initContainers.mount-bpf-fs.image @@
# apps/v1/DaemonSet/kube-system/cilium
! ± value change
- quay.io/cilium/cilium:v1.19.6@sha256:0df5b2750b64c49843aba1d649e9eaf61467cb0645ad3171db6f6962c095ac92
+ quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa6196045643558f4cc9518a207b9335cb24a0e93
@@ spec.template.spec.initContainers.clean-cilium-state.image @@
# apps/v1/DaemonSet/kube-system/cilium
! ± value change
- quay.io/cilium/cilium:v1.19.6@sha256:0df5b2750b64c49843aba1d649e9eaf61467cb0645ad3171db6f6962c095ac92
+ quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa6196045643558f4cc9518a207b9335cb24a0e93
@@ spec.template.spec.initContainers.install-cni-binaries.image @@
# apps/v1/DaemonSet/kube-system/cilium
! ± value change
- quay.io/cilium/cilium:v1.19.6@sha256:0df5b2750b64c49843aba1d649e9eaf61467cb0645ad3171db6f6962c095ac92
+ quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa6196045643558f4cc9518a207b9335cb24a0e93
@@ spec.template.metadata.annotations.cilium.io/cilium-configmap-checksum @@
# apps/v1/Deployment/kube-system/cilium-operator
! ± value change
- d4a5287f9abfd2399b8ab8b3b1439860ae007509deec531a7b4aae89d26b4344
+ 4553669ba77c2a96a61234f0b8d69a1e0421bb08b3dcdb2c802f9b8c7931a30b
@@ spec.template.spec @@
# apps/v1/Deployment/kube-system/cilium-operator
! + one map entry added:
+ hostUsers: true
@@ spec.template.spec.containers.cilium-operator.image @@
# apps/v1/Deployment/kube-system/cilium-operator
! ± value change
- quay.io/cilium/operator-generic:v1.19.6@sha256:0db4ca4e06969d8904ee036617795d0e9c3228cf7b8d902ba74fc2bb98d2d665
+ quay.io/cilium/operator-generic:v1.20.0@sha256:80744a8cc7c91c2f9e6347629406844eb35d79b30a732c6d41c15b17232a74f3
Generated for |
Contributor
Author
Kustomization diff@@ spec.ref.tag @@
# source.toolkit.fluxcd.io/v1/OCIRepository/kube-system/cilium
! ± value change
- 1.19.6
+ 1.20.0
Generated for |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.19.6→1.20.0Release Notes
cilium/cilium (quay.io/cilium/charts/cilium)
v1.20.0: 1.20.0Compare Source
🎉 Release Announcement 🎉: We are excited to announce the Cilium 1.20.0 release!
More than 2,660 new commits have landed in this release, supported by a community of over 1,100 contributors and more than 24,800 GitHub stars! 🤩
cilium.io/v2alpha1CiliumNodeConfigAPI, the libnetwork integration, or a custom CNI configuration. See the Upgrade Guide for details.The full changelog can be found here.
Here are some of the highlights:
⛩️ Gateway API
BackendTLSPolicysupport lets operators configure TLS and backend certificate validation for traffic between the gateway and application services. (cilium/cilium#43045, @youngnick)ExternalAuthfilter from GEP-1494. (cilium/cilium#45739, @gauteoh)CiliumGatewayClassConfigcan also overwrite, append or preserve the HTTP Server response header. (cilium/cilium#45924, @arybolovlev; cilium/cilium#47232, @youngnick; cilium/cilium#46764, @xtineskim)CiliumGatewayClassConfigcan disable automatic gRPC-web translation for Gateways that need to pass the original traffic through unchanged. Translation remains enabled by default. (cilium/cilium#45984, @thorn3r)🚠 Networking
bpf.datapathMode=autoto use netkit automatically on supported kernels and fall back to veth on other nodes. The default remains veth. (cilium/cilium#43062, @ajmmm)🌐 IPAM and IP Selection
preferIpv6option applies to both Cilium health probes and Hubble peer communication when IPv4 and IPv6 are available. (cilium/cilium#45447, @tibrezus)🕸️ Services and Cluster Mesh
PreferSameZoneandPreferSameNodetraffic distribution hints. (cilium/cilium#44771, @raphink)service.cilium.io/weightannotation on EndpointSlices. A weight of zero drains new connections while allowing existing connections to continue. (cilium/cilium#46061, @mhofstetter)🔒 Encryption and Network Policy
cluster-meshpolicy entity selects every endpoint across a mesh, making cross-cluster security policies easier to express. (cilium/cilium#46813, @squeed)CiliumCIDRGroupresources, bringing external IP groups into the standard Cilium policy model. (cilium/cilium#44704, @squeed)⚙️ Day 2 Operations and Observability
🌅 Performance and Scale
cilium-cnibinary has been reduced from roughly 77 MB to 16 MB, shrinking both the Cilium image and its footprint on every node. (cilium/cilium#45845, @giorio94)🏠 Community
❤️ Thank You: Cilium 1.20 was made possible by contributors, reviewers and maintainers from across the community, including engineers from Datadog, Google, Microsoft and many other organizations.
To keep up to date with all the latest Cilium releases, join #release 🎉
Docker Manifests
cilium
quay.io/cilium/cilium:v1.20.0@​sha256:383968cd5e8873f7976fa76aa6196045643558f4cc9518a207b9335cb24a0e93quay.io/cilium/cilium:stable@sha256:383968cd5e8873f7976fa76aa6196045643558f4cc9518a207b9335cb24a0e93clustermesh-apiserver
quay.io/cilium/clustermesh-apiserver:v1.20.0@​sha256:c791d0c334d4515d40041b2660d50a1b94b0179ef1d3c120bd350aebc9115e92quay.io/cilium/clustermesh-apiserver:stable@sha256:c791d0c334d4515d40041b2660d50a1b94b0179ef1d3c120bd350aebc9115e92hubble-relay
quay.io/cilium/hubble-relay:v1.20.0@​sha256:2ca16981c7eb98df0ba9c9d18896bb9ca628b5cbd40dc9801339f4741f91ee94quay.io/cilium/hubble-relay:stable@sha256:2ca16981c7eb98df0ba9c9d18896bb9ca628b5cbd40dc9801339f4741f91ee94operator-alibabacloud
quay.io/cilium/operator-alibabacloud:v1.20.0@​sha256:52535dba067abf5b1cce2a666ee3f9430a1682ade3bf11db5f118436e84ad2e9quay.io/cilium/operator-alibabacloud:stable@sha256:52535dba067abf5b1cce2a666ee3f9430a1682ade3bf11db5f118436e84ad2e9operator-aws
quay.io/cilium/operator-aws:v1.20.0@​sha256:a0e50fa611fa3e2e8b1c9521a3e813576034a0b3d626e9c128ac01f8f7dfd0faquay.io/cilium/operator-aws:stable@sha256:a0e50fa611fa3e2e8b1c9521a3e813576034a0b3d626e9c128ac01f8f7dfd0faoperator-azure
quay.io/cilium/operator-azure:v1.20.0@​sha256:4506f8d0c9f2dd187313f71b37a789986c1c1699f59c52973941df9eb5ccae0cquay.io/cilium/operator-azure:stable@sha256:4506f8d0c9f2dd187313f71b37a789986c1c1699f59c52973941df9eb5ccae0coperator-generic
quay.io/cilium/operator-generic:v1.20.0@​sha256:80744a8cc7c91c2f9e6347629406844eb35d79b30a732c6d41c15b17232a74f3quay.io/cilium/operator-generic:stable@sha256:80744a8cc7c91c2f9e6347629406844eb35d79b30a732c6d41c15b17232a74f3operator
quay.io/cilium/operator:v1.20.0@​sha256:5dc67f7a0f1ad0f51813563366885cd8d4ee255cc49a65be5cf45d5e9810d58cquay.io/cilium/operator:stable@sha256:5dc67f7a0f1ad0f51813563366885cd8d4ee255cc49a65be5cf45d5e9810d58cConfiguration
📅 Schedule: (in timezone Europe/London)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate.