Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency cilium/cilium to v1.13.16 - autoclosed #96

Merged
merged 1 commit into from
Jun 3, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 3, 2024

Mend Renovate

This PR contains the following updates:

Package Update Change
cilium/cilium patch 1.13.10 -> 1.13.16

Release Notes

cilium/cilium (cilium/cilium)

v1.13.16: 1.13.16

Compare Source

We are pleased to release Cilium v1.13.16.

This release comes with hubble metrics in bugtool, fix for DNS message timeout in proxy, patched memory leak and many more!

Security Advisories

This release addresses following security vulnerabilities:

Summary of Changes

Minor Changes:

  • bugtool: Collect hubble metrics (Backport PR #​31887, Upstream PR #​31533, @​chancez)
  • envoy: Bump go version to 1.21.10 (#​32415, @​sayboras)
  • Fix overlapping keys in agent-side service BPF map cache used for retries. In rare cases this bug may have caused retrying of a failed BPF map update for a services entry to be skipped leading to a missing entry. This may have, for example, adversely affected recovering from a full BPF service map after excess services were removed. (Backport PR #​31887, Upstream PR #​29581, @​xyz-li)

Bugfixes:

CI Changes:

Misc Changes:

Other Changes:

v1.13.15: 1.13.15

Compare Source

We are pleased to announce the release of Cilium v1.13.15.

This release includes a fix to the retry logic in the cilium health controllers, a fix to a race condition when updating L7 LB Services, and a fix for Node ID assignment in BPF maps for very large clusters. In addition, there were a variety of testing enhancements and documentation updates.

Security Advisories

This release addresses a security vulnerability. For more information, see GHSA-j654-3ccm-vfmm

Summary of Changes

Minor Changes:

Bugfixes:

  • cilium-health: Fix broken retry loop in cilium-health-ep controller (Backport PR #​31722, Upstream PR #​31622, @​gandro)
  • Fixed a race condition in service updates for L7 LB. (Backport PR #​31862, Upstream PR #​31744, @​jrajahalme)
  • Fixed issue with assigning 0 nodeID when corresponding bpf map run out of space.
    Potentially it could have impacted connectivity in large clusters (>4k nodes) with IPSec or Mutual Auth enabled.
    Otherwise, it was merely generating unnecessary error log messages. (Backport PR #​31657, Upstream PR #​31380, @​marseel)

CI Changes:

Misc Changes:

Other Changes:

Docker Manifests
cilium

docker.io/cilium/cilium:v1.13.15@​sha256:3d77d6e463ccc462c7574399fe22f6177a6e484bc5c149c76b7d597163253eed
quay.io/cilium/cilium:v1.13.15@​sha256:3d77d6e463ccc462c7574399fe22f6177a6e484bc5c149c76b7d597163253eed

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.13.15@​sha256:9cfdc40a689fc087d19aff4944657ca98df7795ba1836744400f6b77e59e1e5c
quay.io/cilium/clustermesh-apiserver:v1.13.15@​sha256:9cfdc40a689fc087d19aff4944657ca98df7795ba1836744400f6b77e59e1e5c

docker-plugin

docker.io/cilium/docker-plugin:v1.13.15@​sha256:485857b80cb4c726aba7e8c41536db97b0558f05f22dce6f97c8db2c1792cf75
quay.io/cilium/docker-plugin:v1.13.15@​sha256:485857b80cb4c726aba7e8c41536db97b0558f05f22dce6f97c8db2c1792cf75

hubble-relay

docker.io/cilium/hubble-relay:v1.13.15@​sha256:40135c6b0e2034c9f06abfe0c85f7f088ac6ba2c619d5354d4af6179d33b9a1e
quay.io/cilium/hubble-relay:v1.13.15@​sha256:40135c6b0e2034c9f06abfe0c85f7f088ac6ba2c619d5354d4af6179d33b9a1e

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.13.15@​sha256:99c124f199f3cb48c41d43a423144bd9638d68705f347ec2326b34af50291a05
quay.io/cilium/operator-alibabacloud:v1.13.15@​sha256:99c124f199f3cb48c41d43a423144bd9638d68705f347ec2326b34af50291a05

operator-aws

docker.io/cilium/operator-aws:v1.13.15@​sha256:e09044b516be9ce9936253469411618d6790791dbe501829e6062244a24e815a
quay.io/cilium/operator-aws:v1.13.15@​sha256:e09044b516be9ce9936253469411618d6790791dbe501829e6062244a24e815a

operator-azure

docker.io/cilium/operator-azure:v1.13.15@​sha256:ea05ba909b573b4a52731aec36b91a0a582781a48c2ade7719dfbae05c21d268
quay.io/cilium/operator-azure:v1.13.15@​sha256:ea05ba909b573b4a52731aec36b91a0a582781a48c2ade7719dfbae05c21d268

operator-generic

docker.io/cilium/operator-generic:v1.13.15@​sha256:21f6707e99722b41a24e9bf4e24b7e4d00597cc7dbaef6e7588dedbf3b270101
quay.io/cilium/operator-generic:v1.13.15@​sha256:21f6707e99722b41a24e9bf4e24b7e4d00597cc7dbaef6e7588dedbf3b270101

operator

docker.io/cilium/operator:v1.13.15@​sha256:971c9b6294216df668881917132a4a41fcc43fba64315e91ed632f62eab9eac9
quay.io/cilium/operator:v1.13.15@​sha256:971c9b6294216df668881917132a4a41fcc43fba64315e91ed632f62eab9eac9

v1.13.14: 1.13.14

Compare Source

We are pleased to release Cilium v1.13.14.

Security Advisories

This release addresses a security vulnerability. For more information, see GHSA-pwqm-x5x6-5586.

Summary of Changes

Minor Changes:

Bugfixes:

  • Fix a bug where pod label updates are not reflected in endpoint labels in presence of filtered labels. (Backport PR #​31476, Upstream PR #​31395, @​tklauser)
  • Fix bug leading to missed ipcache updates for the CiliumInternalIP when --enable-remote-node-identity=false, and unnecessary ipcache_errors_total metric increase if Cilium operates in kvstore mode. (#​31396, @​giorio94)
  • gateway-api: Retrieve LB service from same namespace (Backport PR #​31496, Upstream PR #​31271, @​sayboras)
  • Handle InvalidParameterValue as well for PD fallback (Backport PR #​31496, Upstream PR #​31016, @​hemanthmalla)
  • Hubble: fix traffic direction and is reply when IPSec is enabled (Backport PR #​31496, Upstream PR #​31211, @​kaworu)
  • k8s/utils: correctly filter out labels in StripPodSpecialLabels (Backport PR #​31476, Upstream PR #​31421, @​tklauser)

CI Changes:

Misc Changes:

Other Changes:

v1.13.13: 1.13.13

Compare Source

We are pleased to release Cilium v1.13.13.

Security Advisories

This patch release addresses security vulnerabilities. See the following security advisories
for details.

IPsec

This patch release includes significant changes for the IPsec stack, to resolve issues for connections that are selected by a L7 Network Policy or a DNS Policy.

Such connections may experience disruption during the upgrade, in particular in configurations with overlay routing mode.

Summary of Changes

Bugfixes:

CI Changes:

Misc Changes:

Other Changes:

v1.13.12: 1.13.12

Compare Source

We are pleased to release Cilium v1.13.12. This release contains various bug fixes and performance / usability improvements.

Summary of Changes

Minor Changes:

Bugfixes:

CI Changes:

Misc Changes:

Other Changes:

v1.13.11: 1.13.11

Compare Source

We are pleased to release Cilium v1.13.11.

This release includes various bugfixes and performance enhancements. The amount of trace events is reduced when monitor aggregation is enabled, allowing to improve pod-to-pod performance with tunneling and IPsec. Other fixes include fixes for DNS proxy, datapath, etc.

Summary of Changes

Minor Changes:

Bugfixes:

  • Cilium DNS proxy can now use the original pod's address as the source address towards the DNS servers (--dnsproxy-enable-transparent-mode). (Backport PR #​30216, Upstream PR #​29239, @​jrajahalme)
  • cilium-preflight: use the k8s node name instead of relying on hostname (Backport PR #​29997, Upstream PR #​29809, @​marseel)
  • Fix and prevent future bugs limiting pod-to-pod network performance under high load when tunneling and IPSec are both enabled. (Backport PR #​29997, Upstream PR #​29616, @​learnitall)
  • iptables: remove logic to control non-existent net.ipv6.ip_early_demux (Backport PR #​30182, Upstream PR #​29310, @​julianwiedmann)
  • nodediscovery: Fix bug where CiliumInternalIP was flapping (Backport PR #​29974, Upstream PR #​29964, @​gandro)
  • Restore host-stack bypass for pod-to-pod traffic in a configuration with kube-proxy, tunnel routing and per-endpoint routes. (Backport PR #​30182, Upstream PR #​27908, @​julianwiedmann)

CI Changes:

Misc Changes:

Other Changes:


Configuration

📅 Schedule: Branch creation - "on monday and friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Signed-off-by: renovate[bot] <bot@renovateapp.com>
@renovate renovate bot requested a review from PhilipSchmid as a code owner June 3, 2024 06:08
@renovate renovate bot changed the title chore(deps): update dependency cilium/cilium to v1.13.16 chore(deps): update dependency cilium/cilium to v1.13.16 - autoclosed Jun 3, 2024
@renovate renovate bot closed this Jun 3, 2024
@renovate renovate bot deleted the renovate/cilium-cilium-1.13.x branch June 3, 2024 06:16
@PhilipSchmid PhilipSchmid restored the renovate/cilium-cilium-1.13.x branch June 3, 2024 06:18
@PhilipSchmid PhilipSchmid reopened this Jun 3, 2024
@PhilipSchmid PhilipSchmid merged commit 780c57d into main Jun 3, 2024
9 of 15 checks passed
@PhilipSchmid PhilipSchmid deleted the renovate/cilium-cilium-1.13.x branch June 3, 2024 06:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant