Closed renovate[bot] closed 4 months ago
This PR contains the following updates:
v1.15.1
v1.15.2
v3.24.6
v3.24.7
v3.14.2
v3.14.3
📅 Schedule: Branch creation - "on friday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
v1.15.1->v1.15.2v3.24.6->v3.24.7v3.14.2->v3.14.3Release Notes
cilium/cilium (cilium/cilium)
### [`v1.15.2`](https://togithub.com/cilium/cilium/releases/tag/v1.15.2): 1.15.2 [Compare Source](https://togithub.com/cilium/cilium/compare/1.15.1...1.15.2) We are pleased to release Cilium v1.15.2. This release contains various bug fixes and improvements. ## Summary of Changes **Minor Changes:** - Add default divisor for GOMEMLIMIT to satisfy Argo CD diff (Backport PR [#30997](https://togithub.com/cilium/cilium/issues/30997), Upstream PR [#30635](https://togithub.com/cilium/cilium/issues/30635), [@jdmcmahan](https://togithub.com/jdmcmahan)) - Fixes a bug where ToFQDN IPs may be garbage collected too early, disrupting existing connections. (Backport PR [#31318](https://togithub.com/cilium/cilium/issues/31318), Upstream PR [#31205](https://togithub.com/cilium/cilium/issues/31205), [@squeed](https://togithub.com/squeed)) - Gateway API BackendRef filters support (Backport PR [#30997](https://togithub.com/cilium/cilium/issues/30997), Upstream PR [#30090](https://togithub.com/cilium/cilium/issues/30090), [@chaunceyjiang](https://togithub.com/chaunceyjiang)) **Bugfixes:** - Cilium allows selecting 'lo' as a device again. (Backport PR [#31206](https://togithub.com/cilium/cilium/issues/31206), Upstream PR [#31200](https://togithub.com/cilium/cilium/issues/31200), [@bimmlerd](https://togithub.com/bimmlerd)) - endpoint: fix inability to create endpoint with labels in a single API call (Backport PR [#30997](https://togithub.com/cilium/cilium/issues/30997), Upstream PR [#30170](https://togithub.com/cilium/cilium/issues/30170), [@oblazek](https://togithub.com/oblazek)) - Fix bug in the VTEP feature which caused all traffic from the VTEP to be dropped with "Incorrect VNI from VTEP" (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#31039](https://togithub.com/cilium/cilium/issues/31039), [@joestringer](https://togithub.com/joestringer)) - Fix bug prevented endpoints from sending or receiving network traffic due to the 'reserved:init' label persisting after initialization. (Backport PR [#31047](https://togithub.com/cilium/cilium/issues/31047), Upstream PR [#30909](https://togithub.com/cilium/cilium/issues/30909), [@aanm](https://togithub.com/aanm)) - Fix GC interval calculation by taking into account the actual time passed between GC runs. (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#28657](https://togithub.com/cilium/cilium/issues/28657), [@gentoo-root](https://togithub.com/gentoo-root)) - Fix host firewall policy enforcement for pod to node traffic when tunneling is enabled and KPR is disabled (Backport PR [#30997](https://togithub.com/cilium/cilium/issues/30997), Upstream PR [#30818](https://togithub.com/cilium/cilium/issues/30818), [@giorio94](https://togithub.com/giorio94)) - Fix the referenced interface in iptables rules (`eni+` instead of `lxc+`) when `--enable-endpoint-routes=true` and `--cni-chaining-mode="aws-cni"` (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#30766](https://togithub.com/cilium/cilium/issues/30766), [@pippolo84](https://togithub.com/pippolo84)) - Fixes an IPv6 issue that cilium doesn't respond to Neighbor Solicitation targeting the pods on same node. (Backport PR [#31155](https://togithub.com/cilium/cilium/issues/31155), Upstream PR [#30837](https://togithub.com/cilium/cilium/issues/30837), [@jschwinger233](https://togithub.com/jschwinger233)) - Fixes proxy issues by opting out from SNAT for L7 + Tunnel. (Backport PR [#31158](https://togithub.com/cilium/cilium/issues/31158), Upstream PR [#29594](https://togithub.com/cilium/cilium/issues/29594), [@jschwinger233](https://togithub.com/jschwinger233)) - Fixes proxy issues in egress direction (Backport PR [#31158](https://togithub.com/cilium/cilium/issues/31158), Upstream PR [#30095](https://togithub.com/cilium/cilium/issues/30095), [@jschwinger233](https://togithub.com/jschwinger233)) - Fixes some valid GC entries being removed at agent restart (Backport PR [#30863](https://togithub.com/cilium/cilium/issues/30863), Upstream PR [#29696](https://togithub.com/cilium/cilium/issues/29696), [@rsafonseca](https://togithub.com/rsafonseca)) - gateway-api: Correct the null check for GRPRRoute Match (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#31052](https://togithub.com/cilium/cilium/issues/31052), [@sayboras](https://togithub.com/sayboras)) - helm: Probe Envoy DaemonSet localhost IP directly (Backport PR [#30997](https://togithub.com/cilium/cilium/issues/30997), Upstream PR [#30970](https://togithub.com/cilium/cilium/issues/30970), [@iandrewt](https://togithub.com/iandrewt)) - hubble: fix parsing of invalid HTTP URLs (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#31100](https://togithub.com/cilium/cilium/issues/31100), [@kaworu](https://togithub.com/kaworu)) - srv6: Fix packet drop with GSO type mismatch (Backport PR [#30799](https://togithub.com/cilium/cilium/issues/30799), Upstream PR [#30732](https://togithub.com/cilium/cilium/issues/30732), [@YutaroHayakawa](https://togithub.com/YutaroHayakawa)) - statedb: Fix race between Observable and DB stopping (Backport PR [#30863](https://togithub.com/cilium/cilium/issues/30863), Upstream PR [#30816](https://togithub.com/cilium/cilium/issues/30816), [@joamaki](https://togithub.com/joamaki)) - xds: Avoid xds timeout due to agent restart in envoy DS mode (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#31061](https://togithub.com/cilium/cilium/issues/31061), [@sayboras](https://togithub.com/sayboras)) **CI Changes:** - ci/ipsec: Fix downgrade version retrieval (Backport PR [#31047](https://togithub.com/cilium/cilium/issues/31047), Upstream PR [#30742](https://togithub.com/cilium/cilium/issues/30742), [@qmonnet](https://togithub.com/qmonnet)) - ci: Enhance test execution security by restricting permissions to the 'organization-members' team (Backport PR [#30863](https://togithub.com/cilium/cilium/issues/30863), Upstream PR [#30790](https://togithub.com/cilium/cilium/issues/30790), [@brlbil](https://togithub.com/brlbil)) - CI: Update tested K8S versions across all cloud providers (Backport PR [#30863](https://togithub.com/cilium/cilium/issues/30863), Upstream PR [#30795](https://togithub.com/cilium/cilium/issues/30795), [@brlbil](https://togithub.com/brlbil)) - Fix datapath mode in Network Performance CI test (Backport PR [#30863](https://togithub.com/cilium/cilium/issues/30863), Upstream PR [#30756](https://togithub.com/cilium/cilium/issues/30756), [@marseel](https://togithub.com/marseel)) - Prevent E2E tests from failing on a known-ok warning log of temporary CRD failure (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#30778](https://togithub.com/cilium/cilium/issues/30778), [@learnitall](https://togithub.com/learnitall)) **Misc Changes:** - bgpv1: Remove disruptive error handling from BGPRouterManager ([#30735](https://togithub.com/cilium/cilium/issues/30735), [@YutaroHayakawa](https://togithub.com/YutaroHayakawa)) - bgpv1: Remove or downgrade noisy logs (Backport PR [#30997](https://togithub.com/cilium/cilium/issues/30997), Upstream PR [#30868](https://togithub.com/cilium/cilium/issues/30868), [@YutaroHayakawa](https://togithub.com/YutaroHayakawa)) - bitlpm: Factor out common code (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#31026](https://togithub.com/cilium/cilium/issues/31026), [@jrajahalme](https://togithub.com/jrajahalme)) - bpf: host: optimize from-host's ICMPv6 path (Backport PR [#31155](https://togithub.com/cilium/cilium/issues/31155), Upstream PR [#31127](https://togithub.com/cilium/cilium/issues/31127), [@julianwiedmann](https://togithub.com/julianwiedmann)) - bpf: host: skip from-proxy handling in from-netdev (Backport PR [#31158](https://togithub.com/cilium/cilium/issues/31158), Upstream PR [#29962](https://togithub.com/cilium/cilium/issues/29962), [@julianwiedmann](https://togithub.com/julianwiedmann)) - bugtool: Capture memory fragmentation info from /proc (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#30966](https://togithub.com/cilium/cilium/issues/30966), [@pchaigno](https://togithub.com/pchaigno)) - Bump google.golang.org/protobuf (v1.15) ([#31319](https://togithub.com/cilium/cilium/issues/31319), [@ferozsalam](https://togithub.com/ferozsalam)) - Change ariane config CODEOWNERS (Backport PR [#30863](https://togithub.com/cilium/cilium/issues/30863), Upstream PR [#30803](https://togithub.com/cilium/cilium/issues/30803), [@brlbil](https://togithub.com/brlbil)) - chore(deps): update actions/download-artifact action to v4.1.3 (v1.15) ([#30986](https://togithub.com/cilium/cilium/issues/30986), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update all github action dependencies (v1.15) ([#30951](https://togithub.com/cilium/cilium/issues/30951), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update all github action dependencies (v1.15) ([#31113](https://togithub.com/cilium/cilium/issues/31113), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update all github action dependencies (v1.15) ([#31290](https://togithub.com/cilium/cilium/issues/31290), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update all github action dependencies (v1.15) (patch) ([#30780](https://togithub.com/cilium/cilium/issues/30780), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update all github action dependencies (v1.15) (patch) ([#31133](https://togithub.com/cilium/cilium/issues/31133), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update all github action dependencies to v4 (v1.15) (major) ([#30781](https://togithub.com/cilium/cilium/issues/30781), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update all kind-images main (v1.15) ([#30851](https://togithub.com/cilium/cilium/issues/30851), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update all-dependencies (v1.15) ([#30949](https://togithub.com/cilium/cilium/issues/30949), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update all-dependencies (v1.15) ([#31287](https://togithub.com/cilium/cilium/issues/31287), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.15.23 (v1.15) ([#30860](https://togithub.com/cilium/cilium/issues/30860), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.16.0 (v1.15) ([#31172](https://togithub.com/cilium/cilium/issues/31172), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.21.7 docker digest to [`549dd88`](https://togithub.com/cilium/cilium/commit/549dd88) (v1.15) ([#30855](https://togithub.com/cilium/cilium/issues/30855), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update docker.io/library/ubuntu:22.04 docker digest to [`f9d633f`](https://togithub.com/cilium/cilium/commit/f9d633f) (v1.15) ([#30738](https://togithub.com/cilium/cilium/issues/30738), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update go to v1.21.7 (v1.15) (patch) ([#30672](https://togithub.com/cilium/cilium/issues/30672), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update go to v1.21.8 (v1.15) ([#31183](https://togithub.com/cilium/cilium/issues/31183), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update hubble cli to v0.13.2 (v1.15) ([#31338](https://togithub.com/cilium/cilium/issues/31338), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update stable lvh-images (v1.15) (patch) ([#30652](https://togithub.com/cilium/cilium/issues/30652), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update stable lvh-images (v1.15) (patch) ([#31134](https://togithub.com/cilium/cilium/issues/31134), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update stable lvh-images (v1.15) (patch) ([#31288](https://togithub.com/cilium/cilium/issues/31288), [@renovate](https://togithub.com/renovate)\[bot]) - chore(deps): update stable lvh-images to v6.6-20240221.111541 (v1.15) ([#30977](https://togithub.com/cilium/cilium/issues/30977), [@renovate](https://togithub.com/renovate)\[bot]) - CODEOWNERS: Ensure gha review for actions ([#31139](https://togithub.com/cilium/cilium/issues/31139), [@joestringer](https://togithub.com/joestringer)) - container/bitlpm: Add Lookup Boolean Return Value (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#31037](https://togithub.com/cilium/cilium/issues/31037), [@nathanjsweet](https://togithub.com/nathanjsweet)) - docs: Fix 'kubectl exec' invocations (quotes, double dash separator) in example script kafka-sw-gen-traffic.sh (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#30462](https://togithub.com/cilium/cilium/issues/30462), [@saintdle](https://togithub.com/saintdle)) - docs: kpr: DSR-Geneve with native-routing requires tunnelProtocol (Backport PR [#30997](https://togithub.com/cilium/cilium/issues/30997), Upstream PR [#30854](https://togithub.com/cilium/cilium/issues/30854), [@julianwiedmann](https://togithub.com/julianwiedmann)) - docs: update note on WireGuard with tunnel routing (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#31083](https://togithub.com/cilium/cilium/issues/31083), [@julianwiedmann](https://togithub.com/julianwiedmann)) - images: bump cni plugins to v1.4.1 ([#31348](https://togithub.com/cilium/cilium/issues/31348), [@aanm](https://togithub.com/aanm)) - lbipam: copy slice before modification in (\*LBIPAM).handlePoolModified (Backport PR [#30997](https://togithub.com/cilium/cilium/issues/30997), Upstream PR [#30859](https://togithub.com/cilium/cilium/issues/30859), [@tklauser](https://togithub.com/tklauser)) - loader: also populate NATIVE_DEV_IFINDEX for cilium_overlay (Backport PR [#31154](https://togithub.com/cilium/cilium/issues/31154), Upstream PR [#31025](https://togithub.com/cilium/cilium/issues/31025), [@julianwiedmann](https://togithub.com/julianwiedmann)) - pkg: Add Bitwise LPM Trie Library (Backport PR [#30863](https://togithub.com/cilium/cilium/issues/30863), Upstream PR [#29717](https://togithub.com/cilium/cilium/issues/29717), [@nathanjsweet](https://togithub.com/nathanjsweet)) - slices: don't modify input slices in test (Backport PR [#30997](https://togithub.com/cilium/cilium/issues/30997), Upstream PR [#30677](https://togithub.com/cilium/cilium/issues/30677), [@tklauser](https://togithub.com/tklauser)) - v1.15: Remove cilium/build from codeowners ([#31210](https://togithub.com/cilium/cilium/issues/31210), [@joestringer](https://togithub.com/joestringer)) **Other Changes:** - \[v1.15] envoy: Bump golang version to 1.21.8 ([#31221](https://togithub.com/cilium/cilium/issues/31221), [@sayboras](https://togithub.com/sayboras)) - bgpv1: Disable PodCIDR Reconciler for unsupported IPAM modes ([#31354](https://togithub.com/cilium/cilium/issues/31354), [@YutaroHayakawa](https://togithub.com/YutaroHayakawa)) - cli: Replace --cluster-name with --helm-set cluster.name ([#31176](https://togithub.com/cilium/cilium/issues/31176), [@michi-covalent](https://togithub.com/michi-covalent)) - install: Update image digests for v1.15.1 ([#30777](https://togithub.com/cilium/cilium/issues/30777), [@michi-covalent](https://togithub.com/michi-covalent)) - Upgrade GoBGP to v3.23.0 ([#30792](https://togithub.com/cilium/cilium/issues/30792), [@YutaroHayakawa](https://togithub.com/YutaroHayakawa)) - v1.15 envoy: Avoid duplicated upstream callback ([#30942](https://togithub.com/cilium/cilium/issues/30942), [@sayboras](https://togithub.com/sayboras)) - v1.15: WG L7 ([#31266](https://togithub.com/cilium/cilium/issues/31266), [@brb](https://togithub.com/brb))github/codeql-action (github/codeql-action)
### [`v3.24.7`](https://togithub.com/github/codeql-action/compare/v3.24.6...v3.24.7) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.24.6...v3.24.7)helm/helm (helm/helm)
### [`v3.14.3`](https://togithub.com/helm/helm/compare/v3.14.2...v3.14.3) [Compare Source](https://togithub.com/helm/helm/compare/v3.14.2...v3.14.3)Configuration
📅 Schedule: Branch creation - "on friday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.