Update Helm release cilium to v1.15.2 #127

Merged
jahanson merged 1 commit from renovate/patch-cilium into main 2024-03-19 12:16:29 -05:00
Collaborator

This PR contains the following updates:

Package Update Change
cilium (source) patch 1.15.1 -> 1.15.2

Release Notes

cilium/cilium (cilium)

v1.15.2: 1.15.2

Compare Source

We are pleased to release Cilium v1.15.2. This release contains various bug fixes and improvements.

Security Advisories

This patch release addresses security vulnerabilities. See the following security advisories
for details.

IPsec

This patch release includes significant changes for the IPsec stack, to resolve issues for connections that are selected by a L7 Network Policy or a DNS Policy.

Such connections may experience disruption during the upgrade, in particular in configurations with overlay routing mode.

Summary of Changes

Minor Changes:

Bugfixes:

CI Changes:

Misc Changes:

Other Changes:


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [cilium](https://cilium.io/) ([source](https://github.com/cilium/cilium)) | patch | `1.15.1` -> `1.15.2` | --- ### Release Notes <details> <summary>cilium/cilium (cilium)</summary> ### [`v1.15.2`](https://github.com/cilium/cilium/releases/tag/v1.15.2): 1.15.2 [Compare Source](https://github.com/cilium/cilium/compare/1.15.1...1.15.2) We are pleased to release Cilium v1.15.2. This release contains various bug fixes and improvements. ## Security Advisories This patch release addresses security vulnerabilities. See the following security advisories for details. - https://github.com/cilium/cilium/security/advisories/GHSA-68mj-9pjq-mc85 - https://github.com/cilium/cilium/security/advisories/GHSA-j89h-qrvr-xc36 - https://github.com/cilium/cilium/security/advisories/GHSA-v6q2-4qr3-5cw6 ## IPsec This patch release includes significant changes for the IPsec stack, to resolve issues for connections that are selected by a L7 Network Policy or a DNS Policy. Such connections may experience disruption during the upgrade, in particular in configurations with overlay routing mode. ## Summary of Changes **Minor Changes:** - Add default divisor for GOMEMLIMIT to satisfy Argo CD diff (Backport PR [#&#8203;30997](https://github.com/cilium/cilium/issues/30997), Upstream PR [#&#8203;30635](https://github.com/cilium/cilium/issues/30635), [@&#8203;jdmcmahan](https://github.com/jdmcmahan)) - Fixes a bug where ToFQDN IPs may be garbage collected too early, disrupting existing connections. (Backport PR [#&#8203;31318](https://github.com/cilium/cilium/issues/31318), Upstream PR [#&#8203;31205](https://github.com/cilium/cilium/issues/31205), [@&#8203;squeed](https://github.com/squeed)) - Gateway API BackendRef filters support (Backport PR [#&#8203;30997](https://github.com/cilium/cilium/issues/30997), Upstream PR [#&#8203;30090](https://github.com/cilium/cilium/issues/30090), [@&#8203;chaunceyjiang](https://github.com/chaunceyjiang)) **Bugfixes:** - Cilium allows selecting 'lo' as a device again. (Backport PR [#&#8203;31206](https://github.com/cilium/cilium/issues/31206), Upstream PR [#&#8203;31200](https://github.com/cilium/cilium/issues/31200), [@&#8203;bimmlerd](https://github.com/bimmlerd)) - endpoint: fix inability to create endpoint with labels in a single API call (Backport PR [#&#8203;30997](https://github.com/cilium/cilium/issues/30997), Upstream PR [#&#8203;30170](https://github.com/cilium/cilium/issues/30170), [@&#8203;oblazek](https://github.com/oblazek)) - Fix bug in the VTEP feature which caused all traffic from the VTEP to be dropped with "Incorrect VNI from VTEP" (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;31039](https://github.com/cilium/cilium/issues/31039), [@&#8203;joestringer](https://github.com/joestringer)) - Fix bug prevented endpoints from sending or receiving network traffic due to the 'reserved:init' label persisting after initialization. (Backport PR [#&#8203;31047](https://github.com/cilium/cilium/issues/31047), Upstream PR [#&#8203;30909](https://github.com/cilium/cilium/issues/30909), [@&#8203;aanm](https://github.com/aanm)) - Fix GC interval calculation by taking into account the actual time passed between GC runs. (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;28657](https://github.com/cilium/cilium/issues/28657), [@&#8203;gentoo-root](https://github.com/gentoo-root)) - Fix host firewall policy enforcement for pod to node traffic when tunneling is enabled and KPR is disabled (Backport PR [#&#8203;30997](https://github.com/cilium/cilium/issues/30997), Upstream PR [#&#8203;30818](https://github.com/cilium/cilium/issues/30818), [@&#8203;giorio94](https://github.com/giorio94)) - Fix the referenced interface in iptables rules (`eni+` instead of `lxc+`) when `--enable-endpoint-routes=true` and `--cni-chaining-mode="aws-cni"` (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;30766](https://github.com/cilium/cilium/issues/30766), [@&#8203;pippolo84](https://github.com/pippolo84)) - Fixes an IPv6 issue that cilium doesn't respond to Neighbor Solicitation targeting the pods on same node. (Backport PR [#&#8203;31155](https://github.com/cilium/cilium/issues/31155), Upstream PR [#&#8203;30837](https://github.com/cilium/cilium/issues/30837), [@&#8203;jschwinger233](https://github.com/jschwinger233)) - Fixes proxy issues by opting out from SNAT for L7 + Tunnel. (Backport PR [#&#8203;31158](https://github.com/cilium/cilium/issues/31158), Upstream PR [#&#8203;29594](https://github.com/cilium/cilium/issues/29594), [@&#8203;jschwinger233](https://github.com/jschwinger233)) - Fixes proxy issues in egress direction (Backport PR [#&#8203;31158](https://github.com/cilium/cilium/issues/31158), Upstream PR [#&#8203;30095](https://github.com/cilium/cilium/issues/30095), [@&#8203;jschwinger233](https://github.com/jschwinger233)) - Fixes some valid GC entries being removed at agent restart (Backport PR [#&#8203;30863](https://github.com/cilium/cilium/issues/30863), Upstream PR [#&#8203;29696](https://github.com/cilium/cilium/issues/29696), [@&#8203;rsafonseca](https://github.com/rsafonseca)) - gateway-api: Correct the null check for GRPRRoute Match (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;31052](https://github.com/cilium/cilium/issues/31052), [@&#8203;sayboras](https://github.com/sayboras)) - helm: Probe Envoy DaemonSet localhost IP directly (Backport PR [#&#8203;30997](https://github.com/cilium/cilium/issues/30997), Upstream PR [#&#8203;30970](https://github.com/cilium/cilium/issues/30970), [@&#8203;iandrewt](https://github.com/iandrewt)) - hubble: fix parsing of invalid HTTP URLs (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;31100](https://github.com/cilium/cilium/issues/31100), [@&#8203;kaworu](https://github.com/kaworu)) - srv6: Fix packet drop with GSO type mismatch (Backport PR [#&#8203;30799](https://github.com/cilium/cilium/issues/30799), Upstream PR [#&#8203;30732](https://github.com/cilium/cilium/issues/30732), [@&#8203;YutaroHayakawa](https://github.com/YutaroHayakawa)) - statedb: Fix race between Observable and DB stopping (Backport PR [#&#8203;30863](https://github.com/cilium/cilium/issues/30863), Upstream PR [#&#8203;30816](https://github.com/cilium/cilium/issues/30816), [@&#8203;joamaki](https://github.com/joamaki)) - xds: Avoid xds timeout due to agent restart in envoy DS mode (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;31061](https://github.com/cilium/cilium/issues/31061), [@&#8203;sayboras](https://github.com/sayboras)) **CI Changes:** - ci/ipsec: Fix downgrade version retrieval (Backport PR [#&#8203;31047](https://github.com/cilium/cilium/issues/31047), Upstream PR [#&#8203;30742](https://github.com/cilium/cilium/issues/30742), [@&#8203;qmonnet](https://github.com/qmonnet)) - ci: Enhance test execution security by restricting permissions to the 'organization-members' team (Backport PR [#&#8203;30863](https://github.com/cilium/cilium/issues/30863), Upstream PR [#&#8203;30790](https://github.com/cilium/cilium/issues/30790), [@&#8203;brlbil](https://github.com/brlbil)) - CI: Update tested K8S versions across all cloud providers (Backport PR [#&#8203;30863](https://github.com/cilium/cilium/issues/30863), Upstream PR [#&#8203;30795](https://github.com/cilium/cilium/issues/30795), [@&#8203;brlbil](https://github.com/brlbil)) - Fix datapath mode in Network Performance CI test (Backport PR [#&#8203;30863](https://github.com/cilium/cilium/issues/30863), Upstream PR [#&#8203;30756](https://github.com/cilium/cilium/issues/30756), [@&#8203;marseel](https://github.com/marseel)) - Prevent E2E tests from failing on a known-ok warning log of temporary CRD failure (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;30778](https://github.com/cilium/cilium/issues/30778), [@&#8203;learnitall](https://github.com/learnitall)) **Misc Changes:** - bgpv1: Remove disruptive error handling from BGPRouterManager ([#&#8203;30735](https://github.com/cilium/cilium/issues/30735), [@&#8203;YutaroHayakawa](https://github.com/YutaroHayakawa)) - bgpv1: Remove or downgrade noisy logs (Backport PR [#&#8203;30997](https://github.com/cilium/cilium/issues/30997), Upstream PR [#&#8203;30868](https://github.com/cilium/cilium/issues/30868), [@&#8203;YutaroHayakawa](https://github.com/YutaroHayakawa)) - bitlpm: Factor out common code (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;31026](https://github.com/cilium/cilium/issues/31026), [@&#8203;jrajahalme](https://github.com/jrajahalme)) - bpf: host: optimize from-host's ICMPv6 path (Backport PR [#&#8203;31155](https://github.com/cilium/cilium/issues/31155), Upstream PR [#&#8203;31127](https://github.com/cilium/cilium/issues/31127), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - bpf: host: skip from-proxy handling in from-netdev (Backport PR [#&#8203;31158](https://github.com/cilium/cilium/issues/31158), Upstream PR [#&#8203;29962](https://github.com/cilium/cilium/issues/29962), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - bugtool: Capture memory fragmentation info from /proc (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;30966](https://github.com/cilium/cilium/issues/30966), [@&#8203;pchaigno](https://github.com/pchaigno)) - Bump google.golang.org/protobuf (v1.15) ([#&#8203;31319](https://github.com/cilium/cilium/issues/31319), [@&#8203;ferozsalam](https://github.com/ferozsalam)) - Change ariane config CODEOWNERS (Backport PR [#&#8203;30863](https://github.com/cilium/cilium/issues/30863), Upstream PR [#&#8203;30803](https://github.com/cilium/cilium/issues/30803), [@&#8203;brlbil](https://github.com/brlbil)) - chore(deps): update actions/download-artifact action to v4.1.3 (v1.15) ([#&#8203;30986](https://github.com/cilium/cilium/issues/30986), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update all github action dependencies (v1.15) ([#&#8203;30951](https://github.com/cilium/cilium/issues/30951), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update all github action dependencies (v1.15) ([#&#8203;31113](https://github.com/cilium/cilium/issues/31113), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update all github action dependencies (v1.15) ([#&#8203;31290](https://github.com/cilium/cilium/issues/31290), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update all github action dependencies (v1.15) (patch) ([#&#8203;30780](https://github.com/cilium/cilium/issues/30780), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update all github action dependencies (v1.15) (patch) ([#&#8203;31133](https://github.com/cilium/cilium/issues/31133), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update all github action dependencies to v4 (v1.15) (major) ([#&#8203;30781](https://github.com/cilium/cilium/issues/30781), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update all kind-images main (v1.15) ([#&#8203;30851](https://github.com/cilium/cilium/issues/30851), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update all-dependencies (v1.15) ([#&#8203;30949](https://github.com/cilium/cilium/issues/30949), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update all-dependencies (v1.15) ([#&#8203;31287](https://github.com/cilium/cilium/issues/31287), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.15.23 (v1.15) ([#&#8203;30860](https://github.com/cilium/cilium/issues/30860), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.16.0 (v1.15) ([#&#8203;31172](https://github.com/cilium/cilium/issues/31172), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.21.7 docker digest to [`549dd88`](https://github.com/cilium/cilium/commit/549dd88) (v1.15) ([#&#8203;30855](https://github.com/cilium/cilium/issues/30855), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update docker.io/library/ubuntu:22.04 docker digest to [`f9d633f`](https://github.com/cilium/cilium/commit/f9d633f) (v1.15) ([#&#8203;30738](https://github.com/cilium/cilium/issues/30738), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update go to v1.21.7 (v1.15) (patch) ([#&#8203;30672](https://github.com/cilium/cilium/issues/30672), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update go to v1.21.8 (v1.15) ([#&#8203;31183](https://github.com/cilium/cilium/issues/31183), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update hubble cli to v0.13.2 (v1.15) ([#&#8203;31338](https://github.com/cilium/cilium/issues/31338), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update stable lvh-images (v1.15) (patch) ([#&#8203;30652](https://github.com/cilium/cilium/issues/30652), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update stable lvh-images (v1.15) (patch) ([#&#8203;31134](https://github.com/cilium/cilium/issues/31134), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update stable lvh-images (v1.15) (patch) ([#&#8203;31288](https://github.com/cilium/cilium/issues/31288), [@&#8203;renovate](https://github.com/renovate)\[bot]) - chore(deps): update stable lvh-images to v6.6-20240221.111541 (v1.15) ([#&#8203;30977](https://github.com/cilium/cilium/issues/30977), [@&#8203;renovate](https://github.com/renovate)\[bot]) - CODEOWNERS: Ensure gha review for actions ([#&#8203;31139](https://github.com/cilium/cilium/issues/31139), [@&#8203;joestringer](https://github.com/joestringer)) - container/bitlpm: Add Lookup Boolean Return Value (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;31037](https://github.com/cilium/cilium/issues/31037), [@&#8203;nathanjsweet](https://github.com/nathanjsweet)) - docs: Fix 'kubectl exec' invocations (quotes, double dash separator) in example script kafka-sw-gen-traffic.sh (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;30462](https://github.com/cilium/cilium/issues/30462), [@&#8203;saintdle](https://github.com/saintdle)) - docs: kpr: DSR-Geneve with native-routing requires tunnelProtocol (Backport PR [#&#8203;30997](https://github.com/cilium/cilium/issues/30997), Upstream PR [#&#8203;30854](https://github.com/cilium/cilium/issues/30854), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - docs: update note on WireGuard with tunnel routing (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;31083](https://github.com/cilium/cilium/issues/31083), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - images: bump cni plugins to v1.4.1 ([#&#8203;31348](https://github.com/cilium/cilium/issues/31348), [@&#8203;aanm](https://github.com/aanm)) - lbipam: copy slice before modification in (\*LBIPAM).handlePoolModified (Backport PR [#&#8203;30997](https://github.com/cilium/cilium/issues/30997), Upstream PR [#&#8203;30859](https://github.com/cilium/cilium/issues/30859), [@&#8203;tklauser](https://github.com/tklauser)) - loader: also populate NATIVE_DEV_IFINDEX for cilium_overlay (Backport PR [#&#8203;31154](https://github.com/cilium/cilium/issues/31154), Upstream PR [#&#8203;31025](https://github.com/cilium/cilium/issues/31025), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - pkg: Add Bitwise LPM Trie Library (Backport PR [#&#8203;30863](https://github.com/cilium/cilium/issues/30863), Upstream PR [#&#8203;29717](https://github.com/cilium/cilium/issues/29717), [@&#8203;nathanjsweet](https://github.com/nathanjsweet)) - slices: don't modify input slices in test (Backport PR [#&#8203;30997](https://github.com/cilium/cilium/issues/30997), Upstream PR [#&#8203;30677](https://github.com/cilium/cilium/issues/30677), [@&#8203;tklauser](https://github.com/tklauser)) - v1.15: Remove cilium/build from codeowners ([#&#8203;31210](https://github.com/cilium/cilium/issues/31210), [@&#8203;joestringer](https://github.com/joestringer)) **Other Changes:** - \[v1.15] envoy: Bump golang version to 1.21.8 ([#&#8203;31221](https://github.com/cilium/cilium/issues/31221), [@&#8203;sayboras](https://github.com/sayboras)) - bgpv1: Disable PodCIDR Reconciler for unsupported IPAM modes ([#&#8203;31354](https://github.com/cilium/cilium/issues/31354), [@&#8203;YutaroHayakawa](https://github.com/YutaroHayakawa)) - cli: Replace --cluster-name with --helm-set cluster.name ([#&#8203;31176](https://github.com/cilium/cilium/issues/31176), [@&#8203;michi-covalent](https://github.com/michi-covalent)) - install: Update image digests for v1.15.1 ([#&#8203;30777](https://github.com/cilium/cilium/issues/30777), [@&#8203;michi-covalent](https://github.com/michi-covalent)) - Upgrade GoBGP to v3.23.0 ([#&#8203;30792](https://github.com/cilium/cilium/issues/30792), [@&#8203;YutaroHayakawa](https://github.com/YutaroHayakawa)) - v1.15 envoy: Avoid duplicated upstream callback ([#&#8203;30942](https://github.com/cilium/cilium/issues/30942), [@&#8203;sayboras](https://github.com/sayboras)) - v1.15: WG L7 ([#&#8203;31266](https://github.com/cilium/cilium/issues/31266), [@&#8203;brb](https://github.com/brb)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yMzUuNSIsInVwZGF0ZWRJblZlciI6IjM3LjI1Mi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
smeagol-help added 1 commit 2024-03-13 13:01:11 -05:00
jahanson merged commit 5c96ec7311 into main 2024-03-19 12:16:29 -05:00
jahanson deleted branch renovate/patch-cilium 2024-03-19 12:16:29 -05:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: jahanson/theshire#127
No description provided.