Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update helm release cilium to v1.14.3 - autoclosed #1

Closed
wants to merge 1 commit into from
Closed

chore(deps): update helm release cilium to v1.14.3 - autoclosed #1

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 27, 2023

Mend Renovate

This PR contains the following updates:

Package Update Change
cilium (source) minor 1.4.3 -> 1.14.3

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

cilium/cilium (cilium)

v1.14.3: 1.14.3

Compare Source

We are pleased to release Cilium v1.14.3. This is bug fix release addressing the recent HTTP/2 Stream Cancellation Attack (CVE-2023-44487) and other bugs:

Summary of Changes

Minor Changes:

Bugfixes:

  • bpf: lxc: support Pod->Service->Pod hairpinning with endpoint routes (Backport PR #​28123, Upstream PR #​27798, @​ti-mo)
  • bpf: overlay: fix missing DBG_DECAP for Inter-Cluster-SNAT (Backport PR #​28494, Upstream PR #​28466, @​julianwiedmann)
  • Change routing-mode and tunnel-protocol based on .Values.tunnel and .Values.routingMode (Backport PR #​28282, Upstream PR #​27841, @​macmiranda)
  • datapath: fix NodePort to remote hostns backend with tunnel config (Backport PR #​28494, Upstream PR #​27323, @​michaelasp)
  • envoy: Sync supported resources to fix not found issue (Backport PR #​28349, Upstream PR #​28272, @​sayboras)
  • Fix a bug that causes pod-to-pod traffic between nodes to be dropped when IPsec is enabled and kube-proxy installed rules in both iptables-nft and iptables-legacy. (Backport PR #​28442, Upstream PR #​28258, @​pchaigno)
  • fix bug: pull skb data in cil_from_netdev path for HIGH_SCALE_IPCACHE mode (Backport PR #​28095, Upstream PR #​27913, @​sofat1989)
  • Fix Gateway API HttpRoute cannot strip path prefix. (Backport PR #​28282, Upstream PR #​28018, @​chaunceyjiang)
  • Fix hubble metric labeling when only directed Source/Destination Ingress/Egress options are specified. (Backport PR #​28095, Upstream PR #​27792, @​marqc)
  • Fix minor bug where the previous Cilium proxy port was not reused (Backport PR #​28127, Upstream PR #​27634, @​christarazi)
  • Fix the trace notification for hairpinned reply traffic, to indicate the correct security identity for the client. (Backport PR #​28282, Upstream PR #​28133, @​julianwiedmann)
  • Fix wrong host and router IP being used for some IPv6 deployments, which was causing various connectivity problems. (Backport PR #​28435, Upstream PR #​28417, @​ti-mo)
  • Fix: Gateway API double slash while stripping path prefix (Backport PR #​28442, Upstream PR #​28294, @​nxy7)
  • Fixes a bug causing panic when counting IPsec keys number via "cilium encrypt status". (Backport PR #​28282, Upstream PR #​27996, @​jschwinger233)
  • fqdn proxy: fix data race by using separate sessionUDPFactories (Backport PR #​28282, Upstream PR #​28163, @​mhofstetter)
  • ipam/multipool: Fix bug where allocator was unable to update CiliumNode (Backport PR #​28095, Upstream PR #​27963, @​gandro)
  • ipcache: fix flapping labels in SelectorCache when reserved:host identity has multiple IPs (Backport PR #​28418, Upstream PR #​28332, @​squeed)
  • Must have port for Service reference (Backport PR #​28282, Upstream PR #​27959, @​chaunceyjiang)
  • pkg/k8s: use a deep copy of CNP in UpdateStatus to avoid race condition (Backport PR #​28494, Upstream PR #​28364, @​aanm)
  • pkg/node: Updates GetIPv6AllocCIDRs() to Properly Return Secondary CIDRs (Backport PR #​28095, Upstream PR #​27855, @​danehans)
  • resource: Fix race condition in handling of Kubernetes object delete event retrying. In the very rare case when an object was created, deleted and re-created with the same name and the handling of the first deletion failed, the handling of delete event may have been retried even though the object was re-created. Only affected features using the Resource-library (LB IPAM, Mutual Auth and ClusterMesh). (Backport PR #​28494, Upstream PR #​27340, @​joamaki)
  • Restore host-stack bypass for pod-to-pod traffic in a configuration with kube-proxy, tunnel routing and per-endpoint routes. (Backport PR #​28095, Upstream PR #​27908, @​julianwiedmann)

CI Changes:

Misc Changes:

Other Changes:

v1.14.2: 1.14.2

Compare Source

We are pleased to release Cilium v1.14.2.

Known IPsec related issues have been fixed. We encourage users to test this release and report any potentially remaining issues.

Summary of Changes

Minor Changes:

Bugfixes:

CI Changes:

Misc Changes:

Other Changes:

v1.14.1: 1.14.1

Compare Source

We are pleased to release Cilium v1.14.1. This release comes with fixes for IPsec, performance and resilience improvements and many CI and doc changes.

Remaining issues on the IPSec stack may cause interrupted connections during key rotations. Users may upgrade to this release only if this is considered acceptable.

Summary of Changes

Minor Changes:

Bugfixes:

  • Fix a bug that affected the health-check feature in Stand-alone L4LB mode. For certain configurations (eg if both IPv4 and IPv6 support is enabled) health-check traffic would not get IPIP-encapsulated. (Backport PR #​27190, Upstream PR #​27015, @​julianwiedmann)
  • Fix a bug that affected the RevDNAT translation of IPv6 packets with extension headers. (Backport PR #​27345, Upstream PR #​27312, @​julianwiedmann)
  • Fix a bug that could cause packet drops of type XfrmOutPolBlock when IPsec is enabled and node are recycled.
  • Fix a bug that could cause IPsec-encrypted packets to be sent to the wrong destination node when node churn is high. (Backport PR #​27238, Upstream PR #​27029, @​pchaigno)
  • Fix agent panic in case malformed objects are retrieved from the kvstore, and improve validation (Backport PR #​27345, Upstream PR #​27237, @​giorio94)
  • Fix bug limiting pod-to-pod network performance under high load when tunneling and IPSec are both enabled. (Backport PR #​27345, Upstream PR #​27168, @​learnitall)
  • Fix bug where startup CIDR restore logic would mishandle reference counting, leading to persistent packet loss to those CIDRs (Backport PR #​27419, Upstream PR #​27327, @​joestringer)
  • Fix generation of the clustermesh config through Helm when kvstoremesh is enabled, and the TLS key/cert pair is manually specified for a given remote cluster (Backport PR #​27238, Upstream PR #​27177, @​giorio94)
  • operator: Adjust CiliumEndpoint gc to account for kvstore mode (Backport PR #​27190, Upstream PR #​25324, @​learnitall)
  • Resolve a deadlock on startup when local redirect policies are used. (Backport PR #​27238, Upstream PR #​27115, @​bimmlerd)

CI Changes:

Misc Changes:

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot requested a review from muhlba91 as a code owner October 27, 2023 14:54
@renovate renovate bot changed the title chore(deps): update helm release cilium to v1.14.3 chore(deps): update helm release cilium to v1.14.3 - autoclosed Oct 27, 2023
@renovate renovate bot closed this Oct 27, 2023
@renovate renovate bot deleted the renovate/cilium-1.x branch October 27, 2023 16:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@muhlba91 muhlba91 Awaiting requested review from muhlba91 muhlba91 is a code owner

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants