feat(container): update image cilium ( 1.19.3 → 1.20.0 ) - #3348
Open
renovate[bot] wants to merge 1 commit into
Open
feat(container): update image cilium ( 1.19.3 → 1.20.0 )#3348renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
|
Path: --- /tmp/tmp.S2NwsAEPSb 2026-08-12 03:55:28.532684043 +0000
+++ /tmp/tmp.WkhqXj7w9S 2026-08-12 03:55:29.322686789 +0000
@@ -6,8 +6,6 @@
name: "cilium-secrets"
annotations:
-
-
---
# Source: cilium/charts/cilium/templates/cilium-agent/serviceaccount.yaml
apiVersion: v1
@@ -57,8 +55,8 @@
name: cilium-ca
namespace: default
data:
- ca.crt: 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
- ca.key: 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
+ ca.crt: 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
+ ca.key: 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
---
# Source: cilium/charts/cilium/templates/hubble/tls-helm/relay-client-secret.yaml
@@ -71,9 +69,9 @@
annotations:
type: kubernetes.io/tls
data:
- ca.crt: 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
- tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURTRENDQWpDZ0F3SUJBZ0lRUVBCTHY2Zkdaa2MrRVZLYlU1aVBQakFOQmdrcWhraUc5dzBCQVFzRkFEQVUKTVJJd0VBWURWUVFERXdsRGFXeHBkVzBnUTBFd0hoY05Nall3T0RFeU1ETTFOVEk0V2hjTk1qY3dPREV5TURNMQpOVEk0V2pBak1TRXdId1lEVlFRRERCZ3FMbWgxWW1Kc1pTMXlaV3hoZVM1amFXeHBkVzB1YVc4d2dnRWlNQTBHCkNTcUdTSWIzRFFFQkFRVUFBNElCRHdBd2dnRUtBb0lCQVFETE9oZGhtakttUVZSNTliSWtadGl6eE5nTk9QK0UKS1Nvb2tQazJSV0dzNVFrUFZ3bm1ieitRbEJUek0vZVgydnY0b0NxbE9lRmpIaFdtcDUrcEpMYkdvU3JtdmwyZwo3ZGdZZXpWb3BOUTc0U0pLL2M2cjVMWlBacCtCcWRvYUMyYlM1YWRMS3R0ZG9iVGY2RUhwbytxUzBpbVhUZ0xXCjBOcnp3NFdBenJ4bWppZzY1VVY2TDBOWFFaS3dDOStrT0lubmpWTUhqcmp0Z3BoVmZIeHFibUIrUGNCYzA4QWgKOXRFZU9nV0VGQVdNM1R5Z20rNUx5RVVsMmtNTjFxeFcwUHF6amZ5cUNKZDdnMkoyR0dHQ1I3RlJncEhRcDVETApENHd2eWoyK1h0RGJHSE52ZW9Nb0dNLzJ0S21jSHlhSXVTODNNeGZnUFczeUN0eGszWkZKNldOL0FnTUJBQUdqCmdZWXdnWU13RGdZRFZSMFBBUUgvQkFRREFnV2dNQjBHQTFVZEpRUVdNQlFHQ0NzR0FRVUZCd01CQmdnckJnRUYKQlFjREFqQU1CZ05WSFJNQkFmOEVBakFBTUI4R0ExVWRJd1FZTUJhQUZQb1ZVTCtsUnVyKzJQUmlWRjdZYkFmdgpURi9JTUNNR0ExVWRFUVFjTUJxQ0dDb3VhSFZpWW14bExYSmxiR0Y1TG1OcGJHbDFiUzVwYnpBTkJna3Foa2lHCjl3MEJBUXNGQUFPQ0FRRUFSOVpSeGltODFPU1RQZ3I5MkVqVmRPbS9XOHB6VmdNelRXbTZKcGZzWVRwNW1FZkgKNm9YcTVGenNocUVYem9lVndXYnU4Z3BybE43YUVMZk1rem5MU0NHTy9oZVVtb3ZoTXZCSGJsRzEwY3laUEE2RQpTYk1zUkFsS2o5NWtnOWVaelZiMUw2VFdYUnNncE5Hd0MxRlJMREdWWG1Ra1JyYmFiUGVQSDQwWFZKeXd5Mzh4CmkxTk16clErbXlpdUpSN3BRWElwVGdRNVhMOENuYW0yZEJHVHlYL1U5Tm9LbXlicVlMYTd5YWE1djAxT3JkNGsKa3RsYk9XeERWZlpwKzRHMTVTVVZnUEZMYVNTVTZwVkxuak1vb0RzNUlpYTF0aGY2Kys1WFNQNWRkeHA4OEg4ZQp3T0g4U0hBZ1dqNm56b3ZXVUJ6L2drQ0FVaGFVVk0vczF4ZFY4UT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
- tls.key: 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
+ ca.crt: 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
+ tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURTRENDQWpDZ0F3SUJBZ0lRTE94VG0wbnMxcENiODRhY0UxUmVwakFOQmdrcWhraUc5dzBCQVFzRkFEQVUKTVJJd0VBWURWUVFERXdsRGFXeHBkVzBnUTBFd0hoY05Nall3T0RFeU1ETTFOVEk1V2hjTk1qY3dPREV5TURNMQpOVEk1V2pBak1TRXdId1lEVlFRRERCZ3FMbWgxWW1Kc1pTMXlaV3hoZVM1amFXeHBkVzB1YVc4d2dnRWlNQTBHCkNTcUdTSWIzRFFFQkFRVUFBNElCRHdBd2dnRUtBb0lCQVFERk5Sd01PR0l5SCt6WCtUZkUwWHBvV1d2NEpRbmkKR1NaS1dhaDJiU0czUWh0R1Fsc2xqZ3c2T3lNVkx2bG5vNTZDaElzY21pQmRmMVNZOHkzSUduZ2xPMzlLbDZEbgovRDlpUjEza2swQzlTUlg0UGR1YmxwS2dCYW04STRKd0FDcDFmU0FxRnpVTnhnVlpXRURNcWU3QllTbm9VN1ZMCkwycGZnOHRiNmlsNEZjOWFpOHZETkY4Q0JjQXl6VmIxekZvUnNSak8yTVhhTWNhYkhJc3NHUUMyazFnMkdNd2QKbHZBOWVuNVJIMGc1UkpGTlVDdGhlSWE3emZJbys1QVdyaWtjZGhFZ3cwamlUR3R6QXBKY3lZUTJ4VmtJSWNaawpNK2pZTmdIWnd6QUpieHRQblkxZlBqVkpMMEJ6YzdNUVRCeThXbzU5ME9DZSt4aTJSd2p4aHkrOUFnTUJBQUdqCmdZWXdnWU13RGdZRFZSMFBBUUgvQkFRREFnV2dNQjBHQTFVZEpRUVdNQlFHQ0NzR0FRVUZCd01CQmdnckJnRUYKQlFjREFqQU1CZ05WSFJNQkFmOEVBakFBTUI4R0ExVWRJd1FZTUJhQUZIeDlQQlFhTVo5VUZQRk96RDgwU2lvYwp2ZENXTUNNR0ExVWRFUVFjTUJxQ0dDb3VhSFZpWW14bExYSmxiR0Y1TG1OcGJHbDFiUzVwYnpBTkJna3Foa2lHCjl3MEJBUXNGQUFPQ0FRRUFRUGE5N3ZGb3RxQnY5enFqVEJoUlREUzczdDA1K0ZwNDRxT1NIWXRSN1FYallENjgKT0JKbjRpZVYrWkV6NTFKZHFkSDBsVm5wSWd3Ylc2cTRzRnlXdC9RWDNVb1A1MWpNOG9jTkx6c1p5K0ZHTnRkVgpPUnVUOEVyQkZySUNKazM5ZUVPd0xLUVVGQktreW9IQkxpOFZTUzF2R2FRb1MwNjlhdXRZYnF6UnVMUE5NWlYzCndqVWdUTEZKOXFCeVFDVTdJQjk5cEhiWm5MbDBnQXJ0ZUIvTFRCamJiQTRoV2NZdmRBeGFEaDJDTERFLzVMcHgKUmpVUHN0MXQwdUtoRXBDbjZ2RHdoSE5FaGRabDJXeVl2Q2NMaWZ3OGJWdDRlSnRzSDhQT3VMNFRlOEIzYVRYbwpWUmFPekVpS05zWjZBVUtaamphU3pEM0pXYTUzMEQ1UlJIY1Rmdz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
+ tls.key: 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
---
# Source: cilium/charts/cilium/templates/hubble/tls-helm/server-secret.yaml
@@ -86,9 +84,9 @@
annotations:
type: kubernetes.io/tls
data:
- ca.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURGRENDQWZ5Z0F3SUJBZ0lSQUxzaWRlRzFKbk84M282MjAyUEpKVkV3RFFZSktvWklodmNOQVFFTEJRQXcKRkRFU01CQUdBMVVFQXhNSlEybHNhWFZ0SUVOQk1CNFhEVEkyTURneE1qQXpOVFV5T0ZvWERUSTVNRGd4TVRBegpOVFV5T0Zvd0ZERVNNQkFHQTFVRUF4TUpRMmxzYVhWdElFTkJNSUlCSWpBTkJna3Foa2lHOXcwQkFRRUZBQU9DCkFROEFNSUlCQ2dLQ0FRRUF6RS80MTZaWDVGVG14YzR1Y3RDc3c5WGhaMWZoRittQUpUZXJQc0RzZXFEeUxIVm4KNk1ndURnbXBGai9nSmNFYWtYMTk0eHRyNTZsNURIT0VPK2x1RTkxbXFOUkJhRnVHSGNTclpkVHBXSitoNFdESApSMUE4ZGtqVTBINzI2ZjRSdTVvOUNCK0h6cXZPNGZMK2JIZlgyVnBXQ1Q2dU8rMXN3VmYzLzZ1T01KeVNrTVJOCnU3U0FjdTNLY21iTko4RkxualZRMFc5SmQvTXEwQjE1c0FYamR3VjFtMGtBaHhyMi9NMU0wVjRkOVlkUS9tL0IKMGo2SkRoTUcrZEhrZ1ZXeFVLSGNlM1R6cm1vQm1mYk8vYUJXNzlLeDRzN2hhWFFQZUpjcmxpb3htR0FNRzI5dApvcVB5dUQ4QXR6cFM0TW5xeWptVHptR3ZuMzNFdGtZdm1sU0JVUUlEQVFBQm8yRXdYekFPQmdOVkhROEJBZjhFCkJBTUNBcVF3SFFZRFZSMGxCQll3RkFZSUt3WUJCUVVIQXdFR0NDc0dBUVVGQndNQ01BOEdBMVVkRXdFQi93UUYKTUFNQkFmOHdIUVlEVlIwT0JCWUVGUG9WVUwrbFJ1cisyUFJpVkY3WWJBZnZURi9JTUEwR0NTcUdTSWIzRFFFQgpDd1VBQTRJQkFRQmtpV3RDdkVLUU81UWNSTmxyNDJQL2hPaHVCS2pUYTE2UWFpWjdyTHUvS0lGQ1k5M0pUT3FTCmdBTjhaMVgxcnVITFpybnpvZTN0Qnl2QnlLQnMyNXRXdllYTWZpUndXUldBNy8yQnZJVmc2aVFkTEdBY0JGWHEKV3FySXNHbHl3ampsU3BsOVFnRVAvbmhldkl0WHJxRVZpSFJvamwvQ3pUSU1NODdENFVESm1PUFhGQnpsNTk2VApBbE9UL2poMDVtY3IwQkE3K3JRRzVLVGYwamlMTGNicTZvYllQVEcrNGE1T1IzZ1o2b1VsYXp0dG9vTCtHY0VUCkIrYzBUbS90bG4zaGo3WHBhSVZFenFlcVJ4WHZrZ2RUWmFUd1JZd0VyY2FTeTNYUTgydU55TTl5U05XS2NHNkoKVS9SZTB3cExDR1JBa3NwVmo3NDZMc0xDejM5ZXBHWUQKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
- tls.crt: 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
- tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFb3dJQkFBS0NBUUVBNldsdXFrbFZEaWt5SktUbTdQc0VtcmRta3V4TDF4VGdYY1RqQzE0SzMwQWJFUEFNClRpWG1kNHJKNFdRaVlMZlpxc0dIQVlzYjNHU1JoeFp3OHk5Um9qeXFFcFBDUnFkTEpJaHJNU3AyU3pGNFA2b3cKOXRxWTFrWU9zek03bVMrVUZWNlBJWnpCQWx5eWxzS2xyUWlSLzh1T09wM1ZzalE2Mk9oakduU1k3VUtPaitPUQppSDJJK2F5d3BHdmUrWEpUR204K292c0pUQXlsdFQrNGtRMldBZSt2Q2JYaXJGVzdpVXB1QU9HWXdvZzlYU0wzCjJDTzRKR1czc2czL2c0UUtPU3Z5QXh3SFRTaFN5RUxESXJ4Mkh1MFFvUUhoOXdXa2ttck5adHM5eVRlRFc4cXgKa3FYZ21tV0xVanFCU1E0Qkw2V2ZURlo1ZENaR2tIZHllVHRZdVFJREFRQUJBb0lCQUJjRU1RZjB0RUR4dWdLWQpDamQ3SjBDVWJqWjF1NkxKYWJpRlpqZ2tQV0UzWXBQZ2YrNGkyWitYSFlJdXpCOEtjaG5lL0krZjVvN3NrZGNtCjFOdCtJb2dqZ0VmVnJ6WWxZQWtKdEx4RDZpZFBDUU1LSnNybzBtSnF4UjlSb1lKaENUSzBRTnY1SjZVeWU5L1cKOE54bnVISG5ZaTZRaXRhSVJQZEhyeUlZTms1SzdpZ1pWZUZzYXZUVVU0M1g1aS9FeG5UL1p0ZlFQOVE2U0lIQgpicHNndjhGakw2VjJhSlhUbXBqVk1OVGVGRFJNZmt4NWpEMlRsdFdaZXYrenpJVm5uQ292Z3hrTkI4b0VrOTluCkQ3REROTXFsb3hTTW92YkI0WUljZ204dFY5dnN6MEVWM1dMUDlpMVg0bTBYNzdkZ2J4NllLOFFrVmNieWRrbjkKWDRZY0Jha0NnWUVBN3U1eTFucHl4ZlBqM1NWSnVhTENRUm55aFhRa3pyVjFoakZ3UkVITFJhdktBWDgyRzBuSApZMjlOcXMvV3BrMlc0eTIrN2hkOWpKK3FjWHkvM1dyVW91R3I0aXNTbjVrZy8wZkpGSklRcHIzNmtpcjBVSEhXCk9QYVdqYldZVzJQeGROUFNJNnNKRDZSYXhrK21TZ2RtUVNRY2lJRUJuTHNXZ2RWdFBReDdpelVDZ1lFQStoWUsKdmxlMTcxd1hJRXkvVDFKcE82b0ViSzV5YXZvRHovTkl3VnJVOGs4dGRlWUEyejNkNC9BK1ZlV0dHZjdlTWduWAo5UnZ4d1dNcXJxNUFqb3lXaXk0VDR3OEkxa2dNWnFmVlp3ZmZCeG0wc0Q5Ync2ZW5vc0FpUTkwOW5VZWk1eVBZCkRZZ0RJeStZK0ZsKzVFWTVnY1dsZWpYOFk3R0xvU1Blb2prWGcvVUNnWUFvMFZ1VkFINHpDeU5XV0ZSci9qNHAKV1FGeGd4SDJybEZSaDRpaVlJc1ZiKyttcWREWWdKWXJpb3crTGh1QmRhZmRUNmRhalhESllVMkE3Y3JwVEtMZQo0S2E0a0pzeDRMc2VZV2tjdG9kWnRRTGxqYWtIUlN0UHQvQ29iT21HVTJDZ2tMOUprS0tQcFloTWNMYjcxcC9GCmFTSG13QU5DZjBPdEVvVUM5T3IyTVFLQmdIQmRVdnB1NGxubm9LUnNsMUNHa0syMEdFVFVwS2dZS1hwWHJ3cmgKU3VpTVZycXdXeFltMS9uQVNlSENQTnlWUFRSeVk4dkhnSG9KbW5YZDZUZWpSMGpGclQzSjFZaWgycUNOTEQ4Ywp0RUsyZEE3MGlNQ0NKYm5rWmdEaitQa2Y1THZCeVNOYlJ6Mlo5enN1eXVxNStzQ3FFMDJ6ei9Eakp2K0I1Rmd6CkdyTzVBb0dCQU9BcDQvTmN5cTVCeE5yY3NDaWRVYUxUdEg0SnorUmpEOHE3K2JmRXkzcEoyTEsrTEk5UUFFTzEKeHlUemZaemhNRlp3N0RZaGpjSXIxQ3dIeFNOZFJJRzh3WjN5alZjTXYzZDVpMzVuNVAzbTQwMXplV2JIaUkybQpTR0RCcW1MRTJHSVNCbDV0WHI1TGJrRkZHbDV5Q3lWR29VejgyU3JPY0dRNHhUSU93SzRYCi0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0tCg==
+ ca.crt: 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
+ tls.crt: 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
+ tls.key: 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
---
# Source: cilium/charts/cilium/templates/cilium-agent/dashboards-configmap.yaml
@@ -16801,7 +16799,7 @@
\ \"expr\":
\"sum(cilium_policy_change_total{k8s_app=\\\"cilium\\\", pod=~\\\"$pod\\\",
- outcome=\\\"fail\\\"}) by (pod)\",
+ outcome=\\\"failure\\\"}) by (pod)\",
\ \"format\": \"time_series\",
@@ -22870,6 +22868,10 @@
bpf-lb-map-max: "65536"
bpf-lb-external-clusterip: "false"
bpf-lb-source-range-all-types: "false"
+ # When Gateway API is enabled this is forced to "true" so per-backend weights
+ # on TCPRoute/UDPRoute take effect (Maglev honors the LB algorithm annotation only
+ # when enabled). Paired with `bpf-lb-sock-hostns-only`, which is forced "true"
+ # for the same reason.
bpf-lb-algorithm-annotation: "false"
bpf-lb-mode-annotation: "false"
@@ -22937,12 +22939,22 @@
enable-local-redirect-policy: "true"
ipv4-native-routing-cidr: 10.42.0.0/16
+ enable-host-firewall: "false"
+ # List of devices used to attach bpf_host.o (implements BPF NodePort,
+ # host-firewall and BPF masquerading)
+ devices: ""
+
kube-proxy-replacement: "true"
kube-proxy-replacement-healthz-bind-address: "0.0.0.0:10256"
enable-no-service-endpoints-routable: "true"
bpf-lb-sock: "false"
+ # When Gateway API is enabled this is forced to "true" so per-backend weights
+ # on TCPRoute/UDPRoute take effect (socket LB stays in the host namespace,
+ # letting the Maglev LB mode apply). Paired with `bpf-lb-mode-annotation`,
+ # which is forced "true" for the same reason.
bpf-lb-sock-hostns-only: "true"
enable-health-check-nodeport: "true"
+ enable-dynamic-source-lookup-nodeport: "false"
enable-health-check-loadbalancer-ip: "false"
node-port-bind-protection: "true"
enable-auto-protect-node-port-range: "true"
@@ -23042,19 +23054,24 @@
proxy-max-concurrent-retries: "128"
proxy-use-original-source-address: "true"
proxy-cluster-max-connections: "1024"
+ proxy-cluster-max-pending-requests: "1024"
proxy-cluster-max-requests: "1024"
http-retry-count: "3"
http-stream-idle-timeout: "300"
+ envoy-node-locality-enabled: "false"
external-envoy-proxy: "true"
envoy-base-id: "0"
+ envoy-access-log-enabled: "true"
envoy-access-log-buffer-size: "4096"
envoy-keep-cap-netbindservice: "false"
+ envoy-xds-mode: "ads"
max-connected-clusters: "255"
clustermesh-cache-ttl: "0s"
clustermesh-enable-endpoint-sync: "false"
clustermesh-enable-mcs-api: "false"
clustermesh-mcs-api-install-crds: "true"
+ clustermesh-default-global-namespace: "true"
policy-default-local-cluster: "true"
nat-map-stats-entries: "32"
@@ -23065,6 +23082,9 @@
enable-dynamic-config: "true"
enable-drift-checker: "true"
+ enable-datapath-plugins: "false"
+ datapath-plugins-state-dir: "/var/run/cilium/plugins"
+
# Extra config allows adding arbitrary properties to the cilium config.
# By putting it at the end of the ConfigMap, it's also possible to override existing properties.
@@ -23078,7 +23098,7 @@
data:
# Keep the key name as bootstrap-config.json to avoid breaking changes
bootstrap-config.json: |
- {"admin":{"address":{"pipe":{"mode":432,"path":"/var/run/cilium/envoy/sockets/admin.sock"}}},"applicationLogConfig":{"logFormat":{"textFormat":"[%Y-%m-%d %T.%e][%t][%l][%n] [%g:%#] %v"}},"bootstrapExtensions":[{"name":"envoy.bootstrap.internal_listener","typedConfig":{"@type":"type.googleapis.com/envoy.extensions.bootstrap.internal_listener.v3.InternalListener"}}],"dynamicResources":{"cdsConfig":{"apiConfigSource":{"apiType":"GRPC","grpcServices":[{"envoyGrpc":{"clusterName":"xds-grpc-cilium"}}],"setNodeOnFirstMessageOnly":true,"transportApiVersion":"V3"},"initialFetchTimeout":"30s","resourceApiVersion":"V3"},"ldsConfig":{"apiConfigSource":{"apiType":"GRPC","grpcServices":[{"envoyGrpc":{"clusterName":"xds-grpc-cilium"}}],"setNodeOnFirstMessageOnly":true,"transportApiVersion":"V3"},"initialFetchTimeout":"30s","resourceApiVersion":"V3"}},"node":{"cluster":"ingress-cluster","id":"host~127.0.0.1~no-id~localdomain"},"overloadManager":{"resourceMonitors":[{"name":"envoy.resource_monitors.global_downstream_max_connections","typedConfig":{"@type":"type.googleapis.com/envoy.extensions.resource_monitors.downstream_connections.v3.DownstreamConnectionsConfig","max_active_downstream_connections":"50000"}}]},"staticResources":{"clusters":[{"circuitBreakers":{"thresholds":[{"maxConnections":1024,"maxRequests":1024,"maxRetries":128}]},"cleanupInterval":"2.500s","connectTimeout":"2s","lbPolicy":"CLUSTER_PROVIDED","name":"ingress-cluster","type":"ORIGINAL_DST","typedExtensionProtocolOptions":{"envoy.extensions.upstreams.http.v3.HttpProtocolOptions":{"@type":"type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions","commonHttpProtocolOptions":{"idleTimeout":"60s","maxConnectionDuration":"0s","maxRequestsPerConnection":0},"useDownstreamProtocolConfig":{}}}},{"circuitBreakers":{"thresholds":[{"maxConnections":1024,"maxRequests":1024,"maxRetries":128}]},"cleanupInterval":"2.500s","connectTimeout":"2s","lbPolicy":"CLUSTER_PROVIDED","name":"egress-cluster-tls","transportSocket":{"name":"cilium.tls_wrapper","typedConfig":{"@type":"type.googleapis.com/cilium.UpstreamTlsWrapperContext"}},"type":"ORIGINAL_DST","typedExtensionProtocolOptions":{"envoy.extensions.upstreams.http.v3.HttpProtocolOptions":{"@type":"type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions","commonHttpProtocolOptions":{"idleTimeout":"60s","maxConnectionDuration":"0s","maxRequestsPerConnection":0},"upstreamHttpProtocolOptions":{},"useDownstreamProtocolConfig":{}}}},{"circuitBreakers":{"thresholds":[{"maxConnections":1024,"maxRequests":1024,"maxRetries":128}]},"cleanupInterval":"2.500s","connectTimeout":"2s","lbPolicy":"CLUSTER_PROVIDED","name":"egress-cluster","type":"ORIGINAL_DST","typedExtensionProtocolOptions":{"envoy.extensions.upstreams.http.v3.HttpProtocolOptions":{"@type":"type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions","commonHttpProtocolOptions":{"idleTimeout":"60s","maxConnectionDuration":"0s","maxRequestsPerConnection":0},"useDownstreamProtocolConfig":{}}}},{"circuitBreakers":{"thresholds":[{"maxConnections":1024,"maxRequests":1024,"maxRetries":128}]},"cleanupInterval":"2.500s","connectTimeout":"2s","lbPolicy":"CLUSTER_PROVIDED","name":"ingress-cluster-tls","transportSocket":{"name":"cilium.tls_wrapper","typedConfig":{"@type":"type.googleapis.com/cilium.UpstreamTlsWrapperContext"}},"type":"ORIGINAL_DST","typedExtensionProtocolOptions":{"envoy.extensions.upstreams.http.v3.HttpProtocolOptions":{"@type":"type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions","commonHttpProtocolOptions":{"idleTimeout":"60s","maxConnectionDuration":"0s","maxRequestsPerConnection":0},"upstreamHttpProtocolOptions":{},"useDownstreamProtocolConfig":{}}}},{"connectTimeout":"2s","loadAssignment":{"clusterName":"xds-grpc-cilium","endpoints":[{"lbEndpoints":[{"endpoint":{"address":{"pipe":{"path":"/var/run/cilium/envoy/sockets/xds.sock"}}}}]}]},"name":"xds-grpc-cilium","type":"STATIC","typedExtensionProtocolOptions":{"envoy.extensions.upstreams.http.v3.HttpProtocolOptions":{"@type":"type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions","explicitHttpConfig":{"http2ProtocolOptions":{}}}}},{"connectTimeout":"2s","loadAssignment":{"clusterName":"/envoy-admin","endpoints":[{"lbEndpoints":[{"endpoint":{"address":{"pipe":{"path":"/var/run/cilium/envoy/sockets/admin.sock"}}}}]}]},"name":"/envoy-admin","type":"STATIC"}],"listeners":[{"address":{"socketAddress":{"address":"0.0.0.0","portValue":9964}},"filterChains":[{"filters":[{"name":"envoy.filters.network.http_connection_manager","typedConfig":{"@type":"type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager","httpFilters":[{"name":"envoy.filters.http.router","typedConfig":{"@type":"type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"}}],"internalAddressConfig":{"cidrRanges":[{"addressPrefix":"10.0.0.0","prefixLen":8},{"addressPrefix":"172.16.0.0","prefixLen":12},{"addressPrefix":"192.168.0.0","prefixLen":16},{"addressPrefix":"127.0.0.1","prefixLen":32}]},"routeConfig":{"virtualHosts":[{"domains":["*"],"name":"prometheus_metrics_route","routes":[{"match":{"prefix":"/metrics"},"name":"prometheus_metrics_route","route":{"cluster":"/envoy-admin","prefixRewrite":"/stats/prometheus"}}]}]},"statPrefix":"envoy-prometheus-metrics-listener","streamIdleTimeout":"300s"}}]}],"name":"envoy-prometheus-metrics-listener"},{"address":{"socketAddress":{"address":"127.0.0.1","portValue":9878}},"filterChains":[{"filters":[{"name":"envoy.filters.network.http_connection_manager","typedConfig":{"@type":"type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager","httpFilters":[{"name":"envoy.filters.http.router","typedConfig":{"@type":"type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"}}],"internalAddressConfig":{"cidrRanges":[{"addressPrefix":"10.0.0.0","prefixLen":8},{"addressPrefix":"172.16.0.0","prefixLen":12},{"addressPrefix":"192.168.0.0","prefixLen":16},{"addressPrefix":"127.0.0.1","prefixLen":32}]},"routeConfig":{"virtual_hosts":[{"domains":["*"],"name":"health","routes":[{"match":{"prefix":"/healthz"},"name":"health","route":{"cluster":"/envoy-admin","prefixRewrite":"/ready"}}]}]},"statPrefix":"envoy-health-listener","streamIdleTimeout":"300s"}}]}],"name":"envoy-health-listener"}]}}
+ {"admin":{"address":{"pipe":{"mode":432,"path":"/var/run/cilium/envoy/sockets/admin.sock"}}},"applicationLogConfig":{"logFormat":{"textFormat":"[%Y-%m-%d %T.%e][%t][%l][%n] [%g:%#] %v"}},"bootstrapExtensions":[{"name":"envoy.bootstrap.internal_listener","typedConfig":{"@type":"type.googleapis.com/envoy.extensions.bootstrap.internal_listener.v3.InternalListener"}}],"dynamicResources":{"adsConfig":{"apiType":"GRPC","grpcServices":[{"envoyGrpc":{"clusterName":"xds-grpc-cilium"}}],"setNodeOnFirstMessageOnly":true,"transportApiVersion":"V3"},"cdsConfig":{"ads":{},"initialFetchTimeout":"30s","resourceApiVersion":"V3"},"ldsConfig":{"ads":{},"initialFetchTimeout":"30s","resourceApiVersion":"V3"}},"node":{"cluster":"ingress-cluster","id":"host~127.0.0.1~no-id~localdomain"},"overloadManager":{"resourceMonitors":[{"name":"envoy.resource_monitors.global_downstream_max_connections","typedConfig":{"@type":"type.googleapis.com/envoy.extensions.resource_monitors.downstream_connections.v3.DownstreamConnectionsConfig","max_active_downstream_connections":"50000"}}]},"staticResources":{"clusters":[{"circuitBreakers":{"thresholds":[{"maxConnections":1024,"maxRequests":1024,"maxRetries":128}]},"cleanupInterval":"2.500s","connectTimeout":"2s","lbPolicy":"CLUSTER_PROVIDED","name":"ingress-cluster","type":"ORIGINAL_DST","typedExtensionProtocolOptions":{"envoy.extensions.upstreams.http.v3.HttpProtocolOptions":{"@type":"type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions","commonHttpProtocolOptions":{"idleTimeout":"60s","maxConnectionDuration":"0s","maxRequestsPerConnection":0},"useDownstreamProtocolConfig":{}}}},{"circuitBreakers":{"thresholds":[{"maxConnections":1024,"maxRequests":1024,"maxRetries":128}]},"cleanupInterval":"2.500s","connectTimeout":"2s","lbPolicy":"CLUSTER_PROVIDED","name":"egress-cluster-tls","transportSocket":{"name":"cilium.tls_wrapper","typedConfig":{"@type":"type.googleapis.com/cilium.UpstreamTlsWrapperContext"}},"type":"ORIGINAL_DST","typedExtensionProtocolOptions":{"envoy.extensions.upstreams.http.v3.HttpProtocolOptions":{"@type":"type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions","commonHttpProtocolOptions":{"idleTimeout":"60s","maxConnectionDuration":"0s","maxRequestsPerConnection":0},"upstreamHttpProtocolOptions":{},"useDownstreamProtocolConfig":{}}}},{"circuitBreakers":{"thresholds":[{"maxConnections":1024,"maxRequests":1024,"maxRetries":128}]},"cleanupInterval":"2.500s","connectTimeout":"2s","lbPolicy":"CLUSTER_PROVIDED","name":"egress-cluster","type":"ORIGINAL_DST","typedExtensionProtocolOptions":{"envoy.extensions.upstreams.http.v3.HttpProtocolOptions":{"@type":"type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions","commonHttpProtocolOptions":{"idleTimeout":"60s","maxConnectionDuration":"0s","maxRequestsPerConnection":0},"useDownstreamProtocolConfig":{}}}},{"circuitBreakers":{"thresholds":[{"maxConnections":1024,"maxRequests":1024,"maxRetries":128}]},"cleanupInterval":"2.500s","connectTimeout":"2s","lbPolicy":"CLUSTER_PROVIDED","name":"ingress-cluster-tls","transportSocket":{"name":"cilium.tls_wrapper","typedConfig":{"@type":"type.googleapis.com/cilium.UpstreamTlsWrapperContext"}},"type":"ORIGINAL_DST","typedExtensionProtocolOptions":{"envoy.extensions.upstreams.http.v3.HttpProtocolOptions":{"@type":"type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions","commonHttpProtocolOptions":{"idleTimeout":"60s","maxConnectionDuration":"0s","maxRequestsPerConnection":0},"upstreamHttpProtocolOptions":{},"useDownstreamProtocolConfig":{}}}},{"circuitBreakers":{"thresholds":[{"maxConnections":1024,"maxRequests":1024,"maxRetries":128}]},"connectTimeout":"2s","loadAssignment":{"clusterName":"xds-grpc-cilium","endpoints":[{"lbEndpoints":[{"endpoint":{"address":{"pipe":{"path":"/var/run/cilium/envoy/sockets/xds.sock"}}}}]}]},"name":"xds-grpc-cilium","type":"STATIC","typedExtensionProtocolOptions":{"envoy.extensions.upstreams.http.v3.HttpProtocolOptions":{"@type":"type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions","explicitHttpConfig":{"http2ProtocolOptions":{}}}}},{"connectTimeout":"2s","loadAssignment":{"clusterName":"/envoy-admin","endpoints":[{"lbEndpoints":[{"endpoint":{"address":{"pipe":{"path":"/var/run/cilium/envoy/sockets/admin.sock"}}}}]}]},"name":"/envoy-admin","type":"STATIC"}],"listeners":[{"address":{"socketAddress":{"address":"0.0.0.0","portValue":9964}},"filterChains":[{"filters":[{"name":"envoy.filters.network.http_connection_manager","typedConfig":{"@type":"type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager","httpFilters":[{"name":"envoy.filters.http.router","typedConfig":{"@type":"type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"}}],"internalAddressConfig":{"cidrRanges":[{"addressPrefix":"10.0.0.0","prefixLen":8},{"addressPrefix":"172.16.0.0","prefixLen":12},{"addressPrefix":"192.168.0.0","prefixLen":16},{"addressPrefix":"127.0.0.1","prefixLen":32}]},"routeConfig":{"virtualHosts":[{"domains":["*"],"name":"prometheus_metrics_route","routes":[{"match":{"prefix":"/metrics"},"name":"prometheus_metrics_route","route":{"cluster":"/envoy-admin","prefixRewrite":"/stats/prometheus"}}]}]},"statPrefix":"envoy-prometheus-metrics-listener","streamIdleTimeout":"300s"}}]}],"name":"envoy-prometheus-metrics-listener"},{"address":{"socketAddress":{"address":"127.0.0.1","portValue":9878}},"filterChains":[{"filters":[{"name":"envoy.filters.network.http_connection_manager","typedConfig":{"@type":"type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager","httpFilters":[{"name":"envoy.filters.http.router","typedConfig":{"@type":"type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"}}],"internalAddressConfig":{"cidrRanges":[{"addressPrefix":"10.0.0.0","prefixLen":8},{"addressPrefix":"172.16.0.0","prefixLen":12},{"addressPrefix":"192.168.0.0","prefixLen":16},{"addressPrefix":"127.0.0.1","prefixLen":32}]},"routeConfig":{"virtual_hosts":[{"domains":["*"],"name":"health","routes":[{"match":{"prefix":"/healthz"},"name":"health","route":{"cluster":"/envoy-admin","prefixRewrite":"/ready"}}]}]},"statPrefix":"envoy-health-listener","streamIdleTimeout":"300s"}}]}],"name":"envoy-health-listener"}]}}
---
# Source: cilium/charts/cilium/templates/cilium-operator/dashboards-configmap.yaml
@@ -38333,7 +38353,6 @@
- namespaces
- services
- pods
- - endpoints
- nodes
verbs:
- get
@@ -38371,6 +38390,7 @@
- ciliumcidrgroups
- ciliuml2announcementpolicies
- ciliumpodippools
+ - ciliumdatapathplugins
verbs:
- list
- watch
@@ -38479,6 +38499,7 @@
# to check apiserver connectivity
- namespaces
- secrets
+ - serviceaccounts
verbs:
- get
- list
@@ -38488,22 +38509,23 @@
resources:
# to perform the translation of a CNP that contains `ToGroup` to its endpoints
- services
- - endpoints
verbs:
- get
- list
- watch
- apiGroups:
+ # Watch CNP / CCNPs for validation and external groups.
- cilium.io
resources:
- ciliumnetworkpolicies
- ciliumclusterwidenetworkpolicies
verbs:
- # Create auto-generated CNPs and CCNPs from Policies that have 'toGroups'
+ # Create auto-generated CNPs and CCNPs from Policies that have 'toGroups'.
+ # This was removed in v1.20, but we must keep the permissions until v1.21 for
+ # upgrade phasing.
- create
- update
- deletecollection
- # To update the status of the CNPs and CCNPs
- patch
- get
- list
@@ -38514,7 +38536,7 @@
- ciliumnetworkpolicies/status
- ciliumclusterwidenetworkpolicies/status
verbs:
- # Update the auto-generated CNPs and CCNPs status.
+ # Set validity status on CNP / CCNP.
- patch
- update
- apiGroups:
@@ -38556,9 +38578,12 @@
resources:
- ciliumendpointslices
- ciliumenvoyconfigs
+ - ciliumbgpclusterconfigs
+ - ciliumbgpnodeconfigoverrides
- ciliumbgppeerconfigs
- ciliumbgpadvertisements
- ciliumbgpnodeconfigs
+ - ciliumcidrgroups
verbs:
- create
- update
@@ -38611,14 +38636,26 @@
- ciliuml2announcementpolicies.cilium.io
- ciliumpodippools.cilium.io
- ciliumgatewayclassconfigs.cilium.io
+ - ciliumdatapathplugins.cilium.io
+ - apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions/status
+ verbs:
+ - update
+ resourceNames:
+ - ciliumbgpclusterconfigs.cilium.io
+ - ciliumbgppeerconfigs.cilium.io
+ - ciliumbgpadvertisements.cilium.io
+ - ciliumbgpnodeconfigs.cilium.io
+ - ciliumbgpnodeconfigoverrides.cilium.io
- apiGroups:
- cilium.io
resources:
- ciliumloadbalancerippools
- ciliumpodippools
- - ciliumbgpclusterconfigs
- - ciliumbgpnodeconfigoverrides
- ciliumbgppeerconfigs
+ - ciliumdatapathplugins
verbs:
- get
- list
@@ -38668,7 +38705,6 @@
- ""
resources:
- componentstatuses
- - endpoints
- namespaces
- nodes
- pods
@@ -38822,6 +38858,14 @@
- get
- list
- watch
+ - apiGroups:
+ - ""
+ resources:
+ - serviceaccounts
+ verbs:
+ - get
+ - list
+ - watch
---
# Source: cilium/charts/cilium/templates/cilium-agent/rolebinding.yaml
@@ -39056,8 +39100,8 @@
type: Unconfined
containers:
- name: cilium-agent
- image: "quay.io/cilium/cilium:v1.19.3@sha256:2e61680593cddca8b6c055f6d4c849d87a\
- 26a1c91c7e3b8b56c7fb76ab7b7b10"
+ image: "quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa619604564\
+ 3558f4cc9518a207b9335cb24a0e93"
imagePullPolicy: IfNotPresent
command:
- cilium-agent
@@ -39243,8 +39287,8 @@
initContainers:
- name: config
- image: "quay.io/cilium/cilium:v1.19.3@sha256:2e61680593cddca8b6c055f6d4c849d87a\
- 26a1c91c7e3b8b56c7fb76ab7b7b10"
+ image: "quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa619604564\
+ 3558f4cc9518a207b9335cb24a0e93"
imagePullPolicy: IfNotPresent
command:
- cilium-dbg
@@ -39277,8 +39321,8 @@
# Required to mount cgroup2 filesystem on the underlying Kubernetes node.
# We use nsenter command with host's cgroup and mount namespaces enabled.
- name: mount-cgroup
- image: "quay.io/cilium/cilium:v1.19.3@sha256:2e61680593cddca8b6c055f6d4c849d87a\
- 26a1c91c7e3b8b56c7fb76ab7b7b10"
+ image: "quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa619604564\
+ 3558f4cc9518a207b9335cb24a0e93"
imagePullPolicy: IfNotPresent
env:
- name: CGROUP_ROOT
@@ -39315,8 +39359,8 @@
drop:
- ALL
- name: apply-sysctl-overwrites
- image: "quay.io/cilium/cilium:v1.19.3@sha256:2e61680593cddca8b6c055f6d4c849d87a\
- 26a1c91c7e3b8b56c7fb76ab7b7b10"
+ image: "quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa619604564\
+ 3558f4cc9518a207b9335cb24a0e93"
imagePullPolicy: IfNotPresent
env:
- name: BIN_PATH
@@ -39354,8 +39398,8 @@
# from a privileged container because the mount propagation bidirectional
# only works from privileged containers.
- name: mount-bpf-fs
- image: "quay.io/cilium/cilium:v1.19.3@sha256:2e61680593cddca8b6c055f6d4c849d87a\
- 26a1c91c7e3b8b56c7fb76ab7b7b10"
+ image: "quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa619604564\
+ 3558f4cc9518a207b9335cb24a0e93"
imagePullPolicy: IfNotPresent
args:
- 'mount | grep "/sys/fs/bpf type bpf" || mount -t bpf bpf
@@ -39372,8 +39416,8 @@
mountPath: /sys/fs/bpf
mountPropagation: Bidirectional
- name: clean-cilium-state
- image: "quay.io/cilium/cilium:v1.19.3@sha256:2e61680593cddca8b6c055f6d4c849d87a\
- 26a1c91c7e3b8b56c7fb76ab7b7b10"
+ image: "quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa619604564\
+ 3558f4cc9518a207b9335cb24a0e93"
imagePullPolicy: IfNotPresent
command:
- /init-container.sh
@@ -39423,8 +39467,8 @@
mountPath: /var/run/cilium # wait-for-kube-proxy
# Install the CNI binaries in an InitContainer so we don't have a writable host mount in the agent
- name: install-cni-binaries
- image: "quay.io/cilium/cilium:v1.19.3@sha256:2e61680593cddca8b6c055f6d4c849d87a\
- 26a1c91c7e3b8b56c7fb76ab7b7b10"
+ image: "quay.io/cilium/cilium:v1.20.0@sha256:383968cd5e8873f7976fa76aa619604564\
+ 3558f4cc9518a207b9335cb24a0e93"
imagePullPolicy: IfNotPresent
command:
- "/install-plugin.sh"
@@ -39452,6 +39496,7 @@
automountServiceAccountToken: true
terminationGracePeriodSeconds: 1
hostNetwork: true
+ hostUsers: true
affinity:
podAntiAffinity:
@@ -39465,6 +39510,7 @@
tolerations:
- key: arm64
operator: Exists
+
volumes:
# For sharing configuration between the "config" initContainer and the agent
- name: tmp
@@ -39601,12 +39647,11 @@
securityContext:
appArmorProfile:
type: Unconfined
-
containers:
- name: cilium-envoy
- image: "quay.io/cilium/cilium-envoy:v1.36.6-1776000132-2437d2edeaf4d9b56ef279bd\
- 0d71127440c067aa@sha256:ba0ab8adac082d50d525fd2c5ba096c8facea3a4715\
- 61b7c61c7a5b9c2e0de0d"
+ image: "quay.io/cilium/cilium-envoy:v1.37.5-1782911245-7cffc778c923f68a77954a53\
+ b1a98d6b5353f004@sha256:583057dd4f7d54cd41efff3c413aa0b148ac201f522\
+ e2c3336851fa89c78b039"
imagePullPolicy: IfNotPresent
command:
- /usr/bin/cilium-envoy-starter
@@ -39626,6 +39671,7 @@
periodSeconds: 2
successThreshold: 1
initialDelaySeconds: 5
+ timeoutSeconds: 5
livenessProbe:
httpGet:
host: "127.0.0.1"
@@ -39635,6 +39681,7 @@
periodSeconds: 30
successThreshold: 1
failureThreshold: 10
+ initialDelaySeconds: 0
timeoutSeconds: 5
readinessProbe:
httpGet:
@@ -39645,7 +39692,9 @@
periodSeconds: 30
successThreshold: 1
failureThreshold: 3
+ initialDelaySeconds: 0
timeoutSeconds: 5
+
env:
- name: K8S_NODE_NAME
valueFrom:
@@ -39698,6 +39747,7 @@
automountServiceAccountToken: true
terminationGracePeriodSeconds: 1
hostNetwork: true
+ hostUsers: true
affinity:
nodeAffinity:
@@ -39781,8 +39831,8 @@
type: RuntimeDefault
containers:
- name: cilium-operator
- image: "quay.io/cilium/operator-generic:v1.19.3@sha256:205b09b0ed6accbf9fe688d3\
- 12a9f0fcfc6a316fc081c23fbffb472af5dd62cd"
+ image: "quay.io/cilium/operator-generic:v1.20.0@sha256:80744a8cc7c91c2f9e634762\
+ 9406844eb35d79b30a732c6d41c15b17232a74f3"
imagePullPolicy: IfNotPresent
command:
- cilium-operator-generic
@@ -39849,6 +39899,7 @@
- ALL
terminationMessagePolicy: FallbackToLogsOnError
hostNetwork: true
+ hostUsers: true
restartPolicy: Always
priorityClassName: system-cluster-critical
serviceAccountName: "cilium-operator"
@@ -39864,6 +39915,7 @@
topologyKey: kubernetes.io/hostname
nodeSelector:
kubernetes.io/os: linux
+
tolerations:
- key: node-role.kubernetes.io/control-plane
operator: Exists
@@ -39913,13 +39965,14 @@
capabilities:
drop:
- ALL
+ readOnlyRootFilesystem: true
runAsGroup: 65532
runAsNonRoot: true
runAsUser: 65532
seccompProfile:
type: RuntimeDefault
- image: "quay.io/cilium/hubble-relay:v1.19.3@sha256:5ee21d57b6ef2aa6db67e603a735\
- fdceb162454b352b7335b651456e308f681b"
+ image: "quay.io/cilium/hubble-relay:v1.20.0@sha256:2ca16981c7eb98df0ba9c9d18896\
+ bb9ca628b5cbd40dc9801339f4741f91ee94"
imagePullPolicy: IfNotPresent
command:
- hubble-relay
@@ -39961,6 +40014,8 @@
# Retry more frequently at startup so that it can be considered started more quickly.
periodSeconds: 3
volumeMounts:
+ - name: tmp-volume
+ mountPath: /tmp
- name: config
mountPath: /etc/hubble-relay
readOnly: true
@@ -39984,6 +40039,8 @@
nodeSelector:
kubernetes.io/os: linux
volumes:
+ - name: tmp-volume
+ emptyDir: {}
- name: config
configMap:
name: hubble-relay-config
@@ -40027,14 +40084,17 @@
securityContext:
fsGroup: 1001
runAsGroup: 1001
+ runAsNonRoot: true
runAsUser: 1001
+ seccompProfile:
+ type: RuntimeDefault
priorityClassName:
serviceAccountName: "hubble-ui"
automountServiceAccountToken: true
containers:
- name: frontend
- image: "quay.io/cilium/hubble-ui:v0.13.3@sha256:661d5de7050182d495c6497ff0b007a\
- 7a1e379648e60830dd68c4d78ae21761d"
+ image: "quay.io/cilium/hubble-ui:v0.13.5@sha256:f7d514fc54d784ed6df9d58cf0e9764\
+ 8b143f92b766dd1780ed3fc845bd4c516"
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -40056,9 +40116,12 @@
terminationMessagePolicy: FallbackToLogsOnError
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
- name: backend
- image: "quay.io/cilium/hubble-ui-backend:v0.13.3@sha256:db1454e45dc39ca41fbf7ca\
- d31eec95d99e5b9949c39daaad0fa81ef29d56953"
+ image: "quay.io/cilium/hubble-ui-backend:v0.13.5@sha256:fac0c300ae119274edca11f\
+ d89b1ad23c788792d8bc4ea2ba631c709e8d3c688"
imagePullPolicy: IfNotPresent
env:
- name: EVENTS_SERVER_PORT
@@ -40072,6 +40135,9 @@
terminationMessagePolicy: FallbackToLogsOnError
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
nodeSelector:
kubernetes.io/os: linux
volumes:
@@ -40080,7 +40146,8 @@
name: hubble-ui-nginx
name: hubble-ui-nginx-conf
- name: tmp-dir
- emptyDir: {}
+ emptyDir:
+ sizeLimit: 256Mi
---
# Source: cilium/templates/hubble-ui-route.yaml |
renovate
Bot
force-pushed
the
renovate/cilium-1.x
branch
from
May 22, 2026 21:15
f6cbfdd to
76c62c2
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/cilium-1.x
branch
from
June 16, 2026 18:37
76c62c2 to
303a62c
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/cilium-1.x
branch
2 times, most recently
from
July 20, 2026 20:40
35b8e39 to
ab7117c
Compare
renovate
Bot
force-pushed
the
renovate/cilium-1.x
branch
from
July 29, 2026 15:13
ab7117c to
1e65643
Compare
renovate
Bot
changed the title
| datasource | package | from | to | | ---------- | ---------------------------- | ------ | ------ | | docker | quay.io/cilium/charts/cilium | 1.19.3 | 1.20.0 | Signed-off-by: Roger Rumao <rogerrum@users.noreply.github.com>
renovate
Bot
force-pushed
the
renovate/cilium-1.x
branch
from
August 12, 2026 03:54
1e65643 to
6c64ba5
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.19.3→1.20.0Release Notes
cilium/cilium (cilium)
v1.20.0Compare Source
v1.19.6: 1.19.6Compare Source
Summary of Changes
Minor Changes:
spec.telemetry.accessLogsfield in CiliumGatewayClassConfig. (Backport PR #46933, Upstream PR #46403, @arybolovlev)Bugfixes:
cilium_operator_unmanaged_podsgauge reporting 0 on reconcile cycles where an unmanaged pod is restarted. (Backport PR #46975, Upstream PR #46668, @Suyash1700)service.cilium.io/affinity: "none"incorrectly dropping all remote backends, causing traffic blackhole when no local endpoints exist. (Backport PR #46691, Upstream PR #46635, @mkamadeus)CI Changes:
Misc Changes:
00feed3(v1.19) (#46657, @cilium-renovate[bot])be93311(v1.19) (#46907, @cilium-renovate[bot])cf1189d(v1.19) (#47115, @cilium-renovate[bot])Other Changes:
Docker Manifests
cilium
quay.io/cilium/cilium:v1.19.6@​sha256:0df5b2750b64c49843aba1d649e9eaf61467cb0645ad3171db6f6962c095ac92clustermesh-apiserver
quay.io/cilium/clustermesh-apiserver:v1.19.6@​sha256:accab5fe6ab7134fcd6f916acc9e4c785382a022128ae5495ec4a45fbe18c9a6docker-plugin
quay.io/cilium/docker-plugin:v1.19.6@​sha256:81a8d37e541edfff4016037373853e8e875f1ea0433c58b9ab54b314c305b9echubble-relay
quay.io/cilium/hubble-relay:v1.19.6@​sha256:6782a49e3f28eba015701c4410a5ec7fa096fe9a562f879b4372dbecd827ea44operator-alibabacloud
quay.io/cilium/operator-alibabacloud:v1.19.6@​sha256:031e332cdec61a9ebaca42f044e7e2f5b876ba96ac0ccf1d42acd5954779efafoperator-aws
quay.io/cilium/operator-aws:v1.19.6@​sha256:546d13ac511cf82441b5e9e99e03d0e054b788513ceb1a883e620b8284d5ccc3operator-azure
quay.io/cilium/operator-azure:v1.19.6@​sha256:e555430b7f5e4c407daab1afbec3c431ec016a53f1f1b848f67b9242cd3adeddoperator-generic
quay.io/cilium/operator-generic:v1.19.6@​sha256:0db4ca4e06969d8904ee036617795d0e9c3228cf7b8d902ba74fc2bb98d2d665operator
quay.io/cilium/operator:v1.19.6@​sha256:37e36840be5a0882a9a065b2308859785e960a742aed0aeac794e0ac4aabdf90v1.19.5: 1.19.5Compare Source
Summary of Changes
Minor Changes:
Bugfixes:
nodeSelectorLabelsis enabled to fix CiliumNetworkPolicy withfromNodes/toNodeswithpolicy-default-local-clusterenabled (enabled by default in 1.19+) (Backport PR #46170, Upstream PR #46068, @MrFreezeex)CI Changes:
pull_requesttriggered workflows to ariane (Backport PR #46452, Upstream PR #45363, @nebril)Misc Changes:
0fc1dd3(v1.19) (#46153, @cilium-renovate[bot])11ecd4e(v1.19) (#46277, @cilium-renovate[bot])cd47774(v1.19) (#46137, @cilium-renovate[bot])e1b3ec8(v1.19) (#46007, @cilium-renovate[bot])9532d8c(v1.19) (#46535, @cilium-renovate[bot])cd05a37(v1.19) (#46138, @cilium-renovate[bot])379065f(v1.19) (#46536, @cilium-renovate[bot])ff6756f(v1.19) (#45996, @cilium-renovate[bot])l2podAnnouncements.interfaceHelm value that rendered a configmap key the agent no longer recognises, causing crash-loops when L2 pod announcements were enabled. Users must usel2podAnnouncements.interfacePatterninstead. (Backport PR #46170, Upstream PR #46093, @salamidrus)Other Changes:
Docker Manifests
cilium
quay.io/cilium/cilium:v1.19.5@​sha256:20fbbc14ac20b55a292c0dcda5571bf31cde30a7dbc68c29db3e709390ab0732clustermesh-apiserver
quay.io/cilium/clustermesh-apiserver:v1.19.5@​sha256:5ed9334b2254315740f9e2a8b6645bf69920f79ef14f436931579d2038784f9bdocker-plugin
quay.io/cilium/docker-plugin:v1.19.5@​sha256:4006d5558390120774a5a903a706dfd64089082bd653b7cb45e9e5a93ff4efeahubble-relay
quay.io/cilium/hubble-relay:v1.19.5@​sha256:24409bfa1bca075c92acb26ba4b49cd573d99d68d5370f7cc825078185222a0coperator-alibabacloud
quay.io/cilium/operator-alibabacloud:v1.19.5@​sha256:c9706343dde700804c2f50c09a2f8291797c707d1747fd50f70c939c23747c16operator-aws
quay.io/cilium/operator-aws:v1.19.5@​sha256:b8473618e8d2bf8a610da445c8c37e1d1e8221aecd05989456d87a7588d66707operator-azure
quay.io/cilium/operator-azure:v1.19.5@​sha256:8600299cb121f9df00fd32b93fa74de89ed49dd3a67e3d7301c07325c04c77f8operator-generic
quay.io/cilium/operator-generic:v1.19.5@​sha256:be848a365776e07d0c5a895eda7aec928ddc52a5a1fa2f432fd7a286609e1db4operator
quay.io/cilium/operator:v1.19.5@​sha256:07a25f6a248d77f0c8417d21b5ea5424a81fe551421e4baf04dc79b1360e832ev1.19.4: 1.19.4Compare Source
Summary of Changes
Minor Changes:
--k8s-service-proxy-nameis set,EndpointSlicesare now filtered by theservice.kubernetes.io/service-proxy-namelabel at the watch level, matching howServicesare already filtered, operators with hand-managedEndpointSlicesmust stamp the matching label on those slices. (Backport PR #45755, Upstream PR #45504, @HadrienPatte)Bugfixes:
cilium map listnow displays "unknown" instead of 0 for maps that do not support cache-based entry counting. (Backport PR #45888, Upstream PR #44951, @skymensch)clustermesh.apiserver.tls.auto.method: certmanager(Backport PR #45630, Upstream PR #45576, @owayss)Configuration
📅 Schedule: (in timezone America/Chicago)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.