Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(helm): update chart cilium to 1.14.3 #1537

Merged
merged 1 commit into from
Oct 22, 2023
Merged

fix(helm): update chart cilium to 1.14.3 #1537

merged 1 commit into from
Oct 22, 2023

Conversation

layla-bot[bot]
Copy link
Contributor

@layla-bot layla-bot bot commented Oct 18, 2023 •
edited
Loading

This PR contains the following updates:

Package Update Change
cilium (source) patch 1.14.2 -> 1.14.3

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

cilium/cilium (cilium)

v1.14.3: 1.14.3

Compare Source

We are pleased to release Cilium v1.14.3. This is bug fix release addressing the recent HTTP/2 Stream Cancellation Attack (CVE-2023-44487) and other bugs:

Summary of Changes

Minor Changes:

Bugfixes:

  • bpf: lxc: support Pod->Service->Pod hairpinning with endpoint routes (Backport PR #​28123, Upstream PR #​27798, @​ti-mo)
  • bpf: overlay: fix missing DBG_DECAP for Inter-Cluster-SNAT (Backport PR #​28494, Upstream PR #​28466, @​julianwiedmann)
  • Change routing-mode and tunnel-protocol based on .Values.tunnel and .Values.routingMode (Backport PR #​28282, Upstream PR #​27841, @​macmiranda)
  • datapath: fix NodePort to remote hostns backend with tunnel config (Backport PR #​28494, Upstream PR #​27323, @​michaelasp)
  • envoy: Sync supported resources to fix not found issue (Backport PR #​28349, Upstream PR #​28272, @​sayboras)
  • Fix a bug that causes pod-to-pod traffic between nodes to be dropped when IPsec is enabled and kube-proxy installed rules in both iptables-nft and iptables-legacy. (Backport PR #​28442, Upstream PR #​28258, @​pchaigno)
  • fix bug: pull skb data in cil_from_netdev path for HIGH_SCALE_IPCACHE mode (Backport PR #​28095, Upstream PR #​27913, @​sofat1989)
  • Fix Gateway API HttpRoute cannot strip path prefix. (Backport PR #​28282, Upstream PR #​28018, @​chaunceyjiang)
  • Fix hubble metric labeling when only directed Source/Destination Ingress/Egress options are specified. (Backport PR #​28095, Upstream PR #​27792, @​marqc)
  • Fix minor bug where the previous Cilium proxy port was not reused (Backport PR #​28127, Upstream PR #​27634, @​christarazi)
  • Fix the trace notification for hairpinned reply traffic, to indicate the correct security identity for the client. (Backport PR #​28282, Upstream PR #​28133, @​julianwiedmann)
  • Fix wrong host and router IP being used for some IPv6 deployments, which was causing various connectivity problems. (Backport PR #​28435, Upstream PR #​28417, @​ti-mo)
  • Fix: Gateway API double slash while stripping path prefix (Backport PR #​28442, Upstream PR #​28294, @​nxy7)
  • Fixes a bug causing panic when counting IPsec keys number via "cilium encrypt status". (Backport PR #​28282, Upstream PR #​27996, @​jschwinger233)
  • fqdn proxy: fix data race by using separate sessionUDPFactories (Backport PR #​28282, Upstream PR #​28163, @​mhofstetter)
  • ipam/multipool: Fix bug where allocator was unable to update CiliumNode (Backport PR #​28095, Upstream PR #​27963, @​gandro)
  • ipcache: fix flapping labels in SelectorCache when reserved:host identity has multiple IPs (Backport PR #​28418, Upstream PR #​28332, @​squeed)
  • Must have port for Service reference (Backport PR #​28282, Upstream PR #​27959, @​chaunceyjiang)
  • pkg/k8s: use a deep copy of CNP in UpdateStatus to avoid race condition (Backport PR #​28494, Upstream PR #​28364, @​aanm)
  • pkg/node: Updates GetIPv6AllocCIDRs() to Properly Return Secondary CIDRs (Backport PR #​28095, Upstream PR #​27855, @​danehans)
  • resource: Fix race condition in handling of Kubernetes object delete event retrying. In the very rare case when an object was created, deleted and re-created with the same name and the handling of the first deletion failed, the handling of delete event may have been retried even though the object was re-created. Only affected features using the Resource-library (LB IPAM, Mutual Auth and ClusterMesh). (Backport PR #​28494, Upstream PR #​27340, @​joamaki)
  • Restore host-stack bypass for pod-to-pod traffic in a configuration with kube-proxy, tunnel routing and per-endpoint routes. (Backport PR #​28095, Upstream PR #​27908, @​julianwiedmann)

CI Changes:

Misc Changes:

Other Changes:

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@layla-bot layla-bot bot requested a review from kashalls as a code owner October 18, 2023 20:06
@github-actions github-actions bot added the area/kubernetes Changes made in the kubernetes directory label Oct 18, 2023
@cloudflare-workers-and-pages
Copy link

Deploying with  Cloudflare Pages  Cloudflare Pages

Latest commit: da37f52
Status: ✅  Deploy successful!
Preview URL: https://06a97c3f.home-cluster.pages.dev
Branch Preview URL: https://renovate-cilium-1-x.home-cluster.pages.dev

View logs

@kashalls kashalls merged commit bf352fe into main Oct 22, 2023
5 checks passed
@layla-bot layla-bot bot deleted the renovate/cilium-1.x branch October 22, 2023 19:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@kashalls kashalls Awaiting requested review from kashalls kashalls is a code owner

Assignees
No one assigned
Labels
area/kubernetes Changes made in the kubernetes directory renovate/helm type/patch
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@kashalls