Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update dependency cilium/cilium to v1.14.3 #2057

Merged
merged 1 commit into from
Oct 20, 2023
Merged

chore(deps): update dependency cilium/cilium to v1.14.3 #2057

merged 1 commit into from
Oct 20, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 18, 2023

Mend Renovate

This PR contains the following updates:

Package Update Change
cilium/cilium patch v1.14.2 -> v1.14.3

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

cilium/cilium (cilium/cilium)

v1.14.3: 1.14.3

Compare Source

We are pleased to release Cilium v1.14.3. This is bug fix release addressing the recent HTTP/2 Stream Cancellation Attack (CVE-2023-44487) and other bugs:

Summary of Changes

Minor Changes:

Bugfixes:

  • bpf: lxc: support Pod->Service->Pod hairpinning with endpoint routes (Backport PR #​28123, Upstream PR #​27798, @​ti-mo)
  • bpf: overlay: fix missing DBG_DECAP for Inter-Cluster-SNAT (Backport PR #​28494, Upstream PR #​28466, @​julianwiedmann)
  • Change routing-mode and tunnel-protocol based on .Values.tunnel and .Values.routingMode (Backport PR #​28282, Upstream PR #​27841, @​macmiranda)
  • datapath: fix NodePort to remote hostns backend with tunnel config (Backport PR #​28494, Upstream PR #​27323, @​michaelasp)
  • envoy: Sync supported resources to fix not found issue (Backport PR #​28349, Upstream PR #​28272, @​sayboras)
  • Fix a bug that causes pod-to-pod traffic between nodes to be dropped when IPsec is enabled and kube-proxy installed rules in both iptables-nft and iptables-legacy. (Backport PR #​28442, Upstream PR #​28258, @​pchaigno)
  • fix bug: pull skb data in cil_from_netdev path for HIGH_SCALE_IPCACHE mode (Backport PR #​28095, Upstream PR #​27913, @​sofat1989)
  • Fix Gateway API HttpRoute cannot strip path prefix. (Backport PR #​28282, Upstream PR #​28018, @​chaunceyjiang)
  • Fix hubble metric labeling when only directed Source/Destination Ingress/Egress options are specified. (Backport PR #​28095, Upstream PR #​27792, @​marqc)
  • Fix minor bug where the previous Cilium proxy port was not reused (Backport PR #​28127, Upstream PR #​27634, @​christarazi)
  • Fix the trace notification for hairpinned reply traffic, to indicate the correct security identity for the client. (Backport PR #​28282, Upstream PR #​28133, @​julianwiedmann)
  • Fix wrong host and router IP being used for some IPv6 deployments, which was causing various connectivity problems. (Backport PR #​28435, Upstream PR #​28417, @​ti-mo)
  • Fix: Gateway API double slash while stripping path prefix (Backport PR #​28442, Upstream PR #​28294, @​nxy7)
  • Fixes a bug causing panic when counting IPsec keys number via "cilium encrypt status". (Backport PR #​28282, Upstream PR #​27996, @​jschwinger233)
  • fqdn proxy: fix data race by using separate sessionUDPFactories (Backport PR #​28282, Upstream PR #​28163, @​mhofstetter)
  • ipam/multipool: Fix bug where allocator was unable to update CiliumNode (Backport PR #​28095, Upstream PR #​27963, @​gandro)
  • ipcache: fix flapping labels in SelectorCache when reserved:host identity has multiple IPs (Backport PR #​28418, Upstream PR #​28332, @​squeed)
  • Must have port for Service reference (Backport PR #​28282, Upstream PR #​27959, @​chaunceyjiang)
  • pkg/k8s: use a deep copy of CNP in UpdateStatus to avoid race condition (Backport PR #​28494, Upstream PR #​28364, @​aanm)
  • pkg/node: Updates GetIPv6AllocCIDRs() to Properly Return Secondary CIDRs (Backport PR #​28095, Upstream PR #​27855, @​danehans)
  • resource: Fix race condition in handling of Kubernetes object delete event retrying. In the very rare case when an object was created, deleted and re-created with the same name and the handling of the first deletion failed, the handling of delete event may have been retried even though the object was re-created. Only affected features using the Resource-library (LB IPAM, Mutual Auth and ClusterMesh). (Backport PR #​28494, Upstream PR #​27340, @​joamaki)
  • Restore host-stack bypass for pod-to-pod traffic in a configuration with kube-proxy, tunnel routing and per-endpoint routes. (Backport PR #​28095, Upstream PR #​27908, @​julianwiedmann)

CI Changes:

Misc Changes:

Other Changes:

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate
chore(deps): update dependency cilium/cilium to v1.14.3
b219572 
Signed-off-by: renovate[bot] <bot@renovateapp.com>
@renovate renovate bot requested review from a team as code owners October 18, 2023 21:05
@renovate renovate bot added kind/enhancement This would improve or streamline existing functionality. priority/release-blocker This issue will prevent the release of the next version of Cilium. renovate/stop-updating Tell Renovate to stop updating PR labels Oct 18, 2023
@renovate renovate bot requested review from nbusseneau and asauber October 18, 2023 21:05
@renovate renovate bot temporarily deployed to ci October 18, 2023 21:05 Inactive
@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Oct 20, 2023
@nbusseneau nbusseneau merged commit 0245001 into main Oct 20, 2023
19 checks passed
@nbusseneau nbusseneau deleted the renovate/patch-cilium branch October 20, 2023 20:14
michi-covalent added a commit that referenced this pull request Nov 1, 2023
@michi-covalent
Revert "chore(deps): update dependency cilium/cilium to v1.14.3"
f39214a 
This reverts commit 0245001.

It looks like the external workloads test started failing after
upgrading Cilium to v1.14.3. Let's revert while we investigate. It's
unclear to me why #2057 didn't fail though.

Ref: #2070

Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>
@michi-covalent michi-covalent mentioned this pull request Nov 1, 2023
Merged
tklauser pushed a commit that referenced this pull request Nov 2, 2023
@michi-covalent @tklauser
Revert "chore(deps): update dependency cilium/cilium to v1.14.3"
57e2b50 
This reverts commit 0245001.

It looks like the external workloads test started failing after
upgrading Cilium to v1.14.3. Let's revert while we investigate. It's
unclear to me why #2057 didn't fail though.

Ref: #2070

Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@asauber asauber asauber approved these changes

@nbusseneau nbusseneau nbusseneau approved these changes

Assignees
No one assigned
Labels
kind/enhancement This would improve or streamline existing functionality. priority/release-blocker This issue will prevent the release of the next version of Cilium. ready-to-merge This PR has passed all tests and received consensus from code owners to merge. renovate/stop-updating Tell Renovate to stop updating PR
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@asauber @nbusseneau