DevOps/truecharts
2
0
Fork 0
Code Issues Pull Requests Actions 19 Packages Projects Releases 1 Wiki Activity
40,239 Commits 1 Branch 1 Tag
0dce3075813d49dce1756a11edbfc18f65e69540
Commit Graph

444 Commits

Author SHA1 Message Date
TrueCharts Bot 14f3e92ee6 chore(flux): update image metallb-config 8.5.1 → 8.5.2 (clustertool) (#32260) 2025-02-19 01:12:34 +01:00
TrueCharts Bot f8428233f9 chore(flux): update image clusterissuer 9.5.1 → 9.5.2 (clustertool) (#32258) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [clusterissuer](https://truecharts.org/charts/premium/clusterissuer)
([source](https://cert-manager.io/)) | patch | `9.5.1` -> `9.5.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2025-02-19 01:12:30 +01:00
TrueCharts Bot 92c61ae182 chore(flux): update image volsync 2.8.1 → 2.9.0 (clustertool) (#32179) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [volsync](https://truecharts.org/charts/system/volsync)
([source](https://redirect.github.com/backube/helm-charts)) | minor |
`2.8.1` -> `2.9.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2025-02-18 01:23:44 +01:00
TrueCharts Bot 174eda609e chore(flux): update helm release openebs 4.1.3 → 4.2.0 (clustertool) (#32167) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [openebs](https://www.openebs.io/)
([source](https://redirect.github.com/openebs/openebs)) | minor |
`4.1.3` -> `4.2.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>openebs/openebs (openebs)</summary>

###
[`v4.2.0`](https://redirect.github.com/openebs/openebs/releases/tag/openebs-4.2.0)

[Compare
Source](https://redirect.github.com/openebs/openebs/compare/openebs-4.1.3...openebs-4.2.0)

Containerized Attached Storage for Kubernetes

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2025-02-17 13:09:34 +01:00
TrueCharts Bot 4ba6f63c2c fix(deps): update module github.com/spf13/cobra v1.9.0 → v1.9.1 (clustertool) (#32166) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/spf13/cobra](https://redirect.github.com/spf13/cobra) |
require | patch | `v1.9.0` -> `v1.9.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>spf13/cobra (github.com/spf13/cobra)</summary>

###
[`v1.9.1`](https://redirect.github.com/spf13/cobra/releases/tag/v1.9.1)

[Compare
Source](https://redirect.github.com/spf13/cobra/compare/v1.9.0...v1.9.1)

##### 🐛 Fixes

- Fix CompletionFunc implementation by
[@&#8203;ccoVeille](https://redirect.github.com/ccoVeille) in
[https://github.com/spf13/cobra/pull/2234](https://redirect.github.com/spf13/cobra/pull/2234)
- Revert "Make detection for test-binary more universal
([#&#8203;2173](https://redirect.github.com/spf13/cobra/issues/2173))"
by [@&#8203;marckhouzam](https://redirect.github.com/marckhouzam) in
[https://github.com/spf13/cobra/pull/2235](https://redirect.github.com/spf13/cobra/pull/2235)

**Full Changelog**:
https://github.com/spf13/cobra/compare/v1.9.0...v1.9.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2025-02-17 07:08:33 +01:00
TrueCharts Bot 071bd1bef3 fix(deps): update module github.com/spf13/cobra v1.8.1 → v1.9.0 (clustertool) (#32134) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/spf13/cobra](https://redirect.github.com/spf13/cobra) |
require | minor | `v1.8.1` -> `v1.9.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>spf13/cobra (github.com/spf13/cobra)</summary>

###
[`v1.9.0`](https://redirect.github.com/spf13/cobra/releases/tag/v1.9.0)

[Compare
Source](https://redirect.github.com/spf13/cobra/compare/v1.8.1...v1.9.0)

#### ✨ Features

- Allow linker to perform deadcode elimination for program using Cobra
by [@&#8203;aarzilli](https://redirect.github.com/aarzilli) in
[https://github.com/spf13/cobra/pull/1956](https://redirect.github.com/spf13/cobra/pull/1956)
- Add default completion command even if there are no other sub-commands
by [@&#8203;marckhouzam](https://redirect.github.com/marckhouzam) in
[https://github.com/spf13/cobra/pull/1559](https://redirect.github.com/spf13/cobra/pull/1559)
- Add CompletionWithDesc helper by
[@&#8203;ccoVeille](https://redirect.github.com/ccoVeille) in
[https://github.com/spf13/cobra/pull/2231](https://redirect.github.com/spf13/cobra/pull/2231)

#### 🐛 Fixes

- Fix deprecation comment for Command.SetOutput by
[@&#8203;thaJeztah](https://redirect.github.com/thaJeztah) in
[https://github.com/spf13/cobra/pull/2172](https://redirect.github.com/spf13/cobra/pull/2172)
- Replace deprecated ioutil usage by
[@&#8203;nirs](https://redirect.github.com/nirs) in
[https://github.com/spf13/cobra/pull/2181](https://redirect.github.com/spf13/cobra/pull/2181)
- Fix --version help and output for plugins by
[@&#8203;nirs](https://redirect.github.com/nirs) in
[https://github.com/spf13/cobra/pull/2180](https://redirect.github.com/spf13/cobra/pull/2180)
- Allow to reset the templates to the default by
[@&#8203;marckhouzam](https://redirect.github.com/marckhouzam) in
[https://github.com/spf13/cobra/pull/2229](https://redirect.github.com/spf13/cobra/pull/2229)

#### 🤖 Completions

- Make Powershell completion work in constrained mode by
[@&#8203;lstemplinger](https://redirect.github.com/lstemplinger) in
[https://github.com/spf13/cobra/pull/2196](https://redirect.github.com/spf13/cobra/pull/2196)
- Improve detection for flags that accept multiple values by
[@&#8203;thaJeztah](https://redirect.github.com/thaJeztah) in
[https://github.com/spf13/cobra/pull/2210](https://redirect.github.com/spf13/cobra/pull/2210)
- add CompletionFunc type to help with completions by
[@&#8203;ccoVeille](https://redirect.github.com/ccoVeille) in
[https://github.com/spf13/cobra/pull/2220](https://redirect.github.com/spf13/cobra/pull/2220)
- Add similar whitespace escape logic to bash v2 completions than in
other completions by
[@&#8203;kangasta](https://redirect.github.com/kangasta) in
[https://github.com/spf13/cobra/pull/1743](https://redirect.github.com/spf13/cobra/pull/1743)
- Print ActiveHelp for bash along other completions by
[@&#8203;marckhouzam](https://redirect.github.com/marckhouzam) in
[https://github.com/spf13/cobra/pull/2076](https://redirect.github.com/spf13/cobra/pull/2076)
- fix(completions): Complete map flags multiple times by
[@&#8203;gabe565](https://redirect.github.com/gabe565) in
[https://github.com/spf13/cobra/pull/2174](https://redirect.github.com/spf13/cobra/pull/2174)
- fix(bash): nounset unbound file filter variable on empty extension by
[@&#8203;scop](https://redirect.github.com/scop) in
[https://github.com/spf13/cobra/pull/2228](https://redirect.github.com/spf13/cobra/pull/2228)

#### 🧪 Testing

- Test also with go 1.23 by
[@&#8203;nirs](https://redirect.github.com/nirs) in
[https://github.com/spf13/cobra/pull/2182](https://redirect.github.com/spf13/cobra/pull/2182)
- Make detection for test-binary more universal by
[@&#8203;thaJeztah](https://redirect.github.com/thaJeztah) in
[https://github.com/spf13/cobra/pull/2173](https://redirect.github.com/spf13/cobra/pull/2173)

#### ✍🏼 Documentation

- docs: update README.md by
[@&#8203;eltociear](https://redirect.github.com/eltociear) in
[https://github.com/spf13/cobra/pull/2197](https://redirect.github.com/spf13/cobra/pull/2197)
- Improve site formatting by
[@&#8203;nirs](https://redirect.github.com/nirs) in
[https://github.com/spf13/cobra/pull/2183](https://redirect.github.com/spf13/cobra/pull/2183)
- doc: add Conduit by [@&#8203;raulb](https://redirect.github.com/raulb)
in
[https://github.com/spf13/cobra/pull/2230](https://redirect.github.com/spf13/cobra/pull/2230)
- doc: azion project added to the list of CLIs that use cobra by
[@&#8203;maxwelbm](https://redirect.github.com/maxwelbm) in
[https://github.com/spf13/cobra/pull/2198](https://redirect.github.com/spf13/cobra/pull/2198)
- Fix broken links in active_help.md by
[@&#8203;vuil](https://redirect.github.com/vuil) in
[https://github.com/spf13/cobra/pull/2202](https://redirect.github.com/spf13/cobra/pull/2202)
- chore: fix function name in comment by
[@&#8203;zhuhaicity](https://redirect.github.com/zhuhaicity) in
[https://github.com/spf13/cobra/pull/2216](https://redirect.github.com/spf13/cobra/pull/2216)

#### 🔧 Dependency upgrades

- build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
by [@&#8203;thaJeztah](https://redirect.github.com/thaJeztah) in
[https://github.com/spf13/cobra/pull/2206](https://redirect.github.com/spf13/cobra/pull/2206)
- Update to latest go-md2man by
[@&#8203;mikelolasagasti](https://redirect.github.com/mikelolasagasti)
in
[https://github.com/spf13/cobra/pull/2201](https://redirect.github.com/spf13/cobra/pull/2201)
- Upgrade `pflag` dependencies for v1.9.0 by
[@&#8203;jpmcb](https://redirect.github.com/jpmcb) in
[https://github.com/spf13/cobra/pull/2233](https://redirect.github.com/spf13/cobra/pull/2233)

***

Thank you to all of our amazing contributors and all the great work
that's been going into the completions feature!!

##### 👋🏼 New Contributors

- [@&#8203;gabe565](https://redirect.github.com/gabe565) made their
first contribution in
[https://github.com/spf13/cobra/pull/2174](https://redirect.github.com/spf13/cobra/pull/2174)
- [@&#8203;maxwelbm](https://redirect.github.com/maxwelbm) made their
first contribution in
[https://github.com/spf13/cobra/pull/2198](https://redirect.github.com/spf13/cobra/pull/2198)
- [@&#8203;lstemplinger](https://redirect.github.com/lstemplinger) made
their first contribution in
[https://github.com/spf13/cobra/pull/2196](https://redirect.github.com/spf13/cobra/pull/2196)
- [@&#8203;vuil](https://redirect.github.com/vuil) made their first
contribution in
[https://github.com/spf13/cobra/pull/2202](https://redirect.github.com/spf13/cobra/pull/2202)
- [@&#8203;mikelolasagasti](https://redirect.github.com/mikelolasagasti)
made their first contribution in
[https://github.com/spf13/cobra/pull/2201](https://redirect.github.com/spf13/cobra/pull/2201)
- [@&#8203;zhuhaicity](https://redirect.github.com/zhuhaicity) made
their first contribution in
[https://github.com/spf13/cobra/pull/2216](https://redirect.github.com/spf13/cobra/pull/2216)
- [@&#8203;ccoVeille](https://redirect.github.com/ccoVeille) made their
first contribution in
[https://github.com/spf13/cobra/pull/2220](https://redirect.github.com/spf13/cobra/pull/2220)
- [@&#8203;kangasta](https://redirect.github.com/kangasta) made their
first contribution in
[https://github.com/spf13/cobra/pull/1743](https://redirect.github.com/spf13/cobra/pull/1743)
- [@&#8203;aarzilli](https://redirect.github.com/aarzilli) made their
first contribution in
[https://github.com/spf13/cobra/pull/1956](https://redirect.github.com/spf13/cobra/pull/1956)

**Full Changelog**:
https://github.com/spf13/cobra/compare/v1.8.1...v1.9.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2025-02-16 02:21:47 +01:00
TrueCharts Bot 15feaed2b8 fix(deps): update module github.com/go-playground/validator/v10 v10.24.0 → v10.25.0 (clustertool) (#32133) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/go-playground/validator/v10](https://redirect.github.com/go-playground/validator)
| require | minor | `v10.24.0` -> `v10.25.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>go-playground/validator
(github.com/go-playground/validator/v10)</summary>

###
[`v10.25.0`](https://redirect.github.com/go-playground/validator/releases/tag/v10.25.0):
Release 10.25.0

[Compare
Source](https://redirect.github.com/go-playground/validator/compare/v10.24.0...v10.25.0)

#### What's Changed

- Fix postcode_iso3166\_alpha2\_field validation by
[@&#8203;ddevcap](https://redirect.github.com/ddevcap) in
[https://github.com/go-playground/validator/pull/1359](https://redirect.github.com/go-playground/validator/pull/1359)
- Update README to replace the Travis CI badge with a GitHub Actions
badge by [@&#8203;nodivbyzero](https://redirect.github.com/nodivbyzero)
in
[https://github.com/go-playground/validator/pull/1362](https://redirect.github.com/go-playground/validator/pull/1362)
- chore: using errors.As instead of type assertion by
[@&#8203;fatelei](https://redirect.github.com/fatelei) in
[https://github.com/go-playground/validator/pull/1346](https://redirect.github.com/go-playground/validator/pull/1346)
- Fix/remove issue template md by
[@&#8203;ganeshdipdumbare](https://redirect.github.com/ganeshdipdumbare)
in
[https://github.com/go-playground/validator/pull/1375](https://redirect.github.com/go-playground/validator/pull/1375)
- feat: Add support for omitting empty and zero values in validation
(including nil pointer and empty content of pointer) by
[@&#8203;zeewell](https://redirect.github.com/zeewell) in
[https://github.com/go-playground/validator/pull/1289](https://redirect.github.com/go-playground/validator/pull/1289)

#### New Contributors

- [@&#8203;ddevcap](https://redirect.github.com/ddevcap) made their
first contribution in
[https://github.com/go-playground/validator/pull/1359](https://redirect.github.com/go-playground/validator/pull/1359)
- [@&#8203;fatelei](https://redirect.github.com/fatelei) made their
first contribution in
[https://github.com/go-playground/validator/pull/1346](https://redirect.github.com/go-playground/validator/pull/1346)
- [@&#8203;zeewell](https://redirect.github.com/zeewell) made their
first contribution in
[https://github.com/go-playground/validator/pull/1289](https://redirect.github.com/go-playground/validator/pull/1289)

**Full Changelog**:
https://github.com/go-playground/validator/compare/v10.24.0...v10.25.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2025-02-16 02:21:27 +01:00
TrueCharts Bot 54681228bb fix(deps): update module sigs.k8s.io/controller-runtime v0.20.1 → v0.20.2 (clustertool) (#32038) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[sigs.k8s.io/controller-runtime](https://redirect.github.com/kubernetes-sigs/controller-runtime)
| require | patch | `v0.20.1` -> `v0.20.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>kubernetes-sigs/controller-runtime
(sigs.k8s.io/controller-runtime)</summary>

###
[`v0.20.2`](https://redirect.github.com/kubernetes-sigs/controller-runtime/releases/tag/v0.20.2)

[Compare
Source](https://redirect.github.com/kubernetes-sigs/controller-runtime/compare/v0.20.1...v0.20.2)

#### What's Changed

- ✨ Expose all Go runtime metrics by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3100](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3100)
- 🐛Fix behavior of rate limit option in priorityqueue.AddWithOpts by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3106](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3106)
- 🌱 Update dependencies, k8s 1.32.1 by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3108](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3108)

**Full Changelog**:
https://github.com/kubernetes-sigs/controller-runtime/compare/v0.20.1...v0.20.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2025-02-14 19:09:11 +01:00
TrueCharts Bot 04dc2c54e9 fix(deps): update module github.com/budimanjojo/talhelper/v3 v3.0.18 → v3.0.19 (clustertool) (#32028) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/budimanjojo/talhelper/v3](https://redirect.github.com/budimanjojo/talhelper)
| require | patch | `v3.0.18` -> `v3.0.19` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>budimanjojo/talhelper
(github.com/budimanjojo/talhelper/v3)</summary>

###
[`v3.0.19`](https://redirect.github.com/budimanjojo/talhelper/releases/tag/v3.0.19)

[Compare
Source](https://redirect.github.com/budimanjojo/talhelper/compare/v3.0.18...v3.0.19)

#### Changelog

-
[`484ab00`](https://redirect.github.com/budimanjojo/talhelper/commit/484ab001a05aaec4402d1db6aea19aa1e659e591)
chore(container): update ghcr.io/siderolabs/talosctl docker tag to
v1.9.4
-
[`d58c85c`](https://redirect.github.com/budimanjojo/talhelper/commit/d58c85cc4ca3131132ce5a2ae796e9ca3f847c53)
chore(container): update golangci/golangci-lint docker tag to v1.64.2
-
[`89c216a`](https://redirect.github.com/budimanjojo/talhelper/commit/89c216a9209af7d5428ae054fdcd4886a91b47d6)
chore(container): update golangci/golangci-lint docker tag to v1.64.4
-
[`154d024`](https://redirect.github.com/budimanjojo/talhelper/commit/154d0246c6fd85d4eede2466b01071a5bab099b0)
chore(container): update golangci/golangci-lint docker tag to v1.64.5
-
[`620975e`](https://redirect.github.com/budimanjojo/talhelper/commit/620975ea2027c5fdb974915f8a7f30dae62115b6)
chore(container): update goreleaser/goreleaser docker tag to v2.7.0
-
[`fde4dfe`](https://redirect.github.com/budimanjojo/talhelper/commit/fde4dfef9510065dbdef4f574b9dd57cd69a284d)
chore(container): update registry.k8s.io/kubectl docker tag to v1.32.2
-
[`3c4669e`](https://redirect.github.com/budimanjojo/talhelper/commit/3c4669e0f4342401053a8fa69961dbf29bc2a6a9)
chore(deps): update dependency siderolabs/talos to v1.9.4
-
[`6d99316`](https://redirect.github.com/budimanjojo/talhelper/commit/6d993165e56088d5571aad4cd7c1f4a9e151de7c)
chore(devcontainer): Swap kubectl install image to use registry.k8s.io
instead of bitnami
([#&#8203;848](https://redirect.github.com/budimanjojo/talhelper/issues/848))
-
[`914b5c9`](https://redirect.github.com/budimanjojo/talhelper/commit/914b5c9f7eca1ffd0c4f17482c407c295fb08ba3)
chore(github-action): update renovatebot/github-action action to
v41.0.13
-
[`3802fa0`](https://redirect.github.com/budimanjojo/talhelper/commit/3802fa0b656a1eb585280b88895b1f7339336694)
chore(schema): update talconfig.yaml JSON schema
([#&#8203;842](https://redirect.github.com/budimanjojo/talhelper/issues/842))
-
[`7de2e1a`](https://redirect.github.com/budimanjojo/talhelper/commit/7de2e1ac4d239a5f1988d3cc72bb6b7a917c2a52)
chore(schema): update talos-extensions.yaml JSON schema
-
[`a7af6c8`](https://redirect.github.com/budimanjojo/talhelper/commit/a7af6c886f5dbe407a4be92f84a4015d4ca5e40b)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;844](https://redirect.github.com/budimanjojo/talhelper/issues/844))
-
[`3b6d096`](https://redirect.github.com/budimanjojo/talhelper/commit/3b6d0969d5528c1c1cf6b64de25c92d3a03b579d)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;847](https://redirect.github.com/budimanjojo/talhelper/issues/847))
-
[`fe4e05f`](https://redirect.github.com/budimanjojo/talhelper/commit/fe4e05ffaddc82f2f6cf6ba9198aef6ab3ddc272)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;850](https://redirect.github.com/budimanjojo/talhelper/issues/850))
-
[`fa05162`](https://redirect.github.com/budimanjojo/talhelper/commit/fa0516299861397a4ace86110234e301a6773df7)
feat(code): add test for content substitution
-
[`2001c26`](https://redirect.github.com/budimanjojo/talhelper/commit/2001c26e4c8502014709977e32275080e5406df6)
feat(config): add `inlineManifests`
-
[`c065c28`](https://redirect.github.com/budimanjojo/talhelper/commit/c065c28351d1e3e7749c9b0e0d7feeeca0bbba04)
feat(config): allow `machineFiles` to be not envsubst-ed
-
[`bbc3528`](https://redirect.github.com/budimanjojo/talhelper/commit/bbc35285c80bb5bba980978a59faed44712ba263)
feat: update Scoop for talhelper version v3.0.18
-
[`2f3ca66`](https://redirect.github.com/budimanjojo/talhelper/commit/2f3ca66cdc35e2bad2a4d80612613426e293f69c)
feat: update flake
([#&#8203;839](https://redirect.github.com/budimanjojo/talhelper/issues/839))
-
[`b45cf2d`](https://redirect.github.com/budimanjojo/talhelper/commit/b45cf2d396bdcfdf80afcba3e4e8e30f1be9b1b0)
fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.18

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2025-02-14 07:08:33 +01:00
TrueCharts Bot 066683b567 chore(deps): update ghcr.io/siderolabs/installer docker tag to v1.9.4 (clustertool) (#32018) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/siderolabs/installer](https://redirect.github.com/siderolabs/talos)
| patch | `v1.9.3` -> `v1.9.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/talos (ghcr.io/siderolabs/installer)</summary>

###
[`v1.9.4`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.4)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.9.3...v1.9.4)

##### [Talos
1.9.4](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.4)
(2025-02-13)

Welcome to the v1.9.4 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

##### Ingress Firewall

Talos Ingress Firewall now filters access to Kubernetes NodePort
services correctly.

##### Component Updates

-   Linux: 6.12.13
-   Flannel: 0.26.4
-   Kubernetes: 1.32.2

Talos is built with Go 1.23.6.

##### Contributors

-   Andrey Smirnov
-   Dmitry Sharshakov
-   Dmitriy Matrenichev
-   Mathspy

##### Changes

<details><summary>13 commits</summary>
<p>

-
[@&#8203;`c863a56`](https://redirect.github.com/siderolabs/talos/commit/c863a5617)
release(v1.9.4): prepare release
-
[@&#8203;`81164ef`](https://redirect.github.com/siderolabs/talos/commit/81164efd7)
chore: fix spurious generate failures
-
[@&#8203;`7639cf7`](https://redirect.github.com/siderolabs/talos/commit/7639cf7ef)
fix: path for ca-certificates
-
[@&#8203;`9afdaf4`](https://redirect.github.com/siderolabs/talos/commit/9afdaf47b)
feat: update Kubernetes to 1.32.2
-
[@&#8203;`e3bfb23`](https://redirect.github.com/siderolabs/talos/commit/e3bfb238f)
fix: make ingress firewall filter traffic to nodeports
-
[@&#8203;`6d0db51`](https://redirect.github.com/siderolabs/talos/commit/6d0db5185)
fix: blockdevice transport detection
-
[@&#8203;`39d608a`](https://redirect.github.com/siderolabs/talos/commit/39d608a1c)
chore: provide more logging for dns requests
-
[@&#8203;`2ca0d59`](https://redirect.github.com/siderolabs/talos/commit/2ca0d5993)
fix: fix diff printing
-
[@&#8203;`c8a7a2c`](https://redirect.github.com/siderolabs/talos/commit/c8a7a2c68)
fix: ignore errors to stop pods
-
[@&#8203;`cfc43b0`](https://redirect.github.com/siderolabs/talos/commit/cfc43b0ac)
fix: handle empty registry config
-
[@&#8203;`a3aa099`](https://redirect.github.com/siderolabs/talos/commit/a3aa099c3)
feat: update Flannel to 0.26.4
-
[@&#8203;`3612fbf`](https://redirect.github.com/siderolabs/talos/commit/3612fbfd7)
feat: update Linux to 6.12.13
-
[@&#8203;`a320b99`](https://redirect.github.com/siderolabs/talos/commit/a320b9907)
chore: bump Go to 1.23.6

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>2 commits</summary>
<p>

-
[siderolabs/pkgs@`27017e0`](https://redirect.github.com/siderolabs/pkgs/commit/27017e0)
feat: update Linux to 6.12.13
-
[siderolabs/pkgs@`bf4206c`](https://redirect.github.com/siderolabs/pkgs/commit/bf4206c)
feat: update Go to 1.23.6

</p>
</details>

##### Changes from siderolabs/tools
<details><summary>1 commit</summary>
<p>

-
[siderolabs/tools@`b2ede52`](https://redirect.github.com/siderolabs/tools/commit/b2ede52)
feat: update Go to 1.23.6

</p>
</details>

##### Dependency Changes

-   **github.com/siderolabs/go-blockdevice/v2**    v2.0.13 -> v2.0.14
- **github.com/siderolabs/pkgs** v1.9.0-25-g2250843 ->
v1.9.0-27-g27017e0
-   **github.com/siderolabs/talos/pkg/machinery**  v1.9.3 -> v1.9.4
- **github.com/siderolabs/tools** v1.9.0-2-gbf2085e -> v1.9.0-3-gb2ede52

Previous release can be found at
[v1.9.3](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.3)

##### Images

    ghcr.io/siderolabs/flannel:v0.26.4
    registry.k8s.io/coredns/coredns:v1.12.0
    gcr.io/etcd-development/etcd:v3.5.18
    registry.k8s.io/kube-apiserver:v1.32.2
    registry.k8s.io/kube-controller-manager:v1.32.2
    registry.k8s.io/kube-scheduler:v1.32.2
    registry.k8s.io/kube-proxy:v1.32.2
    ghcr.io/siderolabs/kubelet:v1.32.2
    ghcr.io/siderolabs/installer:v1.9.4
    registry.k8s.io/pause:3.10

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2NvbnRhaW5lciIsInN5c3RlbS11cGdyYWRlIiwidHlwZS9wYXRjaCJdfQ==-->
 2025-02-13 19:25:15 +01:00
TrueCharts Bot b193c70968 fix(deps): update kubernetes packages v0.32.1 → v0.32.2 (clustertool) (patch) (#32020) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [k8s.io/api](https://redirect.github.com/kubernetes/api) | require |
patch | `v0.32.1` -> `v0.32.2` |
|
[k8s.io/apimachinery](https://redirect.github.com/kubernetes/apimachinery)
| require | patch | `v0.32.1` -> `v0.32.2` |
| [k8s.io/client-go](https://redirect.github.com/kubernetes/client-go) |
require | patch | `v0.32.1` -> `v0.32.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>kubernetes/api (k8s.io/api)</summary>

###
[`v0.32.2`](https://redirect.github.com/kubernetes/api/compare/v0.32.1...v0.32.2)

[Compare
Source](https://redirect.github.com/kubernetes/api/compare/v0.32.1...v0.32.2)

</details>

<details>
<summary>kubernetes/apimachinery (k8s.io/apimachinery)</summary>

###
[`v0.32.2`](https://redirect.github.com/kubernetes/apimachinery/compare/v0.32.1...v0.32.2)

[Compare
Source](https://redirect.github.com/kubernetes/apimachinery/compare/v0.32.1...v0.32.2)

</details>

<details>
<summary>kubernetes/client-go (k8s.io/client-go)</summary>

###
[`v0.32.2`](https://redirect.github.com/kubernetes/client-go/compare/v0.32.1...v0.32.2)

[Compare
Source](https://redirect.github.com/kubernetes/client-go/compare/v0.32.1...v0.32.2)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2025-02-13 19:11:29 +01:00
TrueCharts Bot bb45ca3cb7 chore(flux): update helm release cilium 1.17.0 → 1.17.1 (clustertool) (#32012) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/)
([source](https://redirect.github.com/cilium/cilium)) | patch | `1.17.0`
-> `1.17.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>cilium/cilium (cilium)</summary>

###
[`v1.17.1`](https://redirect.github.com/cilium/cilium/compare/1.17.0...1.17.1)

[Compare
Source](https://redirect.github.com/cilium/cilium/compare/1.17.0...1.17.1)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2025-02-13 12:20:11 +00:00
TrueCharts Bot ce01e3f9ca chore(deps): update ghcr.io/siderolabs/kubelet docker tag to v1.32.2 (clustertool) (#32011) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/siderolabs/kubelet](https://redirect.github.com/siderolabs/kubelet)
| patch | `v1.32.1` -> `v1.32.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/kubelet (ghcr.io/siderolabs/kubelet)</summary>

###
[`v1.32.2`](https://redirect.github.com/siderolabs/kubelet/compare/v1.32.1...v1.32.2)

[Compare
Source](https://redirect.github.com/siderolabs/kubelet/compare/v1.32.1...v1.32.2)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2NvbnRhaW5lciIsInN5c3RlbS11cGdyYWRlIiwidHlwZS9wYXRjaCJdfQ==-->
 2025-02-13 13:18:28 +01:00
TrueCharts Bot 1cc18d78a0 fix(deps): update module helm.sh/helm/v3 v3.17.0 → v3.17.1 (clustertool) (#32009) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [helm.sh/helm/v3](https://redirect.github.com/helm/helm) | require |
patch | `v3.17.0` -> `v3.17.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>helm/helm (helm.sh/helm/v3)</summary>

###
[`v3.17.1`](https://redirect.github.com/helm/helm/releases/tag/v3.17.1):
Helm v3.17.1

[Compare
Source](https://redirect.github.com/helm/helm/compare/v3.17.0...v3.17.1)

Helm v3.17.1 is a patch release. Users are encouraged to upgrade for the
best experience. Users are encouraged to upgrade for the best
experience.

The community keeps growing, and we'd love to see you there!

- Join the discussion in [Kubernetes
Slack](https://kubernetes.slack.com):
    -   for questions and just to hang out
    -   for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via
[Zoom](https://zoom.us/j/696660622)
- Test, debug, and contribute charts:
[ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0)

#### Installation and Upgrading

Download Helm v3.17.1. The common platform binaries are here:

- [MacOS amd64](https://get.helm.sh/helm-v3.17.1-darwin-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.1-darwin-amd64.tar.gz.sha256sum)
/ aba59ba9511971a71943b5c76f15d52ace1681197bb3f71ed1f0b15caceacb2c)
- [MacOS arm64](https://get.helm.sh/helm-v3.17.1-darwin-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.1-darwin-arm64.tar.gz.sha256sum)
/ b823a213d8d7937222becc63d9c7bb3d15a090e7ecd1f70f3a583ed39657e21b)
- [Linux amd64](https://get.helm.sh/helm-v3.17.1-linux-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.1-linux-amd64.tar.gz.sha256sum)
/ 3b66f3cd28409f29832b1b35b43d9922959a32d795003149707fea84cbcd4469)
- [Linux arm](https://get.helm.sh/helm-v3.17.1-linux-arm.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.1-linux-arm.tar.gz.sha256sum)
/ 1dc5ed54350f4f7ae87441e878be4f4fd9b727a86b11b1d20b1001358c83bed3)
- [Linux arm64](https://get.helm.sh/helm-v3.17.1-linux-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.1-linux-arm64.tar.gz.sha256sum)
/ c86c9b23602d4abbfae39d9634e25ab1d0ea6c4c16c5b154113efe316a402547)
- [Linux i386](https://get.helm.sh/helm-v3.17.1-linux-386.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.1-linux-386.tar.gz.sha256sum)
/ b972562a1171673db2892f000248b2540ddcd6f76850ec152852a8e9ce7972cb)
- [Linux ppc64le](https://get.helm.sh/helm-v3.17.1-linux-ppc64le.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.1-linux-ppc64le.tar.gz.sha256sum)
/ 4223394f3fca82a7f8e8d083caf6faf0ee0639d8f235071334579237078a2c2e)
- [Linux s390x](https://get.helm.sh/helm-v3.17.1-linux-s390x.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.1-linux-s390x.tar.gz.sha256sum)
/ fe47e5ee8abd6baef01bb1c4fc995343121bf5fc7dead1f67e97484a441ba9e8)
- [Linux riscv64](https://get.helm.sh/helm-v3.17.1-linux-riscv64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.17.1-linux-riscv64.tar.gz.sha256sum)
/ cf174b1ff83032255f798278152c637d01dd1d1533fd77915ab751d8cf4191a7)
- [Windows amd64](https://get.helm.sh/helm-v3.17.1-windows-amd64.zip)
([checksum](https://get.helm.sh/helm-v3.17.1-windows-amd64.zip.sha256sum)
/ 08281ee6d4d272835ff10c510b8b39736d112d9cb89dfbc853fe83913fbe48d0)
- [Windows arm64](https://get.helm.sh/helm-v3.17.1-windows-arm64.zip)
([checksum](https://get.helm.sh/helm-v3.17.1-windows-arm64.zip.sha256sum)
/ 44c9c8246f643ea45bb45013a182fc25da2a8206a6f322a0c6fa47a1f4bcf1e4)

The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get
you going from there. For **upgrade instructions** or detailed
installation notes, check the [install
guide](https://helm.sh/docs/intro/install/). You can also use a [script
to
install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3)
on any system with `bash`.

#### What's Next

-   3.17.2 is the next patch release and will be on March 12, 2025
-   3.18.0 is the next minor release and will be on May 14, 2025

#### Changelog

- add test for nullifying nested global value
[`980d8ac`](https://redirect.github.com/helm/helm/commit/980d8ac1939e39138101364400756af2bdee1da5)
(Ryan Hockstad)
- Add test case for removing an entire object
[`c23e3b6`](https://redirect.github.com/helm/helm/commit/c23e3b6c495658bb1eec04b32c8e4bfc5ef4dd60)
(Ryan Hockstad)
- Tests for bugfix: Override subcharts with null values
[#&#8203;12879](https://redirect.github.com/helm/helm/issues/12879)
[`3110d5f`](https://redirect.github.com/helm/helm/commit/3110d5ff63a0edcf6decac8288106b55a6f41760)
(Scott Rigby)
- merge null child chart objects
[`9520c71`](https://redirect.github.com/helm/helm/commit/9520c71fb04783cdab111759f0f3c5d1cdc83f1c)
(Ryan Hockstad)
- build(deps): bump the k8s-io group with 7 updates
[`ab7dedd`](https://redirect.github.com/helm/helm/commit/ab7dedd4cf47cb7455a283d93a1627a35933d634)
(dependabot\[bot])
- fix: check group for resource info match
[`a2d3602`](https://redirect.github.com/helm/helm/commit/a2d36029d5dba292073d23acea2ef59cfb429ee9)
(Jiasheng Zhu)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2025-02-13 01:10:40 +01:00
TrueCharts Bot 56b43dffca chore(flux): update image registry.k8s.io/kubectl v1.32.1 → v1.32.2 (clustertool) (#32007) 2025-02-13 01:10:13 +01:00
TrueCharts Bot fe3fade11a chore(flux): update image blocky 16.13.4 → 16.13.5 (clustertool) (#31997) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [blocky](https://truecharts.org/charts/premium/blocky)
([source](https://0xerr0r.github.io/blocky/)) | patch | `16.13.4` ->
`16.13.5` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2025-02-12 19:09:52 +01:00
TrueCharts Bot 6e0fdb5b55 chore(flux): update image app-template 3.7.0 → 3.7.1 (clustertool) (#31904) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [app-template](https://redirect.github.com/bjw-s/helm-charts) | patch
| `3.7.0` -> `3.7.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>bjw-s/helm-charts (app-template)</summary>

###
[`v3.7.1`](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.7.0...app-template-3.7.1)

[Compare
Source](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.7.0...app-template-3.7.1)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2025-02-11 19:10:39 +01:00
jogotcha 10d5877232 chore(clustertool) change included patch format and add nvidia patch (#31813) 
**Description**
Change clustertool included patches from RFC6902 (json patches) to
strategic merge patches, see
[talos-guides](https://www.talos.dev/v1.9/talos-guides/configuration/patching/).
This allows for the used to easily add to some of the "list" values like
sysctls and kernel modules.

For example, this list operation overwrites any previous adds to
sysctls.
```yaml
- op: add
  path: /machine/sysctls
  value:
    fs.inotify.max_queued_events: "65536"
    fs.inotify.max_user_instances: "8192"
```

this is not the case when using strategic merge patches
```yaml
machine:
  sysctls:
    fs.inotify.max_queued_events: "65536"
    fs.inotify.max_user_instances: "8192"
```

for example nvidia.yaml can add to this
```yaml
machine:
  sysctls:
    net.core.bpf_jit_harden: 1
```
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [x] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [x] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
I ran clustertool genconfig with the default configs before and after
the change. The resulting main-k8s-control-1.yaml was identical (except,
see below).

**📃 Notes:**

The bind addresses for proxy and scheduler did never end up in the
generated config because they got overwritten by subsequent patch
operations. Now these entries will be in the generated config, not sure
if that could be an issue?

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [x] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [x] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._
 2025-02-09 11:25:51 +01:00
TrueCharts Bot c0f63140f8 chore(flux): update image blocky 16.13.3 → 16.13.4 (clustertool) (#31857) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [blocky](https://truecharts.org/charts/premium/blocky)
([source](https://0xerr0r.github.io/blocky/)) | patch | `16.13.3` ->
`16.13.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2025-02-09 07:16:14 +01:00
TrueCharts-Bot 8537693062 Commit daily changes 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2025-02-09 00:16:07 +00:00
Kjeld Schouten dd05960e31 chore: Always utilise ECR for docker.io/library 2025-02-08 17:54:47 +01:00
TrueCharts Bot 6815b0f60a chore(flux): update image docker.io/rancher/system-upgrade-controller v0.14.1 → v0.14.2 (clustertool) (#31778) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/rancher/system-upgrade-controller | patch | `v0.14.1` ->
`v0.14.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjIuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE2Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2025-02-08 14:50:42 +01:00
TrueCharts Bot 57bd7cba7e chore(flux): update image registry.k8s.io/kubectl v1.31.1 → v1.32.1 (clustertool) (#31774) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| registry.k8s.io/kubectl | minor | `v1.31.1` -> `v1.32.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjIuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE2Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2025-02-08 13:32:00 +01:00
TrueCharts Bot e44429d3b9 chore(flux): update image app-template 3.6.1 → 3.7.0 (clustertool) (#31744) 2025-02-08 02:58:27 +01:00
TrueCharts Bot 0b0f924baf fix(deps): update module golang.org/x/crypto v0.32.0 → v0.33.0 (clustertool) (#31752) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| golang.org/x/crypto | require | minor | `v0.32.0` -> `v0.33.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2025-02-08 02:54:44 +01:00
TrueCharts Bot ba160bff57 chore(flux): update image prometheus-operator 10.2.2 → 10.3.0 (clustertool) (#31745) 2025-02-08 02:50:04 +01:00
TrueCharts-Bot cbc7daf7d1 Commit daily changes 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2025-02-08 00:13:21 +00:00
Kjeld Schouten cd35255de1 chore(clustertool): tweak upgrade plan for kubernetes 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 12:45:31 +01:00
Kjeld Schouten 7a57a3cc40 chore(clustertool): tweak upgrade plan for Talos 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 12:45:07 +01:00
Kjeld Schouten 2b8b09c128 Delete clustertool/embed/generic/kubernetes/system/kyverno/app directory 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 12:10:44 +01:00
Kjeld Schouten 9650b28209 Delete clustertool/embed/generic/kubernetes/core/kyverno-policies/app directory 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 12:10:28 +01:00
Kjeld Schouten 708d0ffcac feat(clustertool): remove kyverno schematic policy 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 12:09:43 +01:00
Kjeld Schouten f36acdbffe feat(clustertool): dont have system-upgrade-controller depend on kyverno 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 12:08:26 +01:00
Kjeld Schouten 041ca23bd7 feat(clsutertool): enable admission policy mutation feature gate 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 11:57:19 +01:00
Kjeld Schouten ee33651779 feat(clustertool): add some api-server args 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 11:54:43 +01:00
Kjeld Schouten f2cc05e0fd feat(clustertool): by default forward cluster dns to host 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 11:47:55 +01:00
Kjeld Schouten d2cd7d1242 chore(clustertool): tweak patch defaults 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 11:44:35 +01:00
Kjeld Schouten 63fc480d78 fix(clustertool): adapt nfs and containers defaults 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 11:34:34 +01:00
Kjeld Schouten b34e1fc040 Update talconfig.yaml 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 11:32:23 +01:00
Kjeld Schouten 4a2fa5be8c fix(clustertool): add another instance of discard_unpacked_layers 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-07 11:30:05 +01:00
TrueCharts Bot d605f26147 fix(deps): update module github.com/budimanjojo/talhelper/v3 v3.0.17 → v3.0.18 (clustertool) (#31725) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/budimanjojo/talhelper/v3](https://redirect.github.com/budimanjojo/talhelper)
| require | patch | `v3.0.17` -> `v3.0.18` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>budimanjojo/talhelper
(github.com/budimanjojo/talhelper/v3)</summary>

###
[`v3.0.18`](https://redirect.github.com/budimanjojo/talhelper/releases/tag/v3.0.18)

[Compare
Source](https://redirect.github.com/budimanjojo/talhelper/compare/v3.0.17...v3.0.18)

#### Changelog

-
[`1dfe04f`](https://redirect.github.com/budimanjojo/talhelper/commit/1dfe04f4085b5431be8d36289c47d9f7a37ba267)
chore(github-action): update renovatebot/github-action action to
v41.0.12
-
[`b3a9d8d`](https://redirect.github.com/budimanjojo/talhelper/commit/b3a9d8d5b46c4bd4d640d9c27cd6e3709893fd7b)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;835](https://redirect.github.com/budimanjojo/talhelper/issues/835))
-
[`9485b27`](https://redirect.github.com/budimanjojo/talhelper/commit/9485b27b38a26949dc95f111f9fa028ca3b3e002)
feat(validate_talconfig): exit with code 1 when issues found
-
[`5261f6e`](https://redirect.github.com/budimanjojo/talhelper/commit/5261f6e9bc8cb7fea002cc616ba4d924645d5596)
feat: update Scoop for talhelper version v3.0.17
-
[`1e1f5ba`](https://redirect.github.com/budimanjojo/talhelper/commit/1e1f5baf54cea2837ff0270c5b0d94dd003f63ba)
feat: update flake
([#&#8203;829](https://redirect.github.com/budimanjojo/talhelper/issues/829))
-
[`5886ae9`](https://redirect.github.com/budimanjojo/talhelper/commit/5886ae9f388613dc0f3b9f17b5228c0d406b77ed)
fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.17
-
[`7ff23ff`](https://redirect.github.com/budimanjojo/talhelper/commit/7ff23ffa382f35a07df3414848ce9ace81326bfa)
fix(deps): update module github.com/siderolabs/image-factory to v0.6.7
-
[`e68ac0c`](https://redirect.github.com/budimanjojo/talhelper/commit/e68ac0c17dd523eba78b96e0d48c4d7d67bc37c5)
fix(deps): update module golang.org/x/mod to v0.23.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2025-02-07 03:46:54 +01:00
TrueCharts Bot 02dbc8f444 chore(flux): update image kyverno 3.3.4 → 3.3.5 (clustertool) (#31717) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [kyverno](https://redirect.github.com/kyverno/kyverno) | patch |
`3.3.4` -> `3.3.5` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2025-02-07 03:01:42 +01:00
TrueCharts Bot 5f5fb859d6 chore(flux): update image prometheus-operator 10.2.1 → 10.2.2 (clustertool) (#31673) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | patch |
`10.2.1` -> `10.2.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2025-02-06 02:55:21 +01:00
TrueCharts Bot f5d2441582 chore(flux): update helm release cilium 1.16.6 → 1.17.0 (clustertool) (#31654) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/)
([source](https://redirect.github.com/cilium/cilium)) | minor | `1.16.6`
-> `1.17.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>cilium/cilium (cilium)</summary>

###
[`v1.17.0`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.0):
1.17.0

[Compare
Source](https://redirect.github.com/cilium/cilium/compare/1.16.6...1.17.0)

We are excited to announce the **Cilium** **1.17.0** release!

A total of 2761 new commits have been contributed to this release by a
growing community of over 880 developers and over 20,800 GitHub stars!
🤩

To keep up to date with all the latest Cilium releases, see
[Announcements](https://redirect.github.com/cilium/cilium/discussions/categories/announcements)

Here's what's new in v1.17.0:

🚠 **Networking**

- 🚦 **Quality of Service:** Annotate your Pods
for Guaranteed, Burstable or BestEffort egress network traffic priority
([#&#8203;36025](https://redirect.github.com/cilium/cilium/issues/36025),
[@&#8203;hemanthmalla](https://redirect.github.com/hemanthmalla))
- 🌐 **Multi-Cluster Service API:** Use Kubernetes
MCS to manage global services in a Cilium Cluster Mesh
([#&#8203;34439](https://redirect.github.com/cilium/cilium/issues/34439),
[@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))
- 🔀 **Load Balance based on L4 Protocol:**
Differentiate TCP and UDP based protocols for load balancing, so
multiple services on the same port can be directed to different backends
([#&#8203;33434](https://redirect.github.com/cilium/cilium/issues/33434),
[@&#8203;jibi](https://redirect.github.com/jibi))
- 🧲 **Per-Service LB Algorithms:** Choose maglev or random load
balancing algorithms for individual services
([#&#8203;35735](https://redirect.github.com/cilium/cilium/issues/35735),
[@&#8203;kl52752](https://redirect.github.com/kl52752))
- ⛔ **Deny lists for Service source ranges:** Control whether
Kubernetes loadBalancerSourceRanges are treated as an allow or deny list
([#&#8203;36120](https://redirect.github.com/cilium/cilium/issues/36120),
[@&#8203;borkmann](https://redirect.github.com/borkmann))
- 🏊 **Better control over IPAM:** IPs can be allocated
statically using AWS tags, and multi-pool can support single IP ranges
for pools
([#&#8203;34622](https://redirect.github.com/cilium/cilium/issues/34622),
[@&#8203;antonipp](https://redirect.github.com/antonipp);
[#&#8203;34618](https://redirect.github.com/cilium/cilium/issues/34618),
[@&#8203;juliusmh](https://redirect.github.com/juliusmh))
- 🔌 **Dynamic MTU detection:** Cilium respects changes
made to MTU made at runtime without requiring agent restart
([#&#8203;34314](https://redirect.github.com/cilium/cilium/issues/34314),
[@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))

💂‍♀️ **Security**

- 🚀 **Improved network policy performance:** The cost of
computing complex combinations of network policies has been reduced
(Various PRs by [@&#8203;joamaki](https://redirect.github.com/joamaki),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme),
[@&#8203;marseel](https://redirect.github.com/marseel),
[@&#8203;nathanjsweet](https://redirect.github.com/nathanjsweet),
[@&#8203;squeed](https://redirect.github.com/squeed) and
[@&#8203;youngnick](https://redirect.github.com/youngnick))
- 🗂️ **Prioritize critical network policies:** Cilium
respects Kubernetes priorityNamespaces to prioritize endpoint
propagation for critical namespaces when using CiliumEndpointSlices
([#&#8203;34199](https://redirect.github.com/cilium/cilium/issues/34199),
[@&#8203;Kaczyniec](https://redirect.github.com/Kaczyniec))
- 📋 **Validate Network Policies:** Receive better feedback
from Kubernetes when creating network policies
([#&#8203;34585](https://redirect.github.com/cilium/cilium/issues/34585),
[@&#8203;squeed](https://redirect.github.com/squeed);
[#&#8203;35904](https://redirect.github.com/cilium/cilium/issues/35904),
[@&#8203;renyunkang](https://redirect.github.com/renyunkang);
[#&#8203;36598](https://redirect.github.com/cilium/cilium/issues/36598),
[@&#8203;pippolo84](https://redirect.github.com/pippolo84))
- 🏷️ **Select CIDRGroups by Label:** Add labels to CIDRGroups and
use these for network policy selection
([#&#8203;36087](https://redirect.github.com/cilium/cilium/issues/36087),
[@&#8203;squeed](https://redirect.github.com/squeed))
- 🛎️ **Extend ToServices for in-cluster services:** Services
with a selector can be selected with ToServices network policies
statements
([#&#8203;34208](https://redirect.github.com/cilium/cilium/issues/34208),
[@&#8203;chaunceyjiang](https://redirect.github.com/chaunceyjiang))
- 🚧 **FQDN Filtering for hostNetwork:** Use
CiliumClusterwideNetworkPolicy to configure Layer 7 filtering for DNS
requests on nodes in the cluster
([#&#8203;34024](https://redirect.github.com/cilium/cilium/issues/34024),
[@&#8203;atykhyy](https://redirect.github.com/atykhyy))
- 📶 **HTTP policies on port ranges:** Redirect multiple
ports in a single policy towards Envoy for Layer 7 filtering of HTTP
traffic
([#&#8203;36056](https://redirect.github.com/cilium/cilium/issues/36056),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))

🕸️ **Service Mesh & Gateway API**

- ⛩️ **Gateway API 1.2.1:** Add support for the latest
Gateway API v1.2.1 release, including HTTP retries and mirror fractions
([#&#8203;34720](https://redirect.github.com/cilium/cilium/issues/34720),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- 📝 **Static Gateway Addressing:** Cilium now supports statically
specifying addresses for gateways
([#&#8203;33042](https://redirect.github.com/cilium/cilium/issues/33042),
[@&#8203;chaunceyjiang](https://redirect.github.com/chaunceyjiang))
- 🔐 **Improved Envoy TLS handling:** Use SDS for
managing TLS visibility secrets in Envoy, improving policy calculation
speed and secrets access
([#&#8203;35513](https://redirect.github.com/cilium/cilium/issues/35513),
[@&#8203;youngnick](https://redirect.github.com/youngnick))

🛰️ **Observability**

- 🔍 **Dynamic Hubble Metrics:** Configure Hubble metrics with a new
hubble-metrics-config ConfigMap to tune your network observability
([#&#8203;35185](https://redirect.github.com/cilium/cilium/issues/35185),
[@&#8203;rectified95](https://redirect.github.com/rectified95))
- 🛤️ **Track enabled features using Prometheus:** The
cilium-agent and cilium-operator components expose Prometheus metrics
for which features are enabled.
([#&#8203;35852](https://redirect.github.com/cilium/cilium/issues/35852),
[@&#8203;aanm](https://redirect.github.com/aanm))
- 📊 **Many new metrics:** Improved metrics related to BGP,
network connections, network policy, pod management, and Cilium
component status (Various PRs by
[@&#8203;AwesomePatrol](https://redirect.github.com/AwesomePatrol),
[@&#8203;harsimran-pabla](https://redirect.github.com/harsimran-pabla),
[@&#8203;joestringer](https://redirect.github.com/joestringer),
[@&#8203;jshr-w](https://redirect.github.com/jshr-w),
[@&#8203;mikejoh](https://redirect.github.com/mikejoh),
[@&#8203;nimishamehta5](https://redirect.github.com/nimishamehta5),
[@&#8203;odinuge](https://redirect.github.com/odinuge),
[@&#8203;ovidiutirla](https://redirect.github.com/ovidiutirla),
[@&#8203;rectified95](https://redirect.github.com/rectified95) and
[@&#8203;sjdot](https://redirect.github.com/sjdot))

🌅  **Scale**

- 📈 **Better cluster connectivity checking:**
The cilium-health component for cluster-wide network connectivity health
detection is better tuned for reliable health checking at high scale
([#&#8203;35163](https://redirect.github.com/cilium/cilium/issues/35163),
[@&#8203;jshr-w](https://redirect.github.com/jshr-w))
- ⏳ **Rate-limit monitor events:** Balance the
number of eBPF events against the CPU usage required to process them
([#&#8203;29711](https://redirect.github.com/cilium/cilium/issues/29711),
[@&#8203;siwiutki](https://redirect.github.com/siwiutki))
- 👥 **Double-Write Identity mode:** New allocation
mode for Security Identities to ease migration between CRD and KVStore
identity backends
([#&#8203;31920](https://redirect.github.com/cilium/cilium/issues/31920),
[@&#8203;antonipp](https://redirect.github.com/antonipp))
- ⚖️ **Better scale testing:** This release benefits from
regular automated scale testing for network policy
([#&#8203;35278](https://redirect.github.com/cilium/cilium/issues/35278),
[@&#8203;marseel](https://redirect.github.com/marseel))

🏘️ **Community**

- ❤️ Many end-users have stepped forward to tell their stories
running Cilium in production. If your company wants to submit their case
studies let us know. We would love to hear your feedback!
- [Seznam](https://www.cncf.io/case-studies/seznam/), [Alibaba
Cloud](https://www.cncf.io/case-studies/alibaba/),
[SysEleven](https://www.cncf.io/case-studies/syseleven/),
[QingCloud](https://www.cncf.io/case-studies/qingcloud/),
[ECCO](https://www.youtube.com/watch?v=Ennjmo9TFaM),
[Reddit](https://www.youtube.com/watch?v=YNDp7Id7Bbs),
[Confluent](https://www.youtube.com/watch?v=vOSiVeBXYpM),
[SamsungAds](https://www.youtube.com/watch?v=2KlVTx611bk), and
[Sony](https://www.youtube.com/watch?v=M0PincxlHpI)
- The [Cilium Annual Report
2024](https://redirect.github.com/cilium/cilium.io/blob/main/Annual-Reports/Cilium_Annual_Report\_2024.pdf)
was released covering all the highlights from across the community and
marking the “Year of Kubernetes Networking”
- The community gathered at [Cilium + eBPF
Day](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/cilium-ebpf-day/)
and the [Cilium Developer
Summit](https://redirect.github.com/cilium/dev-summits/tree/main/2024-NA)
in Salt Lake City
- Meet us at the upcoming
[CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/)
and the [Cilium Developer
Summit](https://docs.google.com/forms/d/e/1FAIpQLSd8E1dtCYiwqcw1MemQU3RDKlIQNBi2dRVMVGqDPgSow9mKjA/viewform?usp=header)
in London

And finally, we would like to thank you to all contributors of Cilium
that helped directly and indirectly with the project. The success of
Cilium could not happen without all of you. ❤️ ❤️ ❤️

## Other changes

**Bugfixes:**

- Addresses attached to dummy devices aren't ignored from node addresses
even if the device is down, unblocking usage of host network
nodelocaldns with eBPF host routing.
([#&#8203;34228](https://redirect.github.com/cilium/cilium/issues/34228),
[@&#8203;hemanthmalla](https://redirect.github.com/hemanthmalla))
- agent: defend against null pointer refs in cecManager.getEndpoint()
(Backport PR
[#&#8203;37374](https://redirect.github.com/cilium/cilium/issues/37374),
Upstream PR
[#&#8203;37188](https://redirect.github.com/cilium/cilium/issues/37188),
[@&#8203;aetimmes](https://redirect.github.com/aetimmes))
- Allow cilium agent to start on linux kernels that don't have
CONFIG_XFRM. (Backport PR
[#&#8203;37247](https://redirect.github.com/cilium/cilium/issues/37247),
Upstream PR
[#&#8203;37123](https://redirect.github.com/cilium/cilium/issues/37123),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- bgpv2: Do not fail if PeerAddress is not configured for a peer
([#&#8203;36488](https://redirect.github.com/cilium/cilium/issues/36488),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- bpf-tproxy: don't look for local 'established' UDP sockets
([#&#8203;34591](https://redirect.github.com/cilium/cilium/issues/34591),
[@&#8203;atykhyy](https://redirect.github.com/atykhyy))
- bpf:nat: restore a NAT entry if its REV NAT is not found
([#&#8203;35304](https://redirect.github.com/cilium/cilium/issues/35304),
[@&#8203;sugangli](https://redirect.github.com/sugangli))
- bugfix: fixed extravolumes mount in cilium-preflight
([#&#8203;35386](https://redirect.github.com/cilium/cilium/issues/35386),
[@&#8203;tokarev-artem](https://redirect.github.com/tokarev-artem))
- Cilium no longer fails compiling bpf programs if listing network links
is interrupted.
([#&#8203;35259](https://redirect.github.com/cilium/cilium/issues/35259),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- cilium-cli/connectivity: fix nil-pointer dereference if minimum
version can't be detected
([#&#8203;35802](https://redirect.github.com/cilium/cilium/issues/35802),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cilium-dbg: fix status commands for cluster connectivity health
([#&#8203;33972](https://redirect.github.com/cilium/cilium/issues/33972),
[@&#8203;darox](https://redirect.github.com/darox))
- cli: fix a case when connectivity perf command was hanging if LRP was
enabled in the cluster
([#&#8203;35063](https://redirect.github.com/cilium/cilium/issues/35063),
[@&#8203;marseel](https://redirect.github.com/marseel))
- clustermesh: fix MCS-API service export cache not properly deleted
(Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36892](https://redirect.github.com/cilium/cilium/issues/36892),
[@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))
- clustermesh: add support for targetPort in MCS-API (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36875](https://redirect.github.com/cilium/cilium/issues/36875),
[@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))
- Correctly format `cilium status -o json` CLI output for errors and
warnings
([#&#8203;34654](https://redirect.github.com/cilium/cilium/issues/34654),
[@&#8203;nimishamehta5](https://redirect.github.com/nimishamehta5))
- Datasource error fixed for Cilium Operator dashboard
([#&#8203;35420](https://redirect.github.com/cilium/cilium/issues/35420),
[@&#8203;VergeDX](https://redirect.github.com/VergeDX))
- Do not leak ipcache entries when apiserver entities are cluster
external
([#&#8203;35868](https://redirect.github.com/cilium/cilium/issues/35868),
[@&#8203;hemanthmalla](https://redirect.github.com/hemanthmalla))
- endpoint: Skip incremental updates on an endpoint without policy map
(Backport PR
[#&#8203;37374](https://redirect.github.com/cilium/cilium/issues/37374),
Upstream PR
[#&#8203;37312](https://redirect.github.com/cilium/cilium/issues/37312),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- envoy: add configurable access log buffer size (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36823](https://redirect.github.com/cilium/cilium/issues/36823),
[@&#8203;aetimmes](https://redirect.github.com/aetimmes))
- envoy: Configure internal address config based on IP family (Backport
PR
[#&#8203;36781](https://redirect.github.com/cilium/cilium/issues/36781),
Upstream PR
[#&#8203;36733](https://redirect.github.com/cilium/cilium/issues/36733),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- Export Map{Key,Value} fields to prevent `map {get,list}` handler
panics.
([#&#8203;36219](https://redirect.github.com/cilium/cilium/issues/36219),
[@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))
- Fix a bug that prevents a pod from accessing Nodeport services when
the pod is also in scope of a broad-range Egress Gateway policy.
(Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36929](https://redirect.github.com/cilium/cilium/issues/36929),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Fix bug causing the endpoint regeneration failure handler to be
effective only once (Backport PR
[#&#8203;37247](https://redirect.github.com/cilium/cilium/issues/37247),
Upstream PR
[#&#8203;37085](https://redirect.github.com/cilium/cilium/issues/37085),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Fix bug potentially causing newly added endpoints to remain stuck in
waiting-to-regenerate state forever, causing traffic from/to that
endpoint to be incorrectly dropped. (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;37086](https://redirect.github.com/cilium/cilium/issues/37086),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Fix bug that would break all pod-to-pod connectivity when using the
per-tunnel IPsec key system.
([#&#8203;35806](https://redirect.github.com/cilium/cilium/issues/35806),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- Fix clustermesh endpointslice synchronization connectivity test
([#&#8203;34455](https://redirect.github.com/cilium/cilium/issues/34455),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- fix concurrency issue related with allocator cache (Backport PR
[#&#8203;37374](https://redirect.github.com/cilium/cilium/issues/37374),
Upstream PR
[#&#8203;37328](https://redirect.github.com/cilium/cilium/issues/37328),
[@&#8203;aanm](https://redirect.github.com/aanm))
- Fix configuration of proxy-max-concurrent-retries (Backport PR
[#&#8203;37247](https://redirect.github.com/cilium/cilium/issues/37247),
Upstream PR
[#&#8203;37061](https://redirect.github.com/cilium/cilium/issues/37061),
[@&#8203;joestringer](https://redirect.github.com/joestringer))
- Fix error in Cilium-cli that caused the encryption status per-node
command to retrieve only the status of the 1st node.
([#&#8203;34637](https://redirect.github.com/cilium/cilium/issues/34637),
[@&#8203;smagnani96](https://redirect.github.com/smagnani96))
- Fix Hubble exporter config uses wrong separator
([#&#8203;34621](https://redirect.github.com/cilium/cilium/issues/34621),
[@&#8203;chaunceyjiang](https://redirect.github.com/chaunceyjiang))
- Fix incorrect deletion of revNAT entries due to service ID conflict
([#&#8203;34552](https://redirect.github.com/cilium/cilium/issues/34552),
[@&#8203;haozhangami](https://redirect.github.com/haozhangami))
- Fix incorrect trace reason for egress packets when WireGuard is used
with Host Firewall.
([#&#8203;35354](https://redirect.github.com/cilium/cilium/issues/35354),
[@&#8203;smagnani96](https://redirect.github.com/smagnani96))
- Fix memory leak caused by service events when when CNPs/CCNPs are
disabled (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36727](https://redirect.github.com/cilium/cilium/issues/36727),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Fix missing Helm chart version for status command
([#&#8203;34748](https://redirect.github.com/cilium/cilium/issues/34748),
[@&#8203;pgils](https://redirect.github.com/pgils))
- Fix race condition on cilium_ratelimit map
([#&#8203;34554](https://redirect.github.com/cilium/cilium/issues/34554),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- Fix runtime panic with L2announcer name generation
([#&#8203;35031](https://redirect.github.com/cilium/cilium/issues/35031),
[@&#8203;YutaroHayakawa](https://redirect.github.com/YutaroHayakawa))
- Fix services could not be removed in sync-lb-maps-with-k8s-services
controller
([#&#8203;33885](https://redirect.github.com/cilium/cilium/issues/33885),
[@&#8203;haozhangami](https://redirect.github.com/haozhangami))
- fix(clustermesh): mesh connection mode
([#&#8203;34932](https://redirect.github.com/cilium/cilium/issues/34932),
[@&#8203;littlejo](https://redirect.github.com/littlejo))
- Fix: cilium-cli install --repository flag respects repository even
with cached versions.
([#&#8203;35670](https://redirect.github.com/cilium/cilium/issues/35670),
[@&#8203;renyunkang](https://redirect.github.com/renyunkang))
- fix: Hubble metrics not deleted for deleted pods (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36819](https://redirect.github.com/cilium/cilium/issues/36819),
[@&#8203;rectified95](https://redirect.github.com/rectified95))
- Fixed Cilium CLI fatal error: concurrent map read and map write
([#&#8203;35311](https://redirect.github.com/cilium/cilium/issues/35311),
[@&#8203;chaunceyjiang](https://redirect.github.com/chaunceyjiang))
- Fixes a bug where identities may be leaked if a pod changes labels and
is immediately deleted.
([#&#8203;35947](https://redirect.github.com/cilium/cilium/issues/35947),
[@&#8203;orange30](https://redirect.github.com/orange30))
- Fixes a type error that occurred when enabling the Grafana dashboards
in the Helm chart. (Backport PR
[#&#8203;37374](https://redirect.github.com/cilium/cilium/issues/37374),
Upstream PR
[#&#8203;36939](https://redirect.github.com/cilium/cilium/issues/36939),
[@&#8203;nicl-dev](https://redirect.github.com/nicl-dev))
- Fixes BPF Masquerading exclusion CIDR for IPAM modes "eni", "azure"
and "alibabacloud".
([#&#8203;35624](https://redirect.github.com/cilium/cilium/issues/35624),
[@&#8203;pippolo84](https://redirect.github.com/pippolo84))
- gateway-api: Add service observable event handler
([#&#8203;33352](https://redirect.github.com/cilium/cilium/issues/33352),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- helm: Render valid image specs when tag is empty
([#&#8203;34891](https://redirect.github.com/cilium/cilium/issues/34891),
[@&#8203;BenoitKnecht](https://redirect.github.com/BenoitKnecht))
- hubble: fix metrics configuration parsing (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36371](https://redirect.github.com/cilium/cilium/issues/36371),
[@&#8203;kaworu](https://redirect.github.com/kaworu))
- ipam: Avoid empty CIDR in ENI mode
([#&#8203;35695](https://redirect.github.com/cilium/cilium/issues/35695),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- k8s: Avoid panic while checking ip mode
([#&#8203;35782](https://redirect.github.com/cilium/cilium/issues/35782),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- l4lb: fix inability to properly update service after agent restart
([#&#8203;34077](https://redirect.github.com/cilium/cilium/issues/34077),
[@&#8203;oblazek](https://redirect.github.com/oblazek))
- Make initial nat gc async during Daemon initialization.
([#&#8203;34070](https://redirect.github.com/cilium/cilium/issues/34070),
[@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))
- Make LB-IPAM allow IP sharing between services with the same ports but
different protocols
([#&#8203;34691](https://redirect.github.com/cilium/cilium/issues/34691),
[@&#8203;ldlb9527](https://redirect.github.com/ldlb9527))
- maps/nat/stats: Use Start context when waiting for maps (Backport PR
[#&#8203;37277](https://redirect.github.com/cilium/cilium/issues/37277),
Upstream PR
[#&#8203;37262](https://redirect.github.com/cilium/cilium/issues/37262),
[@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))
- Metrics: Fix the reporting of bootstrap metric "overall" scope as it
was not capturing a part of initialization
([#&#8203;34971](https://redirect.github.com/cilium/cilium/issues/34971),
[@&#8203;marseel](https://redirect.github.com/marseel))
- nodeinit: move kubelet restart inside if/else in startup.bash
(Backport PR
[#&#8203;37374](https://redirect.github.com/cilium/cilium/issues/37374),
Upstream PR
[#&#8203;37282](https://redirect.github.com/cilium/cilium/issues/37282),
[@&#8203;ayuspin](https://redirect.github.com/ayuspin))
- operator: don't reconcile non-GAMMA xRoutes without a Cilium-managed
Gateway (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;35718](https://redirect.github.com/cilium/cilium/issues/35718),
[@&#8203;aetimmes](https://redirect.github.com/aetimmes))
- Policy rule labels are tracked more accurately in endpoint policy
maps.
([#&#8203;34437](https://redirect.github.com/cilium/cilium/issues/34437),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Remove "\_count" suffix from doublewrite metrics (Backport PR
[#&#8203;37277](https://redirect.github.com/cilium/cilium/issues/37277),
Upstream PR
[#&#8203;36585](https://redirect.github.com/cilium/cilium/issues/36585),
[@&#8203;antonipp](https://redirect.github.com/antonipp))
- Reopened connections are now correctly counted towards opened in
Active Connection Tracking
([#&#8203;34082](https://redirect.github.com/cilium/cilium/issues/34082),
[@&#8203;AwesomePatrol](https://redirect.github.com/AwesomePatrol))
- sysctlfix: close systemd config file before triggering reload
([#&#8203;36368](https://redirect.github.com/cilium/cilium/issues/36368),
[@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))
- The cilium dnsproxy now handles EDNS0 large buffersize advertisements
better.
([#&#8203;34852](https://redirect.github.com/cilium/cilium/issues/34852),
[@&#8203;bimmlerd](https://redirect.github.com/bimmlerd))

**CI Changes:**

- .github/workflows: Enable DualStack for
conformance-kind-proxy-embedded
([#&#8203;36398](https://redirect.github.com/cilium/cilium/issues/36398),
[@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))
- .github/workflows: fix ci image cache cleaner
([#&#8203;34819](https://redirect.github.com/cilium/cilium/issues/34819),
[@&#8203;aanm](https://redirect.github.com/aanm))
- .github: Add disk-cleanup GHA to ipsec upgrade tests
([#&#8203;34321](https://redirect.github.com/cilium/cilium/issues/34321),
[@&#8203;chancez](https://redirect.github.com/chancez))
- .github: add missing export in variable
([#&#8203;34818](https://redirect.github.com/cilium/cilium/issues/34818),
[@&#8203;aanm](https://redirect.github.com/aanm))
- .github: Clean up cilium-cli action usages
([#&#8203;33573](https://redirect.github.com/cilium/cilium/issues/33573),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- .github: extend timeout for tests-e2e-upgrade workflow
([#&#8203;35696](https://redirect.github.com/cilium/cilium/issues/35696),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- .github: prevent failure when deleting GitHub Actions cache
([#&#8203;34844](https://redirect.github.com/cilium/cilium/issues/34844),
[@&#8203;aanm](https://redirect.github.com/aanm))
- .github: quote arguments in bash string comparison
([#&#8203;35842](https://redirect.github.com/cilium/cilium/issues/35842),
[@&#8203;devodev](https://redirect.github.com/devodev))
- .github: remove CI tests from PR runs if not required
([#&#8203;34726](https://redirect.github.com/cilium/cilium/issues/34726),
[@&#8203;aanm](https://redirect.github.com/aanm))
- .github: remove use of deprecated --disable-check cilium-cli option
([#&#8203;35776](https://redirect.github.com/cilium/cilium/issues/35776),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- .github: Set --interactive=false for cilium status (Backport PR
[#&#8203;37247](https://redirect.github.com/cilium/cilium/issues/37247),
Upstream PR
[#&#8203;37151](https://redirect.github.com/cilium/cilium/issues/37151),
[@&#8203;joestringer](https://redirect.github.com/joestringer))
- .github: Use --input-file when testing piping flows into Hubble CLI
([#&#8203;35858](https://redirect.github.com/cilium/cilium/issues/35858),
[@&#8203;chancez](https://redirect.github.com/chancez))
- .github: Use github ref for git push, not quay ref
([#&#8203;34392](https://redirect.github.com/cilium/cilium/issues/34392),
[@&#8203;joestringer](https://redirect.github.com/joestringer))
- \[v1.17] gh: replace kernel development trees with 6.12 kernel
([#&#8203;36841](https://redirect.github.com/cilium/cilium/issues/36841),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- \[v1.17] gha: use /test to trigger tests in stable branches
([#&#8203;36690](https://redirect.github.com/cilium/cilium/issues/36690),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Add an empty Dockerfile for cilium-cli
([#&#8203;34370](https://redirect.github.com/cilium/cilium/issues/34370),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- Add concurrency to e2e-upgrade tests
([#&#8203;34806](https://redirect.github.com/cilium/cilium/issues/34806),
[@&#8203;aanm](https://redirect.github.com/aanm))
- Add concurrency to test-ipsec-upgrade
([#&#8203;35362](https://redirect.github.com/cilium/cilium/issues/35362),
[@&#8203;aanm](https://redirect.github.com/aanm))
- Add Hubble CLI integration tests and skip running e2e/conformance on
Hubble CLI only changes
([#&#8203;33850](https://redirect.github.com/cilium/cilium/issues/33850),
[@&#8203;chancez](https://redirect.github.com/chancez))
- Allow Renovate to bump to golang v1.22
([#&#8203;33820](https://redirect.github.com/cilium/cilium/issues/33820),
[@&#8203;ferozsalam](https://redirect.github.com/ferozsalam))
- ariane: don't run full test suite for BPF test changes
([#&#8203;34931](https://redirect.github.com/cilium/cilium/issues/34931),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- ariane: don't run tests for renovate config changes
([#&#8203;36543](https://redirect.github.com/cilium/cilium/issues/36543),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- ariane: manage workflow exclusions for changes to CODEOWNERS and
USERS.md
([#&#8203;34894](https://redirect.github.com/cilium/cilium/issues/34894),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Ariane: skip E2E tests when changing unit tests only
([#&#8203;35334](https://redirect.github.com/cilium/cilium/issues/35334),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- bpf/tests: test ipv6 udp packets when redirecting from l3 to l2
([#&#8203;36536](https://redirect.github.com/cilium/cilium/issues/36536),
[@&#8203;rgo3](https://redirect.github.com/rgo3))
- bpf: complexity-tests: add HAVE_SET_RETVAL and HAVE_NETNS_COOKIE for
bpf_sock tests
([#&#8203;35291](https://redirect.github.com/cilium/cilium/issues/35291),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Bugfix: fix cluster name in 100 nodes scale test
([#&#8203;33973](https://redirect.github.com/cilium/cilium/issues/33973),
[@&#8203;thorn3r](https://redirect.github.com/thorn3r))
- CFP-25694: Move cilium/cilium-cli code into cilium/cilium repository
([#&#8203;34178](https://redirect.github.com/cilium/cilium/issues/34178),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- chore(dep): Bump gateway api to the lastest version
([#&#8203;34505](https://redirect.github.com/cilium/cilium/issues/34505),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- ci-clustermesh-upgrade: Increment timeout between rollouts to 10min
([#&#8203;34638](https://redirect.github.com/cilium/cilium/issues/34638),
[@&#8203;pippolo84](https://redirect.github.com/pippolo84))
- ci-e2e-upgrade: Cover wireguard + geneve tunnel (Backport PR
[#&#8203;37247](https://redirect.github.com/cilium/cilium/issues/37247),
Upstream PR
[#&#8203;37163](https://redirect.github.com/cilium/cilium/issues/37163),
[@&#8203;jschwinger233](https://redirect.github.com/jschwinger233))
- CI-Runtime: Allow passing extra cilium options.
([#&#8203;34478](https://redirect.github.com/cilium/cilium/issues/34478),
[@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))
- ci/ipsec: Cilium agents in ci-ipsec-e2e no longer share host's boot ID
([#&#8203;35951](https://redirect.github.com/cilium/cilium/issues/35951),
[@&#8203;jschwinger233](https://redirect.github.com/jschwinger233))
- ci: 100 node scale - alert on bootstrap/cpu/memory regressions
([#&#8203;34897](https://redirect.github.com/cilium/cilium/issues/34897),
[@&#8203;marseel](https://redirect.github.com/marseel))
- CI: Add channel arguments to GKE related workflows
([#&#8203;35522](https://redirect.github.com/cilium/cilium/issues/35522),
[@&#8203;brlbil](https://redirect.github.com/brlbil))
- ci: add leak detection to conformance-ipsec-upgrade (Backport PR
[#&#8203;37169](https://redirect.github.com/cilium/cilium/issues/37169),
Upstream PR
[#&#8203;36377](https://redirect.github.com/cilium/cilium/issues/36377),
[@&#8203;smagnani96](https://redirect.github.com/smagnani96))
- CI: Add list and filter artifacts steps
([#&#8203;35172](https://redirect.github.com/cilium/cilium/issues/35172),
[@&#8203;brlbil](https://redirect.github.com/brlbil))
- CI: Add merge and upload composite action
([#&#8203;35355](https://redirect.github.com/cilium/cilium/issues/35355),
[@&#8203;brlbil](https://redirect.github.com/brlbil))
- ci: add network policy scale test
([#&#8203;35278](https://redirect.github.com/cilium/cilium/issues/35278),
[@&#8203;marseel](https://redirect.github.com/marseel))
- ci: add watch request thresholds
([#&#8203;35808](https://redirect.github.com/cilium/cilium/issues/35808),
[@&#8203;marseel](https://redirect.github.com/marseel))
- ci: allow all GKE K8s release channels
([#&#8203;33770](https://redirect.github.com/cilium/cilium/issues/33770),
[@&#8203;nbusseneau](https://redirect.github.com/nbusseneau))
- ci: clustermesh run tests concurrently
([#&#8203;33942](https://redirect.github.com/cilium/cilium/issues/33942),
[@&#8203;viktor-kurchenko](https://redirect.github.com/viktor-kurchenko))
- ci: configure connectivity test in delegated ipam e2e
([#&#8203;36475](https://redirect.github.com/cilium/cilium/issues/36475),
[@&#8203;wedaly](https://redirect.github.com/wedaly))
- ci: conformance-kind: don't explicitly enable session affinity
([#&#8203;35290](https://redirect.github.com/cilium/cilium/issues/35290),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- ci: datapath-verifier: also run on 6.12 kernel
([#&#8203;36619](https://redirect.github.com/cilium/cilium/issues/36619),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- ci: fix cleanup of stale kops clusters.
([#&#8203;35986](https://redirect.github.com/cilium/cilium/issues/35986),
[@&#8203;marseel](https://redirect.github.com/marseel))
- ci: fix native wireguard encryption
([#&#8203;35520](https://redirect.github.com/cilium/cilium/issues/35520),
[@&#8203;marseel](https://redirect.github.com/marseel))
- CI: Fix syntax error in Image Cache Cleaner
([#&#8203;35104](https://redirect.github.com/cilium/cilium/issues/35104),
[@&#8203;brlbil](https://redirect.github.com/brlbil))
- ci: increase verbosity of print-downgrade-script.sh
([#&#8203;34668](https://redirect.github.com/cilium/cilium/issues/34668),
[@&#8203;marseel](https://redirect.github.com/marseel))
- ci: Introduce CILIUM_INSTALL_NET_PERF_EXTRA_ARGS env var
([#&#8203;35178](https://redirect.github.com/cilium/cilium/issues/35178),
[@&#8203;markpash](https://redirect.github.com/markpash))
- ci: kind proxy run tests concurrently
([#&#8203;33944](https://redirect.github.com/cilium/cilium/issues/33944),
[@&#8203;viktor-kurchenko](https://redirect.github.com/viktor-kurchenko))
- CI: l4lb allow extra opts
([#&#8203;34813](https://redirect.github.com/cilium/cilium/issues/34813),
[@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))
- ci: more robust hubble relay service port-forwarding (Backport PR
[#&#8203;37247](https://redirect.github.com/cilium/cilium/issues/37247),
Upstream PR
[#&#8203;37110](https://redirect.github.com/cilium/cilium/issues/37110),
[@&#8203;rolinh](https://redirect.github.com/rolinh))
- ci: Move CiliumEndpointSlice migration to schedule
([#&#8203;34828](https://redirect.github.com/cilium/cilium/issues/34828),
[@&#8203;marseel](https://redirect.github.com/marseel))
- ci: netperf always run hubble
([#&#8203;35268](https://redirect.github.com/cilium/cilium/issues/35268),
[@&#8203;marseel](https://redirect.github.com/marseel))
- ci: Reduce concurrency for AWS CNI test
([#&#8203;34683](https://redirect.github.com/cilium/cilium/issues/34683),
[@&#8203;marseel](https://redirect.github.com/marseel))
- CI: remove unsed env variable
([#&#8203;35149](https://redirect.github.com/cilium/cilium/issues/35149),
[@&#8203;brlbil](https://redirect.github.com/brlbil))
- ci: run privileged tests in parallel except for IPSec
([#&#8203;35232](https://redirect.github.com/cilium/cilium/issues/35232),
[@&#8203;marseel](https://redirect.github.com/marseel))
- ci: skip certain workflows for changes only affecting cilium-cli
([#&#8203;34550](https://redirect.github.com/cilium/cilium/issues/34550),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- ci: switch most remaining workflows to new IPsec key system
([#&#8203;35295](https://redirect.github.com/cilium/cilium/issues/35295),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- ci: Update branch matrix list in call-backport-label-updater
([#&#8203;33761](https://redirect.github.com/cilium/cilium/issues/33761),
[@&#8203;pippolo84](https://redirect.github.com/pippolo84))
- ci: Update ref to cilium/scaffolding in ClusterMesh scale test
workflow
([#&#8203;34499](https://redirect.github.com/cilium/cilium/issues/34499),
[@&#8203;learnitall](https://redirect.github.com/learnitall))
- CI: Update tested K8S versions
([#&#8203;35726](https://redirect.github.com/cilium/cilium/issues/35726),
[@&#8203;brlbil](https://redirect.github.com/brlbil))
- ci: use the VERSION file from the PR branch in push-charts-ci.yaml
([#&#8203;35950](https://redirect.github.com/cilium/cilium/issues/35950),
[@&#8203;ferozsalam](https://redirect.github.com/ferozsalam))
- cilium-cli/connectivity: allow to specify log levels to check
([#&#8203;36231](https://redirect.github.com/cilium/cilium/issues/36231),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cilium-cli/connectivity: disable warning log checks before v1.17
([#&#8203;36358](https://redirect.github.com/cilium/cilium/issues/36358),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- cilium-cli/connectivity: fix IPv6 feature check for 2ndary node IPv6
([#&#8203;36513](https://redirect.github.com/cilium/cilium/issues/36513),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cilium-cli: connectivity: fix the local-redirect-policy flow
validation
([#&#8203;34919](https://redirect.github.com/cilium/cilium/issues/34919),
[@&#8203;ysksuzuki](https://redirect.github.com/ysksuzuki))
- cilium-cli: Define CLI_MAIN_DIR Make variable
([#&#8203;34910](https://redirect.github.com/cilium/cilium/issues/34910),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- cilium-cli: Ignore "No egress gateway found" drops
([#&#8203;35609](https://redirect.github.com/cilium/cilium/issues/35609),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- cilium-cli: Improve tcpdump termination timeout handling
([#&#8203;36021](https://redirect.github.com/cilium/cilium/issues/36021),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))
- cilium-cli: retry exec-in-pod requests in case of transient errors
([#&#8203;35961](https://redirect.github.com/cilium/cilium/issues/35961),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cilium-cli: Run BGP tests sequentially
([#&#8203;35727](https://redirect.github.com/cilium/cilium/issues/35727),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- Cleanup leaked GCE kops clusters
([#&#8203;35915](https://redirect.github.com/cilium/cilium/issues/35915),
[@&#8203;marseel](https://redirect.github.com/marseel))
- Cleanups after LLVM upgrade.
([#&#8203;32067](https://redirect.github.com/cilium/cilium/issues/32067),
[@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))
- cli/connectivity: Check for unexpected warning logs
([#&#8203;35723](https://redirect.github.com/cilium/cilium/issues/35723),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- cli/connectivity: Test strict mode encryption
([#&#8203;35231](https://redirect.github.com/cilium/cilium/issues/35231),
[@&#8203;jschwinger233](https://redirect.github.com/jschwinger233))
- cli: Don't ignore datapath bug packet drops
([#&#8203;36105](https://redirect.github.com/cilium/cilium/issues/36105),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- clustermesh: Run cilium-cli inside Docker
([#&#8203;33749](https://redirect.github.com/cilium/cilium/issues/33749),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- conformance-{gateway-api,ingress}: Run cilium-cli inside Docker
([#&#8203;33724](https://redirect.github.com/cilium/cilium/issues/33724),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- contrib/scripts/kind.sh: fix DNS resolution on nodes
([#&#8203;34154](https://redirect.github.com/cilium/cilium/issues/34154),
[@&#8203;atykhyy](https://redirect.github.com/atykhyy))
- datapath: Improve XFRM leak tests
([#&#8203;35796](https://redirect.github.com/cilium/cilium/issues/35796),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- Enabling IPSec pod-to-pod-with-l7-policy-encryption connectivity test
for v1.15 and v1.16.
([#&#8203;35742](https://redirect.github.com/cilium/cilium/issues/35742),
[@&#8203;smagnani96](https://redirect.github.com/smagnani96))
- envoy: Add renovate configuration for cilium-proxy image
([#&#8203;33424](https://redirect.github.com/cilium/cilium/issues/33424),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- Fix bug in testsuite where a list of Pods was initialized with several
empty elements rather than allocating the buffer with space for enough
elements.
([#&#8203;35164](https://redirect.github.com/cilium/cilium/issues/35164),
[@&#8203;rusttech](https://redirect.github.com/rusttech))
- Fix bug preventing the ability to build images with non-stripped
binaries
([#&#8203;35326](https://redirect.github.com/cilium/cilium/issues/35326),
[@&#8203;learnitall](https://redirect.github.com/learnitall))
- Fix cilium CLI connectivity tests in IPv6-only clusters.
([#&#8203;36026](https://redirect.github.com/cilium/cilium/issues/36026),
[@&#8203;wedaly](https://redirect.github.com/wedaly))
- Fix flake in node manager `TestNodeManagerEmitStatus` test
([#&#8203;36097](https://redirect.github.com/cilium/cilium/issues/36097),
[@&#8203;glrf](https://redirect.github.com/glrf))
- fqdn-perf: allow to inject additional metrics measurements
([#&#8203;33583](https://redirect.github.com/cilium/cilium/issues/33583),
[@&#8203;marseel](https://redirect.github.com/marseel))
- gh: cilium-config: enable IPv6 BPF Masquerade with HostFW
([#&#8203;33686](https://redirect.github.com/cilium/cilium/issues/33686),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- gh: e2e-upgrade: add coverage for 6.12 kernel
([#&#8203;36640](https://redirect.github.com/cilium/cilium/issues/36640),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- gh: e2e-upgrade: re-enable config 12
([#&#8203;34218](https://redirect.github.com/cilium/cilium/issues/34218),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- gh: e2e-upgrade: use DSR-Geneve in config 15 (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36982](https://redirect.github.com/cilium/cilium/issues/36982),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- gh: harmonize lvh kernel naming scheme (Backport PR
[#&#8203;37374](https://redirect.github.com/cilium/cilium/issues/37374),
Upstream PR
[#&#8203;37322](https://redirect.github.com/cilium/cilium/issues/37322),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- gh: nat46x64: don't set DSR dispatch mode when LB mode is SNAT
([#&#8203;33726](https://redirect.github.com/cilium/cilium/issues/33726),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- gh: update removed --loglevel option for kind (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36935](https://redirect.github.com/cilium/cilium/issues/36935),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- gha(update-label-backport): ignore leading 'v' in branch parameter
([#&#8203;34013](https://redirect.github.com/cilium/cilium/issues/34013),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: Add coverage for policy secret sync
([#&#8203;36040](https://redirect.github.com/cilium/cilium/issues/36040),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- gha: Allow CRD mismatch for Gateway API conformance
([#&#8203;33536](https://redirect.github.com/cilium/cilium/issues/33536),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- gha: always collect and upload sysdump if 100 nodes scale test fails
([#&#8203;36367](https://redirect.github.com/cilium/cilium/issues/36367),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: always respect the given image-tag in the helm-default action
([#&#8203;36293](https://redirect.github.com/cilium/cilium/issues/36293),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: Bump k8s version to v1.32.0 (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36905](https://redirect.github.com/cilium/cilium/issues/36905),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- gha: bump ubuntu version in conformance-externalworkloads (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36859](https://redirect.github.com/cilium/cilium/issues/36859),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: compress profiles archives in scale/perf tests
([#&#8203;33729](https://redirect.github.com/cilium/cilium/issues/33729),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: correctly downgrade to patch release in ipsec workflows (Backport
PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36858](https://redirect.github.com/cilium/cilium/issues/36858),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: default the helm-default image-tag also in pull request workflows
([#&#8203;36314](https://redirect.github.com/cilium/cilium/issues/36314),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: Disable envoy version check in upgrade/downgrade tests (Backport
PR
[#&#8203;36739](https://redirect.github.com/cilium/cilium/issues/36739),
Upstream PR
[#&#8203;36734](https://redirect.github.com/cilium/cilium/issues/36734),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- gha: Enable Ingress Controller test in upgrade
([#&#8203;34185](https://redirect.github.com/cilium/cilium/issues/34185),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- gha: Enable ingress-controller in e2e tests
([#&#8203;36043](https://redirect.github.com/cilium/cilium/issues/36043),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- gha: Enable parallel requests for L7 tests
([#&#8203;36623](https://redirect.github.com/cilium/cilium/issues/36623),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- gha: enable the log-errors check in the clustermesh upgrade workflow
([#&#8203;35739](https://redirect.github.com/cilium/cilium/issues/35739),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: extra Cilium agents CPU and Mem metrics in clustermesh scale test
([#&#8203;36481](https://redirect.github.com/cilium/cilium/issues/36481),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: fix case mismatch in conformance clustermesh ipFamily variable
([#&#8203;34555](https://redirect.github.com/cilium/cilium/issues/34555),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: fix permissions of update label backport PR workflow
([#&#8203;35117](https://redirect.github.com/cilium/cilium/issues/35117),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: fix retrieval of DNS server in conformance external workloads
(Backport PR
[#&#8203;37374](https://redirect.github.com/cilium/cilium/issues/37374),
Upstream PR
[#&#8203;37361](https://redirect.github.com/cilium/cilium/issues/37361),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: Retrieve eks supported version via aws cli (Backport PR
[#&#8203;37222](https://redirect.github.com/cilium/cilium/issues/37222),
Upstream PR
[#&#8203;37210](https://redirect.github.com/cilium/cilium/issues/37210),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- gha: Simplify integration test job
([#&#8203;34676](https://redirect.github.com/cilium/cilium/issues/34676),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- gha: test disabled kvstoremesh clustermesh upgrade/downgrade tests
([#&#8203;36242](https://redirect.github.com/cilium/cilium/issues/36242),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: uniform downgrade settings in clustermesh upgrade/downgrade test
([#&#8203;36239](https://redirect.github.com/cilium/cilium/issues/36239),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gha: Update logic to extract gateway-api version
([#&#8203;35189](https://redirect.github.com/cilium/cilium/issues/35189),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- ginkgo: Get rid of K8sUpdates
([#&#8203;35035](https://redirect.github.com/cilium/cilium/issues/35035),
[@&#8203;brb](https://redirect.github.com/brb))
- Ginkgo: test runner: add flag to allow helm overrides
([#&#8203;34096](https://redirect.github.com/cilium/cilium/issues/34096),
[@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))
- github: Add a workflow to build cilium-cli binaries
([#&#8203;34462](https://redirect.github.com/cilium/cilium/issues/34462),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- github: bump LVH image versions
([#&#8203;35719](https://redirect.github.com/cilium/cilium/issues/35719),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- github: Checkout code before running cilium/cilium-cli action
([#&#8203;36117](https://redirect.github.com/cilium/cilium/issues/36117),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- github: Fix branch name in build-go-caches.yaml
([#&#8203;36906](https://redirect.github.com/cilium/cilium/issues/36906),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- github: Simplify the checkout logic
([#&#8203;36190](https://redirect.github.com/cilium/cilium/issues/36190),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- hive/metrics: Fix flaky test
([#&#8203;36418](https://redirect.github.com/cilium/cilium/issues/36418),
[@&#8203;ovidiutirla](https://redirect.github.com/ovidiutirla))
- hubble: ignore some testifylint linter errors
([#&#8203;36096](https://redirect.github.com/cilium/cilium/issues/36096),
[@&#8203;rolinh](https://redirect.github.com/rolinh))
- integration: Bump ubuntu to 24.04 for arm runners (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;37042](https://redirect.github.com/cilium/cilium/issues/37042),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- Introduce ClusterMesh scale tests
([#&#8203;33562](https://redirect.github.com/cilium/cilium/issues/33562),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- ipsec: Fix arguments in XFRM IN policy test
([#&#8203;36030](https://redirect.github.com/cilium/cilium/issues/36030),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- ipsec: Run cilium-cli inside Docker
([#&#8203;33750](https://redirect.github.com/cilium/cilium/issues/33750),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- labeler: Add cilium-cli label
([#&#8203;34447](https://redirect.github.com/cilium/cilium/issues/34447),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- Makefile: Increase timeout for integration tests to 12min (Backport PR
[#&#8203;37374](https://redirect.github.com/cilium/cilium/issues/37374),
Upstream PR
[#&#8203;37279](https://redirect.github.com/cilium/cilium/issues/37279),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- metrics: Add metrics config test for Hubble.
([#&#8203;34325](https://redirect.github.com/cilium/cilium/issues/34325),
[@&#8203;rectified95](https://redirect.github.com/rectified95))
- Miscellaneus improvements to the clustermesh scale test
([#&#8203;34704](https://redirect.github.com/cilium/cilium/issues/34704),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Modify bpftrace script in CI to ignore proxy traffic if destination is
outside pod CIDRs. (Backport PR
[#&#8203;37126](https://redirect.github.com/cilium/cilium/issues/37126),
Upstream PR
[#&#8203;36364](https://redirect.github.com/cilium/cilium/issues/36364),
[@&#8203;smagnani96](https://redirect.github.com/smagnani96))
- net-perf-gke: Shorten the cluster name
([#&#8203;34260](https://redirect.github.com/cilium/cilium/issues/34260),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- option: Fix merge conflict in test expectations
([#&#8203;33572](https://redirect.github.com/cilium/cilium/issues/33572),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- perf: Run cilium-cli inside Docker
([#&#8203;33752](https://redirect.github.com/cilium/cilium/issues/33752),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- policy/ci: Add Complex Allow Test to Policy Engine
([#&#8203;35156](https://redirect.github.com/cilium/cilium/issues/35156),
[@&#8203;nathanjsweet](https://redirect.github.com/nathanjsweet))
- Quarantine of high-scale IPcache
([#&#8203;36376](https://redirect.github.com/cilium/cilium/issues/36376),
[@&#8203;Artyop](https://redirect.github.com/Artyop))
- Reapply "kind.sh: fix DNS resolution on nodes, make external DNS
configurable
([#&#8203;34293](https://redirect.github.com/cilium/cilium/issues/34293),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- Remove ghc in GHA disk cleanup
([#&#8203;34320](https://redirect.github.com/cilium/cilium/issues/34320),
[@&#8203;chancez](https://redirect.github.com/chancez))
- renovate: Fix image updates for IPsec workflows
([#&#8203;35555](https://redirect.github.com/cilium/cilium/issues/35555),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- renovate: manually bump version
([#&#8203;35660](https://redirect.github.com/cilium/cilium/issues/35660),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- renovate: Only update patch version for statedb
([#&#8203;33623](https://redirect.github.com/cilium/cilium/issues/33623),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- renovate: use proper image repository for config check
([#&#8203;36227](https://redirect.github.com/cilium/cilium/issues/36227),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- renovate: various smaller updates
([#&#8203;36135](https://redirect.github.com/cilium/cilium/issues/36135),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Revert "ci: increase verbosity of print-downgrade-script.sh"
([#&#8203;34863](https://redirect.github.com/cilium/cilium/issues/34863),
[@&#8203;marseel](https://redirect.github.com/marseel))
- Run cilium-cli inside Docker
([#&#8203;33753](https://redirect.github.com/cilium/cilium/issues/33753),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- Run cilium-cli inside Docker
([#&#8203;33797](https://redirect.github.com/cilium/cilium/issues/33797),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- Run ipv6 smoke test inside Docker
([#&#8203;34191](https://redirect.github.com/cilium/cilium/issues/34191),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- Run scheduled workflows every 8h instead of 6h
([#&#8203;34898](https://redirect.github.com/cilium/cilium/issues/34898),
[@&#8203;auriaave](https://redirect.github.com/auriaave))
- scale-test: disable kube-proxy and configure KPR
([#&#8203;33664](https://redirect.github.com/cilium/cilium/issues/33664),
[@&#8203;thorn3r](https://redirect.github.com/thorn3r))
- Skip tracking unmarked plain-text TCP RST packets generated from proxy
timeouts in the CI bpftrace script. (Backport PR
[#&#8203;37247](https://redirect.github.com/cilium/cilium/issues/37247),
Upstream PR
[#&#8203;36962](https://redirect.github.com/cilium/cilium/issues/36962),
[@&#8203;smagnani96](https://redirect.github.com/smagnani96))
- test, cli/connectivity: Remove stale error log exceptions
([#&#8203;35848](https://redirect.github.com/cilium/cilium/issues/35848),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- test/helpers: Update operator lock error
([#&#8203;34307](https://redirect.github.com/cilium/cilium/issues/34307),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- test/k8s: remove unused migrate-svc manifests
([#&#8203;36388](https://redirect.github.com/cilium/cilium/issues/36388),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- test/runtime: Remove already-covered test for agent restart
([#&#8203;34357](https://redirect.github.com/cilium/cilium/issues/34357),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- test: add dual-stack to delegated IPAM E2E test
([#&#8203;34937](https://redirect.github.com/cilium/cilium/issues/34937),
[@&#8203;wedaly](https://redirect.github.com/wedaly))
- test: Add unit tests for directory policy watcher
([#&#8203;33920](https://redirect.github.com/cilium/cilium/issues/33920),
[@&#8203;tamilmani1989](https://redirect.github.com/tamilmani1989))
- test: Cilium Identity management tests
([#&#8203;34743](https://redirect.github.com/cilium/cilium/issues/34743),
[@&#8203;dlapcevic](https://redirect.github.com/dlapcevic))
- test: drop no-op `-cilium.provision-k8s` flag (Backport PR
[#&#8203;37374](https://redirect.github.com/cilium/cilium/issues/37374),
Upstream PR
[#&#8203;37300](https://redirect.github.com/cilium/cilium/issues/37300),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- test: e2e tests for delegated IPAM
([#&#8203;34839](https://redirect.github.com/cilium/cilium/issues/34839),
[@&#8203;wedaly](https://redirect.github.com/wedaly))
- test: Fix the flake for TestRestoredPort (Backport PR
[#&#8203;37247](https://redirect.github.com/cilium/cilium/issues/37247),
Upstream PR
[#&#8203;37106](https://redirect.github.com/cilium/cilium/issues/37106),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- test: Move demo-httpd from Docker to Quay (Backport PR
[#&#8203;37247](https

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2025-02-05 03:04:47 +01:00
TrueCharts Bot d1f2d2e934 chore(flux): update image cert-manager 6.5.2 → 6.5.3 (clustertool) (#31639) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cert-manager](https://truecharts.org/charts/system/cert-manager)
([source](https://cert-manager.io/)) | patch | `6.5.2` -> `6.5.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2025-02-05 01:59:46 +00:00
Alfred Göppel 8e0f07af7d fix(devcontainer): Update version (#31602) 
**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: Alfred Göppel <43101280+alfi0812@users.noreply.github.com>
Signed-off-by: Xstar97TheNoob <9399967+xstar97@users.noreply.github.com>
Co-authored-by: Xstar97TheNoob <9399967+xstar97@users.noreply.github.com>
 2025-02-04 19:40:35 -05:00
Kjeld Schouten aa83fc1991 feat(clustertool): disable scheduler ImageLocality 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-03 12:37:34 +01:00
Kjeld Schouten 020249cd29 feat(clustertool): update sysctls 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-03 12:35:32 +01:00
Kjeld Schouten 2e85b6353d Update all.yaml 
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
 2025-02-03 12:28:05 +01:00
TrueCharts-Bot f8f6d744c4 Commit daily changes 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2025-02-03 00:13:01 +00:00