0ef8bc1fa8d20ebba1d2ef1fbae4202391d8fe3e
539
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
|
fc676212bf |
clustertool: repo strange file (#34175)
**Description** <!-- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. --> Always wondering why this file is here. Time to clean up :-) ⚒️ Fixes # <!--(issue)--> **⚙️ Type of change** - [ ] ⚙️ Feature/App addition - [x] 🪛 Bugfix - [ ] ⚠️ Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] 🔃 Refactor of current code - [ ] 📜 Documentation Changes **🧪 How Has This Been Tested?** <!-- Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration --> **📃 Notes:** <!-- Please enter any other relevant information here --> **✔️ Checklist:** - [ ] ⚖️ My code follows the style guidelines of this project - [ ] 👀 I have performed a self-review of my own code - [ ] #️⃣ I have commented my code, particularly in hard-to-understand areas - [ ] 📄 I have made changes to the documentation - [ ] 🧪 I have added tests to this description that prove my fix is effective or that my feature works - [ ] ⬆️ I increased versions for any altered app according to semantic versioning - [x] I made sure the title starts with `feat(chart-name):`, `fix(chart-name):`, `chore(chart-name):`, `docs(chart-name):` or `fix(docs):` **➕ App addition** If this PR is an app addition please make sure you have done the following. - [ ] 🖼️ I have added an icon in the Chart's root directory called `icon.png` --- _Please don't blindly check all the boxes. Read them and only check those that apply. Those checkboxes are there for the reviewer to see what is this all about and the status of this PR with a quick glance._ |
||
|
|
275d04f4d7 |
fix(clustertool): update deprecated charts & remove topolvm labels (#34172)
**Description** <!-- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. --> ⚒️ Fixes # <!--(issue)--> **⚙️ Type of change** - [ ] ⚙️ Feature/App addition - [x] 🪛 Bugfix - [ ] ⚠️ Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] 🔃 Refactor of current code - [ ] 📜 Documentation Changes **🧪 How Has This Been Tested?** <!-- Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration --> **📃 Notes:** <!-- Please enter any other relevant information here --> **✔️ Checklist:** - [x] ⚖️ My code follows the style guidelines of this project - [x] 👀 I have performed a self-review of my own code - [ ] #️⃣ I have commented my code, particularly in hard-to-understand areas - [ ] 📄 I have made changes to the documentation - [ ] 🧪 I have added tests to this description that prove my fix is effective or that my feature works - [ ] ⬆️ I increased versions for any altered app according to semantic versioning - [x] I made sure the title starts with `feat(chart-name):`, `fix(chart-name):`, `chore(chart-name):`, `docs(chart-name):` or `fix(docs):` **➕ App addition** If this PR is an app addition please make sure you have done the following. - [ ] 🖼️ I have added an icon in the Chart's root directory called `icon.png` --- _Please don't blindly check all the boxes. Read them and only check those that apply. Those checkboxes are there for the reviewer to see what is this all about and the status of this PR with a quick glance._ |
||
|
|
61b5d0d160 | chore: run pre-commit | ||
|
|
b3c027f0c8 | fix(clustertool): new round of indent fixes | ||
|
|
ca0a7cadcf | fix(clustertool): correct artifacthub link | ||
|
|
6268079ef7 | chore(clustertool): remove scale export test data | ||
|
|
1334eb139e | fix(clustertool): use helm yaml rendering for chart.yaml | ||
|
|
018fa419a0 | fix(clustertool): fix pathing issues with dependency fetching | ||
|
|
a194c264c1 | fix(clustertool): error when downloaded dep is missing from cache folder and add verbosity | ||
|
|
35a8ce339d | fix(clustertool): revert dynamic trailing slash detection for now and fix jetstack | ||
|
|
ad709e7f13 | feat(clustertool): add support url to Chart.yaml annotations | ||
|
|
5ed725e528 | fix(clustertool): handle with oci repository reference with trailing slash | ||
|
|
3ac3e8c2a9 | fix(clustertool): remove home-ops-mirror trailing slash | ||
|
|
7ba9287173 | fix(clustertool): correct bug where Chart.yaml was writhen with indentation | ||
|
|
1d5650d5aa |
chore(flux): update image blocky 16.13.13 → 16.13.14 (clustertool) (#34053)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [blocky](https://truecharts.org/charts/premium/blocky) ([source](https://0xerr0r.github.io/blocky/)) | patch | `16.13.13` -> `16.13.14` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMzMuNSIsInVwZGF0ZWRJblZlciI6IjM5LjIzMy41IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
76732478b2 |
Commit daily changes
Signed-off-by: TrueCharts-Bot <bot@truecharts.org> |
||
|
|
8d58c9544a | chore(clustertool): remove SCALE related features | ||
|
|
29eca28c44 | fix go mod | ||
|
|
5bda52bb31 | fix(clustertool): move cert-manager to jetstack oci | ||
|
|
d3a49f43d7 |
fix(clustertool): nginx (#34016)
**Description** <!-- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. --> Add repo nginx ⚒️ Fixes # <!--(issue)--> [34015](https://github.com/truecharts/public/issues/34015) **⚙️ Type of change** - [ ] ⚙️ Feature/App addition - [x] 🪛 Bugfix - [ ] ⚠️ Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] 🔃 Refactor of current code - [ ] 📜 Documentation Changes **🧪 How Has This Been Tested?** <!-- Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration --> Deployed now correctly on my test cluster **📃 Notes:** <!-- Please enter any other relevant information here --> **✔️ Checklist:** - [ ] ⚖️ My code follows the style guidelines of this project - [ ] 👀 I have performed a self-review of my own code - [ ] #️⃣ I have commented my code, particularly in hard-to-understand areas - [ ] 📄 I have made changes to the documentation - [ ] 🧪 I have added tests to this description that prove my fix is effective or that my feature works - [ ] ⬆️ I increased versions for any altered app according to semantic versioning - [ ] I made sure the title starts with `feat(chart-name):`, `fix(chart-name):`, `chore(chart-name):`, `docs(chart-name):` or `fix(docs):` **➕ App addition** If this PR is an app addition please make sure you have done the following. - [x] 🖼️ I have added an icon in the Chart's root directory called `icon.png` --- _Please don't blindly check all the boxes. Read them and only check those that apply. Those checkboxes are there for the reviewer to see what is this all about and the status of this PR with a quick glance._ |
||
|
|
80332f81d3 |
fix(clustertool) memory request kube-prometheus-stack (#34017)
**Description** <!-- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. --> With new Clustertool Beta 2, upstream `kube-prometheus-stack` takes a memory request of: 2000Mi. It would like to deploy 2x a POD so a total of 4000Mi. My test cluster have memory of 8Gb. It cannot deploy this 2nd pod as the request of a standard clustertool without this second pod is already 98.2%. Will also block all other deployments. Also the webpage manual changed. Hopefully this is a good fix? ⚒️ Fixes # <!--(issue)--> **⚙️ Type of change** - [ ] ⚙️ Feature/App addition - [x] 🪛 Bugfix - [ ] ⚠️ Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] 🔃 Refactor of current code - [x] 📜 Documentation Changes **🧪 How Has This Been Tested?** <!-- Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration --> Own cluster **📃 Notes:** <!-- Please enter any other relevant information here --> **✔️ Checklist:** - [ ] ⚖️ My code follows the style guidelines of this project - [x] 👀 I have performed a self-review of my own code - [ ] #️⃣ I have commented my code, particularly in hard-to-understand areas - [ ] 📄 I have made changes to the documentation - [ ] 🧪 I have added tests to this description that prove my fix is effective or that my feature works - [ ] ⬆️ I increased versions for any altered app according to semantic versioning - [x] I made sure the title starts with `feat(chart-name):`, `fix(chart-name):`, `chore(chart-name):`, `docs(chart-name):` or `fix(docs):` **➕ App addition** If this PR is an app addition please make sure you have done the following. - [ ] 🖼️ I have added an icon in the Chart's root directory called `icon.png` --- _Please don't blindly check all the boxes. Read them and only check those that apply. Those checkboxes are there for the reviewer to see what is this all about and the status of this PR with a quick glance._ --------- Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl> Co-authored-by: Kjeld Schouten <info@kjeldschouten.nl> |
||
|
|
0194ff960c |
fix(clustertool): Adding namespaces to system-upgrade-controller-plans (#34018)
**Description** <!-- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. --> system-upgrade-controller-plans Flux Kustomization will not work -> `Plan/talos namespace not specified: the server could not find the requested resource (patch plans.upgrade.cattle.io talos)` Adding both namespaces fixes the Kustomization directly: `flux-system system-upgrade-controller-plans main@sha1:a963250b False True Applied revision: main@sha1:a963250b` ⚒️ Fixes # <!--(issue)--> **⚙️ Type of change** - [ ] ⚙️ Feature/App addition - [x] 🪛 Bugfix - [ ] ⚠️ Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] 🔃 Refactor of current code - [ ] 📜 Documentation Changes **🧪 How Has This Been Tested?** <!-- Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration --> On my own test cluster **📃 Notes:** <!-- Please enter any other relevant information here --> **✔️ Checklist:** - [ ] ⚖️ My code follows the style guidelines of this project - [x] 👀 I have performed a self-review of my own code - [ ] #️⃣ I have commented my code, particularly in hard-to-understand areas - [ ] 📄 I have made changes to the documentation - [ ] 🧪 I have added tests to this description that prove my fix is effective or that my feature works - [ ] ⬆️ I increased versions for any altered app according to semantic versioning - [x] I made sure the title starts with `feat(chart-name):`, `fix(chart-name):`, `chore(chart-name):`, `docs(chart-name):` or `fix(docs):` **➕ App addition** If this PR is an app addition please make sure you have done the following. - [ ] 🖼️ I have added an icon in the Chart's root directory called `icon.png` --- _Please don't blindly check all the boxes. Read them and only check those that apply. Those checkboxes are there for the reviewer to see what is this all about and the status of this PR with a quick glance._ |
||
|
|
6df18b9fc9 |
fix(deps): update module golang.org/x/crypto v0.36.0 → v0.37.0 (clustertool) (#34027)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | golang.org/x/crypto | require | minor | `v0.36.0` -> `v0.37.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMzIuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIzMi4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=--> |
||
|
|
3574478a1e |
chore(flux): update image docker.io/rancher/system-upgrade-controller v0.14.2 → v0.15.2 (clustertool) (#33925)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/rancher/system-upgrade-controller](https://redirect.github.com/rancher/system-upgrade-controller) | minor | `v0.14.2` -> `v0.15.2` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>rancher/system-upgrade-controller (docker.io/rancher/system-upgrade-controller)</summary> ### [`v0.15.2`](https://redirect.github.com/rancher/system-upgrade-controller/releases/tag/v0.15.2) [Compare Source](https://redirect.github.com/rancher/system-upgrade-controller/compare/v0.15.1...v0.15.2) #### What's Changed - support k8s 1.32.2 by [@​jiaqiluo](https://redirect.github.com/jiaqiluo) in [https://github.com/rancher/system-upgrade-controller/pull/352](https://redirect.github.com/rancher/system-upgrade-controller/pull/352) **Full Changelog**: https://github.com/rancher/system-upgrade-controller/compare/v0.15.1...v0.15.2 ### [`v0.15.1`](https://redirect.github.com/rancher/system-upgrade-controller/releases/tag/v0.15.1) [Compare Source](https://redirect.github.com/rancher/system-upgrade-controller/compare/v0.15.0...v0.15.1) #### What's Changed - feat: add `org.opencontainers.image.source` docker label by [@​viceice](https://redirect.github.com/viceice) in [https://github.com/rancher/system-upgrade-controller/pull/350](https://redirect.github.com/rancher/system-upgrade-controller/pull/350) - Make IgnoreUpdate secrets optional by [@​brandond](https://redirect.github.com/brandond) in [https://github.com/rancher/system-upgrade-controller/pull/351](https://redirect.github.com/rancher/system-upgrade-controller/pull/351) #### New Contributors - [@​viceice](https://redirect.github.com/viceice) made their first contribution in [https://github.com/rancher/system-upgrade-controller/pull/350](https://redirect.github.com/rancher/system-upgrade-controller/pull/350) **Full Changelog**: https://github.com/rancher/system-upgrade-controller/compare/v0.15.0...v0.15.1 ### [`v0.15.0`](https://redirect.github.com/rancher/system-upgrade-controller/releases/tag/v0.15.0) [Compare Source](https://redirect.github.com/rancher/system-upgrade-controller/compare/v0.14.2...v0.15.0) #### What's Changed - Multiple enhancements - leader election, events, time window, delay after upgrading by [@​brandond](https://redirect.github.com/brandond) in [https://github.com/rancher/system-upgrade-controller/pull/335](https://redirect.github.com/rancher/system-upgrade-controller/pull/335) - Include tz files in Docker image by [@​brandond](https://redirect.github.com/brandond) in [https://github.com/rancher/system-upgrade-controller/pull/343](https://redirect.github.com/rancher/system-upgrade-controller/pull/343) **Full Changelog**: https://github.com/rancher/system-upgrade-controller/compare/v0.14.2...v0.15.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuNCIsInVwZGF0ZWRJblZlciI6IjM5LjIyMi40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=--> |
||
|
|
60ad0f60f6 |
chore(flux): update image registry.k8s.io/kubectl v1.31.7 → v1.32.3 (clustertool) (#33926)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | registry.k8s.io/kubectl | minor | `v1.31.7` -> `v1.32.3` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuNCIsInVwZGF0ZWRJblZlciI6IjM5LjIyMi40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=--> |
||
|
|
2d044dc80c |
chore(flux): update image app-template 3.5.1 → 3.7.3 (clustertool) (#33924)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [app-template](https://redirect.github.com/bjw-s/helm-charts) | minor | `3.5.1` -> `3.7.3` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>bjw-s/helm-charts (app-template)</summary> ### [`v3.7.3`](https://redirect.github.com/bjw-s/helm-charts/releases/tag/app-template-3.7.3) [Compare Source](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.7.2...app-template-3.7.3) #### Changelog: ##### Fixed - Fixed name suffix for HTTPRoute - Fixed incorrect default backendRefs values in HTTPRoute ### [`v3.7.2`](https://redirect.github.com/bjw-s/helm-charts/releases/tag/app-template-3.7.2) [Compare Source](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.7.1...app-template-3.7.2) #### Changelog: ##### Fixed - The Apache 2.0 LICENSE file has been added to the chart. - Fixed non-deterministic selection of primary service and port. ### [`v3.7.1`](https://redirect.github.com/bjw-s/helm-charts/releases/tag/app-template-3.7.1) [Compare Source](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.7.0...app-template-3.7.1) #### Changelog: ##### Fixed - Values schema is now dereferenced before packaging so it no longer relies on internet connectivity to validate the schema. ##### Changed - Updated library version to 3.7.1. - [Upgrade instructions from v2.x](https://bjw-s.github.io/helm-charts/docs/app-template/#from-2xx-to-30x) - [Common library chart definition](https://redirect.github.com/bjw-s/helm-charts/blob/main/charts/library/common/Chart.yaml) ### [`v3.7.0`](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.6.1...app-template-3.7.0) [Compare Source](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.6.1...app-template-3.7.0) ### [`v3.6.1`](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.6.0...app-template-3.6.1) [Compare Source](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.6.0...app-template-3.6.1) ### [`v3.6.0`](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.5.1...app-template-3.6.0) [Compare Source](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.5.1...app-template-3.6.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuNCIsInVwZGF0ZWRJblZlciI6IjM5LjIyMi40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=--> |
||
|
|
81f98f2b5b |
fix(clustertool): indent corrections (#33919)
**Description** <!-- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. --> Correct some indent details. Already was irritating on my cluster, so why not change upstream. Also it is matching with the indent of the `.Values` in the same file ⚒️ Fixes # <!--(issue)--> **⚙️ Type of change** - [ ] ⚙️ Feature/App addition - [x] 🪛 Bugfix - [ ] ⚠️ Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] 🔃 Refactor of current code - [ ] 📜 Documentation Changes **🧪 How Has This Been Tested?** <!-- Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration --> **📃 Notes:** <!-- Please enter any other relevant information here --> **✔️ Checklist:** - [ ] ⚖️ My code follows the style guidelines of this project - [ ] 👀 I have performed a self-review of my own code - [ ] #️⃣ I have commented my code, particularly in hard-to-understand areas - [ ] 📄 I have made changes to the documentation - [ ] 🧪 I have added tests to this description that prove my fix is effective or that my feature works - [ ] ⬆️ I increased versions for any altered app according to semantic versioning - [x] I made sure the title starts with `feat(chart-name):`, `fix(chart-name):`, `chore(chart-name):`, `docs(chart-name):` or `fix(docs):` **➕ App addition** If this PR is an app addition please make sure you have done the following. - [ ] 🖼️ I have added an icon in the Chart's root directory called `icon.png` --- _Please don't blindly check all the boxes. Read them and only check those that apply. Those checkboxes are there for the reviewer to see what is this all about and the status of this PR with a quick glance._ |
||
|
|
fa059dbe2f |
chore(flux): update image registry.k8s.io/kubectl v1.31.1 → v1.31.7 (clustertool) (#33914)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | registry.k8s.io/kubectl | patch | `v1.31.1` -> `v1.31.7` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIyMi4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
26d3d68333 | chore(flux): update image docker.io/rancher/system-upgrade-controller v0.14.1 → v0.14.2 (clustertool) (#33912) | ||
|
|
cd2dd7c4fe | fix(clustertool): correct bootstrap issue with nginx vs traefik and kps instead of operator | ||
|
|
f968fb3988 | hmm | ||
|
|
de7c0b824d | cleanup some go stuff | ||
|
|
5e9554a3ce | feat(clustertool): BREAKING CHANGE move to nginx | ||
|
|
580bb08dc5 |
fix(deps): update module github.com/getsops/sops/v3 v3.9.4 → v3.10.1 (clustertool) (#33798)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/getsops/sops/v3](https://redirect.github.com/getsops/sops) | require | minor | `v3.9.4` -> `v3.10.1` | --- ### Release Notes <details> <summary>getsops/sops (github.com/getsops/sops/v3)</summary> ### [`v3.10.1`](https://redirect.github.com/getsops/sops/releases/tag/v3.10.1) [Compare Source](https://redirect.github.com/getsops/sops/compare/v3.10.0...v3.10.1) #### Installation To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release. For instance, if you are using Linux on an AMD64 architecture: ```shell ### Download the binary curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.linux.amd64 ### Move the binary in to your PATH mv sops-v3.10.1.linux.amd64 /usr/local/bin/sops ### Make the binary executable chmod +x /usr/local/bin/sops ``` ##### Verify checksums file signature The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ### Download the checksums file, certificate and signature curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.checksums.txt curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.checksums.pem curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.checksums.sig ### Verify the checksums file cosign verify-blob sops-v3.10.1.checksums.txt \ --certificate sops-v3.10.1.checksums.pem \ --signature sops-v3.10.1.checksums.sig \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature: ```shell ### Verify the binary using the checksums file sha256sum -c sops-v3.10.1.checksums.txt --ignore-missing ``` ##### Verify artifact provenance The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.10.1.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://redirect.github.com/slsa-framework/slsa-verifier#artifacts) tool: ```shell ### Download the metadata file curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.intoto.jsonl ### Verify the provenance of the artifact slsa-verifier verify-artifact <artifact> \ --provenance-path sops-v3.10.1.intoto.jsonl \ --source-uri github.com/getsops/sops \ --source-tag v3.10.1 ``` #### Container Images The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies. These container images are available for the following architectures: `linux/amd64` and `linux/arm64`. ##### GitHub Container Registry - `ghcr.io/getsops/sops:v3.10.1` - `ghcr.io/getsops/sops:v3.10.1-alpine` ##### Quay.io - `quay.io/getsops/sops:v3.10.1` - `quay.io/getsops/sops:v3.10.1-alpine` ##### Verify container image signature The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command: ```shell cosign verify ghcr.io/getsops/sops:v3.10.1 \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ -o text ``` ##### Verify container image provenance The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://redirect.github.com/slsa-framework/slsa-verifier#containers). #### Software Bill of Materials The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`. #### What's Changed - build(deps): Bump the ci group with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1826](https://redirect.github.com/getsops/sops/pull/1826) - Release 3.10.1 by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1827](https://redirect.github.com/getsops/sops/pull/1827) **Full Changelog**: https://github.com/getsops/sops/compare/v3.10.0...v3.10.1 ### [`v3.10.0`](https://redirect.github.com/getsops/sops/releases/tag/v3.10.0) [Compare Source](https://redirect.github.com/getsops/sops/compare/v3.9.4...v3.10.0) #### Installation To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release. For instance, if you are using Linux on an AMD64 architecture: ```shell ### Download the binary curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.linux.amd64 ### Move the binary in to your PATH mv sops-v3.10.0.linux.amd64 /usr/local/bin/sops ### Make the binary executable chmod +x /usr/local/bin/sops ``` ##### Verify checksums file signature The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ### Download the checksums file, certificate and signature curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.checksums.txt curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.checksums.pem curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.checksums.sig ### Verify the checksums file cosign verify-blob sops-v3.10.0.checksums.txt \ --certificate sops-v3.10.0.checksums.pem \ --signature sops-v3.10.0.checksums.sig \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature: ```shell ### Verify the binary using the checksums file sha256sum -c sops-v3.10.0.checksums.txt --ignore-missing ``` ##### Verify artifact provenance The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.10.0.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://redirect.github.com/slsa-framework/slsa-verifier#artifacts) tool: ```shell ### Download the metadata file curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.intoto.jsonl ### Verify the provenance of the artifact slsa-verifier verify-artifact <artifact> \ --provenance-path sops-v3.10.0.intoto.jsonl \ --source-uri github.com/getsops/sops \ --source-tag v3.10.0 ``` #### Container Images The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies. These container images are available for the following architectures: `linux/amd64` and `linux/arm64`. ##### GitHub Container Registry - `ghcr.io/getsops/sops:v3.10.0` - `ghcr.io/getsops/sops:v3.10.0-alpine` ##### Quay.io - `quay.io/getsops/sops:v3.10.0` - `quay.io/getsops/sops:v3.10.0-alpine` ##### Verify container image signature The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command: ```shell cosign verify ghcr.io/getsops/sops:v3.10.0 \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ -o text ``` ##### Verify container image provenance The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://redirect.github.com/slsa-framework/slsa-verifier#containers). #### Software Bill of Materials The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`. #### What's Changed - build(deps): Bump alpine from 3.18 to 3.21 in /.release in the docker group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1700](https://redirect.github.com/getsops/sops/pull/1700) - Convert changelog to MarkDown by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1741](https://redirect.github.com/getsops/sops/pull/1741) - build(deps): Bump the go group with 7 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1743](https://redirect.github.com/getsops/sops/pull/1743) - build(deps): Bump the go group with 9 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1745](https://redirect.github.com/getsops/sops/pull/1745) - build(deps): Bump the rust group in /functional-tests with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1744](https://redirect.github.com/getsops/sops/pull/1744) - build(deps): Bump github/codeql-action from 3.28.5 to 3.28.8 in the ci group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1746](https://redirect.github.com/getsops/sops/pull/1746) - build(deps): Bump the go group with 12 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1751](https://redirect.github.com/getsops/sops/pull/1751) - build(deps): Bump the ci group with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1750](https://redirect.github.com/getsops/sops/pull/1750) - Add --input-type option for filestatus subcommand by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1601](https://redirect.github.com/getsops/sops/pull/1601) - Use SOPS_EDITOR before EDITOR by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1611](https://redirect.github.com/getsops/sops/pull/1611) - Allow users to disable version check via environment variable by [@​nicklasfrahm](https://redirect.github.com/nicklasfrahm) in [https://github.com/getsops/sops/pull/1684](https://redirect.github.com/getsops/sops/pull/1684) - add duplicate section support to ini store by [@​reindlt](https://redirect.github.com/reindlt) in [https://github.com/getsops/sops/pull/1452](https://redirect.github.com/getsops/sops/pull/1452) - stores: test for duplicate keys, reserve keyword (yaml only now) by [@​holiman](https://redirect.github.com/holiman) in [https://github.com/getsops/sops/pull/1203](https://redirect.github.com/getsops/sops/pull/1203) - Add same process option for exec-env by [@​ricmatsui](https://redirect.github.com/ricmatsui) in [https://github.com/getsops/sops/pull/880](https://redirect.github.com/getsops/sops/pull/880) - outputs: add trailing newline at the end of JSON files by [@​duthils](https://redirect.github.com/duthils) in [https://github.com/getsops/sops/pull/1476](https://redirect.github.com/getsops/sops/pull/1476) - set subcommand: add --idempotent flag that will not write the file if no change happened by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1754](https://redirect.github.com/getsops/sops/pull/1754) - Encrypt and decrypt time.Time objects by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1759](https://redirect.github.com/getsops/sops/pull/1759) - build(deps): Bump the go group with 8 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1763](https://redirect.github.com/getsops/sops/pull/1763) - build(deps): Bump tempfile from 3.16.0 to 3.17.0 in /functional-tests in the rust group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1762](https://redirect.github.com/getsops/sops/pull/1762) - build(deps): Bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 in the ci group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1761](https://redirect.github.com/getsops/sops/pull/1761) - fix(docs): typo in README.rst by [@​Paredev](https://redirect.github.com/Paredev) in [https://github.com/getsops/sops/pull/1765](https://redirect.github.com/getsops/sops/pull/1765) - Add SSH support for age by [@​haoqixu](https://redirect.github.com/haoqixu) in [https://github.com/getsops/sops/pull/1692](https://redirect.github.com/getsops/sops/pull/1692) - make sure that tests do not pick keys.txt from user's HOME dir by [@​tomaszduda23](https://redirect.github.com/tomaszduda23) in [https://github.com/getsops/sops/pull/1766](https://redirect.github.com/getsops/sops/pull/1766) - support for age identity with passphrase by [@​tomaszduda23](https://redirect.github.com/tomaszduda23) in [https://github.com/getsops/sops/pull/1400](https://redirect.github.com/getsops/sops/pull/1400) - build(deps): Bump the rust group in /functional-tests with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1768](https://redirect.github.com/getsops/sops/pull/1768) - build(deps): Bump the go group with 12 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1769](https://redirect.github.com/getsops/sops/pull/1769) - build(deps): Bump the ci group with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1770](https://redirect.github.com/getsops/sops/pull/1770) - build(deps): Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1773](https://redirect.github.com/getsops/sops/pull/1773) - feat: add age plugin support by [@​brianmcgee](https://redirect.github.com/brianmcgee) in [https://github.com/getsops/sops/pull/1641](https://redirect.github.com/getsops/sops/pull/1641) - Check GnuPG decryption result for non-empty size by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1776](https://redirect.github.com/getsops/sops/pull/1776) - vendored age code: consolidate passphrase reading functionality by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1775](https://redirect.github.com/getsops/sops/pull/1775) - Allow to encrypt and decrypt from stdin by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1690](https://redirect.github.com/getsops/sops/pull/1690) - build(deps): Bump the go group with 11 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1784](https://redirect.github.com/getsops/sops/pull/1784) - build(deps): Bump the ci group with 5 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1782](https://redirect.github.com/getsops/sops/pull/1782) - build(deps): Bump serde_json from 1.0.139 to 1.0.140 in /functional-tests in the rust group; bump Rust to 1.85.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1783](https://redirect.github.com/getsops/sops/pull/1783) - build(deps): Bump the go group with 13 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1797](https://redirect.github.com/getsops/sops/pull/1797) - build(deps): Bump the rust group in /functional-tests with 3 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1796](https://redirect.github.com/getsops/sops/pull/1796) - build(deps): Bump github/codeql-action from 3.28.10 to 3.28.11 in the ci group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1795](https://redirect.github.com/getsops/sops/pull/1795) - build(deps): Bump the go group with 6 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1802](https://redirect.github.com/getsops/sops/pull/1802) - build(deps): Bump tempfile from 3.18.0 to 3.19.0 in /functional-tests in the rust group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1800](https://redirect.github.com/getsops/sops/pull/1800) - build(deps): Bump docker/login-action from 3.3.0 to 3.4.0 in the ci group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1801](https://redirect.github.com/getsops/sops/pull/1801) - build(deps): Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1806](https://redirect.github.com/getsops/sops/pull/1806) - goreleaser: add windows arm64 by [@​duthils](https://redirect.github.com/duthils) in [https://github.com/getsops/sops/pull/1791](https://redirect.github.com/getsops/sops/pull/1791) - Add a way to set sops config location via envvar by [@​sledzikowy](https://redirect.github.com/sledzikowy) in [https://github.com/getsops/sops/pull/1701](https://redirect.github.com/getsops/sops/pull/1701) - build(deps): Bump the go group with 3 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1809](https://redirect.github.com/getsops/sops/pull/1809) - build(deps): Bump the ci group with 5 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1808](https://redirect.github.com/getsops/sops/pull/1808) - build(deps): Bump tempfile from 3.19.0 to 3.19.1 in /functional-tests in the rust group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/getsops/sops/pull/1807](https://redirect.github.com/getsops/sops/pull/1807) - Support --config option in publish subcommand by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1779](https://redirect.github.com/getsops/sops/pull/1779) - Fix caching of Metadata.DataKey by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1781](https://redirect.github.com/getsops/sops/pull/1781) - Lint by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1780](https://redirect.github.com/getsops/sops/pull/1780) - updatekeys subcommand: rename GroupQuorum to ShamirThreshold by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1631](https://redirect.github.com/getsops/sops/pull/1631) - If --filename-override is specified, convert it to an absolute path same as regular filenames by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1793](https://redirect.github.com/getsops/sops/pull/1793) - Add support for `oauth2.TokenSource` in GCP KMS by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/getsops/sops/pull/1794](https://redirect.github.com/getsops/sops/pull/1794) - Added SOPS_AGE_KEY_CMD option to age, fixes [#​1323](https://redirect.github.com/getsops/sops/issues/1323) by [@​danilobuerger](https://redirect.github.com/danilobuerger) in [https://github.com/getsops/sops/pull/1811](https://redirect.github.com/getsops/sops/pull/1811) - chore: omitempty metadata to reduce the size of stored config by [@​cgetzen](https://redirect.github.com/cgetzen) in [https://github.com/getsops/sops/pull/1571](https://redirect.github.com/getsops/sops/pull/1571) - Improve Shamir Secret Sharing code by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1813](https://redirect.github.com/getsops/sops/pull/1813) - Update all dependencies by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1814](https://redirect.github.com/getsops/sops/pull/1814) - Run 'gofmt -w' on all .go files by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1817](https://redirect.github.com/getsops/sops/pull/1817) - Add option to explicitly check for the latest version; deprecate current default of always doing that unless disabled by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1816](https://redirect.github.com/getsops/sops/pull/1816) - Build using Go 1.24 and drop support for 1.22 by [@​hiddeco](https://redirect.github.com/hiddeco) in [https://github.com/getsops/sops/pull/1819](https://redirect.github.com/getsops/sops/pull/1819) - Support `GOOGLE_OAUTH_ACCESS_TOKEN` for Google Cloud Platform by [@​marensofier](https://redirect.github.com/marensofier) in [https://github.com/getsops/sops/pull/1578](https://redirect.github.com/getsops/sops/pull/1578) - Warn about `.sops.yml` files found while searching for `.sops.yaml` by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1820](https://redirect.github.com/getsops/sops/pull/1820) - Release 3.10.0 by [@​felixfontein](https://redirect.github.com/felixfontein) in [https://github.com/getsops/sops/pull/1815](https://redirect.github.com/getsops/sops/pull/1815) - Added support for multiarch windows release binaries by [@​sabre1041](https://redirect.github.com/sabre1041) in [https://github.com/getsops/sops/pull/1823](https://redirect.github.com/getsops/sops/pull/1823) #### New Contributors - [@​reindlt](https://redirect.github.com/reindlt) made their first contribution in [https://github.com/getsops/sops/pull/1452](https://redirect.github.com/getsops/sops/pull/1452) - [@​ricmatsui](https://redirect.github.com/ricmatsui) made their first contribution in [https://github.com/getsops/sops/pull/880](https://redirect.github.com/getsops/sops/pull/880) - [@​Paredev](https://redirect.github.com/Paredev) made their first contribution in [https://github.com/getsops/sops/pull/1765](https://redirect.github.com/getsops/sops/pull/1765) - [@​haoqixu](https://redirect.github.com/haoqixu) made their first contribution in [https://github.com/getsops/sops/pull/1692](https://redirect.github.com/getsops/sops/pull/1692) - [@​brianmcgee](https://redirect.github.com/brianmcgee) made their first contribution in [https://github.com/getsops/sops/pull/1641](https://redirect.github.com/getsops/sops/pull/1641) - [@​sledzikowy](https://redirect.github.com/sledzikowy) made their first contribution in [https://github.com/getsops/sops/pull/1701](https://redirect.github.com/getsops/sops/pull/1701) - [@​matheuscscp](https://redirect.github.com/matheuscscp) made their first contribution in [https://github.com/getsops/sops/pull/1794](https://redirect.github.com/getsops/sops/pull/1794) - [@​danilobuerger](https://redirect.github.com/danilobuerger) made their first contribution in [https://github.com/getsops/sops/pull/1811](https://redirect.github.com/getsops/sops/pull/1811) - [@​cgetzen](https://redirect.github.com/cgetzen) made their first contribution in [https://github.com/getsops/sops/pull/1571](https://redirect.github.com/getsops/sops/pull/1571) - [@​marensofier](https://redirect.github.com/marensofier) made their first contribution in [https://github.com/getsops/sops/pull/1578](https://redirect.github.com/getsops/sops/pull/1578) - [@​sabre1041](https://redirect.github.com/sabre1041) made their first contribution in [https://github.com/getsops/sops/pull/1823](https://redirect.github.com/getsops/sops/pull/1823) **Full Changelog**: https://github.com/getsops/sops/compare/v3.9.4...v3.10.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIyMi4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=--> |
||
|
|
592af2ad06 |
chore(flux): update image volsync 2.11.0 → 2.11.1 (clustertool) (#33795)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [volsync](https://truecharts.org/charts/system/volsync) ([source](https://redirect.github.com/backube/helm-charts)) | patch | `2.11.0` -> `2.11.1` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIyMi4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
ebed9238ed |
chore(flux): update image spegel 3.2.2 → 3.2.3 (clustertool) (#33710)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [spegel](https://truecharts.org/charts/system/spegel) ([source](https://ghcr.io/spegel-org/spegel)) | patch | `3.2.2` -> `3.2.3` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTkuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIxOS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
3e149fe9df |
fix(deps): update module github.com/go-playground/validator/v10 v10.25.0 → v10.26.0 (clustertool) (#33706)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/go-playground/validator/v10](https://redirect.github.com/go-playground/validator) | require | minor | `v10.25.0` -> `v10.26.0` | --- ### Release Notes <details> <summary>go-playground/validator (github.com/go-playground/validator/v10)</summary> ### [`v10.26.0`](https://redirect.github.com/go-playground/validator/releases/tag/v10.26.0) [Compare Source](https://redirect.github.com/go-playground/validator/compare/v10.25.0...v10.26.0) #### What's Changed - Use correct pointer in errors.As(). Fix "panic: errors: \*target must be interface or implement error" in examples. by [@​antonsoroko](https://redirect.github.com/antonsoroko) in [https://github.com/go-playground/validator/pull/1378](https://redirect.github.com/go-playground/validator/pull/1378) - Create dependabot by [@​nodivbyzero](https://redirect.github.com/nodivbyzero) in [https://github.com/go-playground/validator/pull/1373](https://redirect.github.com/go-playground/validator/pull/1373) - Bump golangci/golangci-lint-action from 4 to 6 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/go-playground/validator/pull/1381](https://redirect.github.com/go-playground/validator/pull/1381) - Bump golang.org/x/text from 0.21.0 to 0.22.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/go-playground/validator/pull/1383](https://redirect.github.com/go-playground/validator/pull/1383) - Bump golang.org/x/crypto from 0.32.0 to 0.33.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/go-playground/validator/pull/1382](https://redirect.github.com/go-playground/validator/pull/1382) - feat(translations): improve Indonesian translations and add tests by [@​fathiraz](https://redirect.github.com/fathiraz) in [https://github.com/go-playground/validator/pull/1376](https://redirect.github.com/go-playground/validator/pull/1376) - Fix time.Duration translation error by [@​nodivbyzero](https://redirect.github.com/nodivbyzero) in [https://github.com/go-playground/validator/pull/1154](https://redirect.github.com/go-playground/validator/pull/1154) - Update Project Status button by [@​nodivbyzero](https://redirect.github.com/nodivbyzero) in [https://github.com/go-playground/validator/pull/1380](https://redirect.github.com/go-playground/validator/pull/1380) - Remove gitter.im link from README.md by [@​nodivbyzero](https://redirect.github.com/nodivbyzero) in [https://github.com/go-playground/validator/pull/1366](https://redirect.github.com/go-playground/validator/pull/1366) - Docs: fix `Base64RawURL` usage by [@​196Ikuchil](https://redirect.github.com/196Ikuchil) in [https://github.com/go-playground/validator/pull/1336](https://redirect.github.com/go-playground/validator/pull/1336) - Fix length check on dns_rfc1035\_label tag by [@​KimNorgaard](https://redirect.github.com/KimNorgaard) in [https://github.com/go-playground/validator/pull/1214](https://redirect.github.com/go-playground/validator/pull/1214) - Add Korean by [@​jkh0kr](https://redirect.github.com/jkh0kr) in [https://github.com/go-playground/validator/pull/1338](https://redirect.github.com/go-playground/validator/pull/1338) - add german translations by [@​max-weis](https://redirect.github.com/max-weis) in [https://github.com/go-playground/validator/pull/1322](https://redirect.github.com/go-playground/validator/pull/1322) - Update workflow to support the last three Go versions by [@​nodivbyzero](https://redirect.github.com/nodivbyzero) in [https://github.com/go-playground/validator/pull/1393](https://redirect.github.com/go-playground/validator/pull/1393) - Fix: Nil pointer dereference in Arabic translations by [@​BlackSud0](https://redirect.github.com/BlackSud0) in [https://github.com/go-playground/validator/pull/1391](https://redirect.github.com/go-playground/validator/pull/1391) - Translate to thai by [@​maetad](https://redirect.github.com/maetad) in [https://github.com/go-playground/validator/pull/1202](https://redirect.github.com/go-playground/validator/pull/1202) - Feat: add EIN validation by [@​henrriusdev](https://redirect.github.com/henrriusdev) in [https://github.com/go-playground/validator/pull/1384](https://redirect.github.com/go-playground/validator/pull/1384) - Fix reference to parameter name in docs by [@​yegvla](https://redirect.github.com/yegvla) in [https://github.com/go-playground/validator/pull/1400](https://redirect.github.com/go-playground/validator/pull/1400) - use mail.ParseAddress to cover missing email validations by [@​eladb2011](https://redirect.github.com/eladb2011) in [https://github.com/go-playground/validator/pull/1395](https://redirect.github.com/go-playground/validator/pull/1395) - Update linter to v2.0.2 by [@​nodivbyzero](https://redirect.github.com/nodivbyzero) in [https://github.com/go-playground/validator/pull/1405](https://redirect.github.com/go-playground/validator/pull/1405) #### New Contributors - [@​antonsoroko](https://redirect.github.com/antonsoroko) made their first contribution in [https://github.com/go-playground/validator/pull/1378](https://redirect.github.com/go-playground/validator/pull/1378) - [@​dependabot](https://redirect.github.com/dependabot) made their first contribution in [https://github.com/go-playground/validator/pull/1381](https://redirect.github.com/go-playground/validator/pull/1381) - [@​fathiraz](https://redirect.github.com/fathiraz) made their first contribution in [https://github.com/go-playground/validator/pull/1376](https://redirect.github.com/go-playground/validator/pull/1376) - [@​196Ikuchil](https://redirect.github.com/196Ikuchil) made their first contribution in [https://github.com/go-playground/validator/pull/1336](https://redirect.github.com/go-playground/validator/pull/1336) - [@​KimNorgaard](https://redirect.github.com/KimNorgaard) made their first contribution in [https://github.com/go-playground/validator/pull/1214](https://redirect.github.com/go-playground/validator/pull/1214) - [@​jkh0kr](https://redirect.github.com/jkh0kr) made their first contribution in [https://github.com/go-playground/validator/pull/1338](https://redirect.github.com/go-playground/validator/pull/1338) - [@​max-weis](https://redirect.github.com/max-weis) made their first contribution in [https://github.com/go-playground/validator/pull/1322](https://redirect.github.com/go-playground/validator/pull/1322) - [@​BlackSud0](https://redirect.github.com/BlackSud0) made their first contribution in [https://github.com/go-playground/validator/pull/1391](https://redirect.github.com/go-playground/validator/pull/1391) - [@​maetad](https://redirect.github.com/maetad) made their first contribution in [https://github.com/go-playground/validator/pull/1202](https://redirect.github.com/go-playground/validator/pull/1202) - [@​henrriusdev](https://redirect.github.com/henrriusdev) made their first contribution in [https://github.com/go-playground/validator/pull/1384](https://redirect.github.com/go-playground/validator/pull/1384) - [@​yegvla](https://redirect.github.com/yegvla) made their first contribution in [https://github.com/go-playground/validator/pull/1400](https://redirect.github.com/go-playground/validator/pull/1400) - [@​eladb2011](https://redirect.github.com/eladb2011) made their first contribution in [https://github.com/go-playground/validator/pull/1395](https://redirect.github.com/go-playground/validator/pull/1395) **Full Changelog**: https://github.com/go-playground/validator/compare/v10.25.0...v10.26.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTkuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIxOS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=--> |
||
|
|
d92f67632d |
chore(flux): update image volsync 2.10.1 → 2.11.0 (clustertool) (#33656)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [volsync](https://truecharts.org/charts/system/volsync) ([source](https://redirect.github.com/backube/helm-charts)) | minor | `2.10.1` -> `2.11.0` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTMuMyIsInVwZGF0ZWRJblZlciI6IjM5LjIxMy4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=--> |
||
|
|
24f8b5daf0 |
chore(flux): update image spegel 3.2.0 → 3.2.2 (clustertool) (#33648)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [spegel](https://truecharts.org/charts/system/spegel) ([source](https://ghcr.io/spegel-org/spegel)) | patch | `3.2.0` -> `3.2.2` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTMuMyIsInVwZGF0ZWRJblZlciI6IjM5LjIxMy4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
87508d8b50 | chore(flux): update image spegel 3.1.2 → 3.2.0 (clustertool) (#33632) | ||
|
|
c788d9094e |
chore(flux): update image volsync 2.10.0 → 2.10.1 (clustertool) (#33629)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [volsync](https://truecharts.org/charts/system/volsync) ([source](https://redirect.github.com/backube/helm-charts)) | patch | `2.10.0` -> `2.10.1` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDcuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIwNy4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
754751af38 | chore(flux): update image kubernetes-dashboard 1.14.1 → 1.14.2 (clustertool) (#33628) | ||
|
|
a316073bb7 |
chore(flux): update image blocky 16.13.12 → 16.13.13 (clustertool) (#33438)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [blocky](https://truecharts.org/charts/premium/blocky) ([source](https://0xerr0r.github.io/blocky/)) | patch | `16.13.12` -> `16.13.13` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDcuMiIsInVwZGF0ZWRJblZlciI6IjM5LjIwNy4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
91eebec08b |
chore(flux): update helm release cilium 1.17.1 → 1.17.2 (clustertool) (#33290)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [cilium](https://cilium.io/) ([source](https://redirect.github.com/cilium/cilium)) | patch | `1.17.1` -> `1.17.2` | --- ### Release Notes <details> <summary>cilium/cilium (cilium)</summary> ### [`v1.17.2`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.2): 1.17.2 [Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.1...1.17.2) ## Summary of Changes **Minor Changes:** - docs: clarify wording of remote-nodes in context of a clustermesh (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37989](https://redirect.github.com/cilium/cilium/issues/37989), [@​oblazek](https://redirect.github.com/oblazek)) - Increase granularity of the `api_duration_seconds` metric buckets (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37365](https://redirect.github.com/cilium/cilium/issues/37365), [@​jaredledvina](https://redirect.github.com/jaredledvina)) - New agent option `--policy-restore-timeout` (default 3m) has been added to bound the maximum time Cilium agent waits for endpoint policies to regenerate before starting serving resources to `cilium-envoy` proxy. (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37658](https://redirect.github.com/cilium/cilium/issues/37658), [@​jrajahalme](https://redirect.github.com/jrajahalme)) - Set json output as default for `cilium-dbg endpoint get` (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​36537](https://redirect.github.com/cilium/cilium/issues/36537), [@​saiaunghlyanhtet](https://redirect.github.com/saiaunghlyanhtet)) - Set json output as default for `cilium-dbg endpoint get` (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​36537](https://redirect.github.com/cilium/cilium/issues/36537), [@​saiaunghlyanhtet](https://redirect.github.com/saiaunghlyanhtet)) **Bugfixes:** - Apply Egress bandwith-limiting only once for traffic that is matched by an Egress Gateway policy. (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37674](https://redirect.github.com/cilium/cilium/issues/37674), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) - Auth policy is properly maintained also when covered by proxy redirects. (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37685](https://redirect.github.com/cilium/cilium/issues/37685), [@​jrajahalme](https://redirect.github.com/jrajahalme)) - Do not auto detect / auto select IPoIB devices (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37553](https://redirect.github.com/cilium/cilium/issues/37553), [@​dylandreimerink](https://redirect.github.com/dylandreimerink)) - Egress route reconciliation (Backport PR [#​38118](https://redirect.github.com/cilium/cilium/issues/38118), Upstream PR [#​37962](https://redirect.github.com/cilium/cilium/issues/37962), [@​dylandreimerink](https://redirect.github.com/dylandreimerink)) - Fix a regression that made it impossible to disable Hubble via Helm charts (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37587](https://redirect.github.com/cilium/cilium/issues/37587), [@​devodev](https://redirect.github.com/devodev)) - Fix bug causing `cilium-dbg bpf` commands to fail with a map not found error in IPv6-only clusters. (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37787](https://redirect.github.com/cilium/cilium/issues/37787), [@​pchaigno](https://redirect.github.com/pchaigno)) - Fix creating ServiceMonitor for Hubble when dynamic metrics are enabled in the Helm chart (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37474](https://redirect.github.com/cilium/cilium/issues/37474), [@​dustinspecker](https://redirect.github.com/dustinspecker)) - Fix creation and deletion of host port maps that would occasionally leave pods without them (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37419](https://redirect.github.com/cilium/cilium/issues/37419), [@​javanthropus](https://redirect.github.com/javanthropus)) - Fix dropped NodePort traffic to hostNetwork backends with Geneve+DSR (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​36978](https://redirect.github.com/cilium/cilium/issues/36978), [@​tommasopozzetti](https://redirect.github.com/tommasopozzetti)) - Fix envoy metrics could not be obtained on IPv6-only clusters (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37818](https://redirect.github.com/cilium/cilium/issues/37818), [@​haozhangami](https://redirect.github.com/haozhangami)) - Fix helm charts to properly configure tls and peer service for dynamic Hubble metrics. (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37543](https://redirect.github.com/cilium/cilium/issues/37543), [@​rectified95](https://redirect.github.com/rectified95)) - Fix service id exceeds max limit (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37191](https://redirect.github.com/cilium/cilium/issues/37191), [@​haozhangami](https://redirect.github.com/haozhangami)) - Fix the `--dns-policy-unload-on-shutdown` feature for restored endpoints (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37532](https://redirect.github.com/cilium/cilium/issues/37532), [@​antonipp](https://redirect.github.com/antonipp)) - Fix the possible race condition caused by async update from aws to instance map in issue [#​36428](https://redirect.github.com/cilium/cilium/issues/36428) (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37650](https://redirect.github.com/cilium/cilium/issues/37650), [@​liyihuang](https://redirect.github.com/liyihuang)) - Fix traffic not getting masqueraded with wildcard devices or egress-masquerade-interfaces when enable-masquerade-to-route-source flag is set. (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37450](https://redirect.github.com/cilium/cilium/issues/37450), [@​liyihuang](https://redirect.github.com/liyihuang)) - fix(helm): multiPoolPreAllocation fix conditional avoid null (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37585](https://redirect.github.com/cilium/cilium/issues/37585), [@​acelinkio](https://redirect.github.com/acelinkio)) - fix: cilium-config configmap was incorrectly resulting in values like `2.09715…2e+06` instead of `2097152` (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37236](https://redirect.github.com/cilium/cilium/issues/37236), [@​dee-kryvenko](https://redirect.github.com/dee-kryvenko)) - fix: duplicate label maps in helm chart templates and add missing commonlabels (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37693](https://redirect.github.com/cilium/cilium/issues/37693), [@​cmergenthaler](https://redirect.github.com/cmergenthaler)) - Fix: Resolved an issue causing ArgoCD to report constant out-of-sync status due to the hasKey check in Helm. The condition has been simplified to ensure proper synchronization. No functional changes to deployments. (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37536](https://redirect.github.com/cilium/cilium/issues/37536), [@​nicl-dev](https://redirect.github.com/nicl-dev)) - Fixed Envoy JSON log format conversion in Helm, preventing crashes. (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37656](https://redirect.github.com/cilium/cilium/issues/37656), [@​kahirokunn](https://redirect.github.com/kahirokunn)) - helm: fix large number handling (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37670](https://redirect.github.com/cilium/cilium/issues/37670), [@​justin0u0](https://redirect.github.com/justin0u0)) - hubble: escape terminal special characters from observe output (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37401](https://redirect.github.com/cilium/cilium/issues/37401), [@​devodev](https://redirect.github.com/devodev)) - hubble: fix locking of hubble metrics registry for dynamically configured metrics (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37923](https://redirect.github.com/cilium/cilium/issues/37923), [@​marseel](https://redirect.github.com/marseel)) - identity: fix bug where fromNodes/toNodes could be used to allow custom endpoint (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​36657](https://redirect.github.com/cilium/cilium/issues/36657), [@​oblazek](https://redirect.github.com/oblazek)) - ipam/multi-pool: Periodically perform pool maintenance (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37895](https://redirect.github.com/cilium/cilium/issues/37895), [@​gandro](https://redirect.github.com/gandro)) - operator: explicit controller-runtime controller names to avoid naming conflicts (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37606](https://redirect.github.com/cilium/cilium/issues/37606), [@​mhofstetter](https://redirect.github.com/mhofstetter)) - operator: Fix duplicate configurations (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37293](https://redirect.github.com/cilium/cilium/issues/37293), [@​joestringer](https://redirect.github.com/joestringer)) - Restore aggregration of network trace events for Egress Gateway reply traffic on the gateway node (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​38029](https://redirect.github.com/cilium/cilium/issues/38029), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) - Updated Gateway API and GAMMA processing to remove incorrect behavior when both parentRefs were present. (Backport PR [#​38154](https://redirect.github.com/cilium/cilium/issues/38154), Upstream PR [#​38143](https://redirect.github.com/cilium/cilium/issues/38143), [@​youngnick](https://redirect.github.com/youngnick)) - Workaround for iptables 1.8.10, used in OpenShift 4.16, 4.17 and 4.18, returning a wrong error message `iptables: Incompatible with this kernel` to `iptables -n -L CHAIN` when the chain does not exist. This prevents iptables configuration and induced unnecessary loops and log messages. (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37749](https://redirect.github.com/cilium/cilium/issues/37749), [@​fgiloux](https://redirect.github.com/fgiloux)) **CI Changes:** - .github: Remove misleading step from ipsec workflow (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37681](https://redirect.github.com/cilium/cilium/issues/37681), [@​joestringer](https://redirect.github.com/joestringer)) - .github: s/enbaled/enabled/ (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37449](https://redirect.github.com/cilium/cilium/issues/37449), [@​chansuke](https://redirect.github.com/chansuke)) - bgpv1: wait for watchers to be ready in tests (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37884](https://redirect.github.com/cilium/cilium/issues/37884), [@​harsimran-pabla](https://redirect.github.com/harsimran-pabla)) - CI: GKE backslash missing disable insecure kubelet (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37850](https://redirect.github.com/cilium/cilium/issues/37850), [@​auriaave](https://redirect.github.com/auriaave)) - CI: GKE, disable insecure kubelet readonly port (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37844](https://redirect.github.com/cilium/cilium/issues/37844), [@​auriaave](https://redirect.github.com/auriaave)) - ci: switch to monitor aggregation medium (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​38036](https://redirect.github.com/cilium/cilium/issues/38036), [@​marseel](https://redirect.github.com/marseel)) - gh: ci-e2e-upgrade: Add encryption leak checks for wireguard (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37551](https://redirect.github.com/cilium/cilium/issues/37551), [@​jschwinger233](https://redirect.github.com/jschwinger233)) - gh: ipsec-e2e: add concurrency for connectivity tests (Backport PR [#​37925](https://redirect.github.com/cilium/cilium/issues/37925), Upstream PR [#​37891](https://redirect.github.com/cilium/cilium/issues/37891), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) - gh: update naming for bpftrace leak detection script (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37865](https://redirect.github.com/cilium/cilium/issues/37865), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) **Misc Changes:** - always render enable-hubble in the Cilium configmap (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37703](https://redirect.github.com/cilium/cilium/issues/37703), [@​kaworu](https://redirect.github.com/kaworu)) - bpf: Add option to utilize core maps via BPF_F_NO_COMMON_LRU (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​38037](https://redirect.github.com/cilium/cilium/issues/38037), [@​borkmann](https://redirect.github.com/borkmann)) - bpf: minor clean-ups for the ENI symmetric routing feature (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37379](https://redirect.github.com/cilium/cilium/issues/37379), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) - chore(deps): update all github action dependencies (v1.17) ([#​37950](https://redirect.github.com/cilium/cilium/issues/37950), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.17) ([#​37944](https://redirect.github.com/cilium/cilium/issues/37944), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.17) ([#​38048](https://redirect.github.com/cilium/cilium/issues/38048), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.17.0 (v1.17) ([#​37793](https://redirect.github.com/cilium/cilium/issues/37793), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.18.0 (v1.17) ([#​37949](https://redirect.github.com/cilium/cilium/issues/37949), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.18.2 (v1.17) ([#​38057](https://redirect.github.com/cilium/cilium/issues/38057), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update go to v1.23.7 (v1.17) ([#​37996](https://redirect.github.com/cilium/cilium/issues/37996), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 \[security] (v1.17) ([#​37833](https://redirect.github.com/cilium/cilium/issues/37833), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.31.5-1741765102-efed3defcc70ab5b263a0fc44c93d316b846a211 (v1.17) ([#​38148](https://redirect.github.com/cilium/cilium/issues/38148), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - cilium-dbg: output parentIfIndex in bpf endpoint list (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37398](https://redirect.github.com/cilium/cilium/issues/37398), [@​Mahdi-BZ](https://redirect.github.com/Mahdi-BZ)) - cilium: Allow to configure tunnel source port range (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37777](https://redirect.github.com/cilium/cilium/issues/37777), [@​borkmann](https://redirect.github.com/borkmann)) - cilium: Pull in vxlan netlink Go fix and uncomment assertion in test (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37808](https://redirect.github.com/cilium/cilium/issues/37808), [@​borkmann](https://redirect.github.com/borkmann)) - docs: complete load balancer service manifest in kubeproxy-free (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37466](https://redirect.github.com/cilium/cilium/issues/37466), [@​ybelleguic](https://redirect.github.com/ybelleguic)) - docs: fix broken links (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37995](https://redirect.github.com/cilium/cilium/issues/37995), [@​nueavv](https://redirect.github.com/nueavv)) - docs: masquerading: mention that BPF masq also pulls in BPF Host-Routing (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37604](https://redirect.github.com/cilium/cilium/issues/37604), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) - docs: use latest for rtd theme commit with fixed version selector (Backport PR [#​37614](https://redirect.github.com/cilium/cilium/issues/37614), Upstream PR [#​37421](https://redirect.github.com/cilium/cilium/issues/37421), [@​ayuspin](https://redirect.github.com/ayuspin)) - envoy: remove duplicated service/endpointslice informers when envoyConfig is enabled (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37683](https://redirect.github.com/cilium/cilium/issues/37683), [@​marseel](https://redirect.github.com/marseel)) - Fix API generation and add trusted dependencies to renovate config (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​36957](https://redirect.github.com/cilium/cilium/issues/36957), [@​aanm](https://redirect.github.com/aanm)) - Fix API generation and add trusted dependencies to renovate config (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​36957](https://redirect.github.com/cilium/cilium/issues/36957), [@​aanm](https://redirect.github.com/aanm)) - Fix helm value for IPAM Multi-Pool (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37963](https://redirect.github.com/cilium/cilium/issues/37963), [@​saintdle](https://redirect.github.com/saintdle)) - fqdn/dnsproxy: use `netip.Addr` for `DNSProxy.usedServers` (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37985](https://redirect.github.com/cilium/cilium/issues/37985), [@​tklauser](https://redirect.github.com/tklauser)) - gha: Update the helm flag for TLS related test (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37428](https://redirect.github.com/cilium/cilium/issues/37428), [@​sayboras](https://redirect.github.com/sayboras)) - ipcache: Slightly optimize calls to fetch tunnel and encrypt metadata (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​38021](https://redirect.github.com/cilium/cilium/issues/38021), [@​christarazi](https://redirect.github.com/christarazi)) - labels: fix TestNewFrom test (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37846](https://redirect.github.com/cilium/cilium/issues/37846), [@​giorio94](https://redirect.github.com/giorio94)) - Moves Unix socket listener configuration to a new file specifically for Linux builds. (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37399](https://redirect.github.com/cilium/cilium/issues/37399), [@​ritwikranjan](https://redirect.github.com/ritwikranjan)) - operator: Explicitly init the FQDN regex LRU cache (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37366](https://redirect.github.com/cilium/cilium/issues/37366), [@​christarazi](https://redirect.github.com/christarazi)) - pkg/hive: always use default logger when decorating cells (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37636](https://redirect.github.com/cilium/cilium/issues/37636), [@​aanm](https://redirect.github.com/aanm)) - policy: Skip iteration when proxy port priority is zero (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37422](https://redirect.github.com/cilium/cilium/issues/37422), [@​jrajahalme](https://redirect.github.com/jrajahalme)) - Remove grpc-health-probe binary from the Hubble Relay image as it is no longer used (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37806](https://redirect.github.com/cilium/cilium/issues/37806), [@​rolinh](https://redirect.github.com/rolinh)) - Update Hubble UI to v0.13.2 which contains security fixes, add the missing traffic direction in the flow table, and enhance the home namespace list. See [v0.13.2](https://redirect.github.com/cilium/hubble-ui/releases/tag/v0.13.2) for more details (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37631](https://redirect.github.com/cilium/cilium/issues/37631), [@​yannikmesserli](https://redirect.github.com/yannikmesserli)) - use runtime image set by env var action in build and lint (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37253](https://redirect.github.com/cilium/cilium/issues/37253), [@​Artyop](https://redirect.github.com/Artyop)) **Other Changes:** - \[v1.17] Revert "Fix dropped NodePort traffic to hostNetwork backends with Geneve+DSR" ([#​38101](https://redirect.github.com/cilium/cilium/issues/38101), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) - Backport set runtime action 1.17 ([#​37854](https://redirect.github.com/cilium/cilium/issues/37854), [@​Artyop](https://redirect.github.com/Artyop)) - gha: Update GatewayAPI conformance report ([#​37671](https://redirect.github.com/cilium/cilium/issues/37671), [@​sayboras](https://redirect.github.com/sayboras)) - install: Update image digests for v1.17.1 ([#​37580](https://redirect.github.com/cilium/cilium/issues/37580), [@​cilium-release-bot](https://redirect.github.com/cilium-release-bot)\[bot]) - v1.17: gh/workflows: Remove conformance-externalworkloads ([#​37738](https://redirect.github.com/cilium/cilium/issues/37738), [@​brb](https://redirect.github.com/brb)) #### Docker Manifests ##### cilium `quay.io/cilium/cilium:v1.17.2@​sha256:3c4c9932b5d8368619cb922a497ff2ebc8def5f41c18e410bcc84025fcd385b1` `quay.io/cilium/cilium:stable@sha256:3c4c9932b5d8368619cb922a497ff2ebc8def5f41c18e410bcc84025fcd385b1` ##### clustermesh-apiserver `quay.io/cilium/clustermesh-apiserver:v1.17.2@​sha256:981250ebdc6e66e190992eaf75cfca169113a8f08d5c3793fe15822176980398` `quay.io/cilium/clustermesh-apiserver:stable@sha256:981250ebdc6e66e190992eaf75cfca169113a8f08d5c3793fe15822176980398` ##### docker-plugin `quay.io/cilium/docker-plugin:v1.17.2@​sha256:a599893f1fc76fc31afad2bbb73af7e7f618adbf02043b2098fafeca4adf551c` `quay.io/cilium/docker-plugin:stable@sha256:a599893f1fc76fc31afad2bbb73af7e7f618adbf02043b2098fafeca4adf551c` ##### hubble-relay `quay.io/cilium/hubble-relay:v1.17.2@​sha256:42a8db5c256c516cacb5b8937c321b2373ad7a6b0a1e5a5120d5028433d586cc` `quay.io/cilium/hubble-relay:stable@sha256:42a8db5c256c516cacb5b8937c321b2373ad7a6b0a1e5a5120d5028433d586cc` ##### operator-alibabacloud `quay.io/cilium/operator-alibabacloud:v1.17.2@​sha256:7cb8c23417f65348bb810fe92fb05b41d926f019d77442f3fa1058d17fea7ffe` `quay.io/cilium/operator-alibabacloud:stable@sha256:7cb8c23417f65348bb810fe92fb05b41d926f019d77442f3fa1058d17fea7ffe` ##### operator-aws `quay.io/cilium/operator-aws:v1.17.2@​sha256:955096183e22a203bbb198ca66e3266ce4dbc2b63f1a2fbd03f9373dcd97893c` `quay.io/cilium/operator-aws:stable@sha256:955096183e22a203bbb198ca66e3266ce4dbc2b63f1a2fbd03f9373dcd97893c` ##### operator-azure `quay.io/cilium/operator-azure:v1.17.2@​sha256:455fb88b558b1b8ba09d63302ccce76b4930581be89def027184ab04335c20e0` `quay.io/cilium/operator-azure:stable@sha256:455fb88b558b1b8ba09d63302ccce76b4930581be89def027184ab04335c20e0` ##### operator-generic `quay.io/cilium/operator-generic:v1.17.2@​sha256:81f2d7198366e8dec2903a3a8361e4c68d47d19c68a0d42f0b7b6e3f0523f249` `quay.io/cilium/operator-generic:stable@sha256:81f2d7198366e8dec2903a3a8361e4c68d47d19c68a0d42f0b7b6e3f0523f249` ##### operator `quay.io/cilium/operator:v1.17.2@​sha256:697a7e6c4765ef053d33dd2d9d7f14642c01dfa7333ad7902de7ca5afbf3b419` `quay.io/cilium/operator:stable@sha256:697a7e6c4765ef053d33dd2d9d7f14642c01dfa7333ad7902de7ca5afbf3b419` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
e08f176f10 |
chore(flux): update image app-template 3.7.2 → 3.7.3 (clustertool) (#33236)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [app-template](https://redirect.github.com/bjw-s/helm-charts) | patch | `3.7.2` -> `3.7.3` | --- ### Release Notes <details> <summary>bjw-s/helm-charts (app-template)</summary> ### [`v3.7.3`](https://redirect.github.com/bjw-s/helm-charts/releases/tag/app-template-3.7.3) [Compare Source](https://redirect.github.com/bjw-s/helm-charts/compare/app-template-3.7.2...app-template-3.7.3) #### Changelog: ##### Fixed - Fixed name suffix for HTTPRoute - Fixed incorrect default backendRefs values in HTTPRoute </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
3f4ddb3f00 |
fix(deps): update module helm.sh/helm/v3 v3.17.1 → v3.17.2 (clustertool) (#33225)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [helm.sh/helm/v3](https://redirect.github.com/helm/helm) | require | patch | `v3.17.1` -> `v3.17.2` | --- ### Release Notes <details> <summary>helm/helm (helm.sh/helm/v3)</summary> ### [`v3.17.2`](https://redirect.github.com/helm/helm/releases/tag/v3.17.2): Helm v3.17.2 [Compare Source](https://redirect.github.com/helm/helm/compare/v3.17.1...v3.17.2) Helm v3.17.2 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience. The community keeps growing, and we'd love to see you there! - Join the discussion in [Kubernetes Slack](https://kubernetes.slack.com): - for questions and just to hang out - for discussing PRs, code, and bugs - Hang out at the Public Developer Call: Thursday, 9:30 Pacific via [Zoom](https://zoom.us/j/696660622) - Test, debug, and contribute charts: [ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0) #### Installation and Upgrading Download Helm v3.17.2. The common platform binaries are here: - [MacOS amd64](https://get.helm.sh/helm-v3.17.2-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.17.2-darwin-amd64.tar.gz.sha256sum) / 3e240238c7a3a10efd37b8e16615b28e94ba5db5957247bb42009ba6d52f76e9) - [MacOS arm64](https://get.helm.sh/helm-v3.17.2-darwin-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.17.2-darwin-arm64.tar.gz.sha256sum) / b843cebcbebc9eccb1e43aba9cca7693d32e9f2c4a35344990e3b7b381933948) - [Linux amd64](https://get.helm.sh/helm-v3.17.2-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.17.2-linux-amd64.tar.gz.sha256sum) / 90c28792a1eb5fb0b50028e39ebf826531ebfcf73f599050dbd79bab2f277241) - [Linux arm](https://get.helm.sh/helm-v3.17.2-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v3.17.2-linux-arm.tar.gz.sha256sum) / 0b13ec8580dd5498b5a2d7cb34146e098049f59500a266db1bb98f59649eb90a) - [Linux arm64](https://get.helm.sh/helm-v3.17.2-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.17.2-linux-arm64.tar.gz.sha256sum) / d78d76ec7625a94991e887ac049d93f44bd70e4876200b945f813c9e1ed1df7c) - [Linux i386](https://get.helm.sh/helm-v3.17.2-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v3.17.2-linux-386.tar.gz.sha256sum) / 1c599c4559b97d8cf2100704f5cdc3269dcb369b553711b09a564e1d89c725dc) - [Linux ppc64le](https://get.helm.sh/helm-v3.17.2-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v3.17.2-linux-ppc64le.tar.gz.sha256sum) / 6bb1c83078bdd5e9acad5793dfc9ab3b5b56d410723a660ff1da61dbdff3207b) - [Linux s390x](https://get.helm.sh/helm-v3.17.2-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v3.17.2-linux-s390x.tar.gz.sha256sum) / 55ce412c48a79020a435eed2d7895e3cf74293d939da60a287c7c5fc15480f58) - [Linux riscv64](https://get.helm.sh/helm-v3.17.2-linux-riscv64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.17.2-linux-riscv64.tar.gz.sha256sum) / 70e27a5b73fe848233f3e43bbe393a84d5ccfea2db666906ed37ef9b54468876) - [Windows amd64](https://get.helm.sh/helm-v3.17.2-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v3.17.2-windows-amd64.zip.sha256sum) / f76fe76fa116d2bae948aee9bb54ba11bf5b726a09f732ce6a74eb65af2886b1) - [Windows arm64](https://get.helm.sh/helm-v3.17.2-windows-arm64.zip) ([checksum](https://get.helm.sh/helm-v3.17.2-windows-arm64.zip.sha256sum) / a47a0059285347d44c2ac81aa09398cfa527eb60bcddd7e1836f9459e503697d) This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E ` and can be found at [@​mattfarina](https://redirect.github.com/mattfarina) [keybase account](https://keybase.io/mattfarina). Please use the attached signatures for verifying this release using `gpg`. The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://helm.sh/docs/intro/install/). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3) on any system with `bash`. #### What's Next - 3.17.3 is the next patch release and will be on April 09, 2025 - 3.18.0 is the next minor release and will be on May 14, 2025 #### Changelog - Updating to 0.37.0 for x/net [`cc0bbbd`](https://redirect.github.com/helm/helm/commit/cc0bbbd6d6276b83880042c1ecb34087e84d41eb) (Matt Farina) - build(deps): bump the k8s-io group with 7 updates [`ecb7a74`](https://redirect.github.com/helm/helm/commit/ecb7a74f19c23f76e7c18d1ce99f88bf1926a9ae) (dependabot\[bot]) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
8c0ec0214d |
chore(flux): update image blocky 16.13.11 → 16.13.12 (clustertool) (#33217)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [blocky](https://truecharts.org/charts/premium/blocky) ([source](https://0xerr0r.github.io/blocky/)) | patch | `16.13.11` -> `16.13.12` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
08b7bea08b |
chore(flux): update image clusterissuer 9.6.0 → 9.6.1 (clustertool) (#33208)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [clusterissuer](https://truecharts.org/charts/premium/clusterissuer) ([source](https://cert-manager.io/)) | patch | `9.6.0` -> `9.6.1` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
db9a9cc57a |
fix(deps): update module github.com/budimanjojo/talhelper/v3 v3.0.20 → v3.0.21 (clustertool) (#33210)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/budimanjojo/talhelper/v3](https://redirect.github.com/budimanjojo/talhelper) | require | patch | `v3.0.20` -> `v3.0.21` | --- ### Release Notes <details> <summary>budimanjojo/talhelper (github.com/budimanjojo/talhelper/v3)</summary> ### [`v3.0.21`](https://redirect.github.com/budimanjojo/talhelper/releases/tag/v3.0.21) [Compare Source](https://redirect.github.com/budimanjojo/talhelper/compare/v3.0.20...v3.0.21) #### Changelog - [`e655789`](https://redirect.github.com/budimanjojo/talhelper/commit/e6557899a20a5fd5af82775971451335a28e24d2) chore(container): update ghcr.io/siderolabs/talosctl docker tag to v1.9.5 - [`b39ef41`](https://redirect.github.com/budimanjojo/talhelper/commit/b39ef41441cddc75e808b6be0036c76b94452a2b) chore(container): update golangci/golangci-lint docker tag to v1.64.7 - [`25e0fd0`](https://redirect.github.com/budimanjojo/talhelper/commit/25e0fd03a1c2de46761436ea684a8de14cab5154) chore(container): update registry.k8s.io/kubectl docker tag to v1.32.3 - [`01483a5`](https://redirect.github.com/budimanjojo/talhelper/commit/01483a553634f07f614bdaa337e8e064e73a4e81) chore(deps): update dependency siderolabs/talos to v1.9.5 - [`a0dbebd`](https://redirect.github.com/budimanjojo/talhelper/commit/a0dbebdbe6316a71e1c693714f344ed270a6606d) chore(github-action)!: Update cachix/install-nix-action action to v31 - [`9be9c47`](https://redirect.github.com/budimanjojo/talhelper/commit/9be9c4761874e3b72f3521a202c94a00039a0983) chore(schema): update talos-extensions.yaml JSON schema - [`ca8884f`](https://redirect.github.com/budimanjojo/talhelper/commit/ca8884ffba92c20627b012427f98822f334bf57e) chore(schema): update talos-extensions.yaml JSON schema - [`a962d3b`](https://redirect.github.com/budimanjojo/talhelper/commit/a962d3b5639817b4011ddc1c393f36f3dc8204df) chore(schema): update talos-extensions.yaml JSON schema ([#​886](https://redirect.github.com/budimanjojo/talhelper/issues/886)) - [`001c278`](https://redirect.github.com/budimanjojo/talhelper/commit/001c278d4e15fff790e846b9f9bf6c9502eaea9b) chore(schema): update talos-extensions.yaml JSON schema ([#​894](https://redirect.github.com/budimanjojo/talhelper/issues/894)) - [`c9be9cd`](https://redirect.github.com/budimanjojo/talhelper/commit/c9be9cd593d2a239b76bdf35a06f7a703c6a9998) feat: update Scoop for talhelper version v3.0.20 - [`94ec9ba`](https://redirect.github.com/budimanjojo/talhelper/commit/94ec9ba48d1ad1c0c8bed408b01f31b5b9cfc1f0) feat: update flake ([#​882](https://redirect.github.com/budimanjojo/talhelper/issues/882)) - [`e7b8516`](https://redirect.github.com/budimanjojo/talhelper/commit/e7b85164e7aa666e388251862e11d34cc2be3252) fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.20 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> |
||
|
|
16e3ff6d4c |
chore(deps): update ghcr.io/siderolabs/installer docker tag to v1.9.5 (clustertool) (#33182)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/siderolabs/installer](https://redirect.github.com/siderolabs/talos) | patch | `v1.9.4` -> `v1.9.5` | --- ### Release Notes <details> <summary>siderolabs/talos (ghcr.io/siderolabs/installer)</summary> ### [`v1.9.5`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.5) [Compare Source](https://redirect.github.com/siderolabs/talos/compare/v1.9.4...v1.9.5) ##### [Talos 1.9.5](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.5) (2025-03-12) Welcome to the v1.9.5 release of Talos! Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues. ##### Component Updates - Linux: 6.12.18 - containerd: 2.0.3 - runc: 1.2.5 - Kubernetes: 1.32.3 - etcd: 3.5.19 Talos is built with Go 1.23.7. ##### Contributors - Andrey Smirnov - Dmitriy Matrenichev - Dmitry Sharshakov - Robin Elfrink - Serge Logvinov ##### Changes <details><summary>12 commits</summary> <p> - [@​`d07f6da`](https://redirect.github.com/siderolabs/talos/commit/d07f6daaa) release(v1.9.5): prepare release - [@​`dd629ad`](https://redirect.github.com/siderolabs/talos/commit/dd629ad5f) chore: fix the mount cache ids in the Dockerfile - [@​`456516f`](https://redirect.github.com/siderolabs/talos/commit/456516f0b) feat: update Flannel to 0.26.5 - [@​`82f3a8c`](https://redirect.github.com/siderolabs/talos/commit/82f3a8c51) feat: update etcd to 3.5.19 - [@​`46ab576`](https://redirect.github.com/siderolabs/talos/commit/46ab576e4) feat: add support for qla2xx - [@​`7f89234`](https://redirect.github.com/siderolabs/talos/commit/7f8923452) fix: handle dynamic HTTP proxy settings for discovery client - [@​`9a29332`](https://redirect.github.com/siderolabs/talos/commit/9a293327a) fix: multiple fixes for dashboard/no data - [@​`9d3a2c8`](https://redirect.github.com/siderolabs/talos/commit/9d3a2c8df) fix: ignore digest part of images when checking version - [@​`93180bf`](https://redirect.github.com/siderolabs/talos/commit/93180bffe) feat: support noclooud instance-id from dmi - [@​`76832c2`](https://redirect.github.com/siderolabs/talos/commit/76832c237) chore: disable azure upload - [@​`d4986d9`](https://redirect.github.com/siderolabs/talos/commit/d4986d957) feat: update default Kubernetes to 1.32.3 - [@​`1fe0c2f`](https://redirect.github.com/siderolabs/talos/commit/1fe0c2f1b) feat: update Go, Linux, containerd, runc </p> </details> ##### Changes from siderolabs/discovery-api <details><summary>1 commit</summary> <p> - [siderolabs/discovery-api@`64513a6`](https://redirect.github.com/siderolabs/discovery-api/commit/64513a6) feat: rekres, regenerate proto files </p> </details> ##### Changes from siderolabs/discovery-client <details><summary>1 commit</summary> <p> - [siderolabs/discovery-client@`b3632c4`](https://redirect.github.com/siderolabs/discovery-client/commit/b3632c4) feat: support extra dial options in the client </p> </details> ##### Changes from siderolabs/gen <details><summary>1 commit</summary> <p> - [siderolabs/gen@`5ae3afe`](https://redirect.github.com/siderolabs/gen/commit/5ae3afe) chore: update hashtriemap implementation from the latest upstream </p> </details> ##### Changes from siderolabs/pkgs <details><summary>9 commits</summary> <p> - [siderolabs/pkgs@`792f5ca`](https://redirect.github.com/siderolabs/pkgs/commit/792f5ca) feat: update Linux firmware to [`2025021`](https://redirect.github.com/siderolabs/talos/commit/20250211) - [siderolabs/pkgs@`142de09`](https://redirect.github.com/siderolabs/pkgs/commit/142de09) feat: update runc to 1.2.5 - [siderolabs/pkgs@`b39f244`](https://redirect.github.com/siderolabs/pkgs/commit/b39f244) feat: update Linux to 6.12.18 - [siderolabs/pkgs@`9a21d6c`](https://redirect.github.com/siderolabs/pkgs/commit/9a21d6c) fix: backport MGLRU patch from Linux 6.13 - [siderolabs/pkgs@`1565250`](https://redirect.github.com/siderolabs/pkgs/commit/1565250) feat: update Linux 6.12.17, containerd 2.0.3 - [siderolabs/pkgs@`fc5e81d`](https://redirect.github.com/siderolabs/pkgs/commit/fc5e81d) feat: enable qla2xxx module - [siderolabs/pkgs@`3ff0ab6`](https://redirect.github.com/siderolabs/pkgs/commit/3ff0ab6) fix: patch Linux with blackhole patch - [siderolabs/pkgs@`b4060f8`](https://redirect.github.com/siderolabs/pkgs/commit/b4060f8) feat: update Go to 1.23.7 - [siderolabs/pkgs@`3349185`](https://redirect.github.com/siderolabs/pkgs/commit/3349185) fix: patch musl to mitigate CVE-2025-26519 </p> </details> ##### Changes from siderolabs/tools <details><summary>1 commit</summary> <p> - [siderolabs/tools@`17d43b2`](https://redirect.github.com/siderolabs/tools/commit/17d43b2) feat: update Go to 1.23.7 </p> </details> ##### Dependency Changes - **github.com/siderolabs/discovery-api** v0.1.5 -> v0.1.6 - **github.com/siderolabs/discovery-client** v0.1.10 -> v0.1.11 - **github.com/siderolabs/gen** v0.7.0 -> v0.8.0 - **github.com/siderolabs/pkgs** v1.9.0-27-g27017e0 -> v1.9.0-36-g792f5ca - **github.com/siderolabs/talos/pkg/machinery** v1.9.4 -> v1.9.5 - **github.com/siderolabs/tools** v1.9.0-3-gb2ede52 -> v1.9.0-4-g17d43b2 - **google.golang.org/grpc** v1.68.1 -> v1.70.0 - **google.golang.org/protobuf** v1.35.2 -> v1.36.5 Previous release can be found at [v1.9.4](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.4) ##### Images ghcr.io/siderolabs/flannel:v0.26.5 registry.k8s.io/coredns/coredns:v1.12.0 gcr.io/etcd-development/etcd:v3.5.19 registry.k8s.io/kube-apiserver:v1.32.3 registry.k8s.io/kube-controller-manager:v1.32.3 registry.k8s.io/kube-scheduler:v1.32.3 registry.k8s.io/kube-proxy:v1.32.3 ghcr.io/siderolabs/kubelet:v1.32.3 ghcr.io/siderolabs/installer:v1.9.5 registry.k8s.io/pause:3.10 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTEuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE5MS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2NvbnRhaW5lciIsInN5c3RlbS11cGdyYWRlIiwidHlwZS9wYXRjaCJdfQ==--> |