truecharts

Author	SHA1	Message	Date
TrueCharts Bot	fee5f591dc	fix(deps): update module golang.org/x/crypto v0.29.0 → v0.31.0 [security] (#29837 ) This PR contains the following updates: \| Package \| Type \| Update \| Change \| \|---\|---\|---\|---\| \| golang.org/x/crypto \| require \| minor \| `v0.29.0` -> `v0.31.0` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. ### GitHub Vulnerability Alerts #### [CVE-2024-45337](https://redirect.github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909) Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is in fact used to authenticate." Specifically, the SSH protocol allows clients to inquire about whether a public key is acceptable before proving control of the corresponding private key. PublicKeyCallback may be called with multiple keys, and the order in which the keys were provided cannot be used to infer which key the client successfully authenticated with, if any. Some applications, which store the key(s) passed to PublicKeyCallback (or derived information) and make security relevant determinations based on it once the connection is established, may make incorrect assumptions. For example, an attacker may send public keys A and B, and then authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B for which the attacker does not actually control the private key. Since this API is widely misused, as a partial mitigation golang.org/x/crypto@v0.31.0 enforces the property that, when successfully authenticating via public key, the last key passed to ServerConfig.PublicKeyCallback will be the key used to authenticate the connection. PublicKeyCallback will now be called multiple times with the same key, if necessary. Note that the client may still not control the last key passed to PublicKeyCallback if the connection is then authenticated with a different method, such as PasswordCallback, KeyboardInteractiveCallback, or NoClientAuth. Users should be using the Extensions field of the Permissions return value from the various authentication callbacks to record data associated with the authentication attempt instead of referencing external state. Once the connection is established the state corresponding to the successful authentication attempt can be retrieved via the ServerConn.Permissions field. Note that some third-party libraries misuse the Permissions type by sharing it across authentication attempts; users of third-party libraries should refer to the relevant projects for guidance. --- ### Configuration 📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->	2024-12-27 09:57:41 +00:00
TrueCharts Bot	8a610ba0bf	fix(deps): update module filippo.io/age v1.2.0 → v1.2.1 [security] (#29835 ) This PR contains the following updates: \| Package \| Type \| Update \| Change \| \|---\|---\|---\|---\| \| [filippo.io/age](https://redirect.github.com/FiloSottile/age) \| require \| patch \| `v1.2.0` -> `v1.2.1` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. ### GitHub Vulnerability Alerts #### [GHSA-32gq-x56h-299c](https://redirect.github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c) A plugin name containing a path separator may allow an attacker to execute an arbitrary binary. Such a plugin name can be provided to the age CLI through an attacker-controlled recipient or identity string, or to the [`plugin.NewIdentity`](https://pkg.go.dev/filippo.io/age/plugin#NewIdentity), [`plugin.NewIdentityWithoutData`](https://pkg.go.dev/filippo.io/age/plugin#NewIdentityWithoutData), or [`plugin.NewRecipient`](https://pkg.go.dev/filippo.io/age/plugin#NewRecipient) APIs. On UNIX systems, a directory matching `${TMPDIR:-/tmp}/age-plugin-` needs to exist for the attack to succeed. The binary is executed with a single flag, either `--age-plugin=recipient-v1` or `--age-plugin=identity-v1`. The standard input includes the recipient or identity string, and the random file key (if encrypting) or the header of the file (if decrypting). The format is constrained by the [age-plugin](https://c2sp.org/age-plugin) protocol. An equivalent issue was fixed by the [rage](https://redirect.github.com/str4d/rage) project, see advisory [GHSA-4fg7-vxc8-qx5w](https://redirect.github.com/str4d/rage/security/advisories/GHSA-4fg7-vxc8-qx5w). Thanks to ⬡-49016 for reporting this. --- ### Release Notes <details> <summary>FiloSottile/age (filippo.io/age)</summary> ### [`v1.2.1`](https://redirect.github.com/FiloSottile/age/releases/tag/v1.2.1): age v1.2.1: security fix [Compare Source](https://redirect.github.com/FiloSottile/age/compare/v1.2.0...v1.2.1) This release fixes a security vulnerability that could allow an attacker to execute an arbitrary binary under certain conditions. See GHSA-32gq-x56h-299c. Plugin names may now only contain alphanumeric characters or the four special characters `+-._`. Thanks to ⬡-49016 for reporting this issue. </details> --- ### Configuration 📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore*: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->	2024-12-27 02:40:03 +01:00
Stavros Kois	76665fe7ab	chore(common): update min helm version (#29810 ) Description <!-- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. --> ⚒️ Fixes #29809 ⚙️ Type of change - [ ] ⚙️ Feature/App addition - [ ] 🪛 Bugfix - [ ] ⚠️ Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] 🔃 Refactor of current code 🧪 How Has This Been Tested? <!-- Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration --> 📃 Notes: <!-- Please enter any other relevant information here --> ✔️ Checklist: - [ ] ⚖️ My code follows the style guidelines of this project - [ ] 👀 I have performed a self-review of my own code - [ ] #️⃣ I have commented my code, particularly in hard-to-understand areas - [ ] 📄 I have made corresponding changes to the documentation - [ ] ⚠️ My changes generate no new warnings - [ ] 🧪 I have added tests to this description that prove my fix is effective or that my feature works - [ ] ⬆️ I increased versions for any altered app according to semantic versioning - [ ] I made sure the title starts with `feat(chart-name):`, `fix(chart-name):` or `chore(chart-name):` ➕ App addition If this PR is an app addition please make sure you have done the following. - [ ] 🖼️ I have added an icon in the Chart's root directory called `icon.png` --- _Please don't blindly check all the boxes. Read them and only check those that apply. Those checkboxes are there for the reviewer to see what is this all about and the status of this PR with a quick glance._ --------- Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl> Co-authored-by: Kjeld Schouten <info@kjeldschouten.nl>	2024-12-03 19:32:23 +01:00
alfi0812	ea7a259e79	Update Dockerfile (#29793 ) Remove krew install. As it does not work in the docker file Description <!-- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. --> ⚒️ Fixes # <!--(issue)--> ⚙️ Type of change - [ ] ⚙️ Feature/App addition - [ ] 🪛 Bugfix - [ ] ⚠️ Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] 🔃 Refactor of current code 🧪 How Has This Been Tested? <!-- Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration --> 📃 Notes: <!-- Please enter any other relevant information here --> ✔️ Checklist: - [ ] ⚖️ My code follows the style guidelines of this project - [ ] 👀 I have performed a self-review of my own code - [ ] #️⃣ I have commented my code, particularly in hard-to-understand areas - [ ] 📄 I have made corresponding changes to the documentation - [ ] ⚠️ My changes generate no new warnings - [ ] 🧪 I have added tests to this description that prove my fix is effective or that my feature works - [ ] ⬆️ I increased versions for any altered app according to semantic versioning - [ ] I made sure the title starts with `feat(chart-name):`, `fix(chart-name):` or `chore(chart-name):` ➕ App addition If this PR is an app addition please make sure you have done the following. - [ ] 🖼️ I have added an icon in the Chart's root directory called `icon.png` --- _Please don't blindly check all the boxes. Read them and only check those that apply. Those checkboxes are there for the reviewer to see what is this all about and the status of this PR with a quick glance._ --------- Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com> Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl> Co-authored-by: Kjeld Schouten <info@kjeldschouten.nl>	2024-11-27 13:57:55 +00:00
alfi0812	afa869fdb6	Update devcontainer ENV and settings (#29791 ) Description <!-- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. --> ⚒️ Fixes # <!--(issue)--> ⚙️ Type of change - [ ] ⚙️ Feature/App addition - [ ] 🪛 Bugfix - [ ] ⚠️ Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] 🔃 Refactor of current code 🧪 How Has This Been Tested? <!-- Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration --> 📃 Notes: <!-- Please enter any other relevant information here --> ✔️ Checklist: - [ ] ⚖️ My code follows the style guidelines of this project - [ ] 👀 I have performed a self-review of my own code - [ ] #️⃣ I have commented my code, particularly in hard-to-understand areas - [ ] 📄 I have made corresponding changes to the documentation - [ ] ⚠️ My changes generate no new warnings - [ ] 🧪 I have added tests to this description that prove my fix is effective or that my feature works - [ ] ⬆️ I increased versions for any altered app according to semantic versioning - [ ] I made sure the title starts with `feat(chart-name):`, `fix(chart-name):` or `chore(chart-name):` ➕ App addition If this PR is an app addition please make sure you have done the following. - [ ] 🖼️ I have added an icon in the Chart's root directory called `icon.png` --- _Please don't blindly check all the boxes. Read them and only check those that apply. Those checkboxes are there for the reviewer to see what is this all about and the status of this PR with a quick glance._ --------- Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>	2024-11-26 15:36:34 +01:00
alfi0812	db62c9469a	Update devcontainer.json (#29703 ) Description <!-- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. --> ⚒️ Fixes # <!--(issue)--> ⚙️ Type of change - [ ] ⚙️ Feature/App addition - [ ] 🪛 Bugfix - [ ] ⚠️ Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] 🔃 Refactor of current code 🧪 How Has This Been Tested? <!-- Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration --> 📃 Notes: <!-- Please enter any other relevant information here --> ✔️ Checklist: - [ ] ⚖️ My code follows the style guidelines of this project - [ ] 👀 I have performed a self-review of my own code - [ ] #️⃣ I have commented my code, particularly in hard-to-understand areas - [ ] 📄 I have made corresponding changes to the documentation - [ ] ⚠️ My changes generate no new warnings - [ ] 🧪 I have added tests to this description that prove my fix is effective or that my feature works - [ ] ⬆️ I increased versions for any altered app according to semantic versioning - [ ] I made sure the title starts with `feat(chart-name):`, `fix(chart-name):` or `chore(chart-name):` ➕ App addition If this PR is an app addition please make sure you have done the following. - [ ] 🖼️ I have added an icon in the Chart's root directory called `icon.png` --- _Please don't blindly check all the boxes. Read them and only check those that apply. Those checkboxes are there for the reviewer to see what is this all about and the status of this PR with a quick glance._ --------- Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com> Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl> Co-authored-by: Kjeld Schouten <info@kjeldschouten.nl>	2024-11-24 15:01:21 +01:00
TrueCharts Bot	d9f1f4702f	fix(deps): update module sigs.k8s.io/controller-runtime v0.19.1 → v0.19.2 (clustertool) (#29694 )	2024-11-23 03:04:25 +01:00
TrueCharts Bot	a6408d4025	chore(flux): update image traefik 30.0.3 → 30.0.4 (clustertool) (#29731 )	2024-11-23 02:53:11 +01:00
TrueCharts Bot	1d9724cb75	fix(deps): update kubernetes packages v0.31.2 → v0.31.3 (clustertool) (patch) (#29693 )	2024-11-22 03:00:59 +01:00
TrueCharts Bot	359e6adbfb	chore(deps): update ghcr.io/siderolabs/kubelet docker tag to v1.31.3 (clustertool) (#29677 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/siderolabs/kubelet](https://redirect.github.com/siderolabs/kubelet) \| patch \| `v1.31.2` -> `v1.31.3` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>siderolabs/kubelet (ghcr.io/siderolabs/kubelet)</summary> ### [`v1.31.3`](https://redirect.github.com/siderolabs/kubelet/compare/v1.31.2...v1.31.3) [Compare Source](https://redirect.github.com/siderolabs/kubelet/compare/v1.31.2...v1.31.3) </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-22 02:45:57 +01:00
TrueCharts Bot	fe3e7e366b	chore(flux): update helm release cilium 1.16.3 → 1.16.4 (clustertool) (#29638 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [cilium](https://cilium.io/) ([source](https://redirect.github.com/cilium/cilium)) \| patch \| `1.16.3` -> `1.16.4` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>cilium/cilium (cilium)</summary> ### [`v1.16.4`](https://redirect.github.com/cilium/cilium/releases/tag/v1.16.4): 1.16.4 [Compare Source](https://redirect.github.com/cilium/cilium/compare/1.16.3...1.16.4) ## Summary of Changes Minor Changes: - Added Helm option 'envoy.initialFetchTimeoutSeconds' (default 30 seconds) to override the Envoy default (15 seconds). (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35809](https://redirect.github.com/cilium/cilium/issues/35809), [@jrajahalme](https://redirect.github.com/jrajahalme)) - clustermesh: add guardrails for known broken ENI/aws-chaining + cluster ID combination (Backport PR [#35543](https://redirect.github.com/cilium/cilium/issues/35543), Upstream PR [#35349](https://redirect.github.com/cilium/cilium/issues/35349), [@giorio94](https://redirect.github.com/giorio94)) - helm: Lower default `hubble.tls.auto.certValidityDuration` to 365 days (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35630](https://redirect.github.com/cilium/cilium/issues/35630), [@chancez](https://redirect.github.com/chancez)) - helm: New socketLB.tracing flag (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35747](https://redirect.github.com/cilium/cilium/issues/35747), [@pchaigno](https://redirect.github.com/pchaigno)) - hubble-relay: Return underlying connection errors when connecting to peer manager (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35632](https://redirect.github.com/cilium/cilium/issues/35632), [@chancez](https://redirect.github.com/chancez)) - netkit: Fix issue where traffic originating from the host namespace fails to reach the pod when using endpoint routes and network policies. (Backport PR [#35543](https://redirect.github.com/cilium/cilium/issues/35543), Upstream PR [#35306](https://redirect.github.com/cilium/cilium/issues/35306), [@jrife](https://redirect.github.com/jrife)) Bugfixes: - Avoid duplicate errors in health status for node-neighbor-link-updater (Backport PR [#35468](https://redirect.github.com/cilium/cilium/issues/35468), Upstream PR [#35179](https://redirect.github.com/cilium/cilium/issues/35179), [@wedaly](https://redirect.github.com/wedaly)) - bgpv1: fix reconciliation of services with shared VIPs (Backport PR [#35468](https://redirect.github.com/cilium/cilium/issues/35468), Upstream PR [#35333](https://redirect.github.com/cilium/cilium/issues/35333), [@rastislavs](https://redirect.github.com/rastislavs)) - bgpv2,operator: Fix the race condition in the nodeSelector conflict detection logic (Backport PR [#35863](https://redirect.github.com/cilium/cilium/issues/35863), Upstream PR [#35690](https://redirect.github.com/cilium/cilium/issues/35690), [@YutaroHayakawa](https://redirect.github.com/YutaroHayakawa)) - bgpv2: set local peering address when specified (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35552](https://redirect.github.com/cilium/cilium/issues/35552), [@harsimran-pabla](https://redirect.github.com/harsimran-pabla)) - Cilium datapath now gives precedence for the more specific allow rule with L7 rules when rules with port ranges are present. (Backport PR [#35603](https://redirect.github.com/cilium/cilium/issues/35603), Upstream PR [#35150](https://redirect.github.com/cilium/cilium/issues/35150), [@jrajahalme](https://redirect.github.com/jrajahalme)) - Cilium's DNS proxy no longer gets stuck for a specific five-tuple if an `timeout waiting for response` error is encountered. (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35589](https://redirect.github.com/cilium/cilium/issues/35589), [@bimmlerd](https://redirect.github.com/bimmlerd)) - config: Remove superfluous warning on native routing CIDR (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35738](https://redirect.github.com/cilium/cilium/issues/35738), [@gandro](https://redirect.github.com/gandro)) - Fix missing flowlabel hash on SRv6 traffic. (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35498](https://redirect.github.com/cilium/cilium/issues/35498), [@akaliwod](https://redirect.github.com/akaliwod)) - Fix packet drops for pod-to-pod connections that pass through ingress & egress proxy when using IPsec, caused by MTU misconfiguration. (Backport PR [#35543](https://redirect.github.com/cilium/cilium/issues/35543), Upstream PR [#35173](https://redirect.github.com/cilium/cilium/issues/35173), [@smagnani96](https://redirect.github.com/smagnani96)) - Fix possible disruption of long running pod to node traffic on agent restart in kvstore mode (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35673](https://redirect.github.com/cilium/cilium/issues/35673), [@giorio94](https://redirect.github.com/giorio94)) - Fix redirect from L3 device to remote endpoint via overlay network. (Backport PR [#35468](https://redirect.github.com/cilium/cilium/issues/35468), Upstream PR [#35165](https://redirect.github.com/cilium/cilium/issues/35165), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - Fixed a bug where replies for pod-originating connections came into scope of HostFW Ingress Network policy. Applicable to configurations that use iptables for Masquerading. (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35694](https://redirect.github.com/cilium/cilium/issues/35694), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - Fixes a bug where the operator incorrectly flagged CiliumNetworkPolicies containing ICMP rules as invalid. (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35599](https://redirect.github.com/cilium/cilium/issues/35599), [@squeed](https://redirect.github.com/squeed)) - Fixes a performance regression when ingesting network policies in clusters with large numbers of Services. (Backport PR [#35543](https://redirect.github.com/cilium/cilium/issues/35543), Upstream PR [#35293](https://redirect.github.com/cilium/cilium/issues/35293), [@squeed](https://redirect.github.com/squeed)) - Fixes a potential deadlock when restarting cilium agent with pods with DNS interception configured (Backport PR [#35906](https://redirect.github.com/cilium/cilium/issues/35906), Upstream PR [#35890](https://redirect.github.com/cilium/cilium/issues/35890), [@squeed](https://redirect.github.com/squeed)) - Fixes BPF Masquerading exclusion CIDR for IPAM modes "eni", "azure" and "alibabacloud". ([#35611](https://redirect.github.com/cilium/cilium/issues/35611), [@pippolo84](https://redirect.github.com/pippolo84)) - helm: Fix configmap unmarshal error on egressGateway.maxPolicyEntries (Backport PR [#35319](https://redirect.github.com/cilium/cilium/issues/35319), Upstream PR [#35301](https://redirect.github.com/cilium/cilium/issues/35301), [@hox](https://redirect.github.com/hox)) - helm: fix duplicate configmap key for `bpf-lb-sock-terminate-pod-connections` (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35703](https://redirect.github.com/cilium/cilium/issues/35703), [@solidDoWant](https://redirect.github.com/solidDoWant)) - helm: set automountServiceAccountToken to false for hubble-relay sa (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35674](https://redirect.github.com/cilium/cilium/issues/35674), [@ayuspin](https://redirect.github.com/ayuspin)) - hubble: fix endpoint cluster name (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35415](https://redirect.github.com/cilium/cilium/issues/35415), [@kaworu](https://redirect.github.com/kaworu)) - hubble: Lock exporters while gathering metrics (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35860](https://redirect.github.com/cilium/cilium/issues/35860), [@joestringer](https://redirect.github.com/joestringer)) - Ingress endpoint is now included in the lxcmap so that ARP and ND6 work for them. (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35143](https://redirect.github.com/cilium/cilium/issues/35143), [@jrajahalme](https://redirect.github.com/jrajahalme)) - ipam: Validate CiliumNode resource in ENI mode (Backport PR [#35792](https://redirect.github.com/cilium/cilium/issues/35792), Upstream PR [#35784](https://redirect.github.com/cilium/cilium/issues/35784), [@sayboras](https://redirect.github.com/sayboras)) - l7lb: fix registration of flag loadbalancer-l7 (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35623](https://redirect.github.com/cilium/cilium/issues/35623), [@mhofstetter](https://redirect.github.com/mhofstetter)) - Log errors when reloading hubble exporter configuration dynamically and do not attempt to close os.Stdout (Backport PR [#35319](https://redirect.github.com/cilium/cilium/issues/35319), Upstream PR [#35069](https://redirect.github.com/cilium/cilium/issues/35069), [@chancez](https://redirect.github.com/chancez)) - option: Reduce log level for WG strict mode + IPv6 (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35763](https://redirect.github.com/cilium/cilium/issues/35763), [@pchaigno](https://redirect.github.com/pchaigno)) - Policy properly propagates proxy listener name and priority from a L3 wildcard rule with policies requiring authentication. (Backport PR [#35468](https://redirect.github.com/cilium/cilium/issues/35468), Upstream PR [#35381](https://redirect.github.com/cilium/cilium/issues/35381), [@jrajahalme](https://redirect.github.com/jrajahalme)) - treewide: Add wrapper for `netlink` functions that may fail with `ErrDumpInterrupted` (Backport PR [#35654](https://redirect.github.com/cilium/cilium/issues/35654), Upstream PR [#35614](https://redirect.github.com/cilium/cilium/issues/35614), [@gandro](https://redirect.github.com/gandro)) - wireguard: Fix connectivity issues following node reboots. (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35750](https://redirect.github.com/cilium/cilium/issues/35750), [@jrife](https://redirect.github.com/jrife)) CI Changes: - .github/conformance-ginkgo: replace deprecated jq flag (Backport PR [#35468](https://redirect.github.com/cilium/cilium/issues/35468), Upstream PR [#35399](https://redirect.github.com/cilium/cilium/issues/35399), [@aanm](https://redirect.github.com/aanm)) - .github: extend timeout for tests-ipsec-upgrade workflow (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35657](https://redirect.github.com/cilium/cilium/issues/35657), [@rastislavs](https://redirect.github.com/rastislavs)) - .github: remove libncurses5 from integration tests (Backport PR [#35468](https://redirect.github.com/cilium/cilium/issues/35468), Upstream PR [#35408](https://redirect.github.com/cilium/cilium/issues/35408), [@aanm](https://redirect.github.com/aanm)) - \[v1.16] gh: e2e-upgrade: restart LRP backend pod after upgrade ([#35329](https://redirect.github.com/cilium/cilium/issues/35329), [@ysksuzuki](https://redirect.github.com/ysksuzuki)) - \[v1.16] github: update rhel8 LVH image to rhel8.6 ([#35733](https://redirect.github.com/cilium/cilium/issues/35733), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - Additionally test KVStore mode in E2E/IPSec workflows (Backport PR [#35905](https://redirect.github.com/cilium/cilium/issues/35905), Upstream PR [#35679](https://redirect.github.com/cilium/cilium/issues/35679), [@giorio94](https://redirect.github.com/giorio94)) - ci: conformance-kind: re-enable flaky Aggregator test (Backport PR [#35582](https://redirect.github.com/cilium/cilium/issues/35582), Upstream PR [#35286](https://redirect.github.com/cilium/cilium/issues/35286), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - ci: datapath-verifier: bump lvh images (Backport PR [#35648](https://redirect.github.com/cilium/cilium/issues/35648), Upstream PR [#35456](https://redirect.github.com/cilium/cilium/issues/35456), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - gha: Update chmod command (Backport PR [#35468](https://redirect.github.com/cilium/cilium/issues/35468), Upstream PR [#35400](https://redirect.github.com/cilium/cilium/issues/35400), [@sayboras](https://redirect.github.com/sayboras)) - github: Pass the workflow step timeout to go test (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35814](https://redirect.github.com/cilium/cilium/issues/35814), [@jrajahalme](https://redirect.github.com/jrajahalme)) - Refactor and set a default for GH_RUNNER_EXTRA_POWER (Backport PR [#35319](https://redirect.github.com/cilium/cilium/issues/35319), Upstream PR [#35267](https://redirect.github.com/cilium/cilium/issues/35267), [@aanm](https://redirect.github.com/aanm)) - workflows/gateway-api: Cover IPsec with GatewayAPI (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35584](https://redirect.github.com/cilium/cilium/issues/35584), [@pchaigno](https://redirect.github.com/pchaigno)) - workflows/ingress: Run basic checks (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35683](https://redirect.github.com/cilium/cilium/issues/35683), [@pchaigno](https://redirect.github.com/pchaigno)) - workflows/ipsec: Cover Ingress (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35476](https://redirect.github.com/cilium/cilium/issues/35476), [@pchaigno](https://redirect.github.com/pchaigno)) - workflows: Extend IPsec tests to cover egress gateway (Backport PR [#35540](https://redirect.github.com/cilium/cilium/issues/35540), Upstream PR [#35323](https://redirect.github.com/cilium/cilium/issues/35323), [@pchaigno](https://redirect.github.com/pchaigno)) Misc Changes: - .github/build-images-base: checkout base branch to get scripts (Backport PR [#35319](https://redirect.github.com/cilium/cilium/issues/35319), Upstream PR [#35236](https://redirect.github.com/cilium/cilium/issues/35236), [@aanm](https://redirect.github.com/aanm)) - .github: remove retention days for image digests (Backport PR [#35468](https://redirect.github.com/cilium/cilium/issues/35468), Upstream PR [#35457](https://redirect.github.com/cilium/cilium/issues/35457), [@aanm](https://redirect.github.com/aanm)) - bpf: vxlan helper improvements (Backport PR [#35543](https://redirect.github.com/cilium/cilium/issues/35543), Upstream PR [#34755](https://redirect.github.com/cilium/cilium/issues/34755), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - chore(deps): update all github action dependencies (v1.16) ([#35382](https://redirect.github.com/cilium/cilium/issues/35382), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.16) ([#35439](https://redirect.github.com/cilium/cilium/issues/35439), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.16) ([#35573](https://redirect.github.com/cilium/cilium/issues/35573), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.16) ([#35710](https://redirect.github.com/cilium/cilium/issues/35710), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.16) ([#35438](https://redirect.github.com/cilium/cilium/issues/35438), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.22.8 docker digest to [`0ca97f4`](https://redirect.github.com/cilium/cilium/commit/0ca97f4) (v1.16) ([#35730](https://redirect.github.com/cilium/cilium/issues/35730), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.22.8 docker digest to [`b274ff1`](https://redirect.github.com/cilium/cilium/commit/b274ff1) (v1.16) ([#35379](https://redirect.github.com/cilium/cilium/issues/35379), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update go to v1.22.9 (v1.16) ([#35854](https://redirect.github.com/cilium/cilium/issues/35854), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1729635771-fa4efeff33a344a45e14a4068c61dc438b3d2270 (v1.16) ([#35491](https://redirect.github.com/cilium/cilium/issues/35491), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.16) (patch) ([#35731](https://redirect.github.com/cilium/cilium/issues/35731), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - cilium, docs: Extend requirements for L7 proxy (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35669](https://redirect.github.com/cilium/cilium/issues/35669), [@borkmann](https://redirect.github.com/borkmann)) - cilium: add probe for netkit for more user friendly error when not supported (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35551](https://redirect.github.com/cilium/cilium/issues/35551), [@borkmann](https://redirect.github.com/borkmann)) - ctrl-runtime: lower severity of retryable reconcile errors (Backport PR [#35592](https://redirect.github.com/cilium/cilium/issues/35592), Upstream PR [#35364](https://redirect.github.com/cilium/cilium/issues/35364), [@giorio94](https://redirect.github.com/giorio94)) - daemon: Reduce level of socket LB tracing warning (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35798](https://redirect.github.com/cilium/cilium/issues/35798), [@pchaigno](https://redirect.github.com/pchaigno)) - datapath: move policy map value prefix length to flags (Backport PR [#35603](https://redirect.github.com/cilium/cilium/issues/35603), Upstream PR [#35534](https://redirect.github.com/cilium/cilium/issues/35534), [@jrajahalme](https://redirect.github.com/jrajahalme)) - dnsproxy: fix error when sessionUDPFactory fails (Backport PR [#35543](https://redirect.github.com/cilium/cilium/issues/35543), Upstream PR [#33998](https://redirect.github.com/cilium/cilium/issues/33998), [@marseel](https://redirect.github.com/marseel)) - docs/ipsec: Remove KPR limitation (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35743](https://redirect.github.com/cilium/cilium/issues/35743), [@pchaigno](https://redirect.github.com/pchaigno)) - docs/xfrm: Fix incorrect statement regarding XFRM IN policies (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35626](https://redirect.github.com/cilium/cilium/issues/35626), [@pchaigno](https://redirect.github.com/pchaigno)) - docs: Change invalid Helm option --agent.enabled with --agent=false in upgrade documentation (Backport PR [#35319](https://redirect.github.com/cilium/cilium/issues/35319), Upstream PR [#35288](https://redirect.github.com/cilium/cilium/issues/35288), [@oneumyvakin](https://redirect.github.com/oneumyvakin)) - docs: clean up stale kernel requirements (Backport PR [#35582](https://redirect.github.com/cilium/cilium/issues/35582), Upstream PR [#35575](https://redirect.github.com/cilium/cilium/issues/35575), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - docs: Fix incorrect link to RFC 4271 for BGP control plane timers. (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35725](https://redirect.github.com/cilium/cilium/issues/35725), [@nvibert](https://redirect.github.com/nvibert)) - docs: kpr: update error message regarding SocketLB tracing (Backport PR [#35468](https://redirect.github.com/cilium/cilium/issues/35468), Upstream PR [#35337](https://redirect.github.com/cilium/cilium/issues/35337), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - docs: tuning: XDP LB also supports tunnel routing (Backport PR [#35582](https://redirect.github.com/cilium/cilium/issues/35582), Upstream PR [#35574](https://redirect.github.com/cilium/cilium/issues/35574), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - docs: update 1.16 upgrade note for LRP ([#35944](https://redirect.github.com/cilium/cilium/issues/35944), [@ysksuzuki](https://redirect.github.com/ysksuzuki)) - docs: update default identity label filters (Backport PR [#35468](https://redirect.github.com/cilium/cilium/issues/35468), Upstream PR [#35422](https://redirect.github.com/cilium/cilium/issues/35422), [@marseel](https://redirect.github.com/marseel)) - docs: XFRM reference guide for IPsec development (Backport PR [#35582](https://redirect.github.com/cilium/cilium/issues/35582), Upstream PR [#35322](https://redirect.github.com/cilium/cilium/issues/35322), [@pchaigno](https://redirect.github.com/pchaigno)) - Envoy simplify listener setup (Backport PR [#35764](https://redirect.github.com/cilium/cilium/issues/35764), Upstream PR [#35642](https://redirect.github.com/cilium/cilium/issues/35642), [@jrajahalme](https://redirect.github.com/jrajahalme)) - envoy: Configure internal_address_config to avoid warning log (Backport PR [#35471](https://redirect.github.com/cilium/cilium/issues/35471), Upstream PR [#35090](https://redirect.github.com/cilium/cilium/issues/35090), [@sayboras](https://redirect.github.com/sayboras)) - envoy: Limit started serving logging to the typeURL of the stream (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35736](https://redirect.github.com/cilium/cilium/issues/35736), [@jrajahalme](https://redirect.github.com/jrajahalme)) - Fix wrongly spelled config option in error message (Backport PR [#35543](https://redirect.github.com/cilium/cilium/issues/35543), Upstream PR [#35390](https://redirect.github.com/cilium/cilium/issues/35390), [@baurmatt](https://redirect.github.com/baurmatt)) - helm: clarify text for serviceNoBackendResponse (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35734](https://redirect.github.com/cilium/cilium/issues/35734), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - hubble: Add 'release' Make target (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35561](https://redirect.github.com/cilium/cilium/issues/35561), [@michi-covalent](https://redirect.github.com/michi-covalent)) - image: Use cilium-builder instead of golang as operator builder image (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35351](https://redirect.github.com/cilium/cilium/issues/35351), [@learnitall](https://redirect.github.com/learnitall)) - iptables: always warn about missing xt_socket module (Backport PR [#35781](https://redirect.github.com/cilium/cilium/issues/35781), Upstream PR [#35591](https://redirect.github.com/cilium/cilium/issues/35591), [@julianwiedmann](https://redirect.github.com/julianwiedmann)) - makefile: add target to install Cilium in kvstore mode (Backport PR [#35905](https://redirect.github.com/cilium/cilium/issues/35905), Upstream PR [#35646](https://redirect.github.com/cilium/cilium/issues/35646), [@giorio94](https://redirect.github.com/giorio94)) - proxy: Ensure proxy ports are written on shutdown (Backport PR [#35908](https://redirect.github.com/cilium/cilium/issues/35908), Upstream PR [#35839](https://redirect.github.com/cilium/cilium/issues/35839), [@jrajahalme](https://redirect.github.com/jrajahalme)) - Silence spurious clustermesh-related warnings (Backport PR [#35850](https://redirect.github.com/cilium/cilium/issues/35850), Upstream PR [#35867](https://redirect.github.com/cilium/cilium/issues/35867), [@giorio94](https://redirect.github.com/giorio94)) Other Changes: - \[v1.16] envoy: Add configuration for OverloadManager ([#35787](https://redirect.github.com/cilium/cilium/issues/35787), [@sayboras](https://redirect.github.com/sayboras)) - \[v1.16] envoy: Bump envoy version from 1.29.x to 1.30.x ([#35563](https://redirect.github.com/cilium/cilium/issues/35563), [@sayboras](https://redirect.github.com/sayboras)) - \[v1.16] policy/correlation: Fix `PolicyMatch{L3Proto,L4Only}` case ([#35681](https://redirect.github.com/cilium/cilium/issues/35681), [@gandro](https://redirect.github.com/gandro)) - chore(deps): update cilium-envoy dependency ([#35920](https://redirect.github.com/cilium/cilium/issues/35920), [@sayboras](https://redirect.github.com/sayboras)) - install: Update image digests for v1.16.3 ([#35361](https://redirect.github.com/cilium/cilium/issues/35361), [@cilium-release-bot](https://redirect.github.com/cilium-release-bot)\[bot]) - Policy add deny rule test and benchmark ([#35714](https://redirect.github.com/cilium/cilium/issues/35714), [@jrajahalme](https://redirect.github.com/jrajahalme)) #### Docker Manifests ##### cilium `quay.io/cilium/cilium:v1.16.4@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf` `quay.io/cilium/cilium:stable@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf` ##### clustermesh-apiserver `quay.io/cilium/clustermesh-apiserver:v1.16.4@sha256:b41ba9c1b32e31308e17287a24a5b8e8ed0931f70d168087001c9679bc6c5dd2` `quay.io/cilium/clustermesh-apiserver:stable@sha256:b41ba9c1b32e31308e17287a24a5b8e8ed0931f70d168087001c9679bc6c5dd2` ##### docker-plugin `quay.io/cilium/docker-plugin:v1.16.4@sha256:0e55f80fa875a1bcce87d87eae9a72b32c9db1fe9741c1f8d1bf308ef4b1193e` `quay.io/cilium/docker-plugin:stable@sha256:0e55f80fa875a1bcce87d87eae9a72b32c9db1fe9741c1f8d1bf308ef4b1193e` ##### hubble-relay `quay.io/cilium/hubble-relay:v1.16.4@sha256:fb2c7d127a1c809f6ba23c05973f3dd00f6b6a48e4aee2da95db925a4f0351d2` `quay.io/cilium/hubble-relay:stable@sha256:fb2c7d127a1c809f6ba23c05973f3dd00f6b6a48e4aee2da95db925a4f0351d2` ##### operator-alibabacloud `quay.io/cilium/operator-alibabacloud:v1.16.4@sha256:8d59d1c9043d0ccf40f3e16361e5c81e8044cb83695d32d750b0c352f690c686` `quay.io/cilium/operator-alibabacloud:stable@sha256:8d59d1c9043d0ccf40f3e16361e5c81e8044cb83695d32d750b0c352f690c686` ##### operator-aws `quay.io/cilium/operator-aws:v1.16.4@sha256:355051bbebab73ea3067bb7f0c28cfd43b584d127570cb826f794f468e2d31be` `quay.io/cilium/operator-aws:stable@sha256:355051bbebab73ea3067bb7f0c28cfd43b584d127570cb826f794f468e2d31be` ##### operator-azure `quay.io/cilium/operator-azure:v1.16.4@sha256:475594628af6d6a807d58fcb6b7d48f5a82e0289f54ae372972b1d0536c0b6de` `quay.io/cilium/operator-azure:stable@sha256:475594628af6d6a807d58fcb6b7d48f5a82e0289f54ae372972b1d0536c0b6de` ##### operator-generic `quay.io/cilium/operator-generic:v1.16.4@sha256:c55a7cbe19fe0b6b28903a085334edb586a3201add9db56d2122c8485f7a51c5` `quay.io/cilium/operator-generic:stable@sha256:c55a7cbe19fe0b6b28903a085334edb586a3201add9db56d2122c8485f7a51c5` ##### operator `quay.io/cilium/operator:v1.16.4@sha256:c77643984bc17e1a93d83b58fa976d7e72ad1485ce722257594f8596899fdfff` `quay.io/cilium/operator:stable@sha256:c77643984bc17e1a93d83b58fa976d7e72ad1485ce722257594f8596899fdfff` </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-21 02:42:40 +01:00
TrueCharts Bot	9cff379137	fix(deps): update module github.com/masterminds/semver/v3 v3.3.0 → v3.3.1 (clustertool) (#29607 )	2024-11-20 03:01:10 +01:00
TrueCharts Bot	20d896c9a3	fix(deps): update module github.com/go-playground/validator/v10 v10.22.1 → v10.23.0 (clustertool) (#29495 )	2024-11-17 02:42:54 +01:00
TrueCharts Bot	3fbef65029	chore(flux): update image blocky 16.6.3 → 16.6.4 (clustertool) (#29455 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [blocky](https://truecharts.org/charts/premium/blocky) ([source](https://0xerr0r.github.io/blocky/)) \| patch \| `16.6.3` -> `16.6.4` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-16 00:20:38 +01:00
gismo2004	4f13196df4	fix(clustertool) fix shamir_threshold check (#29302 ) Description current implementation just checks the first line of the file as it exits in the “else” ⚒️ Fixes # <!--(issue)--> ⚙️ Type of change - [ ] ⚙️ Feature/App addition - [x] 🪛 Bugfix - [ ] ⚠️ Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] 🔃 Refactor of current code 🧪 How Has This Been Tested? Local go test file. 📃 Notes: <!-- Please enter any other relevant information here --> ✔️ Checklist: - [ ] ⚖️ My code follows the style guidelines of this project - [ ] 👀 I have performed a self-review of my own code - [ ] #️⃣ I have commented my code, particularly in hard-to-understand areas - [ ] 📄 I have made corresponding changes to the documentation - [ ] ⚠️ My changes generate no new warnings - [ ] 🧪 I have added tests to this description that prove my fix is effective or that my feature works - [ ] ⬆️ I increased versions for any altered app according to semantic versioning - [ ] I made sure the title starts with `feat(chart-name):`, `fix(chart-name):` or `chore(chart-name):` ➕ App addition If this PR is an app addition please make sure you have done the following. - [ ] 🖼️ I have added an icon in the Chart's root directory called `icon.png` --- _Please don't blindly check all the boxes. Read them and only check those that apply. Those checkboxes are there for the reviewer to see what is this all about and the status of this PR with a quick glance._	2024-11-15 22:58:53 +01:00
TrueCharts Bot	961b8551ee	fix(deps): update module github.com/budimanjojo/talhelper/v3 v3.0.9 → v3.0.10 (clustertool) (#29404 ) This PR contains the following updates: \| Package \| Type \| Update \| Change \| \|---\|---\|---\|---\| \| [github.com/budimanjojo/talhelper/v3](https://redirect.github.com/budimanjojo/talhelper) \| require \| patch \| `v3.0.9` -> `v3.0.10` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>budimanjojo/talhelper (github.com/budimanjojo/talhelper/v3)</summary> ### [`v3.0.10`](https://redirect.github.com/budimanjojo/talhelper/releases/tag/v3.0.10) [Compare Source](https://redirect.github.com/budimanjojo/talhelper/compare/v3.0.9...v3.0.10) #### Changelog - [`e5e79a1`](https://redirect.github.com/budimanjojo/talhelper/commit/e5e79a1c6903d5de6e18e55b13892af61b422cad) chore(container): update alpine:3.20.3 docker digest to [`1e42bbe`](https://redirect.github.com/budimanjojo/talhelper/commit/1e42bbe) - [`400e637`](https://redirect.github.com/budimanjojo/talhelper/commit/400e637b4f3ef909af4e07bdbe95bcd853404c09) chore(container): update ghcr.io/siderolabs/talosctl docker tag to v1.8.3 - [`cec2d6d`](https://redirect.github.com/budimanjojo/talhelper/commit/cec2d6d4d40561380b36116423df69a5acf52879) chore(container): update goreleaser/goreleaser docker tag to v2.4.5 - [`6575d48`](https://redirect.github.com/budimanjojo/talhelper/commit/6575d48433414cbea6a47244a4ff526ab302217d) chore(deps): update dependency siderolabs/talos to v1.8.3 - [`c5e7536`](https://redirect.github.com/budimanjojo/talhelper/commit/c5e7536f889288f6a03dc4f78cd04544acb5e1e8) chore(schema): update talconfig.yaml JSON schema ([#709](https://redirect.github.com/budimanjojo/talhelper/issues/709)) - [`4628b8b`](https://redirect.github.com/budimanjojo/talhelper/commit/4628b8bcc1967f84cb4ef813a35c759d50427751) chore(schema): update talos-extensions.yaml JSON schema ([#702](https://redirect.github.com/budimanjojo/talhelper/issues/702)) - [`41e7e60`](https://redirect.github.com/budimanjojo/talhelper/commit/41e7e60ca554dfe283ae6431dd718d63dd4dcf56) chore(schema): update talos-extensions.yaml JSON schema ([#705](https://redirect.github.com/budimanjojo/talhelper/issues/705)) - [`f05658a`](https://redirect.github.com/budimanjojo/talhelper/commit/f05658a383a1466c2fbcaf245e8da484bdaa36a0) feat(genconfig): support templating node labels and annotations - [`df6c54b`](https://redirect.github.com/budimanjojo/talhelper/commit/df6c54b13aca14f05c612ac8b333ba6b6b55e458) feat: update Scoop for talhelper version v3.0.9 - [`c40aaa1`](https://redirect.github.com/budimanjojo/talhelper/commit/c40aaa12cd5e2b8ea3bd48c8d3f60564cf6f4d5e) feat: update flake - [`bb21600`](https://redirect.github.com/budimanjojo/talhelper/commit/bb216006c0b1f8870a0fde7089bd95902aa0b5f5) fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.9 </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-15 09:14:22 +01:00
TrueCharts Bot	1a118e2db7	chore(flux): update image metallb-config 8.2.3 → 8.2.4 (clustertool) (#29394 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [metallb-config](https://truecharts.org/charts/premium/metallb-config) ([source](https://redirect.github.com/metallb/metallb)) \| patch \| `8.2.3` -> `8.2.4` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-15 05:15:41 +01:00
TrueCharts Bot	f28c281a5d	chore(flux): update image clusterissuer 9.2.4 → 9.2.5 (clustertool) (#29393 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [clusterissuer](https://truecharts.org/charts/premium/clusterissuer) ([source](https://cert-manager.io/)) \| patch \| `9.2.4` -> `9.2.5` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-15 05:14:41 +01:00
TrueCharts-Bot	f40bc8b3ae	Commit daily changes Signed-off-by: TrueCharts-Bot <bot@truecharts.org>	2024-11-15 00:08:08 +00:00
TrueCharts Bot	08a526e751	fix(deps): update module helm.sh/helm/v3 v3.16.2 → v3.16.3 (clustertool) (#29340 ) This PR contains the following updates: \| Package \| Type \| Update \| Change \| \|---\|---\|---\|---\| \| [helm.sh/helm/v3](https://redirect.github.com/helm/helm) \| require \| patch \| `v3.16.2` -> `v3.16.3` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>helm/helm (helm.sh/helm/v3)</summary> ### [`v3.16.3`](https://redirect.github.com/helm/helm/releases/tag/v3.16.3): Helm v3.16.3 [Compare Source](https://redirect.github.com/helm/helm/compare/v3.16.2...v3.16.3) Helm v3.16.3 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience. The community keeps growing, and we'd love to see you there! - Join the discussion in [Kubernetes Slack](https://kubernetes.slack.com): - for questions and just to hang out - for discussing PRs, code, and bugs - Hang out at the Public Developer Call: Thursday, 9:30 Pacific via [Zoom](https://zoom.us/j/696660622) - Test, debug, and contribute charts: [ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0) #### Installation and Upgrading Download Helm v3.16.3. The common platform binaries are here: - [MacOS amd64](https://get.helm.sh/helm-v3.16.3-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.16.3-darwin-amd64.tar.gz.sha256sum) / 495d75b404a96fb664f1ca3f8cb01db2210aacc62dbfa1bbab30916abbb20a57) - [MacOS arm64](https://get.helm.sh/helm-v3.16.3-darwin-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.16.3-darwin-arm64.tar.gz.sha256sum) / 3a39f690173086e6eea17674751eb3c8b970c02697e49cecd4093eaa3cf89dcd) - [Linux amd64](https://get.helm.sh/helm-v3.16.3-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.16.3-linux-amd64.tar.gz.sha256sum) / f5355c79190951eed23c5432a3b920e071f4c00a64f75e077de0dd4cb7b294ea) - [Linux arm](https://get.helm.sh/helm-v3.16.3-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v3.16.3-linux-arm.tar.gz.sha256sum) / 02ba2f3b1524113f49be6df25a0b4b3190010d6e218c8e2b2fde4578a8439a9c) - [Linux arm64](https://get.helm.sh/helm-v3.16.3-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.16.3-linux-arm64.tar.gz.sha256sum) / 5bd34ed774df6914b323ff84a0a156ea6ff2ba1eaf0113962fa773f3f9def798) - [Linux i386](https://get.helm.sh/helm-v3.16.3-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v3.16.3-linux-386.tar.gz.sha256sum) / 70318f60fec3219680fff86c9293e2a92fb8b9a691d41791661074588f22768e) - [Linux ppc64le](https://get.helm.sh/helm-v3.16.3-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v3.16.3-linux-ppc64le.tar.gz.sha256sum) / 266f7698c56a724fddd3a2f2b862ad496c4338dce79f0282fdbc6e23e1738608) - [Linux s390x](https://get.helm.sh/helm-v3.16.3-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v3.16.3-linux-s390x.tar.gz.sha256sum) / bac414c409faead9c2b8af11d29281aa4f1aeb9139c62d5178baf982d71fc9bb) - [Linux riscv64](https://get.helm.sh/helm-v3.16.3-linux-riscv64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.16.3-linux-riscv64.tar.gz.sha256sum) / 492843d2584bb14bd38a735a9708af2d7f3ea7e1b6c43e650968f16fce0b5064) - [Windows amd64](https://get.helm.sh/helm-v3.16.3-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v3.16.3-windows-amd64.zip.sha256sum) / 1a52aa56e55168c3d3d2e45fa833a32290e4e3790559851dce1e707eb7728b81) - [Windows arm64](https://get.helm.sh/helm-v3.16.3-windows-arm64.zip) ([checksum](https://get.helm.sh/helm-v3.16.3-windows-arm64.zip.sha256sum) / 247a63269a83bb73c14e8f62b0cfd5a2e1d32b7d3f93977d3a6ef3902d218ff1) This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E ` and can be found at [@mattfarina](https://redirect.github.com/mattfarina) [keybase account](https://keybase.io/mattfarina). Please use the attached signatures for verifying this release using `gpg`. The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get you going from there. For upgrade instructions or detailed installation notes, check the [install guide](https://helm.sh/docs/intro/install/). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3) on any system with `bash`. #### What's Next - 3.16.4 is the next patch release and will be on December 11, 2024 - 3.17.0 is the next feature release and will be on January 15, 2025 #### Changelog - fix: fix label name [`cfd0749`](https://redirect.github.com/helm/helm/commit/cfd07493f46efc9debd9cc1b02a0961186df7fdf) (wangjingcun) - Fix typo in pkg/lint/rules/chartfile_test.go [`a303060`](https://redirect.github.com/helm/helm/commit/a303060fc60bc713cd0757503b3fcb4636b14f34) (Zach Burgess) - Increasing the size of the runner used for releases. [`ab45e8a`](https://redirect.github.com/helm/helm/commit/ab45e8a861e929e40163a7ad5a8636cb41f381ac) (Matt Farina) - fix(hooks): correct hooks delete order [`19fe320`](https://redirect.github.com/helm/helm/commit/19fe320ae87e8d1d4bc1952d9da8ea2fe435aa6e) (Suleiman Dibirov) - Bump github.com/containerd/containerd from 1.7.12 to 1.7.23 [`4fcc5c2`](https://redirect.github.com/helm/helm/commit/4fcc5c2cadf49d1399adfdbc5ab7222b2dff1d5b) (dependabot\[bot]) </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-14 05:14:36 +01:00
TrueCharts Bot	988ee38396	chore(flux): update image traefik 30.0.2 → 30.0.3 (clustertool) (#29311 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [traefik](https://truecharts.org/charts/premium/traefik) ([source](https://redirect.github.com/traefik/traefik)) \| patch \| `30.0.2` -> `30.0.3` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-13 17:14:12 +01:00
TrueCharts Bot	3d3f0271fe	chore(deps): update ghcr.io/siderolabs/installer docker tag to v1.8.3 (clustertool) (#29310 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/siderolabs/installer](https://redirect.github.com/siderolabs/talos) \| patch \| `v1.8.2` -> `v1.8.3` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>siderolabs/talos (ghcr.io/siderolabs/installer)</summary> ### [`v1.8.3`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.8.3) [Compare Source](https://redirect.github.com/siderolabs/talos/compare/v1.8.2...v1.8.3) ##### [Talos 1.8.3](https://redirect.github.com/siderolabs/talos/releases/tag/v1.8.3) (2024-11-13) Welcome to the v1.8.3 release of Talos! Starting with Talos v1.8.0, only standard assets would be published as github release assets. These include: - `cloud-images.json` - `talosctl` binaries - `kernel` - `initramfs` - `metal` iso and disk images - `talosctl-cni-bundle` All other release assets can be downloaded from [Image Factory](https://www.talos.dev/latest/talos-guides/install/boot-assets/#image-factory). Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues. ##### Component Updates Linux: 6.6.60 containerd: 2.0.0 runc: 1.2.1 Talos is built with Go 1.22.9. ##### Contributors - Andrey Smirnov - blablu - Dmitry Sharshakov - Joakim Nohlgård - Noel Georgi - Remko Molier - Sam Stelfox ##### Changes <details><summary>15 commits</summary> <p> - [@`6494ace`](https://redirect.github.com/siderolabs/talos/commit/6494aced3) release(v1.8.3): prepare release - [@`01c9f45`](https://redirect.github.com/siderolabs/talos/commit/01c9f4584) fix: arch linux search paths and names for QEMU provisioner - [@`8b5c5f1`](https://redirect.github.com/siderolabs/talos/commit/8b5c5f108) chore: fix nil pointer dereference in AWS uploader - [@`fbf85dd`](https://redirect.github.com/siderolabs/talos/commit/fbf85dd0d) fix: install disk matcher error - [@`ff3fcce`](https://redirect.github.com/siderolabs/talos/commit/ff3fccea9) feat: add dm-cache dm-cache-smq kernel modules - [@`6d872e4`](https://redirect.github.com/siderolabs/talos/commit/6d872e41c) feat: allow extra mounts for docker-based `talosctl cluster create` - [@`8c193c8`](https://redirect.github.com/siderolabs/talos/commit/8c193c8b1) fix: update permissions for logging directories in /var - [@`5044a41`](https://redirect.github.com/siderolabs/talos/commit/5044a410c) fix: mount /sys/kernel/security conditionally - [@`83abb66`](https://redirect.github.com/siderolabs/talos/commit/83abb6644) fix: make route normalization keep family - [@`228a943`](https://redirect.github.com/siderolabs/talos/commit/228a94387) fix: do not trim 0 from process SELinux label - [@`d4a3a2b`](https://redirect.github.com/siderolabs/talos/commit/d4a3a2b62) fix: prevent panic in nocloud platform code - [@`5c7b02d`](https://redirect.github.com/siderolabs/talos/commit/5c7b02d7e) fix: update the CRI sandbox image reference - [@`f8155c4`](https://redirect.github.com/siderolabs/talos/commit/f8155c40d) feat: add parsing of vlanNNNN:ethX style VLAN cmdline args - [@`ea19f15`](https://redirect.github.com/siderolabs/talos/commit/ea19f157f) fix: generation of SecureBoot iso - [@`fddaa60`](https://redirect.github.com/siderolabs/talos/commit/fddaa60e2) feat: update Linux, runc, containerd, go </p> </details> ##### Changes from siderolabs/pkgs <details><summary>7 commits</summary> <p> - [siderolabs/pkgs@`9c80a4a`](https://redirect.github.com/siderolabs/pkgs/commit/9c80a4a) feat: update Linux to 6.6.60 - [siderolabs/pkgs@`747c6c7`](https://redirect.github.com/siderolabs/pkgs/commit/747c6c7) feat: update containerd to v2.0.0 - [siderolabs/pkgs@`87c6526`](https://redirect.github.com/siderolabs/pkgs/commit/87c6526) feat: enable CONFIG_DM_CACHE - [siderolabs/pkgs@`b4fa648`](https://redirect.github.com/siderolabs/pkgs/commit/b4fa648) fix: enable nvme and 2.5gbit ethernet on nanopi-r5s - [siderolabs/pkgs@`079ea13`](https://redirect.github.com/siderolabs/pkgs/commit/079ea13) feat: update Linux to 6.6.59 - [siderolabs/pkgs@`e4bc753`](https://redirect.github.com/siderolabs/pkgs/commit/e4bc753) feat: update runc to v1.2.1 - [siderolabs/pkgs@`de3dbf5`](https://redirect.github.com/siderolabs/pkgs/commit/de3dbf5) feat: update Go to 1.22.9 </p> </details> ##### Changes from siderolabs/tools <details><summary>1 commit</summary> <p> - [siderolabs/tools@`653182a`](https://redirect.github.com/siderolabs/tools/commit/653182a) feat: update Go to 1.22.9 </p> </details> ##### Dependency Changes - github.com/docker/cli v27.1.1 *new* - github.com/docker/docker v27.2.0 -> v27.1.1 - github.com/siderolabs/pkgs v1.8.0-24-ge72b2f4 -> v1.8.0-31-g9c80a4a - github.com/siderolabs/talos/pkg/machinery v1.8.2 -> v1.8.3 - github.com/siderolabs/tools v1.8.0-2-g7719230 -> v1.8.0-3-g653182a Previous release can be found at [v1.8.2](https://redirect.github.com/siderolabs/talos/releases/tag/v1.8.2) ##### Images ghcr.io/siderolabs/flannel:v0.25.7 registry.k8s.io/coredns/coredns:v1.11.3 gcr.io/etcd-development/etcd:v3.5.16 registry.k8s.io/kube-apiserver:v1.31.2 registry.k8s.io/kube-controller-manager:v1.31.2 registry.k8s.io/kube-scheduler:v1.31.2 registry.k8s.io/kube-proxy:v1.31.2 ghcr.io/siderolabs/kubelet:v1.31.2 ghcr.io/siderolabs/installer:v1.8.3 registry.k8s.io/pause:3.10 </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-13 17:14:02 +01:00
TrueCharts Bot	04f58d5872	chore(flux): update image kyverno 3.3.2 → 3.3.3 (clustertool) (#29289 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [kyverno](https://redirect.github.com/kyverno/kyverno) \| patch \| `3.3.2` -> `3.3.3` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-13 09:15:46 +01:00
TrueCharts Bot	dcb05973ad	chore(flux): update image traefik 30.0.1 → 30.0.2 (clustertool) (#29257 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [traefik](https://truecharts.org/charts/premium/traefik) ([source](https://redirect.github.com/traefik/traefik)) \| patch \| `30.0.1` -> `30.0.2` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-13 01:19:54 +01:00
TrueCharts-Bot	a3b0afa65d	Commit daily changes Signed-off-by: TrueCharts-Bot <bot@truecharts.org>	2024-11-13 00:07:58 +00:00
TrueCharts Bot	e19b0fd5a3	chore(flux): update image traefik 30.0.0 → 30.0.1 (clustertool) (#29245 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [traefik](https://truecharts.org/charts/premium/traefik) ([source](https://redirect.github.com/traefik/traefik)) \| patch \| `30.0.0` -> `30.0.1` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-12 21:13:16 +01:00
Kjeld Schouten	3a0e296670	fix(clustertool): remove envrc, untill we are certain how to deal with it.	2024-11-12 16:04:50 +01:00
Kjeld Schouten	4012981462	fix(clustertool): update traefik helm chart	2024-11-12 15:56:09 +01:00
Kjeld Schouten	0610afa19b	feat(clustertool): retry helm-install after etcs timeout	2024-11-12 14:59:38 +01:00
TrueCharts Bot	858c0160b7	chore(flux): update image volsync 2.5.0 → 2.5.1 (clustertool) (#29215 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [volsync](https://truecharts.org/charts/system/volsync) ([source](https://redirect.github.com/truecharts/charts/tree/HEAD/charts/system/volsync)) \| patch \| `2.5.0` -> `2.5.1` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-12 13:22:01 +01:00
TrueCharts Bot	0fed4760fe	chore(flux): update image traefik-crds 3.2.3 → 3.2.4 (clustertool) (#29213 )	2024-11-12 13:21:43 +01:00
TrueCharts Bot	f554bc0519	chore(flux): update image spegel 2.0.7 → 2.0.8 (clustertool) (#29211 )	2024-11-12 13:21:40 +01:00
TrueCharts Bot	6a17571f3f	chore(flux): update image prometheus-operator 8.11.0 → 8.11.1 (clustertool) (#29209 )	2024-11-12 13:21:37 +01:00
TrueCharts Bot	1900cd2319	chore(flux): update image kubernetes-reflector 6.2.1 → 6.2.2 (clustertool) (#29206 )	2024-11-12 13:21:04 +01:00
TrueCharts Bot	e33f67c4e6	chore(flux): update image kubelet-csr-approver 1.1.2 → 1.1.3 (clustertool) (#29204 )	2024-11-12 13:18:58 +01:00
TrueCharts Bot	21770baad3	chore(flux): update image traefik 29.5.0 → 29.5.1 (clustertool) (#29212 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [traefik](https://truecharts.org/charts/premium/traefik) ([source](https://redirect.github.com/traefik/traefik)) \| patch \| `29.5.0` -> `29.5.1` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-12 13:18:41 +01:00
TrueCharts Bot	f1ed36b5ce	chore(flux): update image snapshot-controller 3.3.1 → 3.3.2 (clustertool) (#29210 )	2024-11-12 13:18:13 +01:00
TrueCharts Bot	ba5ff22d82	chore(flux): update image metallb-config 8.2.2 → 8.2.3 (clustertool) (#29207 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [metallb-config](https://truecharts.org/charts/premium/metallb-config) ([source](https://redirect.github.com/metallb/metallb)) \| patch \| `8.2.2` -> `8.2.3` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->	2024-11-12 13:18:06 +01:00
TrueCharts Bot	0526918605	chore(flux): update image cert-manager 6.2.2 → 6.2.3 (clustertool) (#29201 )	2024-11-12 13:17:51 +01:00
TrueCharts Bot	c49e6370ee	chore(flux): update image kubernetes-dashboard 1.10.0 → 1.10.1 (clustertool) (#29205 )	2024-11-12 13:17:47 +01:00
TrueCharts Bot	31ce2e2b11	chore(flux): update image clusterissuer 9.2.3 → 9.2.4 (clustertool) (#29202 )	2024-11-12 13:17:43 +01:00
TrueCharts Bot	30c69ca692	chore(flux): update image blocky 16.6.2 → 16.6.3 (clustertool) (#29200 )	2024-11-12 13:17:36 +01:00
TrueCharts Bot	7690243c5f	fix(deps): update module github.com/budimanjojo/talhelper/v3 v3.0.8 → v3.0.9 (clustertool) (#29191 )	2024-11-12 09:33:03 +01:00
TrueCharts Bot	3131e0d85b	chore(flux): update image traefik 29.4.0 → 29.5.0 (clustertool) (#29135 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [traefik](https://truecharts.org/charts/premium/traefik) ([source](https://redirect.github.com/traefik/traefik)) \| minor \| `29.4.0` -> `29.5.0` \| --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->	2024-11-11 17:31:18 +01:00
Kjeld Schouten	5f54ea6a0f	fix(clustertool): Prevent empty extraargs to be added to cmd	2024-11-11 14:18:14 +01:00
Kjeld Schouten	be53e747a8	fix(clustertool): correct issuer for default wildcard certificate	2024-11-10 11:20:20 +01:00
Kjeld Schouten	3ad4105734	fix(clustertool): (re-)enable extra args on plain cmd generator	2024-11-09 21:41:50 +01:00
Kjeld Schouten	d1bb074680	fix(clustertool): ensure kubeconfig is created with force true by default	2024-11-09 21:11:45 +01:00
Kjeld Schouten	55284f8567	fix(clustertool): When flux-bootstrap fails, ensure rename change is undone first	2024-11-09 21:04:48 +01:00
Kjeld Schouten	a62135cdd9	fix(clustertool): retry kubectl apply after error with 15s wait	2024-11-09 21:04:48 +01:00

1 2 3 4 5

235 Commits