DevOps/truecharts
2
0
Fork 0
Code Issues Pull Requests Actions 32 Packages Projects Releases 1 Wiki Activity
38,277 Commits 1 Branch 1 Tag
e1ce9e09449035f4a2ebfc45b036c1939bab6d12
Commit Graph

132 Commits

Author SHA1 Message Date
TrueCharts Bot c9ef877ddf chore(flux): update image app-template 3.5.1 → 3.6.0 (clustertool) (#30170) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| app-template | minor | `3.5.1` -> `3.6.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2024-12-27 21:17:28 +00:00
TrueCharts Bot 5b8761e2ae chore(deps): update ghcr.io/siderolabs/installer docker tag to v1.9.1 (clustertool) (#30168) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/siderolabs/installer](https://redirect.github.com/siderolabs/talos)
| minor | `v1.8.4` -> `v1.9.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/talos (ghcr.io/siderolabs/installer)</summary>

###
[`v1.9.1`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.1)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.9.0...v1.9.1)

#### [Talos
1.9.1](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.1)
(2024-12-26)

Welcome to the v1.9.1 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

##### Component Updates

-   Linux: 6.12.6
-   CNI plugins: 1.6.1

Talos is built with Go 1.23.4.

##### Contributors

-   Andrey Smirnov
-   Dmitry Sharshakov
-   Noel Georgi

##### Changes

<details><summary>15 commits</summary>
<p>

-
[@&#8203;`348472f`](https://redirect.github.com/siderolabs/talos/commit/348472f9e)
release(v1.9.1): prepare release
-
[@&#8203;`e702542`](https://redirect.github.com/siderolabs/talos/commit/e702542d1)
fix: ignore member not found error on leave cluster
-
[@&#8203;`2125206`](https://redirect.github.com/siderolabs/talos/commit/2125206f1)
test: use node informer instead of raw watch
-
[@&#8203;`73c25ee`](https://redirect.github.com/siderolabs/talos/commit/73c25ee8d)
fix: talosctl support and race tests
-
[@&#8203;`edd7844`](https://redirect.github.com/siderolabs/talos/commit/edd78441b)
fix: update go-blockdevice to v2.0.9
-
[@&#8203;`c1f975c`](https://redirect.github.com/siderolabs/talos/commit/c1f975c0b)
fix: use correct default search domain
-
[@&#8203;`ff91a75`](https://redirect.github.com/siderolabs/talos/commit/ff91a754f)
fix: reduce installer image
-
[@&#8203;`9cebe5e`](https://redirect.github.com/siderolabs/talos/commit/9cebe5e28)
fix: fix `Failed to initialize SELinux labeling handle` udev error
-
[@&#8203;`852cf5a`](https://redirect.github.com/siderolabs/talos/commit/852cf5ac7)
feat: bring Linux 6.12.6, CNI plugins 1.6.1
-
[@&#8203;`5f83c83`](https://redirect.github.com/siderolabs/talos/commit/5f83c83e1)
docs: document Kubernetes service registry incompat with K8s 1.32
-
[@&#8203;`3f87286`](https://redirect.github.com/siderolabs/talos/commit/3f872860f)
fix: dashboard crash on CPU data
-
[@&#8203;`f84ba2a`](https://redirect.github.com/siderolabs/talos/commit/f84ba2a9b)
docs: fix several typos
-
[@&#8203;`972044e`](https://redirect.github.com/siderolabs/talos/commit/972044e10)
chore: support gcr.io auth for cache and image gen
-
[@&#8203;`7908c93`](https://redirect.github.com/siderolabs/talos/commit/7908c9382)
fix: make talosctl time work with PTP time sync
-
[@&#8203;`48cb3a6`](https://redirect.github.com/siderolabs/talos/commit/48cb3a6e6)
fix: restore previous disk serial fetching

</p>
</details>

##### Changes from siderolabs/go-talos-support
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-talos-support@`0f784bd`](https://redirect.github.com/siderolabs/go-talos-support/commit/0f784bd)
fix: avoid deadlock on context cancel

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>3 commits</summary>
<p>

-
[siderolabs/pkgs@`45c4ba4`](https://redirect.github.com/siderolabs/pkgs/commit/45c4ba4)
fix: patch containerd with CNI deadlock fix
-
[siderolabs/pkgs@`13c5fc6`](https://redirect.github.com/siderolabs/pkgs/commit/13c5fc6)
feat: update Linux to 6.12.6
-
[siderolabs/pkgs@`6ed389e`](https://redirect.github.com/siderolabs/pkgs/commit/6ed389e)
feat: update Linux firmware to
[`2024121`](https://redirect.github.com/siderolabs/talos/commit/20241210)

</p>
</details>

##### Dependency Changes

-   **github.com/containernetworking/plugins**     v1.6.0 -> v1.6.1
-   **github.com/opencontainers/runc**             v1.2.2 -> v1.2.3
-   **github.com/siderolabs/go-blockdevice/v2**    v2.0.7 -> v2.0.9
-   **github.com/siderolabs/go-talos-support**     v0.1.1 -> v0.1.2
- **github.com/siderolabs/pkgs** v1.9.0-12-g9576b97 ->
v1.9.0-15-g45c4ba4
-   **github.com/siderolabs/talos/pkg/machinery**  v1.9.0 -> v1.9.1

Previous release can be found at
[v1.9.0](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.0)

#### Images

    ghcr.io/siderolabs/flannel:v0.26.1
    registry.k8s.io/coredns/coredns:v1.12.0
    gcr.io/etcd-development/etcd:v3.5.17
    registry.k8s.io/kube-apiserver:v1.32.0
    registry.k8s.io/kube-controller-manager:v1.32.0
    registry.k8s.io/kube-scheduler:v1.32.0
    registry.k8s.io/kube-proxy:v1.32.0
    ghcr.io/siderolabs/kubelet:v1.32.0
    ghcr.io/siderolabs/installer:v1.9.1
    registry.k8s.io/pause:3.10

###
[`v1.9.0`](https://redirect.github.com/siderolabs/talos/blob/HEAD/CHANGELOG.md#Changes-since-v190-alpha2)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.8.4...v1.9.0)

<details><summary>44 commits</summary>
<p>

-
[`af5d6b8c4`](https://redirect.github.com/siderolabs/talos/commit/af5d6b8c4166c7461f1774991e2896b11d503585)
fix: show SELinux labels on pseudo-fs
-
[`f46922fa9`](https://redirect.github.com/siderolabs/talos/commit/f46922fa9a815a2e9002c31dcc2793bf6dd93952)
chore: fix dockerfile warnings
-
[`a13f82c59`](https://redirect.github.com/siderolabs/talos/commit/a13f82c59456574238a75959ff395746c93f1cfa)
feat: udev: label device nodes
-
[`e899fb37f`](https://redirect.github.com/siderolabs/talos/commit/e899fb37fde7ec2b39d4b0fa77c7a6b1ac9d9f16)
feat: label created files in /etc
-
[`5f68c17ed`](https://redirect.github.com/siderolabs/talos/commit/5f68c17edab70451ec775e292222d9c634f4e863)
feat: implement image cache configuration
-
[`0ffb2187a`](https://redirect.github.com/siderolabs/talos/commit/0ffb2187a3e56744a6b67698882acf8281c147dd)
feat: registry proxy
-
[`77cf84fb5`](https://redirect.github.com/siderolabs/talos/commit/77cf84fb572213e59880a05edcc1b1b365987ac4)
feat: support generating iso with imagecache
-
[`5de6275b8`](https://redirect.github.com/siderolabs/talos/commit/5de6275b8f883f6c3e7a17c04b427c0ff8b9e3f5)
chore: image cache generator improvements
-
[`1a8cc5f8b`](https://redirect.github.com/siderolabs/talos/commit/1a8cc5f8b277faec7cf00a3acc8e91a31f99ce85)
feat: add SELinux labels to volumes
-
[`61b9129e0`](https://redirect.github.com/siderolabs/talos/commit/61b9129e0c29b2402235065f27888459e6054e7a)
fix: add directory entries and filemode to tarball
-
[`4caeae21e`](https://redirect.github.com/siderolabs/talos/commit/4caeae21e548039a6a03471d35405788515a8751)
refactor: optimize flags and SetLabel
-
[`6074a870a`](https://redirect.github.com/siderolabs/talos/commit/6074a870ad7c63775a39c84b72f79699976a4a1f)
feat: add e2fsprogs to talos rootfs
-
[`7ffcf5b93`](https://redirect.github.com/siderolabs/talos/commit/7ffcf5b932cc4064e5680efb20bf6fe6e7179cd4)
docs: update getting started
-
[`c4c1a0d7c`](https://redirect.github.com/siderolabs/talos/commit/c4c1a0d7c73d13e78bef935612cfdd593749a783)
fix: make vmware platform common code build on all arches
-
[`cc768037f`](https://redirect.github.com/siderolabs/talos/commit/cc768037f8d4bb022e98ddd4762f483ffd2a7a7f)
feat: implement block device wipe
-
[`6fb518ae5`](https://redirect.github.com/siderolabs/talos/commit/6fb518ae57a7cea0cf0959309167805c6f2582a5)
fix: don't activate LVM volumes in agent mode
-
[`0e3ed3072`](https://redirect.github.com/siderolabs/talos/commit/0e3ed307232eff54a42236489433eb8b6757cb6d)
fix: no longer leak `Close` reader
-
[`4dc58cfdf`](https://redirect.github.com/siderolabs/talos/commit/4dc58cfdf3ef99c67d6d1885216154d21294da74)
chore: small fixes
-
[`f400ae911`](https://redirect.github.com/siderolabs/talos/commit/f400ae911b49bd87b2c085ecc794ba44f0be0118)
fix: small fixes for image cache generation
-
[`93754b7de`](https://redirect.github.com/siderolabs/talos/commit/93754b7de6cec285e8e48d330be3c938dcd3e9c4)
fix: config and platform manifest generation
-
[`95b2fc946`](https://redirect.github.com/siderolabs/talos/commit/95b2fc946ec1d8166738d7bb2573e5d20d336afe)
feat: image cache gen
-
[`e4c6186c6`](https://redirect.github.com/siderolabs/talos/commit/e4c6186c63ea8faabf2feb82a997a7dbdd35d966)
chore: remove i915/amdgpu drivers
-
[`744ad12a6`](https://redirect.github.com/siderolabs/talos/commit/744ad12a6e59c57b88869c055d598244f25e2e38)
docs: update replicated-local-storage-with-openebs.md
-
[`fd713e451`](https://redirect.github.com/siderolabs/talos/commit/fd713e45140f08b69bf0c08a28ca734685cb7672)
feat: add permanent hardware addr to device selectors
-
[`d55a96e8c`](https://redirect.github.com/siderolabs/talos/commit/d55a96e8cbbc8d013b6258da304d5c63590e2679)
refactor: remove SELinux client_u and client_r
-
[`3a5b55fd2`](https://redirect.github.com/siderolabs/talos/commit/3a5b55fd2215f1b3b88868766f4220fcd1bdf1b5)
fix: allow CEL expressions config merge
-
[`f1b15f580`](https://redirect.github.com/siderolabs/talos/commit/f1b15f580eed5be808b6f657570540ae1906488a)
chore: remove replace for safchain/ethtool
-
[`f9697a9a0`](https://redirect.github.com/siderolabs/talos/commit/f9697a9a07316226e13aa0d9a659f67fedaf7f47)
fix: register controlplane node with NoSchedule taint
-
[`30f8b5a9f`](https://redirect.github.com/siderolabs/talos/commit/30f8b5a9f76441d933341b91d753ae141a9f4d10)
fix: registry mirror fallback handling
-
[`0f41e7743`](https://redirect.github.com/siderolabs/talos/commit/0f41e77434d6080270a3a18a8af0387791e8f282)
feat: allow for onlink directive (nocloud)
-
[`e26d0043e`](https://redirect.github.com/siderolabs/talos/commit/e26d0043e022eccf5ea9c9d9b4a57e4bff1f80cc)
chore: code cleanup
-
[`43fe3807a`](https://redirect.github.com/siderolabs/talos/commit/43fe3807a807a58ecf264f1628c5919f86d369b4)
feat: implement tracking of blockdevice secondaries
-
[`8a7476c3a`](https://redirect.github.com/siderolabs/talos/commit/8a7476c3ae1fdf5d4314d8915da72bc2cce19e38)
fix: install on non-empty disk
-
[`8b4253d18`](https://redirect.github.com/siderolabs/talos/commit/8b4253d18544318e55f4886782a41b0e74155101)
feat: update etcd to v3.5.17
-
[`5a0fd5b88`](https://redirect.github.com/siderolabs/talos/commit/5a0fd5b8829657f487db594d90c5b31841c78a66)
refactor: move early initialization functions to pre-initialize phase
-
[`9916e2cd8`](https://redirect.github.com/siderolabs/talos/commit/9916e2cd8a32706a32572f408dc313bbfa159539)
chore: update pkgs/tools/extras for Go 1.23.3
-
[`20bbf0235`](https://redirect.github.com/siderolabs/talos/commit/20bbf02355c1ab12084ba36b3d1bea151029c2d6)
docs: update vultr documentation
-
[`aea98940b`](https://redirect.github.com/siderolabs/talos/commit/aea98940b7047c9e7f343efbbb8315c1bc6226d2)
fix: arch linux search paths and names for QEMU provisioner
-
[`682718d4c`](https://redirect.github.com/siderolabs/talos/commit/682718d4c99ff0bbae7be8b82eb6548e9b939f41)
fix: use imager incoming version for extension validation
-
[`9a02ecc49`](https://redirect.github.com/siderolabs/talos/commit/9a02ecc49fa801d7282bba4733698b8d7d6c221e)
feat: rewrite install disk selector to use CEL expressions
-
[`eba35f441`](https://redirect.github.com/siderolabs/talos/commit/eba35f4413c732d351d82d5b646fc3053e6239e3)
docs: add note about PSP in Rook-Ceph guide
-
[`38b80fb1d`](https://redirect.github.com/siderolabs/talos/commit/38b80fb1dab586a9f14473d03415b793c2dfcda0)
docs: add missing `--talosconfig` parameter to end of Hetzner guide
-
[`a07f66c91`](https://redirect.github.com/siderolabs/talos/commit/a07f66c9187b7a99211d3f9af286844511d66954)
docs: gcp: fix controlplane nodes tags
-
[`4fe6dc8a0`](https://redirect.github.com/siderolabs/talos/commit/4fe6dc8a0a86e0096797b3ce433a627fb973c962)
chore: clean dns code

</p>
</details>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2024-12-27 21:16:31 +00:00
TrueCharts Bot 089d4f57cd chore(deps): update ghcr.io/siderolabs/kubelet docker tag to v1.32.0 (clustertool) (#30169) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/siderolabs/kubelet](https://redirect.github.com/siderolabs/kubelet)
| minor | `v1.31.4` -> `v1.32.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/kubelet (ghcr.io/siderolabs/kubelet)</summary>

###
[`v1.32.0`](https://redirect.github.com/siderolabs/kubelet/compare/v1.31.4...v1.32.0)

[Compare
Source](https://redirect.github.com/siderolabs/kubelet/compare/v1.31.4...v1.32.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2024-12-27 21:14:06 +00:00
TrueCharts Bot c109a6e7c9 chore(flux): update image kyverno 3.3.3 → 3.3.4 (clustertool) (#30068) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [kyverno](https://redirect.github.com/kyverno/kyverno) | patch |
`3.3.3` -> `3.3.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-27 12:21:16 +01:00
TrueCharts Bot 8cbc7e1bb3 chore(flux): update helm release cilium 1.16.4 → 1.16.5 (clustertool) (#30065) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/)
([source](https://redirect.github.com/cilium/cilium)) | patch | `1.16.4`
-> `1.16.5` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>cilium/cilium (cilium)</summary>

###
[`v1.16.5`](https://redirect.github.com/cilium/cilium/releases/tag/v1.16.5):
1.16.5

[Compare
Source](https://redirect.github.com/cilium/cilium/compare/1.16.4...1.16.5)

## Summary of Changes

**Minor Changes:**

- hubble: Stop building 32-bit binaries (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35974](https://redirect.github.com/cilium/cilium/issues/35974),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))

**Bugfixes:**

- Address potential connectivity disruption when using either L7 / DNS
Network policies in combination with per-endpoint routes and
hostLegacyRouting, or L7 / DNS network policies in combination with
IPsec network encryption. (Backport PR
[#&#8203;36540](https://redirect.github.com/cilium/cilium/issues/36540),
Upstream PR
[#&#8203;36484](https://redirect.github.com/cilium/cilium/issues/36484),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- bgp: fix race in bgp stores (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35971](https://redirect.github.com/cilium/cilium/issues/35971),
[@&#8203;harsimran-pabla](https://redirect.github.com/harsimran-pabla))
- BGPv1: Fix race by reconciliation of services with
externalTrafficPolicy=Local by populating locally available services
after performing service diff (Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36230](https://redirect.github.com/cilium/cilium/issues/36230),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- BGPv2: Fix race by reconciliation of services with
externalTrafficPolicy=Local by populating locally available services
after performing service diff (Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36165](https://redirect.github.com/cilium/cilium/issues/36165),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- Cilium agent now waits until endpoints have restored before starting
accepting new xDS streams. (Backport PR
[#&#8203;36049](https://redirect.github.com/cilium/cilium/issues/36049),
Upstream PR
[#&#8203;35984](https://redirect.github.com/cilium/cilium/issues/35984),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Cilium no longer keeps old DNS-IP mappings alive while reaping newer
ones, leading to spurious drops in connections to domains with many IPs
associated. (Backport PR
[#&#8203;36462](https://redirect.github.com/cilium/cilium/issues/36462),
Upstream PR
[#&#8203;36252](https://redirect.github.com/cilium/cilium/issues/36252),
[@&#8203;bimmlerd](https://redirect.github.com/bimmlerd))
- cilium-health-ep controller is made to be more robust against
successive failures. (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35936](https://redirect.github.com/cilium/cilium/issues/35936),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- DNS proxy port is no longer released when endpoint with a DNS policy
fails to regenerate successfully. A potential deadlock between CEC/CCEC
parser and endpoint policy update is removed. (Backport PR
[#&#8203;36468](https://redirect.github.com/cilium/cilium/issues/36468),
Upstream PR
[#&#8203;36142](https://redirect.github.com/cilium/cilium/issues/36142),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Envoy "initial fetch timeout" warnings are now demoted to info level,
as they are expected to happen during Cilium Agent restart. (Backport PR
[#&#8203;36049](https://redirect.github.com/cilium/cilium/issues/36049),
Upstream PR
[#&#8203;36060](https://redirect.github.com/cilium/cilium/issues/36060),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Fix an issue where pod-to-world traffic goes up stack when BPF host
routing is enabled with tunnel. (Backport PR
[#&#8203;35861](https://redirect.github.com/cilium/cilium/issues/35861),
Upstream PR
[#&#8203;35098](https://redirect.github.com/cilium/cilium/issues/35098),
[@&#8203;jschwinger233](https://redirect.github.com/jschwinger233))
- Fix identity leak for kvstore identity mode (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;34893](https://redirect.github.com/cilium/cilium/issues/34893),
[@&#8203;odinuge](https://redirect.github.com/odinuge))
- Fix potential Cilium agent panic during endpoint restoration,
occurring if the corresponding pod gets deleted while the agent is
restarting. This regression only affects Cilium v1.16.4. (Backport PR
[#&#8203;36302](https://redirect.github.com/cilium/cilium/issues/36302),
Upstream PR
[#&#8203;36292](https://redirect.github.com/cilium/cilium/issues/36292),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- gateway-api: Fix gateway checks for namespace (Backport PR
[#&#8203;36462](https://redirect.github.com/cilium/cilium/issues/36462),
Upstream PR
[#&#8203;35452](https://redirect.github.com/cilium/cilium/issues/35452),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- gha: Remove hostLegacyRouting in clustermesh (Backport PR
[#&#8203;36357](https://redirect.github.com/cilium/cilium/issues/36357),
Upstream PR
[#&#8203;35418](https://redirect.github.com/cilium/cilium/issues/35418),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- helm: Use an absolute FQDN for the Hubble peer-service endpoint to
avoid incorrect DNS resolution outside the cluster (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;36005](https://redirect.github.com/cilium/cilium/issues/36005),
[@&#8203;devodev](https://redirect.github.com/devodev))
- hubble: consistently use v as prefix for the Hubble version (Backport
PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;35891](https://redirect.github.com/cilium/cilium/issues/35891),
[@&#8203;rolinh](https://redirect.github.com/rolinh))
- iptables: Fix data race in iptables manager (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35902](https://redirect.github.com/cilium/cilium/issues/35902),
[@&#8203;pippolo84](https://redirect.github.com/pippolo84))
- lrp: update LRP services with stale backends on agent restart
(Backport PR
[#&#8203;36106](https://redirect.github.com/cilium/cilium/issues/36106),
Upstream PR
[#&#8203;36036](https://redirect.github.com/cilium/cilium/issues/36036),
[@&#8203;ysksuzuki](https://redirect.github.com/ysksuzuki))
- policy: Fix bug that allowed port ranges to be attached to L7
policies, which is not permitted.
([#&#8203;36050](https://redirect.github.com/cilium/cilium/issues/36050),
[@&#8203;nathanjsweet](https://redirect.github.com/nathanjsweet))
- Unbreak the cilium-dbg preflight migrate-identity command (Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36089](https://redirect.github.com/cilium/cilium/issues/36089),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Use `strconv.Itoa` instead of `string()` for the correct behavior when
converting `kafka.ErrorCode` from `int32` to `string`. Add relevant unit
tests for Kafka plugin and handler. (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35856](https://redirect.github.com/cilium/cilium/issues/35856),
[@&#8203;nddq](https://redirect.github.com/nddq))

**CI Changes:**

- \[v1.16] ci: modularize chart CI push workflow
([#&#8203;35958](https://redirect.github.com/cilium/cilium/issues/35958),
[@&#8203;ferozsalam](https://redirect.github.com/ferozsalam))
- gh: conformance-clustermesh: test with IPsec + BPF NodePort (Backport
PR
[#&#8203;36462](https://redirect.github.com/cilium/cilium/issues/36462),
Upstream PR
[#&#8203;36384](https://redirect.github.com/cilium/cilium/issues/36384),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- gha: configure environment in build-images-base/image-digests job
(Backport PR
[#&#8203;36462](https://redirect.github.com/cilium/cilium/issues/36462),
Upstream PR
[#&#8203;36318](https://redirect.github.com/cilium/cilium/issues/36318),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- node_local_store: prevent racey tests while using mock node store.
(Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35945](https://redirect.github.com/cilium/cilium/issues/35945),
[@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))
- Remove unnecessary hubble port-forward commands (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;33523](https://redirect.github.com/cilium/cilium/issues/33523),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))

**Misc Changes:**

- \[v1.16] docs: egress masquerade selector
([#&#8203;36333](https://redirect.github.com/cilium/cilium/issues/36333),
[@&#8203;viktor-kurchenko](https://redirect.github.com/viktor-kurchenko))
- \[v1.16] images: bump cni plugins to v1.6.0
([#&#8203;36092](https://redirect.github.com/cilium/cilium/issues/36092),
[@&#8203;ferozsalam](https://redirect.github.com/ferozsalam))
- bugtool: dump tail-call map for bpf_wireguard (Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36183](https://redirect.github.com/cilium/cilium/issues/36183),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- chore(deps): update all github action dependencies (v1.16)
([#&#8203;36155](https://redirect.github.com/cilium/cilium/issues/36155),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.16)
([#&#8203;36275](https://redirect.github.com/cilium/cilium/issues/36275),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.16)
([#&#8203;36443](https://redirect.github.com/cilium/cilium/issues/36443),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.16) (patch)
([#&#8203;36277](https://redirect.github.com/cilium/cilium/issues/36277),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.16)
([#&#8203;35546](https://redirect.github.com/cilium/cilium/issues/35546),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.16)
([#&#8203;36152](https://redirect.github.com/cilium/cilium/issues/36152),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.16)
([#&#8203;36279](https://redirect.github.com/cilium/cilium/issues/36279),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.16)
([#&#8203;36444](https://redirect.github.com/cilium/cilium/issues/36444),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update cilium/little-vm-helper action to v0.0.19 (v1.16)
([#&#8203;36153](https://redirect.github.com/cilium/cilium/issues/36153),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.22.9 docker digest to
[`147f428`](https://redirect.github.com/cilium/cilium/commit/147f428)
(v1.16)
([#&#8203;36222](https://redirect.github.com/cilium/cilium/issues/36222),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.22.10 (v1.16)
([#&#8203;36441](https://redirect.github.com/cilium/cilium/issues/36441),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to
v1.30.7-1732605705-2aa20ee3acb68cd38d57669af19508bea8f0ba62 (v1.16)
([#&#8203;36180](https://redirect.github.com/cilium/cilium/issues/36180),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to
v1.30.8-1733837904-eaae5aca0fb988583e5617170a65ac5aa51c0aa8 (v1.16)
([#&#8203;36495](https://redirect.github.com/cilium/cilium/issues/36495),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/lvh-images/kind docker tag to
bpf-20241129.013349 (v1.16)
([#&#8203;36278](https://redirect.github.com/cilium/cilium/issues/36278),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/lvh-images/kind docker tag to
bpf-20241206.013345 (v1.16)
([#&#8203;36442](https://redirect.github.com/cilium/cilium/issues/36442),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update stable lvh-images (v1.16) (patch)
([#&#8203;36154](https://redirect.github.com/cilium/cilium/issues/36154),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- docs: Add the tls:// prefix before the IP address (Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36118](https://redirect.github.com/cilium/cilium/issues/36118),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))
- docs: Fix typo in multi-pool section title (Backport PR
[#&#8203;36312](https://redirect.github.com/cilium/cilium/issues/36312),
Upstream PR
[#&#8203;36305](https://redirect.github.com/cilium/cilium/issues/36305),
[@&#8203;joestringer](https://redirect.github.com/joestringer))
- docs: In k0s guide, remove dashes to fix invalid Bash variable names.
(Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35923](https://redirect.github.com/cilium/cilium/issues/35923),
[@&#8203;yilas](https://redirect.github.com/yilas))
- docs: lrp: fix kernel version requirement for skipRedirectFromBackend
(Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35921](https://redirect.github.com/cilium/cilium/issues/35921),
[@&#8203;ysksuzuki](https://redirect.github.com/ysksuzuki))
- docs: system-requirements: require 5.4 kernel (Backport PR
[#&#8203;36462](https://redirect.github.com/cilium/cilium/issues/36462),
Upstream PR
[#&#8203;36386](https://redirect.github.com/cilium/cilium/issues/36386),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- docs: WireGuard doesn't require overlay port in Network Firewalls
(Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36208](https://redirect.github.com/cilium/cilium/issues/36208),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Endpoint populate new policymap early if empty (Backport PR
[#&#8203;36479](https://redirect.github.com/cilium/cilium/issues/36479),
Upstream PR
[#&#8203;36361](https://redirect.github.com/cilium/cilium/issues/36361),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- envoy: Configure internal_address_config to avoid warning log
(Backport PR
[#&#8203;36015](https://redirect.github.com/cilium/cilium/issues/36015),
Upstream PR
[#&#8203;35943](https://redirect.github.com/cilium/cilium/issues/35943),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- envoy: Pass tofqdns-proxy-response-max-delay to Envoy (Backport PR
[#&#8203;36468](https://redirect.github.com/cilium/cilium/issues/36468),
Upstream PR
[#&#8203;36330](https://redirect.github.com/cilium/cilium/issues/36330),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- fix(deps): update module golang.org/x/crypto to v0.31.0 \[security]
(v1.16)
([#&#8203;36530](https://redirect.github.com/cilium/cilium/issues/36530),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- Fixed BGP documentation (Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35953](https://redirect.github.com/cilium/cilium/issues/35953),
[@&#8203;seadog007](https://redirect.github.com/seadog007))
- images: Use cilium-builder image instead of golang to build hubble
(Backport PR
[#&#8203;36312](https://redirect.github.com/cilium/cilium/issues/36312),
Upstream PR
[#&#8203;35697](https://redirect.github.com/cilium/cilium/issues/35697),
[@&#8203;learnitall](https://redirect.github.com/learnitall))
- lrp: fix kernel version requirement in warning log (Backport PR
[#&#8203;36286](https://redirect.github.com/cilium/cilium/issues/36286),
Upstream PR
[#&#8203;36141](https://redirect.github.com/cilium/cilium/issues/36141),
[@&#8203;ysksuzuki](https://redirect.github.com/ysksuzuki))
- Makefile: fix swagger definition for automatic renovate updates
(Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35979](https://redirect.github.com/cilium/cilium/issues/35979),
[@&#8203;aanm](https://redirect.github.com/aanm))
- proxy: Take proxy port reference for new redirects immediately
(Backport PR
[#&#8203;36468](https://redirect.github.com/cilium/cilium/issues/36468),
Upstream PR
[#&#8203;36435](https://redirect.github.com/cilium/cilium/issues/36435),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- proxyports: Resolve data races in test (Backport PR
[#&#8203;36468](https://redirect.github.com/cilium/cilium/issues/36468),
Upstream PR
[#&#8203;36399](https://redirect.github.com/cilium/cilium/issues/36399),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- proxyports: Sleep a bit longer in tests (Backport PR
[#&#8203;36468](https://redirect.github.com/cilium/cilium/issues/36468),
Upstream PR
[#&#8203;36389](https://redirect.github.com/cilium/cilium/issues/36389),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Remove duplicated watch on services and endpoint in the cilium-agent
(Backport PR
[#&#8203;36066](https://redirect.github.com/cilium/cilium/issues/36066),
Upstream PR
[#&#8203;35838](https://redirect.github.com/cilium/cilium/issues/35838),
[@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))
- Rework error handling logic in neighbor discovery (Backport PR
[#&#8203;36093](https://redirect.github.com/cilium/cilium/issues/36093),
Upstream PR
[#&#8203;35144](https://redirect.github.com/cilium/cilium/issues/35144),
[@&#8203;pippolo84](https://redirect.github.com/pippolo84))
- Silence spurious clustermesh-related warnings (Backport PR
[#&#8203;36225](https://redirect.github.com/cilium/cilium/issues/36225),
Upstream PR
[#&#8203;35867](https://redirect.github.com/cilium/cilium/issues/35867),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Update documentation for egress masquerading behavior (Backport PR
[#&#8203;36462](https://redirect.github.com/cilium/cilium/issues/36462),
Upstream PR
[#&#8203;36267](https://redirect.github.com/cilium/cilium/issues/36267),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))

**Other Changes:**

- \[1.16] ci/ipsec-upgrade: increase cilium status wait duration
([#&#8203;36082](https://redirect.github.com/cilium/cilium/issues/36082),
[@&#8203;harsimran-pabla](https://redirect.github.com/harsimran-pabla))
- \[v1.16] cilium, service: Fix checkLBSrcRange propagation to LB map
([#&#8203;36511](https://redirect.github.com/cilium/cilium/issues/36511),
[@&#8203;borkmann](https://redirect.github.com/borkmann))
- install: Update image digests for v1.16.4
([#&#8203;36047](https://redirect.github.com/cilium/cilium/issues/36047),
[@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\[bot])
- jrajahalme/v1.16 cilium cli
([#&#8203;36541](https://redirect.github.com/cilium/cilium/issues/36541),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Revert "workflows/ipsec: Cover Ingress"
([#&#8203;36116](https://redirect.github.com/cilium/cilium/issues/36116),
[@&#8203;harsimran-pabla](https://redirect.github.com/harsimran-pabla))

#### Docker Manifests

##### cilium


`quay.io/cilium/cilium:v1.16.5@&#8203;sha256:758ca0793f5995bb938a2fa219dcce63dc0b3fa7fc4ce5cc851125281fb7361d`

`quay.io/cilium/cilium:stable@sha256:758ca0793f5995bb938a2fa219dcce63dc0b3fa7fc4ce5cc851125281fb7361d`

##### clustermesh-apiserver


`quay.io/cilium/clustermesh-apiserver:v1.16.5@&#8203;sha256:37a7fdbef806b78ef63df9f1a9828fdddbf548d1f0e43b8eb10a6bdc8fa03958`

`quay.io/cilium/clustermesh-apiserver:stable@sha256:37a7fdbef806b78ef63df9f1a9828fdddbf548d1f0e43b8eb10a6bdc8fa03958`

##### docker-plugin


`quay.io/cilium/docker-plugin:v1.16.5@&#8203;sha256:d6b4ed076ae921535c2a543d4b5b63af474288ee4501653a1f442c935beb5768`

`quay.io/cilium/docker-plugin:stable@sha256:d6b4ed076ae921535c2a543d4b5b63af474288ee4501653a1f442c935beb5768`

##### hubble-relay


`quay.io/cilium/hubble-relay:v1.16.5@&#8203;sha256:6cfae1d1afa566ba941f03d4d7e141feddd05260e5cd0a1509aba1890a45ef00`

`quay.io/cilium/hubble-relay:stable@sha256:6cfae1d1afa566ba941f03d4d7e141feddd05260e5cd0a1509aba1890a45ef00`

##### operator-alibabacloud


`quay.io/cilium/operator-alibabacloud:v1.16.5@&#8203;sha256:c0edf4c8d089e76d6565d3c57128b98bc6c73d14bb4590126ee746aeaedba5e0`

`quay.io/cilium/operator-alibabacloud:stable@sha256:c0edf4c8d089e76d6565d3c57128b98bc6c73d14bb4590126ee746aeaedba5e0`

##### operator-aws


`quay.io/cilium/operator-aws:v1.16.5@&#8203;sha256:97e1fe0c2b522583033138eb10c170919d8de49d2788ceefdcff229a92210476`

`quay.io/cilium/operator-aws:stable@sha256:97e1fe0c2b522583033138eb10c170919d8de49d2788ceefdcff229a92210476`

##### operator-azure


`quay.io/cilium/operator-azure:v1.16.5@&#8203;sha256:265e2b78f572c76b523f91757083ea5f0b9b73b82f2d9714e5a8fb848e4048f9`

`quay.io/cilium/operator-azure:stable@sha256:265e2b78f572c76b523f91757083ea5f0b9b73b82f2d9714e5a8fb848e4048f9`

##### operator-generic


`quay.io/cilium/operator-generic:v1.16.5@&#8203;sha256:f7884848483bbcd7b1e0ccfd34ba4546f258b460cb4b7e2f06a1bcc96ef88039`

`quay.io/cilium/operator-generic:stable@sha256:f7884848483bbcd7b1e0ccfd34ba4546f258b460cb4b7e2f06a1bcc96ef88039`

##### operator


`quay.io/cilium/operator:v1.16.5@&#8203;sha256:617896e1b23a2c4504ab2c84f17964e24dade3b5845f733b11847202230ca940`

`quay.io/cilium/operator:stable@sha256:617896e1b23a2c4504ab2c84f17964e24dade3b5845f733b11847202230ca940`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-27 12:20:43 +01:00
TrueCharts Bot 753bda6b9a chore(flux): update helm release metallb 0.14.8 → 0.14.9 (clustertool) (#30066) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [metallb](https://metallb.universe.tf)
([source](https://redirect.github.com/metallb/metallb)) | patch |
`0.14.8` -> `0.14.9` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>metallb/metallb (metallb)</summary>

###
[`v0.14.9`](https://redirect.github.com/metallb/metallb/releases/tag/v0.14.9)

[Compare
Source](https://redirect.github.com/metallb/metallb/compare/v0.14.8...v0.14.9)

See the release notes for the details

https://metallb.universe.tf/release-notes/#version-0-14-9

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Mi45IiwidXBkYXRlZEluVmVyIjoiMzkuODIuOSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2024-12-27 12:20:09 +01:00
TrueCharts Bot b92ab98394 chore(deps): update ghcr.io/siderolabs/installer docker tag to v1.8.4 (clustertool) (#30063) 2024-12-27 12:17:47 +01:00
TrueCharts Bot 7b13dc055f chore(deps): update ghcr.io/siderolabs/kubelet docker tag to v1.31.4 (clustertool) (#30064) 2024-12-27 12:17:01 +01:00
alfi0812 ea7a259e79 Update Dockerfile (#29793) 
Remove krew install. As it does not work in the docker file

**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
Co-authored-by: Kjeld Schouten <info@kjeldschouten.nl>
 2024-11-27 13:57:55 +00:00
alfi0812 afa869fdb6 Update devcontainer ENV and settings (#29791) 
**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>
 2024-11-26 15:36:34 +01:00
alfi0812 db62c9469a Update devcontainer.json (#29703) 
**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
Co-authored-by: Kjeld Schouten <info@kjeldschouten.nl>
 2024-11-24 15:01:21 +01:00
TrueCharts Bot a6408d4025 chore(flux): update image traefik 30.0.3 → 30.0.4 (clustertool) (#29731) 2024-11-23 02:53:11 +01:00
TrueCharts Bot 359e6adbfb chore(deps): update ghcr.io/siderolabs/kubelet docker tag to v1.31.3 (clustertool) (#29677) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/siderolabs/kubelet](https://redirect.github.com/siderolabs/kubelet)
| patch | `v1.31.2` -> `v1.31.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/kubelet (ghcr.io/siderolabs/kubelet)</summary>

###
[`v1.31.3`](https://redirect.github.com/siderolabs/kubelet/compare/v1.31.2...v1.31.3)

[Compare
Source](https://redirect.github.com/siderolabs/kubelet/compare/v1.31.2...v1.31.3)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-22 02:45:57 +01:00
TrueCharts Bot fe3e7e366b chore(flux): update helm release cilium 1.16.3 → 1.16.4 (clustertool) (#29638) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/)
([source](https://redirect.github.com/cilium/cilium)) | patch | `1.16.3`
-> `1.16.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>cilium/cilium (cilium)</summary>

###
[`v1.16.4`](https://redirect.github.com/cilium/cilium/releases/tag/v1.16.4):
1.16.4

[Compare
Source](https://redirect.github.com/cilium/cilium/compare/1.16.3...1.16.4)

## Summary of Changes

**Minor Changes:**

- Added Helm option 'envoy.initialFetchTimeoutSeconds' (default 30
seconds) to override the Envoy default (15 seconds). (Backport PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35809](https://redirect.github.com/cilium/cilium/issues/35809),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- clustermesh: add guardrails for known broken ENI/aws-chaining +
cluster ID combination (Backport PR
[#&#8203;35543](https://redirect.github.com/cilium/cilium/issues/35543),
Upstream PR
[#&#8203;35349](https://redirect.github.com/cilium/cilium/issues/35349),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- helm: Lower default `hubble.tls.auto.certValidityDuration` to 365 days
(Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35630](https://redirect.github.com/cilium/cilium/issues/35630),
[@&#8203;chancez](https://redirect.github.com/chancez))
- helm: New socketLB.tracing flag (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35747](https://redirect.github.com/cilium/cilium/issues/35747),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- hubble-relay: Return underlying connection errors when connecting to
peer manager (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35632](https://redirect.github.com/cilium/cilium/issues/35632),
[@&#8203;chancez](https://redirect.github.com/chancez))
- netkit: Fix issue where traffic originating from the host namespace
fails to reach the pod when using endpoint routes and network policies.
(Backport PR
[#&#8203;35543](https://redirect.github.com/cilium/cilium/issues/35543),
Upstream PR
[#&#8203;35306](https://redirect.github.com/cilium/cilium/issues/35306),
[@&#8203;jrife](https://redirect.github.com/jrife))

**Bugfixes:**

- Avoid duplicate errors in health status for node-neighbor-link-updater
(Backport PR
[#&#8203;35468](https://redirect.github.com/cilium/cilium/issues/35468),
Upstream PR
[#&#8203;35179](https://redirect.github.com/cilium/cilium/issues/35179),
[@&#8203;wedaly](https://redirect.github.com/wedaly))
- bgpv1: fix reconciliation of services with shared VIPs (Backport PR
[#&#8203;35468](https://redirect.github.com/cilium/cilium/issues/35468),
Upstream PR
[#&#8203;35333](https://redirect.github.com/cilium/cilium/issues/35333),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- bgpv2,operator: Fix the race condition in the nodeSelector conflict
detection logic (Backport PR
[#&#8203;35863](https://redirect.github.com/cilium/cilium/issues/35863),
Upstream PR
[#&#8203;35690](https://redirect.github.com/cilium/cilium/issues/35690),
[@&#8203;YutaroHayakawa](https://redirect.github.com/YutaroHayakawa))
- bgpv2: set local peering address when specified (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35552](https://redirect.github.com/cilium/cilium/issues/35552),
[@&#8203;harsimran-pabla](https://redirect.github.com/harsimran-pabla))
- Cilium datapath now gives precedence for the more specific allow rule
with L7 rules when rules with port ranges are present. (Backport PR
[#&#8203;35603](https://redirect.github.com/cilium/cilium/issues/35603),
Upstream PR
[#&#8203;35150](https://redirect.github.com/cilium/cilium/issues/35150),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Cilium's DNS proxy no longer gets stuck for a specific five-tuple if
an `timeout waiting for response` error is encountered. (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35589](https://redirect.github.com/cilium/cilium/issues/35589),
[@&#8203;bimmlerd](https://redirect.github.com/bimmlerd))
- config: Remove superfluous warning on native routing CIDR (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35738](https://redirect.github.com/cilium/cilium/issues/35738),
[@&#8203;gandro](https://redirect.github.com/gandro))
- Fix missing flowlabel hash on SRv6 traffic. (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35498](https://redirect.github.com/cilium/cilium/issues/35498),
[@&#8203;akaliwod](https://redirect.github.com/akaliwod))
- Fix packet drops for pod-to-pod connections that pass through ingress
& egress proxy when using IPsec, caused by MTU misconfiguration.
(Backport PR
[#&#8203;35543](https://redirect.github.com/cilium/cilium/issues/35543),
Upstream PR
[#&#8203;35173](https://redirect.github.com/cilium/cilium/issues/35173),
[@&#8203;smagnani96](https://redirect.github.com/smagnani96))
- Fix possible disruption of long running pod to node traffic on agent
restart in kvstore mode (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35673](https://redirect.github.com/cilium/cilium/issues/35673),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Fix redirect from L3 device to remote endpoint via overlay network.
(Backport PR
[#&#8203;35468](https://redirect.github.com/cilium/cilium/issues/35468),
Upstream PR
[#&#8203;35165](https://redirect.github.com/cilium/cilium/issues/35165),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Fixed a bug where replies for pod-originating connections came into
scope of HostFW Ingress Network policy. Applicable to configurations
that use iptables for Masquerading. (Backport PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35694](https://redirect.github.com/cilium/cilium/issues/35694),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Fixes a bug where the operator incorrectly flagged
CiliumNetworkPolicies containing ICMP rules as invalid. (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35599](https://redirect.github.com/cilium/cilium/issues/35599),
[@&#8203;squeed](https://redirect.github.com/squeed))
- Fixes a performance regression when ingesting network policies in
clusters with large numbers of Services. (Backport PR
[#&#8203;35543](https://redirect.github.com/cilium/cilium/issues/35543),
Upstream PR
[#&#8203;35293](https://redirect.github.com/cilium/cilium/issues/35293),
[@&#8203;squeed](https://redirect.github.com/squeed))
- Fixes a potential deadlock when restarting cilium agent with pods with
DNS interception configured (Backport PR
[#&#8203;35906](https://redirect.github.com/cilium/cilium/issues/35906),
Upstream PR
[#&#8203;35890](https://redirect.github.com/cilium/cilium/issues/35890),
[@&#8203;squeed](https://redirect.github.com/squeed))
- Fixes BPF Masquerading exclusion CIDR for IPAM modes "eni", "azure"
and "alibabacloud".
([#&#8203;35611](https://redirect.github.com/cilium/cilium/issues/35611),
[@&#8203;pippolo84](https://redirect.github.com/pippolo84))
- helm: Fix configmap unmarshal error on egressGateway.maxPolicyEntries
(Backport PR
[#&#8203;35319](https://redirect.github.com/cilium/cilium/issues/35319),
Upstream PR
[#&#8203;35301](https://redirect.github.com/cilium/cilium/issues/35301),
[@&#8203;hox](https://redirect.github.com/hox))
- helm: fix duplicate configmap key for
`bpf-lb-sock-terminate-pod-connections` (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35703](https://redirect.github.com/cilium/cilium/issues/35703),
[@&#8203;solidDoWant](https://redirect.github.com/solidDoWant))
- helm: set automountServiceAccountToken to false for hubble-relay sa
(Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35674](https://redirect.github.com/cilium/cilium/issues/35674),
[@&#8203;ayuspin](https://redirect.github.com/ayuspin))
- hubble: fix endpoint cluster name (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35415](https://redirect.github.com/cilium/cilium/issues/35415),
[@&#8203;kaworu](https://redirect.github.com/kaworu))
- hubble: Lock exporters while gathering metrics (Backport PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35860](https://redirect.github.com/cilium/cilium/issues/35860),
[@&#8203;joestringer](https://redirect.github.com/joestringer))
- Ingress endpoint is now included in the lxcmap so that ARP and ND6
work for them. (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35143](https://redirect.github.com/cilium/cilium/issues/35143),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- ipam: Validate CiliumNode resource in ENI mode (Backport PR
[#&#8203;35792](https://redirect.github.com/cilium/cilium/issues/35792),
Upstream PR
[#&#8203;35784](https://redirect.github.com/cilium/cilium/issues/35784),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- l7lb: fix registration of flag loadbalancer-l7 (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35623](https://redirect.github.com/cilium/cilium/issues/35623),
[@&#8203;mhofstetter](https://redirect.github.com/mhofstetter))
- Log errors when reloading hubble exporter configuration dynamically
and do not attempt to close os.Stdout (Backport PR
[#&#8203;35319](https://redirect.github.com/cilium/cilium/issues/35319),
Upstream PR
[#&#8203;35069](https://redirect.github.com/cilium/cilium/issues/35069),
[@&#8203;chancez](https://redirect.github.com/chancez))
- option: Reduce log level for WG strict mode + IPv6 (Backport PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35763](https://redirect.github.com/cilium/cilium/issues/35763),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- Policy properly propagates proxy listener name and priority from a L3
wildcard rule with policies requiring authentication. (Backport PR
[#&#8203;35468](https://redirect.github.com/cilium/cilium/issues/35468),
Upstream PR
[#&#8203;35381](https://redirect.github.com/cilium/cilium/issues/35381),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- treewide: Add wrapper for `netlink` functions that may fail with
`ErrDumpInterrupted` (Backport PR
[#&#8203;35654](https://redirect.github.com/cilium/cilium/issues/35654),
Upstream PR
[#&#8203;35614](https://redirect.github.com/cilium/cilium/issues/35614),
[@&#8203;gandro](https://redirect.github.com/gandro))
- wireguard: Fix connectivity issues following node reboots. (Backport
PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35750](https://redirect.github.com/cilium/cilium/issues/35750),
[@&#8203;jrife](https://redirect.github.com/jrife))

**CI Changes:**

- .github/conformance-ginkgo: replace deprecated jq flag (Backport PR
[#&#8203;35468](https://redirect.github.com/cilium/cilium/issues/35468),
Upstream PR
[#&#8203;35399](https://redirect.github.com/cilium/cilium/issues/35399),
[@&#8203;aanm](https://redirect.github.com/aanm))
- .github: extend timeout for tests-ipsec-upgrade workflow (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35657](https://redirect.github.com/cilium/cilium/issues/35657),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- .github: remove libncurses5 from integration tests (Backport PR
[#&#8203;35468](https://redirect.github.com/cilium/cilium/issues/35468),
Upstream PR
[#&#8203;35408](https://redirect.github.com/cilium/cilium/issues/35408),
[@&#8203;aanm](https://redirect.github.com/aanm))
- \[v1.16] gh: e2e-upgrade: restart LRP backend pod after upgrade
([#&#8203;35329](https://redirect.github.com/cilium/cilium/issues/35329),
[@&#8203;ysksuzuki](https://redirect.github.com/ysksuzuki))
- \[v1.16] github: update rhel8 LVH image to rhel8.6
([#&#8203;35733](https://redirect.github.com/cilium/cilium/issues/35733),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Additionally test KVStore mode in E2E/IPSec workflows (Backport PR
[#&#8203;35905](https://redirect.github.com/cilium/cilium/issues/35905),
Upstream PR
[#&#8203;35679](https://redirect.github.com/cilium/cilium/issues/35679),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- ci: conformance-kind: re-enable flaky Aggregator test (Backport PR
[#&#8203;35582](https://redirect.github.com/cilium/cilium/issues/35582),
Upstream PR
[#&#8203;35286](https://redirect.github.com/cilium/cilium/issues/35286),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- ci: datapath-verifier: bump lvh images (Backport PR
[#&#8203;35648](https://redirect.github.com/cilium/cilium/issues/35648),
Upstream PR
[#&#8203;35456](https://redirect.github.com/cilium/cilium/issues/35456),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- gha: Update chmod command (Backport PR
[#&#8203;35468](https://redirect.github.com/cilium/cilium/issues/35468),
Upstream PR
[#&#8203;35400](https://redirect.github.com/cilium/cilium/issues/35400),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- github: Pass the workflow step timeout to go test (Backport PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35814](https://redirect.github.com/cilium/cilium/issues/35814),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Refactor and set a default for GH_RUNNER_EXTRA_POWER (Backport PR
[#&#8203;35319](https://redirect.github.com/cilium/cilium/issues/35319),
Upstream PR
[#&#8203;35267](https://redirect.github.com/cilium/cilium/issues/35267),
[@&#8203;aanm](https://redirect.github.com/aanm))
- workflows/gateway-api: Cover IPsec with GatewayAPI (Backport PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35584](https://redirect.github.com/cilium/cilium/issues/35584),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- workflows/ingress: Run basic checks (Backport PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35683](https://redirect.github.com/cilium/cilium/issues/35683),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- workflows/ipsec: Cover Ingress (Backport PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35476](https://redirect.github.com/cilium/cilium/issues/35476),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- workflows: Extend IPsec tests to cover egress gateway (Backport PR
[#&#8203;35540](https://redirect.github.com/cilium/cilium/issues/35540),
Upstream PR
[#&#8203;35323](https://redirect.github.com/cilium/cilium/issues/35323),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))

**Misc Changes:**

- .github/build-images-base: checkout base branch to get scripts
(Backport PR
[#&#8203;35319](https://redirect.github.com/cilium/cilium/issues/35319),
Upstream PR
[#&#8203;35236](https://redirect.github.com/cilium/cilium/issues/35236),
[@&#8203;aanm](https://redirect.github.com/aanm))
- .github: remove retention days for image digests (Backport PR
[#&#8203;35468](https://redirect.github.com/cilium/cilium/issues/35468),
Upstream PR
[#&#8203;35457](https://redirect.github.com/cilium/cilium/issues/35457),
[@&#8203;aanm](https://redirect.github.com/aanm))
- bpf: vxlan helper improvements (Backport PR
[#&#8203;35543](https://redirect.github.com/cilium/cilium/issues/35543),
Upstream PR
[#&#8203;34755](https://redirect.github.com/cilium/cilium/issues/34755),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- chore(deps): update all github action dependencies (v1.16)
([#&#8203;35382](https://redirect.github.com/cilium/cilium/issues/35382),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.16)
([#&#8203;35439](https://redirect.github.com/cilium/cilium/issues/35439),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.16)
([#&#8203;35573](https://redirect.github.com/cilium/cilium/issues/35573),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.16)
([#&#8203;35710](https://redirect.github.com/cilium/cilium/issues/35710),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.16)
([#&#8203;35438](https://redirect.github.com/cilium/cilium/issues/35438),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.22.8 docker digest to
[`0ca97f4`](https://redirect.github.com/cilium/cilium/commit/0ca97f4)
(v1.16)
([#&#8203;35730](https://redirect.github.com/cilium/cilium/issues/35730),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.22.8 docker digest to
[`b274ff1`](https://redirect.github.com/cilium/cilium/commit/b274ff1)
(v1.16)
([#&#8203;35379](https://redirect.github.com/cilium/cilium/issues/35379),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.22.9 (v1.16)
([#&#8203;35854](https://redirect.github.com/cilium/cilium/issues/35854),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to
v1.29.9-1729635771-fa4efeff33a344a45e14a4068c61dc438b3d2270 (v1.16)
([#&#8203;35491](https://redirect.github.com/cilium/cilium/issues/35491),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update stable lvh-images (v1.16) (patch)
([#&#8203;35731](https://redirect.github.com/cilium/cilium/issues/35731),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- cilium, docs: Extend requirements for L7 proxy (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35669](https://redirect.github.com/cilium/cilium/issues/35669),
[@&#8203;borkmann](https://redirect.github.com/borkmann))
- cilium: add probe for netkit for more user friendly error when not
supported (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35551](https://redirect.github.com/cilium/cilium/issues/35551),
[@&#8203;borkmann](https://redirect.github.com/borkmann))
- ctrl-runtime: lower severity of retryable reconcile errors (Backport
PR
[#&#8203;35592](https://redirect.github.com/cilium/cilium/issues/35592),
Upstream PR
[#&#8203;35364](https://redirect.github.com/cilium/cilium/issues/35364),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- daemon: Reduce level of socket LB tracing warning (Backport PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35798](https://redirect.github.com/cilium/cilium/issues/35798),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- datapath: move policy map value prefix length to flags (Backport PR
[#&#8203;35603](https://redirect.github.com/cilium/cilium/issues/35603),
Upstream PR
[#&#8203;35534](https://redirect.github.com/cilium/cilium/issues/35534),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- dnsproxy: fix error when sessionUDPFactory fails (Backport PR
[#&#8203;35543](https://redirect.github.com/cilium/cilium/issues/35543),
Upstream PR
[#&#8203;33998](https://redirect.github.com/cilium/cilium/issues/33998),
[@&#8203;marseel](https://redirect.github.com/marseel))
- docs/ipsec: Remove KPR limitation (Backport PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35743](https://redirect.github.com/cilium/cilium/issues/35743),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- docs/xfrm: Fix incorrect statement regarding XFRM IN policies
(Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35626](https://redirect.github.com/cilium/cilium/issues/35626),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- docs: Change invalid Helm option --agent.enabled with --agent=false in
upgrade documentation (Backport PR
[#&#8203;35319](https://redirect.github.com/cilium/cilium/issues/35319),
Upstream PR
[#&#8203;35288](https://redirect.github.com/cilium/cilium/issues/35288),
[@&#8203;oneumyvakin](https://redirect.github.com/oneumyvakin))
- docs: clean up stale kernel requirements (Backport PR
[#&#8203;35582](https://redirect.github.com/cilium/cilium/issues/35582),
Upstream PR
[#&#8203;35575](https://redirect.github.com/cilium/cilium/issues/35575),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- docs: Fix incorrect link to RFC 4271 for BGP control plane timers.
(Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35725](https://redirect.github.com/cilium/cilium/issues/35725),
[@&#8203;nvibert](https://redirect.github.com/nvibert))
- docs: kpr: update error message regarding SocketLB tracing (Backport
PR
[#&#8203;35468](https://redirect.github.com/cilium/cilium/issues/35468),
Upstream PR
[#&#8203;35337](https://redirect.github.com/cilium/cilium/issues/35337),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- docs: tuning: XDP LB also supports tunnel routing (Backport PR
[#&#8203;35582](https://redirect.github.com/cilium/cilium/issues/35582),
Upstream PR
[#&#8203;35574](https://redirect.github.com/cilium/cilium/issues/35574),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- docs: update 1.16 upgrade note for LRP
([#&#8203;35944](https://redirect.github.com/cilium/cilium/issues/35944),
[@&#8203;ysksuzuki](https://redirect.github.com/ysksuzuki))
- docs: update default identity label filters (Backport PR
[#&#8203;35468](https://redirect.github.com/cilium/cilium/issues/35468),
Upstream PR
[#&#8203;35422](https://redirect.github.com/cilium/cilium/issues/35422),
[@&#8203;marseel](https://redirect.github.com/marseel))
- docs: XFRM reference guide for IPsec development (Backport PR
[#&#8203;35582](https://redirect.github.com/cilium/cilium/issues/35582),
Upstream PR
[#&#8203;35322](https://redirect.github.com/cilium/cilium/issues/35322),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- Envoy simplify listener setup (Backport PR
[#&#8203;35764](https://redirect.github.com/cilium/cilium/issues/35764),
Upstream PR
[#&#8203;35642](https://redirect.github.com/cilium/cilium/issues/35642),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- envoy: Configure internal_address_config to avoid warning log
(Backport PR
[#&#8203;35471](https://redirect.github.com/cilium/cilium/issues/35471),
Upstream PR
[#&#8203;35090](https://redirect.github.com/cilium/cilium/issues/35090),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- envoy: Limit started serving logging to the typeURL of the stream
(Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35736](https://redirect.github.com/cilium/cilium/issues/35736),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Fix wrongly spelled config option in error message (Backport PR
[#&#8203;35543](https://redirect.github.com/cilium/cilium/issues/35543),
Upstream PR
[#&#8203;35390](https://redirect.github.com/cilium/cilium/issues/35390),
[@&#8203;baurmatt](https://redirect.github.com/baurmatt))
- helm: clarify text for serviceNoBackendResponse (Backport PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35734](https://redirect.github.com/cilium/cilium/issues/35734),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- hubble: Add 'release' Make target (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35561](https://redirect.github.com/cilium/cilium/issues/35561),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- image: Use cilium-builder instead of golang as operator builder image
(Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35351](https://redirect.github.com/cilium/cilium/issues/35351),
[@&#8203;learnitall](https://redirect.github.com/learnitall))
- iptables: always warn about missing xt_socket module (Backport PR
[#&#8203;35781](https://redirect.github.com/cilium/cilium/issues/35781),
Upstream PR
[#&#8203;35591](https://redirect.github.com/cilium/cilium/issues/35591),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- makefile: add target to install Cilium in kvstore mode (Backport PR
[#&#8203;35905](https://redirect.github.com/cilium/cilium/issues/35905),
Upstream PR
[#&#8203;35646](https://redirect.github.com/cilium/cilium/issues/35646),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- proxy: Ensure proxy ports are written on shutdown (Backport PR
[#&#8203;35908](https://redirect.github.com/cilium/cilium/issues/35908),
Upstream PR
[#&#8203;35839](https://redirect.github.com/cilium/cilium/issues/35839),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Silence spurious clustermesh-related warnings (Backport PR
[#&#8203;35850](https://redirect.github.com/cilium/cilium/issues/35850),
Upstream PR
[#&#8203;35867](https://redirect.github.com/cilium/cilium/issues/35867),
[@&#8203;giorio94](https://redirect.github.com/giorio94))

**Other Changes:**

- \[v1.16] envoy: Add configuration for OverloadManager
([#&#8203;35787](https://redirect.github.com/cilium/cilium/issues/35787),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- \[v1.16] envoy: Bump envoy version from 1.29.x to 1.30.x
([#&#8203;35563](https://redirect.github.com/cilium/cilium/issues/35563),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- \[v1.16] policy/correlation: Fix `PolicyMatch{L3Proto,L4Only}` case
([#&#8203;35681](https://redirect.github.com/cilium/cilium/issues/35681),
[@&#8203;gandro](https://redirect.github.com/gandro))
- chore(deps): update cilium-envoy dependency
([#&#8203;35920](https://redirect.github.com/cilium/cilium/issues/35920),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- install: Update image digests for v1.16.3
([#&#8203;35361](https://redirect.github.com/cilium/cilium/issues/35361),
[@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\[bot])
- Policy add deny rule test and benchmark
([#&#8203;35714](https://redirect.github.com/cilium/cilium/issues/35714),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))

#### Docker Manifests

##### cilium


`quay.io/cilium/cilium:v1.16.4@&#8203;sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf`

`quay.io/cilium/cilium:stable@sha256:d55ec38938854133e06739b1af237932b9c4dd4e75e9b7b2ca3acc72540a44bf`

##### clustermesh-apiserver


`quay.io/cilium/clustermesh-apiserver:v1.16.4@&#8203;sha256:b41ba9c1b32e31308e17287a24a5b8e8ed0931f70d168087001c9679bc6c5dd2`

`quay.io/cilium/clustermesh-apiserver:stable@sha256:b41ba9c1b32e31308e17287a24a5b8e8ed0931f70d168087001c9679bc6c5dd2`

##### docker-plugin


`quay.io/cilium/docker-plugin:v1.16.4@&#8203;sha256:0e55f80fa875a1bcce87d87eae9a72b32c9db1fe9741c1f8d1bf308ef4b1193e`

`quay.io/cilium/docker-plugin:stable@sha256:0e55f80fa875a1bcce87d87eae9a72b32c9db1fe9741c1f8d1bf308ef4b1193e`

##### hubble-relay


`quay.io/cilium/hubble-relay:v1.16.4@&#8203;sha256:fb2c7d127a1c809f6ba23c05973f3dd00f6b6a48e4aee2da95db925a4f0351d2`

`quay.io/cilium/hubble-relay:stable@sha256:fb2c7d127a1c809f6ba23c05973f3dd00f6b6a48e4aee2da95db925a4f0351d2`

##### operator-alibabacloud


`quay.io/cilium/operator-alibabacloud:v1.16.4@&#8203;sha256:8d59d1c9043d0ccf40f3e16361e5c81e8044cb83695d32d750b0c352f690c686`

`quay.io/cilium/operator-alibabacloud:stable@sha256:8d59d1c9043d0ccf40f3e16361e5c81e8044cb83695d32d750b0c352f690c686`

##### operator-aws


`quay.io/cilium/operator-aws:v1.16.4@&#8203;sha256:355051bbebab73ea3067bb7f0c28cfd43b584d127570cb826f794f468e2d31be`

`quay.io/cilium/operator-aws:stable@sha256:355051bbebab73ea3067bb7f0c28cfd43b584d127570cb826f794f468e2d31be`

##### operator-azure


`quay.io/cilium/operator-azure:v1.16.4@&#8203;sha256:475594628af6d6a807d58fcb6b7d48f5a82e0289f54ae372972b1d0536c0b6de`

`quay.io/cilium/operator-azure:stable@sha256:475594628af6d6a807d58fcb6b7d48f5a82e0289f54ae372972b1d0536c0b6de`

##### operator-generic


`quay.io/cilium/operator-generic:v1.16.4@&#8203;sha256:c55a7cbe19fe0b6b28903a085334edb586a3201add9db56d2122c8485f7a51c5`

`quay.io/cilium/operator-generic:stable@sha256:c55a7cbe19fe0b6b28903a085334edb586a3201add9db56d2122c8485f7a51c5`

##### operator


`quay.io/cilium/operator:v1.16.4@&#8203;sha256:c77643984bc17e1a93d83b58fa976d7e72ad1485ce722257594f8596899fdfff`

`quay.io/cilium/operator:stable@sha256:c77643984bc17e1a93d83b58fa976d7e72ad1485ce722257594f8596899fdfff`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-21 02:42:40 +01:00
TrueCharts Bot 3fbef65029 chore(flux): update image blocky 16.6.3 → 16.6.4 (clustertool) (#29455) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [blocky](https://truecharts.org/charts/premium/blocky)
([source](https://0xerr0r.github.io/blocky/)) | patch | `16.6.3` ->
`16.6.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-16 00:20:38 +01:00
TrueCharts Bot 1a118e2db7 chore(flux): update image metallb-config 8.2.3 → 8.2.4 (clustertool) (#29394) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [metallb-config](https://truecharts.org/charts/premium/metallb-config)
([source](https://redirect.github.com/metallb/metallb)) | patch |
`8.2.3` -> `8.2.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-15 05:15:41 +01:00
TrueCharts Bot f28c281a5d chore(flux): update image clusterissuer 9.2.4 → 9.2.5 (clustertool) (#29393) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [clusterissuer](https://truecharts.org/charts/premium/clusterissuer)
([source](https://cert-manager.io/)) | patch | `9.2.4` -> `9.2.5` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-15 05:14:41 +01:00
TrueCharts Bot 988ee38396 chore(flux): update image traefik 30.0.2 → 30.0.3 (clustertool) (#29311) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://truecharts.org/charts/premium/traefik)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`30.0.2` -> `30.0.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-13 17:14:12 +01:00
TrueCharts Bot 3d3f0271fe chore(deps): update ghcr.io/siderolabs/installer docker tag to v1.8.3 (clustertool) (#29310) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/siderolabs/installer](https://redirect.github.com/siderolabs/talos)
| patch | `v1.8.2` -> `v1.8.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/talos (ghcr.io/siderolabs/installer)</summary>

###
[`v1.8.3`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.8.3)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.8.2...v1.8.3)

##### [Talos
1.8.3](https://redirect.github.com/siderolabs/talos/releases/tag/v1.8.3)
(2024-11-13)

Welcome to the v1.8.3 release of Talos!

Starting with Talos v1.8.0, only standard assets would be published as
github release assets. These include:

-   `cloud-images.json`
-   `talosctl` binaries
-   `kernel`
-   `initramfs`
-   `metal` iso and disk images
-   `talosctl-cni-bundle`

All other release assets can be downloaded from [Image
Factory](https://www.talos.dev/latest/talos-guides/install/boot-assets/#image-factory).

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

##### Component Updates

Linux: 6.6.60
containerd: 2.0.0
runc: 1.2.1

Talos is built with Go 1.22.9.

##### Contributors

-   Andrey Smirnov
-   blablu
-   Dmitry Sharshakov
-   Joakim Nohlgård
-   Noel Georgi
-   Remko Molier
-   Sam Stelfox

##### Changes

<details><summary>15 commits</summary>
<p>

-
[@&#8203;`6494ace`](https://redirect.github.com/siderolabs/talos/commit/6494aced3)
release(v1.8.3): prepare release
-
[@&#8203;`01c9f45`](https://redirect.github.com/siderolabs/talos/commit/01c9f4584)
fix: arch linux search paths and names for QEMU provisioner
-
[@&#8203;`8b5c5f1`](https://redirect.github.com/siderolabs/talos/commit/8b5c5f108)
chore: fix nil pointer dereference in AWS uploader
-
[@&#8203;`fbf85dd`](https://redirect.github.com/siderolabs/talos/commit/fbf85dd0d)
fix: install disk matcher error
-
[@&#8203;`ff3fcce`](https://redirect.github.com/siderolabs/talos/commit/ff3fccea9)
feat: add dm-cache dm-cache-smq kernel modules
-
[@&#8203;`6d872e4`](https://redirect.github.com/siderolabs/talos/commit/6d872e41c)
feat: allow extra mounts for docker-based `talosctl cluster create`
-
[@&#8203;`8c193c8`](https://redirect.github.com/siderolabs/talos/commit/8c193c8b1)
fix: update permissions for logging directories in /var
-
[@&#8203;`5044a41`](https://redirect.github.com/siderolabs/talos/commit/5044a410c)
fix: mount /sys/kernel/security conditionally
-
[@&#8203;`83abb66`](https://redirect.github.com/siderolabs/talos/commit/83abb6644)
fix: make route normalization keep family
-
[@&#8203;`228a943`](https://redirect.github.com/siderolabs/talos/commit/228a94387)
fix: do not trim 0 from process SELinux label
-
[@&#8203;`d4a3a2b`](https://redirect.github.com/siderolabs/talos/commit/d4a3a2b62)
fix: prevent panic in nocloud platform code
-
[@&#8203;`5c7b02d`](https://redirect.github.com/siderolabs/talos/commit/5c7b02d7e)
fix: update the CRI sandbox image reference
-
[@&#8203;`f8155c4`](https://redirect.github.com/siderolabs/talos/commit/f8155c40d)
feat: add parsing of vlanNNNN:ethX style VLAN cmdline args
-
[@&#8203;`ea19f15`](https://redirect.github.com/siderolabs/talos/commit/ea19f157f)
fix: generation of SecureBoot iso
-
[@&#8203;`fddaa60`](https://redirect.github.com/siderolabs/talos/commit/fddaa60e2)
feat: update Linux, runc, containerd, go

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>7 commits</summary>
<p>

-
[siderolabs/pkgs@`9c80a4a`](https://redirect.github.com/siderolabs/pkgs/commit/9c80a4a)
feat: update Linux to 6.6.60
-
[siderolabs/pkgs@`747c6c7`](https://redirect.github.com/siderolabs/pkgs/commit/747c6c7)
feat: update containerd to v2.0.0
-
[siderolabs/pkgs@`87c6526`](https://redirect.github.com/siderolabs/pkgs/commit/87c6526)
feat: enable CONFIG_DM_CACHE
-
[siderolabs/pkgs@`b4fa648`](https://redirect.github.com/siderolabs/pkgs/commit/b4fa648)
fix: enable nvme and 2.5gbit ethernet on nanopi-r5s
-
[siderolabs/pkgs@`079ea13`](https://redirect.github.com/siderolabs/pkgs/commit/079ea13)
feat: update Linux to 6.6.59
-
[siderolabs/pkgs@`e4bc753`](https://redirect.github.com/siderolabs/pkgs/commit/e4bc753)
feat: update runc to v1.2.1
-
[siderolabs/pkgs@`de3dbf5`](https://redirect.github.com/siderolabs/pkgs/commit/de3dbf5)
feat: update Go to 1.22.9

</p>
</details>

##### Changes from siderolabs/tools
<details><summary>1 commit</summary>
<p>

-
[siderolabs/tools@`653182a`](https://redirect.github.com/siderolabs/tools/commit/653182a)
feat: update Go to 1.22.9

</p>
</details>

##### Dependency Changes

-   **github.com/docker/cli**                      v27.1.1 ***new***
-   **github.com/docker/docker**                   v27.2.0 -> v27.1.1
- **github.com/siderolabs/pkgs** v1.8.0-24-ge72b2f4 ->
v1.8.0-31-g9c80a4a
-   **github.com/siderolabs/talos/pkg/machinery**  v1.8.2 -> v1.8.3
- **github.com/siderolabs/tools** v1.8.0-2-g7719230 -> v1.8.0-3-g653182a

Previous release can be found at
[v1.8.2](https://redirect.github.com/siderolabs/talos/releases/tag/v1.8.2)

##### Images

    ghcr.io/siderolabs/flannel:v0.25.7
    registry.k8s.io/coredns/coredns:v1.11.3
    gcr.io/etcd-development/etcd:v3.5.16
    registry.k8s.io/kube-apiserver:v1.31.2
    registry.k8s.io/kube-controller-manager:v1.31.2
    registry.k8s.io/kube-scheduler:v1.31.2
    registry.k8s.io/kube-proxy:v1.31.2
    ghcr.io/siderolabs/kubelet:v1.31.2
    ghcr.io/siderolabs/installer:v1.8.3
    registry.k8s.io/pause:3.10

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-13 17:14:02 +01:00
TrueCharts Bot 04f58d5872 chore(flux): update image kyverno 3.3.2 → 3.3.3 (clustertool) (#29289) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [kyverno](https://redirect.github.com/kyverno/kyverno) | patch |
`3.3.2` -> `3.3.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-13 09:15:46 +01:00
TrueCharts Bot dcb05973ad chore(flux): update image traefik 30.0.1 → 30.0.2 (clustertool) (#29257) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://truecharts.org/charts/premium/traefik)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`30.0.1` -> `30.0.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-13 01:19:54 +01:00
TrueCharts Bot e19b0fd5a3 chore(flux): update image traefik 30.0.0 → 30.0.1 (clustertool) (#29245) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://truecharts.org/charts/premium/traefik)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`30.0.0` -> `30.0.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-12 21:13:16 +01:00
Kjeld Schouten 3a0e296670 fix(clustertool): remove envrc, untill we are certain how to deal with it. 2024-11-12 16:04:50 +01:00
Kjeld Schouten 4012981462 fix(clustertool): update traefik helm chart 2024-11-12 15:56:09 +01:00
TrueCharts Bot 858c0160b7 chore(flux): update image volsync 2.5.0 → 2.5.1 (clustertool) (#29215) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [volsync](https://truecharts.org/charts/system/volsync)
([source](https://redirect.github.com/truecharts/charts/tree/HEAD/charts/system/volsync))
| patch | `2.5.0` -> `2.5.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-12 13:22:01 +01:00
TrueCharts Bot 0fed4760fe chore(flux): update image traefik-crds 3.2.3 → 3.2.4 (clustertool) (#29213) 2024-11-12 13:21:43 +01:00
TrueCharts Bot f554bc0519 chore(flux): update image spegel 2.0.7 → 2.0.8 (clustertool) (#29211) 2024-11-12 13:21:40 +01:00
TrueCharts Bot 6a17571f3f chore(flux): update image prometheus-operator 8.11.0 → 8.11.1 (clustertool) (#29209) 2024-11-12 13:21:37 +01:00
TrueCharts Bot 1900cd2319 chore(flux): update image kubernetes-reflector 6.2.1 → 6.2.2 (clustertool) (#29206) 2024-11-12 13:21:04 +01:00
TrueCharts Bot e33f67c4e6 chore(flux): update image kubelet-csr-approver 1.1.2 → 1.1.3 (clustertool) (#29204) 2024-11-12 13:18:58 +01:00
TrueCharts Bot 21770baad3 chore(flux): update image traefik 29.5.0 → 29.5.1 (clustertool) (#29212) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://truecharts.org/charts/premium/traefik)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`29.5.0` -> `29.5.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-12 13:18:41 +01:00
TrueCharts Bot f1ed36b5ce chore(flux): update image snapshot-controller 3.3.1 → 3.3.2 (clustertool) (#29210) 2024-11-12 13:18:13 +01:00
TrueCharts Bot ba5ff22d82 chore(flux): update image metallb-config 8.2.2 → 8.2.3 (clustertool) (#29207) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [metallb-config](https://truecharts.org/charts/premium/metallb-config)
([source](https://redirect.github.com/metallb/metallb)) | patch |
`8.2.2` -> `8.2.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2024-11-12 13:18:06 +01:00
TrueCharts Bot 0526918605 chore(flux): update image cert-manager 6.2.2 → 6.2.3 (clustertool) (#29201) 2024-11-12 13:17:51 +01:00
TrueCharts Bot c49e6370ee chore(flux): update image kubernetes-dashboard 1.10.0 → 1.10.1 (clustertool) (#29205) 2024-11-12 13:17:47 +01:00
TrueCharts Bot 31ce2e2b11 chore(flux): update image clusterissuer 9.2.3 → 9.2.4 (clustertool) (#29202) 2024-11-12 13:17:43 +01:00
TrueCharts Bot 30c69ca692 chore(flux): update image blocky 16.6.2 → 16.6.3 (clustertool) (#29200) 2024-11-12 13:17:36 +01:00
TrueCharts Bot 3131e0d85b chore(flux): update image traefik 29.4.0 → 29.5.0 (clustertool) (#29135) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://truecharts.org/charts/premium/traefik)
([source](https://redirect.github.com/traefik/traefik)) | minor |
`29.4.0` -> `29.5.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2024-11-11 17:31:18 +01:00
Kjeld Schouten be53e747a8 fix(clustertool): correct issuer for default wildcard certificate 2024-11-10 11:20:20 +01:00
Kjeld Schouten 737b8bc5c3 fix(clustertool): use reachable schema for helmrelease files 2024-11-09 13:17:43 +01:00
Kjeld Schouten 3e0d2b7c85 fix(clustertool): bump clusterissuer version to fix ACME naming issues 2024-11-09 13:17:43 +01:00
TrueCharts Bot 1aa11cf3f9 chore(flux): update image volsync 2.4.1 → 2.5.0 (clustertool) (#29021) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [volsync](https://truecharts.org/charts/system/volsync)
([source](https://redirect.github.com/truecharts/charts/tree/HEAD/charts/system/volsync))
| minor | `2.4.1` -> `2.5.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2024-11-08 21:37:24 +01:00
TrueCharts Bot 3fae5e9c5d chore(flux): update image prometheus-operator 8.10.0 → 8.11.0 (clustertool) (#28938) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | minor |
`8.10.0` -> `8.11.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2024-11-07 01:19:17 +01:00
alfi0812 619f4a99d6 Update devcontainer.json (#28901) 
**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
Co-authored-by: Kjeld Schouten <info@kjeldschouten.nl>
 2024-11-06 18:14:06 +01:00
alfi0812 8f4354065c Create extensions.json (#28902) 
**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>
 2024-11-06 14:52:58 +01:00
Kjeld Schouten 76b5d3925e feat(clustertool): add traefik, clusterissuer and blocky bare-bones 2024-11-05 21:50:25 +01:00
TrueCharts Bot 9aba08f562 chore(flux): update image prometheus-operator 8.9.0 → 8.10.0 (clustertool) (#28865) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | minor |
`8.9.0` -> `8.10.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2024-11-05 13:11:25 +01:00
TrueCharts Bot 2e2ef543c0 chore(flux): update image prometheus-operator 8.8.2 → 8.9.0 (clustertool) (#28829) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | minor |
`8.8.2` -> `8.9.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2024-11-05 01:20:10 +01:00
gismo2004 c5fccdb24a feat(clustertool) enable squash merge (#28802) 
**Description**
Using squash merge makes the history more readable. 
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [x] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
Tested here: https://github.com/gismo2004/TestCluster

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._
 2024-11-04 14:52:18 +01:00
Kjeld Schouten 26e09c5ffe fix(devcontainer): version pin devcontainer 2024-11-03 21:28:10 +01:00