91eebec08b
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [cilium](https://cilium.io/) ([source](https://redirect.github.com/cilium/cilium)) | patch | `1.17.1` -> `1.17.2` | --- ### Release Notes <details> <summary>cilium/cilium (cilium)</summary> ### [`v1.17.2`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.2): 1.17.2 [Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.1...1.17.2) ## Summary of Changes **Minor Changes:** - docs: clarify wording of remote-nodes in context of a clustermesh (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37989](https://redirect.github.com/cilium/cilium/issues/37989), [@​oblazek](https://redirect.github.com/oblazek)) - Increase granularity of the `api_duration_seconds` metric buckets (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37365](https://redirect.github.com/cilium/cilium/issues/37365), [@​jaredledvina](https://redirect.github.com/jaredledvina)) - New agent option `--policy-restore-timeout` (default 3m) has been added to bound the maximum time Cilium agent waits for endpoint policies to regenerate before starting serving resources to `cilium-envoy` proxy. (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37658](https://redirect.github.com/cilium/cilium/issues/37658), [@​jrajahalme](https://redirect.github.com/jrajahalme)) - Set json output as default for `cilium-dbg endpoint get` (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​36537](https://redirect.github.com/cilium/cilium/issues/36537), [@​saiaunghlyanhtet](https://redirect.github.com/saiaunghlyanhtet)) - Set json output as default for `cilium-dbg endpoint get` (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​36537](https://redirect.github.com/cilium/cilium/issues/36537), [@​saiaunghlyanhtet](https://redirect.github.com/saiaunghlyanhtet)) **Bugfixes:** - Apply Egress bandwith-limiting only once for traffic that is matched by an Egress Gateway policy. (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37674](https://redirect.github.com/cilium/cilium/issues/37674), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) - Auth policy is properly maintained also when covered by proxy redirects. (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37685](https://redirect.github.com/cilium/cilium/issues/37685), [@​jrajahalme](https://redirect.github.com/jrajahalme)) - Do not auto detect / auto select IPoIB devices (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37553](https://redirect.github.com/cilium/cilium/issues/37553), [@​dylandreimerink](https://redirect.github.com/dylandreimerink)) - Egress route reconciliation (Backport PR [#​38118](https://redirect.github.com/cilium/cilium/issues/38118), Upstream PR [#​37962](https://redirect.github.com/cilium/cilium/issues/37962), [@​dylandreimerink](https://redirect.github.com/dylandreimerink)) - Fix a regression that made it impossible to disable Hubble via Helm charts (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37587](https://redirect.github.com/cilium/cilium/issues/37587), [@​devodev](https://redirect.github.com/devodev)) - Fix bug causing `cilium-dbg bpf` commands to fail with a map not found error in IPv6-only clusters. (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37787](https://redirect.github.com/cilium/cilium/issues/37787), [@​pchaigno](https://redirect.github.com/pchaigno)) - Fix creating ServiceMonitor for Hubble when dynamic metrics are enabled in the Helm chart (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37474](https://redirect.github.com/cilium/cilium/issues/37474), [@​dustinspecker](https://redirect.github.com/dustinspecker)) - Fix creation and deletion of host port maps that would occasionally leave pods without them (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37419](https://redirect.github.com/cilium/cilium/issues/37419), [@​javanthropus](https://redirect.github.com/javanthropus)) - Fix dropped NodePort traffic to hostNetwork backends with Geneve+DSR (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​36978](https://redirect.github.com/cilium/cilium/issues/36978), [@​tommasopozzetti](https://redirect.github.com/tommasopozzetti)) - Fix envoy metrics could not be obtained on IPv6-only clusters (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37818](https://redirect.github.com/cilium/cilium/issues/37818), [@​haozhangami](https://redirect.github.com/haozhangami)) - Fix helm charts to properly configure tls and peer service for dynamic Hubble metrics. (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37543](https://redirect.github.com/cilium/cilium/issues/37543), [@​rectified95](https://redirect.github.com/rectified95)) - Fix service id exceeds max limit (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37191](https://redirect.github.com/cilium/cilium/issues/37191), [@​haozhangami](https://redirect.github.com/haozhangami)) - Fix the `--dns-policy-unload-on-shutdown` feature for restored endpoints (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37532](https://redirect.github.com/cilium/cilium/issues/37532), [@​antonipp](https://redirect.github.com/antonipp)) - Fix the possible race condition caused by async update from aws to instance map in issue [#​36428](https://redirect.github.com/cilium/cilium/issues/36428) (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37650](https://redirect.github.com/cilium/cilium/issues/37650), [@​liyihuang](https://redirect.github.com/liyihuang)) - Fix traffic not getting masqueraded with wildcard devices or egress-masquerade-interfaces when enable-masquerade-to-route-source flag is set. (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37450](https://redirect.github.com/cilium/cilium/issues/37450), [@​liyihuang](https://redirect.github.com/liyihuang)) - fix(helm): multiPoolPreAllocation fix conditional avoid null (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37585](https://redirect.github.com/cilium/cilium/issues/37585), [@​acelinkio](https://redirect.github.com/acelinkio)) - fix: cilium-config configmap was incorrectly resulting in values like `2.09715…2e+06` instead of `2097152` (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37236](https://redirect.github.com/cilium/cilium/issues/37236), [@​dee-kryvenko](https://redirect.github.com/dee-kryvenko)) - fix: duplicate label maps in helm chart templates and add missing commonlabels (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37693](https://redirect.github.com/cilium/cilium/issues/37693), [@​cmergenthaler](https://redirect.github.com/cmergenthaler)) - Fix: Resolved an issue causing ArgoCD to report constant out-of-sync status due to the hasKey check in Helm. The condition has been simplified to ensure proper synchronization. No functional changes to deployments. (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37536](https://redirect.github.com/cilium/cilium/issues/37536), [@​nicl-dev](https://redirect.github.com/nicl-dev)) - Fixed Envoy JSON log format conversion in Helm, preventing crashes. (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37656](https://redirect.github.com/cilium/cilium/issues/37656), [@​kahirokunn](https://redirect.github.com/kahirokunn)) - helm: fix large number handling (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37670](https://redirect.github.com/cilium/cilium/issues/37670), [@​justin0u0](https://redirect.github.com/justin0u0)) - hubble: escape terminal special characters from observe output (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37401](https://redirect.github.com/cilium/cilium/issues/37401), [@​devodev](https://redirect.github.com/devodev)) - hubble: fix locking of hubble metrics registry for dynamically configured metrics (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37923](https://redirect.github.com/cilium/cilium/issues/37923), [@​marseel](https://redirect.github.com/marseel)) - identity: fix bug where fromNodes/toNodes could be used to allow custom endpoint (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​36657](https://redirect.github.com/cilium/cilium/issues/36657), [@​oblazek](https://redirect.github.com/oblazek)) - ipam/multi-pool: Periodically perform pool maintenance (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37895](https://redirect.github.com/cilium/cilium/issues/37895), [@​gandro](https://redirect.github.com/gandro)) - operator: explicit controller-runtime controller names to avoid naming conflicts (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37606](https://redirect.github.com/cilium/cilium/issues/37606), [@​mhofstetter](https://redirect.github.com/mhofstetter)) - operator: Fix duplicate configurations (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37293](https://redirect.github.com/cilium/cilium/issues/37293), [@​joestringer](https://redirect.github.com/joestringer)) - Restore aggregration of network trace events for Egress Gateway reply traffic on the gateway node (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​38029](https://redirect.github.com/cilium/cilium/issues/38029), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) - Updated Gateway API and GAMMA processing to remove incorrect behavior when both parentRefs were present. (Backport PR [#​38154](https://redirect.github.com/cilium/cilium/issues/38154), Upstream PR [#​38143](https://redirect.github.com/cilium/cilium/issues/38143), [@​youngnick](https://redirect.github.com/youngnick)) - Workaround for iptables 1.8.10, used in OpenShift 4.16, 4.17 and 4.18, returning a wrong error message `iptables: Incompatible with this kernel` to `iptables -n -L CHAIN` when the chain does not exist. This prevents iptables configuration and induced unnecessary loops and log messages. (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37749](https://redirect.github.com/cilium/cilium/issues/37749), [@​fgiloux](https://redirect.github.com/fgiloux)) **CI Changes:** - .github: Remove misleading step from ipsec workflow (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37681](https://redirect.github.com/cilium/cilium/issues/37681), [@​joestringer](https://redirect.github.com/joestringer)) - .github: s/enbaled/enabled/ (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37449](https://redirect.github.com/cilium/cilium/issues/37449), [@​chansuke](https://redirect.github.com/chansuke)) - bgpv1: wait for watchers to be ready in tests (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37884](https://redirect.github.com/cilium/cilium/issues/37884), [@​harsimran-pabla](https://redirect.github.com/harsimran-pabla)) - CI: GKE backslash missing disable insecure kubelet (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37850](https://redirect.github.com/cilium/cilium/issues/37850), [@​auriaave](https://redirect.github.com/auriaave)) - CI: GKE, disable insecure kubelet readonly port (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37844](https://redirect.github.com/cilium/cilium/issues/37844), [@​auriaave](https://redirect.github.com/auriaave)) - ci: switch to monitor aggregation medium (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​38036](https://redirect.github.com/cilium/cilium/issues/38036), [@​marseel](https://redirect.github.com/marseel)) - gh: ci-e2e-upgrade: Add encryption leak checks for wireguard (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37551](https://redirect.github.com/cilium/cilium/issues/37551), [@​jschwinger233](https://redirect.github.com/jschwinger233)) - gh: ipsec-e2e: add concurrency for connectivity tests (Backport PR [#​37925](https://redirect.github.com/cilium/cilium/issues/37925), Upstream PR [#​37891](https://redirect.github.com/cilium/cilium/issues/37891), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) - gh: update naming for bpftrace leak detection script (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37865](https://redirect.github.com/cilium/cilium/issues/37865), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) **Misc Changes:** - always render enable-hubble in the Cilium configmap (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37703](https://redirect.github.com/cilium/cilium/issues/37703), [@​kaworu](https://redirect.github.com/kaworu)) - bpf: Add option to utilize core maps via BPF_F_NO_COMMON_LRU (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​38037](https://redirect.github.com/cilium/cilium/issues/38037), [@​borkmann](https://redirect.github.com/borkmann)) - bpf: minor clean-ups for the ENI symmetric routing feature (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37379](https://redirect.github.com/cilium/cilium/issues/37379), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) - chore(deps): update all github action dependencies (v1.17) ([#​37950](https://redirect.github.com/cilium/cilium/issues/37950), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.17) ([#​37944](https://redirect.github.com/cilium/cilium/issues/37944), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (v1.17) ([#​38048](https://redirect.github.com/cilium/cilium/issues/38048), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.17.0 (v1.17) ([#​37793](https://redirect.github.com/cilium/cilium/issues/37793), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.18.0 (v1.17) ([#​37949](https://redirect.github.com/cilium/cilium/issues/37949), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update dependency cilium/cilium-cli to v0.18.2 (v1.17) ([#​38057](https://redirect.github.com/cilium/cilium/issues/38057), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update go to v1.23.7 (v1.17) ([#​37996](https://redirect.github.com/cilium/cilium/issues/37996), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 \[security] (v1.17) ([#​37833](https://redirect.github.com/cilium/cilium/issues/37833), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.31.5-1741765102-efed3defcc70ab5b263a0fc44c93d316b846a211 (v1.17) ([#​38148](https://redirect.github.com/cilium/cilium/issues/38148), [@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - cilium-dbg: output parentIfIndex in bpf endpoint list (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37398](https://redirect.github.com/cilium/cilium/issues/37398), [@​Mahdi-BZ](https://redirect.github.com/Mahdi-BZ)) - cilium: Allow to configure tunnel source port range (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37777](https://redirect.github.com/cilium/cilium/issues/37777), [@​borkmann](https://redirect.github.com/borkmann)) - cilium: Pull in vxlan netlink Go fix and uncomment assertion in test (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37808](https://redirect.github.com/cilium/cilium/issues/37808), [@​borkmann](https://redirect.github.com/borkmann)) - docs: complete load balancer service manifest in kubeproxy-free (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37466](https://redirect.github.com/cilium/cilium/issues/37466), [@​ybelleguic](https://redirect.github.com/ybelleguic)) - docs: fix broken links (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37995](https://redirect.github.com/cilium/cilium/issues/37995), [@​nueavv](https://redirect.github.com/nueavv)) - docs: masquerading: mention that BPF masq also pulls in BPF Host-Routing (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37604](https://redirect.github.com/cilium/cilium/issues/37604), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) - docs: use latest for rtd theme commit with fixed version selector (Backport PR [#​37614](https://redirect.github.com/cilium/cilium/issues/37614), Upstream PR [#​37421](https://redirect.github.com/cilium/cilium/issues/37421), [@​ayuspin](https://redirect.github.com/ayuspin)) - envoy: remove duplicated service/endpointslice informers when envoyConfig is enabled (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37683](https://redirect.github.com/cilium/cilium/issues/37683), [@​marseel](https://redirect.github.com/marseel)) - Fix API generation and add trusted dependencies to renovate config (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​36957](https://redirect.github.com/cilium/cilium/issues/36957), [@​aanm](https://redirect.github.com/aanm)) - Fix API generation and add trusted dependencies to renovate config (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​36957](https://redirect.github.com/cilium/cilium/issues/36957), [@​aanm](https://redirect.github.com/aanm)) - Fix helm value for IPAM Multi-Pool (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37963](https://redirect.github.com/cilium/cilium/issues/37963), [@​saintdle](https://redirect.github.com/saintdle)) - fqdn/dnsproxy: use `netip.Addr` for `DNSProxy.usedServers` (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​37985](https://redirect.github.com/cilium/cilium/issues/37985), [@​tklauser](https://redirect.github.com/tklauser)) - gha: Update the helm flag for TLS related test (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37428](https://redirect.github.com/cilium/cilium/issues/37428), [@​sayboras](https://redirect.github.com/sayboras)) - ipcache: Slightly optimize calls to fetch tunnel and encrypt metadata (Backport PR [#​38104](https://redirect.github.com/cilium/cilium/issues/38104), Upstream PR [#​38021](https://redirect.github.com/cilium/cilium/issues/38021), [@​christarazi](https://redirect.github.com/christarazi)) - labels: fix TestNewFrom test (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37846](https://redirect.github.com/cilium/cilium/issues/37846), [@​giorio94](https://redirect.github.com/giorio94)) - Moves Unix socket listener configuration to a new file specifically for Linux builds. (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37399](https://redirect.github.com/cilium/cilium/issues/37399), [@​ritwikranjan](https://redirect.github.com/ritwikranjan)) - operator: Explicitly init the FQDN regex LRU cache (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37366](https://redirect.github.com/cilium/cilium/issues/37366), [@​christarazi](https://redirect.github.com/christarazi)) - pkg/hive: always use default logger when decorating cells (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37636](https://redirect.github.com/cilium/cilium/issues/37636), [@​aanm](https://redirect.github.com/aanm)) - policy: Skip iteration when proxy port priority is zero (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37422](https://redirect.github.com/cilium/cilium/issues/37422), [@​jrajahalme](https://redirect.github.com/jrajahalme)) - Remove grpc-health-probe binary from the Hubble Relay image as it is no longer used (Backport PR [#​37904](https://redirect.github.com/cilium/cilium/issues/37904), Upstream PR [#​37806](https://redirect.github.com/cilium/cilium/issues/37806), [@​rolinh](https://redirect.github.com/rolinh)) - Update Hubble UI to v0.13.2 which contains security fixes, add the missing traffic direction in the flow table, and enhance the home namespace list. See [v0.13.2](https://redirect.github.com/cilium/hubble-ui/releases/tag/v0.13.2) for more details (Backport PR [#​37742](https://redirect.github.com/cilium/cilium/issues/37742), Upstream PR [#​37631](https://redirect.github.com/cilium/cilium/issues/37631), [@​yannikmesserli](https://redirect.github.com/yannikmesserli)) - use runtime image set by env var action in build and lint (Backport PR [#​37648](https://redirect.github.com/cilium/cilium/issues/37648), Upstream PR [#​37253](https://redirect.github.com/cilium/cilium/issues/37253), [@​Artyop](https://redirect.github.com/Artyop)) **Other Changes:** - \[v1.17] Revert "Fix dropped NodePort traffic to hostNetwork backends with Geneve+DSR" ([#​38101](https://redirect.github.com/cilium/cilium/issues/38101), [@​julianwiedmann](https://redirect.github.com/julianwiedmann)) - Backport set runtime action 1.17 ([#​37854](https://redirect.github.com/cilium/cilium/issues/37854), [@​Artyop](https://redirect.github.com/Artyop)) - gha: Update GatewayAPI conformance report ([#​37671](https://redirect.github.com/cilium/cilium/issues/37671), [@​sayboras](https://redirect.github.com/sayboras)) - install: Update image digests for v1.17.1 ([#​37580](https://redirect.github.com/cilium/cilium/issues/37580), [@​cilium-release-bot](https://redirect.github.com/cilium-release-bot)\[bot]) - v1.17: gh/workflows: Remove conformance-externalworkloads ([#​37738](https://redirect.github.com/cilium/cilium/issues/37738), [@​brb](https://redirect.github.com/brb)) #### Docker Manifests ##### cilium `quay.io/cilium/cilium:v1.17.2@​sha256:3c4c9932b5d8368619cb922a497ff2ebc8def5f41c18e410bcc84025fcd385b1` `quay.io/cilium/cilium:stable@sha256:3c4c9932b5d8368619cb922a497ff2ebc8def5f41c18e410bcc84025fcd385b1` ##### clustermesh-apiserver `quay.io/cilium/clustermesh-apiserver:v1.17.2@​sha256:981250ebdc6e66e190992eaf75cfca169113a8f08d5c3793fe15822176980398` `quay.io/cilium/clustermesh-apiserver:stable@sha256:981250ebdc6e66e190992eaf75cfca169113a8f08d5c3793fe15822176980398` ##### docker-plugin `quay.io/cilium/docker-plugin:v1.17.2@​sha256:a599893f1fc76fc31afad2bbb73af7e7f618adbf02043b2098fafeca4adf551c` `quay.io/cilium/docker-plugin:stable@sha256:a599893f1fc76fc31afad2bbb73af7e7f618adbf02043b2098fafeca4adf551c` ##### hubble-relay `quay.io/cilium/hubble-relay:v1.17.2@​sha256:42a8db5c256c516cacb5b8937c321b2373ad7a6b0a1e5a5120d5028433d586cc` `quay.io/cilium/hubble-relay:stable@sha256:42a8db5c256c516cacb5b8937c321b2373ad7a6b0a1e5a5120d5028433d586cc` ##### operator-alibabacloud `quay.io/cilium/operator-alibabacloud:v1.17.2@​sha256:7cb8c23417f65348bb810fe92fb05b41d926f019d77442f3fa1058d17fea7ffe` `quay.io/cilium/operator-alibabacloud:stable@sha256:7cb8c23417f65348bb810fe92fb05b41d926f019d77442f3fa1058d17fea7ffe` ##### operator-aws `quay.io/cilium/operator-aws:v1.17.2@​sha256:955096183e22a203bbb198ca66e3266ce4dbc2b63f1a2fbd03f9373dcd97893c` `quay.io/cilium/operator-aws:stable@sha256:955096183e22a203bbb198ca66e3266ce4dbc2b63f1a2fbd03f9373dcd97893c` ##### operator-azure `quay.io/cilium/operator-azure:v1.17.2@​sha256:455fb88b558b1b8ba09d63302ccce76b4930581be89def027184ab04335c20e0` `quay.io/cilium/operator-azure:stable@sha256:455fb88b558b1b8ba09d63302ccce76b4930581be89def027184ab04335c20e0` ##### operator-generic `quay.io/cilium/operator-generic:v1.17.2@​sha256:81f2d7198366e8dec2903a3a8361e4c68d47d19c68a0d42f0b7b6e3f0523f249` `quay.io/cilium/operator-generic:stable@sha256:81f2d7198366e8dec2903a3a8361e4c68d47d19c68a0d42f0b7b6e3f0523f249` ##### operator `quay.io/cilium/operator:v1.17.2@​sha256:697a7e6c4765ef053d33dd2d9d7f14642c01dfa7333ad7902de7ca5afbf3b419` `quay.io/cilium/operator:stable@sha256:697a7e6c4765ef053d33dd2d9d7f14642c01dfa7333ad7902de7ca5afbf3b419` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
About The Project
CLA: Before contributing
Our CLA applies to this repository as well.
Please ensure it's signed before submitting a PR: https://cla-assistant.io/truecharts/charts
We use the truecharts/charts link, as CLA assistant does not allow for creating a custom link to a private repository. However, they all sign the same CLA that applies project-wide
License
This tool is released as "All Rights reserved" and hence it's code should NOT be shared. This includes binaries that are modified to remove TrueCharts specific code, unless approved by Kjeld Schouten "The Owner". Those that are invited to have access to repository, are free to edit and use this code for testing purposes, as long as its sourcecode is not shared or saved in-the-cloud.