Files
truecharts/clustertool
TrueCharts Bot 91eebec08b chore(flux): update helm release cilium 1.17.1 → 1.17.2 (clustertool) (#33290)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/)
([source](https://redirect.github.com/cilium/cilium)) | patch | `1.17.1`
-> `1.17.2` |

---

### Release Notes

<details>
<summary>cilium/cilium (cilium)</summary>

###
[`v1.17.2`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.2):
1.17.2

[Compare
Source](https://redirect.github.com/cilium/cilium/compare/1.17.1...1.17.2)

## Summary of Changes

**Minor Changes:**

- docs: clarify wording of remote-nodes in context of a clustermesh
(Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37989](https://redirect.github.com/cilium/cilium/issues/37989),
[@&#8203;oblazek](https://redirect.github.com/oblazek))
- Increase granularity of the `api_duration_seconds` metric buckets
(Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37365](https://redirect.github.com/cilium/cilium/issues/37365),
[@&#8203;jaredledvina](https://redirect.github.com/jaredledvina))
- New agent option `--policy-restore-timeout` (default 3m) has been
added to bound the maximum time Cilium agent waits for endpoint policies
to regenerate before starting serving resources to `cilium-envoy` proxy.
(Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37658](https://redirect.github.com/cilium/cilium/issues/37658),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Set json output as default for `cilium-dbg endpoint get` (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;36537](https://redirect.github.com/cilium/cilium/issues/36537),
[@&#8203;saiaunghlyanhtet](https://redirect.github.com/saiaunghlyanhtet))
- Set json output as default for `cilium-dbg endpoint get` (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;36537](https://redirect.github.com/cilium/cilium/issues/36537),
[@&#8203;saiaunghlyanhtet](https://redirect.github.com/saiaunghlyanhtet))

**Bugfixes:**

- Apply Egress bandwith-limiting only once for traffic that is matched
by an Egress Gateway policy. (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37674](https://redirect.github.com/cilium/cilium/issues/37674),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Auth policy is properly maintained also when covered by proxy
redirects. (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37685](https://redirect.github.com/cilium/cilium/issues/37685),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Do not auto detect / auto select IPoIB devices (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37553](https://redirect.github.com/cilium/cilium/issues/37553),
[@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))
- Egress route reconciliation (Backport PR
[#&#8203;38118](https://redirect.github.com/cilium/cilium/issues/38118),
Upstream PR
[#&#8203;37962](https://redirect.github.com/cilium/cilium/issues/37962),
[@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))
- Fix a regression that made it impossible to disable Hubble via Helm
charts (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37587](https://redirect.github.com/cilium/cilium/issues/37587),
[@&#8203;devodev](https://redirect.github.com/devodev))
- Fix bug causing `cilium-dbg bpf` commands to fail with a map not found
error in IPv6-only clusters. (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37787](https://redirect.github.com/cilium/cilium/issues/37787),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- Fix creating ServiceMonitor for Hubble when dynamic metrics are
enabled in the Helm chart (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37474](https://redirect.github.com/cilium/cilium/issues/37474),
[@&#8203;dustinspecker](https://redirect.github.com/dustinspecker))
- Fix creation and deletion of host port maps that would occasionally
leave pods without them (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37419](https://redirect.github.com/cilium/cilium/issues/37419),
[@&#8203;javanthropus](https://redirect.github.com/javanthropus))
- Fix dropped NodePort traffic to hostNetwork backends with Geneve+DSR
(Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;36978](https://redirect.github.com/cilium/cilium/issues/36978),
[@&#8203;tommasopozzetti](https://redirect.github.com/tommasopozzetti))
- Fix envoy metrics could not be obtained on IPv6-only clusters
(Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37818](https://redirect.github.com/cilium/cilium/issues/37818),
[@&#8203;haozhangami](https://redirect.github.com/haozhangami))
- Fix helm charts to properly configure tls and peer service for dynamic
Hubble metrics. (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37543](https://redirect.github.com/cilium/cilium/issues/37543),
[@&#8203;rectified95](https://redirect.github.com/rectified95))
- Fix service id exceeds max limit (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37191](https://redirect.github.com/cilium/cilium/issues/37191),
[@&#8203;haozhangami](https://redirect.github.com/haozhangami))
- Fix the `--dns-policy-unload-on-shutdown` feature for restored
endpoints (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37532](https://redirect.github.com/cilium/cilium/issues/37532),
[@&#8203;antonipp](https://redirect.github.com/antonipp))
- Fix the possible race condition caused by async update from aws to
instance map in issue
[#&#8203;36428](https://redirect.github.com/cilium/cilium/issues/36428)
(Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37650](https://redirect.github.com/cilium/cilium/issues/37650),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))
- Fix traffic not getting masqueraded with wildcard devices or
egress-masquerade-interfaces when enable-masquerade-to-route-source flag
is set. (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37450](https://redirect.github.com/cilium/cilium/issues/37450),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))
- fix(helm): multiPoolPreAllocation fix conditional avoid null (Backport
PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37585](https://redirect.github.com/cilium/cilium/issues/37585),
[@&#8203;acelinkio](https://redirect.github.com/acelinkio))
- fix: cilium-config configmap was incorrectly resulting in values like
`2.09715…2e+06` instead of `2097152` (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37236](https://redirect.github.com/cilium/cilium/issues/37236),
[@&#8203;dee-kryvenko](https://redirect.github.com/dee-kryvenko))
- fix: duplicate label maps in helm chart templates and add missing
commonlabels (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37693](https://redirect.github.com/cilium/cilium/issues/37693),
[@&#8203;cmergenthaler](https://redirect.github.com/cmergenthaler))
- Fix: Resolved an issue causing ArgoCD to report constant out-of-sync
status due to the hasKey check in Helm. The condition has been
simplified to ensure proper synchronization. No functional changes to
deployments. (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37536](https://redirect.github.com/cilium/cilium/issues/37536),
[@&#8203;nicl-dev](https://redirect.github.com/nicl-dev))
- Fixed Envoy JSON log format conversion in Helm, preventing crashes.
(Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37656](https://redirect.github.com/cilium/cilium/issues/37656),
[@&#8203;kahirokunn](https://redirect.github.com/kahirokunn))
- helm: fix large number handling (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37670](https://redirect.github.com/cilium/cilium/issues/37670),
[@&#8203;justin0u0](https://redirect.github.com/justin0u0))
- hubble: escape terminal special characters from observe output
(Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37401](https://redirect.github.com/cilium/cilium/issues/37401),
[@&#8203;devodev](https://redirect.github.com/devodev))
- hubble: fix locking of hubble metrics registry for dynamically
configured metrics (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37923](https://redirect.github.com/cilium/cilium/issues/37923),
[@&#8203;marseel](https://redirect.github.com/marseel))
- identity: fix bug where fromNodes/toNodes could be used to allow
custom endpoint (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;36657](https://redirect.github.com/cilium/cilium/issues/36657),
[@&#8203;oblazek](https://redirect.github.com/oblazek))
- ipam/multi-pool: Periodically perform pool maintenance (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37895](https://redirect.github.com/cilium/cilium/issues/37895),
[@&#8203;gandro](https://redirect.github.com/gandro))
- operator: explicit controller-runtime controller names to avoid naming
conflicts (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37606](https://redirect.github.com/cilium/cilium/issues/37606),
[@&#8203;mhofstetter](https://redirect.github.com/mhofstetter))
- operator: Fix duplicate configurations (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37293](https://redirect.github.com/cilium/cilium/issues/37293),
[@&#8203;joestringer](https://redirect.github.com/joestringer))
- Restore aggregration of network trace events for Egress Gateway reply
traffic on the gateway node (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;38029](https://redirect.github.com/cilium/cilium/issues/38029),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Updated Gateway API and GAMMA processing to remove incorrect behavior
when both parentRefs were present. (Backport PR
[#&#8203;38154](https://redirect.github.com/cilium/cilium/issues/38154),
Upstream PR
[#&#8203;38143](https://redirect.github.com/cilium/cilium/issues/38143),
[@&#8203;youngnick](https://redirect.github.com/youngnick))
- Workaround for iptables 1.8.10, used in OpenShift 4.16, 4.17 and 4.18,
returning a wrong error message `iptables: Incompatible with this
kernel` to `iptables -n -L CHAIN` when the chain does not exist. This
prevents iptables configuration and induced unnecessary loops and log
messages. (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37749](https://redirect.github.com/cilium/cilium/issues/37749),
[@&#8203;fgiloux](https://redirect.github.com/fgiloux))

**CI Changes:**

- .github: Remove misleading step from ipsec workflow (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37681](https://redirect.github.com/cilium/cilium/issues/37681),
[@&#8203;joestringer](https://redirect.github.com/joestringer))
- .github: s/enbaled/enabled/ (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37449](https://redirect.github.com/cilium/cilium/issues/37449),
[@&#8203;chansuke](https://redirect.github.com/chansuke))
- bgpv1: wait for watchers to be ready in tests (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37884](https://redirect.github.com/cilium/cilium/issues/37884),
[@&#8203;harsimran-pabla](https://redirect.github.com/harsimran-pabla))
- CI: GKE backslash missing disable insecure kubelet (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37850](https://redirect.github.com/cilium/cilium/issues/37850),
[@&#8203;auriaave](https://redirect.github.com/auriaave))
- CI: GKE, disable insecure kubelet readonly port (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37844](https://redirect.github.com/cilium/cilium/issues/37844),
[@&#8203;auriaave](https://redirect.github.com/auriaave))
- ci: switch to monitor aggregation medium (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;38036](https://redirect.github.com/cilium/cilium/issues/38036),
[@&#8203;marseel](https://redirect.github.com/marseel))
- gh: ci-e2e-upgrade: Add encryption leak checks for wireguard (Backport
PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37551](https://redirect.github.com/cilium/cilium/issues/37551),
[@&#8203;jschwinger233](https://redirect.github.com/jschwinger233))
- gh: ipsec-e2e: add concurrency for connectivity tests (Backport PR
[#&#8203;37925](https://redirect.github.com/cilium/cilium/issues/37925),
Upstream PR
[#&#8203;37891](https://redirect.github.com/cilium/cilium/issues/37891),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- gh: update naming for bpftrace leak detection script (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37865](https://redirect.github.com/cilium/cilium/issues/37865),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))

**Misc Changes:**

- always render enable-hubble in the Cilium configmap (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37703](https://redirect.github.com/cilium/cilium/issues/37703),
[@&#8203;kaworu](https://redirect.github.com/kaworu))
- bpf: Add option to utilize core maps via BPF_F_NO_COMMON_LRU (Backport
PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;38037](https://redirect.github.com/cilium/cilium/issues/38037),
[@&#8203;borkmann](https://redirect.github.com/borkmann))
- bpf: minor clean-ups for the ENI symmetric routing feature (Backport
PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37379](https://redirect.github.com/cilium/cilium/issues/37379),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- chore(deps): update all github action dependencies (v1.17)
([#&#8203;37950](https://redirect.github.com/cilium/cilium/issues/37950),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.17)
([#&#8203;37944](https://redirect.github.com/cilium/cilium/issues/37944),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.17)
([#&#8203;38048](https://redirect.github.com/cilium/cilium/issues/38048),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update dependency cilium/cilium-cli to v0.17.0 (v1.17)
([#&#8203;37793](https://redirect.github.com/cilium/cilium/issues/37793),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update dependency cilium/cilium-cli to v0.18.0 (v1.17)
([#&#8203;37949](https://redirect.github.com/cilium/cilium/issues/37949),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update dependency cilium/cilium-cli to v0.18.2 (v1.17)
([#&#8203;38057](https://redirect.github.com/cilium/cilium/issues/38057),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.23.7 (v1.17)
([#&#8203;37996](https://redirect.github.com/cilium/cilium/issues/37996),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5
\[security] (v1.17)
([#&#8203;37833](https://redirect.github.com/cilium/cilium/issues/37833),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to
v1.31.5-1741765102-efed3defcc70ab5b263a0fc44c93d316b846a211 (v1.17)
([#&#8203;38148](https://redirect.github.com/cilium/cilium/issues/38148),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- cilium-dbg: output parentIfIndex in bpf endpoint list (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37398](https://redirect.github.com/cilium/cilium/issues/37398),
[@&#8203;Mahdi-BZ](https://redirect.github.com/Mahdi-BZ))
- cilium: Allow to configure tunnel source port range (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37777](https://redirect.github.com/cilium/cilium/issues/37777),
[@&#8203;borkmann](https://redirect.github.com/borkmann))
- cilium: Pull in vxlan netlink Go fix and uncomment assertion in test
(Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37808](https://redirect.github.com/cilium/cilium/issues/37808),
[@&#8203;borkmann](https://redirect.github.com/borkmann))
- docs: complete load balancer service manifest in kubeproxy-free
(Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37466](https://redirect.github.com/cilium/cilium/issues/37466),
[@&#8203;ybelleguic](https://redirect.github.com/ybelleguic))
- docs: fix broken links (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37995](https://redirect.github.com/cilium/cilium/issues/37995),
[@&#8203;nueavv](https://redirect.github.com/nueavv))
- docs: masquerading: mention that BPF masq also pulls in BPF
Host-Routing (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37604](https://redirect.github.com/cilium/cilium/issues/37604),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- docs: use latest for rtd theme commit with fixed version selector
(Backport PR
[#&#8203;37614](https://redirect.github.com/cilium/cilium/issues/37614),
Upstream PR
[#&#8203;37421](https://redirect.github.com/cilium/cilium/issues/37421),
[@&#8203;ayuspin](https://redirect.github.com/ayuspin))
- envoy: remove duplicated service/endpointslice informers when
envoyConfig is enabled (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37683](https://redirect.github.com/cilium/cilium/issues/37683),
[@&#8203;marseel](https://redirect.github.com/marseel))
- Fix API generation and add trusted dependencies to renovate config
(Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;36957](https://redirect.github.com/cilium/cilium/issues/36957),
[@&#8203;aanm](https://redirect.github.com/aanm))
- Fix API generation and add trusted dependencies to renovate config
(Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;36957](https://redirect.github.com/cilium/cilium/issues/36957),
[@&#8203;aanm](https://redirect.github.com/aanm))
- Fix helm value for IPAM Multi-Pool (Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37963](https://redirect.github.com/cilium/cilium/issues/37963),
[@&#8203;saintdle](https://redirect.github.com/saintdle))
- fqdn/dnsproxy: use `netip.Addr` for `DNSProxy.usedServers` (Backport
PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;37985](https://redirect.github.com/cilium/cilium/issues/37985),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- gha: Update the helm flag for TLS related test (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37428](https://redirect.github.com/cilium/cilium/issues/37428),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- ipcache: Slightly optimize calls to fetch tunnel and encrypt metadata
(Backport PR
[#&#8203;38104](https://redirect.github.com/cilium/cilium/issues/38104),
Upstream PR
[#&#8203;38021](https://redirect.github.com/cilium/cilium/issues/38021),
[@&#8203;christarazi](https://redirect.github.com/christarazi))
- labels: fix TestNewFrom test (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37846](https://redirect.github.com/cilium/cilium/issues/37846),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Moves Unix socket listener configuration to a new file specifically
for Linux builds. (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37399](https://redirect.github.com/cilium/cilium/issues/37399),
[@&#8203;ritwikranjan](https://redirect.github.com/ritwikranjan))
- operator: Explicitly init the FQDN regex LRU cache (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37366](https://redirect.github.com/cilium/cilium/issues/37366),
[@&#8203;christarazi](https://redirect.github.com/christarazi))
- pkg/hive: always use default logger when decorating cells (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37636](https://redirect.github.com/cilium/cilium/issues/37636),
[@&#8203;aanm](https://redirect.github.com/aanm))
- policy: Skip iteration when proxy port priority is zero (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37422](https://redirect.github.com/cilium/cilium/issues/37422),
[@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
- Remove grpc-health-probe binary from the Hubble Relay image as it is
no longer used (Backport PR
[#&#8203;37904](https://redirect.github.com/cilium/cilium/issues/37904),
Upstream PR
[#&#8203;37806](https://redirect.github.com/cilium/cilium/issues/37806),
[@&#8203;rolinh](https://redirect.github.com/rolinh))
- Update Hubble UI to v0.13.2 which contains security fixes, add the
missing traffic direction in the flow table, and enhance the home
namespace list. See
[v0.13.2](https://redirect.github.com/cilium/hubble-ui/releases/tag/v0.13.2)
for more details (Backport PR
[#&#8203;37742](https://redirect.github.com/cilium/cilium/issues/37742),
Upstream PR
[#&#8203;37631](https://redirect.github.com/cilium/cilium/issues/37631),
[@&#8203;yannikmesserli](https://redirect.github.com/yannikmesserli))
- use runtime image set by env var action in build and lint (Backport PR
[#&#8203;37648](https://redirect.github.com/cilium/cilium/issues/37648),
Upstream PR
[#&#8203;37253](https://redirect.github.com/cilium/cilium/issues/37253),
[@&#8203;Artyop](https://redirect.github.com/Artyop))

**Other Changes:**

- \[v1.17] Revert "Fix dropped NodePort traffic to hostNetwork backends
with Geneve+DSR"
([#&#8203;38101](https://redirect.github.com/cilium/cilium/issues/38101),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Backport set runtime action 1.17
([#&#8203;37854](https://redirect.github.com/cilium/cilium/issues/37854),
[@&#8203;Artyop](https://redirect.github.com/Artyop))
- gha: Update GatewayAPI conformance report
([#&#8203;37671](https://redirect.github.com/cilium/cilium/issues/37671),
[@&#8203;sayboras](https://redirect.github.com/sayboras))
- install: Update image digests for v1.17.1
([#&#8203;37580](https://redirect.github.com/cilium/cilium/issues/37580),
[@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\[bot])
- v1.17: gh/workflows: Remove conformance-externalworkloads
([#&#8203;37738](https://redirect.github.com/cilium/cilium/issues/37738),
[@&#8203;brb](https://redirect.github.com/brb))

#### Docker Manifests

##### cilium


`quay.io/cilium/cilium:v1.17.2@&#8203;sha256:3c4c9932b5d8368619cb922a497ff2ebc8def5f41c18e410bcc84025fcd385b1`

`quay.io/cilium/cilium:stable@sha256:3c4c9932b5d8368619cb922a497ff2ebc8def5f41c18e410bcc84025fcd385b1`

##### clustermesh-apiserver


`quay.io/cilium/clustermesh-apiserver:v1.17.2@&#8203;sha256:981250ebdc6e66e190992eaf75cfca169113a8f08d5c3793fe15822176980398`

`quay.io/cilium/clustermesh-apiserver:stable@sha256:981250ebdc6e66e190992eaf75cfca169113a8f08d5c3793fe15822176980398`

##### docker-plugin


`quay.io/cilium/docker-plugin:v1.17.2@&#8203;sha256:a599893f1fc76fc31afad2bbb73af7e7f618adbf02043b2098fafeca4adf551c`

`quay.io/cilium/docker-plugin:stable@sha256:a599893f1fc76fc31afad2bbb73af7e7f618adbf02043b2098fafeca4adf551c`

##### hubble-relay


`quay.io/cilium/hubble-relay:v1.17.2@&#8203;sha256:42a8db5c256c516cacb5b8937c321b2373ad7a6b0a1e5a5120d5028433d586cc`

`quay.io/cilium/hubble-relay:stable@sha256:42a8db5c256c516cacb5b8937c321b2373ad7a6b0a1e5a5120d5028433d586cc`

##### operator-alibabacloud


`quay.io/cilium/operator-alibabacloud:v1.17.2@&#8203;sha256:7cb8c23417f65348bb810fe92fb05b41d926f019d77442f3fa1058d17fea7ffe`

`quay.io/cilium/operator-alibabacloud:stable@sha256:7cb8c23417f65348bb810fe92fb05b41d926f019d77442f3fa1058d17fea7ffe`

##### operator-aws


`quay.io/cilium/operator-aws:v1.17.2@&#8203;sha256:955096183e22a203bbb198ca66e3266ce4dbc2b63f1a2fbd03f9373dcd97893c`

`quay.io/cilium/operator-aws:stable@sha256:955096183e22a203bbb198ca66e3266ce4dbc2b63f1a2fbd03f9373dcd97893c`

##### operator-azure


`quay.io/cilium/operator-azure:v1.17.2@&#8203;sha256:455fb88b558b1b8ba09d63302ccce76b4930581be89def027184ab04335c20e0`

`quay.io/cilium/operator-azure:stable@sha256:455fb88b558b1b8ba09d63302ccce76b4930581be89def027184ab04335c20e0`

##### operator-generic


`quay.io/cilium/operator-generic:v1.17.2@&#8203;sha256:81f2d7198366e8dec2903a3a8361e4c68d47d19c68a0d42f0b7b6e3f0523f249`

`quay.io/cilium/operator-generic:stable@sha256:81f2d7198366e8dec2903a3a8361e4c68d47d19c68a0d42f0b7b6e3f0523f249`

##### operator


`quay.io/cilium/operator:v1.17.2@&#8203;sha256:697a7e6c4765ef053d33dd2d9d7f14642c01dfa7333ad7902de7ca5afbf3b419`

`quay.io/cilium/operator:stable@sha256:697a7e6c4765ef053d33dd2d9d7f14642c01dfa7333ad7902de7ca5afbf3b419`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTkuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE5OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2025-03-15 19:28:13 +01:00
..
2025-02-03 00:13:01 +00:00

clustertool

GitHub release (release name instead of tag name) GitHub issues

A helper tool to help building TrueCharts helm charts
· Report Bug · Request Feature

About The Project

CLA: Before contributing

Our CLA applies to this repository as well.

Please ensure it's signed before submitting a PR: https://cla-assistant.io/truecharts/charts

We use the truecharts/charts link, as CLA assistant does not allow for creating a custom link to a private repository. However, they all sign the same CLA that applies project-wide

License

This tool is released as "All Rights reserved" and hence it's code should NOT be shared. This includes binaries that are modified to remove TrueCharts specific code, unless approved by Kjeld Schouten "The Owner". Those that are invited to have access to repository, are free to edit and use this code for testing purposes, as long as its sourcecode is not shared or saved in-the-cloud.