Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
No build reason found for SLE-Module-Legacy:s390x
home:tbadm
cilium-cli
cilium-cli.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File cilium-cli.changes of Package cilium-cli
------------------------------------------------------------------- Wed Oct 02 08:02:15 UTC 2024 - obs@tbadm.net - Update to version 0.16.19: * Prepare for v0.16.19 release * chore(deps): update dependency go to v1.23.2 * chore(deps): update docker/build-push-action action to v6.9.0 * go.mod: pick up github.com/cilium/cilium v1.17.0-pre.1 * Change default entrypoint for both usecases * Prepare for #2755 - Dockerfile only * chore(deps): update dependency cilium/cilium to v1.16.2 * chore(deps): update all github action dependencies * github: Add a workflow to close stale issues and PRs * chore(deps): update dependency ubuntu to v24 * github: Increase hubble-event-queue-size * multicluster: correctly specify the dst context to clustermes connect * Update stable release to v0.16.18 * Prepare for v0.16.18 release * chore(deps): update azure/login action to v2.2.0 * release: Install curl * chore(deps): update ubuntu:24.04 docker digest to dfc1087 * github: Remove unused files * vendor: Remove gops dependency * chore(deps): update ubuntu:24.04 docker digest to 56a8952 * action: Run version command with --client flag * Update stable release to v0.16.17 * Prepare for v0.16.17 release * chore(deps): update docker.io/library/golang:1.23.1-alpine3.19 docker digest to e0ea2a1 * chore(deps): update docker/dockerfile docker tag to v1.10 * chore(deps): update golang:1.23.1-alpine3.19 docker digest to e0ea2a1 * vendor: Pick up github.com/cilium/cilium v1.17.0-pre.0 * chore(deps): update golangci/golangci-lint docker tag to v1.61.0 * chore(deps): update golang docker tag to v1.23.1 * chore(deps): update go to v1.23.1 * chore(deps): update actions/upload-artifact action to v4.4.0 * github: Remove "Push to Loki" workflow * make: set set latest stable version based on stable.txt * chore(deps): update golangci/golangci-lint docker tag to v1.60.3 * chore(deps): update google-github-actions/auth action to v2.1.5 * build: fix CLIVersion ldflag ref * chore(deps): update golangci/golangci-lint docker tag to v1.60.2 * chore(deps): update go to v1.23.0 * CODEOWNERS: Assign vendor/ to cilium-cli-maintainers * Prepare for v0.16.16 release * chore(deps): update all github action dependencies * chore(deps): update all github action dependencies * chore(deps): update golang-images * chore(deps): update golangci/golangci-lint docker tag to v1.60.1 * chore(deps): update dependency cilium/cilium to v1.16.1 * chore(deps): update go to v1.22.6 * chore(deps): update docker/build-push-action action to v6.6.0 * chore(deps): update actions/upload-artifact action to v4.3.5 * Unlock the repo * Remove unused files * Use CLI from cilium/cilium repo * Pick up the latest cilium from main branch * Update CODEOWNERS * chore(deps): update golang docker tag to v1.22.6 * Update stable release to v0.16.15 * Prepare for v0.16.15 release * action: Handle multiple cilium-cli directories * Lock cilium-cli repo * Update stable release to v0.16.14 * Prepare for v0.16.14 release * externalworkloads: Set cluster.id * {externalworkloads,multicluster}: Shorten cluster names * chore(deps): update dependency cilium/cilium to v1.16.0 * chore(deps): update docker/setup-buildx-action action to v3.6.1 * chore(deps): update golangci/golangci-lint-action action to v6.1.0 * connectivity: use TestNamespace and ExternalDeploymentPort params * connectivity: Support multiple conditions * chore(deps): update docker.io/coredns/coredns docker tag to v1.11.3 * chore(deps): update docker/setup-buildx-action action to v3.6.0 * kind: Pick up the latest kindest/node image * Adding multicast subcommand * sysdump: Gather gops from cilium-operator * junit: collector fix * Pick up kindest/node:v1.21.10 * fix(deps): update github.com/cilium/charts digest to 2a1e5b8 * fix(deps): update module github.com/cilium/cilium to v1.16.0 * chore(deps): update all github action dependencies * chore(deps): update golang:1.22.5-alpine3.19 docker digest to 48aac60 * chore(deps): update docker.io/library/golang:1.22.5-alpine3.19 docker digest to 48aac60 * connectivity: Fix ineffective version check in BGP tests * Assign release-related files to cilium-cli-maintainers * connectivity: single JUnit report * chore(deps): update golang:1.22.5-alpine3.19 docker digest to 653cab0 * chore(deps): update softprops/action-gh-release action to v2.0.8 * Update CONTRIBUTING.md * sysdump: fix file separator * chore(deps): update docker/build-push-action action to v6.4.1 * fix(deps): update github.com/cilium/charts digest to 2c16e87 * fix(deps): update module github.com/cilium/cilium to v1.16.0-rc.2 * connectivity: Assert BGP timer intervals in BGP connectivity tests * connectivity: skip local-redirect-policy-with-node-dns * connectivity: add local-redirect-policy-with-node-dns test * connectivity: add LRP with node-local-dns test scenario * connectivity: add node local DNS feature detection * connectivity: use ExternalDeploymentPort for echoExternalNode headless svc * connectivity: run LRP test with 1.16.0 or higher * connectivity: skip LRP test resources creation if already exists * ci: Set up node local DNS in the kind workflow * connectivity: test namespace suffix * connectivity: perf deployment improved * chore(deps): update docker/build-push-action action to v6.4.0 * golangci-lint: Add errorlint * Replace io.ReadAll with safeio.ReadAllLimit * Replace timer.After with inctimer.After * Replace sync with github.com/cilium/cilium/pkg/lock * chore(deps): update docker/dockerfile docker tag to v1.9 * flags: Use option.NewNamedMapOptions * connectivity: echo-ingress-l7-via-hostport-with-encryption only runs with cilium 1.16.0 or newer. * vendor: Remove gopkg.in/check.v1 dependency * connectivity: disrupt deployment improved * connectivity: Add echo-ingress-l7-via-hostport-with-encryption * connectivity/echo-ingress-l7: Make expectation a function * chore(deps): update dependency cilium/cilium to v1.15.7 * fix(deps): update github.com/cilium/charts digest to 3eef298 * Update stable release to v0.16.13 * Prepare for v0.16.13 release * chore(deps): update actions/setup-go action to v5.0.2 * fix(deps): update module helm.sh/helm/v3 to v3.15.3 * clustermesh: fix deprecated cloud internal LoadBalancer annotations * clustermesh: explicitly validate service type, and forbid ClusterIP * clustermesh: fix remote clusters configuration reset upon deactivation * Add --disable-check flag to upgrade command * connectivity: Add Port Range Tests * Update stable release to v0.16.12 * Prepare for v0.16.12 release * CODEOWNERS: Assign BGP/FRR source files to sig-bgp * connectivity: Introduce BGP CP connectivity tests * chore(deps): update all github action dependencies * chore(deps): update go to v1.22.5 * kvstoremesh: don't disable by default * chore(deps): update docker/setup-buildx-action action to v3.4.0 * chore(deps): update golang:1.22.5-alpine3.19 docker digest to 0642d4f * fix(deps): update all go dependencies main * chore(deps): update golang docker tag to v1.22.5 * chore(deps): update docker/build-push-action action to v6.3.0 * Add --disable-check flag back * action: Use github.action_path when accessing cilium.sh * connectivity: Label test namespaces * fix(deps): update module github.com/cilium/cilium to v1.16.0-rc.1 * Update stable release to v0.16.11 * Dockerfile: Fix a warning * Simplify Kind workflow * Prepare for v0.16.11 release * ci: speedup workflows * sysdump: derive operator namespace from agent namespace if specified * sysdump: fix no Cilium output if operator was not detected * fix(deps): update all go dependencies main * image: Push Docker image on tag push * Remove cilium-cli-test-job-chart * aks: Temporarily disable Hubble Relay * fix(deps): update module github.com/cilium/cilium to v1.16.0-rc.0 * multicluster: Run cilium-cli inside a container * chore(deps): update docker/build-push-action action to v6.2.0 * fix: ExternalTargetCANamespace name * eks: Run cilium-cli inside a container * connectivity: Ensure Hubble Relay is connected to all the nodes * external-workloads: Run cilium-cli inside a container * gke: Run cilium-cli inside a container * gha: fix cluster names in kind workflow * autodetect: try to sanitize autodetected cluster name * azure: directly retrieve cluster name from kubeconfig * action: Add an option to run cilium-cli inside a container * connectivity: Add pod-to-pod-no-frag * connectivity: Extend PingCommand to accept extra args * chore(deps): pin ubuntu docker tag to 2e863c4 * connectivity: refactor initClients * connectivity: introduce detectSingleNode method * Dockerfile: Install aws / azure / gcloud CLIs * chore(deps): update docker/build-push-action action to v6.1.0 * chore(deps): update all github action dependencies * chore(deps): update golang:1.22.4-alpine3.19 docker digest to c46c460 * chore(deps): update docker.io/library/golang:1.22.4-alpine3.19 docker digest to c46c460 * chore(deps): update quay.io/cilium/alpine-curl docker tag to v1.10.0 * chore(deps): update docker.io/library/golang:1.22.4-alpine3.19 docker digest to e43a04e * chore(deps): update golang-images * gh/workflows: Fix display img digest step * connectivity: Display last assertion error on failure * connectivity: Extend pod-to-pod encryption tests * chore(deps): update docker/build-push-action action to v6 * fix(deps): update all go dependencies main * chore(deps): update docker.io/library/golang:1.22.4-alpine3.19 docker digest to d9b1f00 * chore(deps): update docker/build-push-action action to v5.4.0 * chore(deps): update golangci/golangci-lint docker tag to v1.59.1 * chore(deps): update golang-images * Pick up the latest cilium/cilium from main branch * chore(deps): update dependency cilium/cilium to v1.15.6 * chore(deps): update actions/checkout action to v4.1.7 * gha: increase disk size for GKE clusters * fix(deps): update github.com/cilium/charts digest to 4be5659 * Update stable release to v0.16.10 * Prepare for v0.16.10 release * fix(deps): update module golang.org/x/term to v0.21.0 * fix(deps): update all go dependencies main * connectivity: Introduce local redirect policy tests * connectivity: Add ResultCurlTimeout * connectivity: Add a scenario getter * features: Add LocalRedirectPolicy * connectivity: add egress-gateway-with-l7-policy test * connectivity: add pod to external with DNS case in EGW scenario * chore(deps): update golang docker tag to v1.22.4 * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 25e9fcb * Update go.mod * fix: properly count wrapped lines in status output in --wait mode * chore(deps): update go to v1.22.4 * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 082a03d * fix: conn tests JUnit file name * Update stable release to v0.16.9 * Prepare for v0.16.9 release * fix(deps): update github.com/cilium/charts digest to f365292 * clustermesh: fix status retrieval on v1.14 with kvstoremesh enabled * Update stable release to v0.16.8 * Prepare for v0.16.8 release * chore(deps): update azure/login action to v2.1.1 * chore(deps): update docker/login-action action to v3.2.0 * chore(deps): update golangci/golangci-lint docker tag to v1.59.0 * fix: printer poll logic * cleanup: unused methods and fields removed. * fix: conn test junit file name * feat: conn test concurrent logger * fix: conn tests output improved * fix(deps): update module helm.sh/helm/v3 to v3.15.1 * chore(deps): update golangci/golangci-lint docker tag to v1.58.2 * fix(deps): update module github.com/cilium/charts to v0.0.0-20240517144447-a8ec8771aab8 * sysdump: don't write extension twice in clustermesh debug files * encrypt: broken IPsec algo removed * hubble: Replace deprecated grpc.DialContext by grpc.NewClient * fix(deps): update all go dependencies main * chore(deps): update golangci/golangci-lint docker tag to v1.58.1 * chore(deps): update golangci/golangci-lint-action action to v6 * chore(deps): update all github action dependencies * chore(deps): update docker.io/library/golang:1.22.3-alpine3.19 docker digest to f1fe698 * chore(deps): update dependency kubernetes-sigs/kind to v0.23.0 * chore(deps): update golang:1.22.3-alpine3.19 docker digest to f1fe698 * clustermesh: setup fix and CI * fix: EchoServerHostPort moved into Parameters * fix: test templates parsing * ci: kind workflow updated with test-concurrency * feat: MultiError implementation * fix: typo fix * feat: policy mutex * feat: conn test concurrent run * feat: test-concurrency conn test param * chore(deps): update dependency cilium/cilium to v1.15.5 * clustermesh: reset remote clusters configuration upon disconnection * fix(deps): update module github.com/cilium/charts to v0.0.0-20240507142034-8e0b9125ca4a * chore(deps): update go to v1.22.3 * clustermesh: output tips in case of errors in clustermesh status * clustermesh: output kvstoremesh status as part of clustermesh status * sysdump: collect clustermesh-apiserver profiling data * k8s: add method to proxy connection to container's TCP port * sysdump: skip metric/gops collection if container does not exist * sysdump: collect clustermesh-apiserver gops stats * sysdump: collect clustermesh-related debug information * sysdump: drop reference to clustermesh from metric collection errors * sysdump: uniform operator/clustermesh metrics file name * fix: Azure BYOCNI workflow * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 9bc27a7 * chore(deps): update golang docker tag to v1.22.3 * Display stderr when ExecInPod action fails. * chore(deps): update golangci/golangci-lint-action action to v5.3.0 * chore(deps): update softprops/action-gh-release action to v2.0.5 * golangci: remove deprecated go version properties * Remove cilium/hubble dependency * RELEASE.md: make sure to push correct release branch * Update stable release to v0.16.7 ------------------------------------------------------------------- Mon May 13 06:53:01 UTC 2024 - obs@tbadm.net - Update to version 0.16.7: * Prepare for v0.16.7 release * connectivity: cover echo-{same,other}-node services in ingress tests * chore(deps): update golangci/golangci-lint-action action to v5.2.0 * fix(deps): update all go dependencies main * chore(deps): update actions/setup-go action to v5.0.1 * Update stable release to v0.16.6 * Prepare for v0.16.6 release * connectivity: Delete test-conn-disrupt after test run * connectivity: Use separate context for finalization * connectivity: Pass context.Context to finalizers * chore(deps): update actions/checkout action to v4.1.4 * chore(deps): update golangci/golangci-lint-action action to v5.1.0 * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 735f3e2 * k8s: remove unused filter functionality from k8sclient.CiliumLogs * Pin test-connection-disruption using multi-platform image SHA * chore(deps): update docker/dockerfile:1.7 docker digest to a57df69 * chore(deps): update actions/download-artifact action to v4.1.7 * chore(deps): update golangci/golangci-lint-action action to v5 * fix(deps): update github.com/cilium/charts digest to d93188b * Update stable release to v0.16.5 * Prepare for v0.16.5 release * chore(deps): update helm/kind-action action to v1.10.0 * sysdump: Check --namespace flag for cilium-operator * chore(deps): update all github action dependencies * chore(deps): update dependency cilium/cilium to v1.15.4 * chore(deps): update module golang.org/x/net to v0.23.0 [security] * Move the test namespace deletion logic to the install package * chore(deps): update all github action dependencies * feat: split conn tests into chunks * sysdump: Clarify sysdump worker-count defaults to the number of available CPUs. * Add zip binary to release environment * ci: Use zip output for windows releases * fix(deps): update module github.com/prometheus/common to v0.53.0 * fix(deps): update module github.com/cilium/hubble to v0.13.3 * fix(deps): update all go dependencies main * chore(deps): update azure/login action to v2.1.0 * chore(deps): update docker/setup-buildx-action action to v3.3.0 * connectivity test: avoid segfault if no agent pods are found * connectivity: add endpointslice clustermesh sync test * sysdump: Capture hubble cert-manager certificates * sysdump: Capture hubble-generate-certs cronjob and pod logs * connectivity: configure endpoint selector for entity-cluster CNP * connectivity: configure test-conn-disrupt CPU requests * connectivity: bump test-conn-disrupt to v0.0.14 * connectivity: make test-conn-disrupt image configurable * fix(deps): update all go dependencies main * connectivity: introduce host firewall tests * Revert "Lock the connectivity command" * Revert "Use connectivity package from cilium/cilium" * feat: encryption status output enriched with IPsec details * fix(deps): update github.com/cilium/charts digest to 7815d99 * chore(deps): update go to v1.22.2 * sysdump: Collect helm metadata * Use connectivity package from cilium/cilium * chore(deps): update golang docker tag to v1.22.2 * fix(deps): update module github.com/cilium/cilium to v1.16.0-pre.1 * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to cb6aeb5 * chore(deps): update golangci/golangci-lint docker tag to v1.57.2 * k8s: Remove Tetragon client * Pin github.com/osrg/gobgp/v3 to v3.23.0 * fix(deps): update github.com/cilium/charts digest to 7ea270c * Update stable release to v0.16.4 * fix(deps): update module github.com/prometheus/common to v0.51.1 * Lock the connectivity command * Prepare for v0.16.4 release * chore(deps): update golangci/golangci-lint docker tag to v1.57.1 * helm: fix KPR autodetection value * errors: add [no-error-logs] exception for issue caused by fqdn bug. * connectivity: add support for regex based log exceptions. * chore(deps): update dependency cilium/cilium to v1.15.3 * refactor: Remove unused constants in defaults.go. * refactor: Move default Helm release name to sysdump package. * style: Reorganize parameters struct to enhance readability. * fix: Add WaitDuration from defaults for hubble enable|disable for cilium install|uninstall --wait. * feat: Add helmReleaseName to Hubble uninstall pre-phase of the core uninstall. * feat: Add helmReleaseName to hubble disable parameters. * style: Improve log message formatting. Make consistent/conventional. * feat: Add customizable Helm release name for Cilium * ci: fix installation on AKS * ci: avoid overlapping pod and service CIDRs on AKS * chore(deps): update docker.io/library/golang:1.22.1-alpine3.19 docker digest to 0466223 * status: Add --interactive flag * connectivity: explicitly wait for ingress service creation * connectivity: don't pre-populate the ingress service map * renovate:: Pick up github.com/cilium/cilium prereleases * connectivity: fix flow validation with fully-qualified DNS names * Ignore "Unsupported L2 protocol" to known drops * Improve Makefile * defaults: Move Version and HelmRepository from const to var * gha: configure fully-qualified DNS names as external targets * connectivity: configure fully-qualified DNS names as external targets * connectivity: configure Host header for fully-qualified DNS names * connectivity: fix invalid CNP name with fully-qualified DNS names * connectivity: remove domain references from FQDN policy name * chore(deps): update module github.com/docker/docker to v25.0.5+incompatible [security] * fix(deps): update module github.com/prometheus/common to v0.51.0 * connectivity: don't hard-code ingress service NodePorts * tests: Add exceptions for error logs check * Update stable release to v0.16.3 * Prepare for v0.16.3 release * chore(deps): update golang:1.22.1-alpine3.19 docker digest to 0466223 * install: convert --nodes-without-cilium flag to boolean * helm: configure nodes without cilium affinity on install and upgrade * chore(deps): update golang:1.22.1-alpine3.19 docker digest to fa4add5 * refactor: Move logging outside internal * Prepare for v0.16.2 release * chore(deps): update all github action dependencies * fix(deps): update github.com/cilium/charts digest to a5bec49 * fix(deps): update module helm.sh/helm/v3 to v3.14.3 * Revert "ingress: Update backend service for Ingress" * gha: increase Multicluster timeout * renovate: Don't pick up new Go patch versions in go.mod * Revert "chore(deps): update dependency go to v1.22.1" * Prepare for v0.16.1 release * fix(deps): update github.com/cilium/charts digest to 724231f * chore(deps): update dependency cilium/cilium to v1.15.2 * fix(deps): update module github.com/cilium/hubble to v0.13.2 * chore(deps): update docker/login-action action to v3.1.0 * chore(deps): update dependency go to v1.22.1 * refactor: Move Hooks to the api package * refactor: Move sniff under connectivity * Store namespace and k8sClient in the command context * Add InitializeCommand hook * chore(deps): update softprops/action-gh-release action to v2.0.4 * connectivity: collect sysdump from all clusters on failure * gha: replace remaining references to deprecated KPR settings * connectivity: fix KPR feature probing * helm: improve KPR autodetection logic * helm: uniform retrieval of nested helm value * helm: remove bpf.masquerade autodetection logic * helm: do not care for unsupported Cilium versions in values generation * helm: remove unused fields/parameters from getHelmValues logic * chore(deps): update go to v1.22.1 * chore(deps): update softprops/action-gh-release action to v2 * fix(deps): update all go dependencies main * fix(deps): update all go dependencies main * Don't depend on github.com/mholt/archiver * chore(deps): update azure/login action to v2 * ingress: Update backend service for Ingress * tetragon: remove tetragon CR code * tetragon: use ListUnstructured for tetragon CRs * sysdump: gather tetragon pod logs and configmap * chore(deps): update docker/build-push-action action to v5.2.0 * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 8425131 * Update stable release to v0.16.0 * chore(deps): update golang docker tag to v1.22.1 * chore(deps): update golang-images * fix: update ldflags for local-release * refactor: Move internal/cli to cli/ * Prepare for v0.16.0 release * Add error log check exception for leader election errors. * golangci: enable stylecheck linter for duplicate imports * Remove duplicated imports * Connectivity test builder component implemented. * Move the CLI version string to the default package * chore(deps): update actions/download-artifact action to v4.1.4 * sysdump: Export Hooks and InitSysdumpFlags * sniffer: always dump captured packets in assert mode * vendor: Pick up cilium/cilium v1.16.0-pre.0 * action: Add go-mod-directory parameter * fix(deps): update module github.com/stretchr/testify to v1.9.0 * refactor: Move ctrlcreader.go under /k8s/internal/ * fix(deps): update module github.com/go-openapi/strfmt to v0.22.1 * fix(deps): update module github.com/prometheus/common to v0.49.0 * Remove --cluster-name flag * refactor: Remove internal/utils/utils.go * chore(deps): update all github action dependencies * Remove golang.org/x/mod/semver dependency * helm: Remove Get and GetParameter * Ensure all hubble Pods are gone before proceeding with uninstall --wait. * uninstall: when --wait is specified, use foreground deletion. * Remove unused things * docs: Update version matrix * cursorUp() again * Only active wait for OutputSummary * cursorUp() function * Silent wait in -o json * Display formatted status during status wait * connectivity: Remove --delete-cilium-pod-on-nodes flag * utils: Remove IsInHelmMode() * Delete classic mode clustermesh commands * chore(deps): update docker/setup-buildx-action action to v3.1.0 * connectivity: fix encryption validation with wireguard encap + host fw * k8s: don't drop stdout of kubectl exec * Delete classic mode hubble commands * Delete classic mode install/uninstall/upgrade commands * Error handling fixed. * Ignore Cilium endpoints not found error for the status command. * sniffer: improve handling of tcpdump termination * Status check error message improved. * Refactor: Move junit package under connectivity package * status: additionally check for endpoints readiness * connectivity: improve reporting for no-unexpected-packet-drops check * Add sig/encryption as owner of /encrypt/ * fix(deps): update module helm.sh/helm/v3 to v3.14.2 [security] * fix(deps): update all go dependencies main * connectivity: introduce host firewall tests * connectivity: don't configure both timeout and deadline for ping * connectivity: add support for CiliumClusterwideNetworkPolicies * features: generalize CRD-based feature determination * policies: extract namespace configuration for easier reuse * policies: generalize the policies registration logic * policies: generalize the policies creation/update logic * policies: generalize the policies parsing logic * connectivity: add forbidden ICMPv6 message as expected drop reason * chore(deps): update dependency kubernetes-sigs/kind to v0.22.0 * chore(deps): update golangci/golangci-lint docker tag to v1.56.2 * chore(deps): update actions/setup-go action to v5 * chore(deps): update dependency cilium/cilium to v1.15.1 * fix(deps): update all go dependencies main * renovate: additionally manage updates for action.yaml * Use encryption models from Cilium dependency. * Update stable release to v0.15.23 * Hide `key-per-node` flag. * fix(deps): update all go dependencies main * GCP OIDC instead of SA creds. * fix(deps): update module helm.sh/helm/v3 to v3.14.1 [security] * Prepare for v0.15.23 release * gha: increase GKE disk size in external workloads workflow to 15GB * gha: increase GKE and AKS timeouts * chore: Amend connectivity tests for OpenShift * IPsec key rotation with algorithm change support. * chore(deps): update golangci/golangci-lint docker tag to v1.56.1 * chore(deps): update all github action dependencies * chore(deps): update go to v1.22.0 * fix(deps): update module golang.org/x/mod to v0.15.0 * chore(deps): update golang docker tag to v1.22.0 * chore(deps): update helm/kind-action action to v1.9.0 * chore(deps): update golangci/golangci-lint-action action to v4 * connectivity: don't collect multiple sysdump in no-errors-in-logs * connectivity: ignore timestamps in no-errors-in-logs * connectivity: extend no-errors-in-logs check to other Cilium containers * connectivity: print log errors only once * connectivity: always check for log errors in newer Cilium versions * external workloads: drop Cilium version retrieval for script generation * AWS OIDC instead of access key. * IPsec key status command implementation. * Status struct renamed to Encrypt. * Cipher IPsec key support added. * IPsec key id renamed to spi. SPI suffix added to support SPI with `+` sign. Tests added. * `encrypt rotate-key` command implementation. * chore(deps): update dependency kubernetes-sigs/kind to v0.21.0 * gateway: Upgrade API version * Prepare for v0.15.22 release * fix: Remove check function validateInfoForConnect for DisconnectWithHelm function * README.md: Update the title * fix(deps): update all go dependencies main * chore(deps): update docker.io/library/golang:1.21.6-alpine3.19 docker digest to a6a7f1f * fix(deps): update module github.com/cilium/cilium to v1.15.0 * chore(deps): update dependency cilium/cilium to v1.15.0 * fix(deps): update module github.com/evanphx/json-patch to v5.9.0+incompatible * chore(deps): update nick-invision/retry action to v3 * connectivity: fix panic if the cilium-health test fails * Encryption status models and JSON output parsing support added. * Encryption status sub command implemented. * Update stable release to v0.15.21 * Prepare for v0.15.21 release * hooks: split feature detection from setup and validation * Revert "gha: cleanup stale AWS-CNI iptables rules in EKS tunnel workflow" * fix(deps): update module google.golang.org/grpc to v1.61.0 * chore(deps): update actions/upload-artifact action to v4.3.0 * chore(deps): update dependency cilium/cilium to v1.14.6 * chore(deps): update golang:1.21.6-alpine3.19 docker digest to a6a7f1f * chore(deps): update golang:1.21.6-alpine3.19 docker digest to 29fd37e * chore(deps): update docker.io/library/golang:1.21.6-alpine3.19 docker digest to 51a7800 * bgp: enhance defaulting of `bgp routes` command * connectivity: determine Pod CIDRs from CiliumNodes * connectivity: retrieve CiliumNode information * fix(deps): update all go dependencies main * test: allow to tune sysdump collection policy on a per test basis * action: introduce the NewGenericAction method * action: do not attempt to capture hubble flows if given nil source pod * connectivity: add unknown ICMPv4 code as expected drop reason * fix(status): correct exit code * features: improve tunnel feature determination * features: extract tunnel feature determination in separate function * chore(deps): update all github action dependencies to v2.1.0 * Go workflow: Add merge_group trigger * Go workflow: Remove Cross-build step * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to e046063 * make: allow building with debug symbols * sysdump: don't specify --follow while collecting hubble flows * chore(deps): update actions/upload-artifact action to v4.2.0 * bgp: routes CLI - update min. cilium version, use `cilium` binary * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 83fc333 * connectivity: extract the encapsulated packets tcpdump filter * connectivity: fix broken tcpdump filter matching encapsulated packets * connectivity: generalize the sniffer logic * connectivity: extract the sniffer logic into a separate package * connectivity: extract safeBuffer into a separate package * logging: add DebugEnabled method to Action * fix(deps): update module github.com/cilium/cilium to v1.15.0-rc.1 * chore(deps): update azure/login action to v1.6.1 * connectivity: only wait for daemonsets if needed * chore(deps): update actions/upload-artifact action to v4.1.0 * connectivity: add host to pod check * bgp: Make `bgp neighbors` an alias for `bgp peers` command * bgp: Add command for retrieving bgp routes * refactor: improve error messaging for version command Signed-off-by: ssttehrani <ssttehrani@gmail.com> * clustermesh: fix hardcode at service type * Bump alpine images to 3.19 * Update stable release to v0.15.20 * Prepare for v0.15.20 release * chore(deps): update actions/download-artifact action to v4.1.1 * ci: remove unnecessary steps unlabeling nodes in kind workflow * ci: unique artifact name for junit reports in kind workflow * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 51d373b * chore(deps): update quay.io/cilium/json-mock docker tag to v1.3.8 * chore(deps): update go to v1.21.6 * defaults: Ignore XfrmInStateInvalid errors if rare * chore(deps): update golang docker tag to v1.21.6 * chore(deps): update actions/download-artifact action to v4.1.0 * chore(deps): update google-github-actions/auth action to v2.0.1 * connectivity: configure pause as entrypoint * fix(deps): update all go dependencies main * chore(deps): update all github action dependencies to v4 * chore(deps): update docker.io/library/golang:1.21.5-alpine3.18 docker digest to d8b9994 * chore(deps): update google-github-actions/setup-gcloud action to v2.0.1 * chore(deps): update golang:1.21.5-alpine3.18 docker digest to c157305 * chore(deps): update quay.io/cilium/alpine-curl docker tag to v1.9.0 * chore(deps): update azure/login action to v1.6.0 * gha: enable node without cilium tests for clustermesh * gha: switch to kubeadm.k8s.io/v1beta3 API * gha: don't wait for kind clusters to become ready * connectivity: explicitly wait for daemonsets to become ready * connectivity: make from external to pod tests ipv6 friendly * connectivity: make ingress target echo-other-node deployment * connectivity: skip more nodeport tests with clustermesh + KPR disabled * connectivity: detect PodCIDR for both local and remote nodes * connectivity: fix wait for external deployment with clustermesh * fix(deps): update all go dependencies main * fixed spelling mistake in help output * clustermesh: make status command compatible with external kvstore * clustermesh: make status command ignore the local cluster entry * clustermesh: print last status when status --wait fails * connectivity: don't configure pod port information when unused * WaitForCiliumEndpoint function removed as unneeded. * DisableEndpointCRD feature implemented to Cilium endpoint checks if it's disabled. * check: rename ExcludedCIDRs to ExcludedCIDRsConf * tests: egressgw: export WatiForEgressGatewayBpfPolicyEntries * check: don't pass policy YAML to WithCiliumEgressPolicy() * check: allow to configure pod selector in WithCiliumEgressPolicy() * check: add ExcludedCIDRsKind enum * defaults: add 'Host datapath not ready' to expected drop reasons * chore(deps): update module github.com/containerd/containerd to v1.7.11 [security] * internal: export MustUnmarshalYAML/MustUnmarshalYAMLMulti methods * internal: export EscapeJSONPatchString method * chore(deps): update module golang.org/x/crypto to v0.17.0 [security] * chore(deps): update dependency cilium/cilium to v1.14.5 * fix(deps): update all go dependencies main * fix(deps): update module helm.sh/helm/v3 to v3.13.3 ------------------------------------------------------------------- Thu Dec 21 08:21:50 UTC 2023 - obs@tbadm.net - Update to version 0.15.19: * Prepare for v0.15.19 release * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to ee22a58 * connectivity: Flag for expected XFRM errors * connectivity, utils: Refactor computeExpectedDropReasons * github: eks: bump timeout to 30m * check: add third client scheduled on a different node * Move perf tests to separate connectivity subcommand * Update stable release to v0.15.18 * Prepare for v0.15.18 release * connectivity: Bump test-connection-disruption img to v0.0.13 ------------------------------------------------------------------- Fri Nov 10 14:51:09 UTC 2023 - obs@tbadm.net - Update to version 0.15.13: * Prepare for v0.15.13 release * connectivity: Detect WG encap on >= 1.15 * chore(deps): update actions/checkout action to v4.1.1 * chore(deps): update golang:1.21.3-alpine3.18 docker digest to 96a8a70 * Prepare for v0.15.12 release * connectivity: Add feature detection for WG encapsulation * connectivity: Add special case to test WG w/ tunneling * connectivity: Change iface derivation for WG w/ tunnel * connectivity: Move dstFilter derivation to getFilter * connecitivity: Set proto filter in getFilter * connectivity: Derive dstFilter by calling getFilter * connectivity: Rename getSourceAddressFilter to getFilter * chore(deps): update golang:1.21.3-alpine3.18 docker digest to 99bec74 * chore(deps): update module github.com/docker/docker to v24.0.7+incompatible [security] * Revert "chore(deps): update dependency cilium/cilium to v1.14.3" * connectivity: don't use an ephemeral port for the echo server * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 0fd246f * README.md: remove v0.10.x from release table * fix(deps): update all go dependencies main * chore(deps): update golangci/golangci-lint docker tag to v1.55.1 * k8s: outdent else block to please golangci-lint * go.mod, vendor: update cilium/cilium to latest * fix(deps): update all go dependencies main * action: Allow users to skip building CLI * chore(deps): update dependency cilium/cilium to v1.14.3 * sysdump: Check if enable-envoy-config is set * connectivity: don't run encryption tests on single node * connectivity: extend encryption tests to validate both directions * connectivity: add sanity checks for encryption tests * connectivity: fix encryption validation when host firewall is enabled * connectivity: fix encryption validation when running in ENI mode * connectivity: fix pod-to-pod encryption validation * connectivity: fix host-netns daemonset creation with clustermesh * gha: cleanup stale AWS-CNI iptables rules in EKS tunnel workflow * check: turn CurlClientIPCommand into more generic CurlCommandWithOutput * check: add CurlCommandParallelWithOutput helper * check: simplify NodeportService peer implementation * check: add PodEchoIP peer implementation * action: Do not install released vsn if CI vsn is specified * Replace --helm-set with --set * echo-external-node: Check if NodeWithoutCilium is enabled * Update stable release to v0.15.11 * Prepare for v0.15.11 release * fix(deps): update all go dependencies main * vendor: Remove "replace github.com/docker/docker" * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 2ebcd9a * chore(deps): update go to v1.21.3 * chore(deps): update module golang.org/x/net to v0.17.0 [security] * chore(deps): update golang docker tag to v1.21.3 * check: Support SIGTERM with --pause-on-fail * check: Fix pause on failure for test fail/fatal * check: Refactor common failure paths * sysdump feature detection: Don't depend on Cilium version * sysdump: Detect if Gateway API support is enabled * Update stable release to v0.15.10 * Check Auth Cert Provider status * dep: Bump cilium/cilium to v1.15.0-pre.1+ * Prepare for v0.15.10 release * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to b3c6e53 * chore(deps): update golang docker tag to v1.21.2 * sysdump: Detect features from cilium-config ConfigMap * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to e2eb1d5 * chore(deps): update docker.io/library/golang:1.21.2-alpine3.18 docker digest to a76f153 * renovate: update Go image version used to build releases * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to a2251c1 * chore(deps): update docker.io/library/golang docker tag to v1.21.2 * connectivity test: Fix detectFeatures() logic * chore(deps): update docker.io/library/golang:1.21.1-alpine3.18 docker digest to 1c9cc94 * fix(deps): update all go dependencies main * chore(deps): update dependency go to v1.21.2 * helm-upgrade-clustermesh: Free up some disk space * chore(deps): update nick-invision/retry action to v2.9.0 * clustermesh: Make cilium symlink install idempotent * Prepare for v0.15.9 release * clustermesh: Adapt clustermesh script to install cilium-dbg * chore(deps): update aws-actions/configure-aws-credentials action to v4.0.1 * refactor: Move FeatureSet to a separate package * chore(deps): update docker.io/library/golang:1.21.1-alpine3.18 docker digest to d101f4e * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to e718668 * Move IPFamily to a separate "features" package * sysdump: Specify default selectors for log collection tasks * install: Avoid using deprecated "tunnel" flag * sysdump: Cache Cilium pods and cilium-config ConfigMap * chore(deps): update module github.com/docker/docker to v23.0.7+incompatible * fix(deps): update all go dependencies main * golangci-lint: enable goheader check * Refactor extractFeaturesFromConfigMap() * utils: export WaitObserver methods into wait package * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 0bc2fda * Clean up the node feature detection logic * connectivity: test referencing nodes by CIDR * sysdump: Collect Tetragon PodInfo custom resources * chore(deps): update actions/checkout action to v4.1.0 * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 84f7fcb * fix(deps): update module google.golang.org/grpc to v1.58.2 * check: export label prefixes constants * fix(deps): update module google.golang.org/grpc to v1.58.1 * check: export ciliumLogs method * chore(deps): update dependency cilium/cilium to v1.14.2 * fix(deps): update all go dependencies main * make: use short golangci-lint version format when comparing versions * clustermesh: Add support for service annotations * Update stable release to v0.15.8 * Prepare for v0.15.8 release * connectivity: convert conn-disrupt-dispatch-interval to duration * chore(deps): update docker/build-push-action action to v5 * chore(deps): update docker/setup-buildx-action action to v3 * chore(deps): update docker/build-push-action action to v4.2.1 * chore(deps): update docker/login-action action to v3 * connectivity: Expose test-conn-disrupt dispatch period * chore(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 [security] * fix(deps): update all go dependencies main * chore(deps): update aws-actions/configure-aws-credentials action to v4 * chore(deps): update aws-actions/configure-aws-credentials action to v3.0.2 * chore(deps): update docker/build-push-action action to v4.2.0 * chore(deps): update actions/upload-artifact action to v3.1.3 * chore(deps): update go to v1.21.1 * connectivity: Reduce test-conn-disrupt-client interval to 10ms * connectivity: Delete test-conn-disrupt pods after running tests * Add operator and clustermesh metrics to sysdump * Scrape Kubernetes metrics in sysdump * fix(deps): update all go dependencies main * chore(deps): update actions/checkout action to v4 * external-workloads: explicitly configure ClusterID/Name * Update stable release to v0.15.7 * Prepare for v0.15.7 release * connectivity: Use slices.Clone * connectivity: Add secondary network NodePort tests * chore(deps): update aws-actions/configure-aws-credentials action to v3.0.1 * chore(deps): update docker/setup-buildx-action action to v2.10.0 * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to ba1b914 * Update bgp.go#2 * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 171ecc4 * fix(deps): update module github.com/cilium/cilium to v1.14.1 * chore(deps): update aws-actions/configure-aws-credentials action to v3 * chore(deps): update actions/checkout action to v3.6.0 * connectivity: add and complete a few missing comments * connectivity: display reason for skipping Tests and Scenarios * Clarify classic / helm mode incompatibilities * install: remove deprecated kube-proxy-replacement CLI flag * chore(deps): update golangci/golangci-lint docker tag to v1.54.2 * implement helm get values with sysdump * go.mod: bump Go to 1.21 * connectivity: print all captured packets * connectivity: fix node-to-node encryption tests * connectivity: document feature detection order * connectivity: fix tunnel feature defaults * Fine tune CODEOWNERS file * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 196c2d0 * install: Remove some auto-detection log messages * fix(deps): update all go dependencies main * chore(deps): update golangci/golangci-lint-action action to v3.7.0 * chore(deps): update docker.io/coredns/coredns docker tag to v1.11.1 * chore(deps): update dependency cilium/cilium to v1.14.1 ------------------------------------------------------------------- Tue Aug 29 15:24:09 UTC 2023 - obs@tbadm.net - Update to version 0.15.6: * Prepare for v0.15.6 release * fix(deps): update all go dependencies main * chore(deps): update actions/setup-go action to v4.1.0 * Update missing dependencies to Go 1.21 * Bump k8s to 1.28 * chore(deps): update golangci/golangci-lint docker tag to v1.54.1 * chore(deps): update dependency go to v1.21.0 * Expand warning about big sysdump * fix(deps): update all go dependencies main * gha: exercise connectivity disruption tests * disruption tests: check restart counts from both clusters * disruption tests: fix wait for deployments * disruption tests: create svc in both clusters and mark as global * connectivity tests: anticipate namespace creation in remote cluster * chore(deps): update dependency ubuntu to v22 * chore(deps): update golangci/golangci-lint docker tag to v1.54.0 * connectivity: get nodename on which a pod is running via PodStatus * chore(deps): update docker.io/coredns/coredns docker tag to v1.11.0 * clustermesh: fix failure during CA certificate retrieval * chore(deps): update dependency go to v1.20.7 * Update stable release to v0.15.5 * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to c62ce11 * Prepare for v0.15.5 release * Update stable release to v0.15.4 * fix(deps): update all go dependencies main * renovate: Don't update golang.org/x/exp * fix: Changed regex to include capital letters. * clustermesh status: improve error reporting when not ready * clustermesh status: validate expected number of clusters * clustermesh status: consistent output order * clustermesh status: fix not ready message * clustermesh status: drop wait logic from ClusterMeshConnectivity * clustermesh status: always check deployment status * clustermesh status: remove redundant service check * clustermesh status: drop skip service check parameter * wait: always log error upon the first failure * Update the error log exceptions * gha: configure routing mode in external-workloads workflow * dockerfile: include CA certificates * fix(deps): update module github.com/cilium/cilium to v1.14.0 * chore(deps): update dependency cilium/cilium to v1.14.0 * metrics: Set first retrieved metrics to 0 if absent * kind: Run every 2 hours * kind: Upload all the sysdumps * connectivity: Hide --flush-ct * fix(cli-example): optimize the example of the 'install' command line. * connectivity: Special inconclusive result treatment for ping command * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to d51b96d * connectivity: Fix fetching of XFRM counters * fix(deps): update all go dependencies main * fix(deps): update module github.com/cilium/cilium to v1.14.0-snapshot.6 * Prepare for v0.15.4 release * connectivity: add xfrm error check for IPsec conn disrupt test * connectivity: generalize upgrade test * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 7338d0c * kind: Configure external targets inside the cluster * connectivity: Add an error log exception * connectivity: Add flags to override CA bundle secret * connectivity: Bump test-conn-disrupt img to v0.0.4 * Update stable release to v0.15.3 * Prepare for v0.15.3 release * Update README.md * k8s.NewClient: Initialize Helm action configuration * Revert "Create a separate RESTClientGetter for Helm client" * Partly revert "connectivity: enable IPv6 test fort per-endpoint routing" * chore(deps): update dependency kubernetes-sigs/kind to v0.20.0 * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 6f694cf * connectivity: Wait for test-conn-disrupt-server deployment * connectivity: Fix usage of src/dst clients in test-conn-disrupt * connectivity: Use readiness probe for test-conn-disrupt-server * fix(deps): update module helm.sh/helm/v3 to v3.12.2 * fix(deps): update all go dependencies main * .github/workflows: let renovate update kind version * chore(deps): update docker/setup-buildx-action action to v2.9.1 * Update stable release to v0.15.2 * Prepare for v0.15.2 release * chore(deps): update dependency go to v1.20.6 * fix(deps): update all go dependencies main * metrics: Fix format error log in validateMetric * peer: Add a method on service to return the name without the namespace * hooks: Add a setup and validate a new hook for extras * fixup! sysdump: Collect node init Pod logs and DaemonSet * sysdump: Collect node init Pod logs and DaemonSet * sysdump: do not fail if cilium is not installed * Update stable release to v0.15.1 * Fix pod summary for large numbers of pods * GHA: fix 'install-cilium-cli' issue when building from source * Prepare for v0.15.1 release * chore(deps): update helm/kind-action action to v1.8.0 * Eksctl version pinned. * connectivity: Remove test-conn-disrupt tolerations * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 8a837d8 * connectivity: Ignore failedToListCRDs error * connectivity: enable IPv6 test for per-endpoint routing * Create a separate RESTClientGetter for Helm client * fix(deps): update all go dependencies main * chore(deps): update docker/setup-buildx-action action to v2.9.0 * fix(deps): update all go dependencies main * Fix link in reference to helm mode * connectivity: fix service propagation check with mismatching IP families * .github/workflows: remove master mirror * kind multi cluster: Use a dot in cluster names * Helm mode: Handle "cluster.name" Helm value * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 95101b8 * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 6e47916 * Helm mode: don't suggest removed Azure flag * sysdump: Use intermediate import package for supported envoy resources * dep: Bump cilium/cilium to v1.14.0-rc0 * chore(deps): update docker/setup-buildx-action action to v2.8.0 * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 7f1b8b8 * connectivity: Fix trailing newline in tail call drop counts * fix(deps): update all go dependencies main * connectivity: Add op=Exists toleration for test-conn-disrupt * Update stable release to v0.15.0 * Prepare for v0.15.0 release * connectivity: wait for service propagation in agents * connectivity: extract and uniform wait functions * connectivity: add Logger interface * Use Helm mode by default * eks-uninstall: Set CILIUM_CLI_MODE environment variable * uninstall: Remove io.cilium/aws-node-enabled node selector * defaults: update connectivity test alpine curl image version * connectivity: Expose Features on ConnectivityTest * GHA: extend 'install-cilium-cli' to build from source * Update stable release to v0.14.8 * chore(deps): update dependency cilium/cilium to v1.13.4 ------------------------------------------------------------------- Mon Jun 26 08:28:25 UTC 2023 - obs@tbadm.net - Update to version 0.14.8: * Prepare for v0.14.8 release * renovate: let renovate update default Cilium version * sysdump: Add more envoy resource types * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to a1bca94 * chore(deps): update all go dependencies main * Using direnv to set CLI env vars * Refactor cilium cluster version detection * Add Helm Clustermesh disconnect command * connectivity: Address migrate-svc changes * fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to dbf8f0c * .github/workflows: don't error out if pkill finds no processes * internal/cli/cmd: Fix error displayed on failure to disable Hubble * internal/cli/cmd: Add line breaks after error messages * install: Normalize --helm-* flags * connectivity: Add checks for drops due to missed tail calls * connectivity: Check for Cilium agent errors * while applying policies, wait for all expected policy revisions. * chore(deps): update aws-actions/configure-aws-credentials action to v2.2.0 * clustermesh enable: add enable-kvstoremesh flag * chore(deps): update docker/setup-buildx-action action to v2.7.0 * sysdump: collect spire server and agent configuration * sysdump: collect spire server statefulset & agent daemonset * sysdump: collect SPIRE agent and server Pod logs * fix(deps): update all go dependencies main * chore(deps): update docker/build-push-action action to v4.1.1 * chore(deps): update golangci/golangci-lint docker tag to v1.53.3 * sysdump: collect CiliumPodIPPools * bgp: minor fix to bgp command help output * fix(deps): update module github.com/cilium/cilium to v1.14.0-snapshot.4 * sysdump: Fix wrong CiliumLoadBalancerIPPools collector * connectivity: Add upgrade tests * connectivity: Add --flush-ct * fix(deps): update all go dependencies main * Update stable release to v0.14.7 ------------------------------------------------------------------- Mon Jun 19 08:36:04 UTC 2023 - obs@tbadm.net - Update to version 0.14.7: * Prepare for v0.14.7 release * helm mode: Handle azure.resourceGroup Helm value * chore(deps): update golangci/golangci-lint-action action to v3.6.0 * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 2a6835e * chore(deps): update actions/checkout action to v3.5.3 * chore(deps): update docker/build-push-action action to v4.1.0 * chore(deps): update dependency go to v1.20.5 * sysdump: gather tetragon namespaced policies * External workloads CI fixed. * fix(deps): update module github.com/cilium/hubble to v0.11.6 * install: Add node affinity for Operator * clustermesh connect: configure PKI upon CA mismatch * helm mode: add implementation for clustermesh connect * Helm mode: Use Helm chart version as running version * Make CI test resources unique for retries. * fix(deps): pin dependencies * status: Print Helm chart version in Helm mode * chore(deps): update all github action dependencies * mutual-auth: Update the terminology/wording * connectivity: Ability to add custom annotations to test deployment * connectivity: Add annotations map helper type * k8s: Add ability to specify namespace metadata * Update stable release to v0.14.6 * chore(deps): update golangci/golangci-lint-action action to v3.5.0 * chore(deps): update golangci/golangci-lint docker tag to v1.53.2 * install: Skip version validation in Helm mode * uninstall: Skip version detection / validation in Helm mode * chore(deps): update golangci/golangci-lint docker tag to v1.53.1 * renovate: ignore pflag Go mod updates * fix(deps): update module github.com/cilium/cilium to v1.14.0-snapshot.3 ------------------------------------------------------------------- Mon Jun 12 11:14:14 UTC 2023 - obs@tbadm.net - Update to version 0.14.6: * Prepare for v0.14.6 release * README.md: update Cilium version in examples to latest stable releases * ci: update Cilium version to v1.13.3 * defaults: install Cilium v1.13.3 by default * multicluster tests: simplify secret rename logic * chore(deps): update aws-actions/configure-aws-credentials action to v2.1.0 * fix(deps): pin dependencies * ci/workflow: simplify junit uploads * gh/workflow: change multicluster provisioning to none blocking mode * fix(deps): update module github.com/stretchr/testify to v1.8.4 * connectivity/check: store metrics by pointer in TestMetricsIncrease * install: Do not use individual HelmOpts * install: Add native datapath mode * connectivity: Add sanity check for IP routes w/o --include-unsafe-tests * connectivity: add full egress gateway test suite * check: delete CiliumEgressGatewayPolicies after test run * check: add NodeportService wrapper * chore(deps): update docker.io/coredns/coredns docker tag to v1.10.1 * Makefile: fix golangci-lint renovate datasource tag annotation * Update stable release to v0.14.5 * Prepare for v0.14.5 release * renovate: add annotations for connectivity test images * sysdump: refactor submitTetragonBugtoolTasks to take defaults as parameters * connectivity/check: pass metrics to metricsIncrease by pointer * renovate: add renovate/stop-updating label on renovate's PRs * Update stable release to v0.14.4 * connectivity: Skip north-south-loadbalancing-with-l7-policy w/o L7 * connectivity: Fix installing IP routes to nodes w/o Cilium * connectivity: Fix FeatureTunnel.Mode * Prepare for v0.14.4 release * connectivity: add property flag fot junit * Makefile: bump Go to v1.20.4 for release target * chore(deps): update docker.io/library/busybox:stable-glibc docker digest to bf30051 * docs: Add an example for setting image.override * Add GatewayAPI resources to sysdump * Allow to pass --insecure to curl * upgrade: Check for error before accessing release * connectivity: Split host-netns daemonset into two * connectity: Deploy host netns pods by default * connectivity: Remove --datapath and add --include-unsafe-tests * gh/workflows: Bump timeout in kind.yaml * connectivity: Skip L7 N/S test on < v1.13.3 * connectivity: Add WithCiliumVersion * connectivity: Disable flow validation for N/S with KP * connectivity: Fix feature detection of KPR friends * connectivity: Add FlowFilters() method for TestPeer * connectivity: Install podCIDR => nodeIP on non-Cilium nodes * connectivity/check: Add CAP_NET_ADMIN for host-netns ds * check: update tunneling detection logic * check: make (Service)Address() return an IP address * cli: Export Version var to be set externally * ci: Add prometheus enabled in kind config * Add metrics increase validation and a simple test to check metrics on total request * Add metrics validation in tests * Collect metrics in Action * Extract Result from policy.go into its own file * Add metrics collector logic * Add k8s dialer to port foward properly * status: provide additional context for disabled Envoy DaemonSet * readme.md: updated status section with updated envoy output * sysdump: collect cilium envoy daemonset & configmap * sysdump: collect logs from cilium envoy pods * status: add cilium envoy daemonset * ci: fix gke network starvation * helm mode: autodetect service parameters for clustermesh * fix(deps): update module github.com/stretchr/testify to v1.8.3 * fix(deps): pin dependencies * helm mode: Add external workloads test coverage * clustermesh enable: Add a flag to set externalWorkloads.enabled * connectivity: Skip IPv6 requests in north-south-loadbalancing-with-l7-policy when running on < 1.14.0 Cilium * sysdump: Don't save cilium-etcd-secrets * connectivity: Add GetTest method * connectivity: Move template utils from internal * connectivity: Add WithFinalizer to register test finalizers * connectivity: Expose connectivity test k8s clients * connectivity: Add WithSetupFunc to register setup callbacks * cli: Add hooks and exported NewCiliumCommand * helm mode: Add EKS tunnel mode test coverage * sysdump: Add support for CiliumCIDRGroup CRD * install: Move the logic to unschedule aws-node to preinstall * helm mode: Add EKS test coverage ------------------------------------------------------------------- Sun May 21 21:42:42 UTC 2023 - obs@tbadm.net - Update to version 0.14.3: * Prepare for v0.14.3 release * chore(deps): update helm/kind-action action to v1.7.0 * build(deps): bump github.com/docker/distribution * chore(deps): update actions/setup-go action to v4.0.1 * Remove last-applied-configuration from etcd-secret in sysdump * fix(deps): pin dependencies * helm mode: Clarify upgrade command * fix(deps): pin dependencies * fix(deps): pin dependencies * chore(deps): update google/mirror-branch-action digest to 30c52ee * renovate: schedule Go module updates once a week * uninstall: allow ciliumVersion to start with "v" * install: fix TestK8sInstaller_getHelmValuesKind after update to yaml.v3 * fix(deps): update module gopkg.in/yaml.v2 to v3 * connectivity: Improve the logic to wait for Hubble Relay * Add helm mode test coverage for AKS BYOCNI * unit test: Restore the original env variable using defer * fix(deps): pin dependencies * fix(deps): update all go dependencies main * chore(deps): update google/mirror-branch-action digest to 884625c * .github/workflows: add missing GH action version annotations * chore(deps): update google-github-actions/setup-gcloud action to v1.1.1 * chore(deps): update dependency go to v1.20.4 * chore(deps): update all github action dependencies * Add a function to check if the CLI is in Helm mode * Farewell dependabot 👋 * connectivity test: add junit output * Remove az-binary check * Don't enable nodeinit on EKS when not needed * Update stable release to v0.14.2 * .github/workflows: add GH action version annotations * renovate: exclude Cilium forks and k8s from automatic updates * renovate: fix invalid whitespace characters * renovate: fix invalid JSON syntax * .github/workflows: bump AKS BYOCNI workflow timeout * Add renovate configuration * helm mode: add recursive deprecated secret logic ------------------------------------------------------------------- Wed May 10 07:21:35 UTC 2023 - obs@tbadm.net - Update to version 0.14.2: * Prepare for v0.14.2 release * Revert "suite: disable KNP tests when endpoint routes and IPv6 are enabled" * connectivity: Fix IPv6 skipping when EP routes are on * connectivity: enable outside to nodeport via IPv6 when IPsec is enabled * Remove AKS Azure IPAM test coverage * suite: disable KNP tests when endpoint routes and IPv6 are enabled * features: add RequireFeatureDisabled helper * workflows: kind: run IPSec connectivity test in test-namespace * connectivity: derive egress gateway node name instead of hardcoding it * connectivity: add basic egress gateway test * connectivity: add support for CiliumEgressGatewayPolicy resources * connectivity: add echo-external deployment * features: add support for probing the egress gateway feature * go.mod, vendor: bump google.golang.org/grpc from 1.54.0 to 1.55.0 * Handle OCI repositories * README.md: Add upgrade command samples * Update stable release to v0.14.1 * Prepare for v0.14.1 release * connectivity: report peer name in "no flows recorded" log message * connectivity: Add tests for egress rule with SA * connectivity: Rename existing SA tests * connectivity: add retry to external targets * Dockerfile: Bump library/golang * Replace versioncheck.Version with semver.ParseTolerant * sysdump: replace deprecated methods * connectivity/check: use existing label constants from corev1 * go.mod, vendor: update k8s deps to v1.27.1 * connectivity: test accessing NodePort from outside with L7 policy * helm mode: Make Helm chart repository configurable * Add GHA to install Cilium CLI executable * Add CI workflow for clustermesh via helm * multicluster CI: Use LoadBalancer for GKE etcd * Address wording an style nits of #1550 * golangci-lint: fix warnings * golangci-lint: fix unused parameter warnings * build: update golangci-lint to v1.52.2 * connectivity: Retry on inconclusive results * sysdump: Fix writing to absolute path * helm mode: Set default clustermesh service type to NodePort * helm: add unit tests for ParseVals * Enable Helm mode matrix for multicluster tests * Add cilium clustermesh {enable,disable} using Helm * Allow the Helm timeout to be set on uninstall * connectivity/tests: omit IPs and vendor names from test names * connectivity: Retry getting the policy revision * fixes versioncheck for l7 proxy disabling with wireguard encryption * connectivity: Add Ingress related tests * connectivity: Add Ingress resource for echo service * Remove "Release Date" column from the release table * Update stable release to v0.14.0 * Prepare for v0.14.0 release * go.mod, vendor: bump github.com/docker/docker * defaults: bump json-mock to 1.3.5 * cli: adapt helm chart cleanup of deprecated hubble values * .github: add mirror from main -> master * docs: update references to the main branch * ci: rename master -> main * Adjust cilium/cilium URLs after primary branch rename to `main` * Add documentation for helm installation mode * ci: bump google-github-actions/auth from 1.0.0 to 1.1.0 * ci: update Cilium version to v1.13.2 * defaults: install Cilium v1.13.2 by default * go.mod, vendor: pull in latest cilium charts * misc: replace label goto with extracted method or for loops * misc: replace label breaks with extracted method * Default Helm Upgrade to not reuse values * Clean up signature and usage of helm Upgrade func * Add chart version as parameter for upgrade * Expose helm reset/reuse values as flags for upgrade * Add upgrade implementation using Helm * Factor out ListVersions from preinstall * .github: Prepare workflows for tests with a 3rd node * connectivity: Implement FromCIDR tests * connectivity: Refactor scenarios passed to tests * Rename current CIDR tests to to-cidr.go * connectivity/check: Validate --external-from-cidrs * .github/workflows: Install static routes for nodes without Cilium * .github/workflows: Label nodes for --nodes-without-cilium * internal/cli/cmd: Clarify --nodes-without-cilium * connectivity/check: Deploy host-netns daemonset by default * ci: bump actions/checkout from 3.5.1 to 3.5.2 * BGP: Introduce new cli to get bgp state * Add connectivity tests for auth * go.mod, vendor: bump helm.sh/helm/v3 from 3.11.2 to 3.11.3 * connectivity: Make detected Cilium Agent version available for feature detection * ci: bump actions/checkout from 3.5.0 to 3.5.1 * Refactor generic policy to Cilium policy * Add KNPs tests scenarios * Add KNPs utils methods * Add KNP feature * Add CRD feature and CNP enabled requirement * helm mode install: Add --dry-run / --dry-run-helm-values flags * Use --set-string for node affinity * go.mod, vendor: bump github.com/cloudflare/cfssl from 1.6.3 to 1.6.4 * vendor: get latest cilium * install: Support --nodes-without-cilium in Helm install mode * Fix quotation for Cilium schedule affinity * Dockerfile: Bump library/golang * go.mod, vendor: bump github.com/spf13/cobra from 1.6.1 to 1.7.0 * go.mod, vendor: bump golang.org/x/mod from 0.9.0 to 0.10.0 * helm mode: Test with GKE * helm mode: Add hubble enable / disable commands * Add Helm-based install / uninstall commands * Refactor for Helm-based Cilium installation management * Dockerfile: Bump library/golang from `08bd1aa` to `1d7fec2` * Dockerfile: Bump library/golang from `b1f83bc` to `08bd1aa` * go.mod, vendor: bump github.com/go-openapi/strfmt from 0.21.5 to 0.21.7 * Dockerfile: Bump library/golang from `50e46c1` to `b1f83bc` * go.mod, vendor: bump google.golang.org/grpc from 1.53.0 to 1.54.0 * Sysdump: Add missing Cilium CRDs * ci: bump actions/checkout from 3.4.0 to 3.5.0 * Replace deprecated flags with --helm-set * Tetragon Tracing Policies * Add a l7 header replace test * Update stable release to v0.13.2 ------------------------------------------------------------------- Tue Mar 21 08:31:13 UTC 2023 - obs@tbadm.net - Update to version 0.13.2: * Prepare for v0.13.2 release * vendor: Pick up the latest cilium * go.mod, vendor: bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.5 * report IP families that are being tested * Change the default Cilium version to v1.13.1 * vendor: Pick up the latest github.com/cilium/charts * uninstall: set "cni.uninstall" to true * ci: bump actions/checkout from 3.3.0 to 3.4.0 * ci: bump actions/setup-go from 3.5.0 to 4.0.0 * clustermesh: correctly mount the etcd data dir in the init container * Update Go to 1.20.2 * refactor: Break generateManifests() into smaller functions * internal/utils: match new snapshot release version format * internal/utils: refactor CheckVersion to return an error * go.mod, vendor: update cilium to latest master to pull in versioncheck fix * Dockerfile: Bump library/golang from `0848e98` to `50e46c1` * connectivity: allow to restrict connectivity test pods using nodeSelector * install: Generate resource quotas from Helm chart * ci: bump docker/setup-buildx-action from 2.4.1 to 2.5.0 * helm: fix incorrect log error formatting directive. * Dockerfile: Bump library/golang * go.mod, vendor: bump helm.sh/helm/v3 from 3.11.1 to 3.11.2 * ci: bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 * Enable L7 and k8s secrets in tests * Adds a test case for L7 policy with TLS * ingress: Clean-up Ingress related resources * ingress: Create Ingress Endpoint * Update Go to 1.20.1 * Update stable release to v0.13.1 * go.mod, vendor: bump golang.org/x/mod from 0.8.0 to 0.9.0 * RELEASE.md: adjust release instructions after change to new release action * .github/workflows: use tag name instead of fully-formed ref in release name * .github/workflows: use softprops/action-gh-release in release workflow * Dockerfile: Bump library/golang from `9266e89` to `bf83658` * Prepare for v0.13.1 release * Add profiling data(cpu/heap) of cilium agent to sysdump. * go.mod, vendor: pull in latest cilium charts for v1.14.0-snapshot.0 * hubble: Patch Cilium DaemonSet with hubble-metrics port * clustermesh: update etcd version to v3.5.4 * enabled l7Proxy & removed err.log message for WireGuard * Update stable release to v0.13.0 * connectivity: switch "waitForPodDNS" check to use any IP address family * connectivity: rename IPFamilyNone to IPFamilyAny * go.mod, vendor: bump github.com/stretchr/testify from 1.8.1 to 1.8.2 * Prepare for v0.13.0 release * connectivity: Use InternalIP for NodePort requests on GKE * connectivity: Disable IPsec NodePort from outside via IPv6 * connectivity: Disable IPv6 with EP feat when netpols exist * connectivity: Add IPv6 tests * connectivity: Extend IPCache check to search for all addrs * connectivity: Store Cilium nodes * connectivity: Add v4/v6 and endpoint-routes features * connectivity: Add IPFamily * ci: update Cilium version to v1.13.0 * defaults: install Cilium v1.13.0 by default * sysdump: distil events in to a nice filterable HTML table * go.mod, vendor: bump github.com/google/gops from 0.3.26 to 0.3.27 * status: detect when DaemonSets and Deployments are rolling out * test: Wait for policy change if any policy changed * defaults: Lower connectivity timeouts * Wait for deletion of agent DaemonSet before deleting other resources. * ingress: Create Ingress Service if required * ingress: Correct Ingress Class name * connectivity: skip nodeport tests with clustermesh if KPR is disabled * Dockerfile: Bump library/golang * connectivity tests: support IPv6 in ICMP-related netpols * Update stable release to v0.12.13 ------------------------------------------------------------------- Thu Feb 16 22:51:48 UTC 2023 - obs@tbadm.net - Update to version 0.12.13: * Prepare for v0.12.13 release * vendor: Pick up github.com/cilium/cilium v1.13.0 * install: fix support for multi-object files * uninstall: remove cilium-config-agent role/rolebinding * feat: add json output for status and clustermesh status * go.mod, vendor: bump github.com/cilium/workerpool from 1.1.3 to 1.2.0 * go.mod, vendor: bump golang.org/x/mod from 0.7.0 to 0.8.0 * go.mod, vendor: bump helm.sh/helm/v3 from 3.11.0 to 3.11.1 * go.mod, vendor: bump google.golang.org/grpc from 1.52.3 to 1.53.0 * ci: bump docker/setup-buildx-action from 2.4.0 to 2.4.1 * ci, make: update golangci-lint to v1.51.1 * k8s: don't append to non-zero slice with zero entries in (*Client).ListAPIResources * ci: bump google-github-actions/setup-gcloud from 1.0.1 to 1.1.0 * ci: use cloud provider specific external target for pod-to-world tests * go.mod, vendor: update github.com/cilium/hubble to v0.11.1 * Update Go to 1.20 * ci, make: update golangci-lint to v1.51.0 * Dockerfile: Bump library/golang * connectivity: drop pre-1.11 allow-except-world test * clustermesh: adapt global service annotations * clustermesh: Add missing brackets of etcd option * Check if context is cancelled before next iteration * ci: bump docker/setup-buildx-action from 2.2.1 to 2.4.0 * ci: bump docker/build-push-action from 3.3.0 to 4.0.0 * ci: update Cilium version to v1.12.6 * defaults: update default Cilium version to v1.12.6 * go.mod, vendor: pull in latest cilium charts for v1.10.19, v1.11.13, v1.12.6 * status: rename Hubble status to Hubble Relay * [connectivity] add container name for health tests * go.mod, vendor: bump google.golang.org/grpc from 1.52.0 to 1.52.3 * dependabot: bump open pull request limit for Go module updates * dependabot: label dependabot PRs as release blocker * dependabot: add custom prefixes to dependabot commit subjects * sysdump: Collect new CR introduced as part of 1.13 * vendor: Bump cilium to v1.13.x version * sysdump: always log used namespaces * Honor global namespace flag in sysdump command * fix(connectivity): Add node-local-dns entitiy match for local ip usage case * build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 * build(deps): bump helm.sh/helm/v3 from 3.10.3 to 3.11.0 * connectivity: Make pod to world test more configurable * connectivity: Set PreferDualStack for test services * build(deps): bump docker/build-push-action from 3.2.0 to 3.3.0 * install: Do not enable BPF masq if ipv6 is enabled * Update cilium vendoring * install: Auto-enable BPF masquerade * Update Go to 1.19.5 * build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 * build(deps): bump library/golang * RELEASE.md: check and merge PRs before the release * connectivity: Display last error after waiting k8s resources timeouts * Update stable release to v0.12.12 ------------------------------------------------------------------- Tue Feb 14 23:46:20 UTC 2023 - TB Adm <obs@tbadm.net> - Build version 0.12.12
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
