cilium 1.18.3

cilium/src/kustomization.yaml

@@ -10,7 +10,7 @@ resources:
 helmCharts:
   - name: cilium
     repo: https://helm.cilium.io
-    version: 1.18.2
+    version: 1.18.3
     releaseName: cilium
     includeCRDs: true
     namespace: kube-system

cilium/src/values.yaml

@@ -20,7 +20,7 @@ commonLabels: {}
 # Cilium will not change critical values to ensure continued operation
 # This flag is not required for new installations.
 # For example: '1.7', '1.8', '1.9'
-upgradeCompatibility: 1.17.8
+upgradeCompatibility: 1.18.2
 debug:
   # -- Enable debug logging
   enabled: false
@@ -100,14 +100,14 @@ k8sClientRateLimit:
   # @schema
   # -- (int) The sustained request rate in requests per second.
   # @default -- 10
-  qps: 20
+  qps:
   # @schema
   # type: [null, integer]
   # @schema
   # -- (int) The burst request rate in requests per second.
   # The rate limiter will allow short bursts with a higher rate.
   # @default -- 20
-  burst: 100
+  burst:
   # -- Configure the client side rate limit for the Cilium Operator
   operator:
     # @schema
@@ -219,10 +219,10 @@ image:
   # @schema
   override: ~
   repository: "quay.io/cilium/cilium"
-  tag: "v1.18.2"
+  tag: "v1.18.3"
   pullPolicy: "IfNotPresent"
   # cilium-digest
-  digest: "sha256:858f807ea4e20e85e3ea3240a762e1f4b29f1cb5bbd0463b8aa77e7b097c0667"
+  digest: "sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15"
   useDigest: true
 # -- Scheduling configurations for cilium pods
 scheduling:
@@ -1404,7 +1404,7 @@ hubble:
         #   --set hubble.redact.http.headers.deny="Authorization,Proxy-Authorization"
         deny: []
     kafka:
-      # -- Enables redacting Kafka's API key.
+      # -- Enables redacting Kafka's API key (deprecated, will be removed in v1.19).
       # Example:
       #
       #   redact:
@@ -1508,9 +1508,9 @@ hubble:
       # @schema
       override: ~
       repository: "quay.io/cilium/hubble-relay"
-      tag: "v1.18.2"
+      tag: "v1.18.3"
       # hubble-relay-digest
-      digest: "sha256:6079308ee15e44dff476fb522612732f7c5c4407a1017bc3470916242b0405ac"
+      digest: "sha256:e53e00c47fe4ffb9c086bad0c1c77f23cb968be4385881160683d9e15aa34dc3"
       useDigest: true
       pullPolicy: "IfNotPresent"
     # -- Specifies the resources for the hubble-relay pods
@@ -2113,8 +2113,10 @@ readinessProbe:
 # -- Configure the kube-proxy replacement in Cilium BPF datapath
 # Valid options are "true" or "false".
 # ref: https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/
+# @schema@
+# type: [string, boolean]
+# @schema@
 kubeProxyReplacement: true
-
 # -- healthz server bind address for the kube-proxy replacement.
 # To enable set the value to '0.0.0.0:10256' for all ipv4
 # addresses and this '[::]:10256' for all ipv6 addresses.
@@ -2468,9 +2470,9 @@ envoy:
     # @schema
     override: ~
     repository: "quay.io/cilium/cilium-envoy"
-    tag: "v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324"
+    tag: "v1.34.10-1761014632-c360e8557eb41011dfb5210f8fb53fed6c0b3222"
     pullPolicy: "IfNotPresent"
-    digest: "sha256:7932d656b63f6f866b6732099d33355184322123cfe1182e6f05175a3bc2e0e0"
+    digest: "sha256:ca76eb4e9812d114c7f43215a742c00b8bf41200992af0d21b5561d46156fd15"
     useDigest: true
   # -- Additional containers added to the cilium Envoy DaemonSet.
   extraContainers: []
@@ -2844,15 +2846,15 @@ operator:
     # @schema
     override: ~
     repository: "quay.io/cilium/operator"
-    tag: "v1.18.2"
+    tag: "v1.18.3"
     # operator-generic-digest
-    genericDigest: "sha256:cb4e4ffc5789fd5ff6a534e3b1460623df61cba00f5ea1c7b40153b5efb81805"
+    genericDigest: "sha256:b5a0138e1a38e4437c5215257ff4e35373619501f4877dbaf92c89ecfad81797"
     # operator-azure-digest
-    azureDigest: "sha256:9696e9b8219b9a5c16987e072eda2da378d42a32f9305375e56d7380a0c2ba8e"
+    azureDigest: "sha256:10a8a83ca6f0b02432c1ca0e67af98a48fdbefb684af44a399f58184ab174143"
     # operator-aws-digest
-    awsDigest: "sha256:1cb856fbe265dfbcfe816bd6aa4acaf006ecbb22dcc989116a1a81bb269ea328"
+    awsDigest: "sha256:ef39d61183b3bdf0e235650461b6c4d9ec7aa5f61a6c770f33c47a6bc5165e24"
     # operator-alibabacloud-digest
-    alibabacloudDigest: "sha256:612b1d94c179cd8ae239e571e96ebd95662bb5cccb62aacfdf79355aa9cdddc8"
+    alibabacloudDigest: "sha256:df8b6830ef0545199cffc5fb9fbf14c9dc8d92093b0e6355d8659705227f89ef"
     useDigest: true
     pullPolicy: "IfNotPresent"
     suffix: ""
@@ -3068,7 +3070,7 @@ nodeinit:
     override: ~
     repository: "quay.io/cilium/startup-script"
     tag: "1755531540-60ee83e"
-    digest: "sha256:0c91245afb3a4ff78b5cc8c09226806e94a9a10eb0adb74a85e0eeed2a5cae8c"
+    digest: "sha256:5bdca3c2dec2c79f58d45a7a560bf1098c2126350c901379fe850b7f78d3d757"
     useDigest: true
     pullPolicy: "IfNotPresent"
   # -- The priority class to use for the nodeinit pod.
@@ -3153,9 +3155,9 @@ preflight:
     # @schema
     override: ~
     repository: "quay.io/cilium/cilium"
-    tag: "v1.18.2"
+    tag: "v1.18.3"
     # cilium-digest
-    digest: "sha256:858f807ea4e20e85e3ea3240a762e1f4b29f1cb5bbd0463b8aa77e7b097c0667"
+    digest: "sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15"
     useDigest: true
     pullPolicy: "IfNotPresent"
   envoy:
@@ -3166,9 +3168,9 @@ preflight:
       # @schema
       override: ~
       repository: "quay.io/cilium/cilium-envoy"
-      tag: "v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324"
+      tag: "v1.34.10-1761014632-c360e8557eb41011dfb5210f8fb53fed6c0b3222"
       pullPolicy: "IfNotPresent"
-      digest: "sha256:7932d656b63f6f866b6732099d33355184322123cfe1182e6f05175a3bc2e0e0"
+      digest: "sha256:ca76eb4e9812d114c7f43215a742c00b8bf41200992af0d21b5561d46156fd15"
       useDigest: true
   # -- The priority class to use for the preflight pod.
   priorityClassName: ""
@@ -3322,9 +3324,9 @@ clustermesh:
       # @schema
       override: ~
       repository: "quay.io/cilium/clustermesh-apiserver"
-      tag: "v1.18.2"
+      tag: "v1.18.3"
       # clustermesh-apiserver-digest
-      digest: "sha256:cd689a07bfc7622e812fef023cb277fdc695b60a960d36f32f93614177a7a0f6"
+      digest: "sha256:0d15efc992a85003759232598bf05fb1a4cd3c9fa28fb96bee1789ffe27cc50d"
       useDigest: true
       pullPolicy: "IfNotPresent"
     # -- TCP port for the clustermesh-apiserver health API.
@@ -3854,7 +3856,7 @@ authentication:
           override: ~
           repository: "docker.io/library/busybox"
           tag: "1.37.0"
-          digest: "sha256:ab33eacc8251e3807b85bb6dba570e4698c3998eca6f0fc2ccb60575a563ea74"
+          digest: "sha256:2f590fc602ce325cbff2ccfc39499014d039546dc400ef8bbf5c6ffb860632e7"
           useDigest: true
           pullPolicy: "IfNotPresent"
         # SPIRE agent configuration