From d85a96c09296285daa2065cc6d60ddef88eb5b47 Mon Sep 17 00:00:00 2001 From: Cilium Release Bot Date: Fri, 11 Oct 2024 15:12:08 +0000 Subject: [PATCH] install: Update image digests for v1.14.16 Generated from https://github.com/cilium/cilium/actions/runs/11294372985 ## Docker Manifests ### cilium `docker.io/cilium/cilium:v1.14.16@sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2` `quay.io/cilium/cilium:v1.14.16@sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2` ### clustermesh-apiserver `docker.io/cilium/clustermesh-apiserver:v1.14.16@sha256:19c1318e555d8ee9dbec9d86fe8e7e6c43a2dd7eeb29eb88ea7af28d21971186` `quay.io/cilium/clustermesh-apiserver:v1.14.16@sha256:19c1318e555d8ee9dbec9d86fe8e7e6c43a2dd7eeb29eb88ea7af28d21971186` ### docker-plugin `docker.io/cilium/docker-plugin:v1.14.16@sha256:ccb1aee7af60693fe434924b0bbbb0a625382335ca2767d485a0bc855df5943d` `quay.io/cilium/docker-plugin:v1.14.16@sha256:ccb1aee7af60693fe434924b0bbbb0a625382335ca2767d485a0bc855df5943d` ### hubble-relay `docker.io/cilium/hubble-relay:v1.14.16@sha256:ba715eaa50036c45ac39b2e4d08ee1794ac8dbfe6af339c48dba1402416da8f9` `quay.io/cilium/hubble-relay:v1.14.16@sha256:ba715eaa50036c45ac39b2e4d08ee1794ac8dbfe6af339c48dba1402416da8f9` ### kvstoremesh `docker.io/cilium/kvstoremesh:v1.14.16@sha256:c22860631b97e671d08a21524da5283322ec6b7750760e78df5718169a987fa0` `quay.io/cilium/kvstoremesh:v1.14.16@sha256:c22860631b97e671d08a21524da5283322ec6b7750760e78df5718169a987fa0` ### operator-alibabacloud `docker.io/cilium/operator-alibabacloud:v1.14.16@sha256:a647eae904c9210c3fa566a540c28bc6de525a92fd5049de1a3331c0b224d8b7` `quay.io/cilium/operator-alibabacloud:v1.14.16@sha256:a647eae904c9210c3fa566a540c28bc6de525a92fd5049de1a3331c0b224d8b7` ### operator-aws `docker.io/cilium/operator-aws:v1.14.16@sha256:013da30c41a2ca04c56b3b4b51ebda57bac2aec8a0107031e445d636e913dca1` `quay.io/cilium/operator-aws:v1.14.16@sha256:013da30c41a2ca04c56b3b4b51ebda57bac2aec8a0107031e445d636e913dca1` ### operator-azure `docker.io/cilium/operator-azure:v1.14.16@sha256:91b811091e98456543b4b7569039213bef954881a079a9796481275430994448` `quay.io/cilium/operator-azure:v1.14.16@sha256:91b811091e98456543b4b7569039213bef954881a079a9796481275430994448` ### operator-generic `docker.io/cilium/operator-generic:v1.14.16@sha256:21243c0dcbc3d505ddf661835fc9a6aa6393e439893cbfd86c20b381c709d2b8` `quay.io/cilium/operator-generic:v1.14.16@sha256:21243c0dcbc3d505ddf661835fc9a6aa6393e439893cbfd86c20b381c709d2b8` ### operator `docker.io/cilium/operator:v1.14.16@sha256:d5f68e5238d9fa608537f05abfa1296c188715439329128a9f78a7d0f6c078ef` `quay.io/cilium/operator:v1.14.16@sha256:d5f68e5238d9fa608537f05abfa1296c188715439329128a9f78a7d0f6c078ef` Signed-off-by: Cilium Release Bot --- Documentation/helm-values.rst | 12 +++++------ install/kubernetes/Makefile.digests | 20 +++++++++--------- install/kubernetes/cilium/README.md | 12 +++++------ install/kubernetes/cilium/values.yaml | 30 +++++++++++++-------------- 4 files changed, 37 insertions(+), 37 deletions(-) diff --git a/Documentation/helm-values.rst b/Documentation/helm-values.rst index 5ce45b6602136..0850379096f8d 100644 --- a/Documentation/helm-values.rst +++ b/Documentation/helm-values.rst @@ -423,7 +423,7 @@ * - :spelling:ignore:`clustermesh.apiserver.image` - Clustermesh API server image. - object - - ``{"digest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/clustermesh-apiserver","tag":"v1.14.16","useDigest":false}`` + - ``{"digest":"sha256:19c1318e555d8ee9dbec9d86fe8e7e6c43a2dd7eeb29eb88ea7af28d21971186","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/clustermesh-apiserver","tag":"v1.14.16","useDigest":true}`` * - :spelling:ignore:`clustermesh.apiserver.kvstoremesh.enabled` - Enable KVStoreMesh. KVStoreMesh caches the information retrieved from the remote clusters in the local etcd instance. - bool @@ -443,7 +443,7 @@ * - :spelling:ignore:`clustermesh.apiserver.kvstoremesh.image` - KVStoreMesh image. - object - - ``{"digest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/kvstoremesh","tag":"v1.14.16","useDigest":false}`` + - ``{"digest":"sha256:c22860631b97e671d08a21524da5283322ec6b7750760e78df5718169a987fa0","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/kvstoremesh","tag":"v1.14.16","useDigest":true}`` * - :spelling:ignore:`clustermesh.apiserver.kvstoremesh.resources` - Resource requests and limits for the KVStoreMesh container - object @@ -1491,7 +1491,7 @@ * - :spelling:ignore:`hubble.relay.image` - Hubble-relay container image. - object - - ``{"digest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/hubble-relay","tag":"v1.14.16","useDigest":false}`` + - ``{"digest":"sha256:ba715eaa50036c45ac39b2e4d08ee1794ac8dbfe6af339c48dba1402416da8f9","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/hubble-relay","tag":"v1.14.16","useDigest":true}`` * - :spelling:ignore:`hubble.relay.listenHost` - Host to listen to. Specify an empty string to bind to all the interfaces. - string @@ -1859,7 +1859,7 @@ * - :spelling:ignore:`image` - Agent container image. - object - - ``{"digest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/cilium","tag":"v1.14.16","useDigest":false}`` + - ``{"digest":"sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/cilium","tag":"v1.14.16","useDigest":true}`` * - :spelling:ignore:`imagePullSecrets` - Configure image pull secrets for pulling container images - string @@ -2291,7 +2291,7 @@ * - :spelling:ignore:`operator.image` - cilium-operator image. - object - - ``{"alibabacloudDigest":"","awsDigest":"","azureDigest":"","genericDigest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/operator","suffix":"","tag":"v1.14.16","useDigest":false}`` + - ``{"alibabacloudDigest":"sha256:a647eae904c9210c3fa566a540c28bc6de525a92fd5049de1a3331c0b224d8b7","awsDigest":"sha256:013da30c41a2ca04c56b3b4b51ebda57bac2aec8a0107031e445d636e913dca1","azureDigest":"sha256:91b811091e98456543b4b7569039213bef954881a079a9796481275430994448","genericDigest":"sha256:21243c0dcbc3d505ddf661835fc9a6aa6393e439893cbfd86c20b381c709d2b8","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/operator","suffix":"","tag":"v1.14.16","useDigest":true}`` * - :spelling:ignore:`operator.nodeGCInterval` - Interval for cilium node garbage collection. - string @@ -2479,7 +2479,7 @@ * - :spelling:ignore:`preflight.image` - Cilium pre-flight image. - object - - ``{"digest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/cilium","tag":"v1.14.16","useDigest":false}`` + - ``{"digest":"sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/cilium","tag":"v1.14.16","useDigest":true}`` * - :spelling:ignore:`preflight.nodeSelector` - Node labels for preflight pod assignment ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector - object diff --git a/install/kubernetes/Makefile.digests b/install/kubernetes/Makefile.digests index e278eb2871dd2..4327cd36f3af1 100644 --- a/install/kubernetes/Makefile.digests +++ b/install/kubernetes/Makefile.digests @@ -2,13 +2,13 @@ # Copyright 2024 Authors of Cilium # SPDX-License-Identifier: Apache-2.0 -export CILIUM_DIGEST := "" -export CLUSTERMESH_APISERVER_DIGEST := "" -export DOCKER_PLUGIN_DIGEST := "" -export HUBBLE_RELAY_DIGEST := "" -export KVSTOREMESH_DIGEST := "" -export OPERATOR_ALIBABACLOUD_DIGEST := "" -export OPERATOR_AWS_DIGEST := "" -export OPERATOR_AZURE_DIGEST := "" -export OPERATOR_GENERIC_DIGEST := "" -export OPERATOR_DIGEST := "" +export CILIUM_DIGEST := "sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2" +export CLUSTERMESH_APISERVER_DIGEST := "sha256:19c1318e555d8ee9dbec9d86fe8e7e6c43a2dd7eeb29eb88ea7af28d21971186" +export DOCKER_PLUGIN_DIGEST := "sha256:ccb1aee7af60693fe434924b0bbbb0a625382335ca2767d485a0bc855df5943d" +export HUBBLE_RELAY_DIGEST := "sha256:ba715eaa50036c45ac39b2e4d08ee1794ac8dbfe6af339c48dba1402416da8f9" +export KVSTOREMESH_DIGEST := "sha256:c22860631b97e671d08a21524da5283322ec6b7750760e78df5718169a987fa0" +export OPERATOR_ALIBABACLOUD_DIGEST := "sha256:a647eae904c9210c3fa566a540c28bc6de525a92fd5049de1a3331c0b224d8b7" +export OPERATOR_AWS_DIGEST := "sha256:013da30c41a2ca04c56b3b4b51ebda57bac2aec8a0107031e445d636e913dca1" +export OPERATOR_AZURE_DIGEST := "sha256:91b811091e98456543b4b7569039213bef954881a079a9796481275430994448" +export OPERATOR_GENERIC_DIGEST := "sha256:21243c0dcbc3d505ddf661835fc9a6aa6393e439893cbfd86c20b381c709d2b8" +export OPERATOR_DIGEST := "sha256:d5f68e5238d9fa608537f05abfa1296c188715439329128a9f78a7d0f6c078ef" diff --git a/install/kubernetes/cilium/README.md b/install/kubernetes/cilium/README.md index 05ec5c862af73..088c0411c206e 100644 --- a/install/kubernetes/cilium/README.md +++ b/install/kubernetes/cilium/README.md @@ -155,12 +155,12 @@ contributors across the globe, there is almost always someone available to help. | clustermesh.apiserver.extraEnv | list | `[]` | Additional clustermesh-apiserver environment variables. | | clustermesh.apiserver.extraVolumeMounts | list | `[]` | Additional clustermesh-apiserver volumeMounts. | | clustermesh.apiserver.extraVolumes | list | `[]` | Additional clustermesh-apiserver volumes. | -| clustermesh.apiserver.image | object | `{"digest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/clustermesh-apiserver","tag":"v1.14.16","useDigest":false}` | Clustermesh API server image. | +| clustermesh.apiserver.image | object | `{"digest":"sha256:19c1318e555d8ee9dbec9d86fe8e7e6c43a2dd7eeb29eb88ea7af28d21971186","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/clustermesh-apiserver","tag":"v1.14.16","useDigest":true}` | Clustermesh API server image. | | clustermesh.apiserver.kvstoremesh.enabled | bool | `false` | Enable KVStoreMesh. KVStoreMesh caches the information retrieved from the remote clusters in the local etcd instance. | | clustermesh.apiserver.kvstoremesh.extraArgs | list | `[]` | Additional KVStoreMesh arguments. | | clustermesh.apiserver.kvstoremesh.extraEnv | list | `[]` | Additional KVStoreMesh environment variables. | | clustermesh.apiserver.kvstoremesh.extraVolumeMounts | list | `[]` | Additional KVStoreMesh volumeMounts. | -| clustermesh.apiserver.kvstoremesh.image | object | `{"digest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/kvstoremesh","tag":"v1.14.16","useDigest":false}` | KVStoreMesh image. | +| clustermesh.apiserver.kvstoremesh.image | object | `{"digest":"sha256:c22860631b97e671d08a21524da5283322ec6b7750760e78df5718169a987fa0","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/kvstoremesh","tag":"v1.14.16","useDigest":true}` | KVStoreMesh image. | | clustermesh.apiserver.kvstoremesh.resources | object | `{}` | Resource requests and limits for the KVStoreMesh container | | clustermesh.apiserver.kvstoremesh.securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]}}` | KVStoreMesh Security context | | clustermesh.apiserver.metrics.enabled | bool | `true` | Enables exporting apiserver metrics in OpenMetrics format. | @@ -422,7 +422,7 @@ contributors across the globe, there is almost always someone available to help. | hubble.relay.extraVolumes | list | `[]` | Additional hubble-relay volumes. | | hubble.relay.gops.enabled | bool | `true` | Enable gops for hubble-relay | | hubble.relay.gops.port | int | `9893` | Configure gops listen port for hubble-relay | -| hubble.relay.image | object | `{"digest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/hubble-relay","tag":"v1.14.16","useDigest":false}` | Hubble-relay container image. | +| hubble.relay.image | object | `{"digest":"sha256:ba715eaa50036c45ac39b2e4d08ee1794ac8dbfe6af339c48dba1402416da8f9","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/hubble-relay","tag":"v1.14.16","useDigest":true}` | Hubble-relay container image. | | hubble.relay.listenHost | string | `""` | Host to listen to. Specify an empty string to bind to all the interfaces. | | hubble.relay.listenPort | string | `"4245"` | Port to listen to. | | hubble.relay.nodeSelector | object | `{"kubernetes.io/os":"linux"}` | Node labels for pod assignment ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector | @@ -514,7 +514,7 @@ contributors across the globe, there is almost always someone available to help. | hubble.ui.updateStrategy | object | `{"rollingUpdate":{"maxUnavailable":1},"type":"RollingUpdate"}` | hubble-ui update strategy. | | identityAllocationMode | string | `"crd"` | Method to use for identity allocation (`crd` or `kvstore`). | | identityChangeGracePeriod | string | `"5s"` | Time to wait before using new identity on endpoint identity change. | -| image | object | `{"digest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/cilium","tag":"v1.14.16","useDigest":false}` | Agent container image. | +| image | object | `{"digest":"sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/cilium","tag":"v1.14.16","useDigest":true}` | Agent container image. | | imagePullSecrets | string | `nil` | Configure image pull secrets for pulling container images | | ingressController.default | bool | `false` | Set cilium ingress controller to be the default ingress controller This will let cilium ingress controller route entries without ingress class set | | ingressController.defaultSecretName | string | `nil` | Default secret name for ingresses without .spec.tls[].secretName set. | @@ -622,7 +622,7 @@ contributors across the globe, there is almost always someone available to help. | operator.extraVolumes | list | `[]` | Additional cilium-operator volumes. | | operator.identityGCInterval | string | `"15m0s"` | Interval for identity garbage collection. | | operator.identityHeartbeatTimeout | string | `"30m0s"` | Timeout for identity heartbeats. | -| operator.image | object | `{"alibabacloudDigest":"","awsDigest":"","azureDigest":"","genericDigest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/operator","suffix":"","tag":"v1.14.16","useDigest":false}` | cilium-operator image. | +| operator.image | object | `{"alibabacloudDigest":"sha256:a647eae904c9210c3fa566a540c28bc6de525a92fd5049de1a3331c0b224d8b7","awsDigest":"sha256:013da30c41a2ca04c56b3b4b51ebda57bac2aec8a0107031e445d636e913dca1","azureDigest":"sha256:91b811091e98456543b4b7569039213bef954881a079a9796481275430994448","genericDigest":"sha256:21243c0dcbc3d505ddf661835fc9a6aa6393e439893cbfd86c20b381c709d2b8","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/operator","suffix":"","tag":"v1.14.16","useDigest":true}` | cilium-operator image. | | operator.nodeGCInterval | string | `"5m0s"` | Interval for cilium node garbage collection. | | operator.nodeSelector | object | `{"kubernetes.io/os":"linux"}` | Node labels for cilium-operator pod assignment ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector | | operator.podAnnotations | object | `{}` | Annotations to be added to cilium-operator pods | @@ -669,7 +669,7 @@ contributors across the globe, there is almost always someone available to help. | preflight.extraEnv | list | `[]` | Additional preflight environment variables. | | preflight.extraVolumeMounts | list | `[]` | Additional preflight volumeMounts. | | preflight.extraVolumes | list | `[]` | Additional preflight volumes. | -| preflight.image | object | `{"digest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/cilium","tag":"v1.14.16","useDigest":false}` | Cilium pre-flight image. | +| preflight.image | object | `{"digest":"sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/cilium","tag":"v1.14.16","useDigest":true}` | Cilium pre-flight image. | | preflight.nodeSelector | object | `{"kubernetes.io/os":"linux"}` | Node labels for preflight pod assignment ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector | | preflight.podAnnotations | object | `{}` | Annotations to be added to preflight pods | | preflight.podDisruptionBudget.enabled | bool | `false` | enable PodDisruptionBudget ref: https://kubernetes.io/docs/concepts/workloads/pods/disruptions/ | diff --git a/install/kubernetes/cilium/values.yaml b/install/kubernetes/cilium/values.yaml index f8f67d074c9ce..0402f00d5125a 100644 --- a/install/kubernetes/cilium/values.yaml +++ b/install/kubernetes/cilium/values.yaml @@ -146,8 +146,8 @@ image: tag: "v1.14.16" pullPolicy: "IfNotPresent" # cilium-digest - digest: "" - useDigest: false + digest: "sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2" + useDigest: true # -- Affinity for cilium-agent. affinity: @@ -1115,8 +1115,8 @@ hubble: repository: "quay.io/cilium/hubble-relay" tag: "v1.14.16" # hubble-relay-digest - digest: "" - useDigest: false + digest: "sha256:ba715eaa50036c45ac39b2e4d08ee1794ac8dbfe6af339c48dba1402416da8f9" + useDigest: true pullPolicy: "IfNotPresent" # -- Specifies the resources for the hubble-relay pods @@ -2279,14 +2279,14 @@ operator: repository: "quay.io/cilium/operator" tag: "v1.14.16" # operator-generic-digest - genericDigest: "" + genericDigest: "sha256:21243c0dcbc3d505ddf661835fc9a6aa6393e439893cbfd86c20b381c709d2b8" # operator-azure-digest - azureDigest: "" + azureDigest: "sha256:91b811091e98456543b4b7569039213bef954881a079a9796481275430994448" # operator-aws-digest - awsDigest: "" + awsDigest: "sha256:013da30c41a2ca04c56b3b4b51ebda57bac2aec8a0107031e445d636e913dca1" # operator-alibabacloud-digest - alibabacloudDigest: "" - useDigest: false + alibabacloudDigest: "sha256:a647eae904c9210c3fa566a540c28bc6de525a92fd5049de1a3331c0b224d8b7" + useDigest: true pullPolicy: "IfNotPresent" suffix: "" @@ -2568,8 +2568,8 @@ preflight: repository: "quay.io/cilium/cilium" tag: "v1.14.16" # cilium-digest - digest: "" - useDigest: false + digest: "sha256:8a31c16a4b3fcd0fbfdbfe3348710bfb766a5bcc8225ee5c4057d3a7cbcbafb2" + useDigest: true pullPolicy: "IfNotPresent" # -- The priority class to use for the preflight pod. @@ -2718,8 +2718,8 @@ clustermesh: repository: "quay.io/cilium/clustermesh-apiserver" tag: "v1.14.16" # clustermesh-apiserver-digest - digest: "" - useDigest: false + digest: "sha256:19c1318e555d8ee9dbec9d86fe8e7e6c43a2dd7eeb29eb88ea7af28d21971186" + useDigest: true pullPolicy: "IfNotPresent" etcd: @@ -2765,8 +2765,8 @@ clustermesh: repository: "quay.io/cilium/kvstoremesh" tag: "v1.14.16" # kvstoremesh-digest - digest: "" - useDigest: false + digest: "sha256:c22860631b97e671d08a21524da5283322ec6b7750760e78df5718169a987fa0" + useDigest: true pullPolicy: "IfNotPresent" # -- Additional KVStoreMesh arguments.