CNI: Update cilium from v1.15.3 to v1.15.5
parent
8be4d304bb
commit
9bd6871c06
|
@ -222,9 +222,12 @@ data:
|
||||||
mesh-auth-rotated-identities-queue-size: "1024"
|
mesh-auth-rotated-identities-queue-size: "1024"
|
||||||
mesh-auth-gc-interval: "5m0s"
|
mesh-auth-gc-interval: "5m0s"
|
||||||
|
|
||||||
|
proxy-xff-num-trusted-hops-ingress: "0"
|
||||||
|
proxy-xff-num-trusted-hops-egress: "0"
|
||||||
proxy-connect-timeout: "2"
|
proxy-connect-timeout: "2"
|
||||||
proxy-max-requests-per-connection: "0"
|
proxy-max-requests-per-connection: "0"
|
||||||
proxy-max-connection-duration-seconds: "0"
|
proxy-max-connection-duration-seconds: "0"
|
||||||
|
proxy-idle-timeout-seconds: "60"
|
||||||
|
|
||||||
external-envoy-proxy: "false"
|
external-envoy-proxy: "false"
|
||||||
max-connected-clusters: "255"
|
max-connected-clusters: "255"
|
||||||
|
@ -689,7 +692,7 @@ spec:
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: cilium-agent
|
- name: cilium-agent
|
||||||
image: "quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0"
|
image: "quay.io/cilium/cilium:v1.15.5@sha256:4ce1666a73815101ec9a4d360af6c5b7f1193ab00d89b7124f8505dee147ca40"
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
command:
|
command:
|
||||||
- cilium-agent
|
- cilium-agent
|
||||||
|
@ -840,7 +843,7 @@ spec:
|
||||||
mountPath: /tmp
|
mountPath: /tmp
|
||||||
initContainers:
|
initContainers:
|
||||||
- name: config
|
- name: config
|
||||||
image: "quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0"
|
image: "quay.io/cilium/cilium:v1.15.5@sha256:4ce1666a73815101ec9a4d360af6c5b7f1193ab00d89b7124f8505dee147ca40"
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
command:
|
command:
|
||||||
- cilium-dbg
|
- cilium-dbg
|
||||||
|
@ -863,7 +866,7 @@ spec:
|
||||||
# Required to mount cgroup2 filesystem on the underlying Kubernetes node.
|
# Required to mount cgroup2 filesystem on the underlying Kubernetes node.
|
||||||
# We use nsenter command with host's cgroup and mount namespaces enabled.
|
# We use nsenter command with host's cgroup and mount namespaces enabled.
|
||||||
- name: mount-cgroup
|
- name: mount-cgroup
|
||||||
image: "quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0"
|
image: "quay.io/cilium/cilium:v1.15.5@sha256:4ce1666a73815101ec9a4d360af6c5b7f1193ab00d89b7124f8505dee147ca40"
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: CGROUP_ROOT
|
- name: CGROUP_ROOT
|
||||||
|
@ -900,7 +903,7 @@ spec:
|
||||||
drop:
|
drop:
|
||||||
- ALL
|
- ALL
|
||||||
- name: apply-sysctl-overwrites
|
- name: apply-sysctl-overwrites
|
||||||
image: "quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0"
|
image: "quay.io/cilium/cilium:v1.15.5@sha256:4ce1666a73815101ec9a4d360af6c5b7f1193ab00d89b7124f8505dee147ca40"
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
env:
|
env:
|
||||||
- name: BIN_PATH
|
- name: BIN_PATH
|
||||||
|
@ -938,7 +941,7 @@ spec:
|
||||||
# from a privileged container because the mount propagation bidirectional
|
# from a privileged container because the mount propagation bidirectional
|
||||||
# only works from privileged containers.
|
# only works from privileged containers.
|
||||||
- name: mount-bpf-fs
|
- name: mount-bpf-fs
|
||||||
image: "quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0"
|
image: "quay.io/cilium/cilium:v1.15.5@sha256:4ce1666a73815101ec9a4d360af6c5b7f1193ab00d89b7124f8505dee147ca40"
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
args:
|
args:
|
||||||
- 'mount | grep "/sys/fs/bpf type bpf" || mount -t bpf bpf /sys/fs/bpf'
|
- 'mount | grep "/sys/fs/bpf type bpf" || mount -t bpf bpf /sys/fs/bpf'
|
||||||
|
@ -954,7 +957,7 @@ spec:
|
||||||
mountPath: /sys/fs/bpf
|
mountPath: /sys/fs/bpf
|
||||||
mountPropagation: Bidirectional
|
mountPropagation: Bidirectional
|
||||||
- name: clean-cilium-state
|
- name: clean-cilium-state
|
||||||
image: "quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0"
|
image: "quay.io/cilium/cilium:v1.15.5@sha256:4ce1666a73815101ec9a4d360af6c5b7f1193ab00d89b7124f8505dee147ca40"
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
command:
|
command:
|
||||||
- /init-container.sh
|
- /init-container.sh
|
||||||
|
@ -1001,7 +1004,7 @@ spec:
|
||||||
mountPath: /var/run/cilium # wait-for-kube-proxy
|
mountPath: /var/run/cilium # wait-for-kube-proxy
|
||||||
# Install the CNI binaries in an InitContainer so we don't have a writable host mount in the agent
|
# Install the CNI binaries in an InitContainer so we don't have a writable host mount in the agent
|
||||||
- name: install-cni-binaries
|
- name: install-cni-binaries
|
||||||
image: "quay.io/cilium/cilium:v1.15.3@sha256:da74ab61d1bc665c1c088dff41d5be388d252ca5800f30c7d88844e6b5e440b0"
|
image: "quay.io/cilium/cilium:v1.15.5@sha256:4ce1666a73815101ec9a4d360af6c5b7f1193ab00d89b7124f8505dee147ca40"
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
command:
|
command:
|
||||||
- "/install-plugin.sh"
|
- "/install-plugin.sh"
|
||||||
|
@ -1169,7 +1172,7 @@ spec:
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: cilium-operator
|
- name: cilium-operator
|
||||||
image: "quay.io/cilium/operator-generic:v1.15.3@sha256:c97f23161906b82f5c81a2d825b0646a5aa1dfb4adf1d49cbb87815079e69d61"
|
image: "quay.io/cilium/operator-generic:v1.15.5@sha256:f5d3d19754074ca052be6aac5d1ffb1de1eb5f2d947222b5f10f6d97ad4383e8"
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
command:
|
command:
|
||||||
- cilium-operator-generic
|
- cilium-operator-generic
|
||||||
|
|
Loading…
Reference in New Issue