v1.12.1

[gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] Tunnel mode and debug option are now properly handled when specified in the cilium provider configuration. (gardener/gardener-extension-networking-cilium#96, @ScheererJ)

v1.12.0

[gardener-extension-networking-cilium]

⚠️ Breaking Changes

• [OPERATOR] This extension is only compatible with Gardener versions >= v1.37. (gardener/gardener-extension-networking-cilium#91, @rfranzke)

📖 Documentation

• [DEPENDENCY] Paths transformations in .docforge/manifest.yaml for simplification (gardener/gardener-extension-networking-cilium#85, @Kostov6)

🏃 Others

• [OPERATOR] Update cilium to v1.11.5. (gardener/gardener-extension-networking-cilium#94, @DockToFuture)

v1.11.0

[gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] Added default memory resource requests/limits to cilium-agent. (gardener/gardener-extension-networking-cilium#89, @ScheererJ)
• [OPERATOR] The following dependencies are updated: (gardener/gardener-extension-networking-cilium#88, @DockToFuture)
  • github.com/gardener/gardener: v1.39.0 -> v1.42.4
  • controller-runtime: v0.10.2 -> v0.11.0
  • github.com/onsi/ginkgo v1.16.4 -> github.com/onsi/ginkgo/v2 v2.1.0
  • github.com/onsi/gomega v1.15.0 -> v1.18.0
  • github.com/go-logr/logr v0.4.0 -> v1.2.0
• [OPERATOR] Update cilium to v1.11.3. (gardener/gardener-extension-networking-cilium#87, @DockToFuture)
• [OPERATOR] Support services meshes (like linkerd, istio, ...) on top of cilium by exposing the bpfSocketLBHostnsOnly field in the shoot spec. (gardener/gardener-extension-networking-cilium#86, @DockToFuture)

v1.10.0

[gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] Disables rp_filter properly when running cilium on all operating systems (gardener/gardener-extension-networking-cilium#84, @ScheererJ)
• [OPERATOR] Added cilium network policy to allow cilium's dns proxy to perform dns requests to make dns based policy working. (gardener/gardener-extension-networking-cilium#83, @ScheererJ)

v1.9.0

[gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] Add init container to cilium agent which disables reverse path filtering (rp_filter). (gardener/gardener-extension-networking-cilium#82, @DockToFuture)

v1.8.0

[gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] Update cilium to v1.11.1 which contains several bugfixes for agent instability. (gardener/gardener-extension-networking-cilium#78, @DockToFuture)
• [OPERATOR] Update cilium to v1.11.0. (gardener/gardener-extension-networking-cilium#75, @DockToFuture)

📰 Noteworthy

• [OPERATOR] The extension controller uses a projected ServiceAccount token in case it runs on a seed with a gardenlet of at least v1.37 or higher. The same applies for the cilium-related Pods deployed to shoot cluster. (gardener/gardener-extension-networking-cilium#76, @rfranzke)
• [DEVELOPER] The Golang version has been updated to 1.17.5. (gardener/gardener-extension-networking-cilium#76, @rfranzke)

v1.7.1

no release notes available

v1.7.0

[gardener-extension-networking-cilium]

🏃 Others

• [OPERATOR] Update cilium to v1.10.5. (gardener/gardener-extension-networking-cilium#70, @DockToFuture)

v1.6.0

[gardener-extension-networking-cilium]

⚠️ Breaking Changes

• [USER] Removed kube-proxy disabled flag from extension config. Use the shoot spec (Shoot.Spec.Kubernetes.KubeProxy.Enabled) instead. (gardener/gardener-extension-networking-cilium#61, @ScheererJ)
• [OPERATOR] Drop support for k8s<v1.15.0. (gardener/gardener-extension-networking-cilium#58, @DockToFuture)
• [OPERATOR] The default leader election resource lock of gardener-extension-networking-cilium has been changed from configmapsleases to leases. (gardener/gardener-extension-networking-cilium#57, @ialidzhikov)
  • Please make sure, that you had at least [email protected] running before upgrading to v1.6.0, so that it has successfully required leadership with the hybrid resource lock (configmapsleases) at least once.

✨ New Features

• [OPERATOR] The Cilium extension does now support seed clusters with Kubernetes version 1.22. You should consider the Kubernetes release notes before upgrading to 1.22. (gardener/gardener-extension-networking-cilium#65, @timuthy)
• [OPERATOR] It is now possible to specify the leader election resource lock via the chart value leaderElection.resourceLock (defaults to leases). (gardener/gardener-extension-networking-cilium#57, @ialidzhikov)

🏃 Others

• [OPERATOR] The extension does no longer depend on a list of supported Kubernetes versions (coming from the github.com/gardener/gardener dependency). This was preventing the extension to start against Seed clusters running on K8s versions that were not present in the mentioned list. (gardener/gardener-extension-networking-cilium#66, @ialidzhikov)
• [OPERATOR] Vendor to gardener v1.28.1 and grm v0.25.0. (gardener/gardener-extension-networking-cilium#63, @DockToFuture)
• [OPERATOR] Update cilium to v1.10.3 and use cgroupv2. (gardener/gardener-extension-networking-cilium#62, @DockToFuture)
• [OPERATOR] Revendored to gardener v1.26.0 (gardener/gardener-extension-networking-cilium#59, @ScheererJ)
• [OPERATOR] Vendor to gardener v1.25.1. (gardener/gardener-extension-networking-cilium#54, @DockToFuture)
• [OPERATOR] Update cilium to v1.10.1 (gardener/gardener-extension-networking-cilium#53, @DockToFuture)
• [OPERATOR] Update cilium to v1.9.6, which includes many bugfixes. (gardener/gardener-extension-networking-cilium#45, @ScheererJ)

v1.5.0

[gardener-extension-networking-cilium]

⚠️ Breaking Changes

• [USER] Extension resource configs (NetworkConfig) are now deserialized in "strict" mode. This means that deserializing resources with fields that are not allowed by the API schema will result in errors. Shoots containing such resources will fail with an appropriate error until you manually update the shoot to make sure any extension resource configs contained in it are valid. (#40, @stoyanr)

🏃 Others

• [OPERATOR] Update cilium to v1.9.5, which includes many bugfixes. (#39, @DockToFuture)
• [OPERATOR] Cilium is updated to v.1.9.4. The ipam mode is switched from legacy hostscope mode which is removed to cluter-pool ipam mode. (#38, @DockToFuture)
• [OPERATOR] Vendor to gardener v1.16.0 and update controller runtime to v0.7.1 (#37, @DockToFuture)

Docker Images

gardener-extension-networking-cilium: eu.gcr.io/gardener-project/gardener/extensions/networking-cilium:v1.5.0