Skip to content

Commit c1c9200

Browse files
nutellinoitnutellinoit
authored
Merge pull request #78 from sighupio/develop
Release v1.16.0
2 parents de9de86 + 666283a commit c1c9200

18 files changed

+5886
-2002
lines changed

‎.drone.yml

+339-425
Large diffs are not rendered by default.

‎README.md

+6-6
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
</h1>
66
<!-- markdownlint-enable MD033 -->
77

8-
![Release](https://img.shields.io/badge/Latest%20Release-v1.14.0-blue)
8+
![Release](https://img.shields.io/badge/Latest%20Release-v1.15.2-blue)
99
![License](https://img.shields.io/github/license/sighupio/fury-kubernetes-networking?label=License)
1010
![Slack](https://img.shields.io/badge/slack-@kubernetes/fury-yellow.svg?logo=slack&label=Slack)
1111

@@ -29,9 +29,9 @@ Kubernetes Fury Networking provides the following packages:
2929

3030
| Package | Version | Description |
3131
| -------------------------- | -------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
32-
| [calico](katalog/calico) | `3.26.3` | [Calico][calico-page] CNI Plugin. For cluster with `< 50` nodes. |
33-
| [cilium](katalog/cilium) | `1.14.3` | [Cilium][cilium-page] CNI Plugin. For cluster with `< 200` nodes. |
34-
| [tigera](katalog/tigera) | `1.30.7` | [Tigera Operator][tigera-page], a Kubernetes Operator for Calico, provides pre-configured installations for on-prem and for EKS in policy-only mode. |
32+
| [calico](katalog/calico) | `3.27.0` | [Calico][calico-page] CNI Plugin. For cluster with `< 50` nodes. |
33+
| [cilium](katalog/cilium) | `1.15.2` | [Cilium][cilium-page] CNI Plugin. For cluster with `< 200` nodes. |
34+
| [tigera](katalog/tigera) | `1.32.3` | [Tigera Operator][tigera-page], a Kubernetes Operator for Calico, provides pre-configured installations for on-prem and for EKS in policy-only mode. |
3535
| [ip-masq](katalog/ip-masq) | `2.8.0` | The `ip-masq-agent` configures iptables rules to implement IP masquerading functionality |
3636

3737
> The resources in these packages are going to be deployed in `kube-system` namespace. Except for the operator.
@@ -42,9 +42,9 @@ Click on each package to see its full documentation.
4242

4343
| Kubernetes Version | Compatibility | Notes |
4444
| ------------------ | :----------------: | --------------- |
45-
| `1.25.x` | :white_check_mark: | No known issues |
4645
| `1.26.x` | :white_check_mark: | No known issues |
4746
| `1.27.x` | :white_check_mark: | No known issues |
47+
| `1.28.x` | :white_check_mark: | No known issues |
4848

4949

5050
Check the [compatibility matrix][compatibility-matrix] for additional information on previous releases of the module.
@@ -67,7 +67,7 @@ Check the [compatibility matrix][compatibility-matrix] for additional informatio
6767
```yaml
6868
bases:
6969
- name: networking
70-
version: "v1.15.0"
70+
version: "v1.16.0"
7171
```
7272
7373
> See `furyctl` [documentation][furyctl-repo] for additional details about `Furyfile.yml` format.

‎docs/COMPATIBILITY_MATRIX.md

+10-9
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,15 @@
11
# Compatibility Matrix
22

3-
| Module Version / Kubernetes Version | 1.24.X | 1.25.X | 1.26.X | 1.27.X |
4-
| ----------------------------------- | ------------------ | ------------------ | ------------------ | ------------------ |
5-
| v1.10.0 | :white_check_mark: | | | |
6-
| v1.11.0 | :white_check_mark: | :white_check_mark: | | |
7-
| v1.12.0 | :white_check_mark: | :white_check_mark: | | |
8-
| v1.12.1 | :white_check_mark: | :white_check_mark: | | |
9-
| v1.12.2 | :white_check_mark: | :white_check_mark: | | |
10-
| v1.14.0 | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
11-
| v1.15.0 | | :white_check_mark: | :white_check_mark: | :white_check_mark: |
3+
| Module Version / Kubernetes Version | 1.24.X | 1.25.X | 1.26.X | 1.27.X | 1.28.X |
4+
| ----------------------------------- | ------------------ | ------------------ | ------------------ | ------------------ | ------------------ |
5+
| v1.10.0 | :white_check_mark: | | | | |
6+
| v1.11.0 | :white_check_mark: | :white_check_mark: | | | |
7+
| v1.12.0 | :white_check_mark: | :white_check_mark: | | | |
8+
| v1.12.1 | :white_check_mark: | :white_check_mark: | | | |
9+
| v1.12.2 | :white_check_mark: | :white_check_mark: | | | |
10+
| v1.14.0 | :white_check_mark: | :white_check_mark: | :white_check_mark: | | |
11+
| v1.15.0 | | :white_check_mark: | :white_check_mark: | :white_check_mark: | |
12+
| v1.16.0 | | | :white_check_mark: | :white_check_mark: | :white_check_mark: |
1213

1314

1415
:white_check_mark: Compatible

‎docs/releases/v1.15.0.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ This minor release updates some components and adds support to Kubernetes 1.27.
1010
| ----------------- | -------------------------------------------------------------------------------- | ---------------- |
1111
| `calico` | [`v3.26.3`](https://projectcalico.docs.tigera.io/archive/v3.26/release-notes/) | `v3.26.1` |
1212
| `cilium` | [`v1.14.3`](https://github.com/cilium/cilium/releases/tag/v1.14.3) | `v1.13.1` |
13-
| `ip-masq` | [`v2.8.0`](https://github.com/kubernetes-sigs/ip-masq-agent/releases/tag/v2.5.0) | No update |
13+
| `ip-masq` | [`v2.8.0`](https://github.com/kubernetes-sigs/ip-masq-agent/releases/tag/v2.8.0) | No update |
1414
| `tigera-operator` | [`v1.30.7`](https://github.com/tigera/operator/releases/tag/v1.30.7) | `v1.30.4` |
1515

1616
> Please refer the individual release notes to get detailed information on each release.

‎docs/releases/v1.16.0.md

+64
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,64 @@
1+
# Networking Core Module Release 1.16.0
2+
3+
Welcome to the latest release of the `Networking` module of [`Kubernetes Fury Distribution`](https://github.com/sighupio/fury-distribution) maintained by team SIGHUP.
4+
5+
This minor release updates some components and adds support to Kubernetes 1.28.
6+
7+
## Component Images 🚢
8+
9+
| Component | Supported Version | Previous Version |
10+
| ----------------- | -------------------------------------------------------------------------------- | ---------------- |
11+
| `calico` | [`v3.27.0`](https://docs.tigera.io/calico/3.27/about/) | `v3.26.3` |
12+
| `cilium` | [`v1.15.2`](https://github.com/cilium/cilium/releases/tag/v1.15.2) | `v1.14.3` |
13+
| `ip-masq` | [`v2.8.0`](https://github.com/kubernetes-sigs/ip-masq-agent/releases/tag/v2.8.0) | No update |
14+
| `tigera-operator` | [`v1.32.3`](https://github.com/tigera/operator/releases/tag/v1.32.3) | `v1.30.7` |
15+
16+
> Please refer the individual release notes to get detailed information on each release.
17+
18+
## Update Guide 🦮
19+
20+
### Process
21+
22+
If you are using Cilium, read the steps [below](#cilium-upgrade) before proceeding.
23+
24+
1. Just deploy as usual:
25+
26+
```bash
27+
kustomize build katalog/calico | kubectl apply -f -
28+
# OR
29+
kustomize build katalog/tigera/on-prem | kubectl apply -f -
30+
# OR
31+
kustomize build katalog/cilium | kubectl apply -f -
32+
```
33+
34+
#### Cilium upgrade
35+
Cilium suggested path expect a pre-flight check to be run before any upgrade.
36+
37+
1. Create the resources for the check
38+
```bash
39+
kubectl create -f katalog/cilium/tasks/preflight.yaml
40+
```
41+
42+
2. Ensure that the number of READY pods is the same number of Cilium pods running.
43+
```text
44+
kubectl get daemonset -n kube-system | sed -n '1p;/cilium/p'
45+
NAME DESIRED CURRENT READY UP-TO-DATE AVAILABLE NODE SELECTOR AGE
46+
cilium 2 2 2 2 2 <none> 1h20m
47+
cilium-pre-flight-check 2 2 2 2 2 <none> 7m15s
48+
```
49+
50+
3. Once the number of READY pods is equal, make sure the Cilium pre-flight deployment is also marked as READY 1/1.
51+
If it shows READY 0/1, consult the [CNP Validation](https://docs.cilium.io/en/stable/operations/upgrade/#cnp-validation) section in the official docs and resolve issues with the deployment before continuing with the upgrade.
52+
```text
53+
kubectl get deployment -n kube-system cilium-pre-flight-check -w
54+
NAME READY UP-TO-DATE AVAILABLE AGE
55+
cilium-pre-flight-check 1/1 1 0 12s
56+
```
57+
58+
4. Once the number of READY for the preflight DaemonSet is the same as the number of cilium pods running and the preflight Deployment is marked as READY 1/1 you can delete the cilium-preflight and proceed with the upgrade.
59+
```bash
60+
kubectl delete -f cilium-preflight.yaml
61+
```
62+
63+
64+
If you are upgrading from previous versions, please refer to the [`v1.15.0` release notes](https://github.com/sighupio/fury-kubernetes-networking/releases/tag/v1.15.0).

‎examples/registry-override/calico/kustomization.yaml

+2
Original file line numberDiff line numberDiff line change
@@ -18,3 +18,5 @@ images:
1818
newName: calico/pod2daemon-flexvol
1919
- name: registry.sighup.io/fury/calico/node
2020
newName: calico/node
21+
22+

‎katalog/calico/MAINTENANCE.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ To update the Calico package with upstream, please follow the next steps:
77
1. Download upstream manifests:
88

99
```bash
10-
export CALICO_VERSION=3.26.1
10+
export CALICO_VERSION=3.27.0
1111
curl -L https://raw.githubusercontent.com/projectcalico/calico/v${CALICO_VERSION}/manifests/calico.yaml -o calico-${CALICO_VERSION}.yaml
1212
```
1313

@@ -20,7 +20,7 @@ Compare the `deploy.yaml` file with the downloaded `calico-${CALICO_VERSION}` fi
2020
3. Update the `kustomization.yaml` file with the right image versions.
2121

2222
```bash
23-
export CALICO_IMAGE_TAG=v3.26.3
23+
export CALICO_IMAGE_TAG=v3.27.0
2424
kustomize edit set image docker.io/calico/kube-controllers=registry.sighup.io/fury/calico/kube-controllers:${CALICO_IMAGE_TAG}
2525
kustomize edit set image docker.io/calico/cni=registry.sighup.io/fury/calico/cni:${CALICO_IMAGE_TAG}
2626
kustomize edit set image docker.io/calico/node=registry.sighup.io/fury/calico/node:${CALICO_IMAGE_TAG}
@@ -39,7 +39,7 @@ See <https://docs.tigera.io/calico/latest/operations/monitor/monitor-component-m
3939
1. Download the dashboard from upstream:
4040

4141
```bash
42-
export CALICO_VERSION=3.26.3
42+
export CALICO_VERSION=3.27.0
4343
# ⚠️ Assuming $PWD == root of the project
4444
# We take the `felix-dashboard.json` from the downloaded yaml, we are not deploying `typha`, so we don't need its dashboard.
4545
curl -L https://raw.githubusercontent.com/projectcalico/calico/v${CALICO_VERSION}/manifests/grafana-dashboards.yaml | yq '.data["felix-dashboard.json"]' | sed 's/calico-demo-prometheus/prometheus/g' | jq > ./monitoring/dashboards/felix-dashboard.json

‎katalog/calico/README.md

+4-4
Original file line numberDiff line numberDiff line change
@@ -21,17 +21,17 @@ The deployment of Calico consists of a daemon set running on every node (includi
2121
## Image repository and tag
2222

2323
- calico images:
24-
- `calico/kube-controllers:v3.26.3`.
25-
- `calico/cni:v3.26.3`.
26-
- `calico/node:v3.26.3`.
24+
- `calico/kube-controllers:v3.27.0`.
25+
- `calico/cni:v3.27.0`.
26+
- `calico/node:v3.27.0`.
2727
- calico repositories:
2828
- [https://github.com/projectcalico/kube-controllers](https://github.com/projectcalico/calico/tree/master/kube-controllers).
2929
- [https://github.com/projectcalico/cni-plugin](https://github.com/projectcalico/calico/tree/master/cni-plugin).
3030
- [https://github.com/projectcalico/node](https://github.com/projectcalico/calico/tree/master/node).
3131

3232
## Requirements
3333

34-
- Tested with Kubernetes >= `1.25.X`.
34+
- Tested with Kubernetes >= `1.26.X`.
3535
- Tested with Kustomize >= `v3.5.3`.
3636
- Prometheus Operator, optional if you want to have metrics.
3737

‎katalog/calico/deploy.yaml

+5-5
Original file line numberDiff line numberDiff line change
@@ -4643,7 +4643,7 @@ spec:
46434643
# It can be deleted if this is a fresh installation, or if you have already
46444644
# upgraded to use calico-ipam.
46454645
- name: upgrade-ipam
4646-
image: docker.io/calico/cni:v3.26.3
4646+
image: docker.io/calico/cni:v3.27.0
46474647
imagePullPolicy: IfNotPresent
46484648
command: ["/opt/cni/bin/calico-ipam", "-upgrade"]
46494649
envFrom:
@@ -4671,7 +4671,7 @@ spec:
46714671
# This container installs the CNI binaries
46724672
# and CNI network config file on each node.
46734673
- name: install-cni
4674-
image: docker.io/calico/cni:v3.26.3
4674+
image: docker.io/calico/cni:v3.27.0
46754675
imagePullPolicy: IfNotPresent
46764676
command: ["/opt/cni/bin/install"]
46774677
envFrom:
@@ -4714,7 +4714,7 @@ spec:
47144714
# i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed
47154715
# in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode.
47164716
- name: "mount-bpffs"
4717-
image: docker.io/calico/node:v3.26.3
4717+
image: docker.io/calico/node:v3.27.0
47184718
imagePullPolicy: IfNotPresent
47194719
command: ["calico-node", "-init", "-best-effort"]
47204720
volumeMounts:
@@ -4740,7 +4740,7 @@ spec:
47404740
# container programs network policy and routes on each
47414741
# host.
47424742
- name: calico-node
4743-
image: docker.io/calico/node:v3.26.3
4743+
image: docker.io/calico/node:v3.27.0
47444744
imagePullPolicy: IfNotPresent
47454745
envFrom:
47464746
- configMapRef:
@@ -4957,7 +4957,7 @@ spec:
49574957
priorityClassName: system-cluster-critical
49584958
containers:
49594959
- name: calico-kube-controllers
4960-
image: docker.io/calico/kube-controllers:v3.26.3
4960+
image: docker.io/calico/kube-controllers:v3.27.0
49614961
imagePullPolicy: IfNotPresent
49624962
env:
49634963
# Choose which controllers to run.

‎katalog/calico/kustomization.yaml

+3-3
Original file line numberDiff line numberDiff line change
@@ -10,13 +10,13 @@ namespace: kube-system
1010
images:
1111
- name: docker.io/calico/cni
1212
newName: registry.sighup.io/fury/calico/cni
13-
newTag: v3.26.3
13+
newTag: v3.27.0
1414
- name: docker.io/calico/kube-controllers
1515
newName: registry.sighup.io/fury/calico/kube-controllers
16-
newTag: v3.26.3
16+
newTag: v3.27.0
1717
- name: docker.io/calico/node
1818
newName: registry.sighup.io/fury/calico/node
19-
newTag: v3.26.3
19+
newTag: v3.27.0
2020

2121
# Resources needed for Monitoring
2222
resources:

‎katalog/cilium/MAINTENANCE.md

+4-1
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,10 @@ To update the Cilium package with upstream, please follow the next steps.
55
Download the upstream manifests:
66

77
```bash
8-
helm pull cilium/cilium --version 1.13.3 --untar --untardir /tmp
8+
helm repo add cilium https://helm.cilium.io/
9+
helm repo update
10+
helm search repo cilium/cilium
11+
helm pull cilium/cilium --version 1.15.2 --untar --untardir /tmp
912
```
1013

1114
Change the tag for the images on the file `MAINTENANCE.values.yaml`, check the new one on `/tmp/cilium/values.yaml

‎katalog/cilium/MAINTENANCE.values.yaml

+7-10
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
image:
88
override: ~
99
repository: "registry.sighup.io/fury/cilium/cilium"
10-
tag: "v1.14.3"
10+
tag: "v1.15.2"
1111
useDigest: false
1212

1313
# -- Affinity for cilium-agent.
@@ -76,7 +76,7 @@ hubble:
7676
image:
7777
override: ~
7878
repository: "registry.sighup.io/fury/cilium/hubble-relay"
79-
tag: "v1.14.3"
79+
tag: "v1.15.2"
8080

8181
useDigest: false
8282
pullPolicy: "IfNotPresent"
@@ -120,8 +120,9 @@ hubble:
120120
image:
121121
override: ~
122122
repository: "registry.sighup.io/fury/cilium/hubble-ui-backend"
123-
tag: "v0.12.1"
123+
tag: "v0.13.0"
124124

125+
useDigest: false
125126
pullPolicy: "IfNotPresent"
126127

127128
resources: {}
@@ -137,7 +138,8 @@ hubble:
137138
image:
138139
override: ~
139140
repository: "registry.sighup.io/fury/cilium/hubble-ui"
140-
tag: "v0.12.1"
141+
tag: "v0.13.0"
142+
useDigest: false
141143
pullPolicy: "IfNotPresent"
142144

143145
# -- Resource requests and limits for the 'frontend' container of the 'hubble-ui' deployment.
@@ -163,11 +165,6 @@ identityAllocationMode: "crd"
163165
# @default -- `"5s"`
164166
identityChangeGracePeriod: ""
165167

166-
# -- Configure whether to install iptables rules to allow for TPROXY
167-
# (L7 proxy injection), iptables-based masquerading and compatibility
168-
# with kube-proxy.
169-
installIptablesRules: true
170-
171168
# -- Install Iptables rules to skip netfilter connection tracking on all pod
172169
# traffic. This option is only effective when Cilium is running in direct
173170
# routing and full KPR mode. Moreover, this option cannot be enabled when Cilium
@@ -262,7 +259,7 @@ operator:
262259
image:
263260
override: ~
264261
repository: "registry.sighup.io/fury/cilium/operator"
265-
tag: "v1.14.3"
262+
tag: "v1.15.2"
266263

267264
useDigest: false
268265
pullPolicy: "IfNotPresent"

0 commit comments

Comments
 (0)