Add Cilium v1.15.1

isovalent · Feb 16, 2024 · 1f68bfa · 1f68bfa
1 parent 84de405
commit 1f68bfa
Show file tree

Hide file tree

Showing 166 changed files with 33,578 additions and 16 deletions.
diff --git a/Makefile.releases b/Makefile.releases
@@ -742,3 +742,13 @@ images.operator.all: images.operator.v1.14.7 generate.configs.v1.14.7
 generate.configs.all: generate.configs.v1.14.7
 
 images.operator.v1.14.7 generate.configs.v1.14.7: cilium_version=1.14.7
+
+
+# Cilium v1.15.1
+
+images.all: images.operator.v1.15.1
+
+images.operator.all: images.operator.v1.15.1 generate.configs.v1.15.1
+generate.configs.all: generate.configs.v1.15.1
+
+images.operator.v1.15.1 generate.configs.v1.15.1: cilium_version=1.15.1
diff --git a/bundles/cilium.v1.15.1/manifests/cilium.clusterserviceversion.yaml b/bundles/cilium.v1.15.1/manifests/cilium.clusterserviceversion.yaml
@@ -14,11 +14,11 @@ metadata:
     features.operators.openshift.io/token-auth-aws: "false"
     features.operators.openshift.io/token-auth-azure: "false"
     features.operators.openshift.io/token-auth-gcp: "false"
-    olm.skipRange: '>=1.15.0 <1.15.1+xf883a11'
+    olm.skipRange: '>=1.15.0 <1.15.1+xcd1233f'
     operators.openshift.io/infrastructure-features: '["disconnected"]'
     repository: http://github.com/cilium/cilium
     support: [email protected]
-  name: cilium.v1.15.1-xf883a11
+  name: cilium.v1.15.1-xcd1233f
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -208,9 +208,7 @@ spec:
                         value: quay.io/cilium/cilium-etcd-operator@sha256:04b8327f7f992693c2cb483b999041ed8f92efc8e14f2a5f3ab95574a65ea2dc
                       - name: RELATED_IMAGE_NODEINIT
                         value: quay.io/cilium/startup-script@sha256:a1454ca1f93b69ecd2c43482c8e13dc418ae15e28a46009f5934300a20afbdba
-                      - name: RELATED_IMAGE_CLUSTERMESH_ETCD
-                        value: null@null
-                    image: registry.connect.redhat.com/isovalent/cilium-olm@sha256:c3d2b2ed2aa99ee7b5e64b792d0a60f61149ba6dc556fa7477acfaa238e028b9
+                    image: registry.connect.redhat.com/isovalent/cilium-olm:262bc76a8812ded7601c52acedfb1ea9cfe9f198-v1.15.1
                     name: operator
                     ports:
                       - containerPort: 9443
@@ -357,4 +355,4 @@ spec:
       name: etcd-operator
     - image: quay.io/cilium/startup-script@sha256:a1454ca1f93b69ecd2c43482c8e13dc418ae15e28a46009f5934300a20afbdba
       name: nodeinit
-  version: 1.15.1+xf883a11
+  version: 1.15.1+xcd1233f
diff --git a/manifests/cilium.v1.15.1/cluster-network-06-cilium-00002-cilium-olm-deployment.yaml b/manifests/cilium.v1.15.1/cluster-network-06-cilium-00002-cilium-olm-deployment.yaml
@@ -50,9 +50,7 @@ spec:
               value: quay.io/cilium/cilium-etcd-operator@sha256:04b8327f7f992693c2cb483b999041ed8f92efc8e14f2a5f3ab95574a65ea2dc
             - name: RELATED_IMAGE_NODEINIT
               value: quay.io/cilium/startup-script@sha256:a1454ca1f93b69ecd2c43482c8e13dc418ae15e28a46009f5934300a20afbdba
-            - name: RELATED_IMAGE_CLUSTERMESH_ETCD
-              value: null@null
-          image: registry.connect.redhat.com/isovalent/cilium-olm@sha256:c3d2b2ed2aa99ee7b5e64b792d0a60f61149ba6dc556fa7477acfaa238e028b9
+          image: registry.connect.redhat.com/isovalent/cilium-olm:262bc76a8812ded7601c52acedfb1ea9cfe9f198-v1.15.1
           name: operator
           ports:
             - containerPort: 9443

diff --git a/manifests/cilium.v1.15.1/cluster-network-06-cilium-00013-cilium-subscription.yaml b/manifests/cilium.v1.15.1/cluster-network-06-cilium-00013-cilium-subscription.yaml
@@ -9,4 +9,4 @@ spec:
   name: cilium
   source: certified-operators
   sourceNamespace: openshift-marketplace
-  startingCSV: cilium.v1.15.1-xf883a11
+  startingCSV: cilium.v1.15.1-xcd1233f
diff --git a/....15.1-xf883a11-clusterserviceversion.yaml → ....15.1-xcd1233f-clusterserviceversion.yaml b/....15.1-xf883a11-clusterserviceversion.yaml → ....15.1-xcd1233f-clusterserviceversion.yaml
@@ -14,11 +14,11 @@ metadata:
     features.operators.openshift.io/token-auth-aws: "false"
     features.operators.openshift.io/token-auth-azure: "false"
     features.operators.openshift.io/token-auth-gcp: "false"
-    olm.skipRange: '>=1.15.0 <1.15.1+xf883a11'
+    olm.skipRange: '>=1.15.0 <1.15.1+xcd1233f'
     operators.openshift.io/infrastructure-features: '["disconnected"]'
     repository: http://github.com/cilium/cilium
     support: [email protected]
-  name: cilium.v1.15.1-xf883a11
+  name: cilium.v1.15.1-xcd1233f
   namespace: cilium
 spec:
   apiservicedefinitions: {}
@@ -208,9 +208,7 @@ spec:
                         value: quay.io/cilium/cilium-etcd-operator@sha256:04b8327f7f992693c2cb483b999041ed8f92efc8e14f2a5f3ab95574a65ea2dc
                       - name: RELATED_IMAGE_NODEINIT
                         value: quay.io/cilium/startup-script@sha256:a1454ca1f93b69ecd2c43482c8e13dc418ae15e28a46009f5934300a20afbdba
-                      - name: RELATED_IMAGE_CLUSTERMESH_ETCD
-                        value: null@null
-                    image: registry.connect.redhat.com/isovalent/cilium-olm@sha256:c3d2b2ed2aa99ee7b5e64b792d0a60f61149ba6dc556fa7477acfaa238e028b9
+                    image: registry.connect.redhat.com/isovalent/cilium-olm:262bc76a8812ded7601c52acedfb1ea9cfe9f198-v1.15.1
                     name: operator
                     ports:
                       - containerPort: 9443
@@ -357,4 +355,4 @@ spec:
       name: etcd-operator
     - image: quay.io/cilium/startup-script@sha256:a1454ca1f93b69ecd2c43482c8e13dc418ae15e28a46009f5934300a20afbdba
       name: nodeinit
-  version: 1.15.1+xf883a11
+  version: 1.15.1+xcd1233f
diff --git a/operator/cilium.v1.15.1/Dockerfile b/operator/cilium.v1.15.1/Dockerfile
@@ -0,0 +1,29 @@
+# Copyright 2017-2021 Authors of Cilium
+# SPDX-License-Identifier: Apache-2.0
+
+FROM quay.io/operator-framework/helm-operator:v1.33
+
+# This make the build time-variant, but there is not easy
+# way around this yet, as the helm-operator image does
+# often have outdatated packages
+# (For a potneial solution see https://github.com/errordeveloper/imagine/issues/27)
+USER root
+RUN microdnf update
+
+# Required Licenses
+COPY LICENSE /licenses/LICENSE.cilium-olm
+
+# Required OpenShift Labels
+LABEL name="Cilium" \
+      version="v1.15.1" \
+      vendor="Isovalent" \
+      release="1" \
+      summary="Cilium OLM operator" \
+      description="This operator mamaged Cilium installation and it is OLM-compliant"
+
+USER helm
+ENV HOME=/opt/helm
+COPY watches.yaml ${HOME}/watches.yaml
+WORKDIR ${HOME}
+
+COPY cilium ${HOME}/helm-charts/cilium
diff --git a/operator/cilium.v1.15.1/LICENSE b/operator/cilium.v1.15.1/LICENSE
@@ -0,0 +1,14 @@
+Copyright 2020 Isovalent, Inc. All rights reserved.
+Copyright 2020 Authors of Cilium. All rights reserved.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
diff --git a/operator/cilium.v1.15.1/cilium/.helmignore b/operator/cilium.v1.15.1/cilium/.helmignore
@@ -0,0 +1,24 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.github/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
diff --git a/operator/cilium.v1.15.1/cilium/Chart.yaml b/operator/cilium.v1.15.1/cilium/Chart.yaml
@@ -0,0 +1,98 @@
+annotations:
+  artifacthub.io/crds: "- kind: CiliumNetworkPolicy\n  version: v2\n  name: ciliumnetworkpolicies.cilium.io\n
+    \ displayName: Cilium Network Policy\n  description: |\n    Cilium Network Policies
+    provide additional functionality beyond what\n    is provided by standard Kubernetes
+    NetworkPolicy such as the ability\n    to allow traffic based on FQDNs, or to
+    filter at Layer 7.\n- kind: CiliumClusterwideNetworkPolicy\n  version: v2\n  name:
+    ciliumclusterwidenetworkpolicies.cilium.io\n  displayName: Cilium Clusterwide
+    Network Policy\n  description: |\n    Cilium Clusterwide Network Policies support
+    configuring network traffic\n    policiies across the entire cluster, including
+    applying node firewalls.\n- kind: CiliumExternalWorkload\n  version: v2\n  name:
+    ciliumexternalworkloads.cilium.io\n  displayName: Cilium External Workload\n  description:
+    |\n    Cilium External Workload supports configuring the ability for external\n
+    \   non-Kubernetes workloads to join the cluster.\n- kind: CiliumLocalRedirectPolicy\n
+    \ version: v2\n  name: ciliumlocalredirectpolicies.cilium.io\n  displayName: Cilium
+    Local Redirect Policy\n  description: |\n    Cilium Local Redirect Policy allows
+    local redirects to be configured\n    within a node to support use cases like
+    Node-Local DNS or KIAM.\n- kind: CiliumNode\n  version: v2\n  name: ciliumnodes.cilium.io\n
+    \ displayName: Cilium Node\n  description: |\n    Cilium Node represents a node
+    managed by Cilium. It contains a\n    specification to control various node specific
+    configuration aspects\n    and a status section to represent the status of the
+    node.\n- kind: CiliumIdentity\n  version: v2\n  name: ciliumidentities.cilium.io\n
+    \ displayName: Cilium Identity\n  description: |\n    Cilium Identity allows introspection
+    into security identities that\n    Cilium allocates which identify sets of labels
+    that are assigned to\n    individual endpoints in the cluster.\n- kind: CiliumEndpoint\n
+    \ version: v2\n  name: ciliumendpoints.cilium.io\n  displayName: Cilium Endpoint\n
+    \ description: |\n    Cilium Endpoint represents the status of individual pods
+    or nodes in\n    the cluster which are managed by Cilium, including enforcement
+    status,\n    IP addressing and whether the networking is successfully operational.\n-
+    kind: CiliumEndpointSlice\n  version: v2alpha1\n  name: ciliumendpointslices.cilium.io\n
+    \ displayName: Cilium Endpoint Slice\n  description: |\n    Cilium Endpoint Slice
+    represents the status of groups of pods or nodes\n    in the cluster which are
+    managed by Cilium, including enforcement status,\n    IP addressing and whether
+    the networking is successfully operational.\n- kind: CiliumEgressGatewayPolicy\n
+    \ version: v2\n  name: ciliumegressgatewaypolicies.cilium.io\n  displayName: Cilium
+    Egress Gateway Policy\n  description: |\n    Cilium Egress Gateway Policy provides
+    control over the way that traffic\n    leaves the cluster and which source addresses
+    to use for that traffic.\n- kind: CiliumClusterwideEnvoyConfig\n  version: v2\n
+    \ name: ciliumclusterwideenvoyconfigs.cilium.io\n  displayName: Cilium Clusterwide
+    Envoy Config\n  description: |\n    Cilium Clusterwide Envoy Config specifies
+    Envoy resources and K8s service mappings\n    to be provisioned into Cilium host
+    proxy instances in cluster context.\n- kind: CiliumEnvoyConfig\n  version: v2\n
+    \ name: ciliumenvoyconfigs.cilium.io\n  displayName: Cilium Envoy Config\n  description:
+    |\n    Cilium Envoy Config specifies Envoy resources and K8s service mappings\n
+    \   to be provisioned into Cilium host proxy instances in namespace context.\n-
+    kind: CiliumBGPPeeringPolicy\n  version: v2alpha1\n  name: ciliumbgppeeringpolicies.cilium.io\n
+    \ displayName: Cilium BGP Peering Policy\n  description: |\n    Cilium BGP Peering
+    Policy instructs Cilium to create specific BGP peering\n    configurations.\n-
+    kind: CiliumBGPClusterConfig\n  version: v2alpha1\n  name: ciliumbgpclusterconfigs.cilium.io\n
+    \ displayName: Cilium BGP Cluster Config\n  description: |\n    Cilium BGP Cluster
+    Config instructs Cilium operator to create specific BGP cluster\n    configurations.\n-
+    kind: CiliumBGPPeerConfig\n  version: v2alpha1\n  name: ciliumbgppeerconfigs.cilium.io\n
+    \ displayName: Cilium BGP Peer Config\n  description: |\n    CiliumBGPPeerConfig
+    is a common set of BGP peer configurations. It can be referenced \n    by multiple
+    peers from CiliumBGPClusterConfig.\n- kind: CiliumBGPAdvertisement\n  version:
+    v2alpha1\n  name: ciliumbgpadvertisements.cilium.io\n  displayName: Cilium BGP
+    Advertisement\n  description: |\n    CiliumBGPAdvertisement is used to define
+    source of BGP advertisement as well as BGP attributes \n    to be advertised with
+    those prefixes.\n- kind: CiliumBGPNodeConfig\n  version: v2alpha1\n  name: ciliumbgpnodeconfigs.cilium.io\n
+    \ displayName: Cilium BGP Node Config\n  description: |\n    CiliumBGPNodeConfig
+    is read only node specific BGP configuration. It is constructed by Cilium operator.\n
+    \   It will also contain node local BGP state information.\n- kind: CiliumBGPNodeConfigOverride\n
+    \ version: v2alpha1\n  name: ciliumbgpnodeconfigoverrides.cilium.io\n  displayName:
+    Cilium BGP Node Config Override\n  description: |\n    CiliumBGPNodeConfigOverride
+    can be used to override node specific BGP configuration.\n- kind: CiliumLoadBalancerIPPool\n
+    \ version: v2alpha1\n  name: ciliumloadbalancerippools.cilium.io\n  displayName:
+    Cilium Load Balancer IP Pool\n  description: |\n    Defining a Cilium Load Balancer
+    IP Pool instructs Cilium to assign IPs to LoadBalancer Services.\n- kind: CiliumNodeConfig\n
+    \ version: v2alpha1\n  name: ciliumnodeconfigs.cilium.io\n  displayName: Cilium
+    Node Configuration\n  description: |\n    CiliumNodeConfig is a list of configuration
+    key-value pairs. It is applied to\n    nodes indicated by a label selector.\n-
+    kind: CiliumCIDRGroup\n  version: v2alpha1\n  name: ciliumcidrgroups.cilium.io\n
+    \ displayName: Cilium CIDR Group\n  description: |\n    CiliumCIDRGroup is a list
+    of CIDRs that can be referenced as a single entity from CiliumNetworkPolicies.\n-
+    kind: CiliumL2AnnouncementPolicy\n  version: v2alpha1\n  name: ciliuml2announcementpolicies.cilium.io\n
+    \ displayName: Cilium L2 Announcement Policy\n  description: |\n    CiliumL2AnnouncementPolicy
+    is a policy which determines which service IPs will be announced to\n    the local
+    area network, by which nodes, and via which interfaces.\n- kind: CiliumPodIPPool\n
+    \ version: v2alpha1\n  name: ciliumpodippools.cilium.io\n  displayName: Cilium
+    Pod IP Pool\n  description: |\n    CiliumPodIPPool defines an IP pool that can
+    be used for pooled IPAM (i.e. the multi-pool IPAM mode).\n"
+apiVersion: v2
+appVersion: 1.15.1
+description: eBPF-based Networking, Security, and Observability
+home: https://cilium.io/
+icon: https://cdn.jsdelivr.net/gh/cilium/[email protected]/Documentation/images/logo-solo.svg
+keywords:
+- BPF
+- eBPF
+- Kubernetes
+- Networking
+- Security
+- Observability
+- Troubleshooting
+kubeVersion: '>= 1.16.0-0'
+name: cilium
+sources:
+- https://github.com/cilium/cilium
+version: 1.15.1