Skip to content

Commit 11a8d78

Browse files
stevenctlstevenctl
authored
bump istio, go-control-plane and k8s 1.32 deps (#10611)
1 parent 108c680 commit 11a8d78

File tree

180 files changed

+8348
-7814
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

180 files changed

+8348
-7814
lines changed

‎changelog/v1.19.0-beta9/bump-deps.yaml

+107
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,107 @@
1+
changelog:
2+
3+
- type: NON_USER_FACING
4+
description: >
5+
To support the Istio dependency being bumped,
6+
add a workaround that prevents sending xDS for Kubernetes Gateways until
7+
their per-client clusters are ready.
8+
9+
This works around the fact that the latest krt behavior is now async; we
10+
previously relied on events to have a specific order but because they're
11+
processed in parallel there is no guarantee clusters are ready before we
12+
process the xds snapshot for the unique connected client on the first
13+
iteration.
14+
15+
In the future we seek to add guarantees to the krt framework upstream to
16+
avoid the need to be careful with situations like these.
17+
18+
- type: NON_USER_FACING
19+
description: >
20+
Bump dependencies to support latest Envoy (1.33).
21+
issueLink: https://github.com/kgateway-dev/kgateway/issues/10487
22+
resolvesIssue: false
23+
24+
- type: DEPENDENCY_BUMP
25+
dependencyOwner: github.com/envoyproxy
26+
dependencyRepo: go-control-plane/contrib
27+
dependencyTag: v1.32.5-0.20250207140015-90270e3c85fd
28+
- type: DEPENDENCY_BUMP
29+
dependencyOwner: github.com/envoyproxy
30+
dependencyRepo: go-control-plane/envoy
31+
dependencyTag: v1.32.5-0.20250211152746-ef139ef8ea6b
32+
- type: DEPENDENCY_BUMP
33+
dependencyOwner: golang.org
34+
dependencyRepo: x/crypto
35+
dependencyTag: v0.32.0
36+
- type: DEPENDENCY_BUMP
37+
dependencyOwner: golang.org
38+
dependencyRepo: x/tools
39+
dependencyTag: v0.29.0
40+
- type: DEPENDENCY_BUMP
41+
dependencyOwner: google.golang.org
42+
dependencyRepo: grpc
43+
dependencyTag: v1.70.0
44+
- type: DEPENDENCY_BUMP
45+
dependencyOwner: google.golang.org
46+
dependencyRepo: protobuf
47+
dependencyTag: v1.36.5
48+
- type: DEPENDENCY_BUMP
49+
dependencyOwner: github.com/fsnotify
50+
dependencyRepo: fsnotify
51+
dependencyTag: v1.8.0
52+
- type: DEPENDENCY_BUMP
53+
dependencyOwner: k8s.io
54+
dependencyRepo: api
55+
dependencyTag: v0.32.1
56+
- type: DEPENDENCY_BUMP
57+
dependencyOwner: k8s.io
58+
dependencyRepo: apiextensions-apiserver
59+
dependencyTag: v0.32.1
60+
- type: DEPENDENCY_BUMP
61+
dependencyOwner: k8s.io
62+
dependencyRepo: apimachinery
63+
dependencyTag: v0.32.1
64+
- type: DEPENDENCY_BUMP
65+
dependencyOwner: k8s.io
66+
dependencyRepo: apiserver
67+
dependencyTag: v0.32.1
68+
- type: DEPENDENCY_BUMP
69+
dependencyOwner: k8s.io
70+
dependencyRepo: cli-runtime
71+
dependencyTag: v0.32.1
72+
- type: DEPENDENCY_BUMP
73+
dependencyOwner: k8s.io
74+
dependencyRepo: client-go
75+
dependencyTag: v0.32.1
76+
- type: DEPENDENCY_BUMP
77+
dependencyOwner: sigs.k8s.io
78+
dependencyRepo: code-generator
79+
dependencyTag: v0.32.1
80+
- type: DEPENDENCY_BUMP
81+
dependencyOwner: sigs.k8s.io
82+
dependencyRepo: component-base
83+
dependencyTag: v0.32.1
84+
- type: DEPENDENCY_BUMP
85+
dependencyOwner: sigs.k8s.io
86+
dependencyRepo: component-helpers
87+
dependencyTag: v0.32.1
88+
- type: DEPENDENCY_BUMP
89+
dependencyOwner: sigs.k8s.io
90+
dependencyRepo: kubectl
91+
dependencyTag: v0.32.1
92+
- type: DEPENDENCY_BUMP
93+
dependencyOwner: sigs.k8s.io
94+
dependencyRepo: metrics
95+
dependencyTag: v0.32.1
96+
- type: DEPENDENCY_BUMP
97+
dependencyOwner: sigs.k8s.io
98+
dependencyRepo: controller-runtime
99+
dependencyTag: v0.20.1
100+
- type: DEPENDENCY_BUMP
101+
dependencyOwner: onsi
102+
dependencyRepo: ginkgo/v2
103+
dependencyTag: v2.22.1
104+
- type: DEPENDENCY_BUMP
105+
dependencyOwner: onsi
106+
dependencyRepo: gomega
107+
dependencyTag: v1.36.2

‎docs/content/reference/api/github.com/solo-io/gloo/projects/gateway2/api/v1alpha1/gateway_parameters.md

+7
Original file line numberDiff line numberDiff line change
@@ -6900,6 +6900,13 @@ Resource Types:
69006900
<i>Format</i>: int64<br/>
69016901
</td>
69026902
<td>false</td>
6903+
</tr><tr>
6904+
<td><b>seLinuxChangePolicy</b></td>
6905+
<td>string</td>
6906+
<td>
6907+
<br/>
6908+
</td>
6909+
<td>false</td>
69036910
</tr><tr>
69046911
<td><b><a href="#gatewayparametersspeckubepodtemplatesecuritycontextselinuxoptions">seLinuxOptions</a></b></td>
69056912
<td>object</td>

‎docs/content/reference/values.txt

+3
Original file line numberDiff line numberDiff line change
@@ -434,6 +434,7 @@
434434
|gloo.deployment.podSecurityContext.seccompProfile.localhostProfile|string|||
435435
|gloo.deployment.podSecurityContext.appArmorProfile.type|string|||
436436
|gloo.deployment.podSecurityContext.appArmorProfile.localhostProfile|string|||
437+
|gloo.deployment.podSecurityContext.seLinuxChangePolicy|string|||
437438
|gloo.deployment.podSecurityContext.mergePolicy|string||How to combine the defined security policy with the default security policy. Valid values are "", "no-merge", and "helm-merge". If defined as an empty string or "no-merge", use the defined security context as is. If "helm-merge", merge this security context with the default security context according to the logic of [the helm 'merge' function](https://helm.sh/docs/chart_template_guide/function_list/#merge-mustmerge). This is intended to be used to modify a field in a security context, while using all other default values. Please note that due to how helm's 'merge' function works, you can not override a 'true' value with a 'false' value, and for that case you will need to define the entire security context and set this value to false. Default value is "".|
438439
|gloo.deployment.replicas|int|1|number of instances to deploy|
439440
|gloo.deployment.customEnv[].name|string|||
@@ -960,6 +961,7 @@
960961
|gatewayProxies.NAME.podTemplate.podSecurityContext.seccompProfile.localhostProfile|string|||
961962
|gatewayProxies.NAME.podTemplate.podSecurityContext.appArmorProfile.type|string|||
962963
|gatewayProxies.NAME.podTemplate.podSecurityContext.appArmorProfile.localhostProfile|string|||
964+
|gatewayProxies.NAME.podTemplate.podSecurityContext.seLinuxChangePolicy|string|||
963965
|gatewayProxies.NAME.podTemplate.podSecurityContext.mergePolicy|string||How to combine the defined security policy with the default security policy. Valid values are "", "no-merge", and "helm-merge". If defined as an empty string or "no-merge", use the defined security context as is. If "helm-merge", merge this security context with the default security context according to the logic of [the helm 'merge' function](https://helm.sh/docs/chart_template_guide/function_list/#merge-mustmerge). This is intended to be used to modify a field in a security context, while using all other default values. Please note that due to how helm's 'merge' function works, you can not override a 'true' value with a 'false' value, and for that case you will need to define the entire security context and set this value to false. Default value is "".|
964966
|gatewayProxies.NAME.podTemplate.image.tag|string||The image tag for the container.|
965967
|gatewayProxies.NAME.podTemplate.image.repository|string||The image repository (name) for the container.|
@@ -1213,6 +1215,7 @@
12131215
|gatewayProxies.gatewayProxy.podTemplate.podSecurityContext.seccompProfile.localhostProfile|string|||
12141216
|gatewayProxies.gatewayProxy.podTemplate.podSecurityContext.appArmorProfile.type|string|||
12151217
|gatewayProxies.gatewayProxy.podTemplate.podSecurityContext.appArmorProfile.localhostProfile|string|||
1218+
|gatewayProxies.gatewayProxy.podTemplate.podSecurityContext.seLinuxChangePolicy|string|||
12161219
|gatewayProxies.gatewayProxy.podTemplate.podSecurityContext.mergePolicy|string||How to combine the defined security policy with the default security policy. Valid values are "", "no-merge", and "helm-merge". If defined as an empty string or "no-merge", use the defined security context as is. If "helm-merge", merge this security context with the default security context according to the logic of [the helm 'merge' function](https://helm.sh/docs/chart_template_guide/function_list/#merge-mustmerge). This is intended to be used to modify a field in a security context, while using all other default values. Please note that due to how helm's 'merge' function works, you can not override a 'true' value with a 'false' value, and for that case you will need to define the entire security context and set this value to false. Default value is "".|
12171220
|gatewayProxies.gatewayProxy.podTemplate.image.tag|string|<release_version, ex: 1.2.3>|The image tag for the container.|
12181221
|gatewayProxies.gatewayProxy.podTemplate.image.repository|string|gloo-envoy-wrapper|The image repository (name) for the container.|

‎docs/content/static/content/osa_provided.md

+32-30
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,18 @@
11
Name|Version|License
22
---|---|---
3-
[semver/v3](https://github.com/Masterminds/semver)|v3.3.0|MIT License
3+
[semver/v3](https://github.com/Masterminds/semver)|v3.3.1|MIT License
44
[Netflix/go-expect](https://github.com/Netflix/go-expect)|v0.0.0-20180928190340-9d1f4485533b|Apache License 2.0
55
[ahmetb/gen-crd-api-reference-docs](https://github.com/ahmetb/gen-crd-api-reference-docs)|v0.3.1-0.20240214155107-6cf1ede4da61|Apache License 2.0
66
[avast/retry-go](https://github.com/avast/retry-go)|v2.4.3+incompatible|MIT License
77
[retry-go/v4](https://github.com/avast/retry-go)|v4.3.3|MIT License
88
[aws/aws-sdk-go](https://github.com/aws/aws-sdk-go)|v1.34.9|Apache License 2.0
9-
[census-instrumentation/opencensus-proto](https://github.com/census-instrumentation/opencensus-proto)|v0.2.0|Apache License 2.0
10-
[xds/go](https://github.com/cncf/xds)|v0.0.0-20240905190251-b4127c9b8d78|Apache License 2.0
9+
[xds/go](https://github.com/cncf/xds)|v0.0.0-20250121191232-2f005788dc42|Apache License 2.0
1110
[cratonica/2goarray](https://github.com/cratonica/2goarray)|v0.0.0-20190331194516-514510793eaa|MIT License
12-
[envoyproxy/go-control-plane](https://github.com/envoyproxy/go-control-plane)|v0.13.2-0.20241022220226-23b7e55d7f65|Apache License 2.0
13-
[envoyproxy/protoc-gen-validate](https://github.com/envoyproxy/protoc-gen-validate)|v1.1.0|Apache License 2.0
11+
[envoyproxy/go-control-plane](https://github.com/envoyproxy/go-control-plane)|v0.13.5-0.20250123154839-2a6715911fec|Apache License 2.0
12+
[go-control-plane/contrib](https://github.com/envoyproxy/go-control-plane)|v1.32.5-0.20250207140015-90270e3c85fd|Apache License 2.0
13+
[go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane)|v1.32.5-0.20250211152746-ef139ef8ea6b|Apache License 2.0
14+
[go-control-plane/ratelimit](https://github.com/envoyproxy/go-control-plane)|v0.1.0|Apache License 2.0
15+
[envoyproxy/protoc-gen-validate](https://github.com/envoyproxy/protoc-gen-validate)|v1.2.1|Apache License 2.0
1416
[form3tech-oss/jwt-go](https://github.com/form3tech-oss/jwt-go)|v3.2.5+incompatible|MIT License
1517
[fsnotify/fsnotify](https://github.com/fsnotify/fsnotify)|v1.7.0|BSD 3-clause "New" or "Revised" License
1618
[ghodss/yaml](https://github.com/ghodss/yaml)|v1.0.1-0.20190212211648-25d852aebe32|MIT License
@@ -36,12 +38,12 @@ Name|Version|License
3638
[kelseyhightower/envconfig](https://github.com/kelseyhightower/envconfig)|v1.4.0|MIT License
3739
[go-httpbin/v2](https://github.com/mccutchen/go-httpbin)|v2.15.0|MIT License
3840
[olekukonko/tablewriter](https://github.com/olekukonko/tablewriter)|v0.0.5|MIT License
39-
[ginkgo/v2](https://github.com/onsi/ginkgo)|v2.20.2|MIT License
40-
[onsi/gomega](https://github.com/onsi/gomega)|v1.35.0|MIT License
41+
[ginkgo/v2](https://github.com/onsi/ginkgo)|v2.22.1|MIT License
42+
[onsi/gomega](https://github.com/onsi/gomega)|v1.36.2|MIT License
4143
[pkg/browser](https://github.com/pkg/browser)|v0.0.0-20180916011732-0a3d74bf9ce4|BSD 2-clause "Simplified" License
4244
[pkg/errors](https://github.com/pkg/errors)|v0.9.1|BSD 2-clause "Simplified" License
4345
[prometheus/client_model](https://github.com/prometheus/client_model)|v0.6.1|Apache License 2.0
44-
[prometheus/common](https://github.com/prometheus/common)|v0.60.1|Apache License 2.0
46+
[prometheus/common](https://github.com/prometheus/common)|v0.62.0|Apache License 2.0
4547
[go-ruleguard/dsl](https://github.com/quasilyte/go-ruleguard)|v0.3.22|BSD 3-clause "New" or "Revised" License
4648
[rotisserie/eris](https://github.com/rotisserie/eris)|v0.5.4|MIT License
4749
[saiskee/gettercheck](https://github.com/saiskee/gettercheck)|v0.0.0-20210820204958-38443d06ebe0|MIT License
@@ -51,39 +53,39 @@ Name|Version|License
5153
[spf13/pflag](https://github.com/spf13/pflag)|v1.0.5|BSD 3-clause "New" or "Revised" License
5254
[spf13/viper](https://github.com/spf13/viper)|v1.19.0|MIT License
5355
[stoewer/go-strcase](https://github.com/stoewer/go-strcase)|v1.3.0|MIT License
54-
[stretchr/testify](https://github.com/stretchr/testify)|v1.9.0|MIT License
56+
[stretchr/testify](https://github.com/stretchr/testify)|v1.10.0|MIT License
5557
[go.opencensus.io](https://go.opencensus.io)|v0.24.0|Apache License 2.0
5658
[go.uber.org/goleak](https://go.uber.org/goleak)|v1.3.0|MIT License
5759
[go.uber.org/multierr](https://go.uber.org/multierr)|v1.11.0|MIT License
5860
[go.uber.org/zap](https://go.uber.org/zap)|v1.27.0|MIT License
59-
[x/crypto](https://golang.org/x/crypto)|v0.31.0|BSD 3-clause "New" or "Revised" License
60-
[x/exp](https://golang.org/x/exp)|v0.0.0-20240719175910-8a7402abbf56|BSD 3-clause "New" or "Revised" License
61-
[x/mod](https://golang.org/x/mod)|v0.21.0|BSD 3-clause "New" or "Revised" License
61+
[x/crypto](https://golang.org/x/crypto)|v0.32.0|BSD 3-clause "New" or "Revised" License
62+
[x/exp](https://golang.org/x/exp)|v0.0.0-20241215155358-4a5509556b9e|BSD 3-clause "New" or "Revised" License
63+
[x/mod](https://golang.org/x/mod)|v0.22.0|BSD 3-clause "New" or "Revised" License
6264
[x/sync](https://golang.org/x/sync)|v0.10.0|BSD 3-clause "New" or "Revised" License
63-
[x/tools](https://golang.org/x/tools)|v0.24.0|BSD 3-clause "New" or "Revised" License
64-
[googleapis/api](https://google.golang.org/genproto/googleapis/api)|v0.0.0-20241021214115-324edc3d5d38|Apache License 2.0
65-
[googleapis/rpc](https://google.golang.org/genproto/googleapis/rpc)|v0.0.0-20241021214115-324edc3d5d38|Apache License 2.0
66-
[google.golang.org/grpc](https://google.golang.org/grpc)|v1.67.1|Apache License 2.0
67-
[google.golang.org/protobuf](https://google.golang.org/protobuf)|v1.35.1|BSD 3-clause "New" or "Revised" License
65+
[x/tools](https://golang.org/x/tools)|v0.29.0|BSD 3-clause "New" or "Revised" License
66+
[googleapis/api](https://google.golang.org/genproto/googleapis/api)|v0.0.0-20250122153221-138b5a5a4fd4|Apache License 2.0
67+
[googleapis/rpc](https://google.golang.org/genproto/googleapis/rpc)|v0.0.0-20250122153221-138b5a5a4fd4|Apache License 2.0
68+
[google.golang.org/grpc](https://google.golang.org/grpc)|v1.70.0|Apache License 2.0
69+
[google.golang.org/protobuf](https://google.golang.org/protobuf)|v1.36.5|BSD 3-clause "New" or "Revised" License
6870
[AlecAivazis/survey.v1](https://gopkg.in/AlecAivazis/survey.v1)|v1.8.7|MIT License
69-
[helm/v3](https://helm.sh/helm/v3)|v3.16.2|Apache License 2.0
70-
[istio.io/api](https://istio.io/api)|v1.24.0-alpha.0.0.20241106042855-9e26cdd3450a|Apache License 2.0
71-
[istio.io/client-go](https://istio.io/client-go)|v1.24.0-alpha.0.0.20241106043554-b5828356941f|Apache License 2.0
72-
[istio.io/istio](https://istio.io/istio)|v0.0.0-20241107203726-094b9e700412|Apache License 2.0
73-
[k8s.io/api](https://k8s.io/api)|v0.31.1|Apache License 2.0
74-
[k8s.io/apiextensions-apiserver](https://k8s.io/apiextensions-apiserver)|v0.31.1|Apache License 2.0
75-
[k8s.io/apimachinery](https://k8s.io/apimachinery)|v0.31.1|Apache License 2.0
76-
[k8s.io/client-go](https://k8s.io/client-go)|v0.31.1|Apache License 2.0
77-
[k8s.io/code-generator](https://k8s.io/code-generator)|v0.31.1|Apache License 2.0
78-
[k8s.io/component-base](https://k8s.io/component-base)|v0.31.1|Apache License 2.0
79-
[k8s.io/kubectl](https://k8s.io/kubectl)|v0.31.1|Apache License 2.0
71+
[helm/v3](https://helm.sh/helm/v3)|v3.17.0|Apache License 2.0
72+
[istio.io/api](https://istio.io/api)|v1.25.0-alpha.0.0.20250210220544-0b64afd2de85|Apache License 2.0
73+
[istio.io/client-go](https://istio.io/client-go)|v1.25.0-alpha.0.0.20250210220843-5a4065fded65|Apache License 2.0
74+
[istio.io/istio](https://istio.io/istio)|v0.0.0-20250212203644-c2ac935c5888|Apache License 2.0
75+
[k8s.io/api](https://k8s.io/api)|v0.32.1|Apache License 2.0
76+
[k8s.io/apiextensions-apiserver](https://k8s.io/apiextensions-apiserver)|v0.32.1|Apache License 2.0
77+
[k8s.io/apimachinery](https://k8s.io/apimachinery)|v0.32.1|Apache License 2.0
78+
[k8s.io/client-go](https://k8s.io/client-go)|v0.32.1|Apache License 2.0
79+
[k8s.io/code-generator](https://k8s.io/code-generator)|v0.32.1|Apache License 2.0
80+
[k8s.io/component-base](https://k8s.io/component-base)|v0.32.1|Apache License 2.0
81+
[k8s.io/kubectl](https://k8s.io/kubectl)|v0.32.1|Apache License 2.0
8082
[k8s.io/utils](https://k8s.io/utils)|v0.0.0-20240711033017-18e509b52bc8|Apache License 2.0
8183
[knative.dev/networking](https://knative.dev/networking)|v0.0.0-20211210083629-bace06e98aee|Apache License 2.0
8284
[knative.dev/pkg](https://knative.dev/pkg)|v0.0.0-20211206113427-18589ac7627e|Apache License 2.0
83-
[sigs.k8s.io/controller-runtime](https://sigs.k8s.io/controller-runtime)|v0.19.1|Apache License 2.0
85+
[sigs.k8s.io/controller-runtime](https://sigs.k8s.io/controller-runtime)|v0.20.1|Apache License 2.0
8486
[sigs.k8s.io/controller-tools](https://sigs.k8s.io/controller-tools)|v0.16.3|Apache License 2.0
8587
[sigs.k8s.io/gateway-api](https://sigs.k8s.io/gateway-api)|v1.2.1|Apache License 2.0
86-
[structured-merge-diff/v4](https://sigs.k8s.io/structured-merge-diff/v4)|v4.4.1|Apache License 2.0
88+
[structured-merge-diff/v4](https://sigs.k8s.io/structured-merge-diff/v4)|v4.5.0|Apache License 2.0
8789
[sigs.k8s.io/yaml](https://sigs.k8s.io/yaml)|v1.4.0|MIT License
8890
[cmd/goimports](https://golang.org/x/tools/cmd/goimports)|latest|MIT License
8991
[gogo/protobuf](https://github.com/gogo/protobuf)|latest|MIT License

0 commit comments

Comments
 (0)