feat(container): update image docker.io/cloudflare/cloudflared ( 2026.1.2 ➔ 2026.3.0 )#548
Merged
Aviator-Coding merged 1 commit intomainfrom Mar 18, 2026
Conversation
Contributor
Author
--- HelmRelease: network/cloudflare-tunnel Deployment: network/cloudflare-tunnel
+++ HelmRelease: network/cloudflare-tunnel Deployment: network/cloudflare-tunnel
@@ -54,13 +54,13 @@
value: 'true'
- name: TUNNEL_TRANSPORT_PROTOCOL
value: quic
envFrom:
- secretRef:
name: cloudflare-tunnel-secret
- image: docker.io/cloudflare/cloudflared:2026.1.2
+ image: docker.io/cloudflare/cloudflared:2026.3.0
livenessProbe:
failureThreshold: 3
httpGet:
path: /ready
port: 8080
initialDelaySeconds: 0 |
Contributor
Author
--- kubernetes/apps/network/cloudflare-tunnel Kustomization: network/cloudflare-tunnel HelmRelease: network/cloudflare-tunnel
+++ kubernetes/apps/network/cloudflare-tunnel Kustomization: network/cloudflare-tunnel HelmRelease: network/cloudflare-tunnel
@@ -57,13 +57,13 @@
TUNNEL_TRANSPORT_PROTOCOL: quic
envFrom:
- secretRef:
name: cloudflare-tunnel-secret
image:
repository: docker.io/cloudflare/cloudflared
- tag: 2026.1.2
+ tag: 2026.3.0
probes:
liveness:
custom: true
enabled: true
spec:
failureThreshold: 3
--- kubernetes/apps/openclaw/homeops-claw Kustomization: openclaw/homeops-claw OpenClawInstance: openclaw/homeops-claw
+++ kubernetes/apps/openclaw/homeops-claw Kustomization: openclaw/homeops-claw OpenClawInstance: openclaw/homeops-claw
@@ -50,39 +50,23 @@
name: openclaw-skills-secret
gateway:
controlUiOrigins: []
existingSecret: openclaw-gateway-token
initContainers:
- args:
- - |
- set -e
- BASE="/home/openclaw/.openclaw"
- export PNPM_HOME="$BASE/pnpm"
- export PATH="$PNPM_HOME:$BASE/.local/bin:/usr/local/bin:/usr/bin:/bin"
-
- # gh CLI (extract from .deb)
- GH_VERSION="2.88.1"
- if [ ! -f "$BASE/.local/bin/gh" ]; then
- mkdir -p "$BASE/.local/bin" /tmp/gh-install
- curl -fsSL -o /tmp/gh-install/gh.deb \
- "https://github.com/cli/cli/releases/download/v${GH_VERSION}/gh_${GH_VERSION}_linux_amd64.deb"
- dpkg-deb -x /tmp/gh-install/gh.deb /tmp/gh-install
- cp /tmp/gh-install/usr/bin/gh "$BASE/.local/bin/gh"
- rm -rf /tmp/gh-install
- echo "gh $GH_VERSION installed"
- else
- echo "gh already installed, skipping"
- fi
-
- # summarize (pnpm global to PVC)
- if ! command -v summarize >/dev/null 2>&1; then
- pnpm add -g @steipete/summarize
- echo "summarize installed"
- else
- echo "summarize already installed, skipping"
- fi
+ - "set -e\nBASE=\"/home/openclaw/.openclaw\"\nexport PNPM_HOME=\"$BASE/pnpm\"\n\
+ export PATH=\"$PNPM_HOME:$BASE/.local/bin:/usr/local/bin:/usr/bin:/bin\"\n\n\
+ # gh CLI (extract from .deb \u2014 avoids tarball redirect issues)\nGH_VERSION=\"\
+ 2.88.1\"\nif [ ! -f \"$BASE/.local/bin/gh\" ]; then\n mkdir -p \"$BASE/.local/bin\"\
+ \ /tmp/gh-install\n curl -fsSL -o /tmp/gh-install/gh.deb \\\n \"https://github.com/cli/cli/releases/download/v/gh__linux_amd64.deb\"\
+ \n dpkg-deb -x /tmp/gh-install/gh.deb /tmp/gh-install\n cp /tmp/gh-install/usr/bin/gh\
+ \ \"$BASE/.local/bin/gh\"\n rm -rf /tmp/gh-install\n echo \"gh installed\"\
+ \nelse\n echo \"gh already installed, skipping\"\nfi\n\n# summarize (pnpm global\
+ \ to PVC)\nif ! command -v summarize >/dev/null 2>&1; then\n pnpm add -g @steipete/summarize\n\
+ \ echo \"summarize installed\"\nelse\n echo \"summarize already installed,\
+ \ skipping\"\nfi\n"
command:
- /bin/sh
- -c
image: ghcr.io/openclaw/openclaw:latest
name: install-tools
volumeMounts: |
8e47809 to
4791226
Compare
Aviator-Coding
approved these changes
Mar 17, 2026
Owner
Aviator-Coding
left a comment
There was a problem hiding this comment.
🤖 Auto-approved: safe update
4791226 to
b4027f4
Compare
….1.2 ➔ 2026.3.0 ) | datasource | package | from | to | | ---------- | -------------------------------- | -------- | -------- | | docker | docker.io/cloudflare/cloudflared | 2026.1.2 | 2026.3.0 |
b4027f4 to
c0d5c4f
Compare
Owner
|
🤖 Auto-review: Merging Minor container image update for cloudflared from 2026.1.2 to 2026.3.0. Cloudflared is the Cloudflare Tunnel client that provides secure ingress to cluster services without exposing ports. All CI checks passed. Routine quarterly update — safe to merge as cloudflared maintains strong backward compatibility across minor releases. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2026.1.2→2026.3.0Release Notes
cloudflare/cloudflared (docker.io/cloudflare/cloudflared)
v2026.3.0Compare Source
SHA256 Checksums:
v2026.2.0Compare Source
Breaking Change
Removes the
proxy-dnsfeature from cloudflared. This feature allowed running a local DNS over HTTPS (DoH) proxy.Users who relied on this functionality should migrate to alternative solutions.
Removed commands and flags:
cloudflared proxy-dnscloudflared tunnel proxy-dns--proxy-dns,--proxy-dns-port,--proxy-dns-address,--proxy-dns-upstream,--proxy-dns-max-upstream-conns,--proxy-dns-bootstrapresolversection in configuration fileConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.