Add renovate tags for automatic updates of kernel version in v1.14

.github/actions/ginkgo/main-k8s-versions.yaml

@@ -3,45 +3,63 @@
 include:
   - k8s-version: "1.27"
     ip-family: "dual"
+    # renovate: datasource=docker
     kube-image: "kindest/node:v1.27.1@sha256:b7d12ed662b873bd8510879c1846e87c7e676a79fefc93e17b2a52989d3ff42b"
+    # We don't want to update bpf-next after branching
     kernel: "bpf-next-20230526.105339@sha256:4133d4e09b1e86ac175df8d899873180281bb4220dc43e2566c47b0241637411"
 
   - k8s-version: "1.26"
     ip-family: "dual"
+    # renovate: datasource=docker
     kube-image: "kindest/node:v1.26.4@sha256:f4c0d87be03d6bea69f5e5dc0adb678bb498a190ee5c38422bf751541cebe92e"
+    # renovate: datasource=docker depName=quay.io/lvh-images/kind
     kernel: "4.19-20230526.105339@sha256:cca7436d6c9f08bd218ac12347eb76616ad1a276282806239a93035033b35efe"
 
   - k8s-version: "1.25"
     ip-family: "dual"
+    # renovate: datasource=docker
     kube-image: "kindest/node:v1.25.9@sha256:c08d6c52820aa42e533b70bce0c2901183326d86dcdcbedecc9343681db45161"
+    # renovate: datasource=docker depName=quay.io/lvh-images/kind
     kernel: "5.4-20230526.105339@sha256:523ff0c81ed9be73a2d0d02a64c72655225efdd32e35220f530ca3eff3eada3c"
 
   - k8s-version: "1.24"
     ip-family: "dual"
+    # renovate: datasource=docker
     kube-image: "kindest/node:v1.24.13@sha256:cea86276e698af043af20143f4bf0509e730ec34ed3b7fa790cc0bea091bc5dd"
+    # renovate: datasource=docker depName=quay.io/lvh-images/kind
     kernel: "4.19-20230526.105339@sha256:cca7436d6c9f08bd218ac12347eb76616ad1a276282806239a93035033b35efe"
 
   - k8s-version: "1.23"
     ip-family: "dual"
+    # renovate: datasource=docker
     kube-image: "kindest/node:v1.23.17@sha256:f77f8cf0b30430ca4128cc7cfafece0c274a118cd0cdb251049664ace0dee4ff"
+    # renovate: datasource=docker depName=quay.io/lvh-images/kind
     kernel: "4.19-20230526.105339@sha256:cca7436d6c9f08bd218ac12347eb76616ad1a276282806239a93035033b35efe"
 
   - k8s-version: "1.22"
     ip-family: "dual"
+    # renovate: datasource=docker
     kube-image: "kindest/node:v1.22.17@sha256:9af784f45a584f6b28bce2af84c494d947a05bd709151466489008f80a9ce9d5"
+    # renovate: datasource=docker depName=quay.io/lvh-images/kind
     kernel: "4.19-20230526.105339@sha256:cca7436d6c9f08bd218ac12347eb76616ad1a276282806239a93035033b35efe"
 
   - k8s-version: "1.21"
     ip-family: "dual"
+    # renovate: datasource=docker
     kube-image: "kindest/node:v1.21.14@sha256:220cfafdf6e3915fbce50e13d1655425558cb98872c53f802605aa2fb2d569cf"
+    # renovate: datasource=docker depName=quay.io/lvh-images/kind
     kernel: "4.19-20230526.105339@sha256:cca7436d6c9f08bd218ac12347eb76616ad1a276282806239a93035033b35efe"
 
   - k8s-version: "1.20"
     ip-family: "dual"
+    # renovate: datasource=docker
     kube-image: "kindest/node:v1.20.15@sha256:a32bf55309294120616886b5338f95dd98a2f7231519c7dedcec32ba29699394"
+    # renovate: datasource=docker depName=quay.io/lvh-images/kind
     kernel: "4.19-20230526.105339@sha256:cca7436d6c9f08bd218ac12347eb76616ad1a276282806239a93035033b35efe"
 
   - k8s-version: "1.19"
     ip-family: "ipv4"
+    # renovate: datasource=docker
     kube-image: "kindest/node:v1.19.16@sha256:476cb3269232888437b61deca013832fee41f9f074f9bed79f57e4280f7c48b7"
+    # renovate: datasource=docker depName=quay.io/lvh-images/kind
     kernel: "4.19-20230526.105339@sha256:cca7436d6c9f08bd218ac12347eb76616ad1a276282806239a93035033b35efe"

.github/workflows/conformance-aws-cni.yaml

@@ -58,6 +58,7 @@ env:
   CILIUM_CLI_MODE: helm
   check_url: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
   eksctl_version: v0.143.0
+  # renovate: datasource=github-releases depName=kubernetes/kubernetes
   kubectl_version: v1.27.2
 
 jobs:

.github/workflows/conformance-clustermesh.yaml

@@ -53,6 +53,7 @@ concurrency:
 env:
   # renovate: datasource=github-releases depName=kubernetes-sigs/kind
   kind_version: v0.20.0
+  # renovate: datasource=docker depName=kindest/node
   k8s_version: v1.27.1
   # renovate: datasource=github-releases depName=cilium/cilium-cli
   cilium_cli_version: v0.15.5

.github/workflows/conformance-e2e.yaml

@@ -78,25 +78,29 @@ jobs:
           # See https://github.com/cilium/cilium/issues/20606 for configuration table
 
           - name: '1'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '4.19-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'false'
             tunnel: 'vxlan'
 
           - name: '2'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '5.4-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'false'
             tunnel: 'disabled'
 
           - name: '3'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '5.10-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'false'
             tunnel: 'disabled'
             endpoint-routes: 'true'
 
           - name: '4'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '5.10-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'true'
@@ -106,6 +110,7 @@ jobs:
             egress-gateway: 'true'
 
           - name: '5'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '5.15-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'true'
@@ -116,6 +121,7 @@ jobs:
             host-fw: 'true'
 
           - name: '6'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '6.0-20230420.212204'
             kube-proxy: 'none'
             kpr: 'true'
@@ -126,6 +132,7 @@ jobs:
             lb-acceleration: 'testing-only'
 
           - name: '7'
+            # We don't want to update bpf-next after branching
             kernel: 'bpf-next-20230420.212204'
             kube-proxy: 'none'
             kpr: 'true'
@@ -135,13 +142,15 @@ jobs:
             lb-acceleration: 'testing-only'
 
           - name: '8'
+            # We don't want to update bpf-next after branching
             kernel: 'bpf-next-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'false'
             tunnel: 'geneve'
             endpoint-routes: 'true'
 
           - name: '9'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '4.19-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'false'
@@ -150,6 +159,7 @@ jobs:
             encryption-node: 'false'
 
           - name: '10'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '5.4-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'false'
@@ -158,6 +168,7 @@ jobs:
             encryption-node: 'false'
 
           - name: '11'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '5.10-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'false'
@@ -167,6 +178,7 @@ jobs:
             endpoint-routes: 'true'
 
           - name: '12'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '5.10-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'true'
@@ -178,6 +190,7 @@ jobs:
             egress-gateway: 'true'
 
           - name: '13'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '5.15-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'true'
@@ -189,6 +202,7 @@ jobs:
             egress-gateway: 'true'
 
           - name: '14'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '6.0-20230420.212204'
             kube-proxy: 'none'
             kpr: 'true'
@@ -199,6 +213,7 @@ jobs:
             egress-gateway: 'true'
 
           - name: '15'
+            # We don't want to update bpf-next after branching
             kernel: 'bpf-next-20230420.212204'
             kube-proxy: 'none'
             kpr: 'true'
@@ -209,6 +224,7 @@ jobs:
             egress-gateway: 'true'
 
           - name: '16'
+            # We don't want to update bpf-next after branching
             kernel: 'bpf-next-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'false'

.github/workflows/conformance-eks.yaml

@@ -58,6 +58,7 @@ env:
   CILIUM_CLI_MODE: helm
   check_url: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
   eksctl_version: v0.143.0
+  # renovate: datasource=github-releases depName=kubernetes/kubernetes
   kubectl_version: v1.27.2
 
 jobs:

.github/workflows/conformance-k8s-kind-network-policies.yaml

@@ -28,6 +28,7 @@ env:
   cilium_cli_version: v0.15.5
   cilium_cli_ci_version:
   CILIUM_CLI_MODE: helm
+  # renovate: datasource=docker depName=kindest/node
   k8s_version: v1.27.1
 
 jobs:

.github/workflows/conformance-k8s-kind.yaml

@@ -28,6 +28,7 @@ env:
   cilium_cli_version: v0.15.5
   cilium_cli_ci_version:
   CILIUM_CLI_MODE: helm
+  # renovate: datasource=docker depName=kindest/node
   k8s_version: v1.27.1
 
 jobs:

.github/workflows/conformance-k8s-network-policies.yaml

@@ -11,6 +11,7 @@ env:
   # renovate: datasource=github-releases depName=cilium/cilium-cli
   cilium_cli_version: v0.15.5
   cilium_cli_ci_version:
+  # renovate: datasource=github-releases depName=kubernetes-sigs/kind
   KIND_VERSION: v0.17.0
   KIND_CONFIG: .github/kind-config.yaml
   CONFORMANCE_TEMPLATE: examples/kubernetes/connectivity-check/connectivity-check.yaml

.github/workflows/tests-datapath-verifier.yaml

@@ -69,14 +69,19 @@ jobs:
       fail-fast: false
       matrix:
         include:
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
           - kernel: '4.19-20230420.212204'
             ci-kernel: '419'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
           - kernel: '5.4-20230420.212204'
             ci-kernel: '54'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
           - kernel: '5.10-20230420.212204'
             ci-kernel: '510'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
           - kernel: '5.15-20230420.212204'
             ci-kernel: '510'
+            # We don't want to update bpf-next after branching
           - kernel: 'bpf-next-20230420.212204'
             ci-kernel: 'netnext'
     timeout-minutes: 60

.github/workflows/tests-ipsec-upgrade.yaml

@@ -78,6 +78,7 @@ jobs:
       matrix:
         include:
           - name: '1'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '5.4-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'disabled'
@@ -89,6 +90,7 @@ jobs:
             ipv6: 'false' # until https://github.com/cilium/cilium/issues/26944 resolved
 
           - name: '2'
+            # renovate: datasource=docker depName=quay.io/lvh-images/kind
             kernel: '5.10-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'disabled'
@@ -100,6 +102,7 @@ jobs:
             ipv6: 'false' # until https://github.com/cilium/cilium/issues/26944 resolved
 
           - name: '3'
+            # We don't want to update bpf-next after branching
             kernel: 'bpf-next-20230420.212204'
             kube-proxy: 'iptables'
             kpr: 'disabled'

.github/workflows/tests-smoke-ipv6.yaml

@@ -19,6 +19,7 @@ env:
   cilium_cli_version: v0.15.5
   cilium_cli_ci_version:
   CILIUM_CLI_MODE: helm
+  # renovate: datasource=github-releases depName=kubernetes-sigs/kind
   KIND_VERSION: v0.17.0
   KIND_CONFIG: .github/kind-config-ipv6.yaml
   # Skip external traffic (e.g. 1.1.1.1 and www.google.com) due to no support for IPv6 in github action

.github/workflows/tests-smoke.yaml

@@ -19,6 +19,7 @@ env:
   cilium_cli_version: v0.15.5
   cilium_cli_ci_version:
   CILIUM_CLI_MODE: helm
+  # renovate: datasource=github-releases depName=kubernetes-sigs/kind
   KIND_VERSION: v0.17.0
   KIND_CONFIG: .github/kind-config.yaml
   CONFORMANCE_TEMPLATE: examples/kubernetes/connectivity-check/connectivity-check.yaml