Commits on Mar 27, 2024

1. envoy: Drop privileges …

   [upstream commit 3166f95]
   
   Use cilium-envoy image that drops privileges from the Envoy process
   before it starts.
   
   Envoy now needs to be started as `cilium-envoy-starter`, which drops all
   privileges before executing `cilium-envoy`.
   
   If `cilium-envoy` is executed directly with any privileges, it will
   terminate with the following error message when any Cilium filters are
   first configured:
   
     "[assert failure: get_capabilities(CAP_EFFECTIVE) == 0 &&
      get_capabilities(CAP_PERMITTED) == 0. Details: cilium-envoy
      running with privileges, exiting"
   
   Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>
   Signed-off-by: Tam Mach <tam.mach@cilium.io>

   

   sayboras committed Mar 27, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for e6fa91a
   • Browse repository at this point

   Copy the full SHA

   e6fa91a View commit details

   Browse the repository at this point in the history

2. envoy: Bump golang version to 1.21.8 …

   This is to pick up the new image with updated golang version, and other
   dependency bump.
   
   Related commit: cilium/proxy@99c1c8f
   Related build: https://github.com/cilium/proxy/actions/runs/8179378100/job/22365327840
   
   Signed-off-by: Tam Mach <tam.mach@cilium.io>

   

   sayboras committed Mar 27, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 96625fe
   • Browse repository at this point

   Copy the full SHA

   96625fe View commit details

   Browse the repository at this point in the history