chore(deps): update helm release cilium to v1.16.0

[renovate]

This PR contains the following updates:

Package	Update	Change
cilium (source)	minor	1.15.7 -> 1.16.0

---

Release Notes

cilium/cilium (cilium)

v1.16.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Path: infra/cilium/helmrelease.yaml
Version: 1.15.7 -> 1.16.0

@@ -34,8 +34,8 @@
 name: cilium-ca
 namespace: default
 data:
- ca.crt: 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
- ca.key: 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
+ ca.crt: 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
+ ca.key: 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
 ---
 # Source: cilium/templates/hubble/tls-helm/relay-client-secret.yaml
 apiVersion: v1
@@ -45,9 +45,9 @@
 namespace: default
 type: kubernetes.io/tls
 data:
- ca.crt: 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
- tls.crt: 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
- tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFcEFJQkFBS0NBUUVBNFF3NEZWTUU4cFdMVHc5VXAzbW5pRlY0OEUvK3YwajhQOGQwVVNMVEx6RjloMWJWCkVEcU55aUxiMTNMcmJzQ0JOa3VUZHNZRmFRNm1sUlo0bXJqMW1KQnJXay80d08xQVJraVRnQk9KeFRNV1Bod0gKdnN0U01XK1NQVU5yOW9kSFpPQ2dwOEF6dXlCdFlZbE1HV0h1dDNId0RHeGVRUW5tditMQUJDYlJSdlV3ZkxoZApDUnUyVE85VkdOemFTYTJRRHpySDNRaEtETVROME9nUWRveFI0ckhDUmxaLzJzaU5WZVhVTkpOMnFsMTNIS2V1CkNKd29EUldUdklMZ3RHVHZMOGdGUEw0UkV5aGJ2SlBZcHlKWjNzM3krekdvS1FqSFRMNzRIRzRHcUVRRkhaQUsKRm9KQW02NXcxNEpBblBLUGh5RWNrN1MwK3lhYzl2MENkSWdEV1FJREFRQUJBb0lCQVFEVTlQc2RNckk3MjhjMwp5UW9TY014WDlvbTYzZmZ5aXQ0b2ZGVlZjZDdsaWE5L29tdDhMK3g4bXYvdG9KR28vQUZKbjdxcmFqYzBjdWl2CnE5UDBsWkhTRE5lSlhxUEY3THdseGdmTjZxODBMR09mNG1aeDVYU2gwekpQUnIyalMrQURWWXl4TU8vQzQ2eWQKMzQ1amRvaXVqdUxZM3JOU1dFeEN5QTlyM2srckZCT2JoVDRPMjVnN1lWQTNTaU91eXdSYjlyd3Rla1dLaW5lSQpMcS80aE9jR3BUdVYvaGMvT2xPK1dtYTNNYjJQcVhaQ2F2NVBsUWFCQUlIeEp4SHdKZzV4R0s2a3NjUWpMWDNHCkxlVDV6YXNET1hHamRHZlB5MndSV05pV1d1MEE0QnR5TUhaTEFaZVRHUVJWK21YcXBYYUxzU0NvZENaVUw2TjMKN0VnQ1FPQUJBb0dCQU9sY3N0bk1aeHlYbE9EeTA1ZTl5NlQ3b0tZWnRicTlaSnNBeXJoNXE3Zy9wRlhsN1llawoxdTJYbUpTeVZMTGhnWTVwZEFPNkJTdlR1NzhyUjFvUE5ySHYxUWJnM2JyNnhRYUt1QnR0MEgxWjc5VjhzRU9SCmdzQVJFK2NPbEVRUXVuRWdDTFBVMG9oRTVJajVCRFczeEQzeWlqV3F2dUtLMXNPemgrcm5VOHl4QW9HQkFQYmgKQ3JEYjUvVENVMFhRVkhGV1VzZkhSWDNRMWVwdmluWFhGd2tZN1dwTW5Kcmt5NWIvK2Yvd1RxNGh0d1NCWGQydgo1TzhFelEyUjAxaDFEeUVadUs0NlBWMDJ3WVdRSUJld2ZUN0crdzRkOG9ENWRmeDcxaGhKWXNVSmFUT002bXM2CnhZVEYwSm5mTEoyenN1WEJkK1FBdmxqdk53UVNidzY3RWdWbEFxc3BBb0dCQUtYekd1alJkOTRZV1hJaW5LQUQKQTJlZTNWNWhXQitsQVg5TTc5eUNBY0N6MlZ5UWR2c0lHU082czNIQzQ0S1Y1UGp1T3VkUGlNL2k4VmVBSW15RAo5eVJRWmxCTzVyOUtCNFNnYjA1cUtHS0w2NGNJOVp3SFJWRHFsQm15LzNMcjVubitDdEkvblR2MHFnUlIrVkZ1CkRtcnpLS0FEZlYxQzJIa3hHWTNOMVlUeEFvR0FZdHVjajFPUG42Z005bURFMzVtRWpuRVNONTVmZW4vdHZ1QkIKWGlnNE1aKzUraUJ5RWVZd3NyY0VtcC92aklOTkZnOXdLZklQTmtiVmpZOWFYcFBSS3hzeEpWbGV4dC8rcWQzSApXVk1PaHdtZzZOcDd6MzI3TG9COFo1QXNLek5iVDFMNmN2OVBWNzVSUEZrUDR3YkV2bTA1eTUwR3Q3KzE3djBqCjZ6c1doWGtDZ1lBdTk5dzZreHBoUUJvV0wycWdKWmFaeGUxRkdQRjZJVHY2UTVpTXh2a3lUUDhxTk5EVlZSYk8KKzREVGRnZEVCMlNVbFZyMU5PRm1ndG9NTW4xZ3h5V1Z0Y1Y5SjdHSjNRb0k0cXdwUnBDTlVHWHhocDM0MFNNMQorQ0V0dWlmNGhFck44WVlHVUtNLzR5Y2tCWEk4N3dkMFNrRktmT0IrNzVPVmJueGNMUmF5alE9PQotLS0tLUVORCBSU0EgUFJJVkFURSBLRVktLS0tLQo=
+ ca.crt: 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
+ tls.crt: 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
+ tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFcGdJQkFBS0NBUUVBMGFHUjZGTndGWHluRDBiZzhmdVhmaGFveHlMbE5nVVdTK0x1djRqcmNzMXZTWjlECmJsM0ZwcDVYOU53YTZ1akVlYlljTGVzSEVNRUpybjdvV25ZbXhDVlNCN2RrQnV1YTBLRlpOQ043RW8wRkhXcEIKb28vbDMzVytaTG4wZEs2d3Q0S0w5V2lDVmY0ODlEak02RjZQN2FQK0F3bnlHTUxzU1BSZHl0c2lBRzdpajVtNAp3L3hCSFJDcFBXZkErVStpVjZrWmMxYThFS3FVVFJpUm9WTmVkL1dkWjhsaEVYalFnT1h0VVBkV0E3WVVwR2JxCjJLZWRHZG15VzVXcWZ2Wlk5K0pzMkxTcnQrM1FyVDgvcy9mdC9yQWJUWk05bEhTR3g5N0F5U0Q0b0haUE96b0MKRFNoeThNT3AweVpTMUpSZ01jcFdIT0JvR3M4Y0JOZFZoS0I1b3dJREFRQUJBb0lCQVFDRmVJak0wbXMzMHhFUApBZ0x4TDA1S1lxVDlmWE5SRExZZ2hSR2I4OUp0V3Uyemcyck1sM25qMTBlTFNLVCswa3RlYnh2TUJLdVArRWh3CnlLNnFBalkyaHNpT3p5NHAxZExSYVJuQnY2RjVzejRCZDRqb3R4UVdUZ0oyWVl1S3l6c0s3Rnl1V09jN1YwOTUKODd4TGF3SGF2YUphVHZmTTJqYlZVSGx6VWtoNDJ2bmdGdHBIMlpscS85bzBjSVdrUkgrV25qSDI0UUc4bTJTRApvOGxSK2JVbU9QMUhPOStRNzFRdjB1WDB6UTN2WW16Q0lJTjZFQzdPOThRQ0lKMTAwdXp2VlplNTA5TmZXS0JtCmNiRWxCRVdsejlmaHJQNUd6RXdKZGg2SGxCdDFQaEJ4RmdwRkR2SlpQa21rRXF2QnFjTElNUXk5VVh5eW94bDEKYVRCSjYyV1pBb0dCQU8yb1h1MjhGOTVhWU1YTmQwZlFrUEErN0pWdFRNa01qQzFQdlNOMm1RK05hWkRQOTNQeApXaEdCVlFyVFVEbFdXSk85U1drc3ZYQmoyMXVXWXRMQXRuSHB0cjNJVCtxb0cwVWNjM1d2SFhNTUNCRHhFaUZuCm56L2R0eU80RURYRkZ2QVNISkl4WUpGRlRHa3pkOVFEa09NVytoRzYxRGt4RDgyYUhrcG1VVGtQQW9HQkFPSFAKYzUxQW5qOWJjWlEwNG1lclV1aWhocm0vazhWWlFVWUlHUStXNDhNeUMzd1k4RklrTHFRMGo0RjBHMEh0VEEzcgowMHJlZ0RqVHEvTmJoNWlHTS9jUkFIZThKN0NxNzhTdTREOEM0enkwNUNSWEl3cGxsM2tOWk5YL0N2QlBVckxSCmNQTzlCaXpNbkNaVkkxYjNnaUNGSGlQOHdXUFQ0NTBFVVZBTzIyNHRBb0dCQUtRTkFKSk1yNUUrZytTbXd6cmcKZnR4SUkxbTJuRFdBSXRjNFh0QTNFc3NJaTZGNTNVKzhmN2JydHYrRkJMQy9xTjg2MzR6cFpFOUxydVVXOTFxUgp5cDd4Zk1LZW5vUFZ6UlUwNFlLUUFkMGpwZ0hEMXdjV0YzaW5uTDdjVk53NUUyOWVvVGhOTzJLc0dtWFlNRlE2CnJlNEVNMVMveWJVODU3SytPMENTUm1rREFvR0JBSUs3NzZ6UWQ0NG83Q1lwUkJkUE9tNFM3b1JtSlRDeHp6ZXoKZ29iakRqUzVxYXFNYWI2MDBnZ2hvaUFKejZvb3I4cXppUjRrbWNuTXl4WFhIVGN5STYzY094QVhjRWM1Z0IyNApQWDVkdHFBei9vNEhvUExwQkh5Q1E2b2R3Z0NGZkZTcEs2TUNBaXczdmdQM2NNRnVCUG04K0VsUGtjdXhKbXVHCnoyanhZUnQxQW9HQkFNK1YrNWcwUGtZL29LdDRid0JVTUI1WmVpVlBGSUVVZHdENU0zOFZmMGJNWGttZXRBZnIKMit1ZzFXQ3pHTmllM3hxbWQ1QnFMZFdsODVWY2tzQ2Z2dEZ4R3NyeGxzWFZOUW5yVnQ3WGRWWmk0WStBbW9ndwpjQ3N4Z2kxR0lFdjdlZDI3bmNsMmhNM3cvd1MzZHJTS1lieXpGWndiZFlhNnVGUEVDWGg1bWVhMwotLS0tLUVORCBSU0EgUFJJVkFURSBLRVktLS0tLQo=
 ---
 # Source: cilium/templates/hubble/tls-helm/server-secret.yaml
 apiVersion: v1
@@ -57,9 +57,9 @@
 namespace: default
 type: kubernetes.io/tls
 data:
- ca.crt: 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
- tls.crt: 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
- tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFb2dJQkFBS0NBUUVBdFN4NFpESW8yWVJaN0J3RjV4MENVVWxSaHM4OFZKNXRqK0JXUFBLckJuT0R4ZTA2Cm9FZ2hlU0ZqWjIvWlpZVVRCS2FwUWY3MDM5Z3RWVXZ0VUIvbHM3RW9pQlBKbkVRS1pDU1FUUjZOUHF1WVVzd2MKRHV5TjJUd05oRmh3RlM4RCs3bkFEY25mencrWitTNzhnbzdEeWZveTFIY21WOU83ZkJSMVZOVS90QjNBVjdWcApyR1JyM0lwY1B1RDZHNGtKTXRoSUZCNVFZVXd0R3RUVzgxTDJxMzUzU1FqZmZheWxEOXE4c3NOK2VZbDZvcTZnClkxOWdMb25RQjNON2Z5OWNNNThYS2h1aUhpZzBydksxTVZRZEU3ay9XSlJscEZPTjRvYmF5Wk51S054Rk9ieUsKRE5WL1BEeGFENGFEQmVCUXNpK0xwNlljUzRxWWxzVi9OcFZhVFFJREFRQUJBb0lCQUdROTM3cm9lZXVvTEN6VQpjSHVvZEZEUGRWbFdyblhQVnFXRnBaR0JYeGxwcnA1RG5PMTBHM2t1L1JZTkw4Ylk4MlhlWk1ZTU1DYnVNRjhDCmJLS3BrMmx4K3hBWGlyUjRmUnRkazYzbjJwU3pVc3QwL1kxUVcwZTN6MjdMay9CVW5DcWFZdVgrTFdRZXFMM1QKdm9qcVB2QXhEQkM4Z0MyV0RDVWlHSzFBZEVmT1FwWGttNDVJTE44SzZoMkpvaW9pSlcvNm1VK0ZNZUMrUC9wUwpaTDBrOVhYQTJWOEZsdGNSM3ZlWFJpZmdmWEU4VHlkNzlYZ2drT3MrUUtWOTd0NGY2MWg0UFhTVmlNSHVaV01yCnBzQy9icllJeDE1Z1lVTEZDRlJDdDZzYXhac1R6Z01Ea2FLbkMzTUlaTlpzZHRZK1d4Z1UwblFhaWlUdWIyM0cKc1RzV0g2RUNnWUVBOEF5UWtDOEd0U0pDYThlbXJyWjlCcS9Bdml2OVYrcEYxNHY3WmRPKzNCY21tai9hL1JDKwoxaElGVHp4a0dxc2xScDhYWXM5d1ltTlBmSEdtWVEyWlV5UWc0T3d3RllVSzBlM1g4QXlhdGFuUzlUd1ZMQTlyCjdjeXNFY2ErUzZuL1lSY3VvZGpuYjdSWGlsRHlIOHJZRGdobjY4RlhWMEpER3BFZUpKZ2FaS1VDZ1lFQXdUWmkKNnRLV25aNzdWb2NrZnR6OFhqZzZiVU9IdEN5NXBPb2pnQVhuV2FlbVlnOVY5U1RPaUdjemp6TmlLMUpacXNHaQoycjBBT3p6Yyt4NTRYK1JNR2J1NjIzQTNFUndSZXdCTU5oZW5yaWhzSHlhTGhxQW1NSkNRR1ViUkNQUXN2UURLCkp1RWE2V0t3YUJXMzJ0ZUpEV0Q4UitRZ1VFaHRITEZEL0VkaEpva0NnWUIrdHZNODJVWWVLYmFNTkhqOWN5RnUKZlNvdWVRUWorMnZneTJqcXFLcndmVndJUXJyenFYcERnSUhEQU9zSzFOczVlMU9aK2t5bDh5eUxVV2IxaG5zdwpVenJ6NEZuRmtsUlMyczJKVHU0QUJXUnh4Y1NiWEl5cG04Z2RIaDlueTVZZWgyRTdXRWRiUlFTTTVBdmIwblRZCmU0RjRCcmgzUEdnMXh2TDFlRUUrYlFLQmdCZ2M1SDF2NkxJbExETGhUTkcwWEo2Wm45a1JDM2VWK1ZrMmkxV24KNXZhT2NMcGVOWmtSamVFQ0dESXY5SGw1bm8wcisxb1hLbGM2UWszb3dKY2ZFOHhHWEl5VVZac0NDTUIwQ2c3YQpKdWdhVFZ3WjRHSGR6TVpVMUZjRE9vVkdpK3JPbFd3Q3Zld1FqL2w5ZEdPUWNKOUYwbFphaHhuZDRCZ3JtMU41CnlRc1pBb0dBWERJeVQ1NmJsUWNQTHozK2F2TkpBVEpmOERFeHNlUEorUVd1VTUxaXN1YlJMN29yM05hRUE2R2kKaVlUcXVLY3AvS1NxeWdUZ0FhK1RZT3NSR2JWbk40WGVocWY0Ulllam45TncreVdOYVg4TEM0Z0JtV1Qwc0Q5dQpBckttdWxLNU9pcGdpTTV5QUhkb0lVNXFnOHQ2R0dIS2tXUk1ZOUh1azVNQVlOaWlsd0k9Ci0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0tCg==
+ ca.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURFekNDQWZ1Z0F3SUJBZ0lRQkxHSkE3d3hZN0xNUEQ0Rnc3bGVvVEFOQmdrcWhraUc5dzBCQVFzRkFEQVUKTVJJd0VBWURWUVFERXdsRGFXeHBkVzBnUTBFd0hoY05NalF3TnpJME1UWXhNVFEwV2hjTk1qY3dOekkwTVRZeApNVFEwV2pBVU1SSXdFQVlEVlFRREV3bERhV3hwZFcwZ1EwRXdnZ0VpTUEwR0NTcUdTSWIzRFFFQkFRVUFBNElCCkR3QXdnZ0VLQW9JQkFRRG1HV2ZqWDMwa1l0U2dXaG5YTk03UHVQRElDVWt4MDRBdTZjbjh4aFJLNTRwTW8yZXEKVzdXY3FFR2h5NzZYZ2dmckh4aGZUWjh2eFFiamZ1c3BSNjc4eEw1MlJmVm1LNmVWazdYOWtKZkZRN215ek1KdwppNW8vVVFZR2k4ZkJtU2pTV0RFaVFOb3V2cUQ1UkdwOGtQelQxTmVDeUtrSGpIMTA2TU9jYWhGTVVSM1JReVhsCmhmZ05wSzM3aTdqQ0FpTytpYlRxTUVrZCt6bWVhRmU3SGFvWUhiSG5ydk9BVXJQTVVsOGNtZWJacDVBMnA0ejUKcXVmWC8xd21naVNIRDZGZVZTcTBkeWdZTFZPbGR1b2YwM1MxYUhFRU1yc3hJMnNEeDNjRUpKVEdhUUVwODkzQgo4RHlsQU1mLzZYdEwyOHY4S0JYb2pWU2c5Zm9vWmpxT2FrTzVBZ01CQUFHallUQmZNQTRHQTFVZER3RUIvd1FFCkF3SUNwREFkQmdOVkhTVUVGakFVQmdnckJnRUZCUWNEQVFZSUt3WUJCUVVIQXdJd0R3WURWUjBUQVFIL0JBVXcKQXdFQi96QWRCZ05WSFE0RUZnUVV5ZFpXWWNTWC96NG5KL2MwbHhRNCtnbkhYOVF3RFFZSktvWklodmNOQVFFTApCUUFEZ2dFQkFCQkZZY1l5TWRuaFBPRnBWYnhNRVdadVFhaTRUS0x5Tmxnb3BZL29mNE1YRFRSbnBlejlKczF4CnlDNTMxZFJ5Nk1YbmVxZXdhQjNUVy9OMENsOERwOTMxZk1TaXBCeXVQeTZPYmV1dldJUUF6cVBpbU5nbG5SSVYKTFVsOGlCQVJKMmRpS2ZBczJaa0tTQVNzdVA2Vm9Yc2lBeFJJcmdpWjd4bmw0NHY1ei9adXZvN3BOVllEMHE0VApkdmgrc2J4M2Jmei9DUXZ5bnp1eng4U01vQ1FFSlh4bVdFWDB2T2ZrQUFVRGJxUUVsUzNEZXBCK2Z0WlNlOHpUClYzU0U4NU1hVU9SZjFoeTBFVVJ5R2YrL1EvK1Z5K1RoYVN3Ti9LeTZHNDNRb1NTdzF0UGZGMXM2RVFLRXJtMWwKenZnOXI3ZjNCUE9LcGgzbzlqNCtwUU9pQXJxNXBpdz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
+ tls.crt: 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
+ tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFb3dJQkFBS0NBUUVBeTF1ZFhtcGo2RFVVUVY3Vmpka0Vicm0vaUJyWHVKNktFYWxhNFU2Zk5Cc1ZqWi83CnlnU0pVVm4vV0pERWI2eVJhN0wxUTFaNVZQSlFvTVpIS0tzWE1tQjIwUEE1VmF6dVBObDRwaHhmeitXdjZyU2oKV0lYRVJSaTNRUUZNSEJRNUttcGJIZVJUN29DcFF0bFVidWhIMGZtK1JTNDBZZTF2Z2VSL2NYbTIvbWdGZzgzbwo0aGFwdTFkRXFiNzRLQThVZ2t3ZmJiUEkvbVJUTFNKKzJjaWMyc3UzR0VQS0F2OUZIWVkxd3R0WnFsMnUvbkFTCmpyTXR5R2NzNjFwbnBLMEc0bENSMUszUlVqeW1PejhoZGJNWkYxbXZpT2JOc096OXk0aDBsU2N5ZkxWUGdycUkKSHNjbmRMclZYY3UrYThTVytnRXZxK2RQTHMxS1JwU20xaFQ3R3dJREFRQUJBb0lCQVFDaVFtTjZwbUU1TXNFSwp0K1NsM2ZkUGNoNkZOd1hSWlk2OU1PZzJ4a2o1aG5MWUlrTUJta1VIQ0V4YUdvamlva3NXS0NEU3JmajU4cTZxCjJncUZSSjZwcjVhZWVFOEhNWWlXUE4rcml4QllEZWtqMlNaTXg4OG5ZdVUxbFJkcGdDbHMwcGdKYmRvYWY4YU8KZEdLT2JBQ0Naa2VQWTZLZ1VKZWNpUG0zVFdyWjZqSDNncmczM2VycFp1OUFHbnNQVlNmME1SMk12U3pjSFNlZgpzRytjMjdYOUdnRzQzUmNGaFFSSlRwMERRR1VFRE5LTjhQV2Y2QURWWWxVVHFUaUhZZUx5c0VYaTN3WVVYV2FaCmF5ZUNFUzBkbEROVEJuZytuZFNLVFZrNGRmUVRSYzZheTVtZWdMZmt3T1F0ZWRTQ1ltS3dpQmZSVnVmZWk1QjEKOGpFTkF2NkJBb0dCQU9FMHJRL3ZvVnRXaHpRb0VzVFFOU2J5SjltUkV1eTlXWWFCMzRKSFhrazY0c0ljUmI5agpZSk1LaStPRlJHNkp1RC9yV2pQYmhtbE01S2taRVljcHYzVHNBUURDZHNiNmhnQkJLdVlTZTYrTm5hZkRZZ0kxCmZNYzkxVzVJamVrald2bUZqRVR6Tm5sbHVoUE1mNGJZemdpVGp5N0laZi90Sk5RY2liTWwvdy9yQW9HQkFPY3EKSjBxWElxS3krZmV1U3RkYkk5clY4cEI3SjFnV0phRHErM210WFN4SG5QdTA1UWtRVU96ZVdJcEdzRHkwbFBQUApTekhjcEc1OVZjYmNrdUNzVFlnbUNXdC9MN0UrOXNRWnJTVmUrN3F4Zi9LQ1NLUTIyYzRqeWVzd09sNUd6SmIxCjA1Z1dxTXNybStJR0JLeE5xcVphekw4UXZ5QUpUWWFxTFRuVjhDV1JBb0dBU1phejRsdzBScXRjbkw5bmVxWnEKWitLREFRWDF3Q1FUWis5eVFKamZoMkJWam9ZOGlGQ0oweUtFR1lHSG5mTWtvTVpnQUVnQWdOSWVlZDcyS2t1TApBMExIQlIrR1BuaklacmJrdEs5ZmVUcjJSRWFFOVNIVE55dk9YUzRhS1E5amY5dVN2VWtZQ00wajQ2cFVGWlVzCnBnTEpxOGpTQTdIUzhmaXRTanZsUDZjQ2dZQTlRdGFXMWVhLzUxNkhYUkZJY1ViWFA4dkFybUtHM1plclJaclAKYkRvOCtkMklkekFiYnMrRGRvbFFXOXRvdXhLZWFsa3JKYVlPQWZreGNsTWFaNDlFZlpBUmhPdEd0Y0QveHk0egpzVEJWRWFVdXg0Z292TUNMK01BU0svM0w3a2RaMmx2dytsQlJSNFZRS1Bna0VaRWY5UUE5d2xwa1N4TFlsVkRXCit2TmhnUUtCZ0dKQllmQk5rWXBzdDA2cmdmMW5PLzRPQkJVQTgyQW93QzBBTG9VNHdrR1FORkVoTzgzYldXR3YKRmhpZkhlcVl6Uy9OY3RSYUllNGVUUGVsV24wY1laZWFaTkhzVmJSTjQvQTBaVlVMdnY2OWduaEE5T0lQWjVCQQpxSUZhcytrdzFXUHJSWlBMTjRUcTFYZjBsV0RFcXBSWlcvU3czVERTVXZGS0U1T3VacXByCi0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0tCg==
 ---
 # Source: cilium/templates/cilium-configmap.yaml
 apiVersion: v1
@@ -83,7 +83,6 @@
 identity-gc-interval: "15m0s"
 cilium-endpoint-gc-interval: "5m0s"
 nodes-gc-interval: "5m0s"
- skip-cnp-status-startup-clean: "false"
 # If you want to run cilium in debug mode change this value to true
 debug: "false"
 debug-verbose: ""
@@ -135,6 +134,9 @@
 # backend and affinity maps.
 bpf-lb-map-max: "65536"
 bpf-lb-external-clusterip: "false"
+ bpf-events-drop-enabled: "true"
+ bpf-events-policy-verdict-enabled: "true"
+ bpf-events-trace-enabled: "true"
 # Pre-allocation of map entries allows per-packet latency to be reduced, at
 # the expense of up-front memory allocation for the entries in the maps. The
 # default value below will minimize memory usage in the default installation;
@@ -151,9 +153,6 @@
 # If this option is set to "false" during an upgrade from 1.3 or earlier to
 # 1.4 or later, then it may cause one-time disruptions during the upgrade.
 preallocate-bpf-maps: "false"
- # Regular expression matching compatible Istio sidecar istio-proxy
- # container image names
- sidecar-istio-proxy-image: "cilium/istio_proxy"
 # Name of the cluster. Only relevant when building a mesh of clusters.
 cluster-name: default
 # Unique ID of the cluster. Must be unique across all conneted clusters and
@@ -174,15 +173,21 @@
 enable-ipv4-big-tcp: "false"
 enable-ipv6-big-tcp: "false"
 enable-ipv6-masquerade: "true"
+ enable-tcx: "true"
+ datapath-mode: "veth"
 enable-bpf-masquerade: "true"
 enable-masquerade-to-route-source: "false"
 enable-xt-socket-fallback: "true"
 install-no-conntrack-iptables-rules: "false"
 auto-direct-node-routes: "false"
+ direct-routing-skip-unreachable: "false"
 enable-local-redirect-policy: "false"
+ enable-runtime-device-detection: "true"
 kube-proxy-replacement: "true"
 kube-proxy-replacement-healthz-bind-address: ""
 bpf-lb-sock: "false"
+ bpf-lb-sock-terminate-pod-connections: "false"
+ nodeport-addresses: ""
 enable-health-check-nodeport: "true"
 enable-health-check-loadbalancer-ip: "false"
 node-port-bind-protection: "true"
@@ -191,6 +196,8 @@
 enable-svc-source-range-check: "true"
 enable-l2-neigh-discovery: "true"
 arping-refresh-period: "30s"
+ k8s-require-ipv4-pod-cidr: "false"
+ k8s-require-ipv6-pod-cidr: "false"
 enable-k8s-networkpolicy: "true"
 # Tell the agent to generate and write a CNI configuration file
 write-cni-conf-when-ready: /host/etc/cni/net.d/05-cilium.conflist
@@ -199,7 +206,7 @@
 enable-endpoint-health-checking: "true"
 enable-health-checking: "true"
 enable-well-known-identities: "false"
- enable-remote-node-identity: "true"
+ enable-node-selector-labels: "false"
 synchronize-k8s-nodes: "true"
 operator-api-serve-addr: "127.0.0.1:9234"
 # Enable Hubble gRPC service.
@@ -226,7 +233,6 @@
 vtep-cidr: ""
 vtep-mask: ""
 vtep-mac: ""
- enable-bgp-control-plane: "false"
 procfs: "/host/proc"
 bpf-root: "/sys/fs/bpf"
 cgroup-root: "/run/cilium/cgroupv2"
@@ -240,6 +246,7 @@
 unmanaged-pod-watcher-interval: "15"
 # default DNS proxy to transparent mode in non-chaining modes
 dnsproxy-enable-transparent-mode: "true"
+ dnsproxy-socket-linger-timeout: "10"
 tofqdns-dns-reject-response-code: "refused"
 tofqdns-enable-dns-compression: "true"
 tofqdns-endpoint-max-ip-per-hostname: "50"
@@ -258,7 +265,11 @@
 proxy-max-connection-duration-seconds: "0"
 proxy-idle-timeout-seconds: "60"
 external-envoy-proxy: "false"
+ envoy-base-id: "0"
+ envoy-keep-cap-netbindservice: "false"
 max-connected-clusters: "255"
+ clustermesh-enable-endpoint-sync: "false"
+ clustermesh-enable-mcs-api: "false"
 # Extra config allows adding arbitrary properties to the cilium config.
 # By putting it at the end of the ConfigMap, it's also possible to override existing properties.
 ---
@@ -269,7 +280,7 @@
 name: hubble-relay-config
 namespace: default
 data:
- config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.default.svc.cluster.local:443\"\nlisten-address: :4245\ngops: true\ngops-port: \"9893\"\ndial-timeout: \nretry-timeout: \nsort-buffer-len-max: \nsort-buffer-drain-timeout: \ntls-hubble-client-cert-file: /var/lib/hubble-relay/tls/client.crt\ntls-hubble-client-key-file: /var/lib/hubble-relay/tls/client.key\ntls-hubble-server-ca-files: /var/lib/hubble-relay/tls/hubble-server-ca.crt\ndisable-server-tls: true\n"
+ config.yaml: "cluster-name: default\npeer-service: \"hubble-peer.default.svc.cluster.local:443\"\nlisten-address: :4245\ngops: true\ngops-port: \"9893\"\ndial-timeout: \nretry-timeout: \nsort-buffer-len-max: \nsort-buffer-drain-timeout: \ntls-hubble-client-cert-file: /var/lib/hubble-relay/tls/client.crt\ntls-hubble-client-key-file: /var/lib/hubble-relay/tls/client.key\ntls-hubble-server-ca-files: /var/lib/hubble-relay/tls/hubble-server-ca.crt\n\ndisable-server-tls: true\n"
 ---
 # Source: cilium/templates/hubble-ui/configmap.yaml
 apiVersion: v1
@@ -385,8 +396,6 @@
 - apiGroups:
 - cilium.io
 resources:
- - ciliumnetworkpolicies/status
- - ciliumclusterwidenetworkpolicies/status
 - ciliumendpoints/status
 - ciliumendpoints
 - ciliuml2announcementpolicies/status
@@ -582,6 +591,7 @@
 resources:
 - ciliumloadbalancerippools
 - ciliumpodippools
+ - ciliumbgppeeringpolicies
 - ciliumbgpclusterconfigs
 - ciliumbgpnodeconfigoverrides
 verbs:
@@ -750,6 +760,7 @@
 metadata:
 name: hubble-relay
 namespace: default
+ annotations:
 labels:
 k8s-app: hubble-relay
 app.kubernetes.io/name: hubble-relay
@@ -761,7 +772,7 @@
 ports:
 - protocol: TCP
 port: 80
- targetPort: 4245
+ targetPort: grpc
 ---
 # Source: cilium/templates/hubble-ui/service.yaml
 kind: Service
@@ -833,7 +844,7 @@
 type: Unconfined
 containers:
 - name: cilium-agent
- image: "quay.io/cilium/cilium:v1.15.7@sha256:2e432bf6879feb8b891c497d6fd784b13e53456017d2b8e4ea734145f0282ef0"
+ image: "quay.io/cilium/cilium:v1.16.0@sha256:46ffa4ef3cf6d8885dcc4af5963b0683f7d59daa90d49ed9fb68d3b1627fe058"
 imagePullPolicy: IfNotPresent
 command:
 - cilium-agent
@@ -987,7 +998,7 @@
 mountPath: /tmp
 initContainers:
 - name: config
- image: "quay.io/cilium/cilium:v1.15.7@sha256:2e432bf6879feb8b891c497d6fd784b13e53456017d2b8e4ea734145f0282ef0"
+ image: "quay.io/cilium/cilium:v1.16.0@sha256:46ffa4ef3cf6d8885dcc4af5963b0683f7d59daa90d49ed9fb68d3b1627fe058"
 imagePullPolicy: IfNotPresent
 command:
 - cilium-dbg
@@ -1014,7 +1025,7 @@
 # Required to mount cgroup2 filesystem on the underlying Kubernetes node.
 # We use nsenter command with host's cgroup and mount namespaces enabled.
 - name: mount-cgroup
- image: "quay.io/cilium/cilium:v1.15.7@sha256:2e432bf6879feb8b891c497d6fd784b13e53456017d2b8e4ea734145f0282ef0"
+ image: "quay.io/cilium/cilium:v1.16.0@sha256:46ffa4ef3cf6d8885dcc4af5963b0683f7d59daa90d49ed9fb68d3b1627fe058"
 imagePullPolicy: IfNotPresent
 env:
 - name: CGROUP_ROOT
@@ -1051,7 +1062,7 @@
 drop:
 - ALL
 - name: apply-sysctl-overwrites
- image: "quay.io/cilium/cilium:v1.15.7@sha256:2e432bf6879feb8b891c497d6fd784b13e53456017d2b8e4ea734145f0282ef0"
+ image: "quay.io/cilium/cilium:v1.16.0@sha256:46ffa4ef3cf6d8885dcc4af5963b0683f7d59daa90d49ed9fb68d3b1627fe058"
 imagePullPolicy: IfNotPresent
 env:
 - name: BIN_PATH
@@ -1089,7 +1100,7 @@
 # from a privileged container because the mount propagation bidirectional
 # only works from privileged containers.
 - name: mount-bpf-fs
- image: "quay.io/cilium/cilium:v1.15.7@sha256:2e432bf6879feb8b891c497d6fd784b13e53456017d2b8e4ea734145f0282ef0"
+ image: "quay.io/cilium/cilium:v1.16.0@sha256:46ffa4ef3cf6d8885dcc4af5963b0683f7d59daa90d49ed9fb68d3b1627fe058"
 imagePullPolicy: IfNotPresent
 args:
 - 'mount | grep "/sys/fs/bpf type bpf" || mount -t bpf bpf /sys/fs/bpf'
@@ -1105,7 +1116,7 @@
 mountPath: /sys/fs/bpf
 mountPropagation: Bidirectional
 - name: wait-for-node-init
- image: "quay.io/cilium/cilium:v1.15.7@sha256:2e432bf6879feb8b891c497d6fd784b13e53456017d2b8e4ea734145f0282ef0"
+ image: "quay.io/cilium/cilium:v1.16.0@sha256:46ffa4ef3cf6d8885dcc4af5963b0683f7d59daa90d49ed9fb68d3b1627fe058"
 imagePullPolicy: IfNotPresent
 command:
 - sh
@@ -1120,7 +1131,7 @@
 - name: cilium-bootstrap-file-dir
 mountPath: "/tmp/cilium-bootstrap.d"
 - name: clean-cilium-state
- image: "quay.io/cilium/cilium:v1.15.7@sha256:2e432bf6879feb8b891c497d6fd784b13e53456017d2b8e4ea734145f0282ef0"
+ image: "quay.io/cilium/cilium:v1.16.0@sha256:46ffa4ef3cf6d8885dcc4af5963b0683f7d59daa90d49ed9fb68d3b1627fe058"
 imagePullPolicy: IfNotPresent
 command:
 - /init-container.sh
@@ -1171,7 +1182,7 @@
 mountPath: /var/run/cilium # wait-for-kube-proxy
 # Install the CNI binaries in an InitContainer so we don't have a writable host mount in the agent
 - name: install-cni-binaries
- image: "quay.io/cilium/cilium:v1.15.7@sha256:2e432bf6879feb8b891c497d6fd784b13e53456017d2b8e4ea734145f0282ef0"
+ image: "quay.io/cilium/cilium:v1.16.0@sha256:46ffa4ef3cf6d8885dcc4af5963b0683f7d59daa90d49ed9fb68d3b1627fe058"
 imagePullPolicy: IfNotPresent
 command:
 - "/install-plugin.sh"
@@ -1192,7 +1203,6 @@
 mountPath: /host/opt/cni/bin # .Values.cni.install
 restartPolicy: Always
 priorityClassName: system-node-critical
- serviceAccount: "cilium"
 serviceAccountName: "cilium"
 automountServiceAccountToken: true
 terminationGracePeriodSeconds: 1
@@ -1278,6 +1288,20 @@
 path: common-etcd-client.crt
 - key: ca.crt
 path: common-etcd-client-ca.crt
+ # note: we configure the volume for the kvstoremesh-specific certificate
+ # regardless of whether KVStoreMesh is enabled or not, so that it can be
+ # automatically mounted in case KVStoreMesh gets subsequently enabled,
+ # without requiring an agent restart.
+ - secret:
+ name: clustermesh-apiserver-local-cert
+ optional: true
+ items:
+ - key: tls.key
+ path: local-etcd-client.key
+ - key: tls.crt
+ path: local-etcd-client.crt
+ - key: ca.crt
+ path: local-etcd-client-ca.crt
 - name: host-proc-sys-net
 hostPath:
 path: /proc/sys/net
@@ -1430,7 +1454,7 @@
 spec:
 containers:
 - name: cilium-operator
- image: "quay.io/cilium/operator-generic:v1.15.7@sha256:6840a6dde703b3e73dd31e03390327a9184fcb888efbad9d9d098d65b9035b54"
+ image: "quay.io/cilium/operator-generic:v1.16.0@sha256:d6621c11c4e4943bf2998af7febe05be5ed6fdcf812b27ad4388f47022190316"
 imagePullPolicy: IfNotPresent
 command:
 - cilium-operator-generic
@@ -1490,7 +1514,6 @@
 hostNetwork: true
 restartPolicy: Always
 priorityClassName: system-cluster-critical
- serviceAccount: "cilium-operator"
 serviceAccountName: "cilium-operator"
 automountServiceAccountToken: true
 # In HA mode, cilium-operator pods must not be scheduled on the same
@@ -1550,7 +1573,7 @@
 runAsGroup: 65532
 runAsNonRoot: true
 runAsUser: 65532
- image: "quay.io/cilium/hubble-relay:v1.15.7@sha256:12870e87ec6c105ca86885c4ee7c184ece6b706cc0f22f63d2a62a9a818fd68f"
+ image: "quay.io/cilium/hubble-relay:v1.16.0@sha256:33fca7776fc3d7b2abe08873319353806dc1c5e07e12011d7da4da05f836ce8d"
 imagePullPolicy: IfNotPresent
 command:
 - hubble-relay
@@ -1563,16 +1586,33 @@
 grpc:
 port: 4222
 timeoutSeconds: 3
+ # livenessProbe will kill the pod, we should be very conservative
+ # here on failures since killing the pod should be a last resort, and
+ # we should provide enough time for relay to retry before killing it.
 livenessProbe:
 grpc:
 port: 4222
- timeoutSeconds: 3
+ timeoutSeconds: 10
+ # Give relay time to establish connections and make a few retries
+ # before starting livenessProbes.
+ initialDelaySeconds: 10
+ # 10 second LICENSE README.md Taskfile.yml apps base core crds default hack infra 12 failures = 2 minutes of failure.
+ # If relay cannot become healthy after 2 minutes, then killing it
+ # might resolve whatever issue is occurring.
+ #
+ # 10 seconds is a reasonable retry period so we can see if it's
+ # failing regularly or only sporadically.
+ periodSeconds: 10
+ failureThreshold: 12
 startupProbe:
- # give the relay one minute to start up
 grpc:
 port: 4222
- timeoutSeconds: 3
+ # Give relay time to get it's certs and establish connections and
+ # make a few retries before starting startupProbes.
+ initialDelaySeconds: 10
+ # 20 LICENSE README.md Taskfile.yml apps base core crds default hack infra 3 seconds = 1 minute of failure before we consider startup as failed.
 failureThreshold: 20
+ # Retry more frequently at startup so that it can be considered started more quickly.
 periodSeconds: 3
 volumeMounts:
 - name: config
@@ -1584,7 +1624,6 @@
 terminationMessagePolicy: FallbackToLogsOnError
 restartPolicy: Always
 priorityClassName:
- serviceAccount: "hubble-relay"
 serviceAccountName: "hubble-relay"
 automountServiceAccountToken: false
 terminationGracePeriodSeconds: 1
@@ -1651,7 +1690,6 @@
 runAsGroup: 1001
 runAsUser: 1001
 priorityClassName:
- serviceAccount: "hubble-ui"
 serviceAccountName: "hubble-ui"
 automountServiceAccountToken: true
 containers: