chore(deps): update helm release cni to 1.15.1

[jarvis-plus-bot]

This PR contains the following updates:

Package	Update	Change
cni	patch	1.15.0 -> 1.15.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Renovate Bot.

[jarvis-plus-bot]

Helm Release Diff Report 🔧

Show Report

"Path: `k8s/namespaces/base/istio-system/istio-cni/helmrelease.yaml` Version: `1.15.0` -> `1.15.1`

@@ -1,238 +1 @@
----
-# Source: cni/templates/serviceaccount.yaml
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- name: istio-cni
- namespace: default
- labels:
- app: istio-cni
- release: cni
- istio.io/rev: default
- install.operator.istio.io/owning-resource: unknown
- operator.istio.io/component: "Cni"
----
-# Source: cni/templates/configmap-cni.yaml
-kind: ConfigMap
-apiVersion: v1
-metadata:
- name: istio-cni-config
- namespace: default
- labels:
- app: istio-cni
- release: cni
- istio.io/rev: default
- install.operator.istio.io/owning-resource: unknown
- operator.istio.io/component: "Cni"
-data:
- # The CNI network configuration to add to the plugin chain on each node. The special
- # values in this config will be automatically populated.
- cni_network_config: "{\n \"cniVersion\": \"0.3.1\",\n \"name\": \"istio-cni\",\n \"type\": \"istio-cni\",\n \"log_level\": \"debug\",\n \"log_uds_address\": \"__LOG_UDS_ADDRESS__\", \n \"kubernetes\": {\n \"kubeconfig\": \"__KUBECONFIG_FILEPATH__\",\n \"cni_bin_dir\": \"/opt/cni/bin\",\n \"exclude_namespaces\": [ \"istio-system\", \"kube-system\" ]\n }\n}"
----
-# Source: cni/templates/clusterrole.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: istio-cni
- labels:
- app: istio-cni
- release: cni
- istio.io/rev: default
- install.operator.istio.io/owning-resource: unknown
- operator.istio.io/component: "Cni"
-rules:
- - apiGroups: [""]
- resources:
- - pods
- - nodes
- verbs:
- - get
----
-# Source: cni/templates/clusterrole.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: istio-cni-repair-role
- labels:
- app: istio-cni
- release: cni
- istio.io/rev: default
- install.operator.istio.io/owning-resource: unknown
- operator.istio.io/component: "Cni"
-rules:
- - apiGroups: [""]
- resources: ["pods"]
- verbs: ["get", "list", "watch", "delete", "patch", "update"]
- - apiGroups: [""]
- resources: ["events"]
- verbs: ["get", "list", "watch", "delete", "patch", "update", "create"]
----
-# Source: cni/templates/clusterrolebinding.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: istio-cni
- labels:
- app: istio-cni
- release: cni
- istio.io/rev: default
- install.operator.istio.io/owning-resource: unknown
- operator.istio.io/component: "Cni"
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: istio-cni
-subjects:
- - kind: ServiceAccount
- name: istio-cni
- namespace: default
----
-# Source: cni/templates/clusterrolebinding.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: istio-cni-repair-rolebinding
- labels:
- k8s-app: istio-cni-repair
- istio.io/rev: default
- install.operator.istio.io/owning-resource: unknown
- operator.istio.io/component: "Cni"
-subjects:
- - kind: ServiceAccount
- name: istio-cni
- namespace: default
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: istio-cni-repair-role
----
-# Source: cni/templates/daemonset.yaml
-# This manifest installs the Istio install-cni container, as well
-# as the Istio CNI plugin and config on
-# each master and worker node in a Kubernetes cluster.
-kind: DaemonSet
-apiVersion: apps/v1
-metadata:
- name: istio-cni-node
- namespace: default
- labels:
- k8s-app: istio-cni-node
- release: cni
- istio.io/rev: default
- install.operator.istio.io/owning-resource: unknown
- operator.istio.io/component: "Cni"
-spec:
- selector:
- matchLabels:
- k8s-app: istio-cni-node
- updateStrategy:
- type: RollingUpdate
- rollingUpdate:
- maxUnavailable: 1
- template:
- metadata:
- labels:
- k8s-app: istio-cni-node
- sidecar.istio.io/inject: "false"
- annotations:
- sidecar.istio.io/inject: "false"
- # Add Prometheus Scrape annotations
- prometheus.io/scrape: 'true'
- prometheus.io/port: "15014"
- prometheus.io/path: '/metrics'
- # Custom annotations
- spec:
- nodeSelector:
- kubernetes.io/os: linux
- tolerations:
- # Make sure istio-cni-node gets scheduled on all nodes.
- - effect: NoSchedule
- operator: Exists
- # Mark the pod as a critical add-on for rescheduling.
- - key: CriticalAddonsOnly
- operator: Exists
- - effect: NoExecute
- operator: Exists
- priorityClassName: system-node-critical
- serviceAccountName: istio-cni
- # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a "force
- # deletion": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.
- terminationGracePeriodSeconds: 5
- containers:
- # This container installs the Istio CNI binaries
- # and CNI network config file on each node.
- - name: install-cni
- image: "docker.io/querycapistio/install-cni:1.13.1-distroless"
- readinessProbe:
- httpGet:
- path: /readyz
- port: 8000
- securityContext:
- runAsGroup: 0
- runAsUser: 0
- runAsNonRoot: false
- privileged: false
- command: ["install-cni"]
- args:
- - --log_output_level=default:info,cni:info
- env:
- # The CNI network config to install on each node.
- - name: CNI_NETWORK_CONFIG
- valueFrom:
- configMapKeyRef:
- name: istio-cni-config
- key: cni_network_config
- - name: CNI_NET_DIR
- value: /etc/cni/net.d
- # Deploy as a standalone CNI plugin or as chained?
- - name: CHAINED_CNI_PLUGIN
- value: "true"
- - name: REPAIR_ENABLED
- value: "true"
- - name: REPAIR_NODE_NAME
- valueFrom:
- fieldRef:
- fieldPath: spec.nodeName
- - name: REPAIR_LABEL_PODS
- value: "true"
- # Set to true to enable pod deletion
- - name: REPAIR_DELETE_PODS
- value: "true"
- - name: REPAIR_RUN_AS_DAEMON
- value: "true"
- - name: REPAIR_SIDECAR_ANNOTATION
- value: "sidecar.istio.io/status"
- - name: REPAIR_INIT_CONTAINER_NAME
- value: "istio-validation"
- - name: REPAIR_BROKEN_POD_LABEL_KEY
- value: "cni.istio.io/uninitialized"
- - name: REPAIR_BROKEN_POD_LABEL_VALUE
- value: "true"
- volumeMounts:
- - mountPath: /host/opt/cni/bin
- name: cni-bin-dir
- - mountPath: /host/etc/cni/net.d
- name: cni-net-dir
- - mountPath: /var/run/istio-cni
- name: cni-log-dir
- resources:
- requests:
- cpu: 100m
- memory: 100Mi
- volumes:
- # Used to install CNI.
- - name: cni-bin-dir
- hostPath:
- path: /opt/cni/bin
- - name: cni-net-dir
- hostPath:
- path: /etc/cni/net.d
- # Used for UDS log
- - name: cni-log-dir
- hostPath:
- path: /var/run/istio-cni
----
-{}
-# Source: cni/templates/clusterrolebinding.yaml
----
 {}
```"

[jarvis-plus-bot]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ KUBERNETES	kubeconform	1		0	0.11s
⚠️ REPOSITORY	checkov	yes		334	17.9s
✅ REPOSITORY	dustilock	yes		no	0.2s
✅ REPOSITORY	git_diff	yes		no	0.14s
✅ REPOSITORY	secretlint	yes		no	2.25s
⚠️ REPOSITORY	trivy	yes		1	20.42s
✅ SPELL	misspell	1		0	0.05s
✅ YAML	prettier	1		0	0.44s
✅ YAML	yamllint	1		0	0.43s

See errors details in artifact MegaLinter reports on CI Job page
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by