Update cilium 1.18.6 #141
Open
Update cilium 1.18.6 #141
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
There was a problem hiding this comment.
Pull request overview
Updates the AKS Cilium deployment manifest to run Cilium v1.18.6.
Changes:
- Bumps Cilium component images (agent/initContainers/operator) to v1.18.6 and updates the Envoy image tag.
- Updates Cilium ConfigMap settings to align with the newer release (new/removed config keys).
- Adjusts securityContext/tolerations and related pod spec settings for the agent/operator.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| name: "cilium-secrets" | ||
| labels: | ||
| app.kubernetes.io/part-of: cilium | ||
| annotations: |
There was a problem hiding this comment.
metadata.annotations is declared but left empty (null). Kubernetes expects annotations to be a map; this may cause validation/apply failures. Remove the annotations field if unused, or set it to an empty map ({}) / add required entries.
Suggested change
| annotations: | |
| annotations: {} |
| ca.crt: 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 | ||
| ca.key: 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 | ||
| ca.crt: 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 | ||
| ca.key: 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 |
There was a problem hiding this comment.
This manifest embeds a private key (ca.key) directly in the repo. This is sensitive material and should not be committed; generate it at deploy time or source it from a secret manager / ExternalSecret, and keep only references in git.
Suggested change
| ca.key: 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 | |
| ca.key: ${CILIUM_CA_KEY} |
| tls.key: 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 | ||
| ca.crt: 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 | ||
| tls.crt: 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 | ||
| tls.key: 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 |
There was a problem hiding this comment.
This Secret embeds a TLS private key (tls.key) directly in the repo. Please avoid committing private keys; provision the Secret out-of-band (e.g., cert-manager, ExternalSecrets, or CI/CD) and reference it from the deployment.
Suggested change
| tls.key: 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 | |
| tls.key: "" |
Comment on lines
1646
to
+1677
| tolerations: | ||
| - operator: Exists | ||
| - key: node-role.kubernetes.io/control-plane | ||
| operator: Exists | ||
| - key: node-role.kubernetes.io/master | ||
| operator: Exists | ||
| - key: node.kubernetes.io/not-ready | ||
| operator: Exists | ||
| - key: node.cloudprovider.kubernetes.io/uninitialized | ||
| operator: Exists | ||
| - key: node.cilium.io/agent-not-ready | ||
| operator: Exists |
There was a problem hiding this comment.
cilium-operator tolerations changed from a catch-all (operator: Exists) to a specific set of taint keys. This can make the operator unschedulable in clusters that rely on other taints (e.g., dedicated node pools). Consider keeping the generic toleration or documenting why these specific taints are sufficient for all supported AKS setups.
| tofqdns-idle-connection-grace-period: "0s" | ||
| tofqdns-max-deferred-connection-deletes: "10000" | ||
| tofqdns-proxy-response-max-delay: "100ms" | ||
| tofqdns-preallocate-identities: "true" |
There was a problem hiding this comment.
There are two spaces before the value here (: "true"). While YAML will parse it, this is inconsistent formatting and can trip linters; collapse to a single space.
Suggested change
| tofqdns-preallocate-identities: "true" | |
| tofqdns-preallocate-identities: "true" |
| operator: Exists | ||
| - key: node.cilium.io/agent-not-ready | ||
| operator: Exists | ||
|
|
There was a problem hiding this comment.
This blank line contains trailing whitespace. Please remove trailing spaces to avoid noisy diffs and potential YAML lint failures.
Suggested change
| allowPrivilegeEscalation: false | ||
| capabilities: | ||
| drop: | ||
| - ALL |
There was a problem hiding this comment.
YAML indentation under capabilities.drop is invalid (drop: is followed by a list item at the same indentation). This will make the manifest fail to parse/apply. Indent the - ALL item under drop: so it becomes a proper list value.
Suggested change
| - ALL | |
| - ALL |
| readOnly: true | ||
| - name: tmp | ||
| mountPath: /tmp | ||
|
|
There was a problem hiding this comment.
This blank line contains trailing whitespace. Please remove trailing spaces to avoid noisy diffs and potential YAML lint failures.
Suggested change
| automountServiceAccountToken: true | ||
| terminationGracePeriodSeconds: 1 | ||
| hostNetwork: true | ||
|
|
There was a problem hiding this comment.
This blank line contains trailing whitespace. Please remove trailing spaces to avoid noisy diffs and potential YAML lint failures.
Suggested change
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Update Cilium to 1.18.6