Skip to content

Conversation

jrajahalme
Copy link
Member

[ upstream commit d42cc41 ]

Update Envoy image to release 1.17.2, including the latest security fixes.

Signed-off-by: Jarno Rajahalme jarno@covalent.io

Envoy is updated to release 1.17.2

@jrajahalme jrajahalme added release-note/bug This PR fixes an issue in a previous release of Cilium. kind/backports This PR provides functionality previously merged into master. backport/1.8 labels Apr 16, 2021
@jrajahalme jrajahalme requested a review from a team as a code owner April 16, 2021 05:33
@jrajahalme
Copy link
Member Author

test-backport-1.8

@aanm aanm added the dont-merge/waiting-for-upstream Only merge once upstream library or kernel features have landed label Apr 16, 2021
@jrajahalme
Copy link
Member Author

Failing istio test leaves istio-proxy injection behind and then causes remaining tests also using the default namespace to fail as they are running istio-proxy sidecar without anyone configuring it. The fail in the Istio test seems strange to me, this is from running cilium-istioctl install, which execs kubectl:

	 2021-04-16T08:23:19.537608Z	error	installer	error running kubectl: exit status 1
	 ✘ Finished applying manifest for component IngressGateways.
	 
	 Component IngressGateways - manifest apply returned the following errors:
	 Error: error running kubectl: exit status 1
	 
	 Error detail:
	 
	 error: error retrieving RESTMappings to prune: invalid resource networking.k8s.io/v1, Kind=Ingress, Namespaced=true: no matches for kind "Ingress" in version "networking.k8s.io/v1" (repeated 1 times)

	 error: error retrieving RESTMappings to prune: invalid resource networking.k8s.io/v1, Kind=Ingress, Namespaced=true: no matches for kind "Ingress" in version "networking.k8s.io/v1" (repeated 1 times)

Found this for reference, but don't yet understand what is going on: kubernetes/kubernetes#90077.
Maybe our test VMs have too new kubectl (1.19?), which then tries to use networking.k8s.io/v1 when it should use networking.k8s.io/v1beta1 for k8s < 1.19??

Maybe @aanm would know something about this?

@jrajahalme
Copy link
Member Author

@aanm I see the same k8s problem also in earlier builds on v1.8, so this is not caused by this PR. It seems to me that we have at some point updated the test environment to use kubectl version that is incompatible with k8s versions < 1.19??

E.g.: https://jenkins.cilium.io/job/Cilium-PR-K8s-1.14-kernel-4.9/183/

[ upstream commit d42cc41 ]

Update Envoy image to release 1.17.2, including the latest security fixes.

Signed-off-by: Jarno Rajahalme <jarno@covalent.io>
@aanm aanm force-pushed the pr/v1.8-backport-2021-04-16 branch from dcbd5e4 to f95182b Compare April 17, 2021 17:01
@aanm
Copy link
Member

aanm commented Apr 17, 2021

test-backport-1.8

@aanm aanm removed the dont-merge/waiting-for-upstream Only merge once upstream library or kernel features have landed label Apr 17, 2021
@aanm aanm merged commit 89e6ecf into v1.8 Apr 17, 2021
@aanm aanm deleted the pr/v1.8-backport-2021-04-16 branch April 17, 2021 20:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/backports This PR provides functionality previously merged into master. release-note/bug This PR fixes an issue in a previous release of Cilium.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants