Skip to content

feat(container): update docker.io/envoyproxy/gateway-helm ( 1.3.3 → 1.4.0 ) - autoclosed#2374

Merged
lucas-dclrcq merged 1 commit intomainfrom
renovate/docker.io-envoyproxy-gateway-helm-1.x
May 14, 2025
Merged

feat(container): update docker.io/envoyproxy/gateway-helm ( 1.3.3 → 1.4.0 ) - autoclosed#2374
lucas-dclrcq merged 1 commit intomainfrom
renovate/docker.io-envoyproxy-gateway-helm-1.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented May 14, 2025 •
edited
Loading

This PR contains the following updates:

Package Update Change
docker.io/envoyproxy/gateway-helm (source) minor 1.3.3 -> 1.4.0

Release Notes

envoyproxy/gateway (docker.io/envoyproxy/gateway-helm)

v1.4.0

Compare Source

Release Announcement

Check out the v1.4.0 release announcement to learn more about the release.

What's Changed

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions github-actions bot added the area/kubernetes Changes made in the kubernetes directory label May 14, 2025
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented May 14, 2025 

--- HelmRelease: network/envoy-gateway ConfigMap: network/envoy-gateway-config

+++ HelmRelease: network/envoy-gateway ConfigMap: network/envoy-gateway-config

@@ -9,12 +9,13 @@

     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
 data:
   envoy-gateway.yaml: |
     apiVersion: gateway.envoyproxy.io/v1alpha1
     kind: EnvoyGateway
+    extensionApis: {}
     gateway:
       controllerName: gateway.envoyproxy.io/gatewayclass-controller
     logging:
       level:
         default: info
     provider:
@@ -29,9 +30,9 @@

                 template:
                   spec:
                     containers:
                     - imagePullPolicy: IfNotPresent
                       name: envoy-ratelimit
         shutdownManager:
-          image: docker.io/envoyproxy/gateway:v1.3.3
+          image: docker.io/envoyproxy/gateway:v1.4.0
       type: Kubernetes
 
--- HelmRelease: network/envoy-gateway ClusterRole: network/envoy-gateway-gateway-helm-envoy-gateway-role

+++ HelmRelease: network/envoy-gateway ClusterRole: network/envoy-gateway-gateway-helm-envoy-gateway-role

@@ -115,7 +115,18 @@

   - tcproutes/status
   - tlsroutes/status
   - udproutes/status
   - backendtlspolicies/status
   verbs:
   - update
+- apiGroups:
+  - ''
+  resources:
+  - pods
+  - pods/binding
+  verbs:
+  - get
+  - list
+  - patch
+  - update
+  - watch
 
--- HelmRelease: network/envoy-gateway Service: network/envoy-gateway

+++ HelmRelease: network/envoy-gateway Service: network/envoy-gateway

@@ -24,7 +24,10 @@

   - name: wasm
     port: 18002
     targetPort: 18002
   - name: metrics
     port: 19001
     targetPort: 19001
+  - name: webhook
+    port: 9443
+    targetPort: 9443
 
--- HelmRelease: network/envoy-gateway Deployment: network/envoy-gateway

+++ HelmRelease: network/envoy-gateway Deployment: network/envoy-gateway

@@ -35,13 +35,13 @@

           valueFrom:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.namespace
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: cluster.local
-        image: docker.io/envoyproxy/gateway:v1.3.3
+        image: docker.io/envoyproxy/gateway:v1.4.0
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
             path: /healthz
             port: 8081
           initialDelaySeconds: 15
@@ -53,12 +53,14 @@

         - containerPort: 18001
           name: ratelimit
         - containerPort: 18002
           name: wasm
         - containerPort: 19001
           name: metrics
+        - name: webhook
+          containerPort: 9443
         readinessProbe:
           httpGet:
             path: /readyz
             port: 8081
           initialDelaySeconds: 5
           periodSeconds: 10
--- HelmRelease: network/envoy-gateway ServiceAccount: network/envoy-gateway-gateway-helm-certgen

+++ HelmRelease: network/envoy-gateway ServiceAccount: network/envoy-gateway-gateway-helm-certgen

@@ -6,8 +6,9 @@

   namespace: network
   labels:
     app.kubernetes.io/name: gateway-helm
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
   annotations:
-    helm.sh/hook: pre-install
+    helm.sh/hook: pre-install, pre-upgrade
+    helm.sh/hook-weight: '-1'
 
--- HelmRelease: network/envoy-gateway Role: network/envoy-gateway-gateway-helm-certgen

+++ HelmRelease: network/envoy-gateway Role: network/envoy-gateway-gateway-helm-certgen

@@ -6,13 +6,14 @@

   namespace: network
   labels:
     app.kubernetes.io/name: gateway-helm
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
   annotations:
-    helm.sh/hook: pre-install
+    helm.sh/hook: pre-install, pre-upgrade
+    helm.sh/hook-weight: '-1'
 rules:
 - apiGroups:
   - ''
   resources:
   - secrets
   verbs:
--- HelmRelease: network/envoy-gateway RoleBinding: network/envoy-gateway-gateway-helm-certgen

+++ HelmRelease: network/envoy-gateway RoleBinding: network/envoy-gateway-gateway-helm-certgen

@@ -6,13 +6,14 @@

   namespace: network
   labels:
     app.kubernetes.io/name: gateway-helm
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
   annotations:
-    helm.sh/hook: pre-install
+    helm.sh/hook: pre-install, pre-upgrade
+    helm.sh/hook-weight: '-1'
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
   name: envoy-gateway-gateway-helm-certgen
 subjects:
 - kind: ServiceAccount
--- HelmRelease: network/envoy-gateway Job: network/envoy-gateway-gateway-helm-certgen

+++ HelmRelease: network/envoy-gateway Job: network/envoy-gateway-gateway-helm-certgen

@@ -28,25 +28,25 @@

           valueFrom:
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.namespace
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: cluster.local
-        image: docker.io/envoyproxy/gateway:v1.3.3
+        image: docker.io/envoyproxy/gateway:v1.4.0
         imagePullPolicy: IfNotPresent
         name: envoy-gateway-certgen
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
           readOnlyRootFilesystem: true
-          runAsGroup: 65534
+          runAsGroup: 65532
           runAsNonRoot: true
-          runAsUser: 65534
+          runAsUser: 65532
           seccompProfile:
             type: RuntimeDefault
       imagePullSecrets: []
       restartPolicy: Never
       serviceAccountName: envoy-gateway-gateway-helm-certgen
   ttlSecondsAfterFinished: 30
--- HelmRelease: network/envoy-gateway ClusterRole: network/envoy-gateway-gateway-helm-certgen:network

+++ HelmRelease: network/envoy-gateway ClusterRole: network/envoy-gateway-gateway-helm-certgen:network

@@ -0,0 +1,31 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: envoy-gateway-gateway-helm-certgen:network
+  labels:
+    app.kubernetes.io/name: gateway-helm
+    app.kubernetes.io/instance: envoy-gateway
+    app.kubernetes.io/managed-by: Helm
+  annotations:
+    helm.sh/hook: pre-install, pre-upgrade
+    helm.sh/hook-weight: '-1'
+rules:
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - mutatingwebhookconfigurations
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - mutatingwebhookconfigurations
+  resourceNames:
+  - envoy-gateway-topology-injector.network
+  verbs:
+  - update
+  - patch
+
--- HelmRelease: network/envoy-gateway ClusterRoleBinding: network/envoy-gateway-gateway-helm-certgen:network

+++ HelmRelease: network/envoy-gateway ClusterRoleBinding: network/envoy-gateway-gateway-helm-certgen:network

@@ -0,0 +1,21 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: envoy-gateway-gateway-helm-certgen:network
+  labels:
+    app.kubernetes.io/name: gateway-helm
+    app.kubernetes.io/instance: envoy-gateway
+    app.kubernetes.io/managed-by: Helm
+  annotations:
+    helm.sh/hook: pre-install, pre-upgrade
+    helm.sh/hook-weight: '-1'
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: envoy-gateway-gateway-helm-certgen:network
+subjects:
+- kind: ServiceAccount
+  name: envoy-gateway-gateway-helm-certgen
+  namespace: network
+
--- HelmRelease: network/envoy-gateway MutatingWebhookConfiguration: network/envoy-gateway-topology-injector.network

+++ HelmRelease: network/envoy-gateway MutatingWebhookConfiguration: network/envoy-gateway-topology-injector.network

@@ -0,0 +1,41 @@

+---
+apiVersion: admissionregistration.k8s.io/v1
+kind: MutatingWebhookConfiguration
+metadata:
+  name: envoy-gateway-topology-injector.network
+  annotations:
+    helm.sh/hook: pre-install, pre-upgrade
+    helm.sh/hook-weight: '-1'
+  labels:
+    app.kubernetes.io/component: topology-injector
+    app.kubernetes.io/name: gateway-helm
+    app.kubernetes.io/instance: envoy-gateway
+    app.kubernetes.io/managed-by: Helm
+webhooks:
+- name: topology.webhook.gateway.envoyproxy.io
+  admissionReviewVersions:
+  - v1
+  sideEffects: None
+  clientConfig:
+    service:
+      name: envoy-gateway
+      namespace: network
+      path: /inject-pod-topology
+      port: 9443
+  failurePolicy: Ignore
+  rules:
+  - operations:
+    - CREATE
+    apiGroups:
+    - ''
+    apiVersions:
+    - v1
+    resources:
+    - pods/binding
+  namespaceSelector:
+    matchExpressions:
+    - key: kubernetes.io/metadata.name
+      operator: In
+      values:
+      - network
+

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented May 14, 2025 

--- kubernetes/apps/network/envoy-gateway/app Kustomization: flux-system/envoy-gateway OCIRepository: network/envoy-gateway

+++ kubernetes/apps/network/envoy-gateway/app Kustomization: flux-system/envoy-gateway OCIRepository: network/envoy-gateway

@@ -11,9 +11,9 @@

 spec:
   interval: 5m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 1.3.3
+    tag: 1.4.0
   url: oci://docker.io/envoyproxy/gateway-helm

@renovate renovate bot force-pushed the renovate/docker.io-envoyproxy-gateway-helm-1.x branch 2 times, most recently from 305950c to daf3c64 Compare May 14, 2025 08:55
@renovate renovate bot force-pushed the renovate/docker.io-envoyproxy-gateway-helm-1.x branch 2 times, most recently from dca1438 to 0a2a9a5 Compare May 14, 2025 09:11
@renovate renovate bot force-pushed the renovate/docker.io-envoyproxy-gateway-helm-1.x branch from 0a2a9a5 to 844560e Compare May 14, 2025 09:14
@renovate renovate bot force-pushed the renovate/docker.io-envoyproxy-gateway-helm-1.x branch from 844560e to 49e3e74 Compare May 14, 2025 09:16
@renovate renovate bot force-pushed the renovate/docker.io-envoyproxy-gateway-helm-1.x branch from 49e3e74 to 9af0b64 Compare May 14, 2025 09:18
@renovate renovate bot force-pushed the renovate/docker.io-envoyproxy-gateway-helm-1.x branch from 9af0b64 to 02f6916 Compare May 14, 2025 09:25
@renovate renovate bot force-pushed the renovate/docker.io-envoyproxy-gateway-helm-1.x branch 2 times, most recently from 7f2b911 to ff8b6a1 Compare May 14, 2025 10:11
@renovate renovate bot force-pushed the renovate/docker.io-envoyproxy-gateway-helm-1.x branch from ff8b6a1 to c8e77aa Compare May 14, 2025 10:13
@lucas-dclrcq lucas-dclrcq merged commit bfd7d37 into main May 14, 2025
3 checks passed
@lucas-dclrcq lucas-dclrcq deleted the renovate/docker.io-envoyproxy-gateway-helm-1.x branch May 14, 2025 12:11
@renovate renovate bot changed the title feat(container): update docker.io/envoyproxy/gateway-helm ( 1.3.3 → 1.4.0 ) feat(container): update docker.io/envoyproxy/gateway-helm ( 1.3.3 → 1.4.0 ) - autoclosed May 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/kubernetes Changes made in the kubernetes directory renovate/container type/minor

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lucas-dclrcq