v1.40.0

[gardener/gardener-extension-networking-cilium]

⚠️ Breaking Changes

• [OPERATOR] The Helm charts for the application and runtime parts of the gardener-extension-admission-cilium admission controller have been separated into standalone charts. These charts now assume a Garden setup with a virtual garden. Both charts must be deployed individually: the runtime chart on the Garden runtime cluster, and the application chart on the virtual garden. Additionally, the intermediate global level in the Helm values has been removed, so you may need to adjust your provided values accordingly. by @MartinWeindel [#483]

🏃 Others

• [OPERATOR] Update to cilium v1.16.6. by @DockToFuture [#484]
• [OPERATOR] Use BPF masquerading and therefore BPF host routing in Cilium when using direct routing. by @hown3d [#350]
• [OPERATOR] Update cilium to v1.17.1 by @axel7born [#510]
• [OPERATOR] Containers, which do not require privilege escalations, now forbid privilege escalations explicitly. by @georgibaltiev [#487]
• [OPERATOR] Prepare for deployment of admission controller by gardener-operator by @MartinWeindel [#483]
• [OPERATOR] The ports used by the extension can now be specified via helm values. by @ScheererJ [#506]

Helm Charts

• admission-cilium-application: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-cilium-application:v1.40.0
• admission-cilium-runtime: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/admission-cilium-runtime:v1.40.0
• networking-cilium: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/networking-cilium:v1.40.0

Docker Images

• gardener-extension-admission-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-cilium:v1.40.0
• gardener-extension-networking-cilium: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/networking-cilium:v1.40.0