Hello community, here is the log from the commit of package cilium for openSUSE:Factory checked in at 2019-05-25 13:21:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cilium (Old) and /work/SRC/openSUSE:Factory/.cilium.new.5148 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cilium" Sat May 25 13:21:01 2019 rev:14 rq:705277 version:1.5.1 Changes: -------- --- /work/SRC/openSUSE:Factory/cilium/cilium.changes 2019-05-13 14:50:23.822767138 +0200 +++ /work/SRC/openSUSE:Factory/.cilium.new.5148/cilium.changes 2019-05-25 13:21:18.200312725 +0200 @@ -1,0 +2,67 @@ +Fri May 10 10:20:32 UTC 2019 - Michal Rostecki <[email protected]> + +- Update to version 1.5.1: + * Important Bugfixes: + * Fix bug where Cilium would refuse to start if ipv6 netfilter + modules are unavailable. + * Warn when iptables modules are not available. + * Use all labels to restore endpoint identity to correctly + filter labels upon restart. + * Fix cases where multiple bindings are provided to CLI flags. + * New Functionality / Enhancements: + * Add node-init script to automatically restart pods managed by + kubenet on GKE + * Add functionality to enable or disable metrics for specific + subsystems + * bpf syscall metrics are disabled by default for performance + * Update node, node/status to allow for patch operations in + Cilium RBAC + * Patch, instead of update, node annotations for better + performance + * Annotate node status with NetworkUnavailable as false + * Performance increase by not allocating any memory when + iterating over BPF maps + * CLI now prints tunnel endpoint for RemoteEndpointInfo + * Try to register node forever in nodediscovery + * Remove unused buildqueue package + * Minor Bug Fixes: + * endpoint: do not serialize JSON for EventQueue field + * Avoid unlocked access of endpoint security identity when + calculating what rules select an endpoint + * Only dump bpf lb list if map exists + * Fix bug where endpoint state metrics get stuck with nonzero + endpoints in restoring state + * Do not init config when running with --cmdref parameter + * Improve separation between cilium-agent and cilium CLI + * Add cilium namespace to fqdn_gc_deletions_total metric + * Force preallocation for SNAT maps of LRU type + * Set BPF_F_NO_PREALLOC before comparing maps + * Operator: + * Improve cilium-operator bootstrap sequence (Start health API + earlier, add more logging to see where the operator blocks + on startup) + * Add ca-certificates to operator + * Documentation: + * Add upgrade guide from >=1.4.0 to 1.5 + * Mention enable-legacy-services flag in upgrade docs + * Add k8s 1.14 to supported versions for testing + * Improve configmap documentation + * Document how to get started with MicroK8s, and provide example + YAMLs + * Fix typo in encryption algorithm: GMC -> GCM + * Fix up Ubuntu apt-get install command + * Minor fixes to AWS EKS and AWS Metadata filtering GSGs + * CI: + * Wait for endpoints to be ready after containers are created, + deleted + * Ensure that `go fmt` check always runs correctly in CI + * Increase test suite timeouts to allow for cases where tests + take longer + * Do not set enable-legacy-services in v1.4 ConfigMap + * Update k8s testing versions to v1.11.10 and v1.12.8 + * Make function provided to WithTimeout run asynchronously to + avoid test suites getting stuck +- Add cilium-k8s-yaml package with Kubernetes yaml file to run + Cilium containers. + +------------------------------------------------------------------- Old: ---- cilium-1.5.0.tar.gz New: ---- cilium-1.5.1.tar.gz cilium-cni-install cilium-cni-uninstall ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cilium.spec ++++++ --- /var/tmp/diff_new_pack.nwdBvv/_old 2019-05-25 13:21:19.512312237 +0200 +++ /var/tmp/diff_new_pack.nwdBvv/_new 2019-05-25 13:21:19.516312236 +0200 @@ -35,7 +35,7 @@ %endif Name: cilium -Version: 1.5.0 +Version: 1.5.1 Release: 0 Summary: Linux Native, HTTP Aware Networking and Security for Containers License: Apache-2.0 AND GPL-2.0-or-later @@ -43,6 +43,8 @@ URL: https://github.com/cilium/cilium Source0: %{name}-%{version}.tar.gz Source1: %{name}-rpmlintrc +Source2: cilium-cni-install +Source3: cilium-cni-uninstall BuildRequires: clang BuildRequires: git BuildRequires: glibc-devel @@ -178,6 +180,20 @@ This package contains shared development files for Cilium which are used by Cilium filters in Envoy. +%package k8s-yaml +Summary: Kubernetes yaml file to run Cilium containers +Group: System/Management +BuildArch: noarch + +%description k8s-yaml +Cilium is a software for providing, and transparently securing, network +connectivity, and for load-balancing between application containers and +services deployed using Linux container management platforms like Docker and +Kubernetes. + +This package contains the yaml file requried to download and run Cilium +containers in a Kubernetes cluster. + %prep %setup -q @@ -190,25 +206,12 @@ sed -i '/groupadd /s/^/#/' daemon/Makefile sed -i '/groupadd /s/^/#/' operator/Makefile -# need to fix it upstream or get clearification why we need it -touch bpf/.gitignore # create bindata.go which is no included in the source as it is ignored # because of .gitignore make -C daemon apply-bindata %if 0%{?suse_version} > 1510 && 0%{?is_opensuse} -# Currently the full precheck is failing because: -# - Cilium uses Go in version 1.11.3 due to the following bug which happens -# when Go >= 1.11.4 is used: -# https://github.com/cilium/cilium/issues/6559 -# - openSUSE ships only the newest 1.11.x version -# - Thus we have to use Go 1.10.x, but Cilium code follows 1.11.x gofmt -# rules, which differ from 1.10.x. -# -# make precheck - -# Before the issue above gets fixed, let's at least run single code checks -# which are working. +make precheck make govet make ineffassign make logging-subsys-field @@ -235,9 +238,22 @@ ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rc${service} done +install -D -m 0755 %{SOURCE2} %{buildroot}%{_sbindir}/cilium-cni-install +install -D -m 0755 %{SOURCE3} %{buildroot}%{_sbindir}/cilium-cni-uninstall install -D -m 0755 contrib/packaging/docker/init-container.sh %{buildroot}/%{_bindir}/cilium-init install -D -m 0644 contrib/systemd/cilium %{buildroot}%{_fillupdir}/sysconfig.cilium install -D -m 0644 proxylib/libcilium.h %{buildroot}%{_includedir}/libcilium.h +install -D -m 0644 examples/kubernetes/1.14/cilium-crio.yaml %{buildroot}%{_datadir}/k8s-yaml/cilium/cilium.yaml +sed -i \ + -e 's|image: docker.io/cilium/cilium:.*|image: registry.opensuse.org/devel/kubic/containers/container/kubic/cilium:%{version}|g' \ + -e 's|image: docker.io/cilium/cilium-init:.*|image: registry.opensuse.org/devel/kubic/containers/container/kubic/cilium-init:%{version}|g' \ + -e 's|image: docker.io/cilium/operator:.*|image: registry.opensuse.org/devel/kubic/containers/container/kubic/cilium-operator:%{version}|g' \ + -e 's|image: docker.io/cilium/cilium-etcd-operator:.*|image: registry.opensuse.org/devel/kubic/containers/container/kubic/cilium-etcd-operator:2.0|g' \ + -e 's|/init-container.sh|cilium-init|g' \ + -e 's|/cni-install.sh|cilium-cni-install|g' \ + -e 's|/cni-uninstall.sh|cilium-cni-uninstall|g' \ + -e 's|--container-runtime=crio|--container-runtime=crio\n - --disable-envoy-version-check|g' \ + %{buildroot}%{_datadir}/k8s-yaml/cilium/cilium.yaml mkdir -p %{buildroot}%{bash_completion_dir} %{buildroot}%{_bindir}/cilium completion > %{buildroot}%{bash_completion_dir}/cilium @@ -299,6 +315,8 @@ %dir %{cni_bin_dir} %config(noreplace) %{_sysconfdir}/cni/net.d/10-cilium-cni.conf %{cni_bin_dir}/cilium-cni +%{_sbindir}/cilium-cni-install +%{_sbindir}/cilium-cni-uninstall %files docker %{_unitdir}/cilium-docker.service @@ -318,4 +336,9 @@ %{_includedir}/libcilium.h %{_libdir}/libcilium.so +%files k8s-yaml +%dir %{_datarootdir}/k8s-yaml +%dir %{_datarootdir}/k8s-yaml/cilium +%{_datadir}/k8s-yaml/cilium/cilium.yaml + %changelog ++++++ _service ++++++ --- /var/tmp/diff_new_pack.nwdBvv/_old 2019-05-25 13:21:19.544312225 +0200 +++ /var/tmp/diff_new_pack.nwdBvv/_new 2019-05-25 13:21:19.548312224 +0200 @@ -4,7 +4,7 @@ <param name="scm">git</param> <param name="exclude">.git</param> <param name="versionformat">@PARENT_TAG@</param> - <param name="revision">refs/tags/v1.5.0</param> + <param name="revision">refs/tags/v1.5.1</param> <param name="filename">cilium</param> <param name="changesgenerate">enable</param> </service> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.nwdBvv/_old 2019-05-25 13:21:19.564312218 +0200 +++ /var/tmp/diff_new_pack.nwdBvv/_new 2019-05-25 13:21:19.568312217 +0200 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/cilium/cilium</param> - <param name="changesrevision">e47b37c3a49fa27313d1d7afbc65544dfcf4c457</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">78e2cf4b66a67348df186cd79f66624ac423504e</param></service></servicedata> \ No newline at end of file ++++++ cilium-1.5.0.tar.gz -> cilium-1.5.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/cilium/cilium-1.5.0.tar.gz /work/SRC/openSUSE:Factory/.cilium.new.5148/cilium-1.5.1.tar.gz differ: char 12, line 1 ++++++ cilium-cni-install ++++++ #!/bin/sh cp -f /etc/cni/net.d/10-cilium-cni.conf /host/etc/cni/net.d/ cp -f /usr/lib/cni/cilium-cni /host/opt/cni/bin/ ++++++ cilium-cni-uninstall ++++++ #!/bin/sh rm -f /host/etc/cni/net.d/10-cilium-cni.conf rm -f /host/opt/cni/bin/cilium-cni
