Skip to content

Commit 3fdbed8

Browse files
vipul-21vipul-21
committed
ci: Add manifest for cilium v1.18
Signed-off-by: Vipul Singh <vipul21sept@gmail.com>
1 parent 0b0de54 commit 3fdbed8

27 files changed

+10637
-11
lines changed

‎.pipelines/build/dockerfiles/cni.Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
ARG ARCH
44

55
# mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image:v1.0.0
6-
FROM --platform=windows/${ARCH} mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image@sha256:b4c9637e032f667c52d1eccfa31ad8c63f1b035e8639f3f48a510536bf34032b AS windows
6+
FROM --platform=windows/${ARCH} AS windows
77
ARG ARTIFACT_DIR .
88

99
COPY ${ARTIFACT_DIR}/bin/dropgz.exe /dropgz.exe

‎.pipelines/build/dockerfiles/cns.Dockerfile‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,19 +3,19 @@
33
ARG ARCH
44

55
# mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image:v1.0.0
6-
FROM --platform=windows/${ARCH} mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image@sha256:b4c9637e032f667c52d1eccfa31ad8c63f1b035e8639f3f48a510536bf34032b AS windows
6+
FROM --platform=windows/${ARCH} AS windows
77
ARG ARTIFACT_DIR .
88

99
COPY ${ARTIFACT_DIR}/bin/azure-cns.exe /azure-cns.exe
1010
ENTRYPOINT ["azure-cns.exe"]
1111
EXPOSE 10090
1212

1313
# mcr.microsoft.com/azurelinux/base/core:3.0
14-
FROM --platform=linux/${ARCH} mcr.microsoft.com/azurelinux/base/core@sha256:833693619d523c23b1fe4d9c1f64a6c697e2a82f7a6ee26e1564897c3fe3fa02 AS build-helper
14+
FROM --platform=linux/${ARCH} AS build-helper
1515
RUN tdnf install -y iptables
1616

1717
# mcr.microsoft.com/azurelinux/distroless/minimal:3.0
18-
FROM --platform=linux/${ARCH} mcr.microsoft.com/azurelinux/distroless/minimal@sha256:d784c8233e87e8bce2e902ff59a91262635e4cabc25ec55ac0a718344514db3c AS linux
18+
FROM --platform=linux/${ARCH} AS linux
1919
ARG ARTIFACT_DIR .
2020

2121
COPY --from=build-helper /usr/sbin/*tables* /usr/sbin/

‎cni/Dockerfile‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,10 +6,10 @@ ARG OS_VERSION
66
ARG OS
77

88
# mcr.microsoft.com/oss/go/microsoft/golang:1.24-azurelinux3.0
9-
FROM --platform=linux/${ARCH} mcr.microsoft.com/oss/go/microsoft/golang@sha256:7bbbda682ce4a462855bd8a61c5efdc1e79ab89d9e32c2610f41e6f9502e1cf4 AS go
9+
FROM --platform=linux/${ARCH} AS go
1010

1111
# mcr.microsoft.com/azurelinux/base/core:3.0
12-
FROM --platform=linux/${ARCH} mcr.microsoft.com/azurelinux/base/core@sha256:833693619d523c23b1fe4d9c1f64a6c697e2a82f7a6ee26e1564897c3fe3fa02 AS mariner-core
12+
FROM --platform=linux/${ARCH} AS mariner-core
1313

1414
FROM go AS azure-vnet
1515
ARG OS
@@ -54,7 +54,7 @@ COPY --from=dropgz /go/bin/dropgz dropgz
5454
ENTRYPOINT [ "/dropgz" ]
5555

5656
# mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image:v1.0.0
57-
FROM --platform=windows/${ARCH} mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image@sha256:b4c9637e032f667c52d1eccfa31ad8c63f1b035e8639f3f48a510536bf34032b as hpc
57+
FROM --platform=windows/${ARCH} as hpc
5858

5959
FROM hpc as windows
6060
COPY --from=dropgz /go/bin/dropgz dropgz.exe

‎cns/Dockerfile‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,13 +5,13 @@ ARG OS_VERSION
55
ARG OS
66

77
# mcr.microsoft.com/oss/go/microsoft/golang:1.24-azurelinux3.0
8-
FROM --platform=linux/${ARCH} mcr.microsoft.com/oss/go/microsoft/golang@sha256:7bbbda682ce4a462855bd8a61c5efdc1e79ab89d9e32c2610f41e6f9502e1cf4 AS go
8+
FROM --platform=linux/${ARCH} AS go
99

1010
# mcr.microsoft.com/azurelinux/base/core:3.0
11-
FROM mcr.microsoft.com/azurelinux/base/core@sha256:833693619d523c23b1fe4d9c1f64a6c697e2a82f7a6ee26e1564897c3fe3fa02 AS mariner-core
11+
FROM AS mariner-core
1212

1313
# mcr.microsoft.com/azurelinux/distroless/minimal:3.0
14-
FROM mcr.microsoft.com/azurelinux/distroless/minimal@sha256:d784c8233e87e8bce2e902ff59a91262635e4cabc25ec55ac0a718344514db3c AS mariner-distroless
14+
FROM AS mariner-distroless
1515

1616
FROM --platform=linux/${ARCH} go AS builder
1717
ARG OS
@@ -33,7 +33,7 @@ ENTRYPOINT [ "/usr/local/bin/azure-cns" ]
3333
EXPOSE 10090
3434

3535
# mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image:v1.0.0
36-
FROM --platform=windows/${ARCH} mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image@sha256:b4c9637e032f667c52d1eccfa31ad8c63f1b035e8639f3f48a510536bf34032b as hpc
36+
FROM --platform=windows/${ARCH} as hpc
3737

3838
FROM hpc as windows
3939
COPY --from=builder /go/bin/azure-cns /azure-cns.exe

‎test/integration/manifests/cilium/v1.18/cilium-agent/files/clusterrole.yaml‎

Lines changed: 121 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,121 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
name: cilium
5+
labels:
6+
app.kubernetes.io/part-of: cilium
7+
rules:
8+
- apiGroups:
9+
- networking.k8s.io
10+
resources:
11+
- networkpolicies
12+
verbs:
13+
- get
14+
- list
15+
- watch
16+
- apiGroups:
17+
- discovery.k8s.io
18+
resources:
19+
- endpointslices
20+
verbs:
21+
- get
22+
- list
23+
- watch
24+
- apiGroups:
25+
- ""
26+
resources:
27+
- namespaces
28+
- services
29+
- pods
30+
- endpoints
31+
- nodes
32+
verbs:
33+
- get
34+
- list
35+
- watch
36+
- apiGroups:
37+
- apiextensions.k8s.io
38+
resources:
39+
- customresourcedefinitions
40+
verbs:
41+
- list
42+
- watch
43+
# This is used when validating policies in preflight. This will need to stay
44+
# until we figure out how to avoid "get" inside the preflight, and then
45+
# should be removed ideally.
46+
- get
47+
- apiGroups:
48+
- cilium.io
49+
resources:
50+
- ciliumbgppeeringpolicies
51+
- ciliumclusterwideenvoyconfigs
52+
- ciliumclusterwidenetworkpolicies
53+
- ciliumegressgatewaypolicies
54+
- ciliumendpoints
55+
- ciliumendpointslices
56+
- ciliumenvoyconfigs
57+
- ciliumidentities
58+
- ciliumlocalredirectpolicies
59+
- ciliumnetworkpolicies
60+
- ciliumnodes
61+
- ciliumnodeconfigs
62+
- ciliumloadbalancerippools
63+
- ciliumcidrgroups
64+
- ciliuml2announcementpolicies
65+
- ciliumpodippools
66+
- ciliumbgpnodeconfigs
67+
- ciliumbgpadvertisements
68+
- ciliumbgppeerconfigs
69+
verbs:
70+
- list
71+
- watch
72+
- apiGroups:
73+
- cilium.io
74+
resources:
75+
- ciliumidentities
76+
- ciliumendpoints
77+
- ciliumnodes
78+
verbs:
79+
- create
80+
- apiGroups:
81+
- cilium.io
82+
# To synchronize garbage collection of such resources
83+
resources:
84+
- ciliumidentities
85+
verbs:
86+
- update
87+
- apiGroups:
88+
- cilium.io
89+
resources:
90+
- ciliumendpoints
91+
verbs:
92+
- delete
93+
- get
94+
- apiGroups:
95+
- cilium.io
96+
resources:
97+
- ciliumnodes
98+
- ciliumnodes/status
99+
verbs:
100+
- get
101+
- update
102+
- apiGroups:
103+
- cilium.io
104+
resources:
105+
- ciliumnetworkpolicies/status
106+
- ciliumclusterwidenetworkpolicies/status
107+
- ciliumendpoints/status
108+
- ciliumendpoints
109+
- ciliuml2announcementpolicies/status
110+
- ciliumbgpnodeconfigs/status
111+
verbs:
112+
- patch
113+
- apiGroups:
114+
- ""
115+
resourceNames:
116+
- cilium-config
117+
resources:
118+
- configmaps
119+
verbs:
120+
- list
121+
- watch

‎test/integration/manifests/cilium/v1.18/cilium-agent/files/clusterrolebinding.yaml‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRoleBinding
3+
metadata:
4+
name: cilium
5+
labels:
6+
app.kubernetes.io/part-of: cilium
7+
roleRef:
8+
apiGroup: rbac.authorization.k8s.io
9+
kind: ClusterRole
10+
name: cilium
11+
subjects:
12+
- kind: ServiceAccount
13+
name: "cilium"
14+
namespace: kube-system

‎test/integration/manifests/cilium/v1.18/cilium-agent/files/serviceaccount.yaml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
apiVersion: v1
2+
kind: ServiceAccount
3+
metadata:
4+
name: "cilium"
5+
namespace: kube-system

0 commit comments

Comments
 (0)