From 36173b95293adb24af0ce59c89877940535f8b5f Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Sun, 30 Aug 2026 00:00:23 -0500 Subject: [PATCH] W3: Cilium 1.18.13->1.19.7 (+GW-API CRDs v1.4.1), Longhorn 1.9->1.10.2 (pre-k8s-1.34) Co-Authored-By: Claude Opus 4.8 --- infra/ansible/roles/cilium/defaults/main.yml | 4 ++-- platform/cilium/helmrelease.yaml | 2 +- platform/longhorn/helmrelease.yaml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/infra/ansible/roles/cilium/defaults/main.yml b/infra/ansible/roles/cilium/defaults/main.yml index 6ff0332..6f107ed 100644 --- a/infra/ansible/roles/cilium/defaults/main.yml +++ b/infra/ansible/roles/cilium/defaults/main.yml @@ -5,14 +5,14 @@ # (kubeProxyReplacement, k8sServiceHost/Port) are templated from k3s_api_host. # Pin inside the platform/cilium HelmRelease window (>=1.16.0 <1.17.0). -cilium_version: "1.18.13" +cilium_version: "1.19.7" cilium_chart_repo_name: "cilium" cilium_chart_repo_url: "https://helm.cilium.io/" cilium_namespace: "kube-system" # Gateway API CRDs (standard channel) must exist BEFORE Cilium with gatewayAPI.enabled. # Cilium 1.16 targets Gateway API v1.2.x. -gateway_api_version: "v1.3.0" +gateway_api_version: "v1.4.1" gateway_api_crd_urls: - "https://github.com/kubernetes-sigs/gateway-api/releases/download/{{ gateway_api_version }}/standard-install.yaml" # TLSRoute (experimental) is required by Cilium's Gateway API support. diff --git a/platform/cilium/helmrelease.yaml b/platform/cilium/helmrelease.yaml index fecd864..96b1e27 100644 --- a/platform/cilium/helmrelease.yaml +++ b/platform/cilium/helmrelease.yaml @@ -27,7 +27,7 @@ spec: chart: cilium # [parity] Pinned to the exact version the Ansible bootstrap installs # (cilium_version in roles/cilium/defaults/main.yml). Renovate bumps both together. - version: "1.18.13" + version: "1.19.7" sourceRef: kind: HelmRepository name: cilium diff --git a/platform/longhorn/helmrelease.yaml b/platform/longhorn/helmrelease.yaml index 4f623c1..8f7af68 100644 --- a/platform/longhorn/helmrelease.yaml +++ b/platform/longhorn/helmrelease.yaml @@ -14,7 +14,7 @@ spec: chart: spec: chart: longhorn - version: ">=1.9.0 <1.10.0" # W2 upgrade 1.8->1.9 (resolves 1.9.2). Renovate maintains + version: ">=1.10.2 <1.11.0" # W3 upgrade 1.9->1.10 (>=1.10.2 avoids 1.10.0 v1beta1 upgrade bug). Renovate maintains sourceRef: kind: HelmRepository name: longhorn