chore(deps): update helm release frr-k8s to v0.0.26

[renovate]

This PR contains the following updates:

Package	Update	Change
frr-k8s (source)	patch	0.0.14 → 0.0.26

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

metallb/frr-k8s (frr-k8s)

v0.0.26

Compare Source

New Features

• Add basic EVPN support to FRRConfiguration. Users can now configure BGP neighbors for the L2VPN EVPN address family and
  advertise Layer 2 VNIs (type-2/type-3 routes) and Layer 3 VNIs (type-5 prefix routes) with configurable route
  distinguishers and route targets. (#​419, @​jcaamano)
• FRRConfiguration now supports setting IPv4 and IPv6 BGP next-hop addresses for advertised prefixes via toAdvertise.nextHop. (#​446, @​trozet)
• Helm chart: allow setting resources for frr-k8s init containers (#​466, @​siutsin)
• The tini binary path and docker-start script path for the FRR sidecar
  container are now configurable via speaker.frr.tiniPath and
  speaker.frr.dockerStartPath Helm values, enabling use of alternative
  FRR images such as Docker Hardened Images. (#​471, @​benispeti)

Bug fixes

• Fixed four bugs in the frr-k8s Helm chart values.schema.json: removed a trailing-colon typo on frrk8s.frr.resources; widened prometheus.serviceMonitor.interval to accept duration strings (matches Prometheus convention and the chart README); moved the crds block from under prometheus to top-level so crds.enabled and crds.validationFailurePolicy are now validated; merged the large frrk8s block (tolerateMaster, updateStrategy, frr.*, reloader, frrMetrics, etc.) into the top-level frrk8s schema so those fields are now validated as well. (#​447, @​lexfrei)
• Helm chart metrics Service annotations now honor prometheus.scrapeAnnotations, avoiding duplicate scrapes when ServiceMonitor is enabled. (#​464, @​Soli0222)
• When no explicit BGP router-id is configured, frr-k8s now derives a deterministic router-id from the node hostname, fixing BGP session establishment failures on IPv6 single-stack clusters where FRR would default to the invalid 0.0.0.0 identifier. (#​445, @​cgoncalves)

v0.0.25

Compare Source

Bug fixes

• Fixes invalid maximum value in CRD validation of ASNs in Kubernetes v1.36.0 (#​433, @​PseudoResonance)

v0.0.24

Compare Source

New Features

• Add localASN field to Neighbor to advertise a different AS number to a specific peer via FRR's local-as no-prepend replace-as feature. (#​430, @​adilGhaffarDev)

v0.0.23

Compare Source

New Features

• Add FRROperatorConfiguration CR that allows users to configure logging at runtime without the need for restarts.

  Default log levels are still set via the --log-level command line flag.

  Users can now set logging levels for all components at runtime via FRROperatorConfiguration .spec.logLevel.

  The FRROperatorConfiguration object must be named config and must reside in the namespace that is watched by frr-k8s. (#​386, @​andreaskaris)

• BGP debounce timeout for FRR configuration reloads is configurable. Only applies when METALLB_BGP_TYPE=frr. Can also be set via METALLB_BGP_DEBOUNCE_TIMEOUT or by bgp-debounce-timeout flag, default is 3000 ms. (#​415, @​adilGhaffarDev)

• Replace kube-rbac-proxy with native TLS and RBAC, which enables configuring some TLS parameters. The old HTTP endpoints are no longer available, they are now HTTPS served by self-signed certificates / certificates passed to the binaries. (#​409, @​oribon)

Bug fixes

• Fix BFD profile merging to allow adding BFD configuration to existing BGP neighbors without requiring deletion and recreation of FRRConfiguration objects.
  This resolves the issue where users received "multiple bfd profiles specified" errors when attempting to enable BFD on peers with existing route learning configurations. (#​400, @​andreaskaris)

v0.0.22

Compare Source

Bug fixes

• Added readOnlyRootFilesystem: true and allowPrivilegeEscalation: false to containers missing these security flags, enhancing container security posture without affecting functionality. (#​358, @​cgoncalves)

Other (Cleanup or Flake)

• Fix duplicate port name monitoring when deploying the all-in-one.yaml (#​356, @​dave-tucker)
• Frr container: no longer contains a log file, logs are sent directly to stdout. this enables the logs to be rotated on the node. (#​319, @​oribon)

v0.0.21

Compare Source

New Features

• Keep the frrnodestate of a given node aligned with the lifecycle of the pod that generated it. (#​323, @​fedepaol)
• Update FRR version to 10.4.1 (#​344, @​karampok)

Other (Cleanup or Flake)

• Webhook performance improvements on scale (#​330, @​fedepaol)

v0.0.20

Compare Source

New Features

• FRR Configuration: don't generate the prefix lists if the neighbor is not enabled for that ip family. (#​303, @​fedepaol)
• Make the webhook pod host networked so it will be possible to apply frr configurations even if some route is breaking the CNI connectivity. (#​305, @​fedepaol)

v0.0.19

Compare Source

New Features

• Deprecate the disableMP flag, and make the v4 over v4 and v6 over v6 behavior the default. Additionally, add a dualStackAddressFamily flag per neighbor, where we enable the v4 family over a v6 link and viceversa. (#​296, @​fedepaol)

Bugs or Regressions

• Ignore FRRConfigurations belonging to different namespaces. (#​290, @​fedepaol)

v0.0.18

Compare Source

New Features

• Added the BGPSessionState resource, which exposes the status of a BGP session from the FRR instance running on the node. (#​257, @​oribon)

Bugs or Regressions

• Add by default the -K (graceful_restart) argument in Zebra so that learnt routes are maintained on the host when zebra process restart. (#​231, @​karampok)
• Better handling of high number of FRRConfigurations.
• Memory improvements. (#​291, @​fedepaol)
• Declare the webhook pod to be ready only when it can serve requests, checking the webhook endpoint as readiness probe. (#​284, @​fedepaol)
• Limit the number of file descriptors for the FRR daemons instead of defaulting to ulimit. (#​272, @​fedepaol)

v0.0.17

Compare Source

New Features

Support unnumbered BGP peering (#​212, @​karampok)

v0.0.16

Compare Source

New Features

• Make the acceptance of incoming BGP connections optional via an helm parameter. (#​229, @​fedepaol)

Bug fixes

• Bug: throw better error when prefix for same localPref is added twice (#​221, @​karampok)
• The BGP metrics label corresponding to the peer does not have the port anymore. Because now FRR-K8S allow incoming connections, the port might be source port of the tcp connection, making the metrics label not reliable. Additionally, we can only have one peer per VRF, so the port is not relevant. (#​206, @​fedepaol)

v0.0.15

Compare Source

New Features

• Add DynamicASN field for a neighbor, which allows the daemon to detect the AS number to use without explicitly setting it. The new field is mutually exclusive with the existing ASN field, and one of them must be specified for any given Neighbor. (#​194, @​oribon)

Bug fixes

• Update the kubernetes api / codegen and get rid of the core symlink hack. (#​186, @​fedepaol)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • "after 9am every weekday,before 5pm every weekday"

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Run report for 06bf6348 (ubuntu-latest, Linux, 0, 2, 1)

Total time: 1m 4s | Comparison time: 6m 50s | Estimated savings: 5m 46s (84.4% faster)

	Action	Time	Status	Info
🟩	SyncWorkspace	8.1ms	Passed
🟩	SyncProject(devenv)	0.3ms	Passed
🟩	SyncProject(vendir)	0.3ms	Passed
🟩	SyncProject(devcontainer)	0.3ms	Passed
🟩	SyncProject(talos-image)	0.3ms	Passed
🟦	RunTask(talos-image:generate-sha)	866.3ms	Cached
🟦	RunTask(devcontainers-cli:build)	1.9s	Cached
🟩	RunTask(docker:buildx_run)	2.2s	Passed
🟦	RunTask(vendir:build)	40.9s	Cached
🟦	RunTask(vendir:test)	250ms	Cached
🟦	RunTask(talos-image:generate-profile)	547.5ms	Cached
🟦	RunTask(devcontainer:build)	1.2s	Cached
🟦	RunTask(devcontainer:test)	235.7ms	Cached
🟩	RunTask(devenv:apply)	23.1s	Passed

Environment

OS: Linux
Matrix:

os = ubuntu-latest
name = Linux
index = 0
total = 2
job_number = 1

Variables:

MOON_TOOLCHAIN_FORCE_GLOBALS = true

Touched files

third_party/vendir/charts/metallb/Chart.lock
third_party/vendir/charts/metallb/Chart.yaml

[github-actions]

Run report for 06bf6348 (ubuntu-latest, Linux, 1, 2, 2)

Total time: 50.5s | Comparison time: 5m 30s | Estimated savings: 4m 39s (84.7% faster)

	Action	Time	Status	Info
🟩	SyncWorkspace	8.9ms	Passed
🟩	SyncProject(vendir)	0.4ms	Passed
🟩	SyncProject(escaperoom)	0.5ms	Passed
🟦	RunTask(escaperoom:test)	1.1s	Cached
🟩	SyncProject(devenv)	0.5ms	Passed
🟩	SyncProject(talos-image)	0.5ms	Passed
🟩	SyncProject(devcontainer)	0.4ms	Passed
🟩	RunTask(docker:buildx_run)	1.6s	Passed
🟦	RunTask(talos-image:generate-sha)	866.1ms	Cached
🟦	RunTask(devcontainers-cli:build)	2.8s	Cached
🟦	RunTask(vendir:build)	30.3s	Cached
🟦	RunTask(vendir:test)	316.4ms	Cached
🟦	RunTask(talos-image:generate-profile)	406.5ms	Cached
🟦	RunTask(devcontainer:build)	941.3ms	Cached
🟩	RunTask(devenv:apply)	20.2s	Passed

Environment

OS: Linux
Matrix:

os = ubuntu-latest
name = Linux
index = 1
total = 2
job_number = 2

Variables:

MOON_TOOLCHAIN_FORCE_GLOBALS = true

Touched files

third_party/vendir/charts/metallb/Chart.lock
third_party/vendir/charts/metallb/Chart.yaml

[github-actions]

Run report for 06bf6348 (macos-latest, macOS, 0, 1, 1)

Total time: 6m 37s | Comparison time: 11m 58s | Estimated savings: 5m 21s (44.7% faster)

	Action	Time	Status	Info
🟩	SyncWorkspace	15.5ms	Passed
🟩	SyncProject(vendir)	0.6ms	Passed
🟩	SyncProject(devenv)	0.5ms	Passed
🟦	RunTask(vendir:build)	49.6s	Cached
🟩	RunTask(devenv:apply)	5m 47s	Passed	SLOW
🟦	RunTask(devenv:test)	220.8ms	Cached

Environment

OS: macOS
Matrix:

os = macos-latest
name = macOS
index = 0
total = 1
job_number = 1

Variables:

MOON_TOOLCHAIN_FORCE_GLOBALS = true

Touched files

third_party/vendir/charts/metallb/Chart.lock
third_party/vendir/charts/metallb/Chart.yaml