chore(k8s/amour/cilium): v1.16.1

Author: uhthomas

BUILD.bazel

@@ -1,3 +1,4 @@
+load("@com_github_tnarg_rules_cue//cue:cue.bzl", "cue_export")
 load("@bazel_gazelle//:def.bzl", "DEFAULT_LANGUAGES", "gazelle", "gazelle_binary")
 load("@com_github_bazelbuild_buildtools//buildifier:def.bzl", "buildifier")
 
@@ -25,3 +26,15 @@ gazelle(
 )
 
 buildifier(name = "buildifier")
+
+cue_export(
+    name = "cilium_1_14_0",
+    src = "cilium-1.14.0.cue",
+    visibility = ["//visibility:public"],
+)
+
+cue_export(
+    name = "cilium_1_16_1",
+    src = "cilium-1.16.1.cue",
+    visibility = ["//visibility:public"],
+)

cue.mod/gen/context/context_go_gen.cue

@@ -59,13 +59,11 @@ package context
 // Context's methods may be called by multiple goroutines simultaneously.
 #Context: _
 
-_#deadlineExceededError: {
-}
+_#deadlineExceededError: {}
 
 // An emptyCtx is never canceled, has no values, and has no deadline.
 // It is the common base of backgroundCtx and todoCtx.
-_#emptyCtx: {
-}
+_#emptyCtx: {}
 
 _#afterFuncer: _
 

cue.mod/gen/github.com/cilium/cilium/api/v1/models/BUILD.bazel

@@ -6,6 +6,7 @@ cue_library(
         "address_go_gen.cue",
         "address_pair_go_gen.cue",
         "allocation_map_go_gen.cue",
+        "attach_mode_go_gen.cue",
         "b_p_f_map_entry_go_gen.cue",
         "b_p_f_map_go_gen.cue",
         "b_p_f_map_list_go_gen.cue",
@@ -21,6 +22,9 @@ cue_library(
         "bgp_peer_families_go_gen.cue",
         "bgp_peer_go_gen.cue",
         "bgp_route_go_gen.cue",
+        "bgp_route_policy_go_gen.cue",
+        "bgp_route_policy_prefix_match_go_gen.cue",
+        "bgp_route_policy_statement_go_gen.cue",
         "c_id_r_list_go_gen.cue",
         "c_id_r_policy_go_gen.cue",
         "c_n_i_chaining_status_go_gen.cue",
@@ -43,6 +47,7 @@ cue_library(
         "dns_lookup_go_gen.cue",
         "doc_go_gen.cue",
         "encryption_status_go_gen.cue",
+        "endpoint_batch_delete_request_go_gen.cue",
         "endpoint_change_request_go_gen.cue",
         "endpoint_configuration_spec_go_gen.cue",
         "endpoint_configuration_status_go_gen.cue",
@@ -65,6 +70,7 @@ cue_library(
         "host_firewall_go_gen.cue",
         "host_routing_go_gen.cue",
         "hubble_status_go_gen.cue",
+        "i_psec_status_go_gen.cue",
         "identity_endpoints_go_gen.cue",
         "identity_go_gen.cue",
         "identity_range_go_gen.cue",
@@ -81,9 +87,11 @@ cue_library(
         "l4_policy_go_gen.cue",
         "l_r_p_backend_go_gen.cue",
         "l_r_p_spec_go_gen.cue",
+        "label_array_go_gen.cue",
         "label_configuration_go_gen.cue",
         "label_configuration_spec_go_gen.cue",
         "label_configuration_status_go_gen.cue",
+        "label_go_gen.cue",
         "labels_go_gen.cue",
         "map_event_go_gen.cue",
         "masquerading_go_gen.cue",
@@ -117,12 +125,15 @@ cue_library(
         "remote_cluster_go_gen.cue",
         "remote_cluster_synced_go_gen.cue",
         "request_response_statistics_go_gen.cue",
+        "routing_go_gen.cue",
         "selector_cache_go_gen.cue",
         "selector_entry_go_gen.cue",
         "selector_identity_mapping_go_gen.cue",
         "service_go_gen.cue",
         "service_spec_go_gen.cue",
         "service_status_go_gen.cue",
+        "srv6_go_gen.cue",
+        "state_d_b_query_go_gen.cue",
         "status_go_gen.cue",
         "status_response_go_gen.cue",
         "trace_from_go_gen.cue",

cue.mod/gen/github.com/cilium/cilium/api/v1/models/attach_mode_go_gen.cue

@@ -0,0 +1,20 @@
+// Code generated by cue get go. DO NOT EDIT.
+
+//cue:generate cue get go github.com/cilium/cilium/api/v1/models
+
+package models
+
+// AttachMode Core datapath attachment mode
+//
+// swagger:model AttachMode
+#AttachMode: string // #enumAttachMode
+
+#enumAttachMode:
+	#AttachModeTc |
+	#AttachModeTcx
+
+// AttachModeTc captures enum value "tc"
+#AttachModeTc: #AttachMode & "tc"
+
+// AttachModeTcx captures enum value "tcx"
+#AttachModeTcx: #AttachMode & "tcx"

cue.mod/gen/github.com/cilium/cilium/api/v1/models/backend_address_go_gen.cue

@@ -28,6 +28,9 @@ package models
 
 	// Backend weight
 	weight?: null | uint16 @go(Weight,*uint16)
+
+	// Optional name of the zone in which this backend runs
+	zone?: string @go(Zone)
 }
 
 // BackendAddressStateActive captures enum value "active"

cue.mod/gen/github.com/cilium/cilium/api/v1/models/bgp_peer_go_gen.cue

@@ -63,6 +63,9 @@ package models
 	//
 	"session-state"?: string @go(SessionState)
 
+	// Set when a TCP password is configured for communications with this peer
+	"tcp-password-enabled"?: bool @go(TCPPasswordEnabled)
+
 	// BGP peer connection uptime in nano seconds.
 	"uptime-nanoseconds"?: int64 @go(UptimeNanoseconds)
 }

cue.mod/gen/github.com/cilium/cilium/api/v1/models/bgp_route_policy_go_gen.cue

@@ -0,0 +1,29 @@
+// Code generated by cue get go. DO NOT EDIT.
+
+//cue:generate cue get go github.com/cilium/cilium/api/v1/models
+
+package models
+
+// BgpRoutePolicy Single BGP route policy retrieved from the underlying router
+//
+// swagger:model BgpRoutePolicy
+#BgpRoutePolicy: {
+	// Name of the route policy
+	name?: string @go(Name)
+
+	// Autonomous System Number (ASN) identifying a BGP virtual router instance
+	"router-asn"?: int64 @go(RouterAsn)
+
+	// List of the route policy statements
+	statements: [...null | #BgpRoutePolicyStatement] @go(Statements,[]*BgpRoutePolicyStatement)
+
+	// Type of the route policy
+	// Enum: [export import]
+	type?: string @go(Type)
+}
+
+// BgpRoutePolicyTypeExport captures enum value "export"
+#BgpRoutePolicyTypeExport: "export"
+
+// BgpRoutePolicyTypeImport captures enum value "import"
+#BgpRoutePolicyTypeImport: "import"

cue.mod/gen/github.com/cilium/cilium/api/v1/models/bgp_route_policy_prefix_match_go_gen.cue

@@ -0,0 +1,19 @@
+// Code generated by cue get go. DO NOT EDIT.
+
+//cue:generate cue get go github.com/cilium/cilium/api/v1/models
+
+package models
+
+// BgpRoutePolicyPrefixMatch Matches a CIDR prefix in a BGP route policy
+//
+// swagger:model BgpRoutePolicyPrefixMatch
+#BgpRoutePolicyPrefixMatch: {
+	// CIDR prefix to match with
+	cidr?: string @go(Cidr)
+
+	// Maximal prefix length that will match if it falls under CIDR
+	"prefix-len-max"?: int64 @go(PrefixLenMax)
+
+	// Minimal prefix length that will match if it falls under CIDR
+	"prefix-len-min"?: int64 @go(PrefixLenMin)
+}

cue.mod/gen/github.com/cilium/cilium/api/v1/models/bgp_route_policy_statement_go_gen.cue

@@ -0,0 +1,38 @@
+// Code generated by cue get go. DO NOT EDIT.
+
+//cue:generate cue get go github.com/cilium/cilium/api/v1/models
+
+package models
+
+// BgpRoutePolicyStatement Single BGP route policy statement
+//
+// swagger:model BgpRoutePolicyStatement
+#BgpRoutePolicyStatement: {
+	// List of BGP standard community values to be added to the matched route
+	"add-communities": [...string] @go(AddCommunities,[]string)
+
+	// List of BGP large community values to be added to the matched route
+	"add-large-communities": [...string] @go(AddLargeCommunities,[]string)
+
+	// Matches any of the provided BGP neighbor IP addresses. If empty matches all neighbors.
+	"match-neighbors": [...string] @go(MatchNeighbors,[]string)
+
+	// Matches any of the provided prefixes. If empty matches all prefixes.
+	"match-prefixes": [...null | #BgpRoutePolicyPrefixMatch] @go(MatchPrefixes,[]*BgpRoutePolicyPrefixMatch)
+
+	// RIB processing action taken on the matched route
+	// Enum: [none accept reject]
+	"route-action"?: string @go(RouteAction)
+
+	// BGP local preference value to be set on the matched route
+	"set-local-preference"?: int64 @go(SetLocalPreference)
+}
+
+// BgpRoutePolicyStatementRouteActionNone captures enum value "none"
+#BgpRoutePolicyStatementRouteActionNone: "none"
+
+// BgpRoutePolicyStatementRouteActionAccept captures enum value "accept"
+#BgpRoutePolicyStatementRouteActionAccept: "accept"
+
+// BgpRoutePolicyStatementRouteActionReject captures enum value "reject"
+#BgpRoutePolicyStatementRouteActionReject: "reject"

cue.mod/gen/github.com/cilium/cilium/api/v1/models/daemon_configuration_status_go_gen.cue

@@ -37,9 +37,15 @@ package models
 	// Configured compatibility mode for --egress-multi-home-ip-rule-compat
 	"egress-multi-home-ip-rule-compat"?: bool @go(EgressMultiHomeIPRuleCompat)
 
+	// Enable route MTU for pod netns when CNI chaining is used
+	enableRouteMTUForCNIChaining?: bool @go(EnableRouteMTUForCNIChaining)
+
 	// Immutable configuration (read-only)
 	immutable?: #ConfigurationMap @go(Immutable)
 
+	// Comma-separated list of IP ports should be reserved in the workload network namespace
+	ipLocalReservedPorts?: string @go(IPLocalReservedPorts)
+
 	// Configured IPAM mode
 	"ipam-mode"?: string @go(IpamMode)