From c6ceffd4411bd603b6c07ec625f62b669a84d3bb Mon Sep 17 00:00:00 2001 From: "k8s-on-aws-manager-app[bot]" <181735053+k8s-on-aws-manager-app[bot]@users.noreply.github.com> Date: Wed, 5 Aug 2026 10:31:46 +0000 Subject: [PATCH 1/8] nftables: Update to version main-103 Update container-registry.zalando.net/gwproxy/nftables to version main-103 --- cluster/manifests/02-admission-control/config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cluster/manifests/02-admission-control/config.yaml b/cluster/manifests/02-admission-control/config.yaml index 17c4a9959f..2a3a04de60 100644 --- a/cluster/manifests/02-admission-control/config.yaml +++ b/cluster/manifests/02-admission-control/config.yaml @@ -234,5 +234,5 @@ data: pod.graceful-termination.enable: "{{ .Cluster.ConfigItems.teapot_admission_controller_graceful_termination }}" {{ if eq .Cluster.ConfigItems.sandbox_controller_enabled "true" }} pod.sandbox-egress.skipper-image: "container-registry.zalando.net/teapot/skipper-internal:v0.27.43-1495" - pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-93" + pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-103" {{ end }} From ab22b039828ca357fae50121a1b62d6205f83a42 Mon Sep 17 00:00:00 2001 From: "k8s-on-aws-manager-app[bot]" <181735053+k8s-on-aws-manager-app[bot]@users.noreply.github.com> Date: Thu, 6 Aug 2026 05:31:31 +0000 Subject: [PATCH 2/8] nftables: Update to version main-104 Update container-registry.zalando.net/gwproxy/nftables to version main-104 --- cluster/manifests/02-admission-control/config.yaml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/cluster/manifests/02-admission-control/config.yaml b/cluster/manifests/02-admission-control/config.yaml index 2a3a04de60..24e3abd960 100644 --- a/cluster/manifests/02-admission-control/config.yaml +++ b/cluster/manifests/02-admission-control/config.yaml @@ -94,9 +94,7 @@ data: pod.image-check.namespaces: "^(image-policy-test-enabled-.*|kube-system|visibility)$" # Always allow certain container images regardless of namespace, defaults to none if not configured - pod.image-check.ignored-images: "^(k8s.gcr.io/pause|906394416424.dkr.ecr.{{.Cluster.Region}}.amazonaws.com/aws-for-fluent-bit):.+$" -{{- else }} - pod.image-check.ignored-images: "^906394416424.dkr.ecr.{{.Cluster.Region}}.amazonaws.com/aws-for-fluent-bit:.+$" + pod.image-check.ignored-images: "^k8s.gcr.io/pause:.+$" {{- end }} # This setting enables and disables replacement of vanity images with ECR images during pod admission (during create and update) @@ -234,5 +232,5 @@ data: pod.graceful-termination.enable: "{{ .Cluster.ConfigItems.teapot_admission_controller_graceful_termination }}" {{ if eq .Cluster.ConfigItems.sandbox_controller_enabled "true" }} pod.sandbox-egress.skipper-image: "container-registry.zalando.net/teapot/skipper-internal:v0.27.43-1495" - pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-103" + pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-104" {{ end }} From 45726a28b0c6879dd27078a4c568a3ddba3c6faa Mon Sep 17 00:00:00 2001 From: "k8s-on-aws-manager-app[bot]" <181735053+k8s-on-aws-manager-app[bot]@users.noreply.github.com> Date: Fri, 7 Aug 2026 05:31:34 +0000 Subject: [PATCH 3/8] nftables: Update to version main-105 Update container-registry.zalando.net/gwproxy/nftables to version main-105 --- cluster/manifests/02-admission-control/config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cluster/manifests/02-admission-control/config.yaml b/cluster/manifests/02-admission-control/config.yaml index 24e3abd960..337a016b84 100644 --- a/cluster/manifests/02-admission-control/config.yaml +++ b/cluster/manifests/02-admission-control/config.yaml @@ -232,5 +232,5 @@ data: pod.graceful-termination.enable: "{{ .Cluster.ConfigItems.teapot_admission_controller_graceful_termination }}" {{ if eq .Cluster.ConfigItems.sandbox_controller_enabled "true" }} pod.sandbox-egress.skipper-image: "container-registry.zalando.net/teapot/skipper-internal:v0.27.43-1495" - pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-104" + pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-105" {{ end }} From 948c21094e20c5102bf451430ac432decd31099d Mon Sep 17 00:00:00 2001 From: "k8s-on-aws-manager-app[bot]" <181735053+k8s-on-aws-manager-app[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 05:31:33 +0000 Subject: [PATCH 4/8] nftables: Update to version main-106 Update container-registry.zalando.net/gwproxy/nftables to version main-106 --- cluster/manifests/02-admission-control/config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cluster/manifests/02-admission-control/config.yaml b/cluster/manifests/02-admission-control/config.yaml index 337a016b84..80b00e15d0 100644 --- a/cluster/manifests/02-admission-control/config.yaml +++ b/cluster/manifests/02-admission-control/config.yaml @@ -232,5 +232,5 @@ data: pod.graceful-termination.enable: "{{ .Cluster.ConfigItems.teapot_admission_controller_graceful_termination }}" {{ if eq .Cluster.ConfigItems.sandbox_controller_enabled "true" }} pod.sandbox-egress.skipper-image: "container-registry.zalando.net/teapot/skipper-internal:v0.27.43-1495" - pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-105" + pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-106" {{ end }} From f39fc3f1bfc7e994b0754e5164b631a988fd0aa2 Mon Sep 17 00:00:00 2001 From: "k8s-on-aws-manager-app[bot]" <181735053+k8s-on-aws-manager-app[bot]@users.noreply.github.com> Date: Tue, 11 Aug 2026 05:31:44 +0000 Subject: [PATCH 5/8] nftables: Update to version main-107 Update container-registry.zalando.net/gwproxy/nftables to version main-107 --- cluster/manifests/02-admission-control/config.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cluster/manifests/02-admission-control/config.yaml b/cluster/manifests/02-admission-control/config.yaml index 80b00e15d0..e72bc37373 100644 --- a/cluster/manifests/02-admission-control/config.yaml +++ b/cluster/manifests/02-admission-control/config.yaml @@ -32,7 +32,7 @@ data: pod.service-account-iam.enable: "true" pod.service-account-iam.base-aws-account-id: "{{ .Cluster.InfrastructureAccountID }}" {{- if eq .Cluster.ConfigItems.teapot_admission_controller_inject_aws_waiter "true" }} - pod.aws-waiter.image: "926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/automata/aws-credentials-waiter:master-314" + pod.aws-waiter.image: "926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/automata/aws-credentials-waiter:master-315" {{- end }} pod.env-inject.enable: "{{ .Cluster.ConfigItems.teapot_admission_controller_inject_environment_variables }}" pod.env-inject.variable._PLATFORM_ACCOUNT: "{{ .Cluster.Alias }}" @@ -232,5 +232,5 @@ data: pod.graceful-termination.enable: "{{ .Cluster.ConfigItems.teapot_admission_controller_graceful_termination }}" {{ if eq .Cluster.ConfigItems.sandbox_controller_enabled "true" }} pod.sandbox-egress.skipper-image: "container-registry.zalando.net/teapot/skipper-internal:v0.27.43-1495" - pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-106" + pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-107" {{ end }} From 7184ef7beb560d6405135b4ce93591f4b994a16a Mon Sep 17 00:00:00 2001 From: "k8s-on-aws-manager-app[bot]" <181735053+k8s-on-aws-manager-app[bot]@users.noreply.github.com> Date: Wed, 12 Aug 2026 05:31:35 +0000 Subject: [PATCH 6/8] nftables: Update to version main-108 Update container-registry.zalando.net/gwproxy/nftables to version main-108 --- cluster/manifests/02-admission-control/config.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cluster/manifests/02-admission-control/config.yaml b/cluster/manifests/02-admission-control/config.yaml index e72bc37373..e971864001 100644 --- a/cluster/manifests/02-admission-control/config.yaml +++ b/cluster/manifests/02-admission-control/config.yaml @@ -231,6 +231,6 @@ data: pod.graceful-termination.enable: "{{ .Cluster.ConfigItems.teapot_admission_controller_graceful_termination }}" {{ if eq .Cluster.ConfigItems.sandbox_controller_enabled "true" }} - pod.sandbox-egress.skipper-image: "container-registry.zalando.net/teapot/skipper-internal:v0.27.43-1495" - pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-107" + pod.sandbox-egress.skipper-image: "container-registry.zalando.net/teapot/skipper-internal:v0.27.49-1501" + pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-108" {{ end }} From d26b4da04b82d8dc4871c885a8a33e9028035dcf Mon Sep 17 00:00:00 2001 From: "k8s-on-aws-manager-app[bot]" <181735053+k8s-on-aws-manager-app[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 05:31:37 +0000 Subject: [PATCH 7/8] nftables: Update to version main-109 Update container-registry.zalando.net/gwproxy/nftables to version main-109 --- cluster/manifests/02-admission-control/config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cluster/manifests/02-admission-control/config.yaml b/cluster/manifests/02-admission-control/config.yaml index e971864001..2aefad74d4 100644 --- a/cluster/manifests/02-admission-control/config.yaml +++ b/cluster/manifests/02-admission-control/config.yaml @@ -232,5 +232,5 @@ data: pod.graceful-termination.enable: "{{ .Cluster.ConfigItems.teapot_admission_controller_graceful_termination }}" {{ if eq .Cluster.ConfigItems.sandbox_controller_enabled "true" }} pod.sandbox-egress.skipper-image: "container-registry.zalando.net/teapot/skipper-internal:v0.27.49-1501" - pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-108" + pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-109" {{ end }} From 98a0d27104d6011ec12813ba007d93a6e95d2bb4 Mon Sep 17 00:00:00 2001 From: "k8s-on-aws-manager-app[bot]" <181735053+k8s-on-aws-manager-app[bot]@users.noreply.github.com> Date: Fri, 14 Aug 2026 05:31:41 +0000 Subject: [PATCH 8/8] nftables: Update to version main-110 Update container-registry.zalando.net/gwproxy/nftables to version main-110 --- cluster/manifests/02-admission-control/config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cluster/manifests/02-admission-control/config.yaml b/cluster/manifests/02-admission-control/config.yaml index 2aefad74d4..4c5386d203 100644 --- a/cluster/manifests/02-admission-control/config.yaml +++ b/cluster/manifests/02-admission-control/config.yaml @@ -232,5 +232,5 @@ data: pod.graceful-termination.enable: "{{ .Cluster.ConfigItems.teapot_admission_controller_graceful_termination }}" {{ if eq .Cluster.ConfigItems.sandbox_controller_enabled "true" }} pod.sandbox-egress.skipper-image: "container-registry.zalando.net/teapot/skipper-internal:v0.27.49-1501" - pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-109" + pod.sandbox-egress.nftables-image: "container-registry.zalando.net/gwproxy/nftables:main-110" {{ end }}