| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: flannel-k8s-yaml | Distribution: openSUSE Tumbleweed |
| Version: 0.28.7 | Vendor: openSUSE |
| Release: 1.2 | Build date: Thu Jul 9 07:30:40 2026 |
| Group: System/Management | Build host: reproducible |
| Size: 4422 | Source RPM: flannel-0.28.7-1.2.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/flannel-io/flannel | |
| Summary: Kubernetes yaml file to run flannel container | |
This package contains the yaml file requried to download and run the flannel container in a kubernetes cluster. flannel is a virtual network that gives a subnet to each host for use with container runtimes. Platforms like Google's Kubernetes assume that each container (pod) has a unique, routable IP address inside the cluster. The advantage of this model is that it reduces the complexity of doing port mapping.
Apache-2.0
* Thu Jul 09 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 0.28.7:
* prepare for release v0.28.7 (#2485)
* fix: use install-conf in chart (#2484)
* fix: use semver tag type in Docker meta to support release events (#2483)
* build(deps): bump github/codeql-action/upload-sarif (#2480)
* build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 (#2473), fix for CVE-2026-33814 (bsc#1265780) and CVE-2026-39821 (bsc#1266620)
* build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 (#2479)
* build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#2478)
* build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 (#2476)
* build(deps): bump the tencent group with 2 updates (#2475)
* build(deps): bump the etcd group with 4 updates (#2474)
* fix: skip invalid CIDRs in subnet file readers (#2454)
* subnet/etcd: recover subnet watch from compaction (#2471)
* Bump the tencent group across 1 directory with 2 updates (#2461)
* Bump actions/attest-build-provenance from 4.1.0 to 4.1.1 (#2467)
* Bump actions/setup-go from 6.4.0 to 6.5.0 (#2468)
* feat: new install_conf cmd to install flannel's config file (#2466)
* Bump the other-go-modules group with 2 updates (#2464)
* Bump actions/checkout from 6.0.2 to 7.0.0 (#2465)
* Bump github/codeql-action from 4.36.0 to 4.36.2 (#2463)
* Mon Jun 08 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 0.28.5:
* Bump docker/login-action from 4.1.0 to 4.2.0
* Bump docker/setup-qemu-action from 4.0.0 to 4.1.0
* Bump docker/metadata-action from 6.0.0 to 6.1.0
* Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common (#2456)
* Bump the etcd group with 4 updates (#2455), includes fix for CVE-2026-44283 (bsc#1265337)
* Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common (#2448)
* Bump golang.org/x/sys in the other-go-modules group (#2449)
* Bump docker/build-push-action from 7.1.0 to 7.2.0 (#2451)
* Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#2453)
* Bump github/codeql-action from 4.35.3 to 4.36.0 (#2450)
* Update iptables-wrapper to v3 to fix zombie child process
* Bump docker/setup-buildx-action from 4.0.0 to 4.1.0
* Bump github/codeql-action from 4.35.2 to 4.35.3 (#2441)
* Bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 (#2436)
* fix(vxlan): drop slices, use scalar IPs for v4/v6 (review feedback)
* fix(vxlan): guard ifaceAddrsV6[0] on IPv4-only setups
* Bump the tencent group with 2 updates (#2430)
* BUmp k8s deps to v0.33.11 (#2432)
* Bump github/codeql-action from 4.35.1 to 4.35.2 (#2431)
* Fail early in e2e tests and remove unnecessary step (#2429)
* Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#2421)
* Thu Apr 16 2026 Priyanka Saggu <priyanka.saggu@suse.com>
- Update .spec file to bump go version build requirements:
* `BuildRequires: golang(API) >= 1.25`
* ref: https://github.com/flannel-io/flannel/compare/v0.28.3...v0.28.4
- Update to version 0.28.4:
* fix go version (don't set patch version) (#2428)
* Bump flannel-cni-plugin to v1.9.1-flannel1 (#2427)
* Bump the other-go-modules group across 1 directory with 3 updates (#2425)
* Bump the tencent group with 2 updates (#2417)
* Bump the etcd group with 4 updates (#2398), includes fix for CVE-2026-33413 (bsc#1260853) and CVE-2026-33343 (bsc#1260847)
* Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 (#2420)
* Bump go to 1.25 (#2424)
* Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0
* Bump docker/build-push-action from 7.0.0 to 7.1.0
* Bump docker/login-action from 4.0.0 to 4.1.0
* Verify the kubectl sha256sum
* Secure makefile (#2414)
* Improve the security of Dockerfile
* Bump github/codeql-action from 4.34.1 to 4.35.1 (#2409)
* Bump actions/deploy-pages from 4.0.5 to 5.0.0
* lease: only print BackendData when json.Marshal succeeds
* vxlan: delete v6 direct route with correct Route struct
* fix: honor --stderrthreshold flag when --logtostderr is enabled
* Bump actions/configure-pages from 5.0.0 to 6.0.0
* Bump actions/setup-go from 6.3.0 to 6.4.0
* don't use unquoted shell vars in extensions backend example
* Don't use shell invocations in extensions backend.
* Bump google.golang.org/grpc from 1.71.1 to 1.79.3
* Bump ossf/scorecard-action from 2.4.1 to 2.4.3
* Bump actions/upload-artifact from 4.6.1 to 7.0.0
* Bump docker/metadata-action from 5.10.0 to 6.0.0
* Bump actions/checkout from 4.2.2 to 6.0.2
* Bump docker/setup-buildx-action from 3.12.0 to 4.0.0
* Bump aquasecurity/trivy-action from 0.33.1 to 0.35.0
* Bump docker/setup-qemu-action from 3.7.0 to 4.0.0
* [StepSecurity] Apply security best practices
* Bump actions/attest-build-provenance from 3.2.0 to 4.1.0
* Fix logic in AddBlackholeV4Route and AddBlackholeV6Route to correctly check for existing routes
* Added check for nftables before checking br_netfilter module
* Bump golang.org/x/crypto from 0.36.0 to 0.45.0
* Bump k8s deps to v0.32.10
* Bump golang-ci-lint to v2.7.2
* Bump golangci/golangci-lint-action from 6.1.1 to 9.2.0
* Additional check on podCIDR
* ip: improve primary address selection to account for address flags
* Added TAG to fix bin version
* Thu Dec 11 2025 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 0.27.4:
* Removed PodSecurityPolicy manifest creation
* Fix interface IP address detection in dual-stack mode
* Fix: recreate VXLAN device (flannel.*) when external interface is deleted and re-added (#2247)
* golangci-lint: fix iptables_test
* firewall: add option to disable fully-random mode for MASQUERADE
* Bump the tencent group with 2 updates
* Bump github.com/coreos/go-systemd/v22 in the other-go-modules group
* Bump golang.org/x/sys in the other-go-modules group
* Bump the etcd group with 4 updates
* Bump etcd version in tests
* Stop using deprecated cache.NewIndexerInformer function
* Bump k8s test version
* Bump k8s deps to v0.31.11
* Bump the other-go-modules group with 2 updates
* helm chart: add nodeSelector in the helm chart
* Updated Alpine image
* Added flag to enable blackhole route locally for Canal
* Bump golang.org/x/sync in the other-go-modules group
* make enqueueLeaseEvent context aware and prevent dangling goroutines when context is done - fixed a typo/build error
* make retry interval exp backoff
* cont_when_cache_not_ready configurable with fail by default * use semaphore as opposed to raw signal channel
* Update pkg/subnet/kube/kube.go
* Fix deadlock in startup for large clusters
* enable setting resources in helm chart
* capture close() err on subnet file save (#2248)
* doc: document flag --iptables-forward-rules
* Bump netlink to v1.3.1
* fix: clean-up rules when starting instead of shutting down
* Bump k8s and sles test version
* Add modprobe br_netfilter step in test workflows
* test: don't run the workflows on "push" events
* Update to the latest flannel cni-plugins v1.7.1
* Move to go 1.23.6
* Mon Apr 14 2025 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 0.26.6:
* Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
* Bump the etcd group with 4 updates
* Bump the tencent group with 2 updates
* Organize dependabot PR's more clearly by using groups
* Use peer's wireguard port, not our own
* Bump to codeql v3
* Pin all GHA to a specific SHA commit
* Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (fix CVE-2025-30204, bsc#1240516)
* Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
* Bump go.etcd.io/etcd/tests/v3 from 3.5.18 to 3.5.20
* add missing GH_TOKEN env var in release.yaml
* Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
* Upload chart archive with the release files
* make deps
* refactor release.yaml to reduce use of potentially vulnerable GH Actions
* Bump golang.org/x/net from 0.34.0 to 0.36.0
* enable setting CNI directory paths in helm chart
* Added cni file configuration on the chart
* Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
* Bump github.com/avast/retry-go/v4 from 4.6.0 to 4.6.1
* Fri Feb 07 2025 Priyanka Saggu <priyanka.saggu@suse.com>
- add `go-modules` for automated creation of go vendored modules tarball
- bump go version: `BuildRequires: golang(API) >= 1.23`
- delete unused `kube-flannel.yaml` source in the spec file, it is directly soured from the flannel source tar ball
* Fri Feb 07 2025 Priyanka Saggu <priyanka.saggu@suse.com>
- Update to version 0.26.4:
* Moved to github container registry
* Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
* Bump go.etcd.io/etcd/tests/v3 from 3.5.17 to 3.5.18
* fix: Fix high CPU usage when losing etcd connection and try to re-establish connection with exponential backoff
* Bump github.com/containernetworking/plugins from 1.6.1 to 1.6.2
* Bump alpine from 20240923 to 20250108 in /images
* Bump golang.org/x/net from 0.31.0 to 0.33.0
* Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
* Bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0
* feat: add bool to control CNI config installation using Helm
* fix: add missing MY_NODE_NAME env in chart
* Bump k8s deps to 0.29.12
* Don't panic upon shutdown when running in standalone mode
* Bump golang.org/x/crypto from 0.29.0 to 0.31.0
* Bump alpine from 20240807 to 20240923 in /images
* Bump github.com/containernetworking/plugins from 1.6.0 to 1.6.1
* Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc
* Bump github.com/vishvananda/netns from 0.0.4 to 0.0.5
* Use the standard context library
* Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common
* Updated flannel cni image to 1.6.0
* Updated CNI plugins version on the README
* Bump sigs.k8s.io/knftables from 0.0.17 to 0.0.18
* Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1
* Bump github.com/Microsoft/hcsshim from 0.12.8 to 0.12.9
* Added check to not check br_filter in case of windows
* Bumo golangci-lint to latest version
* Bump to go 1.23
* Added checks for br_netfilter module
* Try not to cleanup multiple peers behind same PublicIP
* fix trivy check
* check that the lease includes an IP address of the requested family before configuring the flannel interface
* Fixed IPv6 chosen in case of public-ipv6 configured
* add timeout to e2e test pipelines
* Update k8s version ine2e tests to v1.29.8
* Update netlink to v1.3.0
* Fixed values file on flannel chart
* Bump k8s.io/klog/v2 from 2.120.1 to 2.130.1
* Updated Flannel chart with Netpol containter and removed clustercidr
* Fix bug in hostgw-windows
* Fix bug in the logic polling the interface
* Added node-public-ip annotation
* Try several times to contact kube-api before failing
* Fixed IPv6 0 initialization
* wireguard backend: avoid error message if route already exists
* Bump github.com/avast/retry-go/v4 from 4.5.1 to 4.6.0
* use wait.PollUntilContextTimeout instead of deprecated wait.Poll
* troubleshooting.md: add `ethtool -K flannel.1 tx-checksum-ip-generic off` for NAT
* Added configuration for pulic-ip through node annotation
* extension/vxlan: remove arp commands from vxlan examples
* Refactor TrafficManager windows files to clarify logs
* Add persistent-mac option to v6 too
* fix comparison with previous networks in SetupAndEnsureMasqRules
* show content of stdout and stderr when running iptables-restore returns an error
* Add extra check before contacting kube-api
* remove unimplemented error in windows trafficmngr
* remove --dirty flags in git describe
* Added leaseAttr string method with logs on VxLan
* remove multiClusterCidr related-code.
* Implement nftables masquerading for flannel
* fix: ipv6 iptables rules were created even when IPv6 was disabled
* Add tolerations to the flannel chart
* Added additional check for n.spec.podCIDRs
* Remove net-tools since it's an old package that we are not using
* fix iptables_windows.go
* Clean-up Makefile and use docker buildx locally
* Use manual test to ensure iptables-* binaries are present
* Bump github.com/containerd/containerd from 1.6.23 to 1.6.26
* Bump github.com/joho/godotenv
* SubnetManager should use the main context
* Simplify TrafficManager interface
* refactor iptables package to prepare for nftables-based implementation
- flannel v0.26.4, includes `golang.org/x/net/http2` at v0.34.0, which fixes bsc#1236522 (CVE-2023-45288)
* Fri Apr 19 2024 Jeff Mahoney <jeffm@suse.com>
- Remove dependency on net-tools-deprecated. It's not actually used.
* Wed Jan 31 2024 Priyanka Saggu <priyanka.saggu@suse.com>
- sync `kube-flannel.yaml` manifest with upstream release, v0.24.2 (bsc#1218694)
- refactor, clean spec file. Include following change:
* bump go version build requirements: `BuildRequires: golang(API) >= 1.20`
* include go modules dependencies as vendor tar - vendor.tar.gz, update following %prep, %build, %install sections accordingly
* Wed Jan 31 2024 priyanka.saggu@suse.com
- Update to version 0.24.2:
* Prepare for v0.24.2 release
* Increase the time out for interface checking in windows
* Prepare for v0.24.1 release
* Provide support to select the interface in Windows
* Improve the log from powershell
* Wait all the jobs to finish before deploy the github-page
* remove remaining references to mips64le
* add multi-arch dockerfile
* add missing riscv64 in docker manifest create step
* prepare for v0.24.0 release
* Bump golang.org/x/crypto from 0.15.0 to 0.17.0
* Add the VNI to the error message in Windows
* chart: add possibility for defining image pull secrets in daemonset
* Remove multiclustercidr logic from code
* Update opentelemetry dependencies
* Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
* Add riscv64 arch in GH actions
* vxlan vni should not be type uint16
* Quote wireguard psk in helm chart
* add riscv64 support
/usr/share/k8s-yaml /usr/share/k8s-yaml/flannel /usr/share/k8s-yaml/flannel/kube-flannel.yaml
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Aug 5 22:19:50 2026