update to v1.11.2-rc.3

Signed-off-by: denis-tingaikin <[email protected]>

apps/admission-webhook-k8s/admission-webhook.yaml

@@ -17,7 +17,7 @@ spec:
       serviceAccount: admission-webhook-sa
       containers:
         - name: admission-webhook-k8s
-          image: ghcr.io/networkservicemesh/cmd-admission-webhook-k8s:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-admission-webhook-k8s:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           readinessProbe:
             httpGet:
@@ -40,9 +40,9 @@ spec:
             - name: NSM_ANNOTATION
               value: networkservicemesh.io
             - name: NSM_CONTAINER_IMAGES
-              value: ghcr.io/networkservicemesh/cmd-nsc:v1.11.2-rc.2
+              value: ghcr.io/networkservicemesh/cmd-nsc:v1.11.2-rc.3
             - name: NSM_INIT_CONTAINER_IMAGES
-              value: ghcr.io/networkservicemesh/cmd-nsc-init:v1.11.2-rc.2
+              value: ghcr.io/networkservicemesh/cmd-nsc-init:v1.11.2-rc.3
             - name: NSM_LABELS
               value: spiffe.io/spiffe-id:true
             - name: NSM_ENVS

apps/cluster-info/cluster-info.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       serviceAccountName: cluster-info-sa
       containers:
-        - image: ghcr.io/networkservicemesh/cmd-cluster-info-k8s:v1.11.2-rc.2
+        - image: ghcr.io/networkservicemesh/cmd-cluster-info-k8s:v1.11.2-rc.3
           env:
             - name: NSM_NAMESPACE
               valueFrom:

apps/csi-driver/csi-driver.yaml

@@ -39,7 +39,7 @@ spec:
       containers:
         # This is the container which runs the NSM CSI driver.
         - name: nsm-csi-driver
-          image: ghcr.io/networkservicemesh/cmd-csi-driver:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-csi-driver:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           env:
             # The CSI driver needs a unique node ID. The node name can be

apps/forwarder-ovs/forwarder.yaml

@@ -18,7 +18,7 @@ spec:
       hostPID: true
       hostNetwork: true
       containers:
-        - image: ghcr.io/networkservicemesh/cmd-forwarder-ovs:v1.11.2-rc.2
+        - image: ghcr.io/networkservicemesh/cmd-forwarder-ovs:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           name: forwarder-ovs
           securityContext:

apps/forwarder-sriov/forwarder.yaml

@@ -18,7 +18,7 @@ spec:
       hostNetwork: true
       dnsPolicy: ClusterFirstWithHostNet
       containers:
-        - image: ghcr.io/networkservicemesh/cmd-forwarder-sriov:v1.11.2-rc.2
+        - image: ghcr.io/networkservicemesh/cmd-forwarder-sriov:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           name: forwarder-sriov
           securityContext:

apps/forwarder-vpp/forwarder.yaml

@@ -19,7 +19,7 @@ spec:
       hostNetwork: true
       dnsPolicy: ClusterFirstWithHostNet
       containers:
-        - image: ghcr.io/networkservicemesh/cmd-forwarder-vpp:v1.11.2-rc.2
+        - image: ghcr.io/networkservicemesh/cmd-forwarder-vpp:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           name: forwarder-vpp
           securityContext:

apps/nsc-kernel/nsc.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: nsc
-          image: ghcr.io/networkservicemesh/cmd-nsc:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nsc:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET

apps/nsc-memif/nsc.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: nsc
-          image: ghcr.io/networkservicemesh/cmd-nsc-vpp:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nsc-vpp:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET

apps/nsc-simple-docker/docker-compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
   nsc-simple-docker:
-    image: ghcr.io/networkservicemesh/cmd-nsc-simple-docker:v1.11.2-rc.2
+    image: ghcr.io/networkservicemesh/cmd-nsc-simple-docker:v1.11.2-rc.3
     privileged: true
     container_name: nsc-simple-docker
     restart: always

apps/nsc-vfio/nsc.yaml

@@ -26,7 +26,7 @@ spec:
               mountPath: /dev/vfio
 
         - name: nsc
-          image: ghcr.io/networkservicemesh/cmd-nsc:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nsc:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET

apps/nse-firewall-vpp/nse.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: nse
-          image: ghcr.io/networkservicemesh/cmd-nse-firewall-vpp:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nse-firewall-vpp:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET

apps/nse-kernel/nse.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: nse
-          image: ghcr.io/networkservicemesh/cmd-nse-icmp-responder:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nse-icmp-responder:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET

apps/nse-memif/nse.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: nse
-          image: ghcr.io/networkservicemesh/cmd-nse-icmp-responder-vpp:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nse-icmp-responder-vpp:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET

apps/nse-noop/nse.yaml

@@ -18,7 +18,7 @@ spec:
       hostNetwork: true
       containers:
         - name: nse
-          image: ghcr.io/networkservicemesh/cmd-nse-vfio:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nse-vfio:v1.11.2-rc.3
           env:
             - name: SPIFFE_ENDPOINT_SOCKET
               value: unix:///run/spire/sockets/agent.sock

apps/nse-remote-vlan/nse-remote-vlan.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: nse
-          image: ghcr.io/networkservicemesh/cmd-nse-remote-vlan:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nse-remote-vlan:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 5003

apps/nse-simple-vl3-docker/docker-compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
   nse-simple-vl3-docker:
-    image: ghcr.io/networkservicemesh/cmd-nse-simple-vl3-docker:v1.11.2-rc.2
+    image: ghcr.io/networkservicemesh/cmd-nse-simple-vl3-docker:v1.11.2-rc.3
     privileged: true
     container_name: nse-simple-vl3-docker
     restart: always

apps/nse-supplier-k8s/supplier.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: nse-supplier
-          image: ghcr.io/networkservicemesh/cmd-nse-supplier-k8s:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nse-supplier-k8s:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET

apps/nse-vfio/nse.yaml

@@ -32,7 +32,7 @@ spec:
               mountPath: /dev/vfio
 
         - name: nse
-          image: ghcr.io/networkservicemesh/cmd-nse-vfio:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nse-vfio:v1.11.2-rc.3
           env:
             - name: SPIFFE_ENDPOINT_SOCKET
               value: unix:///run/spire/sockets/agent.sock

apps/nse-vl3-vpp/nse.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: nse
-          image: ghcr.io/networkservicemesh/cmd-nse-vl3-vpp:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nse-vl3-vpp:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET

apps/nse-vlan-vpp/nse.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: nse
-          image: ghcr.io/networkservicemesh/cmd-nse-vlan-vpp:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nse-vlan-vpp:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           securityContext:
             privileged: true

apps/nsmgr-proxy/nsmgr-proxy.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       serviceAccount: nsmgr-proxy-sa
       containers:
-        - image: ghcr.io/networkservicemesh/cmd-nsmgr-proxy:v1.11.2-rc.2
+        - image: ghcr.io/networkservicemesh/cmd-nsmgr-proxy:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           name: nsmgr-proxy
           ports:
@@ -56,7 +56,7 @@ spec:
             limits:
               memory: 100Mi
               cpu: 400m
-        - image: ghcr.io/networkservicemesh/cmd-map-ip-k8s:v1.11.2-rc.2
+        - image: ghcr.io/networkservicemesh/cmd-map-ip-k8s:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           name: map-ip-k8s
           env:

apps/nsmgr/nsmgr.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       serviceAccount: nsmgr-sa
       containers:
-        - image: ghcr.io/networkservicemesh/cmd-nsmgr:v1.11.2-rc.2
+        - image: ghcr.io/networkservicemesh/cmd-nsmgr:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           name: nsmgr
           ports:
@@ -81,7 +81,7 @@ spec:
               command: ["/bin/grpc-health-probe", "-spiffe", "-addr=unix:///var/lib/networkservicemesh/nsm.io.sock"]
             failureThreshold: 25
             periodSeconds: 5
-        - image: ghcr.io/networkservicemesh/cmd-exclude-prefixes-k8s:v1.11.2-rc.2
+        - image: ghcr.io/networkservicemesh/cmd-exclude-prefixes-k8s:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           name: exclude-prefixes
           env:

apps/registry-k8s/registry-k8s.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       serviceAccountName: registry-k8s-sa
       containers:
-        - image: ghcr.io/networkservicemesh/cmd-registry-k8s:v1.11.2-rc.2
+        - image: ghcr.io/networkservicemesh/cmd-registry-k8s:v1.11.2-rc.3
           env:
             - name: SPIFFE_ENDPOINT_SOCKET
               value: unix:///run/spire/sockets/agent.sock

apps/registry-memory/registry-memory.yaml

@@ -16,7 +16,7 @@ spec:
         "spiffe.io/spiffe-id": "true"
     spec:
       containers:
-        - image: ghcr.io/networkservicemesh/cmd-registry-memory:v1.11.2-rc.2
+        - image: ghcr.io/networkservicemesh/cmd-registry-memory:v1.11.2-rc.3
           env:
             - name: SPIFFE_ENDPOINT_SOCKET
               value: unix:///run/spire/sockets/agent.sock

apps/registry-proxy-dns/registry-proxy-dns.yaml

@@ -16,7 +16,7 @@ spec:
         "spiffe.io/spiffe-id": "true"
     spec:
       containers:
-        - image: ghcr.io/networkservicemesh/cmd-registry-proxy-dns:v1.11.2-rc.2
+        - image: ghcr.io/networkservicemesh/cmd-registry-proxy-dns:v1.11.2-rc.3
           env:
             - name: SPIFFE_ENDPOINT_SOCKET
               value: unix:///run/spire/sockets/agent.sock

apps/vl3-ipam/vl3-ipam.yaml

@@ -16,7 +16,7 @@ spec:
         "spiffe.io/spiffe-id": "true"
     spec:
       containers:
-        - image: ghcr.io/networkservicemesh/cmd-ipam-vl3:v1.11.2-rc.2
+        - image: ghcr.io/networkservicemesh/cmd-ipam-vl3:v1.11.2-rc.3
           env:
             - name: SPIFFE_ENDPOINT_SOCKET
               value: unix:///run/spire/sockets/agent.sock

apps/vl3-lb/lb.yaml

@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
         - name: lb
-          image: ghcr.io/networkservicemesh/cmd-lb-vl3-vpp:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-lb-vl3-vpp:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET

examples/afxdp/README.md

@@ -34,7 +34,7 @@ If the packet belongs to the NSM interface it forwards it to the VPP, otherwise
 Apply NSM resources for basic tests:
 
 ```bash
-kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/afxdp?ref=v1.11.2-rc.2
+kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/afxdp?ref=v1.11.2-rc.3
 ```
 
 Wait for admission-webhook-k8s:

examples/basic/README.md

@@ -26,7 +26,7 @@ Contain basic setup for NSM that includes `nsmgr`, `forwarder-vpp`, `registry-k8
 Apply NSM resources for basic tests:
 
 ```bash
-kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/basic?ref=v1.11.2-rc.2
+kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/basic?ref=v1.11.2-rc.3
 ```
 
 Wait for admission-webhook-k8s:

examples/features/annotated-namespace/README.md

@@ -13,7 +13,7 @@ Make sure that you have completed steps from [basic](../../basic) or [memory](..
 
 Create test namespace and deploy NSE:
 ```bash
-kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/annotated-namespace?ref=v1.11.2-rc.2
+kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/annotated-namespace?ref=v1.11.2-rc.3
 ```
 
 Wait for NSE to be ready:
@@ -28,7 +28,7 @@ kubectl annotate ns ns-annotated-namespace networkservicemesh.io=kernel://annota
 
 Apply client patch:
 ```bash
-kubectl apply -f https://raw.githubusercontent.com/networkservicemesh/deployments-k8s/v1.11.2-rc.2/examples/features/annotated-namespace/client.yaml
+kubectl apply -f https://raw.githubusercontent.com/networkservicemesh/deployments-k8s/v1.11.2-rc.3/examples/features/annotated-namespace/client.yaml
 ```
 
 Wait for client to be ready:

examples/features/dns/README.md

@@ -11,7 +11,7 @@ Make sure that you have completed steps from [features](../)
 
 Deploy alpine and nse
 ```bash
-kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/dns?ref=v1.11.2-rc.2
+kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/dns?ref=v1.11.2-rc.3
 ```
 
 Wait for applications ready:

examples/features/dual-stack/Kernel2IP2Kernel_dual_stack/README.md

@@ -9,7 +9,7 @@ Forwarders are using the `wireguard` mechanism to connect with each other.
 
 Deploy NSC and NSE:
 ```bash
-kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/dual-stack/Kernel2IP2Kernel_dual_stack?ref=v1.11.2-rc.2
+kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/dual-stack/Kernel2IP2Kernel_dual_stack?ref=v1.11.2-rc.3
 ```
 
 Wait for applications ready:

examples/features/dual-stack/Kernel2Kernel_dual_stack/README.md

@@ -9,7 +9,7 @@ NSC and NSE are using the `kernel` mechanism to connect to its local forwarder.
 
 Deploy NSC and NSE:
 ```bash
-kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/dual-stack/Kernel2Kernel_dual_stack?ref=v1.11.2-rc.2
+kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/dual-stack/Kernel2Kernel_dual_stack?ref=v1.11.2-rc.3
 ```
 
 Wait for applications ready:

examples/features/exclude-prefixes-client/README.md

@@ -12,7 +12,7 @@ Make sure that you have completed steps from [basic](../../basic) or [memory](..
 
 Deploy NSC, services and NSEs:
 ```bash
-kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/exclude-prefixes-client?ref=v1.11.2-rc.2
+kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/exclude-prefixes-client?ref=v1.11.2-rc.3
 ```
 
 Wait for applications ready:

examples/features/exclude-prefixes-client/nse-kernel-1.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: nse
-          image: ghcr.io/networkservicemesh/cmd-nse-icmp-responder:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nse-icmp-responder:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET

examples/features/exclude-prefixes-client/nse-kernel-2.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: nse
-          image: ghcr.io/networkservicemesh/cmd-nse-icmp-responder:v1.11.2-rc.2
+          image: ghcr.io/networkservicemesh/cmd-nse-icmp-responder:v1.11.2-rc.3
           imagePullPolicy: IfNotPresent
           env:
             - name: SPIFFE_ENDPOINT_SOCKET

examples/features/exclude-prefixes/README.md

@@ -12,12 +12,12 @@ Make sure that you have completed steps from [basic](../../basic) or [memory](..
 
 Create config map with excluded prefixes
 ```bash
-kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/exclude-prefixes/configmap?ref=v1.11.2-rc.2
+kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/exclude-prefixes/configmap?ref=v1.11.2-rc.3
 ```
 
 Deploy NSC and NSE:
 ```bash
-kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/exclude-prefixes?ref=v1.11.2-rc.2
+kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/exclude-prefixes?ref=v1.11.2-rc.3
 ```
 
 Wait for applications ready:

examples/features/ipv6/Kernel2IP2Kernel_ipv6/README.md

@@ -9,7 +9,7 @@ Forwarders are using the `wireguard` mechanism to connect with each other.
 
 Deploy NSC and NSE:
 ```bash
-kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/ipv6/Kernel2IP2Kernel_ipv6?ref=v1.11.2-rc.2
+kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/ipv6/Kernel2IP2Kernel_ipv6?ref=v1.11.2-rc.3
 ```
 
 Wait for applications ready:

examples/features/ipv6/Kernel2IP2Memif_ipv6/README.md

@@ -10,7 +10,7 @@ Forwarders are using the `wireguard` mechanism to connect with each other.
 
 Deploy NSC and NSE:
 ```bash
-kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/ipv6/Kernel2IP2Memif_ipv6?ref=v1.11.2-rc.2
+kubectl apply -k https://github.com/networkservicemesh/deployments-k8s/examples/features/ipv6/Kernel2IP2Memif_ipv6?ref=v1.11.2-rc.3
 ```
 
 Wait for applications ready: