fix: update addon versions (#1107)

**What problem does this PR solve?**:
Updates Cilium and kube-vip versions to pickup any CVE fixes.

**Which issue(s) this PR fixes**:
Fixes #

**How Has This Been Tested?**:
<!--
Please describe the tests that you ran to verify your changes.
Provide output from the tests and any manual steps needed to replicate
the tests.
-->

**Special notes for your reviewer**:
<!--
Use this to provide any additional information to the reviewers.
This may include:
- Best way to review the PR.
- Where the author wants the most review attention on.
- etc.
-->

Author: dkoshkin

charts/cluster-api-runtime-extensions-nutanix/defaultclusterclasses/nutanix-cluster-class.yaml

@@ -173,7 +173,7 @@ spec:
                     - name: address
                       value: '{{ .Address }}'
                     - name: prometheus_server
-                  image: ghcr.io/kube-vip/kube-vip:v0.8.9
+                  image: ghcr.io/kube-vip/kube-vip:v0.8.10
                   imagePullPolicy: IfNotPresent
                   name: kube-vip
                   resources: {}
@@ -182,6 +182,8 @@ spec:
                       add:
                         - NET_ADMIN
                         - NET_RAW
+                      drop:
+                        - ALL
                   volumeMounts:
                     - mountPath: /etc/kubernetes/admin.conf
                       name: kubeconfig

charts/cluster-api-runtime-extensions-nutanix/templates/cni/cilium/manifests/cilium-configmap.yaml

@@ -17,7 +17,7 @@ data:
     RepositoryURL: '{{ if .Values.helmRepository.enabled }}oci://helm-repository.{{ .Release.Namespace }}.svc/charts{{ else }}https://kubernetes-sigs.github.io/aws-ebs-csi-driver{{ end }}'
   cilium: |
     ChartName: cilium
-    ChartVersion: 1.17.1
+    ChartVersion: 1.17.3
     RepositoryURL: '{{ if .Values.helmRepository.enabled }}oci://helm-repository.{{ .Release.Namespace }}.svc/charts{{ else }}https://helm.cilium.io/{{ end }}'
   cluster-autoscaler: |
     ChartName: cluster-autoscaler

charts/cluster-api-runtime-extensions-nutanix/templates/helm-config.yaml

@@ -20,7 +20,7 @@ repositories:
     repoURL: https://helm.cilium.io/
     charts:
       cilium:
-      - 1.17.1
+      - 1.17.3
   cluster-autoscaler:
     repoURL: https://kubernetes.github.io/autoscaler
     charts:

hack/addons/helm-chart-bundler/repos.yaml

@@ -37,7 +37,7 @@
                 - name: address
                   value: '{{ .Address }}'
                 - name: prometheus_server
-              image: ghcr.io/kube-vip/kube-vip:v0.8.9
+              image: ghcr.io/kube-vip/kube-vip:v0.8.10
               imagePullPolicy: IfNotPresent
               name: kube-vip
               resources: {}
@@ -46,6 +46,8 @@
                   add:
                     - NET_ADMIN
                     - NET_RAW
+                  drop:
+                    - ALL
               volumeMounts:
                 - mountPath: /etc/kubernetes/admin.conf
                   name: kubeconfig

hack/examples/files/kube-vip.yaml

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 export CALICO_VERSION := v3.29.3
-export CILIUM_VERSION := 1.17.1
+export CILIUM_VERSION := 1.17.3
 export NODE_FEATURE_DISCOVERY_VERSION := 0.17.2
 export CLUSTER_AUTOSCALER_CHART_VERSION := 9.46.3
 export AWS_EBS_CSI_CHART_VERSION := 2.40.3
@@ -19,7 +19,7 @@ export AWS_CCM_VERSION_132 := v1.32.1
 
 export NUTANIX_CCM_CHART_VERSION := 0.5.0
 
-export KUBE_VIP_VERSION := v0.8.9
+export KUBE_VIP_VERSION := v0.8.10
 
 export METALLB_CHART_VERSION := 0.14.9