Merge pull request #112 from citrix/cic-1.21.9

Releasing CIC 1.21.9
netscaler · Dec 16, 2021 · 9cfbef1 · 9cfbef1
2 parents 4c8de2f + 00df58a
commit 9cfbef1
Show file tree

Hide file tree

Showing 37 changed files with 88 additions and 45 deletions.
diff --git a/citrix-cloud-native/Chart.yaml b/citrix-cloud-native/Chart.yaml
@@ -14,15 +14,15 @@ maintainers:
   email: subash.dangol@citrix.com
 dependencies:
   - name: citrix-ingress-controller
-    version: "1.20.5"
+    version: "1.21.9"
     condition: cic.enabled
     alias: cic
   - name: citrix-cpx-with-ingress-controller
-    version: "1.20.5"
+    version: "1.21.9"
     condition: cpx.enabled
     alias: cpx
   - name: citrix-multi-cluster-ingress-controller
-    version: "1.20.5"
+    version: "1.21.9"
     condition: mcIngress.enabled
     alias: mcIngress
   - name: citrix-node-controller

diff --git a/citrix-cloud-native/charts/citrix-cpx-with-ingress-controller/Chart.yaml b/citrix-cloud-native/charts/citrix-cpx-with-ingress-controller/Chart.yaml
@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.20.5"
+appVersion: "1.21.9"
 kubeVersion: ">=v1.16.0-0"
 description: A Helm chart for Citrix ADC CPX with Citrix ingress Controller running as sidecar.
 name: citrix-cpx-with-ingress-controller
-version: 1.20.5
+version: 1.21.9
 icon: https://raw.githubusercontent.com/citrix/citrix-helm-charts/gh-pages/icon.png
 home: https://www.citrix.com
 sources:

diff --git a/citrix-cloud-native/charts/citrix-cpx-with-ingress-controller/README.md b/citrix-cloud-native/charts/citrix-cpx-with-ingress-controller/README.md
@@ -442,7 +442,7 @@ The following table lists the configurable parameters of the Citrix ADC CPX with
 | cpx.license.accept | Mandatory | no | Set `yes` to accept the Citrix ingress controller end user license agreement. |
 | cpx.image | Mandatory | `quay.io/citrix/citrix-k8s-cpx-ingress:13.0-83.27` | The Citrix ADC CPX image. |
 | cpx.pullPolicy | Mandatory | IfNotPresent | The Citrix ADC CPX image pull policy. |
-| cpx.cic.image | Mandatory | `quay.io/citrix/citrix-k8s-ingress-controller:1.20.5` | The Citrix ingress controller image. |
+| cpx.cic.image | Mandatory | `quay.io/citrix/citrix-k8s-ingress-controller:1.21.9` | The Citrix ingress controller image. |
 | cpx.cic.pullPolicy | Mandatory | IfNotPresent | The Citrix ingress controller image pull policy. |
 | cpx.cic.required | Mandatory | true | CIC to be run as sidecar with Citrix ADC CPX |
 | cpx.imagePullSecrets | Optional | N/A | Provide list of Kubernetes secrets to be used for pulling the images from a private Docker registry or repository. For more information on how to create this secret please see [Pull an Image from a Private Registry](https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/). |

diff --git a/citrix-cloud-native/charts/citrix-cpx-with-ingress-controller/templates/rbac.yaml b/citrix-cloud-native/charts/citrix-cpx-with-ingress-controller/templates/rbac.yaml
@@ -52,6 +52,9 @@ rules:
   - apiGroups: ["network.openshift.io"]
     resources: ["hostsubnets"]
     verbs: ["get", "list", "watch"]
+  - apiGroups: ["config.openshift.io"]
+    resources: ["networks"]
+    verbs: ["get", "list"]
 {{- end }}
 
 ---

diff --git a/citrix-cloud-native/charts/citrix-cpx-with-ingress-controller/values.yaml b/citrix-cloud-native/charts/citrix-cpx-with-ingress-controller/values.yaml
@@ -64,7 +64,7 @@ servicePorts: []
 
 # Citrix Ingress Controller config details
 cic:
-  image: quay.io/citrix/citrix-k8s-ingress-controller:1.20.5
+  image: quay.io/citrix/citrix-k8s-ingress-controller:1.21.9
   pullPolicy: IfNotPresent
   required: true
 entityPrefix:

diff --git a/citrix-cloud-native/charts/citrix-ingress-controller/Chart.yaml b/citrix-cloud-native/charts/citrix-ingress-controller/Chart.yaml
@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.20.5"
+appVersion: "1.21.9"
 kubeVersion: ">=v1.16.0-0"
 description: A Helm chart for Citrix Ingress Controller configuring MPX/VPX.
 name: citrix-ingress-controller
-version: 1.20.5
+version: 1.21.9
 icon: https://raw.githubusercontent.com/citrix/citrix-helm-charts/gh-pages/icon.png
 home: https://www.citrix.com
 sources:

diff --git a/citrix-cloud-native/charts/citrix-ingress-controller/README.md b/citrix-cloud-native/charts/citrix-ingress-controller/README.md
@@ -307,7 +307,7 @@ The following table lists the mandatory and optional parameters that you can con
 | --------- | --------------------- | ------------- | ----------- |
 | cic.enabled | Mandatory | False | Set to "True" for deploying Citrix Ingress Controller for Citrix ADC VPX/MPX. |
 | cic.license.accept | Mandatory | no | Set `yes` to accept the CIC end user license agreement. |
-| cic.image | Mandatory | `quay.io/citrix/citrix-k8s-ingress-controller:1.20.5` | The CIC image. |
+| cic.image | Mandatory | `quay.io/citrix/citrix-k8s-ingress-controller:1.21.9` | The CIC image. |
 | cic.pullPolicy | Mandatory | IfNotPresent | The CIC image pull policy. |
 | cic.imagePullSecrets | Optional | N/A | Provide list of Kubernetes secrets to be used for pulling the images from a private Docker registry or repository. For more information on how to create this secret please see [Pull an Image from a Private Registry](https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/). |
 | cic.adcCredentialSecret | Mandatory | N/A | The secret key to log on to the Citrix ADC VPX or MPX. For information on how to create the secret keys, see [Prerequisites](#prerequistes). |

diff --git a/citrix-cloud-native/charts/citrix-ingress-controller/templates/rbac.yaml b/citrix-cloud-native/charts/citrix-ingress-controller/templates/rbac.yaml
@@ -52,6 +52,9 @@ rules:
   - apiGroups: ["network.openshift.io"]
     resources: ["hostsubnets"]
     verbs: ["get", "list", "watch"]
+  - apiGroups: ["config.openshift.io"]
+    resources: ["networks"]
+    verbs: ["get", "list"]
 {{- end }}
 
 ---

diff --git a/citrix-cloud-native/charts/citrix-ingress-controller/values.yaml b/citrix-cloud-native/charts/citrix-ingress-controller/values.yaml
@@ -3,7 +3,7 @@
 # Declare variables to be passed into your templates.
 
 # Citrix Ingress Controller config details
-image: quay.io/citrix/citrix-k8s-ingress-controller:1.20.5
+image: quay.io/citrix/citrix-k8s-ingress-controller:1.21.9
 pullPolicy: IfNotPresent
 imagePullSecrets: []
 openshift: false

diff --git a/citrix-cloud-native/charts/citrix-multi-cluster-ingress-controller/Chart.yaml b/citrix-cloud-native/charts/citrix-multi-cluster-ingress-controller/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v1
-appVersion: "1.20.5"
+appVersion: "1.21.9"
 description: A Helm chart for Citrix Multi-Cluster Ingress Controller configuring MPX/VPX.
 name: citrix-multi-cluster-ingress-controller
-version: 1.20.5
+version: 1.21.9
 icon: https://raw.githubusercontent.com/citrix/citrix-helm-charts/gh-pages/icon.png
 home: https://www.citrix.com
 maintainers:

diff --git a/citrix-cloud-native/charts/citrix-multi-cluster-ingress-controller/README.md b/citrix-cloud-native/charts/citrix-multi-cluster-ingress-controller/README.md
@@ -170,7 +170,7 @@ The following table lists the mandatory and optional parameters that you can con
 | Parameters | Mandatory or Optional | Default value | Description |
 | --------- | --------------------- | ------------- | ----------- |
 | mcIngress.license.accept | Mandatory | no | Set `yes` to accept the CIC end user license agreement. |
-| mcIngress.image | Optional | `quay.io/citrix/citrix-k8s-ingress-controller:1.20.5` | The CIC image. |
+| mcIngress.image | Optional | `quay.io/citrix/citrix-k8s-ingress-controller:1.21.9` | The CIC image. |
 | mcIngress.pullPolicy | Optional | Always | The CIC image pull policy. |
 | mcIngress.nsPort | Optional | 443 | The port used by CIC to communicate with Citrix ADC. You can use port 80 for HTTP. |
 | mcIngress.nsProtocol | Optional | HTTPS | The protocol used by CIC to communicate with Citrix ADC. You can also use HTTP on port 80. |

diff --git a/...cloud-native/charts/citrix-multi-cluster-ingress-controller/templates/mcingress_crds.yaml b/...cloud-native/charts/citrix-multi-cluster-ingress-controller/templates/mcingress_crds.yaml
@@ -137,7 +137,7 @@ spec:
               status_message:
                  type: string
           spec:
-            required: ["serviceType","hosts","status"]
+            required: ["serviceType","hosts"]
             properties:
               ipType:
                 type: string
@@ -173,6 +173,12 @@ spec:
                           - ROUNDROBIN
                           - STATICPROXIMITY
                           description: "The traffic distribution policy supported in multi-cluster deployment"
+                        sourceIpPersistenceId:
+                          type: integer
+                          minimum: 0
+                          maximum: 65535
+                          multipleOf : 100
+                          description: "Unique SourceIP persistence ID. This enables persistence based on the source IP address for inbound packets"
                         secLbMethod:
                           type: string
                           description: "The traffic distribution policy supported among clusters under a group in local-first, canary or failover"

diff --git a/citrix-cloud-native/charts/citrix-multi-cluster-ingress-controller/values.yaml b/citrix-cloud-native/charts/citrix-multi-cluster-ingress-controller/values.yaml
@@ -3,7 +3,7 @@
 # Declare variables to be passed into your templates.
 
 # image contains information needed to fetch CIC image
-image: quay.io/citrix/citrix-k8s-ingress-controller:1.20.5
+image: quay.io/citrix/citrix-k8s-ingress-controller:1.21.9
 pullPolicy: IfNotPresent
 # openshift is set to true if charts are being deployed in OpenShift environment.
 openshift: false

diff --git a/citrix-cpx-with-ingress-controller/Chart.yaml b/citrix-cpx-with-ingress-controller/Chart.yaml
@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.20.5"
+appVersion: "1.21.9"
 kubeVersion: ">=v1.16.0-0"
 description: A Helm chart for Citrix ADC CPX with Citrix ingress Controller running as sidecar.
 name: citrix-cpx-with-ingress-controller
-version: 1.20.5
+version: 1.21.9
 icon: https://raw.githubusercontent.com/citrix/citrix-helm-charts/gh-pages/icon.png
 home: https://www.citrix.com
 sources:

diff --git a/citrix-cpx-with-ingress-controller/README.md b/citrix-cpx-with-ingress-controller/README.md
@@ -436,7 +436,7 @@ The following table lists the configurable parameters of the Citrix ADC CPX with
 | license.accept | Mandatory | no | Set `yes` to accept the Citrix ingress controller end user license agreement. |
 | image | Mandatory | `quay.io/citrix/citrix-k8s-cpx-ingress:13.0-83.27` | The Citrix ADC CPX image. |
 | pullPolicy | Mandatory | IfNotPresent | The Citrix ADC CPX image pull policy. |
-| cic.image | Mandatory | `quay.io/citrix/citrix-k8s-ingress-controller:1.20.5` | The Citrix ingress controller image. |
+| cic.image | Mandatory | `quay.io/citrix/citrix-k8s-ingress-controller:1.21.9` | The Citrix ingress controller image. |
 | cic.pullPolicy | Mandatory | IfNotPresent | The Citrix ingress controller image pull policy. |
 | cic.required | Mandatory | true | CIC to be run as sidecar with Citrix ADC CPX |
 | imagePullSecrets | Optional | N/A | Provide list of Kubernetes secrets to be used for pulling the images from a private Docker registry or repository. For more information on how to create this secret please see [Pull an Image from a Private Registry](https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/). |

diff --git a/citrix-cpx-with-ingress-controller/templates/rbac.yaml b/citrix-cpx-with-ingress-controller/templates/rbac.yaml
@@ -52,6 +52,9 @@ rules:
   - apiGroups: ["network.openshift.io"]
     resources: ["hostsubnets"]
     verbs: ["get", "list", "watch"]
+  - apiGroups: ["config.openshift.io"]
+    resources: ["networks"]
+    verbs: ["get", "list"]
 {{- end }}
 
 ---

diff --git a/citrix-cpx-with-ingress-controller/values.yaml b/citrix-cpx-with-ingress-controller/values.yaml
@@ -64,7 +64,7 @@ servicePorts: []
 
 # Citrix Ingress Controller config details
 cic:
-  image: quay.io/citrix/citrix-k8s-ingress-controller:1.20.5
+  image: quay.io/citrix/citrix-k8s-ingress-controller:1.21.9
   pullPolicy: IfNotPresent
   required: true
 entityPrefix:

diff --git a/citrix-ingress-controller/Chart.yaml b/citrix-ingress-controller/Chart.yaml
@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.20.5"
+appVersion: "1.21.9"
 kubeVersion: ">=v1.16.0-0"
 description: A Helm chart for Citrix Ingress Controller configuring MPX/VPX.
 name: citrix-ingress-controller
-version: 1.20.5
+version: 1.21.9
 icon: https://raw.githubusercontent.com/citrix/citrix-helm-charts/gh-pages/icon.png
 home: https://www.citrix.com
 sources:

diff --git a/citrix-ingress-controller/README.md b/citrix-ingress-controller/README.md
@@ -300,7 +300,7 @@ The following table lists the mandatory and optional parameters that you can con
 | Parameters | Mandatory or Optional | Default value | Description |
 | --------- | --------------------- | ------------- | ----------- |
 | license.accept | Mandatory | no | Set `yes` to accept the CIC end user license agreement. |
-| image | Mandatory | `quay.io/citrix/citrix-k8s-ingress-controller:1.20.5` | The CIC image. |
+| image | Mandatory | `quay.io/citrix/citrix-k8s-ingress-controller:1.21.9` | The CIC image. |
 | pullPolicy | Mandatory | IfNotPresent | The CIC image pull policy. |
 | imagePullSecrets | Optional | N/A | Provide list of Kubernetes secrets to be used for pulling the images from a private Docker registry or repository. For more information on how to create this secret please see [Pull an Image from a Private Registry](https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/). |
 | adcCredentialSecret | Mandatory | N/A | The secret key to log on to the Citrix ADC VPX or MPX. For information on how to create the secret keys, see [Prerequisites](#prerequistes). |

diff --git a/citrix-ingress-controller/templates/rbac.yaml b/citrix-ingress-controller/templates/rbac.yaml
@@ -52,6 +52,9 @@ rules:
   - apiGroups: ["network.openshift.io"]
     resources: ["hostsubnets"]
     verbs: ["get", "list", "watch"]
+  - apiGroups: ["config.openshift.io"]
+    resources: ["networks"]
+    verbs: ["get", "list"]
 {{- end }}
 
 ---

diff --git a/citrix-ingress-controller/values.yaml b/citrix-ingress-controller/values.yaml
@@ -3,7 +3,7 @@
 # Declare variables to be passed into your templates.
 
 # Citrix Ingress Controller config details
-image: quay.io/citrix/citrix-k8s-ingress-controller:1.20.5
+image: quay.io/citrix/citrix-k8s-ingress-controller:1.21.9
 pullPolicy: IfNotPresent
 imagePullSecrets: []
 openshift: false

diff --git a/citrix-multi-cluster-ingress-controller/Chart.yaml b/citrix-multi-cluster-ingress-controller/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v1
-appVersion: "1.20.5"
+appVersion: "1.21.9"
 description: A Helm chart for Citrix Multi-Cluster Ingress Controller configuring MPX/VPX.
 name: citrix-multi-cluster-ingress-controller
-version: 1.20.5
+version: 1.21.9
 icon: https://raw.githubusercontent.com/citrix/citrix-helm-charts/gh-pages/icon.png
 home: https://www.citrix.com
 maintainers:

diff --git a/citrix-multi-cluster-ingress-controller/README.md b/citrix-multi-cluster-ingress-controller/README.md
@@ -170,7 +170,7 @@ The following table lists the mandatory and optional parameters that you can con
 | Parameters | Mandatory or Optional | Default value | Description |
 | --------- | --------------------- | ------------- | ----------- |
 | license.accept | Mandatory | no | Set `yes` to accept the CIC end user license agreement. |
-| image | Optional | `quay.io/citrix/citrix-k8s-ingress-controller:1.20.5` | The CIC image. |
+| image | Optional | `quay.io/citrix/citrix-k8s-ingress-controller:1.21.9` | The CIC image. |
 | pullPolicy | Optional | Always | The CIC image pull policy. |
 | nsPort | Optional | 443 | The port used by CIC to communicate with Citrix ADC. You can use port 80 for HTTP. |
 | nsProtocol | Optional | HTTPS | The protocol used by CIC to communicate with Citrix ADC. You can also use HTTP on port 80. |

diff --git a/citrix-multi-cluster-ingress-controller/templates/mcingress_crds.yaml b/citrix-multi-cluster-ingress-controller/templates/mcingress_crds.yaml
@@ -137,7 +137,7 @@ spec:
               status_message:
                  type: string
           spec:
-            required: ["serviceType","hosts","status"]
+            required: ["serviceType","hosts"]
             properties:
               ipType:
                 type: string
@@ -173,6 +173,12 @@ spec:
                           - ROUNDROBIN
                           - STATICPROXIMITY
                           description: "The traffic distribution policy supported in multi-cluster deployment"
+                        sourceIpPersistenceId:
+                          type: integer
+                          minimum: 0
+                          maximum: 65535
+                          multipleOf : 100
+                          description: "Unique SourceIP persistence ID. This enables persistence based on the source IP address for inbound packets"
                         secLbMethod:
                           type: string
                           description: "The traffic distribution policy supported among clusters under a group in local-first, canary or failover"

diff --git a/citrix-multi-cluster-ingress-controller/values.yaml b/citrix-multi-cluster-ingress-controller/values.yaml
@@ -3,7 +3,7 @@
 # Declare variables to be passed into your templates.
 
 # image contains information needed to fetch CIC image
-image: quay.io/citrix/citrix-k8s-ingress-controller:1.20.5
+image: quay.io/citrix/citrix-k8s-ingress-controller:1.21.9
 pullPolicy: IfNotPresent
 # openshift is set to true if charts are being deployed in OpenShift environment.
 openshift: false

diff --git a/citrix_cloud_native_values.yaml b/citrix_cloud_native_values.yaml
@@ -1,7 +1,7 @@
 cic:
   enabled: False
 
-  image: quay.io/citrix/citrix-k8s-ingress-controller:1.20.5
+  image: quay.io/citrix/citrix-k8s-ingress-controller:1.21.9
   pullPolicy: IfNotPresent
   imagePullSecrets: []
   openshift: false
@@ -75,7 +75,7 @@ cic:
 mcIngress:
   enabled: False
 
-  image: quay.io/citrix/citrix-k8s-ingress-controller:1.20.5
+  image: quay.io/citrix/citrix-k8s-ingress-controller:1.21.9
   pullPolicy: IfNotPresent
   openshift: false
   localRegion:
@@ -144,7 +144,7 @@ cpx:
   servicePorts: []
 
   cic:
-    image: quay.io/citrix/citrix-k8s-ingress-controller:1.20.5
+    image: quay.io/citrix/citrix-k8s-ingress-controller:1.21.9
     pullPolicy: IfNotPresent
     required: true
   entityPrefix:

diff --git a/examples/Servicemesh_with_GSLB_and_WAF/manifest/multicluster1.yaml b/examples/Servicemesh_with_GSLB_and_WAF/manifest/multicluster1.yaml
@@ -2,7 +2,7 @@ enabled: true
 nsPort: 443
 nsProtocol: HTTPS
 entityPrefix: gslb
-image: 'quay.io/citrix/citrix-k8s-ingress-controller:1.20.5'
+image: 'quay.io/citrix/citrix-k8s-ingress-controller:1.21.9'
 pullPolicy: IfNotPresent
 license:
   accept: 'Yes'

diff --git a/examples/Servicemesh_with_GSLB_and_WAF/manifest/multicluster2.yaml b/examples/Servicemesh_with_GSLB_and_WAF/manifest/multicluster2.yaml
@@ -2,7 +2,7 @@ enabled: true
 nsPort: 443
 nsProtocol: HTTPS
 entityPrefix: gslb
-image: 'quay.io/citrix/citrix-k8s-ingress-controller:1.20.5'
+image: 'quay.io/citrix/citrix-k8s-ingress-controller:1.21.9'
 pullPolicy: IfNotPresent
 license:
   accept: 'Yes'

diff --git a/examples/citrix-cpx-with-ingress-controller/Chart.yaml b/examples/citrix-cpx-with-ingress-controller/Chart.yaml
@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.20.5"
+appVersion: "1.21.9"
 kubeVersion: ">=v1.16.0-0"
 description: A Helm chart for Citrix ADC CPX with Citrix ingress Controller running as sidecar.
 name: citrix-cpx-with-ingress-controller
-version: 1.20.5
+version: 1.21.9
 icon: https://raw.githubusercontent.com/citrix/citrix-helm-charts/gh-pages/icon.png
 home: https://www.citrix.com
 sources:

diff --git a/examples/citrix-cpx-with-ingress-controller/README.md b/examples/citrix-cpx-with-ingress-controller/README.md
@@ -87,7 +87,7 @@ The following table lists the configurable parameters of the Citrix ADC CPX with
 | license.accept | Mandatory | no | Set `yes` to accept the Citrix ingress controller end user license agreement. |
 | image | Mandatory | `quay.io/citrix/citrix-k8s-cpx-ingress:13.0-83.27` | The Citrix ADC CPX image. |
 | pullPolicy | Mandatory | IfNotPresent | The Citrix ADC CPX image pull policy. |
-| cic.image | Mandatory | `quay.io/citrix/citrix-k8s-ingress-controller:1.20.5` | The Citrix ingress controller image. |
+| cic.image | Mandatory | `quay.io/citrix/citrix-k8s-ingress-controller:1.21.9` | The Citrix ingress controller image. |
 | cic.pullPolicy | Mandatory | IfNotPresent | The Citrix ingress controller image pull policy. |
 | cic.required | Mandatory | true | CIC to be run as sidecar with Citrix ADC CPX |
 | imagePullSecrets | Optional | N/A | Provide list of Kubernetes secrets to be used for pulling the images from a private Docker registry or repository. For more information on how to create this secret please see [Pull an Image from a Private Registry](https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/). |
@@ -161,7 +161,7 @@ By default the chart will install the recommended [RBAC](https://kubernetes.io/d
 [Exporter](https://github.com/citrix/citrix-adc-metrics-exporter) is running as sidecar with the CPX and pulling metrics from the CPX. It exposes the metrics using Kubernetes NodePort.
 
 ## Ingress Class
-To know more about Ingress Class refer [this](https://github.com/citrix/citrix-k8s-ingress-controller/blob/master/docs/ingress-class.md).
+To know more about Ingress Class refer [this](https://github.com/citrix/citrix-k8s-ingress-controller/blob/master/docs/configure/ingress-classes.md).
 
 ## For More Info: https://github.com/citrix/citrix-k8s-ingress-controller
 
diff --git a/examples/citrix-cpx-with-ingress-controller/templates/rbac.yaml b/examples/citrix-cpx-with-ingress-controller/templates/rbac.yaml
@@ -52,6 +52,9 @@ rules:
   - apiGroups: ["network.openshift.io"]
     resources: ["hostsubnets"]
     verbs: ["get", "list", "watch"]
+  - apiGroups: ["config.openshift.io"]
+    resources: ["networks"]
+    verbs: ["get", "list"]
 {{- end }}
 
 ---

diff --git a/examples/citrix-cpx-with-ingress-controller/values.yaml b/examples/citrix-cpx-with-ingress-controller/values.yaml
@@ -64,7 +64,7 @@ servicePorts: []
 
 # Citrix Ingress Controller config details
 cic:
-  image: quay.io/citrix/citrix-k8s-ingress-controller:1.20.5
+  image: quay.io/citrix/citrix-k8s-ingress-controller:1.21.9
   pullPolicy: IfNotPresent
   required: true
 entityPrefix:

diff --git a/examples/citrix-ingress-controller/Chart.yaml b/examples/citrix-ingress-controller/Chart.yaml
@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.20.5"
+appVersion: "1.21.9"
 kubeVersion: ">=v1.16.0-0"
 description: A Helm chart for Citrix Ingress Controller configuring MPX/VPX.
 name: citrix-ingress-controller
-version: 1.20.5
+version: 1.21.9
 icon: https://raw.githubusercontent.com/citrix/citrix-helm-charts/gh-pages/icon.png
 home: https://www.citrix.com
 sources: