Prepare for release v1.14.11#639

Closed

aanm wants to merge 259 commits intov1.14from pr/prepare-v1.14.11

+13,227-5,243

This pull request is big! We're only showing the most recent 250 commits

Commits on Feb 21, 2024

pkg: Add Bitwise LPM Trie Library

authored and
tklauser
committed
ci: Restrict running tests to only the organization-members team

brlbil
authored and
tklauser
committed
policy: Only record an old entry if needed

jrajahalme
authored and
tklauser
committed

Commits on Feb 22, 2024

bpf: nat: report pre-SNAT address in trace event

julianwiedmann
authored and
ti-mo
committed
bpf: nodeport: populate ifindex in NAT trace event

julianwiedmann
authored and
ti-mo
committed
gha: align again conformance clustermesh matrix entries with main

giorio94
authored and
aanm
committed

Commits on Feb 26, 2024

chore(deps): update all github action dependencies

renovate[bot]
authored and
ldelossa
committed
chore(deps): update all-dependencies

renovate[bot]
authored and
rolinh
committed
images: update cilium-{runtime,builder}

Cilium Imagebot
authored and
rolinh
committed

Commits on Feb 27, 2024

chore(deps): update quay.io/lvh-images/kind docker tag to v6.6-20240221.111541

renovate[bot]
authored and
aanm
committed
chore(deps): update actions/download-artifact action to v4.1.3

renovate[bot]
authored and
aanm
committed
chore(deps): update go to v1.21.7

renovate[bot]
authored and
aanm
committed
images: update cilium-{runtime,builder}

Cilium Imagebot
authored and
aanm
committed

Commits on Feb 29, 2024

bpf: nodeport: add missing ifindex in NAT trace event

julianwiedmann
authored and
ldelossa
committed

Commits on Mar 1, 2024

Commits on Mar 4, 2024

chore(deps): update all github action dependencies

renovate[bot]
authored and
aanm
committed
chore(deps): update stable lvh-images

renovate[bot]
authored and
joestringer
committed

Commits on Mar 5, 2024

Commits on Mar 6, 2024

chore(deps): update dependency cilium/cilium-cli to v0.16.0

renovate[bot]
authored and
michi-covalent
committed

Commits on Mar 7, 2024

Allow proxy replies to WORLD_ID

jschwinger233
authored and
julianwiedmann
committed
Re-introduce 2005 route table

rgo3
authored and
julianwiedmann
committed
bpf_host can handle packets passed from L7 proxy

jschwinger233
authored and
julianwiedmann
committed
bpf: work around scrubbing of skb->mark during veth transition

jschwinger233
authored and
julianwiedmann
committed
bpf: l3: restore MARK_MAGIC_PROXY_INGRESS for from-proxy traffic
julianwiedmann
committed
pkg: proxy: only install from-proxy rules/routes for native routing
julianwiedmann
committed
proxy: opt-out from SNAT for L7 + Tunnel for some scenarios

jschwinger233
authored and
julianwiedmann
committed
iptables: filter table accepts from-proxy packets

jschwinger233
authored and
julianwiedmann
committed
bpf: host: skip from-proxy handling in from-netdev
julianwiedmann
committed
iptables: preserve encrypt mark for egress proxy forward traffic

jschwinger233
authored and
julianwiedmann
committed
datapath: disable net.ipv4.ip_early_demux for IPsec + L7 proxy

jschwinger233
authored and
julianwiedmann
committed
bpf: host: also handle from-egress proxy traffic

jschwinger233
authored and
julianwiedmann
committed
proxy: also install from-ingress-proxy rules with per-EP routing
julianwiedmann
committed
chore(deps): update go to v1.21.8

renovate[bot]
authored and
aanm
committed
images: update cilium-{runtime,builder}

Cilium Imagebot
authored and
aanm
committed
patches: Call upstream callbacks via UpstreamFilterManager

sayboras
authored and
aanm
committed
envoy: Bump golang version to 1.21.8

sayboras
authored and
joestringer
committed

Commits on Mar 8, 2024

Commits on Mar 11, 2024

chore(deps): update all github action dependencies

renovate[bot]
authored and
aanm
committed
xds: Avoid xds timeout due to agent restart in envoy DS mode

sayboras
authored and
jrajahalme
committed
bitlpm: Factor out common code
jrajahalme
committed
loader: also populate NATIVE_DEV_IFINDEX for cilium_overlay

julianwiedmann
authored and
jrajahalme
committed
Update kafka-sw-gen-traffic.sh

saintdle
authored and
jrajahalme
committed
container/bitlpm: Add Lookup Boolean Return Value

nathanjsweet
authored and
jrajahalme
committed
bugtool: Capture memory fragmentation info from /proc

pchaigno
authored and
jrajahalme
committed
iptables: Read CNI chaining mode from CNI config manager

pippolo84
authored and
julianwiedmann
committed
chore(deps): update stable lvh-images

renovate[bot]
authored and
jrajahalme
committed
chore(deps): update docker.io/library/ubuntu:22.04 docker digest to 77906da

renovate[bot]
authored and
jrajahalme
committed
images: update cilium-{runtime,builder}

Cilium Imagebot
authored and
jrajahalme
committed

Commits on Mar 12, 2024

Bump google.golang.org/protobuf (v1.14)

ferozsalam
authored and
julianwiedmann
committed
conntrack: only bump FQDN GC time when CT GC successful

squeed
authored and
dylandreimerink
committed
fqdn: prevent conntrack GC from reaping newly-added IPs

squeed
authored and
dylandreimerink
committed
chore(deps): update hubble cli to v0.13.2

renovate[bot]
authored and
jrajahalme
committed
wireguard: unconditionally add NodeInternalIPs to allowed IPs

giorio94
authored and
jrajahalme
committed
wireguard: Encrypt L7 proxy pkts to remote pods

brb
authored and
jrajahalme
committed
wireguard: Improve L7 proxy traffic detection

brb
authored and
jrajahalme
committed
images: bump cni plugins to v1.4.1
aanm
committed
images: update cilium-{runtime,builder}
aanm
committed

Commits on Mar 13, 2024

Prepare for release v1.14.8

thorn3r
authored and
jrajahalme
committed

Commits on Mar 15, 2024

Commits on Mar 16, 2024

loader: fix cancelled context during compile logging errors.

tommyp1ckles
authored and
julianwiedmann
committed
cni: use default logger with timestamps.

tommyp1ckles
authored and
julianwiedmann
committed
cilium-dbg: Don't fatal on XFRM rule deletion errors

pchaigno
authored and
julianwiedmann
committed
cilium-dbg: Refactor confirmation message for encrypt flush

pchaigno
authored and
julianwiedmann
committed
cilium-dbg: New --stale flag for encrypt flush

pchaigno
authored and
julianwiedmann
committed
k8s_install.sh: specify the CNI version

aanm
authored and
julianwiedmann
committed
introduce ARM github workflows

aanm
authored and
julianwiedmann
committed
ingress: Update docs with network policy example

sayboras
authored and
julianwiedmann
committed
Downgrade L2 Neighbor Discovery failure log to Debug

YutaroHayakawa
authored and
julianwiedmann
committed
bgpv1: Adjust ConnectionRetryTimeSeconds to 1 in component tests

YutaroHayakawa
authored and
julianwiedmann
committed
bpf: Enable monitor aggregation for all events in bpf_network.c

learnitall
authored and
julianwiedmann
committed
gha: drop unused check_url environment variable

giorio94
authored and
dylandreimerink
committed
gha: centralize kind version and image definition in set-env-variables

giorio94
authored and
dylandreimerink
committed
gha: migrate workflows to use the global kind-related variables

giorio94
authored and
dylandreimerink
committed
gha: don't wait for kind clusters to become ready

giorio94
authored and
dylandreimerink
committed
gha: checkout target branch instead of the default one

giorio94
authored and
dylandreimerink
committed

Commits on Mar 18, 2024

envoy: enable k8s secret watch even if only CEC is enabled

mhofstetter
authored and
jrajahalme
committed

Commits on Mar 19, 2024

Commits on Mar 20, 2024

test: Remove duplicate Cilium deployments in some datapath config tests

qmonnet
authored and
jrajahalme
committed
chore(deps): update gcr.io/distroless/static-debian11:nonroot docker digest to 55c6361

renovate[bot]
authored and
jrajahalme
committed
ci: fix checking github.event.pull_request.head.sha

mhofstetter
authored and
jrajahalme
committed
Handle InvalidParameterValue as well for PD fallback

hemanthmalla
authored and
jrajahalme
committed
Adding unit test for PD fallback

hemanthmalla
authored and
jrajahalme
committed
slices: don't modify missed input slice in test

bimmlerd
authored and
jrajahalme
committed
doc: Clarified GwAPI KPR prerequisites

PhilipSchmid
authored and
jrajahalme
committed
helm: Add pod affinity for cilium-envoy

sayboras
authored and
jrajahalme
committed
ci: Bump lvh-kind ssh-startup-wait-retries

YutaroHayakawa
authored and
jrajahalme
committed
ipam: fix azure ipam test panics due to shared pointers.

tommyp1ckles
authored and
jrajahalme
committed
gateway-api: Retrieve LB service from same namespace

sayboras
authored and
jrajahalme
committed
gha: disable fail-fast on integration tests

giorio94
authored and
jrajahalme
committed
docs: Warn on key rotations during upgrades

pchaigno
authored and
jrajahalme
committed

Commits on Mar 21, 2024

chore(deps): update docker.io/library/golang:1.21.8 docker digest to 8560736

renovate[bot]
authored and
jrajahalme
committed
images: update cilium-{runtime,builder}

julianwiedmann
authored and
jrajahalme
committed

Commits on Mar 22, 2024

gha: checkout target branch in multi pool workflow

giorio94
authored and
tklauser
committed

Commits on Mar 25, 2024

hubble: fix traffic direction and reply on encrypted trace notifications

kaworu
authored and
squeed
committed
AKS: avoid overlapping pod and service CIDRs

authored and
squeed
committed
cilium-dbg: listing load-balancing configurations displays L7LB proxy port

mhofstetter
authored and
squeed
committed
pkg: Add time wrapper package

joestringer
authored and
squeed
committed
metrics,endpointmanager: Register endpointmanager metrics via dependency

dylandreimerink
authored and
squeed
committed
bgpv1: BGP Control Plane metrics

YutaroHayakawa
authored and
squeed
committed
identitybackend: address race condition in test

authored and
squeed
committed
identitybackend: clean up TestGetIdentity

bimmlerd
authored and
squeed
committed
controlplane: fix panic: send on closed channel

bimmlerd
authored and
squeed
committed
controlplane: add mechanism to wait for watchers

authored and
squeed
committed
controlplane: wait for watcher establishment

authored and
squeed
committed
controlplane: fix mechanism for ensuring watchers

bimmlerd
authored and
squeed
committed
chore(deps): update all github action dependencies

renovate[bot]
authored and
aanm
committed

Commits on Mar 26, 2024

ipsec: New IPsec secret bit to indicate per-node-pair keys

pchaigno
authored and
aanm
committed
ipsec: Move enableIPsecIPv{4,6} preconditions to caller

pchaigno
authored and
aanm
committed
ipsec: Compute per-node-pair IPsec keys

pchaigno
authored and
aanm
committed
ipsec: Replace states with the old IPsec key

pchaigno
authored and
aanm
committed
ipsec, bpf: Match XFRM IN states using mark instead of source IP

pchaigno
authored and
aanm
committed
ipsec: Per-node XFRM IN states

pchaigno
authored and
aanm
committed
ipsec: Allow old and new XFRM IN states to coexist for upgrade

pchaigno
authored and
aanm
committed
k8s, node: Add bootid to CiliumNode resource

authored and
aanm
committed
ipsec: Use boot IDs when deriving per-node keys

authored and
aanm
committed
ipsec: Update existing states when a node's bootid changes

authored and
aanm
committed
docs: Document Xfrm{In,Out}NoStates on node reboots

authored and
aanm
committed
ipsec: Enable ESN anti-replay protection

authored and
aanm
committed
ipsec: Control use of per-node-pair keys from secret bit

pchaigno
authored and
aanm
committed
conn-disrupt: Allowlist XfrmInNoStates packet drops

pchaigno
authored and
aanm
committed
workflows: Extend IPsec key rotation coverage

pchaigno
authored and
aanm
committed
ipsec: disallow empty bootid for key generation

rgo3
authored and
aanm
committed
k8s: bump CRD schema version

pchaigno
authored and
aanm
committed
ipsec: fix per-node-pair-key computation

authored and
aanm
committed
node: Log local boot ID

pchaigno
authored and
aanm
committed
Prepare for release v1.14.9

jrajahalme
authored and
julianwiedmann
committed
install: Update image digests for v1.14.9

jrajahalme
authored and
julianwiedmann
committed

Commits on Mar 27, 2024

envoy: Drop privileges

sayboras
authored and
squeed
committed
envoy: Bump golang version to 1.21.8

sayboras
authored and
squeed
committed

Commits on Mar 28, 2024

api, daemon: Add new endpoint batch delete request

authored and
sayboras
committed
daemon/deletion-queue: Add support for batch delete

authored and
sayboras
committed

Commits on Apr 2, 2024

chore(deps): update stable lvh-images

renovate[bot]
authored and
aanm
committed
chore(deps): update cilium/little-vm-helper action to v0.0.17

renovate[bot]
authored and
aanm
committed
chore(deps): update dependency cilium/cilium-cli to v0.16.4

renovate[bot]
authored and
julianwiedmann
committed

Commits on Apr 4, 2024

fix unsupported aws region

brlbil
authored and
julianwiedmann
committed
chore(deps): update gcr.io/distroless/static-debian11:nonroot docker digest to f41b84c

renovate[bot]
authored and
tklauser
committed
docs: Restructure OpenShift installation instructions

learnitall
authored and
joamaki
committed
idpool: return pointer to pool

bimmlerd
authored and
joamaki
committed
endpointmanager: idallocator: remove checkmate

bimmlerd
authored and
joamaki
committed
endpointmanager: make idallocator a struct

bimmlerd
authored and
joamaki
committed
endpointmanager: move EP identifier alloc into pkg

bimmlerd
authored and
joamaki
committed
endpointmanager: deflake TestLookup

bimmlerd
authored and
joamaki
committed
endpointmanager: check expose errors in test

bimmlerd
authored and
joamaki
committed
endpointmanager: remove RemoveAll from interface

bimmlerd
authored and
joamaki
committed
docs: ipsec: document native-routing + Egress proxy case

julianwiedmann
authored and
joamaki
committed
ci-e2e: Add e2e test with WireGuard + Host Firewall

qmonnet
authored and
joamaki
committed
docs: Document No node ID drops in case of remote node deletion

pchaigno
authored and
joamaki
committed
cilium-health: Fix broken retry loop in cilium-health-ep controller

gandro
authored and
joamaki
committed
fix: Delegated ipam not configure ipv6 in ipv6 disabled case

tamilmani1989
authored and
joamaki
committed
install/kubernetes: use digest for nodeinit image

tklauser
authored and
joamaki
committed
install/kubernetes: use renovate to update quay.io/cilium/startup-script

tklauser
authored and
joamaki
committed
ci/ipsec: Print more info to debug credentials removal check failures

qmonnet
authored and
joamaki
committed
workflows: Debug info for key rotations

pchaigno
authored and
joamaki
committed

Commits on Apr 5, 2024

Commits on Apr 8, 2024

envoy: Bump envoy version to v1.27.4
sayboras
committed
fqdn: Update DNS Restore to Index to PortProto

nathanjsweet
authored and
joestringer
committed
fqdn: Add Protocol to DNS Proxy Cache

nathanjsweet
authored and
joestringer
committed
endpoint: Create a New Restore Field for DNS

nathanjsweet
authored and
joestringer
committed
fqdn: Fallback to Version 1 Port Lookups

nathanjsweet
authored and
joestringer
committed
testing: Update Restore Sort Method Signatrues

nathanjsweet
authored and
joestringer
committed

Commits on Apr 9, 2024

gha: Enable Ingress Controller tests in conformance-e2e

sayboras
authored and
lmb
committed
ci-ipsec-e2e: Use cilium-config

brb
authored and
lmb
committed
ci-ipsec-e2e: Add more key types

brb
authored and
lmb
committed
gh/actions: Add ipsec-key-rotate

brb
authored and
lmb
committed
ci-eks: Add IPsec key rotation tests

brb
authored and
lmb
committed
gh/actions: Add IPsec config to aws/k8s-versions.yaml

brb
authored and
lmb
committed
chore(deps): update all github action dependencies

renovate[bot]
authored and
lmb
committed
chore(deps): update go to v1.21.9

renovate[bot]
authored and
lmb
committed
images: update cilium-{runtime,builder}

Cilium Imagebot
authored and
lmb
committed
ci: remove no longer supported k8s v1.24

brlbil
authored and
lmb
committed

Commits on Apr 10, 2024

fqdn: Fix Restore Check Logic

nathanjsweet
authored and
lmb
committed
Bump go-jose to v3.0.3 (v1.14)

ferozsalam
authored and
lmb
committed

Commits on Apr 11, 2024

service: Update for L7 LB while locked

jrajahalme
authored and
lmb
committed
update cilium/certgen to v0.1.11

rolinh
authored and
lmb
committed
enable renovate for cilium/certgen

rolinh
authored and
lmb
committed
bugtool: Collect hubble metrics

chancez
authored and
joestringer
committed
metric: Avoid memory leak/increase

sayboras
authored and
joestringer
committed
cni: Allow text-ts log format value

sayboras
authored and
joestringer
committed
daemon: add BackendSlot to Service6Key.String and Service4Key.String

xyz-li
authored and
joestringer
committed
cilium-dbg: don't write to file on error opening

tklauser
authored and
joestringer
committed
cilium-dbg: avoid leaking file resources

tklauser
authored and
joestringer
committed
Fix spelling in DNS-based proxy info

saintdle
authored and
joestringer
committed
Move governance docs to the Cilium Community repo

katiestruthers
authored and
joestringer
committed
docs: Remove Hubble-OTel from roadmap

xmulligan
authored and
joestringer
committed
bitlpm: Document and Fix Descendants Bug

nathanjsweet
authored and
joestringer
committed
Prepare for release v1.14.10
asauber
committed
install: Update image digests for v1.14.10

asauber
authored and
joestringer
committed

Commits on Apr 16, 2024

chore(deps): update all github action dependencies

renovate[bot]
authored and
julianwiedmann
committed

Commits on Apr 17, 2024

golangci: Update golanci-lint version to the same as GH action

jrajahalme
authored and
aditighag
committed
golangci: Enable errorlint

jrajahalme
authored and
aditighag
committed
errors: Precede with colon

jrajahalme
authored and
aditighag
committed

Commits on Apr 18, 2024

Docs: mark Tetragon as Stable

sharlns
authored and
aanm
committed
Minor nit according to Liz's comment

sharlns
authored and
aanm
committed
clustermesh: document global services limitations with KPR=false

giorio94
authored and
aanm
committed
alibabacloud/eni: avoid racing node mgr in test

bimmlerd
authored and
aanm
committed
docs: Document six-month feature release cadence

joestringer
authored and
aanm
committed
docs: Fix github project link

joestringer
authored and
aanm
committed
fix k8s versions tested in CI

nbusseneau
authored and
aditighag
committed

Commits on Apr 22, 2024

chore(deps): update cilium/cilium-cli action to v0.16.4

renovate[bot]
authored and
julianwiedmann
committed
chore(deps): update all github action dependencies

renovate[bot]
authored and
aditighag
committed

Commits on Apr 23, 2024

envoy: Bump envoy version to v1.27.5
sayboras
committed
gha: configure fully-qualified DNS names as external targets

giorio94
authored and
ti-mo
committed
fqdn: Fix goroutine leak in transparent-mode

marseel
authored and
ti-mo
committed
xds: Return nil error after context cancel

jrajahalme
authored and
ti-mo
committed
test: Wait for stream server checks to complete

jrajahalme
authored and
ti-mo
committed
stream_test: Return io.EOF upon channel close

jrajahalme
authored and
ti-mo
committed
test: Eliminate XDS CacheUpdateDelay

jrajahalme
authored and
ti-mo
committed
test: Eliminate duplicate SendRequest

jrajahalme
authored and
ti-mo
committed
test: increase xds stream timeout to avoid test flakes

jrajahalme
authored and
ti-mo
committed
gha: configure max unavailable in clustermesh upgrade/downgrade

giorio94
authored and
ti-mo
committed
gha: explicitly configure IPAM mode in clustermesh upgrade/downgrade

giorio94
authored and
ti-mo
committed
gha: fix incorrectly named test in clustermesh upgrade/downgrade

giorio94
authored and
ti-mo
committed
gha: don't wait for hubble relay image in clustermesh upgrade/downgrade

giorio94
authored and
ti-mo
committed
gha: enable hubble in clustermesh upgrade/downgrade

giorio94
authored and
ti-mo
committed
gha: drop double installation of Cilium CLI in conformance-eks

giorio94
authored and
ti-mo
committed

Commits on Apr 24, 2024

Remove cilium/build from codeowners
joestringer
committed
operator: fix errors/warnings metric.

tommyp1ckles
authored and
julianwiedmann
committed
chore(deps): update hubble cli to v0.13.3

renovate[bot]
authored and
ti-mo
committed

Commits on Apr 25, 2024

ci: no longer suppported v1.25 in GKE

marseel
authored and
ti-mo
committed

Commits on Apr 26, 2024

proxy/routes: Introduce fromEgressProxyRule

jschwinger233
authored and
ti-mo
committed
proxy/routes: Remove fromEgressProxyRule for cilium downgrade

jschwinger233
authored and
ti-mo
committed

Commits on Apr 29, 2024

Prepare for release v1.14.11
aanm
committed