Release v0.16.4

What's Changed

• Update stable release to v0.16.3 by @michi-covalent in #2407
• tests: Add exceptions for error logs check by @jrajahalme in #2432
• connectivity: don't hard-code ingress service NodePorts by @giorio94 in #2435
• fix(deps): update module github.com/prometheus/common to v0.51.0 by @renovate in #2444
• chore(deps): update module github.com/docker/docker to v25.0.5+incompatible [security] by @renovate in #2440
• Configure fully-qualified DNS names as external targets by @giorio94 in #2433
• defaults: Move Version and HelmRepository from const to var by @michi-covalent in #2441
• Ignore "Unsupported L2 protocol" to known drops by @margamanterola in #2436
• Fix flow validation with fully-qualified DNS names by @giorio94 in #2450
• renovate:: Pick up github.com/cilium/cilium prereleases by @michi-covalent in #2449
• Explicitly wait for ingress service creation by @giorio94 in #2445
• chore(deps): update docker.io/library/golang:1.22.1-alpine3.19 docker digest to 0466223 by @renovate in #2443
• ci: avoid overlapping pod and service CIDRs on AKS by @tklauser in #2446
• ci: fix installation on AKS by @tklauser in #2452
• feat: Make Cilium CLI work with Cilium installed through helm with a non-default name. by @matthewhembree in #2430
• chore(deps): update dependency cilium/cilium to v1.15.3 by @renovate in #2451
• errors: add [no-error-logs] exception for issue caused by fqdn bug. by @tommyp1ckles in #2438
• helm: fix KPR autodetection value by @giorio94 in #2453
• chore(deps): update golangci/golangci-lint docker tag to v1.57.1 by @renovate in #2434
• Prepare for v0.16.4 release by @michi-covalent in #2455

New Contributors

• @matthewhembree made their first contribution in #2430

Full Changelog: v0.16.3...v0.16.4

Release v0.16.3

What's Changed

• refactor: Move logging outside internal by @michi-covalent in #2418
• chore(deps): update golang:1.22.1-alpine3.19 docker digest to fa4add5 by @renovate in #2417
• Explicitly configure the "nodes without cilium" affinity on both initial installation and subsequent upgrades by @giorio94 in #2427
• chore(deps): update golang:1.22.1-alpine3.19 docker digest to 0466223 by @renovate in #2428
• Prepare for v0.16.3 release by @michi-covalent in #2429

Full Changelog: v0.16.2...v0.16.3

Release v0.16.2

What's Changed

• renovate: Don't pick up new Go patch versions in go.mod by @michi-covalent in #2408
• gha: increase Multicluster timeout by @aspsk in #2412
• Revert "ingress: Update backend service for Ingress" by @michi-covalent in #2413
• fix(deps): update module helm.sh/helm/v3 to v3.14.3 by @renovate in #2410
• fix(deps): update github.com/cilium/charts digest to a5bec49 by @renovate in #2415
• chore(deps): update all github action dependencies (minor) by @renovate in #2411
• Prepare for v0.16.2 release by @michi-covalent in #2416

New Contributors

• @aspsk made their first contribution in #2412

Full Changelog: v0.16.1...v0.16.2

Release v0.16.1

What's Changed

• refactor: Move internal/cli to cli/ by @michi-covalent in #2367
• fix: update ldflags for local-release by @chenrui333 in #2370
• chore(deps): update golang-images by @renovate in #2371
• chore(deps): update golang docker tag to v1.22.1 by @renovate in #2369
• Update stable release to v0.16.0 by @michi-covalent in #2368
• chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 8425131 by @renovate in #2373
• chore(deps): update docker/build-push-action action to v5.2.0 by @renovate in #2380
• sysdump: improve tetragon tasks by @kkourt in #2387
• ingress: Update backend service for Ingress by @sayboras in #2383
• chore(deps): update azure/login action to v2 by @renovate in #2376
• Don't depend on github.com/mholt/archiver by @michi-covalent in #2382
• fix(deps): update all go dependencies main (patch) by @renovate in #2379
• fix(deps): update all go dependencies main by @renovate in #2377
• chore(deps): update softprops/action-gh-release action to v2 by @renovate in #2390
• chore(deps): update go to v1.22.1 (patch) by @renovate in #2378
• Improve the helm values autodetection logic by @giorio94 in #2365
• connectivity: collect sysdump from all clusters on failure by @giorio94 in #2391
• chore(deps): update softprops/action-gh-release action to v2.0.4 by @renovate in #2393
• Add InitializeCommand hook by @michi-covalent in #2397
• Store namespace and k8sClient in the command context by @michi-covalent in #2375
• refactor: Move sniff under connectivity by @michi-covalent in #2394
• refactor: Move Hooks to the api package by @michi-covalent in #2400
• chore(deps): update dependency go to v1.22.1 by @renovate in #2402
• chore(deps): update docker/login-action action to v3.1.0 by @renovate in #2401
• fix(deps): update module github.com/cilium/hubble to v0.13.2 by @renovate in #2403
• chore(deps): update dependency cilium/cilium to v1.15.2 by @renovate in #2405
• fix(deps): update github.com/cilium/charts digest to 724231f by @renovate in #2406
• Prepare for v0.16.1 release by @michi-covalent in #2404

New Contributors

• @chenrui333 made their first contribution in #2370

Full Changelog: v0.16.0...v0.16.1

Release v0.16.0

What's Changed

• fix(deps): update module helm.sh/helm/v3 to v3.14.1 [security] by @renovate in #2308
• GCP OIDC instead of SA creds. by @viktor-kurchenko in #2313
• fix(deps): update all go dependencies main (patch) by @renovate in #2312
• Hide key-per-node flag. by @viktor-kurchenko in #2316
• Update stable release to v0.15.23 by @michi-covalent in #2310
• Use encryption models from Cilium dependency. by @viktor-kurchenko in #2318
• renovate: additionally manage updates for action.yaml by @giorio94 in #2299
• fix(deps): update all go dependencies main by @renovate in #2311
• chore(deps): update dependency cilium/cilium to v1.15.1 - autoclosed by @renovate in #2305
• chore(deps): update actions/setup-go action to v5 by @renovate in #2323
• chore(deps): update golangci/golangci-lint docker tag to v1.56.2 by @renovate in #2309
• chore(deps): update dependency kubernetes-sigs/kind to v0.22.0 by @renovate in #2304
• connectivity: add forbidden ICMPv6 message as expected drop reason by @giorio94 in #2317
• Introduce host firewall connectivity tests by @giorio94 in #2306
• fix(deps): update all go dependencies main (minor) by @renovate in #2325
• fix(deps): update module helm.sh/helm/v3 to v3.14.2 [security] by @renovate in #2324
• Add sig/encryption as owner of /encrypt/ in CODEOWNERS by @margamanterola in #2300
• connectivity: improve reporting for no-unexpected-packet-drops check by @giorio94 in #2315
• cilium status: additionally check for endpoints readiness by @giorio94 in #2298
• Refactor: Move junit package under connectivity package by @michi-covalent in #2331
• Status check error message improved. by @viktor-kurchenko in #2319
• sniffer: improve handling of tcpdump termination by @giorio94 in #2321
• Ignore Cilium endpoints not found error for the status command. by @viktor-kurchenko in #2320
• Delete classic mode install/uninstall/upgrade commands by @michi-covalent in #2328
• Delete classic mode hubble commands by @michi-covalent in #2335
• k8s: don't drop stdout of kubectl exec by @bimmlerd in #2332
• connectivity: fix encryption validation with wireguard encap + host fw by @giorio94 in #2333
• chore(deps): update docker/setup-buildx-action action to v3.1.0 by @renovate in #2338
• Delete classic mode clustermesh commands to get ready for v0.16 release by @michi-covalent in #2340
• connectivity: Remove --delete-cilium-pod-on-nodes flag by @michi-covalent in #2336
• Display formatted status during status wait by @raphink in #2261
• docs: Update version matrix by @sayboras in #2337
• Remove unused things by @michi-covalent in #2345
• uninstall: when --wait is specified, use foreground deletion. by @tommyp1ckles in #2344
• helm: Remove Get and GetParameter by @michi-covalent in #2349
• Remove golang.org/x/mod/semver dependency by @michi-covalent in #2347
• chore(deps): update all github action dependencies (patch) by @renovate in #2330
• refactor: Remove internal/utils/utils.go by @michi-covalent in #2348
• Remove --cluster-name flag by @michi-covalent in #2351
• fix(deps): update module github.com/prometheus/common to v0.49.0 by @renovate in #2354
• fix(deps): update module github.com/go-openapi/strfmt to v0.22.1 by @renovate in #2353
• refactor: Move ctrlcreader.go under /k8s/internal/ by @michi-covalent in #2346
• fix(deps): update module github.com/stretchr/testify to v1.9.0 by @renovate in #2358
• action: Add go-mod-directory parameter by @michi-covalent in #2359
• vendor: Pick up cilium/cilium v1.16.0-pre.0 by @michi-covalent in #2360
• sniffer: always dump captured packets in assert mode by @giorio94 in #2350
• sysdump: Export Hooks and InitSysdumpFlags by @michi-covalent in #2361
• chore(deps): update actions/download-artifact action to v4.1.4 by @renovate in #2357
• Move the CLI version string to the default package by @michi-covalent in #2362
• Connectivity test factory component. by @viktor-kurchenko in #2322
• Remove duplicate imports and enable stylecheck linter to prevent them by @tklauser in #2364
• Add error log check exception for leader election errors. by @tommyp1ckles in #2363
• Prepare for v0.16.0 release by @michi-covalent in #2366

New Contributors

• @margamanterola made their first contribution in #2300
• @bimmlerd made their first contribution in #2332

Full Changelog: v0.15.23...v0.16.0

Release v0.15.23

What's Changed

• gateway: Upgrade API version by @sayboras in #2285
• chore(deps): update dependency kubernetes-sigs/kind to v0.21.0 by @renovate in #2284
• IPsec key rotation command. by @viktor-kurchenko in #2266
• IPsec key status command implementation. by @viktor-kurchenko in #2287
• AWS OIDC instead of access key. by @viktor-kurchenko in #2297
• Remove no longer necessary step from the external workloads installation script generation process by @giorio94 in #2275
• Enable no-errors-in-logs check by default, and extend it to all Cilium components by @giorio94 in #2184
• chore(deps): update golangci/golangci-lint-action action to v4 by @renovate in #2295
• chore(deps): update helm/kind-action action to v1.9.0 by @renovate in #2296
• chore(deps): update golang docker tag to v1.22.0 by @renovate in #2289
• fix(deps): update module golang.org/x/mod to v0.15.0 by @renovate in #2294
• chore(deps): update go to v1.22.0 (minor) by @renovate in #2293
• chore(deps): update all github action dependencies (patch) by @renovate in #2286
• chore(deps): update golangci/golangci-lint docker tag to v1.56.1 by @renovate in #2290
• IPsec key rotation with algorithm change support. by @viktor-kurchenko in #2291
• chore: Amend connectivity tests for OpenShift by @fgiloux in #2303
• Increase timeouts in AKS and GKE GHA workflows by @giorio94 in #2307
• gha: increase GKE disk size in external workloads workflow to 15GB by @giorio94 in #2301
• Prepare for v0.15.23 release by @michi-covalent in #2302

New Contributors

• @fgiloux made their first contribution in #2303

Full Changelog: v0.15.22...v0.15.23

Release v0.15.22

What's Changed

• Update stable release to v0.15.21 by @michi-covalent in #2277
• Encryption status sub command. by @viktor-kurchenko in #2212
• connectivity: fix panic if the cilium-health test fails by @giorio94 in #2276
• chore(deps): update nick-invision/retry action to v3 by @renovate in #2278
• fix(deps): update module github.com/evanphx/json-patch to v5.9.0+incompatible by @renovate in #2271
• chore(deps): update dependency cilium/cilium to v1.15.0 by @renovate in #2279
• fix(deps): update module github.com/cilium/cilium to v1.15.0 by @renovate in #2280
• chore(deps): update docker.io/library/golang:1.21.6-alpine3.19 docker digest to a6a7f1f by @renovate in #2269
• fix(deps): update all go dependencies main by @renovate in #2282
• README.md: Update the title by @michi-covalent in #2281
• Fixes cilium clustermesh disconnect by @littlejo in #2185
• Prepare for v0.15.22 release by @michi-covalent in #2283

New Contributors

• @littlejo made their first contribution in #2185

Full Changelog: v0.15.21...v0.15.22

What's Changed

• Update stable release to v0.15.21 by @michi-covalent in #2277
• Encryption status sub command. by @viktor-kurchenko in #2212
• connectivity: fix panic if the cilium-health test fails by @giorio94 in #2276
• chore(deps): update nick-invision/retry action to v3 by @renovate in #2278
• fix(deps): update module github.com/evanphx/json-patch to v5.9.0+incompatible by @renovate in #2271
• chore(deps): update dependency cilium/cilium to v1.15.0 by @renovate in #2279
• fix(deps): update module github.com/cilium/cilium to v1.15.0 by @renovate in #2280
• chore(deps): update docker.io/library/golang:1.21.6-alpine3.19 docker digest to a6a7f1f by @renovate in #2269
• fix(deps): update all go dependencies main by @renovate in #2282
• README.md: Update the title by @michi-covalent in #2281
• Fixes cilium clustermesh disconnect by @littlejo in #2185
• Prepare for v0.15.22 release by @michi-covalent in #2283

New Contributors

• @littlejo made their first contribution in #2185

Full Changelog: v0.15.21...v0.15.22

Release v0.15.21

What's Changed

• Update stable release to v0.15.20 by @tklauser in #2229
• Bump alpine images to 3.19 by @tklauser in #2225
• clustermesh: fix hardcode at service type by @ii2day in #2230
• refactor: improve error messaging for version command by @ssttehrani in #2231
• bgp: Add command for retrieving bgp routes by @rastislavs in #2201
• Add host to pod tests to the connectivity suite by @giorio94 in #2234
• chore(deps): update actions/upload-artifact action to v4.1.0 by @renovate in #2235
• connectivity: only wait for daemonsets if needed by @neoaggelos in #2237
• chore(deps): update azure/login action to v1.6.1 by @renovate in #2239
• fix(deps): update module github.com/cilium/cilium to v1.15.0-rc.1 by @renovate in #2246
• Extract and generalize the sniffer logic used by encryption tests for easier reusability by @giorio94 in #2248
• chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 83fc333 by @renovate in #2244
• bgp: routes CLI - update min. cilium version, use cilium binary by @rastislavs in #2251
• chore(deps): update actions/upload-artifact action to v4.2.0 by @renovate in #2243
• sysdump: don't specify --follow while collecting hubble flows by @giorio94 in #2240
• make: allow building with debug symbols by @ldelossa in #2238
• chore(deps): update docker.io/library/busybox:stable-glibc docker digest to e046063 by @renovate in #2253
• Go workflow: Remove Cross-build step by @michi-covalent in #2255
• Go workflow: Add merge_group trigger by @michi-covalent in #2254
• chore(deps): update all github action dependencies to v2.1.0 (minor) by @renovate in #2257
• Minor improvements concerning the tunnel feature determination for connectivity tests by @giorio94 in #2247
• Fix status exit code by @ttretau in #2233
• connectivity: add unknown ICMPv4 code as expected drop reason by @giorio94 in #2242
• Simplify executing generic checks as part of the connectivity suite by @giorio94 in #2250
• fix(deps): update all go dependencies main by @renovate in #2245
• Retrieve CiliumNodes in connectivity tests context, and use them to determine PodCIDRs by @giorio94 in #2249
• bgp: enhance defaulting of bgp routes command by @rastislavs in #2256
• chore(deps): update docker.io/library/golang:1.21.6-alpine3.19 docker digest to 51a7800 by @renovate in #2263
• chore(deps): update golang:1.21.6-alpine3.19 docker digest to 29fd37e by @renovate in #2259
• chore(deps): update golang:1.21.6-alpine3.19 docker digest to a6a7f1f by @renovate in #2268
• chore(deps): update dependency cilium/cilium to v1.14.6 by @renovate in #2260
• chore(deps): update actions/upload-artifact action to v4.3.0 by @renovate in #2258
• fix(deps): update module google.golang.org/grpc to v1.61.0 by @renovate in #2264
• Unbreak the EKS (tunnel) CI workflow reverting a no-longer necessary workaround by @giorio94 in #2273
• hooks: split feature detection from setup and validation by @giorio94 in #2270
• Prepare for v0.15.21 release by @michi-covalent in #2272

New Contributors

• @ii2day made their first contribution in #2230
• @ssttehrani made their first contribution in #2231
• @rastislavs made their first contribution in #2201
• @neoaggelos made their first contribution in #2237
• @ttretau made their first contribution in #2233

Full Changelog: v0.15.20...v0.15.21

Release v0.15.20

What's Changed

• fix(deps): update module helm.sh/helm/v3 to v3.13.3 by @renovate in #2189
• fix(deps): update all go dependencies main by @renovate in #2188
• chore(deps): update dependency cilium/cilium to v1.14.5 by @renovate in #2182
• chore(deps): update module golang.org/x/crypto to v0.17.0 [security] by @renovate in #2196
• internal: export json/yaml utils by @jibi in #2198
• chore(deps): update module github.com/containerd/containerd to v1.7.11 [security] by @renovate in #2200
• defaults: add 'Host datapath not ready' to expected drop reasons by @ti-mo in #2206
• tests: egressgw: minor improvements and clean ups by @jibi in #2063
• Drop cilium endpoint verification. by @viktor-kurchenko in #2205
• connectivity: don't configure pod port information when unused by @giorio94 in #2194
• Make cilium clustemesh status compatible with external kvstore by @giorio94 in #2199
• Cilium-cli - fixed spelling mistake in "install" help output by @saintdle in #2211
• fix(deps): update all go dependencies main (patch) by @renovate in #2209
• Enable running connectivity tests requiring a node without Cilium in combination with clustermesh by @giorio94 in #2191
• chore(deps): update azure/login action to v1.6.0 by @renovate in #2213
• chore(deps): update quay.io/cilium/alpine-curl docker tag to v1.9.0 by @renovate in #2215
• chore(deps): update golang:1.21.5-alpine3.18 docker digest to c157305 by @renovate in #2202
• chore(deps): update google-github-actions/setup-gcloud action to v2.0.1 by @renovate in #2203
• chore(deps): update docker.io/library/golang:1.21.5-alpine3.18 docker digest to d8b9994 by @renovate in #2207
• chore(deps): update all github action dependencies to v4 (major) by @renovate in #2187
• fix(deps): update all go dependencies main by @renovate in #2208
• Make connectivity test pods terminate quickly by @giorio94 in #2195
• chore(deps): update google-github-actions/auth action to v2.0.1 by @renovate in #2218
• chore(deps): update actions/download-artifact action to v4.1.0 by @renovate in #2219
• chore(deps): update golang docker tag to v1.21.6 by @renovate in #2221
• defaults: Ignore XfrmInStateInvalid errors if rare by @pchaigno in #2216
• chore(deps): update go to v1.21.6 (patch) by @renovate in #2223
• chore(deps): update quay.io/cilium/json-mock docker tag to v1.3.8 by @renovate in #2214
• chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 51d373b by @renovate in #2217
• ci: unique artifact name for junit reports in kind workflow by @tklauser in #2226
• ci: remove unnecessary steps unlabeling nodes in kind workflow by @tklauser in #2224
• chore(deps): update actions/download-artifact action to v4.1.1 by @renovate in #2227
• Prepare for v0.15.20 release by @tklauser in #2228

Full Changelog: v0.15.19...v0.15.20

Release v0.15.19

What's Changed

• Update stable release to v0.15.18 by @michi-covalent in #2179
• Move perf test command to separate subcommand by @marseel in #2168
• check: add third client scheduled on a different node by @jibi in #2183
• connectivity: Ignore expected XFRM errors by @pchaigno in #2190
• chore(deps): update docker.io/library/busybox:stable-glibc docker digest to ee22a58 by @renovate in #2192
• Prepare for v0.15.19 release by @michi-covalent in #2193

Full Changelog: v0.15.18...v0.15.19