Release v0.14.7

What's Changed

• fix(deps): update module github.com/cilium/cilium to v1.14.0-snapshot.3 by @renovate in #1690
• renovate: ignore pflag Go mod updates by @tklauser in #1691
• chore(deps): update golangci/golangci-lint docker tag to v1.53.1 by @renovate in #1695
• Do not call utils.CheckVersion() in Helm mode by @michi-covalent in #1697
• chore(deps): update golangci/golangci-lint docker tag to v1.53.2 by @renovate in #1698
• chore(deps): update golangci/golangci-lint-action action to v3.5.0 by @renovate in #1696
• Update stable release to v0.14.6 by @tklauser in #1692
• connectivity: Ability to add custom annotations to test deployment by @gandro in #1687
• mutual-auth: Update the terminology by @sayboras in #1673
• chore(deps): update all github action dependencies (minor) by @renovate in #1705
• status: Print Helm chart version in Helm mode by @michi-covalent in #1703
• fix(deps): pin dependencies by @renovate in #1689
• Make CI test resources unique for retries. by @viktor-kurchenko in #1699
• Helm mode: Use Helm chart version as running version by @michi-covalent in #1707
• helm mode: add implementation for clustermesh connect by @asauber in #1628
• install: Add node affinity for Operator by @sayboras in #1708
• fix(deps): update module github.com/cilium/hubble to v0.11.6 by @renovate in #1711
• External workloads CI fixed. by @viktor-kurchenko in #1709
• sysdump: gather tetragon namespaced policies by @kkourt in #1694
• chore(deps): update dependency go to v1.20.5 by @renovate in #1710
• chore(deps): update docker/build-push-action action to v4.1.0 by @renovate in #1712
• chore(deps): update actions/checkout action to v3.5.3 by @renovate in #1713
• chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 2a6835e by @renovate in #1714
• chore(deps): update golangci/golangci-lint-action action to v3.6.0 by @renovate in #1715
• helm mode: Handle azure.resourceGroup Helm value by @michi-covalent in #1716
• Prepare for v0.14.7 release by @michi-covalent in #1721

New Contributors

• @viktor-kurchenko made their first contribution in #1699

Full Changelog: v0.14.6...v0.14.7

Release v0.14.6

What's Changed

• Update stable release to v0.14.5 by @tklauser in #1670
• Makefile: fix golangci-lint renovate datasource annotation by @tklauser in #1668
• chore(deps): update docker.io/coredns/coredns docker tag to v1.10.1 by @renovate in #1669
• connectivity: add full egress gateway test suite by @jibi in #1657
• Various connectivity and install fixes by @brb in #1677
• connectivity/check: store metrics by pointer in TestMetricsIncrease by @tklauser in #1679
• fix(deps): update module github.com/stretchr/testify to v1.8.4 by @renovate in #1682
• CI: Change multicluster provisioning to none blocking mode by @brlbil in #1680
• CI: Simplify Junit uploads by @brlbil in #1681
• fix(deps): pin dependencies by @renovate in #1661
• chore(deps): update aws-actions/configure-aws-credentials action to v2.1.0 by @renovate in #1684
• multicluster tests: simplify secret rename logic by @asauber in #1685
• Update default Cilium version to 1.13.3 by @tklauser in #1686
• Prepare for v0.14.6 release by @jibi in #1678

Full Changelog: v0.14.5...v0.14.6

Release v0.14.5

What's Changed

• connectivity: Fix some v0.14.4 failures by @brb in #1660
• Update stable release to v0.14.4 by @michi-covalent in #1662
• renovate: add renovate/stop-updating label on renovate's PRs by @tklauser in #1663
• connectivity/check: pass metrics to metricsIncrease by pointer by @tklauser in #1664
• sysdump: refactor submitTetragonBugtoolTasks to take defaults as parameters by @tklauser in #1665
• renovate: add annotations for connectivity test images by @tklauser in #1667
• Prepare for v0.14.5 release by @tklauser in #1666

Full Changelog: v0.14.4...v0.14.5

Release v0.14.4

What's Changed

• helm mode: Add EKS test coverage by @michi-covalent in #1638
• Add support for CiliumCIDRGroup CRD by @christarazi in #1537
• helm mode: Add EKS tunnel mode test coverage by @michi-covalent in #1639
• Add hooks to use cilium-cli as a package by @pippolo84 in #1609
• sysdump: Don't save cilium-etcd-secrets by @michi-covalent in #1634
• connectivity: Skip IPv6 requests in north-south-loadbalancing-with-l7-policy when running on < 1.14.0 Cilium by @jschwinger233 in #1629
• helm mode: Add external workloads test coverage by @michi-covalent in #1640
• fix(deps): pin dependencies by @renovate in #1644
• fix(deps): update module github.com/stretchr/testify to v1.8.3 by @renovate in #1645
• helm mode: autodetect service parameters for clustermesh by @asauber in #1642
• ci: fix gke network starvation by @brlbil in #1654
• Support for dedicated Cilium Envoy DaemonSet by @mhofstetter in #1546
• Add Prometheus metrics validation by @doniacld in #1575
• cli: Export Version var to be set externally by @pippolo84 in #1646
• check: make (Service)Address() return an IP address by @jibi in #1651
• check: update tunneling detection logic by @jibi in #1655
• connectivity: Automatically install IP routes on nodes w/o Cilium for from CIDR tests AND get rid of --datapath by @brb in #1579
• upgrade: Check for error before accessing release by @michi-covalent in #1637
• Allow to pass --insecure to curl by @sathieu in #1564
• Add GatewayAPI resources to sysdump by @meyskens in #1569
• docs: Add an example for setting image.override by @michi-covalent in #1636
• chore(deps): update docker.io/library/busybox:stable-glibc docker digest to bf30051 by @renovate in #1650
• Makefile: bump Go to v1.20.4 for release target by @tklauser in #1658
• connectivity: add property flag for junit by @brlbil in #1656
• Prepare for v0.14.4 release by @tklauser in #1659

Full Changelog: v0.14.3...v0.14.4

Release v0.14.3

What's Changed

• helm mode: add additional deprecated secret logic, and fix clustermesh connect for helm mode by @asauber in #1551
• Configure Renovate by @tklauser in #1582
• .github/workflows: bump AKS BYOCNI workflow timeout by @tklauser in #1593
• renovate: fix invalid JSON syntax by @tklauser in #1594
• renovate: fix invalid whitespace characters by @tklauser in #1596
• renovate configuration follow-ups by @tklauser in #1600
• Update stable release to v0.14.2 by @tklauser in #1591
• Don't enable nodeinit on EKS when not needed by @nebril in #1428
• Remove az-binary check by @michi-covalent in #1595
• Add junit output to connectivity test by @brlbil in #1590
• Farewell dependabot 👋 by @tklauser in #1605
• Add a function to check if the CLI is in Helm mode by @michi-covalent in #1606
• chore(deps): update all github action dependencies (patch) by @renovate in #1607
• chore(deps): update dependency go to v1.20.4 by @renovate in #1601
• chore(deps): update google-github-actions/setup-gcloud action to v1.1.1 by @renovate in #1610
• .github/workflows: add missing GH action version annotations by @tklauser in #1611
• chore(deps): update google/mirror-branch-action digest to 884625c by @renovate in #1598
• fix(deps): update all go dependencies main (patch) by @renovate in #1603
• fix(deps): pin dependencies by @renovate in #1597
• unit test: Restore the original env variable using defer by @michi-covalent in #1612
• Add helm mode test coverage for AKS BYOCNI by @michi-covalent in #1578
• fix(deps): update module gopkg.in/yaml.v2 to v3 by @renovate in #1614
• uninstall: allow ciliumVersion to start with "v" by @asauber in #1617
• renovate: schedule Go module updates once a week by @tklauser in #1616
• chore(deps): update google/mirror-branch-action digest to 30c52ee by @renovate in #1618
• fix(deps): pin dependencies by @renovate in #1613
• fix(deps): pin dependencies by @renovate in #1626
• helm mode: Clarify upgrade command by @michi-covalent in #1619
• fix(deps): pin dependencies by @renovate in #1630
• Remove last-applied-configuration from etcd-secret in sysdump by @marseel in #1631
• chore(deps): update actions/setup-go action to v4.0.1 by @renovate in #1632
• build(deps): bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible by @dependabot in #1635
• chore(deps): update helm/kind-action action to v1.7.0 by @renovate in #1633
• Prepare for v0.14.3 release by @michi-covalent in #1641

New Contributors

• @renovate made their first contribution in #1607

Full Changelog: v0.14.2...v0.14.3

Release v0.14.2

What's Changed

• Update stable release to v0.14.1 by @tklauser in #1572
• README.md: Add upgrade command samples by @michi-covalent in #1573
• Handle OCI repositories by @michi-covalent in #1576
• go.mod, vendor: bump google.golang.org/grpc from 1.54.0 to 1.55.0 by @dependabot in #1577
• connectivity: add basic egress gateway test by @jibi in #1555
• suite: disable KNP tests when endpoint routes and IPv6 are enabled by @jibi in #1584
• Remove AKS Azure IPAM test coverage by @michi-covalent in #1580
• connectivity: enable outside to nodeport via IPv6 when IPsec is enabled by @jschwinger233 in #1581
• connectivity: Fix IPv6 skipping when EP routes are on by @brb in #1587
• Revert "suite: disable KNP tests when endpoint routes and IPv6 are enabled" by @jibi in #1588
• Prepare for v0.14.2 release by @jibi in #1589

Full Changelog: v0.14.1...v0.14.2

Release v0.14.1

What's Changed

• Update stable release to v0.14.0 by @michi-covalent in #1535
• Remove "Release Date" column from the release table by @michi-covalent in #1536
• connectivity: Add test cases for Ingress by @sayboras in #1533
• fixes versioncheck for l7 proxy disabling with wireguard encryption by @ShiroDN in #1529
• connectivity: Retry getting the policy revision by @pchaigno in #1541
• connectivity/tests: omit IPs and vendor name from test names by @tklauser in #1545
• Allow the Helm timeout to be set on uninstall by @meyskens in #1550
• helm mode: add clustermesh enable/disable by @asauber in #1527
• sysdump: Fix writing to absolute path by @pchaigno in #1552
• connectivity: Retry on inconclusive results by @pchaigno in #1543
• build: update golangci-lint to version 1.52.2 by @mhofstetter in #1544
• Address wording an style nits of #1550 by @meyskens in #1553
• multicluster CI: Use LoadBalancer for GKE etcd by @asauber in #1556
• helm mode: add workflow for clustermesh via upgrade by @asauber in #1515
• Add GHA to install Cilium CLI executable by @brb in #1563
• helm mode: Make Helm chart repository configurable by @michi-covalent in #1560
• connectivity: test accessing NodePort from outside with L7 policy by @jschwinger233 in #1547
• Update k8s deps to v1.27.1 by @tklauser in #1548
• Replace versioncheck.Version with semver.ParseTolerant by @michi-covalent in #1561
• Dockerfile: Bump library/golang from 1.20.3-alpine3.16 to 1.20.4-alpine3.16 by @dependabot in #1568
• connectivity: add retry to external targets by @brlbil in #1540
• connectivity: Add tests for Service Account related rules by @sayboras in #1532
• connectivity: report peer name in "no flows recorded" log message by @tklauser in #1570
• Prepare for v0.14.1 release by @tklauser in #1571

New Contributors

• @ShiroDN made their first contribution in #1529
• @jschwinger233 made their first contribution in #1547

Full Changelog: v0.14.0...v0.14.1

Release v0.14.0

🚀 New Feature: helm installation mode

Feature Status: Experimental

This release introduces a new opt-in helm installation mode. This mode enables you to use cilium-cli and helm interchangeably to manage your Cilium installations, while taking advantage of cilium-cli's advanced features such as Cilium configuration auto-detection.

Please see README.md for details.

What's Changed

• Update stable release to v0.13.2 by @tklauser in #1466
• Add a l7 header replace test by @meyskens in #1463
• Tetragon Tracing Policies by @soggiest in #1467
• Replace deprecated flags with --helm-set by @michi-covalent in #1474
• ci: bump actions/checkout from 3.4.0 to 3.5.0 by @dependabot in #1471
• Sysdump: Add missing Cilium CRDs by @soggiest in #1468
• go.mod, vendor: bump google.golang.org/grpc from 1.53.0 to 1.54.0 by @dependabot in #1469
• Dockerfile: Bump library/golang from 50e46c1 to b1f83bc by @dependabot in #1478
• go.mod, vendor: bump github.com/go-openapi/strfmt from 0.21.5 to 0.21.7 by @dependabot in #1477
• Dockerfile: Bump library/golang from b1f83bc to 08bd1aa by @dependabot in #1481
• Dockerfile: Bump library/golang from 08bd1aa to 1d7fec2 by @dependabot in #1483
• Add Helm-based install / uninstall commands by @michi-covalent in #1475
• helm mode: Add hubble enable / disable commands by @michi-covalent in #1479
• go.mod, vendor: bump golang.org/x/mod from 0.9.0 to 0.10.0 by @dependabot in #1488
• go.mod, vendor: bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by @dependabot in #1487
• Dockerfile: Bump library/golang from 1.20.2-alpine3.16 to 1.20.3-alpine3.16 by @dependabot in #1491
• install: Support --nodes-without-cilium in Helm install mode by @christarazi in #1498
• vendor: get latest cilium by @harsimran-pabla in #1490
• go.mod, vendor: bump github.com/cloudflare/cfssl from 1.6.3 to 1.6.4 by @dependabot in #1497
• Use --set-string for node affinity by @christarazi in #1501
• helm mode install: Add --dry-run / --dry-run-helm-values flags by @michi-covalent in #1502
• Add CRD feature and add KNP tests by @doniacld in #1470
• ci: bump actions/checkout from 3.5.0 to 3.5.1 by @dependabot in #1508
• connectivity: Make detected Cilium Agent version available for feature detection by @jrajahalme in #1510
• go.mod, vendor: bump helm.sh/helm/v3 from 3.11.2 to 3.11.3 by @dependabot in #1509
• Add connectivity tests for auth by @meyskens in #1505
• BGP: Introduce new cli to get bgp peering state by @harsimran-pabla in #1500
• ci: bump actions/checkout from 3.5.1 to 3.5.2 by @dependabot in #1512
• Implement FromCIDR ingress tests by @christarazi in #1494
• Implement cilium upgrade using Helm by @asauber in #1492
• misc: get rid of Go label breaks & gotos by @mhofstetter in #1511
• Use Cilium v1.13.2 by default by @tklauser in #1517
• ci: bump google-github-actions/auth from 1.0.0 to 1.1.0 by @dependabot in #1516
• Add documentation for helm installation mode by @michi-covalent in #1504
• Rename master branch to main by @tklauser in #1519
• .github: add mirror from main -> master by @tklauser in #1525
• cli: adapt helm chart cleanup of deprecated hubble values by @mhofstetter in #1520
• defaults: bump json-mock to 1.3.5 by @jibi in #1528
• go.mod, vendor: bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible by @dependabot in #1530
• Prepare for v0.14.0 release by @michi-covalent in #1531

New Contributors

• @harsimran-pabla made their first contribution in #1490
• @doniacld made their first contribution in #1470
• @asauber made their first contribution in #1492
• @mhofstetter made their first contribution in #1511

Full Changelog: v0.13.2...v0.14.0

Release v0.13.2

What's Changed

• .github/workflows: use tag name instead of fully-formed ref in release name by @tklauser in #1435
• RELEASE.md: adjust release instructions after change to new release action by @tklauser in #1437
• go.mod, vendor: bump golang.org/x/mod from 0.8.0 to 0.9.0 by @dependabot in #1439
• Update stable release to v0.13.1 by @tklauser in #1436
• Update Go to 1.20.1 by @tklauser in #1434
• ingress: Create endpoint object by @sayboras in #1432
• Adds a test case for L7 policy with TLS by @meyskens in #1406
• ci: bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 by @dependabot in #1441
• go.mod, vendor: bump helm.sh/helm/v3 from 3.11.1 to 3.11.2 by @dependabot in #1443
• Dockerfile: Bump library/golang from 1.20.1-alpine3.16 to 1.20.2-alpine3.16 by @dependabot in #1444
• helm: fix incorrect log error formatting directive. by @tommyp1ckles in #1451
• ci: bump docker/setup-buildx-action from 2.4.1 to 2.5.0 by @dependabot in #1449
• install: Generate resource quotas from Helm chart by @michi-covalent in #1445
• connectivity: allow to restrict connectivity test pods using nodeSelector by @tklauser in #1446
• Dockerfile: Bump library/golang from 0848e98 to 50e46c1 by @dependabot in #1450
• Allow installing Cilium snapshot versions by @tklauser in #1452
• refactor: Break generateManifests() into smaller functions by @michi-covalent in #1453
• Update Go to 1.20.2 by @tklauser in #1454
• clustermesh: correctly mount the etcd data dir in the init container by @giorio94 in #1457
• ci: bump actions/setup-go from 3.5.0 to 4.0.0 by @dependabot in #1455
• ci: bump actions/checkout from 3.3.0 to 3.4.0 by @dependabot in #1456
• uninstall: set "cni.uninstall" to true on uninstall by @squeed in #1418
• Pick up Cilium v1.13.1 by @michi-covalent in #1458
• connectivity: Report IP families that are being tested by @Neilblaze in #1440
• go.mod, vendor: bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.5 by @dependabot in #1460
• vendor: Pick up the latest cilium by @michi-covalent in #1464
• Prepare for v0.13.2 release by @michi-covalent in #1465

New Contributors

• @meyskens made their first contribution in #1406

Full Changelog: v0.13.1...v0.13.2

Release v0.13.1

What's Changed

• go.mod, vendor: bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by @dependabot in #1420
• connectivity tests: fix issue on IPv6-only clusters by @giorio94 in #1414
• Update stable release to v0.13.0 by @tklauser in #1412
• enabled l7Proxy & removed err.log message for WireGuard by @Neilblaze in #1419
• clustermesh: update etcd version to v3.5.4 by @kahirokunn in #1421
• hubble: Patch Cilium DaemonSet with hubble-metrics port by @lambdanis in #1423
• go.mod, vendor: pull in latest cilium charts for v1.14.0-snapshot.0 by @tklauser in #1425
• Add profiling data(cpu/heap) of cilium agent to sysdump. by @marseel in #1424
• Prepare for v0.13.1 release by @tklauser in #1427
• Dockerfile: Bump library/golang from 9266e89 to bf83658 by @dependabot in #1431
• .github/workflows: use softprops/action-gh-release in release workflow by @tklauser in #1433

New Contributors

• @Neilblaze made their first contribution in #1419
• @kahirokunn made their first contribution in #1421
• @lambdanis made their first contribution in #1423

Full Changelog: v0.13.0...v0.13.1