Skip to content

1.15.11

Compare
Choose a tag to compare
@cilium-release-bot cilium-release-bot released this 20 Nov 10:08
· 12036 commits to main since this release
v1.15.11

Summary of Changes

Minor Changes:

  • hubble-relay: Return underlying connection errors when connecting to peer manager (Backport PR #35778, Upstream PR #35632, @chancez)

Bugfixes:

  • config: Remove superfluous warning on native routing CIDR (Backport PR #35778, Upstream PR #35738, @gandro)
  • Fix packet drops for pod-to-pod connections that pass through ingress & egress proxy when using IPsec, caused by MTU misconfiguration. (Backport PR #35586, Upstream PR #35173, @smagnani96)
  • Fix redirect from L3 device to remote endpoint via overlay network. (Backport PR #35586, Upstream PR #35165, @julianwiedmann)
  • Fixed bug which prevented IP surge allocation from working (Backport PR #35419, Upstream PR #34090, @dlapcevic)
  • ipam: Validate CiliumNode resource in ENI mode (Backport PR #35793, Upstream PR #35784, @sayboras)
  • l7lb: fix registration of flag loadbalancer-l7 (Backport PR #35778, Upstream PR #35623, @mhofstetter)

CI Changes:

Misc Changes:

  • .github/build-images-base: checkout base branch to get scripts (Backport PR #35320, Upstream PR #35236, @aanm)
  • .github: remove retention days for image digests (Backport PR #35469, Upstream PR #35457, @aanm)
  • Accurately manage the teardown sequence of an Endpoint's BPF resources (Backport PR #35786, Upstream PR #32167, @ti-mo)
  • chore(deps): update all github action dependencies (v1.15) (#35387, @cilium-renovate[bot])
  • chore(deps): update all github action dependencies (v1.15) (#35444, @cilium-renovate[bot])
  • chore(deps): update all github action dependencies (v1.15) (#35576, @cilium-renovate[bot])
  • chore(deps): update all github action dependencies (v1.15) (#35711, @cilium-renovate[bot])
  • chore(deps): update all-dependencies (v1.15) (#35442, @cilium-renovate[bot])
  • chore(deps): update all-dependencies (v1.15) (#35663, @cilium-renovate[bot])
  • chore(deps): update all-dependencies (v1.15) (#35914, @cilium-renovate[bot])
  • chore(deps): update dependency cilium/hubble to v1.16.3 (v1.15) (#35664, @cilium-renovate[bot])
  • chore(deps): update docker.io/library/golang:1.22.8 docker digest to 0ca97f4 (v1.15) (#35443, @cilium-renovate[bot])
  • chore(deps): update docker.io/library/golang:1.22.8 docker digest to b274ff1 (v1.15) (#35383, @cilium-renovate[bot])
  • chore(deps): update go to v1.22.9 (v1.15) (#35846, @cilium-renovate[bot])
  • chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1729635771-fa4efeff33a344a45e14a4068c61dc438b3d2270 (v1.15) (#35492, @cilium-renovate[bot])
  • chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.29.9-1729775735-a37f7d6081718666dab500533cfda5cecb4febf5 (v1.15) (#35547, @cilium-renovate[bot])
  • chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.7-1730450803-0a83534f8c57b4d24405b213ed4b65e4e4987d8d (v1.15) (#35715, @cilium-renovate[bot])
  • chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.7-1730965050-cd22d9ffa21eb4f214bf059bcc5d2f40f0c47882 (v1.15) (#35836, @cilium-renovate[bot])
  • cilium: Small health cleanup improvements (Backport PR #35639, Upstream PR #33700, @borkmann)
  • dnsproxy: fix error when sessionUDPFactory fails (Backport PR #35586, Upstream PR #33998, @marseel)
  • docs: Change invalid Helm option --agent.enabled with --agent=false in upgrade documentation (Backport PR #35320, Upstream PR #35288, @oneumyvakin)
  • docs: tuning: XDP LB also supports tunnel routing (Backport PR #35586, Upstream PR #35574, @julianwiedmann)
  • Envoy simplify listener setup (Backport PR #35766, Upstream PR #35642, @jrajahalme)
  • envoy: Configure internal_address_config to avoid warning log (Backport PR #35472, Upstream PR #35090, @sayboras)
  • fqdn: Skip "open ports" check for statically configured ports (Backport PR #35948, Upstream PR #33230, @gandro)
  • image: Use cilium-builder instead of golang as operator builder image (Backport PR #35586, Upstream PR #35351, @learnitall)
  • ipam: lower loglevel from error to warn if eni link list can't be listed (Backport PR #35469, Upstream PR #32602, @mhofstetter)
  • makefile: add target to install Cilium in kvstore mode (Backport PR #35909, Upstream PR #35646, @giorio94)
  • Makefile: Refactor hubble-relay target (Backport PR #35320, Upstream PR #29867, @chancez)
  • Proxy persist proxy ports (Backport PR #35684, Upstream PR #32973, @jrajahalme)
  • proxy: Ensure proxy ports are written on shutdown (Backport PR #35939, Upstream PR #35839, @jrajahalme)

Other Changes:

  • [v1.15] tests-e2e-upgrade: No longer use secondary network for test 14 (#35969, @gandro)
  • [v1.15] .github: Fix missing variable escaping in LVH command (#35893, @gandro)
  • [v1.15] envoy: Bump envoy version from 1.29.x to 1.30.x (#35564, @sayboras)
  • install: Update image digests for v1.15.10 (#35360, @cilium-release-bot[bot])

Docker Manifests

cilium

quay.io/cilium/cilium:v1.15.11@sha256:4444c963c586dd29c9219f4f984b87b7d6f7ee5c0ce650b442111a6ab602b00f

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.15.11@sha256:62a4aa3467fa94de65cc01bbbac97484edeee14f7510af7e096b51ab79a6ff71

docker-plugin

quay.io/cilium/docker-plugin:v1.15.11@sha256:3a9c057f13d9447732ac12373286d23acab5024ce39ce9797ce3b05df43a53ff

hubble-relay

quay.io/cilium/hubble-relay:v1.15.11@sha256:d352d3860707e8d734a0b185ff69e30b3ffd630a7ec06ba6a4402bed64b4456c

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.15.11@sha256:62d67aafbfdc9faa4af1c7a1cae39ae61cf151da414670d317c7e2d60820b3de

operator-aws

quay.io/cilium/operator-aws:v1.15.11@sha256:88088886ab884441c190211d25cae9056f2f4a26e9dcb857c020324062831ab6

operator-azure

quay.io/cilium/operator-azure:v1.15.11@sha256:b80f4239af8617fa5ea131cedf5c2d3e3375b91916f69e348993a535f7c1fbc3

operator-generic

quay.io/cilium/operator-generic:v1.15.11@sha256:8edf16ce4bc5c02457136cf0e7a58adf396f0880d6192ca0666f116f53f4979d

operator

quay.io/cilium/operator:v1.15.11@sha256:945b54e27f3216e35e30b66d653de0517426e14a4e9200fd10cb73f5852e1b4a