|
1 | 1 | # Changelog |
2 | 2 |
|
| 3 | +## v1.19.6 |
| 4 | + |
| 5 | +Summary of Changes |
| 6 | +------------------ |
| 7 | + |
| 8 | +**Minor Changes:** |
| 9 | +* datapath/l2responder: use l3 sockets for solicited node multicast signaling (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#46332, @bersoare) |
| 10 | +* gateway-api: add support for configuring Gateway access logs through the new `spec.telemetry.accessLogs` field in CiliumGatewayClassConfig. (Backport PR cilium/cilium#46933, Upstream PR cilium/cilium#46403, @arybolovlev) |
| 11 | + |
| 12 | +**Bugfixes:** |
| 13 | +* [v1.19] Fix policy service label selector handling (cilium/cilium#46946, @fristonio) |
| 14 | +* bpf: fix ipv6 neighbor solicitation handling in host firewall (Backport PR cilium/cilium#46669, Upstream PR cilium/cilium#46325, @atykhyy) |
| 15 | +* doublewrite: Don't run CRD backend with real handler when reading from KVStore (Backport PR cilium/cilium#47181, Upstream PR cilium/cilium#47144, @HadrienPatte) |
| 16 | +* endpoint: Fix race when reading endpoint properties (Backport PR cilium/cilium#47181, Upstream PR cilium/cilium#46991, @gandro) |
| 17 | +* Fix `cilium_operator_unmanaged_pods` gauge reporting 0 on reconcile cycles where an unmanaged pod is restarted. (Backport PR cilium/cilium#46975, Upstream PR cilium/cilium#46668, @Suyash1700) |
| 18 | +* Fix a bug which could lead to stale hostport entries if a pod was deleted and immediately recreated in host network. (Backport PR cilium/cilium#46793, Upstream PR cilium/cilium#46747, @giorio94) |
| 19 | +* Fix a bug which could lead to stale hostport entries if a pod was deleted and immediately recreated in host network. (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#46747, @giorio94) |
| 20 | +* Fix a regression that could cause established connections to a Pod to be briefly dropped during Cilium agent restart, upgrade, or downgrade, while the agent was restoring the Pod's network policy. (Backport PR cilium/cilium#46974, Upstream PR cilium/cilium#46927, @aanm) |
| 21 | +* Fix allowedRoute namespace and kind restrictions on multi-listener Gateways. (Backport PR cilium/cilium#46826, Upstream PR cilium/cilium#45693, @eufriction) |
| 22 | +* Fix bug that left the host firewall enabled in the live ConfigMap when disabling hostFirewall.enabled (toggling it from true to false) via Helm. (Backport PR cilium/cilium#46669, Upstream PR cilium/cilium#44748, @shibaPuppy) |
| 23 | +* Fix ClusterMesh service affinity annotation `service.cilium.io/affinity: "none"` incorrectly dropping all remote backends, causing traffic blackhole when no local endpoints exist. (Backport PR cilium/cilium#46691, Upstream PR cilium/cilium#46635, @mkamadeus) |
| 24 | +* Fix ctmap gc duration metric recording (Backport PR cilium/cilium#46975, Upstream PR cilium/cilium#46873, @fristonio) |
| 25 | +* Fix incorrect policy denials for traffic to L7 load balanced services when remote identity changes (Backport PR cilium/cilium#47002, Upstream PR cilium/cilium#46821, @fristonio) |
| 26 | +* Fix potential hangs caused by Netlink errors in filterAndDestroySockets. (Backport PR cilium/cilium#47181, Upstream PR cilium/cilium#46967, @ysksuzuki) |
| 27 | +* Fix regression preventing Cilium from starting when configured in kvstore mode with KPR enabled, if etcd is behind a Kubernetes service (Backport PR cilium/cilium#47181, Upstream PR cilium/cilium#46444, @giorio94) |
| 28 | +* Fix the UDP tunnel check in the BIG TCP probe. (Backport PR cilium/cilium#46793, Upstream PR cilium/cilium#46710, @gentoo-root) |
| 29 | +* Fix the UDP tunnel check in the BIG TCP probe. (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#46710, @gentoo-root) |
| 30 | +* Fixes a bug where Hubble policy correlation does not work for port ranges. (Backport PR cilium/cilium#46793, Upstream PR cilium/cilium#46643, @squeed) |
| 31 | +* Fixes a bug where Hubble policy correlation does not work for port ranges. (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#46643, @squeed) |
| 32 | +* gateway-api: Add Gateway check for when hostNetwork is enabled (Backport PR cilium/cilium#46837, Upstream PR cilium/cilium#46350, @xtineskim) |
| 33 | +* gateway-api: Each HTTPS and TLS passthrough port now receives its own Envoy listener and RouteConfiguration. (Backport PR cilium/cilium#46826, Upstream PR cilium/cilium#44889, @eufriction) |
| 34 | +* ipam/multi-pool: Do now wait for zero prealloc request (Backport PR cilium/cilium#47181, Upstream PR cilium/cilium#46867, @pippolo84) |
| 35 | +* operator: Fix nil-pointer panic in CiliumNode GC (Backport PR cilium/cilium#47181, Upstream PR cilium/cilium#47127, @HadrienPatte) |
| 36 | + |
| 37 | +**CI Changes:** |
| 38 | +* .github: Generate CI binaries with correct module version (Backport PR cilium/cilium#47099, Upstream PR cilium/cilium#46742, @joestringer) |
| 39 | +* chore: check-cilium-envoy-image.sh should get values from Makefile.va… (Backport PR cilium/cilium#46920, Upstream PR cilium/cilium#46840, @sekhar-isovalent) |
| 40 | +* ci: Auth to image registry in clustermesh upgrade workflow (Backport PR cilium/cilium#46691, Upstream PR cilium/cilium#46632, @nebril) |
| 41 | +* ci: Remove merge_group from tests-smoke-conformance.yaml (Backport PR cilium/cilium#46888, Upstream PR cilium/cilium#46451, @nebril) |
| 42 | +* Fix workflow change detection for single-commit PRs to main (Backport PR cilium/cilium#46793, Upstream PR cilium/cilium#46684, @Demiserular) |
| 43 | +* Fix workflow change detection for single-commit PRs to main (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#46684, @Demiserular) |
| 44 | +* Further GC ratchet test fix races (Backport PR cilium/cilium#47224, Upstream PR cilium/cilium#43075, @tommyp1ckles) |
| 45 | + |
| 46 | +**Misc Changes:** |
| 47 | +* (minor) docs: update reference to aws-cli image (Backport PR cilium/cilium#46975, Upstream PR cilium/cilium#46923, @squeed) |
| 48 | +* .github: allow fork PR checkout with actions/checkout v7 (Backport PR cilium/cilium#47135, Upstream PR cilium/cilium#47133, @aanm) |
| 49 | +* [v1.19] - .github/workflows: unpin cilium/cilium self-references to track main (cilium/cilium#46613, @aanm) |
| 50 | +* [v1.19] - Reapply ".github/workflows: do not use deployments for environments" (cilium/cilium#46574, @aanm) |
| 51 | +* [v1.19] vendor: bump github.com/cilium/statedb to v0.5.9 (cilium/cilium#47083, @giorio94) |
| 52 | +* bgp: fix status condition reporting: update reasons to accurately reflect current condition state (Backport PR cilium/cilium#46920, Upstream PR cilium/cilium#46383, @martonra) |
| 53 | +* bpf: Condition ICMP SNAT on BPF masquerading and inter-cluster SNAT (Backport PR cilium/cilium#47181, Upstream PR cilium/cilium#47021, @pchaigno) |
| 54 | +* chore(deps): update all github action dependencies (v1.19) (cilium/cilium#46658, @cilium-renovate[bot]) |
| 55 | +* chore(deps): update all github action dependencies (v1.19) (cilium/cilium#46908, @cilium-renovate[bot]) |
| 56 | +* chore(deps): update all github action dependencies (v1.19) (cilium/cilium#47109, @cilium-renovate[bot]) |
| 57 | +* chore(deps): update all-dependencies (v1.19) (cilium/cilium#46906, @cilium-renovate[bot]) |
| 58 | +* chore(deps): update all-dependencies (v1.19) (cilium/cilium#47045, @cilium-renovate[bot]) |
| 59 | +* chore(deps): update aws-actions/configure-aws-credentials action to v6.2.2 (v1.19) (cilium/cilium#47124, @cilium-renovate[bot]) |
| 60 | +* chore(deps): update base-images (v1.19) (cilium/cilium#46774, @cilium-renovate[bot]) |
| 61 | +* chore(deps): update base-images to v1.25.12 (v1.19) (cilium/cilium#46982, @cilium-renovate[bot]) |
| 62 | +* chore(deps): update dependency cilium/cilium-cli to v0.19.5 (v1.19) (cilium/cilium#46726, @cilium-renovate[bot]) |
| 63 | +* chore(deps): update docker.io/library/alpine docker tag to v3.23.5 (v1.19) (cilium/cilium#46773, @cilium-renovate[bot]) |
| 64 | +* chore(deps): update docker.io/library/golang:1.25.11 docker digest to 00feed3 (v1.19) (cilium/cilium#46657, @cilium-renovate[bot]) |
| 65 | +* chore(deps): update quay.io/cilium/certgen docker tag to v0.4.6 (v1.19) (cilium/cilium#47039, @cilium-renovate[bot]) |
| 66 | +* chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.36.9-1782267392-edeb3f2af56c37c407efa1f63f0b32f595399bbc (v1.19) (cilium/cilium#46700, @cilium-renovate[bot]) |
| 67 | +* chore(deps): update quay.io/cilium/image-tester docker tag to v1783861476 (v1.19) (cilium/cilium#47122, @cilium-renovate[bot]) |
| 68 | +* chore: BYOCNI loopback for cilium (Backport PR cilium/cilium#46691, Upstream PR cilium/cilium#46646, @sekhar-isovalent) |
| 69 | +* chore: optimize building gops and cni/loopback (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#46781, @sekhar-isovalent) |
| 70 | +* ci: always set fail-fast to false on image builds (Backport PR cilium/cilium#47181, Upstream PR cilium/cilium#47064, @aanm) |
| 71 | +* ci: remove non-ariane workflows from config (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#46787, @nebril) |
| 72 | +* clustermesh: add reusable backend selector constructor (Backport PR cilium/cilium#46691, Upstream PR cilium/cilium#45648, @viktor-kurchenko) |
| 73 | +* docs: clarify Hubble static/dynamic exporter file rotation settings (Backport PR cilium/cilium#47181, Upstream PR cilium/cilium#47026, @maksymbilokur-cisco) |
| 74 | +* docs: fix note about ipv4-native-routing-cidr default value (Backport PR cilium/cilium#46793, Upstream PR cilium/cilium#46603, @rptaylor) |
| 75 | +* docs: fix note about ipv4-native-routing-cidr default value (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#46603, @rptaylor) |
| 76 | +* Egress Gateway: handle nil events (Backport PR cilium/cilium#47181, Upstream PR cilium/cilium#46476, @tommyp1ckles) |
| 77 | +* endpoint: reap restart-preserved policy map entries once ready (Backport PR cilium/cilium#47063, Upstream PR cilium/cilium#47062, @aanm) |
| 78 | +* endpoint: sync desired policy before reload on the restore path (restore-path hardening) (Backport PR cilium/cilium#47076, Upstream PR cilium/cilium#47075, @aanm) |
| 79 | +* Fix instance of cilium having incorrect specified policy_change_total failure label "failure" value which caused unnecessary warnings. (Backport PR cilium/cilium#46793, Upstream PR cilium/cilium#46388, @tommyp1ckles) |
| 80 | +* Fix instance of cilium having incorrect specified policy_change_total failure label "failure" value which caused unnecessary warnings. (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#46388, @tommyp1ckles) |
| 81 | +* fix(deps): update k8s.io/utils digest to be93311 (v1.19) (cilium/cilium#46907, @cilium-renovate[bot]) |
| 82 | +* fix(deps): update k8s.io/utils digest to cf1189d (v1.19) (cilium/cilium#47115, @cilium-renovate[bot]) |
| 83 | +* Fixed Gateway API reconciler incorrectly reporting "Accepted HTTPRoute" in the status condition message for GRPCRoute and TLSRoute resources. (Backport PR cilium/cilium#46826, Upstream PR cilium/cilium#44962, @eufriction) |
| 84 | +* gateway-api: return model from Gateway API ingestion (Backport PR cilium/cilium#46933, Upstream PR cilium/cilium#46450, @arybolovlev) |
| 85 | +* gha: fail fast in external-target provisioning scripts instead of swallowing failures (Backport PR cilium/cilium#47181, Upstream PR cilium/cilium#47085, @aanm) |
| 86 | +* Improve cilium-dbg status output of module health (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#46739, @joestringer) |
| 87 | +* loadbalancer: proxy ports are now resolved per frontend instead of per service, preventing one port from losing its L7 redirect when multiple listeners share a service. (Backport PR cilium/cilium#46826, Upstream PR cilium/cilium#45949, @eufriction) |
| 88 | +* loadbalancer: validate DSR dispatch configuration globally (Backport PR cilium/cilium#46793, Upstream PR cilium/cilium#45545, @FelipeYepez) |
| 89 | +* loadbalancer: validate DSR dispatch configuration globally (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#45545, @FelipeYepez) |
| 90 | +* Makefile: Generate full Cilium version in worktree (Backport PR cilium/cilium#46793, Upstream PR cilium/cilium#46737, @joestringer) |
| 91 | +* Makefile: Generate full Cilium version in worktree (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#46737, @joestringer) |
| 92 | +* Revert restore-path policy map changes (#46927, #47062, #47075) (Backport PR cilium/cilium#47213, Upstream PR cilium/cilium#47202, @aanm) |
| 93 | +* Upgraded cilium/ebpf to version v0.22.0 (Backport PR cilium/cilium#46845, Upstream PR cilium/cilium#46783, @dylandreimerink) |
| 94 | + |
| 95 | +**Other Changes:** |
| 96 | +* install: Update image digests for v1.19.5 (cilium/cilium#46593, @cilium-release-bot[bot]) |
| 97 | +* v1.19: gateway-api: fix sds secrets in golden tests (cilium/cilium#47229, @0xch4z) |
| 98 | + |
3 | 99 | ## v1.19.5 |
4 | 100 |
|
5 | 101 | Summary of Changes |
|
0 commit comments