Prepare for release v1.8.10

Signed-off-by: Joe Stringer <[email protected]>
michi-covalent · May 13, 2021 · 9e5a25e · 9e5a25e
1 parent 67a6c9a
commit 9e5a25e
Show file tree

Hide file tree

Showing 25 changed files with 136 additions and 57 deletions.
diff --git a/.github/cilium-actions.yml b/.github/cilium-actions.yml
@@ -1,4 +1,4 @@
-project: "https://github.com/cilium/cilium/projects/152"
+project: "https://github.com/cilium/cilium/projects/156"
 column: "In progress"
 auto-label:
   - "kind/backports"

diff --git a/.mailmap b/.mailmap
@@ -38,6 +38,7 @@ Michael Vorburger <[email protected]>
 Neela Jacques <[email protected]> <[email protected]>
 Peiqi Shi <[email protected]>
 Philippe Lafoucrière <[email protected]>
+Roman Ptitcyn <[email protected]>
 Sean Winn <[email protected]> <[email protected]>
 Sergey Generalov <[email protected]> <[email protected]>
 Tam Mach <[email protected]>

diff --git a/AUTHORS b/AUTHORS
@@ -86,7 +86,7 @@ Ivar Lazzaro                            [email protected]
 Jaff Cheng                              [email protected]
 Jaime Caamaño Ruiz                      [email protected]
 Jan-Erik Rediger                        [email protected]
-Jarno Rajahalme                         jarno@covalent.io
+Jarno Rajahalme                         jarno@isovalent.com
 Jean Raby                               [email protected]
 Jed Salazar                             [email protected]
 Jerry J. Muzsik                         [email protected]
@@ -175,6 +175,7 @@ Rene Zbinden                            [email protected]
 Robin Hahling                           [email protected]
 Rodrigo Chacon                          [email protected]
 Romain Lenglet                          [email protected]
+Roman Ptitcyn                           [email protected]
 Ronald van Zantvoort                    [email protected]
 Ross Guarino                            [email protected]
 Rui Gu                                  [email protected]
@@ -209,6 +210,7 @@ Trevor Roberts Jr                       [email protected]
 Umesh Keerthy B S                       [email protected]
 Vadim Ponomarev                         [email protected]
 Valas Valancius                         [email protected]
+Vlad Artamonov                          [email protected]
 Vlad Gorodetsky                         [email protected]
 Vladimir Nachev                         [email protected]
 Vlad Ungureanu                          [email protected]

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,69 @@
 # Changelog
 
+## v1.8.10
+
+Summary of Changes
+------------------
+
+**Minor Changes:**
+* arp: Add retries to arping (Backport PR #15909, Upstream PR #14601, @brb)
+* Envoy is updated to release 1.15.3. (Backport PR #16115, Upstream PR #14462, @jrajahalme)
+* envoy: Move to Envoy API v3 (Backport PR #16115, Upstream PR #12331, @jrajahalme)
+* Hubble logs for HTTP responses now include HTTP response headers. (Backport PR #16105, Upstream PR #16013, @jrajahalme)
+* node-neigh: add metric to count arping requests (Backport PR #16047, Upstream PR #14816, @jaffcheng)
+* node-neigh: Locking, logging, misc improvements (Backport PR #16047, Upstream PR #15783, @brb)
+* PolicyImportErrorsTotal metric is now incremented also from k8s policy watchers (Backport PR #15892, Upstream PR #15820, @jrajahalme)
+* Store the previous Cilium's configuration options in the host (Backport PR #16092, Upstream PR #16017, @aanm)
+
+**Bugfixes:**
+* `toFQDNs` rules now allow underscores in match patterns and names (Backport PR #15819, Upstream PR #15801, @jrajahalme)
+* bpf: Fix defines in policy.h (Backport PR #15764, Upstream PR #15763, @pchaigno)
+* cilium: Encryption EKS 4.14 kernel (default) fixes (Backport PR #15602, Upstream PR #15867, @jrfastab)
+* cilium: encryption, auto-discover interface and subnet (Backport PR #15602, Upstream PR #15357, @jrfastab)
+* ctmap: do not call InitMapInfo() in init() (Backport PR #15921, Upstream PR #15590, @kkourt)
+* eni: Fix Cilium overallocating network interfaces (Backport PR #16015, Upstream PR #15911, @gandro)
+* Envoy is updated to release 1.17.3 (Backport PR #16115, Upstream PR #16102, @jrajahalme)
+* Fix aws-cni integration where pods were not being scheduled (Backport PR #16015, Upstream PR #15915, @aanm)
+* Fix channel panic from ipcache kvstore reconnect (Backport PR #15921, Upstream PR #15668, @jomenxiao)
+* Fix ethtool issues (Backport PR #15602, Upstream PR #15622, @tklauser)
+* Handle events with pod IP and node IP addresses being modified (Backport PR #15927, Upstream PR #15803, @aanm)
+* kvstore/etcd: fix etcd rate limit (QPS) not working (Backport PR #15921, Upstream PR #15742, @ArthurChiao)
+* pkg/k8s: reset k8s event lag metric on pod add (Backport PR #15921, Upstream PR #15804, @aanm)
+
+**CI Changes:**
+* bpf: Extend datapath options for K8sVerifier test (Backport PR #15764, Upstream PR #15540, @pchaigno)
+* test: Extend the clusterIP tests with policy (Backport PR #16015, Upstream PR #15928, @aditighag)
+* test: Mark GKE CI pipeline as running Linux 4.19 (Backport PR #16105, Upstream PR #14639, @pchaigno)
+* test: Skip K8sPolicy on GKE and 4.19 (Backport PR #15921, Upstream PR #15762, @pchaigno)
+
+**Misc Changes:**
+* .github: remove unnecessary docker hub credentials (Backport PR #16015, Upstream PR #15841, @aanm)
+* [v1.8]  Fix image digest preparation for release commits (#15839, @joestringer)
+* Agent: Include Cilium version in output of 'cilium status --verbose' (Backport PR #15921, Upstream PR #14492, @romanspb80)
+* arp: Set deadline for each retry (Backport PR #15909, Upstream PR #14651, @brb)
+* build(deps): bump actions/checkout from 2 to 2.3.4 (#16107, @dependabot[bot])
+* build(deps): bump docker/login-action from f3364599c6aa293cdc2b8391b1b56d0c30e45c8a to 1.9.0 (#15930, @dependabot[bot])
+* build(deps): bump docker/setup-buildx-action from 012185ccbeb554a7f5f987bea0f1a73519b3cdf5 to 1.3.0 (#15954, @dependabot[bot])
+* build(deps): bump docker/setup-buildx-action from 2a4b53665e15ce7d7049afb11ff1f70ff1610609 to 1.2.0 (#15856, @dependabot[bot])
+* cilium: Fix EKS encryption panic and reinit path and add workflows test (Backport PR #15602, Upstream PR #15669, @jrfastab)
+* contrib: Clean output of submit-backport script (Backport PR #15921, Upstream PR #15838, @pchaigno)
+* contrib: Ensure release tag is upstream before push (Backport PR #15921, Upstream PR #15903, @joestringer)
+* daemon/cmd: fix Cilium version status output (Backport PR #15921, Upstream PR #15649, @aanm)
+* datapath/linux/arp: avoid leaking sock fd if unix.SetNonblock fails in func listen (Backport PR #15909, Upstream PR #15646, @tklauser)
+* datapath: migrate off j-keck/arping (Backport PR #15909, Upstream PR #13112, @vladdy)
+* docs: Update our community docs page (Backport PR #16047, Upstream PR #14968, @pchaigno)
+* docs: Update SIG-Datapath meeting time. (Backport PR #16105, Upstream PR #16027, @joestringer)
+* envoy: Do not use deprecated fields (Backport PR #16115, Upstream PR #15232, @jrajahalme)
+* Improve the docs CRD schema version update script (Backport PR #15921, Upstream PR #15869, @joestringer)
+* ipsec: Fix routing CIDR iteration on EKS (Backport PR #15602, Upstream PR #15645, @gandro)
+* mtu: Switch to v/netlink for querying netdevs (Backport PR #15921, Upstream PR #15260, @brb)
+* node-neigh: Avoid flooding the same next hop (Backport PR #16047, Upstream PR #15882, @brb)
+* pkg/k8s: add DeepEqual code generation for Service (Backport PR #15927, Upstream PR #15077, @aanm)
+* Update weekly community meeting timeslot (Backport PR #16047, Upstream PR #15985, @joestringer)
+
+**Other Changes:**
+* install: Update image digests for v1.8.9 (#15799, @joestringer)
+
 ## v1.8.9
 
 Summary of Changes

diff --git a/Documentation/concepts/kubernetes/compatibility-table.rst b/Documentation/concepts/kubernetes/compatibility-table.rst
@@ -80,6 +80,12 @@
 +-----------------+----------------+
 | v1.7.13         | 1.18.1         |
 +-----------------+----------------+
+| v1.7.14         | 1.18.1         |
++-----------------+----------------+
+| v1.7.15         | 1.18.1         |
++-----------------+----------------+
+| v1.7.16         | 1.18.1         |
++-----------------+----------------+
 | v1.7            | 1.18.1         |
 +-----------------+----------------+
 | v1.8.0-rc1      | 1.19           |
@@ -104,7 +110,13 @@
 +-----------------+----------------+
 | v1.8.6          | 1.21.2         |
 +-----------------+----------------+
+| v1.8.7          | 1.21.2         |
++-----------------+----------------+
+| v1.8.8          | 1.21.2         |
++-----------------+----------------+
+| v1.8.9          | 1.21.2         |
++-----------------+----------------+
 | v1.8            | 1.21.2         |
 +-----------------+----------------+
-| latest / master | 1.22.4         |
+| latest / master | 1.23.1         |
 +-----------------+----------------+
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-1.8.9
+1.8.10
diff --git a/install/kubernetes/Makefile.digests b/install/kubernetes/Makefile.digests
@@ -2,10 +2,10 @@
 # Copyright 2021 Authors of Cilium
 # SPDX-License-Identifier: Apache-2.0
 
-CILIUM_DIGEST := "sha256:c29ee7fc20cff7c41b02788f013c17d38562c7a3f994002e82243fa49b175457"
-DOCKER_PLUGIN_DIGEST := "sha256:09bd5a4b2f4ea0a1bac6e8d57cac645e739240c89e6a188e588da8e8fcd9d867"
-HUBBLE_RELAY_DIGEST := "sha256:2b5ac388cfdbee7b8a02f4d29d6d70967dc4ebbf22ec14c597e73ba8ed9e2f9a"
-OPERATOR_AWS_DIGEST := "sha256:f386a6b9a0efdae4e84df069cb3f74eda8981e77300cdff1f0df2c0270fbc619"
-OPERATOR_AZURE_DIGEST := "sha256:211f153cf187bd716114a9a5ffd8eda4349e763815d4f4c790bafe7d0216118b"
-OPERATOR_GENERIC_DIGEST := "sha256:070bfe37e85b75cfdc8471f00b52090d94c3fc6537dbebed5405317cec4da629"
-OPERATOR_DIGEST := "sha256:cf2efee5607d91ee28dfe039ff5bad26437d8d15e3ad421ae9e708a2a81580c4"
+CILIUM_DIGEST := ""
+DOCKER_PLUGIN_DIGEST := ""
+HUBBLE_RELAY_DIGEST := ""
+OPERATOR_AWS_DIGEST := ""
+OPERATOR_AZURE_DIGEST := ""
+OPERATOR_GENERIC_DIGEST := ""
+OPERATOR_DIGEST := ""
diff --git a/install/kubernetes/cilium/Chart.yaml b/install/kubernetes/cilium/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v1
 name: cilium
 home: https://cilium.io/
-version: 1.8.9
-appVersion: 1.8.9
+version: 1.8.10
+appVersion: 1.8.10
 tillerVersion: ">=2.7.2-0"
 description: Helm chart for Cilium
 keywords:

diff --git a/install/kubernetes/cilium/charts/agent/Chart.yaml b/install/kubernetes/cilium/charts/agent/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: agent
-version: 1.8.9
-appVersion: 1.8.9
+version: 1.8.10
+appVersion: 1.8.10
 tillerVersion: ">=2.7.2"
 description: Helm chart for cilium-agent DaemonSet
 keywords:

diff --git a/install/kubernetes/cilium/charts/agent/values.yaml b/install/kubernetes/cilium/charts/agent/values.yaml
@@ -1,7 +1,7 @@
 image: cilium
 
 # cilium-digest
-digest: "sha256:c29ee7fc20cff7c41b02788f013c17d38562c7a3f994002e82243fa49b175457"
+digest: ""
 useDigest: false
 
 # Specifies the maximum number of Pods that can be unavailable during the

diff --git a/install/kubernetes/cilium/charts/config/Chart.yaml b/install/kubernetes/cilium/charts/config/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: config
-version: 1.8.9
-appVersion: 1.8.9
+version: 1.8.10
+appVersion: 1.8.10
 tillerVersion: ">=2.7.2"
 description: Helm chart for Cilium configuration
 keywords:

diff --git a/install/kubernetes/cilium/charts/hubble-relay/Chart.yaml b/install/kubernetes/cilium/charts/hubble-relay/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: hubble-relay
-version: 1.8.9
-appVersion: 1.8.9
+version: 1.8.10
+appVersion: 1.8.10
 tillerVersion: ">=2.7.2"
 description: Helm chart for running Hubble Relay
 sources:

diff --git a/install/kubernetes/cilium/charts/hubble-relay/values.yaml b/install/kubernetes/cilium/charts/hubble-relay/values.yaml
@@ -3,11 +3,11 @@ image:
   # repository of the docker image
   repository: hubble-relay
   # tag is the container image tag to use
-  tag: v1.8.9
+  tag: v1.8.10
   # pullPolicy is the container image pull policy
   pullPolicy: IfNotPresent
   # hubble-relay-digest
-  digest: "sha256:2b5ac388cfdbee7b8a02f4d29d6d70967dc4ebbf22ec14c597e73ba8ed9e2f9a"
+  digest: ""
   useDigest: false
 
 # Specifies the resources for the hubble-relay pods

diff --git a/install/kubernetes/cilium/charts/hubble-ui/Chart.yaml b/install/kubernetes/cilium/charts/hubble-ui/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: hubble-ui
-version: 1.8.9
-appVersion: 1.8.9
+version: 1.8.10
+appVersion: 1.8.10
 tillerVersion: ">=2.7.2"
 description: Helm chart for the Hubble UI 
 keywords:

diff --git a/install/kubernetes/cilium/charts/managed-etcd/Chart.yaml b/install/kubernetes/cilium/charts/managed-etcd/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: managed-etcd
-version: 1.8.9
-appVersion: 1.8.9
+version: 1.8.10
+appVersion: 1.8.10
 tillerVersion: ">=2.7.2"
 description: Helm chart for managed etcd
 keywords:

diff --git a/install/kubernetes/cilium/charts/nodeinit/Chart.yaml b/install/kubernetes/cilium/charts/nodeinit/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: nodeinit
-version: 1.8.9
-appVersion: 1.8.9
+version: 1.8.10
+appVersion: 1.8.10
 tillerVersion: ">=2.7.2"
 description: Helm chart for node initialization
 keywords:

diff --git a/install/kubernetes/cilium/charts/operator/Chart.yaml b/install/kubernetes/cilium/charts/operator/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: operator
-version: 1.8.9
-appVersion: 1.8.9
+version: 1.8.10
+appVersion: 1.8.10
 tillerVersion: ">=2.7.2"
 description: Helm chart for cilium-operator deployment
 keywords:

diff --git a/install/kubernetes/cilium/charts/operator/values.yaml b/install/kubernetes/cilium/charts/operator/values.yaml
@@ -1,13 +1,13 @@
 image: operator
 
 # operator-legacy-digest
-legacyDigest: "sha256:cf2efee5607d91ee28dfe039ff5bad26437d8d15e3ad421ae9e708a2a81580c4"
+legacyDigest: ""
 # operator-generic-digest
-genericDigest: "sha256:070bfe37e85b75cfdc8471f00b52090d94c3fc6537dbebed5405317cec4da629"
+genericDigest: ""
 # operator-azure-digest
-azureDigest: "sha256:211f153cf187bd716114a9a5ffd8eda4349e763815d4f4c790bafe7d0216118b"
+azureDigest: ""
 # operator-aws-digest
-awsDigest: "sha256:f386a6b9a0efdae4e84df069cb3f74eda8981e77300cdff1f0df2c0270fbc619"
+awsDigest: ""
 useDigest: false
 
 # Service account annotations

diff --git a/install/kubernetes/cilium/charts/preflight/Chart.yaml b/install/kubernetes/cilium/charts/preflight/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: preflight
-version: 1.8.9
-appVersion: 1.8.9
+version: 1.8.10
+appVersion: 1.8.10
 tillerVersion: ">=2.7.2"
 description: Helm chart for pre-flight functionality
 keywords:

diff --git a/install/kubernetes/cilium/charts/preflight/values.yaml b/install/kubernetes/cilium/charts/preflight/values.yaml
@@ -1,7 +1,7 @@
 image: cilium
 
 # cilium-digest
-digest: "sha256:c29ee7fc20cff7c41b02788f013c17d38562c7a3f994002e82243fa49b175457"
+digest: ""
 useDigest: false
 
 # Include the PreFlight DaemonSet

diff --git a/install/kubernetes/cilium/charts/prometheus-crd/Chart.yaml b/install/kubernetes/cilium/charts/prometheus-crd/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: prometheus-crd
-version: 1.8.9
-appVersion: 1.8.9
+version: 1.8.10
+appVersion: 1.8.10
 tillerVersion: ">=2.7.2"
 description: Helm chart to install required Prometheus CRDs
 keywords:

diff --git a/install/kubernetes/cilium/requirements.yaml b/install/kubernetes/cilium/requirements.yaml
@@ -1,28 +1,28 @@
 dependencies:
   - name: agent
-    version: 1.8.9
+    version: 1.8.10
     condition: agent.enabled
   - name: config
-    version: 1.8.9
+    version: 1.8.10
     condition: config.enabled
   - name: hubble-relay
-    version: 1.8.9
+    version: 1.8.10
     condition: global.hubble.relay.enabled
   - name: hubble-ui
-    version: 1.8.9
+    version: 1.8.10
     condition: global.hubble.ui.enabled
   - name: operator
-    version: 1.8.9
+    version: 1.8.10
     condition: operator.enabled
   - name: managed-etcd
-    version: 1.8.9
+    version: 1.8.10
     condition: global.etcd.managed
   - name: preflight
-    version: 1.8.9
+    version: 1.8.10
     condition: preflight.enabled
   - name: nodeinit
-    version: 1.8.9
+    version: 1.8.10
     condition: global.nodeinit.enabled
   - name: prometheus-crd
-    version: 1.8.9
+    version: 1.8.10
     condition: global.prometheus.enabled && global.prometheus.serviceMonitor.enabled
diff --git a/install/kubernetes/cilium/values.yaml b/install/kubernetes/cilium/values.yaml
@@ -47,7 +47,7 @@ hubble-relay:
   #   # repository of the docker image
   #   name: hubble-relay
   #   # tag is the container image tag to use
-  #   tag: v1.8.9
+  #   tag: v1.8.10
   #   # pullPolicy is the container image pull policy
   #   pullPolicy: IfNotPresent
   #
@@ -88,7 +88,7 @@ global:
   registry: quay.io/cilium
 
   # tag is the container image tag to use
-  tag: v1.8.9
+  tag: v1.8.10
 
   # pullPolicy is the container image pull policy
   pullPolicy: IfNotPresent