Prepare for release v1.9.7

Signed-off-by: Joe Stringer <[email protected]>
michi-covalent · May 13, 2021 · f993696 · f993696
1 parent cdd5eb5
commit f993696
Show file tree

Hide file tree

Showing 14 changed files with 129 additions and 84 deletions.
diff --git a/.github/cilium-actions.yml b/.github/cilium-actions.yml
@@ -1,4 +1,4 @@
-project: "https://github.com/cilium/cilium/projects/153"
+project: "https://github.com/cilium/cilium/projects/157"
 column: "In progress"
 auto-label:
   - "kind/backports"

diff --git a/.mailmap b/.mailmap
@@ -19,6 +19,7 @@ Daniel Qian <[email protected]>
 Darshan Chaudhary <[email protected]>
 Devarshi Sathiya <[email protected]>
 Florian Koch <[email protected]>
+Gaurav Genani <[email protected]>
 George Kontridze <[email protected]>
 Hui Kong <[email protected]> <[email protected]>
 Ian Vernon <[email protected]> <vagrant@k8s1>
@@ -39,6 +40,7 @@ Mandar U Jog <[email protected]> <[email protected]>
 Matthew Gumport <[email protected]>
 Michael Vorburger <[email protected]>
 Peiqi Shi <[email protected]>
+Roman Ptitcyn <[email protected]>
 Salvatore Mazzarino <[email protected]> <[email protected]>
 Sean Winn <[email protected]>
 Sergey Generalov <[email protected]>

diff --git a/AUTHORS b/AUTHORS
@@ -69,6 +69,7 @@ Erik Chang                              [email protected]
 fafucoder                               [email protected]
 Faiyaz Ahmed                            [email protected]
 Florian Koch                            [email protected]
+Francois Allard                         [email protected]
 francoisj                               [email protected]
 Frank Villaro-Dixon                     [email protected]
 Fred Hsu                                [email protected]
@@ -95,7 +96,7 @@ Ivar Lazzaro                            [email protected]
 Jaff Cheng                              [email protected]
 Jaime Caamaño Ruiz                      [email protected]
 Jan-Erik Rediger                        [email protected]
-Jarno Rajahalme                         jarno@covalent.io
+Jarno Rajahalme                         jarno@isovalent.com
 Jean Raby                               [email protected]
 Jed Salazar                             [email protected]
 Jerry J. Muzsik                         [email protected]
@@ -171,6 +172,7 @@ Neelajacques                            [email protected]
 Neil Wilson                             [email protected]
 networkop                               [email protected]
 Nick M                                  [email protected]
+Nicolas Busseneau                       [email protected]
 Nirmoy Das                              [email protected]
 Ole Markus With                         [email protected]
 Patrice Peterson                        [email protected]
@@ -194,6 +196,7 @@ Rene Zbinden                            [email protected]
 Robin Hahling                           [email protected]
 Rodrigo Chacon                          [email protected]
 Romain Lenglet                          [email protected]
+Roman Ptitcyn                           [email protected]
 Ronald van Zantvoort                    [email protected]
 Ross Guarino                            [email protected]
 Rui Gu                                  [email protected]
@@ -234,6 +237,7 @@ trevor tao                              [email protected]
 Umesh Keerthy B S                       [email protected]
 Vadim Ponomarev                         [email protected]
 Valas Valancius                         [email protected]
+Vlad Artamonov                          [email protected]
 Vlad Gorodetsky                         [email protected]
 Vladimir Nachev                         [email protected]
 Vlad Ungureanu                          [email protected]

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,80 @@
 # Changelog
 
+## v1.9.7
+
+Summary of Changes
+------------------
+
+**Minor Changes:**
+* arp: Add retries to arping (Backport PR #15908, Upstream PR #14601, @brb)
+* Hash IPSec keys in the bugtool. Unit test are also added. (Backport PR #15830, Upstream PR #15550, @h3llix)
+* Hubble logs for HTTP responses now include HTTP response headers. (Backport PR #16108, Upstream PR #16013, @jrajahalme)
+* node-neigh: add metric to count arping requests (Backport PR #16048, Upstream PR #14816, @jaffcheng)
+* node-neigh: Locking, logging, misc improvements (Backport PR #16048, Upstream PR #15783, @brb)
+* PolicyImportErrorsTotal metric is now incremented also from k8s policy watchers (Backport PR #15891, Upstream PR #15820, @jrajahalme)
+* Store the previous Cilium's configuration options in the host (Backport PR #16091, Upstream PR #16017, @aanm)
+
+**Bugfixes:**
+* `toFQDNs` rules now allow underscores in match patterns and names (Backport PR #15830, Upstream PR #15801, @jrajahalme)
+* bpf: Fix defines in policy.h (Backport PR #15830, Upstream PR #15763, @pchaigno)
+* bpf: fix map_array_get_16 backend retrieval (Backport PR #15830, Upstream PR #15808, @borkmann)
+* cilium: Encryption EKS 4.14 kernel (default) fixes (Backport PR #16048, Upstream PR #15867, @jrfastab)
+* Drop a `@` in clustermesh-apiserver helm chart (Backport PR #16048, Upstream PR #15934, @anthr76)
+* eni: Fix Cilium overallocating network interfaces (Backport PR #16035, Upstream PR #15911, @gandro)
+* Envoy is updated to release 1.17.3 (Backport PR #16108, Upstream PR #16102, @jrajahalme)
+* Fix an issue where packets are dropped when a pod connects to itself via a service clusterIP. (Backport PR #15709, Upstream PR #15321, @aditighag)
+* Fix aws-cni integration where pods were not being scheduled (Backport PR #16048, Upstream PR #15915, @aanm)
+* Fix bug where L7 ingress policies with IPsec dropped traffic in tunneling mode (Backport PR #16114, Upstream PR #16057, @christarazi)
+* Fix channel panic from ipcache kvstore reconnect (Backport PR #15830, Upstream PR #15668, @jomenxiao)
+* Fix panic when accounting for certain metrics in BPF map operations (#15866, @aanm)
+* Fix the initialization of host endpoint labels (Backport PR #15837, Upstream PR #15780, @pchaigno)
+* Fixing pods restart on nodes running containerd on COS (Backport PR #15920, Upstream PR #14708, @fallard84)
+* Handle events with pod IP and node IP addresses being modified (Backport PR #15926, Upstream PR #15803, @aanm)
+* ipcache: Expose correct source in Cilium API (Backport PR #15830, Upstream PR #15706, @gandro)
+* kvstore/etcd: fix etcd rate limit (QPS) not working (Backport PR #15830, Upstream PR #15742, @ArthurChiao)
+* pkg/k8s: reset k8s event lag metric on pod add (Backport PR #15830, Upstream PR #15804, @aanm)
+
+**CI Changes:**
+* connectivity-check: Reduce chances of port conflict with proxy (Backport PR #16048, Upstream PR #15988, @pchaigno)
+* test/gke: refactor test-clusters operations (Backport PR #15875, Upstream PR #15863, @nbusseneau)
+* test: 5.4 CI job (Backport PR #15957, Upstream PR #15765, @pchaigno)
+* test: Extend the clusterIP tests with policy (Backport PR #15709, Upstream PR #15928, @aditighag)
+* test: Fix fragment tracking test on GKE (Backport PR #16048, Upstream PR #15959, @pchaigno)
+* test: Format test-only's kernel_version to avoid mistakes (Backport PR #16048, Upstream PR #15743, @pchaigno)
+* test: Skip K8sPolicy on GKE and 4.19 (Backport PR #15875, Upstream PR #15762, @pchaigno)
+
+**Misc Changes:**
+* .github: remove unnecessary docker hub credentials (Backport PR #15875, Upstream PR #15841, @aanm)
+* [v1.9] Fix image digest preparation for release commits (#15817, @joestringer)
+* Agent: Include Cilium version in output of 'cilium status --verbose' (Backport PR #15830, Upstream PR #14492, @romanspb80)
+* arp: Set deadline for each retry (Backport PR #15908, Upstream PR #14651, @brb)
+* bugtool: Record attached BPF programs (Backport PR #15875, Upstream PR #14895, @aditighag)
+* build(deps): bump docker/login-action from f3364599c6aa293cdc2b8391b1b56d0c30e45c8a to 1.9.0 (#15916, @dependabot[bot])
+* build(deps): bump docker/setup-buildx-action from 012185ccbeb554a7f5f987bea0f1a73519b3cdf5 to 1.3.0 (#15939, @dependabot[bot])
+* build(deps): bump docker/setup-buildx-action from 2a4b53665e15ce7d7049afb11ff1f70ff1610609 to 1.2.0 (#15855, @dependabot[bot])
+* build(deps): bump KyleMayes/install-llvm-action from 1.2.2 to 1.3.0 (#16089, @dependabot[bot])
+* bwm: queue mapping & cong fixes (Backport PR #16048, Upstream PR #15964, @borkmann)
+* contrib: Clean output of submit-backport script (Backport PR #15875, Upstream PR #15838, @pchaigno)
+* contrib: Ensure release tag is upstream before push (Backport PR #15920, Upstream PR #15903, @joestringer)
+* daemon/cmd: fix Cilium version status output (Backport PR #15830, Upstream PR #15649, @aanm)
+* daemon: Fix the init of the endpoints' datapath config (Backport PR #15830, Upstream PR #15785, @pchaigno)
+* datapath/linux/arp: avoid leaking sock fd if unix.SetNonblock fails in func listen (Backport PR #15908, Upstream PR #15646, @tklauser)
+* datapath: migrate off j-keck/arping (Backport PR #15908, Upstream PR #13112, @vladdy)
+* docs/policy: Clarify table for deny policy scenarios (Backport PR #15875, Upstream PR #15836, @pchaigno)
+* docs: add 'endpointRoutes.enabled=true' to aws-cni (Backport PR #16114, Upstream PR #16045, @bmcustodio)
+* docs: Update our community docs page (Backport PR #16048, Upstream PR #14968, @pchaigno)
+* docs: Update SIG-Datapath meeting time. (Backport PR #16114, Upstream PR #16027, @joestringer)
+* examples: add 'rebel-base-global-shared.yaml' (Backport PR #15920, Upstream PR #15886, @bmcustodio)
+* Improve the docs CRD schema version update script (Backport PR #15920, Upstream PR #15869, @joestringer)
+* node-neigh: Avoid flooding the same next hop (Backport PR #16048, Upstream PR #15882, @brb)
+* pkg/k8s: add DeepEqual code generation for Service (Backport PR #15926, Upstream PR #15077, @aanm)
+* Update weekly community meeting timeslot (Backport PR #16048, Upstream PR #15985, @joestringer)
+* v1.9: Update Go to 1.15.12 (#16067, @tklauser)
+
+**Other Changes:**
+* docs: Add a note about minikube docker driver mode (#16086, @aditighag)
+* install: Update image digests for v1.9.6 (#15800, @joestringer)
+
 ## v1.9.6
 
 Summary of Changes

diff --git a/Documentation/concepts/kubernetes/compatibility-table.rst b/Documentation/concepts/kubernetes/compatibility-table.rst
@@ -2,48 +2,6 @@
 | Cilium          | CNP and CCNP   |
 | Version         | Schema Version |
 +-----------------+----------------+
-| v1.6.0-rc1      | 1.14           |
-+-----------------+----------------+
-| v1.6.0-rc2      | 1.14           |
-+-----------------+----------------+
-| v1.6.0-rc3      | 1.14           |
-+-----------------+----------------+
-| v1.6.0-rc4      | 1.14           |
-+-----------------+----------------+
-| v1.6.0-rc5      | 1.14           |
-+-----------------+----------------+
-| v1.6.0-rc6      | 1.14           |
-+-----------------+----------------+
-| v1.6.0-rc7      | 1.14           |
-+-----------------+----------------+
-| v1.6.0          | 1.14           |
-+-----------------+----------------+
-| v1.6.1          | 1.14           |
-+-----------------+----------------+
-| v1.6.2          | 1.14           |
-+-----------------+----------------+
-| v1.6.3          | 1.14           |
-+-----------------+----------------+
-| v1.6.4          | 1.14           |
-+-----------------+----------------+
-| v1.6.5          | 1.14           |
-+-----------------+----------------+
-| v1.6.6          | 1.14           |
-+-----------------+----------------+
-| v1.6.7          | 1.14           |
-+-----------------+----------------+
-| v1.6.8          | 1.14           |
-+-----------------+----------------+
-| v1.6.9          | 1.15           |
-+-----------------+----------------+
-| v1.6.10         | 1.15           |
-+-----------------+----------------+
-| v1.6.11         | 1.15.1         |
-+-----------------+----------------+
-| v1.6.12         | 1.15.1         |
-+-----------------+----------------+
-| v1.6            | 1.15.1         |
-+-----------------+----------------+
 | v1.7.0-rc1      | 1.15           |
 +-----------------+----------------+
 | v1.7.0-rc2      | 1.16           |
@@ -84,6 +42,8 @@
 +-----------------+----------------+
 | v1.7.15         | 1.18.1         |
 +-----------------+----------------+
+| v1.7.16         | 1.18.1         |
++-----------------+----------------+
 | v1.7            | 1.18.1         |
 +-----------------+----------------+
 | v1.8.0-rc1      | 1.19           |
@@ -112,6 +72,8 @@
 +-----------------+----------------+
 | v1.8.8          | 1.21.2         |
 +-----------------+----------------+
+| v1.8.9          | 1.21.2         |
++-----------------+----------------+
 | v1.8            | 1.21.2         |
 +-----------------+----------------+
 | v1.9.0-rc0      | 1.22.1         |
@@ -134,7 +96,9 @@
 +-----------------+----------------+
 | v1.9.5          | 1.22.3         |
 +-----------------+----------------+
-| v1.9            | 1.22.3         |
+| v1.9.6          | 1.22.4         |
++-----------------+----------------+
+| v1.9            | 1.22.4         |
 +-----------------+----------------+
 | latest / master | 1.23.1         |
 +-----------------+----------------+
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-1.9.6
+1.9.7
diff --git a/install/kubernetes/Makefile.digests b/install/kubernetes/Makefile.digests
@@ -2,11 +2,11 @@
 # Copyright 2021 Authors of Cilium
 # SPDX-License-Identifier: Apache-2.0
 
-CILIUM_DIGEST := "sha256:6e2bc051dd5d942085591ea6150623790a8ffbaaab567007a2707fc7668d8055"
-CLUSTERMESH_APISERVER_DIGEST := "sha256:e4a6d47d0d8e4ef52c44e99a906076e29e8513a35a972e60100df2168b381318"
-DOCKER_PLUGIN_DIGEST := "sha256:53cb69a69b8d0bd77e3d9401083d8da74766ea664b61d5dfec3388dd5bdbdf10"
-HUBBLE_RELAY_DIGEST := "sha256:2ea804c454b660d474feae96c01da1b9193dfce6809b4d3825e7b6efc6ade8c7"
-OPERATOR_AWS_DIGEST := "sha256:9cc271130849e109608478b5fa695d84ab9542900ceeb7128c1a0c7b29abad3c"
-OPERATOR_AZURE_DIGEST := "sha256:e70493e05af077501563db990db1165dfcc66b09bfb751065f3d72e504e46ca7"
-OPERATOR_GENERIC_DIGEST := "sha256:29a315472ae0701dbfbfff1e9766f68c2915edd896a011f7e8e409cf4d687453"
-OPERATOR_DIGEST := "sha256:43719e0570f5d37236b9b70583ddb8ab64741c9cb998d9775d3382d1567449e8"
+CILIUM_DIGEST := ""
+CLUSTERMESH_APISERVER_DIGEST := ""
+DOCKER_PLUGIN_DIGEST := ""
+HUBBLE_RELAY_DIGEST := ""
+OPERATOR_AWS_DIGEST := ""
+OPERATOR_AZURE_DIGEST := ""
+OPERATOR_GENERIC_DIGEST := ""
+OPERATOR_DIGEST := ""
diff --git a/install/kubernetes/cilium/Chart.yaml b/install/kubernetes/cilium/Chart.yaml
@@ -2,10 +2,10 @@ apiVersion: v2
 name: cilium
 displayName: Cilium
 home: https://cilium.io/
-version: 1.9.6
-appVersion: 1.9.6
+version: 1.9.7
+appVersion: 1.9.7
 kubeVersion: ">= 1.12.0-0"
-icon: https://cdn.jsdelivr.net/gh/cilium/[email protected].6/Documentation/images/logo-solo.svg
+icon: https://cdn.jsdelivr.net/gh/cilium/[email protected].7/Documentation/images/logo-solo.svg
 description: eBPF-based Networking, Security, and Observability
 keywords:
   - BPF