We are happy to release Cilium v1.14.15!
This release brings us upstream filter chains for L7 LB policy enforcement, bugfixes, CI fixes and many many more! See summary of changes below!
Summary of Changes
Minor Changes:
- cilium-envoy now uses upstream filter chains for L7 LB policy enforcement. (Backport PR #34458, Upstream PR #32119, @jrajahalme)
- docs: Update examples for CNP L7 Host (Backport PR #34646, Upstream PR #34578, @sayboras)
Bugfixes:
- config: fix disabling config 'Debug' (Backport PR #34471, Upstream PR #34401, @mhofstetter)
- envoy: fix log level mapping when changing log level via API (Backport PR #34459, Upstream PR #34400, @mhofstetter)
- ipcache: Yet another refcounting fix with mix of APIs (Backport PR #34713, Upstream PR #34715, @gandro)
CI Changes:
- .github: change nick-invision/retry -> nick-fields/retry. (#34737, @michi-covalent)
- ci: clean disk only on ubuntu-latest runners (Backport PR #34829, Upstream PR #34711, @marseel)
- ci: Confromance E2E wait for images before matrix generation (Backport PR #34829, Upstream PR #34707, @marseel)
- ci: multi pool run tests concurrently (Backport PR #34364, Upstream PR #33945, @viktor-kurchenko)
- ci: Wait for images before generating test matrix (Backport PR #34829, Upstream PR #34727, @marseel)
- Fix: push PR changes when renovate build images under the workflow_call context (Backport PR #34829, Upstream PR #34650, @Artyop)
- gha: Add disk cleanup step for build and test workflow (Backport PR #34364, Upstream PR #34339, @sayboras)
- gha: Free up Github runner disk space (Backport PR #34364, Upstream PR #34247, @sayboras)
- gha: Remove ci-aks workflow (#34606, @sayboras)
Misc Changes:
- [v1.14] hive: prevent goleak error due to race condition (#34658, @marseel)
- Add source IP visibility info to Ingress and Gateway API docs (Backport PR #34369, Upstream PR #34137, @youngnick)
- Add source IP visibility info to Ingress and Gateway API docs (Backport PR #34459, Upstream PR #34137, @youngnick)
- chore(deps): update all github action dependencies (v1.14) (#34572, @cilium-renovate[bot])
- chore(deps): update all github action dependencies (v1.14) (#34763, @cilium-renovate[bot])
- chore(deps): update dependency cilium/cilium-cli to v0.16.15 (v1.14) (#34120, @cilium-renovate[bot])
- chore(deps): update dependency cilium/cilium-cli to v0.16.16 (v1.14) (#34508, @cilium-renovate[bot])
- chore(deps): update dependency cilium/cilium-cli to v0.16.17 (v1.14) (#34885, @cilium-renovate[bot])
- chore(deps): update dependency cilium/hubble to v1.16.1 (v1.14) (#34854, @cilium-renovate[bot])
- chore(deps): update docker.io/library/alpine docker tag to v3.18.9 (v1.14) (#34762, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.22.7 docker digest to 4594271 (v1.14) (#34901, @cilium-renovate[bot])
- chore(deps): update docker.io/library/ubuntu:22.04 docker digest to adbb901 (v1.14) (#34697, @cilium-renovate[bot])
- chore(deps): update gcr.io/etcd-development/etcd docker tag to v3.5.16 (v1.14) (#34905, @cilium-renovate[bot])
- chore(deps): update go to v1.22.7 (v1.14) (#34734, @cilium-renovate[bot])
- chore(deps): update kindest/node docker tag to v1.27.16 (v1.14) (#34509, @cilium-renovate[bot])
- chore: Avoid docker warning due to casing (Backport PR #34859, Upstream PR #34125, @sayboras)
- cilium-dbg: add Envoy admin commands (Backport PR #34495, Upstream PR #34398, @mhofstetter)
- docs: Avoid using wildcard TLS certificate (Backport PR #34829, Upstream PR #34609, @sayboras)
- docs: Improve Ingress documentation (Backport PR #34369, Upstream PR #33698, @youngnick)
- docs: Improve Ingress documentation (Backport PR #34459, Upstream PR #33698, @youngnick)
- Documentation: Update readthedocs configuration (Backport PR #34364, Upstream PR #34190, @joestringer)
- fix: base image update workflow will now be triggered on renovate branches with a workflow_call event type (Backport PR #34459, Upstream PR #34372, @Artyop)
- images: fix path script (Backport PR #34766, Upstream PR #34764, @aanm)
- ipsec: Document a new cause of XfrmInStateProtoError (Backport PR #34495, Upstream PR #34221, @jschwinger233)
Other Changes:
- [v1.14] CODEOWNERS: switch cilium/tophat to cilium/committers (#34888, @julianwiedmann)
- [v1.14] envoy: Bump envoy version from v1.29.7 to v1.29.9 (#34963, @sayboras)
- [v1.14] envoy: Switch to image with timestamp tag (#34393, @sayboras)
- envoy: Bump golang version (#34329, @sayboras)
- install: Update image digests for v1.14.14 (#34377, @cilium-release-bot[bot])
Docker Manifests
cilium
docker.io/cilium/cilium:v1.14.15@sha256:9a7977e8a685ac8ef8477c6be76a10d2aabf680bfe13916fa8ba7fec4429705d
quay.io/cilium/cilium:v1.14.15@sha256:9a7977e8a685ac8ef8477c6be76a10d2aabf680bfe13916fa8ba7fec4429705d
clustermesh-apiserver
docker.io/cilium/clustermesh-apiserver:v1.14.15@sha256:1254404bd6a9c9cd0702727f5fe9bf26477a3dac3fa6cb144a57c84b328d079b
quay.io/cilium/clustermesh-apiserver:v1.14.15@sha256:1254404bd6a9c9cd0702727f5fe9bf26477a3dac3fa6cb144a57c84b328d079b
docker-plugin
docker.io/cilium/docker-plugin:v1.14.15@sha256:5d123a4fd747b42a5ea3153930b23b93b0803ea881a6dbac26531deeb926cb9f
quay.io/cilium/docker-plugin:v1.14.15@sha256:5d123a4fd747b42a5ea3153930b23b93b0803ea881a6dbac26531deeb926cb9f
hubble-relay
docker.io/cilium/hubble-relay:v1.14.15@sha256:f104b07f38d0fa206bc41d5bd7a02ea42e32b18de7022f8401492bad35bbedc7
quay.io/cilium/hubble-relay:v1.14.15@sha256:f104b07f38d0fa206bc41d5bd7a02ea42e32b18de7022f8401492bad35bbedc7
kvstoremesh
docker.io/cilium/kvstoremesh:v1.14.15@sha256:93d81162805edf7145a9b6f2b22790c51a730f439f7644399d55cfc083c665e0
quay.io/cilium/kvstoremesh:v1.14.15@sha256:93d81162805edf7145a9b6f2b22790c51a730f439f7644399d55cfc083c665e0
operator-alibabacloud
docker.io/cilium/operator-alibabacloud:v1.14.15@sha256:db526ebf79874a0376c37fa987a820ff572a5a9b9c23697c393ab5d8721a20dd
quay.io/cilium/operator-alibabacloud:v1.14.15@sha256:db526ebf79874a0376c37fa987a820ff572a5a9b9c23697c393ab5d8721a20dd
operator-aws
docker.io/cilium/operator-aws:v1.14.15@sha256:e17ee0a65edf75f13e9fb380ef2dc4c80096d8a08581f8b8a65386e35589a175
quay.io/cilium/operator-aws:v1.14.15@sha256:e17ee0a65edf75f13e9fb380ef2dc4c80096d8a08581f8b8a65386e35589a175
operator-azure
docker.io/cilium/operator-azure:v1.14.15@sha256:e4ce4f4bce9431493efc59aba38277dd831836c3112af34e48e97c3d6bf4d668
quay.io/cilium/operator-azure:v1.14.15@sha256:e4ce4f4bce9431493efc59aba38277dd831836c3112af34e48e97c3d6bf4d668
operator-generic
docker.io/cilium/operator-generic:v1.14.15@sha256:233c4ab72cd6a06e8b4c8bed4991d625df8389e6225b27bc72f088c10036b870
quay.io/cilium/operator-generic:v1.14.15@sha256:233c4ab72cd6a06e8b4c8bed4991d625df8389e6225b27bc72f088c10036b870
operator
docker.io/cilium/operator:v1.14.15@sha256:064d2449a4ceaaf8bab2f14fb49544061bb4a9d508d78ea3596b3be03c20b82f
quay.io/cilium/operator:v1.14.15@sha256:064d2449a4ceaaf8bab2f14fb49544061bb4a9d508d78ea3596b3be03c20b82f