Summary of Changes
Bugfixes:
- bgp: fix race in bgp stores (Backport PR #36071, Upstream PR #35971, @harsimran-pabla)
- cilium-health-ep controller is made to be more robust against successive failures. (Backport PR #36071, Upstream PR #35936, @jrajahalme)
- gateway-api: Fix gateway checks for namespace (Backport PR #36464, Upstream PR #35452, @sayboras)
- Unbreak the cilium-dbg preflight migrate-identity command (Backport PR #36285, Upstream PR #36089, @giorio94)
CI Changes:
- [v1.15] ci: modularize chart CI push workflow (#35963, @ferozsalam)
- [v1.15] gha: Upgrade helm/kind-action to the latest upstream (#36415, @aanm)
- gha: configure environment in build-images-base/image-digests job (Backport PR #36464, Upstream PR #36318, @giorio94)
- github: Pass the workflow step timeout to go test (Backport PR #36071, Upstream PR #35814, @jrajahalme)
- Remove unnecessary hubble port-forward commands (Backport PR #36071, Upstream PR #33523, @michi-covalent)
Misc Changes:
- [v1.15] docs: egress masquerade selector (#36407, @nbusseneau)
- [v1.15] images: bump cni plugins to v1.6.0 (#36090, @ferozsalam)
- chore(deps): update all github action dependencies (v1.15) (#36159, @cilium-renovate[bot])
- chore(deps): update all github action dependencies (v1.15) (#36280, @cilium-renovate[bot])
- chore(deps): update all github action dependencies (v1.15) (#36449, @cilium-renovate[bot])
- chore(deps): update all-dependencies (v1.15) (#36156, @cilium-renovate[bot])
- chore(deps): update cilium/little-vm-helper action to v0.0.19 (v1.15) (#36157, @cilium-renovate[bot])
- chore(deps): update dependency cilium/cilium-cli to v0.16.22 (v1.15) (#36506, @cilium-renovate[bot])
- chore(deps): update dependency cilium/hubble to v1.16.4 (v1.15) (#36146, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.22.9 docker digest to 147f428 (v1.15) (#36223, @cilium-renovate[bot])
- chore(deps): update go to v1.22.10 (v1.15) (#36446, @cilium-renovate[bot])
- chore(deps): update old stable lvh-images (v1.15) (patch) (#36158, @cilium-renovate[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.7-1733138674-96535afceef9d9f5c28a96cabe4068bf4472d053 (v1.15) (#36181, @cilium-renovate[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.8-1733718623-70f73cfb053b8039d0541fdd0c120afc5f57a43d (v1.15) (#36456, @cilium-renovate[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.8-1733837904-eaae5aca0fb988583e5617170a65ac5aa51c0aa8 (v1.15) (#36496, @cilium-renovate[bot])
- chore(deps): update quay.io/lvh-images/kind docker tag to bpf-20241129.013349 (v1.15) (#36281, @cilium-renovate[bot])
- chore(deps): update quay.io/lvh-images/kind docker tag to bpf-20241206.013345 (v1.15) (#36447, @cilium-renovate[bot])
- docs: In k0s guide, remove dashes to fix invalid Bash variable names. (Backport PR #36071, Upstream PR #35923, @yilas)
- docs: WireGuard doesn't require overlay port in Network Firewalls (Backport PR #36285, Upstream PR #36208, @julianwiedmann)
- envoy: Configure internal_address_config to avoid warning log (Backport PR #36017, Upstream PR #35943, @sayboras)
- fix(deps): update module golang.org/x/crypto to v0.31.0 [security] (v1.15) (#36531, @cilium-renovate[bot])
- images: Use cilium-builder image instead of golang to build hubble (Backport PR #36313, Upstream PR #35697, @learnitall)
- Makefile: fix swagger definition for automatic renovate updates (Backport PR #36071, Upstream PR #35979, @aanm)
- Update documentation for egress masquerading behavior (Backport PR #36464, Upstream PR #36267, @liyihuang)
Other Changes:
- [1.15] xdp: make cilium_calls_xdp map per-endpoint (#36099, @ti-mo)
- install: Update image digests for v1.15.11 (#36046, @cilium-release-bot[bot])
Docker Manifests
cilium
quay.io/cilium/cilium:v1.15.12@sha256:d1793b67d976e1bc0a4ab01b34c94adfcd35a8be7612d04c6d618bf25f50f0d1
clustermesh-apiserver
quay.io/cilium/clustermesh-apiserver:v1.15.12@sha256:96541f82229725e21b036adffffd92270c82b4bc0f8c27795058b5f115ad5bd0
docker-plugin
quay.io/cilium/docker-plugin:v1.15.12@sha256:f564af976d82c09e37f17945e7de9bfc17f76a7f0f4d5529795c22d3fffd2adb
hubble-relay
quay.io/cilium/hubble-relay:v1.15.12@sha256:19a6458a8ea824052fe74ff06f37222f42e72df41f06b548fe07b9a22daa1203
operator-alibabacloud
quay.io/cilium/operator-alibabacloud:v1.15.12@sha256:f62872cb96278159e968e3f384ad2ebab30eef9335c2a3838c5bc0bc528398ce
operator-aws
quay.io/cilium/operator-aws:v1.15.12@sha256:a9d63cbd89e0c7ccf46460809b95e37045092dd297a1bc934afa19a83f4884aa
operator-azure
quay.io/cilium/operator-azure:v1.15.12@sha256:a89046318bbb87f9ae357566dab448871384cfc7797ef2a3c31abd903d9ec8dc
operator-generic
quay.io/cilium/operator-generic:v1.15.12@sha256:e48d863367bfd39843917400aa7454ca6a4af74f995cf29a2edb81d7d13c7277
operator
quay.io/cilium/operator:v1.15.12@sha256:3c40d1c94de94629c02c2c8ee8b69ee6e16c9e60e94ecd343e2a48ebf4a6c430