We are pleased to release Cilium v1.9.8.
Summary of Changes
Minor Changes:
- Update k8s libraries to 1.19.11 (#16248, @nathanjsweet)
- helm: add back 'wellKnownIdentities' (Backport PR #16224, Upstream PR #16142, @bmcustodio)
Bugfixes:
- daemon: Ignore cilium_* interfaces when deriving NodePort device (Backport PR #16270, Upstream PR #16104, @eyanulis)
- Fixed bug causing policy realization being skipped in some scenarios with endpoint identity churn. (Backport PR #16339, Upstream PR #16271, @jrajahalme)
- Ignore K8s namespace events that have the same labels (Backport PR #16339, Upstream PR #16268, @aanm)
- loader: Revert incorrect initialization of endpoints in chaining mode (Backport PR #16339, Upstream PR #16227, @pchaigno)
CI Changes:
- ci: add slack notification to GH actions (Backport PR #16270, Upstream PR #16218, @nebril)
- examples, connectivity-check, test: Use even-numbered nodePort (Backport PR #16270, Upstream PR #16158, @christarazi)
- Improve ipsec compile-time testing in CI (Backport PR #16224, Upstream PR #15872, @joestringer)
- node-neigh: Fix unit test flake (Backport PR #16224, Upstream PR #16072, @brb)
- test: add e2e tests for fromEntities: cluster and all (Backport PR #16224, Upstream PR #15398, @chez-shanpu)
- test: Extend coverage for host policies enforcement (Backport PR #16224, Upstream PR #14822, @pchaigno)
- test: Fix the search for VIPs in
cilium service list(Backport PR #16224, Upstream PR #15968, @pchaigno) - test: Mark GKE CI pipeline as running Linux 4.19 (Backport PR #16224, Upstream PR #14639, @pchaigno)
- test: Misc improvements (Backport PR #16224, Upstream PR #16064, @pchaigno)
Misc Changes:
- contrib: Make upstream commit check more generic (Backport PR #16224, Upstream PR #16160, @joestringer)
- docs, gsg: add link to plumbers talk on service lb mechanisms (Backport PR #16224, Upstream PR #16171, @borkmann)
- docs, gsg: minor edits to kpr guide and note on hybrid use (Backport PR #16224, Upstream PR #16169, @borkmann)
- docs: gsg/operations - use parsed-literal for all blocks referring SCM_WEB (Backport PR #16173, Upstream PR #15963, @ti-mo)
- docs: add ids to the list of special identities (Backport PR #16224, Upstream PR #16123, @bmcustodio)
- docs: add information about ConfigMap updates (Backport PR #16224, Upstream PR #16141, @aanm)
- docs: Clarify coordination for backporting process (Backport PR #16270, Upstream PR #15989, @christarazi)
- Improve author attribution scripts (Backport PR #16224, Upstream PR #15899, @joestringer)
- Specify scrape interval for Hubble metrics (Backport PR #16224, Upstream PR #16214, @christian-2)
Other Changes:
- install: Update image digests for v1.9.7 (#16133, @joestringer)
- v1.9: Revert broken tests (#16333, @twpayne)
Docker Manifests
cilium
docker.io/cilium/cilium:v1.9.8@sha256:5d4c175a599ccb22a97dbc8b393a81caca71ada49951c5b5545039c6548ea350
quay.io/cilium/cilium:v1.9.8@sha256:5d4c175a599ccb22a97dbc8b393a81caca71ada49951c5b5545039c6548ea350
docker.io/cilium/cilium:stable@sha256:5d4c175a599ccb22a97dbc8b393a81caca71ada49951c5b5545039c6548ea350
quay.io/cilium/cilium:stable@sha256:5d4c175a599ccb22a97dbc8b393a81caca71ada49951c5b5545039c6548ea350
clustermesh-apiserver
docker.io/cilium/clustermesh-apiserver:v1.9.8@sha256:c56dfe3d1c6cbb75dd6fe1a2ee9f4156bfc8da34586cec61cf590226ea0e2f23
quay.io/cilium/clustermesh-apiserver:v1.9.8@sha256:c56dfe3d1c6cbb75dd6fe1a2ee9f4156bfc8da34586cec61cf590226ea0e2f23
docker.io/cilium/clustermesh-apiserver:stable@sha256:c56dfe3d1c6cbb75dd6fe1a2ee9f4156bfc8da34586cec61cf590226ea0e2f23
quay.io/cilium/clustermesh-apiserver:stable@sha256:c56dfe3d1c6cbb75dd6fe1a2ee9f4156bfc8da34586cec61cf590226ea0e2f23
docker-plugin
docker.io/cilium/docker-plugin:v1.9.8@sha256:71610d79758d8dd462701e6469f60c3fe36fcb0dfcd5771234bfe047014e177d
quay.io/cilium/docker-plugin:v1.9.8@sha256:71610d79758d8dd462701e6469f60c3fe36fcb0dfcd5771234bfe047014e177d
docker.io/cilium/docker-plugin:stable@sha256:71610d79758d8dd462701e6469f60c3fe36fcb0dfcd5771234bfe047014e177d
quay.io/cilium/docker-plugin:stable@sha256:71610d79758d8dd462701e6469f60c3fe36fcb0dfcd5771234bfe047014e177d
hubble-relay
docker.io/cilium/hubble-relay:v1.9.8@sha256:77379a9c25f5a613fcaaf5f8ce7e3d6e30576af483047800af6d8b6ca9b7bdb7
quay.io/cilium/hubble-relay:v1.9.8@sha256:77379a9c25f5a613fcaaf5f8ce7e3d6e30576af483047800af6d8b6ca9b7bdb7
docker.io/cilium/hubble-relay:stable@sha256:77379a9c25f5a613fcaaf5f8ce7e3d6e30576af483047800af6d8b6ca9b7bdb7
quay.io/cilium/hubble-relay:stable@sha256:77379a9c25f5a613fcaaf5f8ce7e3d6e30576af483047800af6d8b6ca9b7bdb7
operator-aws
docker.io/cilium/operator-aws:v1.9.8@sha256:ca21ab744f1fd8080e7bd7682b697c466cf9275fb88f56c888ee07601b6555ac
quay.io/cilium/operator-aws:v1.9.8@sha256:ca21ab744f1fd8080e7bd7682b697c466cf9275fb88f56c888ee07601b6555ac
docker.io/cilium/operator-aws:stable@sha256:ca21ab744f1fd8080e7bd7682b697c466cf9275fb88f56c888ee07601b6555ac
quay.io/cilium/operator-aws:stable@sha256:ca21ab744f1fd8080e7bd7682b697c466cf9275fb88f56c888ee07601b6555ac
operator-azure
docker.io/cilium/operator-azure:v1.9.8@sha256:dcca7242c84c40e1284ee5d85361e1686b0bc934e94ab1e9f063e61916f7d0e1
quay.io/cilium/operator-azure:v1.9.8@sha256:dcca7242c84c40e1284ee5d85361e1686b0bc934e94ab1e9f063e61916f7d0e1
docker.io/cilium/operator-azure:stable@sha256:dcca7242c84c40e1284ee5d85361e1686b0bc934e94ab1e9f063e61916f7d0e1
quay.io/cilium/operator-azure:stable@sha256:dcca7242c84c40e1284ee5d85361e1686b0bc934e94ab1e9f063e61916f7d0e1
operator-generic
docker.io/cilium/operator-generic:v1.9.8@sha256:e6c5e785c0695815d2f8ef1a99674af3d6453848f9feb2052c06af69348b3715
quay.io/cilium/operator-generic:v1.9.8@sha256:e6c5e785c0695815d2f8ef1a99674af3d6453848f9feb2052c06af69348b3715
docker.io/cilium/operator-generic:stable@sha256:e6c5e785c0695815d2f8ef1a99674af3d6453848f9feb2052c06af69348b3715
quay.io/cilium/operator-generic:stable@sha256:e6c5e785c0695815d2f8ef1a99674af3d6453848f9feb2052c06af69348b3715
operator
docker.io/cilium/operator:v1.9.8@sha256:92c62635ea7dc8be50361b9a0c2d061e169ea3730dbf49b41f67240d7ade8c77
quay.io/cilium/operator:v1.9.8@sha256:92c62635ea7dc8be50361b9a0c2d061e169ea3730dbf49b41f67240d7ade8c77
docker.io/cilium/operator:stable@sha256:92c62635ea7dc8be50361b9a0c2d061e169ea3730dbf49b41f67240d7ade8c77
quay.io/cilium/operator:stable@sha256:92c62635ea7dc8be50361b9a0c2d061e169ea3730dbf49b41f67240d7ade8c77