Tip
Cilium CLI now derives the default Cilium version to install from the source instead of injecting it at compile time. You no longer need to set github.com/cilium/cilium/cilium-cli/defaults.CLIVersion using -ldflags while compiling Cilium CLI. See cilium/cilium#36344 for details.
What's Changed
Minor Changes:
- Add cli support for impersonation --as and --as-group flags (cilium/cilium#35240, @cnmcavoy)
- AWS AL2023 support (cilium/cilium#36076, @viktor-kurchenko)
- cilium-cli: Derive the default version from cilium/charts (cilium/cilium#36344, @michi-covalent)
- Disable deprecated support for running the Cilium KVStore in pod network (cilium/cilium#35741, @giorio94)
- introducing a new CLI option to display ipcache information by labels or cidr (cilium/cilium#35275, @vasu-dasari)
- sysdump: respect worker count and collect Cilium profiling data as first task (cilium/cilium#35897, @giorio94)
Bugfixes:
- cilium-cli/connectivity: fix nil-pointer dereference if minimum version can't be detected (cilium/cilium#35802, @tklauser)
- Fix: cilium-cli install --repository flag respects repository even with cached versions. (cilium/cilium#35670, @renyunkang)
CI Changes:
- cilium-cli/connectivity: allow to specify log levels to check (cilium/cilium#36231, @tklauser)
- cilium-cli/connectivity: disable warning log checks before v1.17 (cilium/cilium#36358, @giorio94)
- cilium-cli: Improve tcpdump termination timeout handling (cilium/cilium#36021, @liyihuang)
- cilium-cli: retry exec-in-pod requests in case of transient errors (cilium/cilium#35961, @tklauser)
- cilium-cli: Run BGP tests sequentially (cilium/cilium#35727, @rastislavs)
- cli/connectivity: Check for unexpected warning logs (cilium/cilium#35723, @pchaigno)
- cli: Don't ignore datapath bug packet drops (cilium/cilium#36105, @pchaigno)
- Enabling IPSec pod-to-pod-with-l7-policy-encryption connectivity test for v1.15 and v1.16. (cilium/cilium#35742, @smagnani96)
- test, cli/connectivity: Remove stale error log exceptions (cilium/cilium#35848, @pchaigno)
Misc Changes:
- Add coverage for SNI enforcement in cilium-cli connectivity tests. (cilium/cilium#35887, @jrajahalme)
- Cilium-cli connectivity test now supports use of parallel requests with curl (cilium/cilium#35949, @jrajahalme)
- cilium-cli/install: remove deprecated no-op --disable-check flag (cilium/cilium#36110, @tklauser)
- cilium-cli: apply network policies to no-conn-disrupt test (cilium/cilium#35685, @giorio94)
- cilium-cli: Skip
nil details for Serviceerror in check-log-errors (cilium/cilium#35671, @rastislavs) - cilium-cli: Use unique CNP names (cilium/cilium#36064, @jrajahalme)
- Miscellaneous improvements to DNS introspection policies in connectivity tests (cilium/cilium#36193, @giorio94)
- Revert "sysdump: collect Cilium profiling data as first task" (cilium/cilium#35771, @giorio94)
- sysdump: Collect crashed pod logs in cilium-test namespaces (cilium/cilium#35612, @jschwinger233)
- Update stable release to v0.16.20 by @michi-covalent in #2851
- .github: use netcat to check hubble port-forward success by @devodev in #2850
- chore(deps): update go to v1.23.3 (patch) by @renovate in #2854
- chore(deps): update golang docker tag to v1.23.3 by @renovate in #2853
- chore(deps): update golangci/golangci-lint docker tag to v1.62.0 by @renovate in #2858
- chore(deps): update dependency kubernetes-sigs/kind to v0.25.0 by @renovate in #2857
- Improve cacheability of Docker layers and add ca-certs to scratch image by @marcofranssen in #2842
- chore(deps): update docker/dockerfile:1.11 docker digest to 10c699f by @renovate in #2855
- chore(deps): update softprops/action-gh-release action to v2.1.0 by @renovate in #2860
- chore(deps): update docker.io/library/golang:1.23.3-alpine3.19 docker digest to f72297e by @renovate in #2863
- chore(deps): update dependency cilium/cilium to v1.16.4 by @renovate in #2864
- chore(deps): update golang:1.23.3-alpine3.19 docker digest to f72297e by @renovate in #2862
- chore(deps): update ubuntu:24.04 docker digest to 278628f by @renovate in #2865
- chore(deps): update docker/build-push-action action to v6.10.0 by @renovate in #2867
- chore(deps): update docker/dockerfile docker tag to v1.12 by @renovate in #2868
- chore(deps): update golangci/golangci-lint docker tag to v1.62.2 by @renovate in #2866
- action: Explicitly set go-version by @michi-covalent in #2871
- .github/workflows: add validation of renovate config by @tklauser in #2873
- renovate: update Go version in action.yaml by @tklauser in #2872
- chore(deps): update golang docker tag to v1.23.4 by @renovate in #2876
- chore(deps): update ubuntu:24.04 docker digest to 80dd3c3 by @renovate in #2875
- chore(deps): update go to v1.23.4 (patch) by @renovate in #2877
- Prepare for v0.16.21 release by @tklauser in #2869
New Contributors
- @marcofranssen made their first contribution in #2842
Full Changelog: v0.16.20...v0.16.21