Summary of Changes
Minor Changes:
- clustermesh: add endpoints metrics and change global service (and MCS ServiceExport) metrics to report per cluster metrics instead of a global count (cilium/cilium#41323, @MrFreezeex)
Bugfixes:
- cilium-cli: Fix CNI config file collection in sysdump (cilium/cilium#42111, @pillai-ashwin)
- cilium-cli: Prevent panic in
node-to-node-encryptionconnectivity test (cilium/cilium#41600, @HadrienPatte) - connectivity-tests: limit IPv6 PodToIngress to Cilium >= v1.17 (cilium/cilium#42148, @julianwiedmann)
- Fix a fatal error when accessing multicast map using cilium-dbg bpf multicast (cilium/cilium#42080, @tklauser)
CI Changes:
- Add integration test to validate IPsec key derivation consistency across nodes, ensuring tunnel keys are properly derived and identical between Cilium pods. (cilium/cilium#40808, @pillai-ashwin)
- ci: enable copyloopvar linter (cilium/cilium#41893, @tklauser)
- cilium-cli, netns: fix golangci-lint 2.5.0 errors (cilium/cilium#41856, @tklauser)
- cilium-cli: Bring back NodePort Acceleration feature detection (cilium/cilium#41812, @brb)
- cilium-cli: Reenable L7 IPv6 tests (cilium/cilium#39662, @gentoo-root)
- cilium-cli: Specify TARGET for building release binaries (cilium/cilium#42177, @michi-covalent)
- cilium_cli: Override GO_BUILD Make variable (cilium/cilium#42162, @michi-covalent)
- cli, ipsec: Fix bidirectional IPsec tunnel check (cilium/cilium#42047, @pchaigno)
- cli: Fix unreliable tests due to error emitted in Cilium logs "retrieving device lxc*: Link not found" (cilium/cilium#42146, @fristonio)
Misc Changes:
- chore(deps): update all-dependencies (main) (cilium/cilium#41611, @cilium-renovate[bot])
- chore(deps): update all-dependencies (main) (cilium/cilium#42018, @cilium-renovate[bot])
- chore(deps): update docker.io/alpine/socat:1.8.0.3 docker digest to 0ce60b5 (main) (cilium/cilium#41558, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to 8305f5f (main) (cilium/cilium#41649, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to d709837 (main) (cilium/cilium#42019, @cilium-renovate[bot])
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6ea52a0 (main) (cilium/cilium#42252, @cilium-renovate[bot])
- chore(deps): update go to v1.25.1 (main) (cilium/cilium#41560, @cilium-renovate[bot])
- chore(deps): update go to v1.25.3 (main) (cilium/cilium#42061, @cilium-renovate[bot])
- cilium-cli/features: use common cmd metric list command (cilium/cilium#41630, @aanm)
- cilium-cli: drop disabled IP cache check from connectivity tests (cilium/cilium#42240, @tklauser)
- cli/clustermesh: remove leftover global services status info (cilium/cilium#41727, @giorio94)
- Refactor policy engine to use PolicyEntry as the internal representation of policies, as described in CFP-39646. (cilium/cilium#40213, @TheBeeZee)
- sysdump: add resource usage of nodes and pods (cilium/cilium#41415, @darox)
- chore(deps): update go to v1.25.1 (patch) by @renovate[bot] in #3097
- chore(deps): update actions/setup-go action to v6 by @renovate[bot] in #3094
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to d6bdb04 by @renovate[bot] in #3096
- chore(deps): update gcr.io/distroless/static:latest docker digest to 87bce11 by @renovate[bot] in #3099
- chore(deps): update softprops/action-gh-release action to v2.3.3 by @renovate[bot] in #3098
- chore(deps): update golang docker tag to v1.25.1 by @renovate[bot] in #3093
- chore(deps): update actions/stale action to v10 by @renovate[bot] in #3095
- chore(deps): update golang:1.25.1-alpine3.21 docker digest to 331bde4 by @renovate[bot] in #3100
- chore(deps): update dependency cilium/cilium to v1.18.2 by @renovate[bot] in #3102
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to 8305f5f by @renovate[bot] in #3103
- chore(deps): update golangci/golangci-lint docker tag to v2.5.0 by @renovate[bot] in #3104
- chore(deps): update docker/login-action action to v3.6.0 by @renovate[bot] in #3105
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to ab1f5c4 by @renovate[bot] in #3106
- chore(deps): update actions/stale action to v10.1.0 by @renovate[bot] in #3108
- chore(deps): update softprops/action-gh-release action to v2.3.4 by @renovate[bot] in #3107
- chore(deps): update softprops/action-gh-release action to v2.4.0 by @renovate[bot] in #3109
- chore(deps): update golang docker tag to v1.25.2 by @renovate[bot] in #3110
- chore(deps): update go to v1.25.2 (patch) by @renovate[bot] in #3112
- chore(deps): update golang:1.25.2-alpine3.21 docker digest to 0134653 by @renovate[bot] in #3113
- RELEASE: also look for release-blockers in cilium/cilium by @julianwiedmann in #3116
- chore(deps): update golang docker tag to v1.25.3 by @renovate[bot] in #3117
- chore(deps): update softprops/action-gh-release action to v2.4.1 by @renovate[bot] in #3114
- chore(deps): update go to v1.25.3 (patch) by @renovate[bot] in #3118
- chore(deps): update golang:1.25.3-alpine3.21 docker digest to 0c9f3e0 by @renovate[bot] in #3115
- Makefile: fix renovate depname for GO_IMAGE_* updates by @tklauser in #3119
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to 6ea52a0 by @renovate[bot] in #3111
- Prepare for v0.18.8 release by @michi-covalent in #3120