Summary of Changes
Bugfixes:
- Fix bug that could lead to inconsistent pod IP information between agents, sometimes leading to a failure to decrypt IPsec traffic. (Backport PR #22309, Upstream PR #22127, @aanm)
- Fix bug where configuring the API rate limiter options could fail when providing multiple options (Backport PR #22752, Upstream PR #22299, @thorn3r)
- Fix forwarding of the security identity by the DNS proxy which could cause random policy denials (Backport PR #22456, Upstream PR #22361, @aspsk)
- Fix GC of CEPs that were not GCed by kube-apiserver (Backport PR #22309, Upstream PR #22213, @aanm)
CI Changes:
- .github: Explicitly set build-commits job runner image version and install libtinfo5 (Backport PR #22329, Upstream PR #22315, @chancez)
- .github: fix bpf-checks on ubuntu-latest runner (Backport PR #22329, Upstream PR #22322, @julianwiedmann)
- Fix CODEOWNERS (#22293, @michi-covalent)
Misc Changes:
- .github/workflows: split the image tag update in two steps (Backport PR #22261, Upstream PR #22268, @aanm)
- Add automatic creation of Cilium base images (Backport PR #22261, Upstream PR #22179, @aanm)
- bpf: Remove FIB lookup for IPsec (Backport PR #22309, Upstream PR #22069, @pchaigno)
- build(deps): bump actions/setup-go from 3.3.1 to 3.4.0 (#22485, @dependabot[bot])
- build(deps): bump actions/setup-go from 3.4.0 to 3.5.0 (#22713, @dependabot[bot])
- build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.1 (#22305, @dependabot[bot])
- build(deps): bump github/codeql-action from 2.1.32 to 2.1.35 (#22495, @dependabot[bot])
- build(deps): bump github/codeql-action from 2.1.35 to 2.1.36 (#22631, @dependabot[bot])
- build(deps): bump github/codeql-action from 2.1.36 to 2.1.37 (#22760, @dependabot[bot])
- build(deps): bump helm/kind-action from 1.4.0 to 1.5.0 (#22714, @dependabot[bot])
- build(deps): bump KyleMayes/install-llvm-action from 1.6.0 to 1.6.1 (#22594, @dependabot[bot])
- chore(deps): update base-images (v1.11) (#22123, @renovate[bot])
- gha: Pin ubuntu-20.04 for conformance-test-ipv6 (Backport PR #22329, Upstream PR #22324, @sayboras)
Other Changes:
- .github/workflows: install promtool from binary release (#22331, @tklauser)
- install: Update image digests for v1.11.11 (#22239, @michi-covalent)
Docker Manifests
cilium
docker.io/cilium/cilium:v1.11.12@sha256:67e6af41d4711bf3514ee1055b6b5b9a83b048c6224da78e7824550b3ec28940
quay.io/cilium/cilium:v1.11.12@sha256:67e6af41d4711bf3514ee1055b6b5b9a83b048c6224da78e7824550b3ec28940
clustermesh-apiserver
docker.io/cilium/clustermesh-apiserver:v1.11.12@sha256:48e41910b6ee3c5bfbefc99a868df7e358b5a9cfeea704d4bf5610b77e20fdd4
quay.io/cilium/clustermesh-apiserver:v1.11.12@sha256:48e41910b6ee3c5bfbefc99a868df7e358b5a9cfeea704d4bf5610b77e20fdd4
docker-plugin
docker.io/cilium/docker-plugin:v1.11.12@sha256:f2cb764c6f013982ef1f122155a0e97a36abbbbe03f375de913ce2a6e26286fb
quay.io/cilium/docker-plugin:v1.11.12@sha256:f2cb764c6f013982ef1f122155a0e97a36abbbbe03f375de913ce2a6e26286fb
hubble-relay
docker.io/cilium/hubble-relay:v1.11.12@sha256:db78c879e19708239c83f028def0fecd6a543abaaf2a58bd17a14d8582628448
quay.io/cilium/hubble-relay:v1.11.12@sha256:db78c879e19708239c83f028def0fecd6a543abaaf2a58bd17a14d8582628448
operator-alibabacloud
docker.io/cilium/operator-alibabacloud:v1.11.12@sha256:87d1aadb9682bf34e218c197f4491d7a45fc3cb370674dc91da19cb07ec666dd
quay.io/cilium/operator-alibabacloud:v1.11.12@sha256:87d1aadb9682bf34e218c197f4491d7a45fc3cb370674dc91da19cb07ec666dd
operator-aws
docker.io/cilium/operator-aws:v1.11.12@sha256:e8a757da651280c116b04ccf7e096e0f456ac2c54bdf1979b45309429d327057
quay.io/cilium/operator-aws:v1.11.12@sha256:e8a757da651280c116b04ccf7e096e0f456ac2c54bdf1979b45309429d327057
operator-azure
docker.io/cilium/operator-azure:v1.11.12@sha256:0a0d733cb01dcb7e397b6a00a6b195f9721d711ddb3385e122c50712c2a25efb
quay.io/cilium/operator-azure:v1.11.12@sha256:0a0d733cb01dcb7e397b6a00a6b195f9721d711ddb3385e122c50712c2a25efb
operator-generic
docker.io/cilium/operator-generic:v1.11.12@sha256:4a036edd5afce506dc5e0ed340902c017c166f16f0a9ab37d59031f26c88a9d0
quay.io/cilium/operator-generic:v1.11.12@sha256:4a036edd5afce506dc5e0ed340902c017c166f16f0a9ab37d59031f26c88a9d0
operator
docker.io/cilium/operator:v1.11.12@sha256:1d9c408c48d88faea6766ce012829560cd905ac3a9f40397a571dd580c6e6381
quay.io/cilium/operator:v1.11.12@sha256:1d9c408c48d88faea6766ce012829560cd905ac3a9f40397a571dd580c6e6381