The Cilium core team is pleased to release Cilium v1.7.13. This release includes fixes for routing, MTU handling, CNI IPAM issues in environments with high pod churn, and reduces resource usage in certain environments when running with etcd. For more details, see the summary of changes below.
Summary of Changes
Minor Changes:
- k8s: Update libraries to v1.17.16 (#14444, @christarazi)
Bugfixes:
- routing: Fix route collisions in AWS ENI (#14337, @christarazi)
- cilium-cni: Fix error handling for bad netns (Backport PR #14669, Upstream PR #14645, @joestringer)
- clustermesh: Ignore symlink files on fsnotify events (Backport PR #14669, Upstream PR #14565, @tgraf)
- Fix bug where Cilium endpoints are not cleaned up, eventually leading to IP exhaustion despite a small number of endpoints on the node. (#14541, @joestringer)
- Fix bug where Cilium would constantly regenerate endpoints in environments with etcd and Linux 4.15 or below. (Backport PR #14440, Upstream PR #14300, @dctrwatson)
- Fix CIDR rule bug potentially dropping allowed traffic when using ExceptCIDRs expressions. (Backport PR #14669, Upstream PR #14516, @jrajahalme)
- Fix possible overflow in values presented in the
k8s_event_lag_secondsmetric. (Backport PR #14440, Upstream PR #14313, @aanm) - pkg/node: Skip setting MTU on local node routes (#14687, @aditighag)
- policy: Don't nil an empty selectors map. (#14389, @jrajahalme)
- policy: Track selectors that contribute to MapStateEntries (#14368, @jrajahalme)
Misc Changes:
- contrib/release: clarify project number for release process (Backport PR #14727, Upstream PR #14684, @aanm)
- Dockerfile: Bump cilium-runtime image (#14757, @joestringer)
- docs: Fix dependency conflict (Backport PR #14440, Upstream PR #14264, @joestringer)
- docker: rebuild cilium-runtime image (#14428, @jibi)
Docker Manifests
cilium
docker.io/cilium/cilium@sha256:ce1254db59d1113e80ca13748ec54204183e15996efdef0dee915eb69e0b3920
quay.io/cilium/cilium@sha256:71988c98e618eedb9a2305cd836ddd8eb6248f9040561ca8342e51714f770221
docker-plugin
docker.io/cilium/docker-plugin@sha256:8b11db869ba86893b657308c07d061d977d7ded2fc02c5f46dd51d1a0f67fe52
quay.io/cilium/docker-plugin@sha256:1da3f8e501c520a0dbf1edd625d324346f3b691c47a386a80fbe459d3b247165
operator
docker.io/cilium/operator@sha256:26d87b143b5b0c38a6c3847acbbcd7015d549a28934fee71e59e6b345ce542f5
quay.io/cilium/operator@sha256:b66acd113a9c4031466520f38dae761db3ea091abddf0e9c2b5b191f2ccdc671