Release v0.16.22

Important

The default behavior for cilium upgrade has changed such that Helm values will be reset and then reused. This behavior can be reverted to the previous behavior by setting --reset-then-reuse-values=false or by explicitly specifying --reuse-values or --reset-values which always take precedence over --reset-then-reuse-values. See cilium/cilium#36347 for details.

What's Changed

• chore(deps): update golang:1.23.4-alpine3.19 docker digest to 5f33368 by @renovate in #2879
• Update stable release to v0.16.21 by @tklauser in #2880
• Pick up the latest cilium/cilium by @michi-covalent in #2883
• Makefile: Remove CILIUM_VERSION variable by @michi-covalent in #2884
• Prepare for v0.16.22 release by @tklauser in #2886

Full Changelog: v0.16.21...v0.16.22

Release v0.16.21

Tip

Cilium CLI now derives the default Cilium version to install from the source instead of injecting it at compile time. You no longer need to set github.com/cilium/cilium/cilium-cli/defaults.CLIVersion using -ldflags while compiling Cilium CLI. See cilium/cilium#36344 for details.

What's Changed

Minor Changes:

• Add cli support for impersonation --as and --as-group flags (cilium/cilium#35240, @cnmcavoy)
• AWS AL2023 support (cilium/cilium#36076, @viktor-kurchenko)
• cilium-cli: Derive the default version from cilium/charts (cilium/cilium#36344, @michi-covalent)
• Disable deprecated support for running the Cilium KVStore in pod network (cilium/cilium#35741, @giorio94)
• introducing a new CLI option to display ipcache information by labels or cidr (cilium/cilium#35275, @vasu-dasari)
• sysdump: respect worker count and collect Cilium profiling data as first task (cilium/cilium#35897, @giorio94)

Bugfixes:

• cilium-cli/connectivity: fix nil-pointer dereference if minimum version can't be detected (cilium/cilium#35802, @tklauser)
• Fix: cilium-cli install --repository flag respects repository even with cached versions. (cilium/cilium#35670, @renyunkang)

CI Changes:

• cilium-cli/connectivity: allow to specify log levels to check (cilium/cilium#36231, @tklauser)
• cilium-cli/connectivity: disable warning log checks before v1.17 (cilium/cilium#36358, @giorio94)
• cilium-cli: Improve tcpdump termination timeout handling (cilium/cilium#36021, @liyihuang)
• cilium-cli: retry exec-in-pod requests in case of transient errors (cilium/cilium#35961, @tklauser)
• cilium-cli: Run BGP tests sequentially (cilium/cilium#35727, @rastislavs)
• cli/connectivity: Check for unexpected warning logs (cilium/cilium#35723, @pchaigno)
• cli: Don't ignore datapath bug packet drops (cilium/cilium#36105, @pchaigno)
• Enabling IPSec pod-to-pod-with-l7-policy-encryption connectivity test for v1.15 and v1.16. (cilium/cilium#35742, @smagnani96)
• test, cli/connectivity: Remove stale error log exceptions (cilium/cilium#35848, @pchaigno)

Misc Changes:

• Add coverage for SNI enforcement in cilium-cli connectivity tests. (cilium/cilium#35887, @jrajahalme)
• Cilium-cli connectivity test now supports use of parallel requests with curl (cilium/cilium#35949, @jrajahalme)
• cilium-cli/install: remove deprecated no-op --disable-check flag (cilium/cilium#36110, @tklauser)
• cilium-cli: apply network policies to no-conn-disrupt test (cilium/cilium#35685, @giorio94)
• cilium-cli: Skip nil details for Service error in check-log-errors (cilium/cilium#35671, @rastislavs)
• cilium-cli: Use unique CNP names (cilium/cilium#36064, @jrajahalme)
• Miscellaneous improvements to DNS introspection policies in connectivity tests (cilium/cilium#36193, @giorio94)
• Revert "sysdump: collect Cilium profiling data as first task" (cilium/cilium#35771, @giorio94)
• sysdump: Collect crashed pod logs in cilium-test namespaces (cilium/cilium#35612, @jschwinger233)
• Update stable release to v0.16.20 by @michi-covalent in #2851
• .github: use netcat to check hubble port-forward success by @devodev in #2850
• chore(deps): update go to v1.23.3 (patch) by @renovate in #2854
• chore(deps): update golang docker tag to v1.23.3 by @renovate in #2853
• chore(deps): update golangci/golangci-lint docker tag to v1.62.0 by @renovate in #2858
• chore(deps): update dependency kubernetes-sigs/kind to v0.25.0 by @renovate in #2857
• Improve cacheability of Docker layers and add ca-certs to scratch image by @marcofranssen in #2842
• chore(deps): update docker/dockerfile:1.11 docker digest to 10c699f by @renovate in #2855
• chore(deps): update softprops/action-gh-release action to v2.1.0 by @renovate in #2860
• chore(deps): update docker.io/library/golang:1.23.3-alpine3.19 docker digest to f72297e by @renovate in #2863
• chore(deps): update dependency cilium/cilium to v1.16.4 by @renovate in #2864
• chore(deps): update golang:1.23.3-alpine3.19 docker digest to f72297e by @renovate in #2862
• chore(deps): update ubuntu:24.04 docker digest to 278628f by @renovate in #2865
• chore(deps): update docker/build-push-action action to v6.10.0 by @renovate in #2867
• chore(deps): update docker/dockerfile docker tag to v1.12 by @renovate in #2868
• chore(deps): update golangci/golangci-lint docker tag to v1.62.2 by @renovate in #2866
• action: Explicitly set go-version by @michi-covalent in #2871
• .github/workflows: add validation of renovate config by @tklauser in #2873
• renovate: update Go version in action.yaml by @tklauser in #2872
• chore(deps): update golang docker tag to v1.23.4 by @renovate in #2876
• chore(deps): update ubuntu:24.04 docker digest to 80dd3c3 by @renovate in #2875
• chore(deps): update go to v1.23.4 (patch) by @renovate in #2877
• Prepare for v0.16.21 release by @tklauser in #2869

New Contributors

• @marcofranssen made their first contribution in #2842

Full Changelog: v0.16.20...v0.16.21

Release v0.16.20

What's Changed

Minor Changes:

• Add CLI flag to specify --kubeconfig (cilium/cilium#34573, @ldlb9527)
• Add support for automatic port-forwarding in Hubble CLI Replace kubectl-based port-forwarding with native implementation in Cilium CLI (cilium/cilium#35483, @devodev)
• cilium-cli status: fail fast on terminal error (cilium/cilium#35048, @nimishamehta5)
• feat(clustermesh): Deploy in parallel the connections (cilium/cilium#35021, @littlejo)
• Miscellaneous improvements to the sysdump collection (cilium/cilium#35610, @giorio94)

Bugfixes:

• Fix packet drops for pod-to-pod connections that pass through ingress & egress proxy when using IPsec, caused by MTU misconfiguration. (cilium/cilium#35173, @smagnani96)
• Fixed Cilium CLI fatal error: concurrent map read and map write (cilium/cilium#35311, @chaunceyjiang)

CI Changes:

• Add concurrency to test-ipsec-upgrade (cilium/cilium#35362, @aanm)
• cilium-cli: Ignore "No egress gateway found" drops (cilium/cilium#35609, @pchaigno)
• cli/connectivity: Test strict mode encryption (cilium/cilium#35231, @jschwinger233)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#35221, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#35376, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#35490, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.2 docker digest to a7f2fc9 (main) (cilium/cilium#35373, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.2 docker digest to ad5c126 (main) (cilium/cilium#35568, @cilium-renovate[bot])
• chore(deps): update go to v1.23.2 (main) (cilium/cilium#35199, @cilium-renovate[bot])
• cilium-cli: account for opt out labels in node to node encryption tests (cilium/cilium#35585, @giorio94)
• cilium-cli: connectivity test: support every kind of resource for tests (cilium/cilium#35314, @squeed)
• cilium-cli: Show config.cilium.io annotations on configmap (cilium/cilium#35020, @joamaki)
• connectivity: Introdue Multicast connectivity test (cilium/cilium#34530, @yushoyamaguchi)
• Enable testifylint to lint test files, and mechanically fix reported issues (cilium/cilium#35237, @giorio94)
• Fixed Cilium CLI fatal error: concurrent map read and map write (cilium/cilium#35396, @chaunceyjiang)
• refactor: Use error definition in github.com/cilium/ebpf instead of using hard-corded error message (cilium/cilium#35389, @yushoyamaguchi)
• Replace inctimer package with time.After (cilium/cilium#35653, @tklauser)
• Revert "Fixed Cilium CLI fatal error: concurrent map read and map write" (cilium/cilium#35391, @pchaigno)
• Strip quotes from modifier arg in all Dockerfiles (cilium/cilium#35427, @hemanthmalla)
• multicluster: Increase hubble-event-queue-size by @michi-covalent in #2823
• chore(deps): update golang docker tag to v1.23.2 by @renovate in #2825
• chore(deps): update ubuntu:24.04 docker digest to b359f10 by @renovate in #2826
• chore(deps): update google-github-actions/auth action to v2.1.6 - autoclosed by @renovate in #2821
• Update stable release to v0.16.19 by @michi-covalent in #2824
• chore(deps): update golangci/golangci-lint-action action to v6.1.1 by @renovate in #2827
• chore(deps): update docker/setup-buildx-action action to v3.7.0 by @renovate in #2828
• chore(deps): update docker/setup-buildx-action action to v3.7.1 by @renovate in #2830
• chore(deps): update all github action dependencies (patch) by @renovate in #2831
• chore(deps): update docker.io/library/golang docker tag to v1.23.2 by @renovate in #2829
• chore(deps): update actions/upload-artifact action to v4.4.2 by @renovate in #2832
• chore(deps): update actions/upload-artifact action to v4.4.3 by @renovate in #2833
• chore(deps): update ubuntu:24.04 docker digest to ee6860a by @renovate in #2834
• chore(deps): update ubuntu:24.04 docker digest to ab64a83 by @renovate in #2835
• chore(deps): update ubuntu:24.04 docker digest to d4f6f70 by @renovate in #2837
• chore(deps): update dependency cilium/cilium to v1.16.3 by @renovate in #2836
• chore(deps): update ubuntu:24.04 docker digest to 99c3519 by @renovate in #2838
• chore(deps): update actions/setup-go action to v5.1.0 by @renovate in #2841
• chore(deps): update actions/checkout action to v4.2.2 by @renovate in #2840
• action: allow to configure image repo for CI installs by @rgo3 in #2844
• chore(deps): update docker/dockerfile docker tag to v1.11 by @renovate in #2845
• chore(deps): update all github action dependencies (patch) by @renovate in #2843
• .github: support native hubble port-forwarding by @devodev in #2848
• chore(deps): update softprops/action-gh-release action to v2.0.9 by @renovate in #2846
• Prepare for v0.16.20 release by @michi-covalent in #2847

New Contributors

• @rgo3 made their first contribution in #2844
• @devodev made their first contribution in #2848

Full Changelog: v0.16.19...v0.16.20

Release v0.16.19

What's Changed

Minor Changes:

• cilium-cli: Deprecate --disable-check flag (cilium/cilium#34953, @michi-covalent)
• feat(cilium-cli-clustermesh): Improve --destination-context option for connecting multiple remote contexts (cilium/cilium#34510, @littlejo)
• version: Don't create k8s client if --client is specified (cilium/cilium#34914, @michi-covalent)

Bugfixes:

• cli: fix a case when connectivity perf command was hanging if LRP was enabled in the cluster (cilium/cilium#35063, @marseel)
• Correctly format cilium status -o json CLI output for errors and warnings (cilium/cilium#34654, @nimishamehta5)
• Fix missing Helm chart version for status command (cilium/cilium#34748, @pgils)
• fix(clustermesh): mesh connection mode (cilium/cilium#34932, @littlejo)

CI Changes:

• cilium-cli: connectivity: fix the local-redirect-policy flow validation (cilium/cilium#34919, @ysksuzuki)
• cilium-cli: Define CLI_MAIN_DIR Make variable (cilium/cilium#34910, @michi-covalent)

Misc Changes:

• .github: add cache to cilium-cli and hubble-cli build workflows (cilium/cilium#34847, @aanm)
• chore(deps): update all-dependencies (main) (cilium/cilium#34872, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#34969, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.1 docker digest to 4f063a2 (main) (cilium/cilium#35075, @cilium-renovate[bot])
• chore(deps): update go to v1.23.1 (main) (cilium/cilium#34732, @cilium-renovate[bot])
• cilium-cli/status: sort status lines (cilium/cilium#34927, @tklauser)
• cilium-cli/sysdump: export SubmitMetricsSubtask (cilium/cilium#34864, @tklauser)
• cilium-cli: collect BGPv2 CRD resources in sysdump (cilium/cilium#34684, @rastislavs)
• cilium-cli: remove copying of loop variables (cilium/cilium#34944, @tklauser)
• cli/connectivity: improvements for echo-ingress-l7-via-hostport test (cilium/cilium#34502, @julianwiedmann)
• go: Replace x/maps package by respective standard libraries (cilium/cilium#34649, @sayboras)
• Use Go standard library slices package more extensively (cilium/cilium#34796, @tklauser)

Other Changes:

• Update stable release to v0.16.18 by @michi-covalent in #2807
• multicluster: correctly specify the dst context to clustermes connect by @giorio94 in #2810
• github: Increase hubble-event-queue-size by @michi-covalent in #2815
• chore(deps): update dependency ubuntu to v24 by @renovate in #2814
• github: Add a workflow to close stale issues and PRs by @michi-covalent in #2813
• chore(deps): update all github action dependencies (minor) by @renovate in #2811
• chore(deps): update dependency cilium/cilium to v1.16.2 by @renovate in #2812
• Prepare for #2755 - Dockerfile only by @leppeK in #2817
• go.mod: pick up github.com/cilium/cilium v1.17.0-pre.1 by @tklauser in #2818
• chore(deps): update docker/build-push-action action to v6.9.0 by @renovate in #2816
• chore(deps): update dependency go to v1.23.2 by @renovate in #2820
• Prepare for v0.16.19 release by @michi-covalent in #2822

New Contributors

• @leppeK made their first contribution in #2817

Full Changelog: v0.16.18...v0.16.19

Release v0.16.18

What's Changed

• Update stable release to v0.16.17 by @michi-covalent in #2794
• action: Run version command with --client flag by @michi-covalent in #2797
• chore(deps): update ubuntu:24.04 docker digest to 56a8952 by @renovate in #2796
• vendor: Remove gops dependency by @michi-covalent in #2798
• github: Remove unused files by @michi-covalent in #2801
• chore(deps): update ubuntu:24.04 docker digest to dfc1087 by @renovate in #2800
• release: Install curl by @michi-covalent in #2803
• chore(deps): update azure/login action to v2.2.0 by @renovate in #2799
• Prepare for v0.16.18 release by @michi-covalent in #2805

Full Changelog: v0.16.17...v0.16.18

Release v0.16.17

Warning

DO NOT use this release, cilium install command is broken (#2795). Use v0.16.18 instead.

What's Changed

• connectivity: test namespace param by @viktor-kurchenko in cilium/cilium#34428
• hooks: support concurrent tests run by @viktor-kurchenko in cilium/cilium#34427
• CODEOWNERS: Assign vendor/ to cilium-cli-maintainers by @michi-covalent in #2772
• chore(deps): update go to v1.23.0 (minor) by @renovate in #2768
• chore(deps): update golangci/golangci-lint docker tag to v1.60.2 by @renovate in #2775
• build: fix CLIVersion ldflag ref by @chenrui333 in #2773
• chore(deps): update google-github-actions/auth action to v2.1.5 - autoclosed by @renovate in #2776
• chore(deps): update golangci/golangci-lint docker tag to v1.60.3 by @renovate in #2778
• make: set set latest stable version based on stable.txt by @tklauser in #2783
• github: Remove "Push to Loki" workflow by @michi-covalent in #2784
• chore(deps): update actions/upload-artifact action to v4.4.0 by @renovate in #2781
• chore(deps): update go to v1.23.1 (patch) by @renovate in #2786
• chore(deps): update golang docker tag to v1.23.1 by @renovate in #2787
• chore(deps): update golangci/golangci-lint docker tag to v1.61.0 by @renovate in #2789
• vendor: Pick up github.com/cilium/cilium v1.17.0-pre.0 by @michi-covalent in #2788
• chore(deps): update golang:1.23.1-alpine3.19 docker digest to e0ea2a1 by @renovate in #2790
• chore(deps): update docker/dockerfile docker tag to v1.10 by @renovate in #2792
• chore(deps): update docker.io/library/golang:1.23.1-alpine3.19 docker digest to e0ea2a1 by @renovate in #2791
• Prepare for v0.16.17 release by @michi-covalent in #2793

Full Changelog: v0.16.16...v0.16.17

Release v0.16.16

Summary of Changes

Minor Changes:

• connectivity: test namespace param (cilium/cilium#34428, @viktor-kurchenko)

Misc Changes:

• hooks: support concurrent tests run (cilium/cilium#34427, @viktor-kurchenko)

Other Changes:

• Update stable release to v0.16.15 by @michi-covalent in #2749
• chore(deps): update golang docker tag to v1.22.6 by @renovate in #2745
• Update CODEOWNERS by @michi-covalent in #2763
• Remove the repo lock workflow by @michi-covalent in #2762
• chore(deps): update actions/upload-artifact action to v4.3.5 by @renovate in #2741
• chore(deps): update docker/build-push-action action to v6.6.0 by @renovate in #2747
• chore(deps): update go to v1.22.6 (patch) by @renovate in #2751
• chore(deps): update dependency cilium/cilium to v1.16.1 by @renovate in #2757
• chore(deps): update golangci/golangci-lint docker tag to v1.60.1 by @renovate in #2756
• chore(deps): update golang-images (minor) by @renovate in #2754
• chore(deps): update all github action dependencies (minor) by @renovate in #2767
• chore(deps): update all github action dependencies (patch) by @renovate in #2766
• Prepare for v0.16.16 release by @michi-covalent in #2771

Release v0.16.15

What's Changed

• Update stable release to v0.16.14 by @michi-covalent in #2737
• Lock cilium-cli repo by @michi-covalent in #2743
• action: Handle multiple cilium-cli directories by @michi-covalent in #2746
• Prepare for v0.16.15 release by @michi-covalent in #2748

Full Changelog: v0.16.14...v0.16.15

Release v0.16.14

⚠️ Upgrade notes ⚠️

This release changes the behavior of --test-namespace connectivity test flag (#2680). It adds the concurrent group number suffix to test namespaces even if --test-concurrency is set to 1. The test namespace is now called cilium-test-1 by default instead of cilium-test.

What's Changed

• Update stable release to v0.16.13 by @michi-covalent in #2674
• fix(deps): update github.com/cilium/charts digest to 3eef298 by @renovate in #2677
• chore(deps): update dependency cilium/cilium to v1.15.7 by @renovate in #2675
• connectivity: Add echo-ingress-l7-via-hostport-with-encryption testcase by @jschwinger233 in #2670
• connectivity: disrupt deployment improved by @viktor-kurchenko in #2679
• vendor: Remove gopkg.in/check.v1 dependency by @michi-covalent in #2682
• connectivity: echo-ingress-l7-via-hostport-with-encryption only runs with cilium 1.16.0 or newer by @jschwinger233 in #2686
• flags: Use option.NewNamedMapOptions by @michi-covalent in #2684
• chore(deps): update docker/dockerfile docker tag to v1.9 by @renovate in #2676
• Fix lint errors by @michi-covalent in #2685
• golangci-lint: Add errorlint by @michi-covalent in #2683
• chore(deps): update docker/build-push-action action to v6.4.0 by @renovate in #2687
• connectivity: perf deployment improved by @viktor-kurchenko in #2681
• connectivity: test namespace suffix by @viktor-kurchenko in #2680
• connectivity: add local-redirect-policy-with-node-dns test by @ysksuzuki in #2669
• connectivity: skip local-redirect-policy-with-node-dns by @ysksuzuki in #2705
• connectivity: Assert BGP timer intervals in BGP connectivity tests by @rastislavs in #2704
• fix(deps): update module github.com/cilium/cilium to v1.16.0-rc.2 by @renovate in #2700
• fix(deps): update github.com/cilium/charts digest to 2c16e87 by @renovate in #2699
• chore(deps): update docker/build-push-action action to v6.4.1 by @renovate in #2691
• sysdump: fix file separator by @viktor-kurchenko in #2703
• Update CONTRIBUTING.md by @michi-covalent in #2698
• chore(deps): update softprops/action-gh-release action to v2.0.8 by @renovate in #2709
• chore(deps): update golang:1.22.5-alpine3.19 docker digest to 653cab0 by @renovate in #2708
• connectivity: single JUnit report by @viktor-kurchenko in #2707
• Assign release-related files to cilium-cli-maintainers by @michi-covalent in #2710
• connectivity: Fix ineffective version check in BGP tests by @rastislavs in #2712
• chore(deps): update docker.io/library/golang:1.22.5-alpine3.19 docker digest to 48aac60 by @renovate in #2715
• chore(deps): update golang:1.22.5-alpine3.19 docker digest to 48aac60 by @renovate in #2711
• chore(deps): update all github action dependencies (minor) by @renovate in #2706
• fix(deps): update module github.com/cilium/cilium to v1.16.0 by @renovate in #2718
• fix(deps): update github.com/cilium/charts digest to 2a1e5b8 by @renovate in #2717
• Pick up kindest/node:v1.21.10 by @michi-covalent in #2719
• junit: collector fix by @viktor-kurchenko in #2721
• sysdump: Gather gops from cilium-operator by @joestringer in #2693
• Add multicast subcommand by @yushoyamaguchi in #2620
• kind: Pick up the latest kindest/node image by @michi-covalent in #2725
• chore(deps): update docker/setup-buildx-action action to v3.6.0 by @renovate in #2727
• chore(deps): update docker.io/coredns/coredns docker tag to v1.11.3 by @renovate in #2728
• connectivity: Support multiple conditions by @michi-covalent in #2732
• connectivity: use TestNamespace and ExternalDeploymentPort params by @ysksuzuki in #2731
• chore(deps): update golangci/golangci-lint-action action to v6.1.0 by @renovate in #2730
• chore(deps): update docker/setup-buildx-action action to v3.6.1 by @renovate in #2729
• chore(deps): update dependency cilium/cilium to v1.16.0 by @renovate in #2716
• {externalworkloads,multicluster}: Shorten cluster names by @michi-covalent in #2735
• Prepare for v0.16.14 release by @michi-covalent in #2734

New Contributors

• @yushoyamaguchi made their first contribution in #2620

Full Changelog: v0.16.13...v0.16.14

Release v0.16.13

What's Changed

• Update stable release to v0.16.12 by @michi-covalent in #2668
• connectivity: Add Port Range Tests by @nathanjsweet in #2605
• Add --disable-check flag to upgrade command by @michi-covalent in #2672
• clustermesh: fix remote clusters configuration reset upon deactivation by @giorio94 in #2665
• clustermesh: validate service type, and fix deprecated LB annotations by @giorio94 in #2664
• fix(deps): update module helm.sh/helm/v3 to v3.15.3 - autoclosed by @renovate in #2663
• chore(deps): update actions/setup-go action to v5.0.2 by @renovate in #2671
• Prepare for v0.16.13 release by @michi-covalent in #2673

Full Changelog: v0.16.12...v0.16.13