Release v0.14.5

What's Changed

• connectivity: Fix some v0.14.4 failures by @brb in #1660
• Update stable release to v0.14.4 by @michi-covalent in #1662
• renovate: add renovate/stop-updating label on renovate's PRs by @tklauser in #1663
• connectivity/check: pass metrics to metricsIncrease by pointer by @tklauser in #1664
• sysdump: refactor submitTetragonBugtoolTasks to take defaults as parameters by @tklauser in #1665
• renovate: add annotations for connectivity test images by @tklauser in #1667
• Prepare for v0.14.5 release by @tklauser in #1666

Full Changelog: v0.14.4...v0.14.5

Release v0.14.4

What's Changed

• helm mode: Add EKS test coverage by @michi-covalent in #1638
• Add support for CiliumCIDRGroup CRD by @christarazi in #1537
• helm mode: Add EKS tunnel mode test coverage by @michi-covalent in #1639
• Add hooks to use cilium-cli as a package by @pippolo84 in #1609
• sysdump: Don't save cilium-etcd-secrets by @michi-covalent in #1634
• connectivity: Skip IPv6 requests in north-south-loadbalancing-with-l7-policy when running on < 1.14.0 Cilium by @jschwinger233 in #1629
• helm mode: Add external workloads test coverage by @michi-covalent in #1640
• fix(deps): pin dependencies by @renovate in #1644
• fix(deps): update module github.com/stretchr/testify to v1.8.3 by @renovate in #1645
• helm mode: autodetect service parameters for clustermesh by @asauber in #1642
• ci: fix gke network starvation by @brlbil in #1654
• Support for dedicated Cilium Envoy DaemonSet by @mhofstetter in #1546
• Add Prometheus metrics validation by @doniacld in #1575
• cli: Export Version var to be set externally by @pippolo84 in #1646
• check: make (Service)Address() return an IP address by @jibi in #1651
• check: update tunneling detection logic by @jibi in #1655
• connectivity: Automatically install IP routes on nodes w/o Cilium for from CIDR tests AND get rid of --datapath by @brb in #1579
• upgrade: Check for error before accessing release by @michi-covalent in #1637
• Allow to pass --insecure to curl by @sathieu in #1564
• Add GatewayAPI resources to sysdump by @meyskens in #1569
• docs: Add an example for setting image.override by @michi-covalent in #1636
• chore(deps): update docker.io/library/busybox:stable-glibc docker digest to bf30051 by @renovate in #1650
• Makefile: bump Go to v1.20.4 for release target by @tklauser in #1658
• connectivity: add property flag for junit by @brlbil in #1656
• Prepare for v0.14.4 release by @tklauser in #1659

Full Changelog: v0.14.3...v0.14.4

Release v0.14.3

What's Changed

• helm mode: add additional deprecated secret logic, and fix clustermesh connect for helm mode by @asauber in #1551
• Configure Renovate by @tklauser in #1582
• .github/workflows: bump AKS BYOCNI workflow timeout by @tklauser in #1593
• renovate: fix invalid JSON syntax by @tklauser in #1594
• renovate: fix invalid whitespace characters by @tklauser in #1596
• renovate configuration follow-ups by @tklauser in #1600
• Update stable release to v0.14.2 by @tklauser in #1591
• Don't enable nodeinit on EKS when not needed by @nebril in #1428
• Remove az-binary check by @michi-covalent in #1595
• Add junit output to connectivity test by @brlbil in #1590
• Farewell dependabot 👋 by @tklauser in #1605
• Add a function to check if the CLI is in Helm mode by @michi-covalent in #1606
• chore(deps): update all github action dependencies (patch) by @renovate in #1607
• chore(deps): update dependency go to v1.20.4 by @renovate in #1601
• chore(deps): update google-github-actions/setup-gcloud action to v1.1.1 by @renovate in #1610
• .github/workflows: add missing GH action version annotations by @tklauser in #1611
• chore(deps): update google/mirror-branch-action digest to 884625c by @renovate in #1598
• fix(deps): update all go dependencies main (patch) by @renovate in #1603
• fix(deps): pin dependencies by @renovate in #1597
• unit test: Restore the original env variable using defer by @michi-covalent in #1612
• Add helm mode test coverage for AKS BYOCNI by @michi-covalent in #1578
• fix(deps): update module gopkg.in/yaml.v2 to v3 by @renovate in #1614
• uninstall: allow ciliumVersion to start with "v" by @asauber in #1617
• renovate: schedule Go module updates once a week by @tklauser in #1616
• chore(deps): update google/mirror-branch-action digest to 30c52ee by @renovate in #1618
• fix(deps): pin dependencies by @renovate in #1613
• fix(deps): pin dependencies by @renovate in #1626
• helm mode: Clarify upgrade command by @michi-covalent in #1619
• fix(deps): pin dependencies by @renovate in #1630
• Remove last-applied-configuration from etcd-secret in sysdump by @marseel in #1631
• chore(deps): update actions/setup-go action to v4.0.1 by @renovate in #1632
• build(deps): bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible by @dependabot in #1635
• chore(deps): update helm/kind-action action to v1.7.0 by @renovate in #1633
• Prepare for v0.14.3 release by @michi-covalent in #1641

New Contributors

• @renovate made their first contribution in #1607

Full Changelog: v0.14.2...v0.14.3

Release v0.14.2

What's Changed

• Update stable release to v0.14.1 by @tklauser in #1572
• README.md: Add upgrade command samples by @michi-covalent in #1573
• Handle OCI repositories by @michi-covalent in #1576
• go.mod, vendor: bump google.golang.org/grpc from 1.54.0 to 1.55.0 by @dependabot in #1577
• connectivity: add basic egress gateway test by @jibi in #1555
• suite: disable KNP tests when endpoint routes and IPv6 are enabled by @jibi in #1584
• Remove AKS Azure IPAM test coverage by @michi-covalent in #1580
• connectivity: enable outside to nodeport via IPv6 when IPsec is enabled by @jschwinger233 in #1581
• connectivity: Fix IPv6 skipping when EP routes are on by @brb in #1587
• Revert "suite: disable KNP tests when endpoint routes and IPv6 are enabled" by @jibi in #1588
• Prepare for v0.14.2 release by @jibi in #1589

Full Changelog: v0.14.1...v0.14.2

Release v0.14.1

What's Changed

• Update stable release to v0.14.0 by @michi-covalent in #1535
• Remove "Release Date" column from the release table by @michi-covalent in #1536
• connectivity: Add test cases for Ingress by @sayboras in #1533
• fixes versioncheck for l7 proxy disabling with wireguard encryption by @ShiroDN in #1529
• connectivity: Retry getting the policy revision by @pchaigno in #1541
• connectivity/tests: omit IPs and vendor name from test names by @tklauser in #1545
• Allow the Helm timeout to be set on uninstall by @meyskens in #1550
• helm mode: add clustermesh enable/disable by @asauber in #1527
• sysdump: Fix writing to absolute path by @pchaigno in #1552
• connectivity: Retry on inconclusive results by @pchaigno in #1543
• build: update golangci-lint to version 1.52.2 by @mhofstetter in #1544
• Address wording an style nits of #1550 by @meyskens in #1553
• multicluster CI: Use LoadBalancer for GKE etcd by @asauber in #1556
• helm mode: add workflow for clustermesh via upgrade by @asauber in #1515
• Add GHA to install Cilium CLI executable by @brb in #1563
• helm mode: Make Helm chart repository configurable by @michi-covalent in #1560
• connectivity: test accessing NodePort from outside with L7 policy by @jschwinger233 in #1547
• Update k8s deps to v1.27.1 by @tklauser in #1548
• Replace versioncheck.Version with semver.ParseTolerant by @michi-covalent in #1561
• Dockerfile: Bump library/golang from 1.20.3-alpine3.16 to 1.20.4-alpine3.16 by @dependabot in #1568
• connectivity: add retry to external targets by @brlbil in #1540
• connectivity: Add tests for Service Account related rules by @sayboras in #1532
• connectivity: report peer name in "no flows recorded" log message by @tklauser in #1570
• Prepare for v0.14.1 release by @tklauser in #1571

New Contributors

• @ShiroDN made their first contribution in #1529
• @jschwinger233 made their first contribution in #1547

Full Changelog: v0.14.0...v0.14.1

Release v0.14.0

🚀 New Feature: helm installation mode

Feature Status: Experimental

This release introduces a new opt-in helm installation mode. This mode enables you to use cilium-cli and helm interchangeably to manage your Cilium installations, while taking advantage of cilium-cli's advanced features such as Cilium configuration auto-detection.

Please see README.md for details.

What's Changed

• Update stable release to v0.13.2 by @tklauser in #1466
• Add a l7 header replace test by @meyskens in #1463
• Tetragon Tracing Policies by @soggiest in #1467
• Replace deprecated flags with --helm-set by @michi-covalent in #1474
• ci: bump actions/checkout from 3.4.0 to 3.5.0 by @dependabot in #1471
• Sysdump: Add missing Cilium CRDs by @soggiest in #1468
• go.mod, vendor: bump google.golang.org/grpc from 1.53.0 to 1.54.0 by @dependabot in #1469
• Dockerfile: Bump library/golang from 50e46c1 to b1f83bc by @dependabot in #1478
• go.mod, vendor: bump github.com/go-openapi/strfmt from 0.21.5 to 0.21.7 by @dependabot in #1477
• Dockerfile: Bump library/golang from b1f83bc to 08bd1aa by @dependabot in #1481
• Dockerfile: Bump library/golang from 08bd1aa to 1d7fec2 by @dependabot in #1483
• Add Helm-based install / uninstall commands by @michi-covalent in #1475
• helm mode: Add hubble enable / disable commands by @michi-covalent in #1479
• go.mod, vendor: bump golang.org/x/mod from 0.9.0 to 0.10.0 by @dependabot in #1488
• go.mod, vendor: bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by @dependabot in #1487
• Dockerfile: Bump library/golang from 1.20.2-alpine3.16 to 1.20.3-alpine3.16 by @dependabot in #1491
• install: Support --nodes-without-cilium in Helm install mode by @christarazi in #1498
• vendor: get latest cilium by @harsimran-pabla in #1490
• go.mod, vendor: bump github.com/cloudflare/cfssl from 1.6.3 to 1.6.4 by @dependabot in #1497
• Use --set-string for node affinity by @christarazi in #1501
• helm mode install: Add --dry-run / --dry-run-helm-values flags by @michi-covalent in #1502
• Add CRD feature and add KNP tests by @doniacld in #1470
• ci: bump actions/checkout from 3.5.0 to 3.5.1 by @dependabot in #1508
• connectivity: Make detected Cilium Agent version available for feature detection by @jrajahalme in #1510
• go.mod, vendor: bump helm.sh/helm/v3 from 3.11.2 to 3.11.3 by @dependabot in #1509
• Add connectivity tests for auth by @meyskens in #1505
• BGP: Introduce new cli to get bgp peering state by @harsimran-pabla in #1500
• ci: bump actions/checkout from 3.5.1 to 3.5.2 by @dependabot in #1512
• Implement FromCIDR ingress tests by @christarazi in #1494
• Implement cilium upgrade using Helm by @asauber in #1492
• misc: get rid of Go label breaks & gotos by @mhofstetter in #1511
• Use Cilium v1.13.2 by default by @tklauser in #1517
• ci: bump google-github-actions/auth from 1.0.0 to 1.1.0 by @dependabot in #1516
• Add documentation for helm installation mode by @michi-covalent in #1504
• Rename master branch to main by @tklauser in #1519
• .github: add mirror from main -> master by @tklauser in #1525
• cli: adapt helm chart cleanup of deprecated hubble values by @mhofstetter in #1520
• defaults: bump json-mock to 1.3.5 by @jibi in #1528
• go.mod, vendor: bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible by @dependabot in #1530
• Prepare for v0.14.0 release by @michi-covalent in #1531

New Contributors

• @harsimran-pabla made their first contribution in #1490
• @doniacld made their first contribution in #1470
• @asauber made their first contribution in #1492
• @mhofstetter made their first contribution in #1511

Full Changelog: v0.13.2...v0.14.0

Release v0.13.2

What's Changed

• .github/workflows: use tag name instead of fully-formed ref in release name by @tklauser in #1435
• RELEASE.md: adjust release instructions after change to new release action by @tklauser in #1437
• go.mod, vendor: bump golang.org/x/mod from 0.8.0 to 0.9.0 by @dependabot in #1439
• Update stable release to v0.13.1 by @tklauser in #1436
• Update Go to 1.20.1 by @tklauser in #1434
• ingress: Create endpoint object by @sayboras in #1432
• Adds a test case for L7 policy with TLS by @meyskens in #1406
• ci: bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 by @dependabot in #1441
• go.mod, vendor: bump helm.sh/helm/v3 from 3.11.1 to 3.11.2 by @dependabot in #1443
• Dockerfile: Bump library/golang from 1.20.1-alpine3.16 to 1.20.2-alpine3.16 by @dependabot in #1444
• helm: fix incorrect log error formatting directive. by @tommyp1ckles in #1451
• ci: bump docker/setup-buildx-action from 2.4.1 to 2.5.0 by @dependabot in #1449
• install: Generate resource quotas from Helm chart by @michi-covalent in #1445
• connectivity: allow to restrict connectivity test pods using nodeSelector by @tklauser in #1446
• Dockerfile: Bump library/golang from 0848e98 to 50e46c1 by @dependabot in #1450
• Allow installing Cilium snapshot versions by @tklauser in #1452
• refactor: Break generateManifests() into smaller functions by @michi-covalent in #1453
• Update Go to 1.20.2 by @tklauser in #1454
• clustermesh: correctly mount the etcd data dir in the init container by @giorio94 in #1457
• ci: bump actions/setup-go from 3.5.0 to 4.0.0 by @dependabot in #1455
• ci: bump actions/checkout from 3.3.0 to 3.4.0 by @dependabot in #1456
• uninstall: set "cni.uninstall" to true on uninstall by @squeed in #1418
• Pick up Cilium v1.13.1 by @michi-covalent in #1458
• connectivity: Report IP families that are being tested by @Neilblaze in #1440
• go.mod, vendor: bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.5 by @dependabot in #1460
• vendor: Pick up the latest cilium by @michi-covalent in #1464
• Prepare for v0.13.2 release by @michi-covalent in #1465

New Contributors

• @meyskens made their first contribution in #1406

Full Changelog: v0.13.1...v0.13.2

Release v0.13.1

What's Changed

• go.mod, vendor: bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by @dependabot in #1420
• connectivity tests: fix issue on IPv6-only clusters by @giorio94 in #1414
• Update stable release to v0.13.0 by @tklauser in #1412
• enabled l7Proxy & removed err.log message for WireGuard by @Neilblaze in #1419
• clustermesh: update etcd version to v3.5.4 by @kahirokunn in #1421
• hubble: Patch Cilium DaemonSet with hubble-metrics port by @lambdanis in #1423
• go.mod, vendor: pull in latest cilium charts for v1.14.0-snapshot.0 by @tklauser in #1425
• Add profiling data(cpu/heap) of cilium agent to sysdump. by @marseel in #1424
• Prepare for v0.13.1 release by @tklauser in #1427
• Dockerfile: Bump library/golang from 9266e89 to bf83658 by @dependabot in #1431
• .github/workflows: use softprops/action-gh-release in release workflow by @tklauser in #1433

New Contributors

• @Neilblaze made their first contribution in #1419
• @kahirokunn made their first contribution in #1421
• @lambdanis made their first contribution in #1423

Full Changelog: v0.13.0...v0.13.1

Release v0.13.0

What's Changed

• Update stable release to v0.12.13 by @michi-covalent in #1394
• connectivity tests: support IPv6 in ICMP-related netpols by @giorio94 in #1403
• Dockerfile: Bump library/golang from 1.20.0-alpine3.16 to 1.20.1-alpine3.16 by @dependabot in #1395
• connectivity: skip nodeport tests with clustermesh if KPR is disabled by @giorio94 in #1401
• ingress: Create Ingress Service if required by @sayboras in #1404
• Wait for deletion of agent DaemonSet before deleting other resources. by @marseel in #1392
• defaults: Lower connectivity timeouts by @brb in #1399
• test: Wait for policy change if any policy changed by @jrajahalme in #1384
• status: detect when DaemonSets and Deployments are rolling out by @squeed in #1383
• go.mod, vendor: bump github.com/google/gops from 0.3.26 to 0.3.27 by @dependabot in #1408
• sysdump: distil events in to a nice filterable HTML table by @squeed in #1385
• Use Cilium v1.13.0 by default by @tklauser in #1407
• connectivity: Add IPv6 tests by @brb in #1390
• Prepare for v0.13.0 release by @tklauser in #1411

New Contributors

• @marseel made their first contribution in #1392

Full Changelog: v0.12.13...v0.13.0

Release v0.12.13

What's Changed

• Update stable release to v0.12.12 by @tklauser in #1327
• connectivity: Display last error after waiting k8s resources timeouts by @YutaroHayakawa in #1301
• RELEASE.md: check and merge PRs before the release by @tklauser in #1329
• build(deps): bump library/golang from 1.19.4-alpine3.16 to 1.19.5-alpine3.16 by @dependabot in #1331
• build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 by @dependabot in #1330
• Update Go to 1.19.5 by @tklauser in #1332
• install: Auto-enable BPF masquerade by @brb in #1333
• Update cilium vendoring by @raphink in #1334
• install: Do not enable BPF masq if ipv6 is enabled by @brb in #1338
• build(deps): bump docker/build-push-action from 3.2.0 to 3.3.0 by @dependabot in #1344
• connectivity: Set PreferDualStack for test services by @brb in #1339
• connectivity: Make pod to world test more configurable by @sathieu in #1345
• build(deps): bump helm.sh/helm/v3 from 3.10.3 to 3.11.0 by @dependabot in #1349
• build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 by @dependabot in #1350
• fix(connectivity): Add node-local-dns entitiy match for local ip usage case by @eminaktas in #997
• Honor global namespace flag in sysdump command by @ChrsMark in #1302
• sysdump: Collect new CR introduced as part of 1.13 by @sayboras in #1315
• dependabot config updates by @tklauser in #1328
• go.mod, vendor: bump google.golang.org/grpc from 1.52.0 to 1.52.3 by @dependabot in #1355
• [connectivity] add container name for health tests by @fl64 in #1354
• status: rename Hubble status to Hubble Relay by @kaworu in #1356
• Update Cilium charts, update default Cilium version to v1.12.6 by @tklauser in #1358
• ci: bump docker/build-push-action from 3.3.0 to 4.0.0 by @dependabot in #1360
• ci: bump docker/setup-buildx-action from 2.2.1 to 2.4.0 by @dependabot in #1361
• Check if context is cancelled before next iteration by @dharmicksai in #1353
• clustermesh: Add missing brackets of etcd option by @giorio94 in #1362
• clustermesh: adapt global service annotations by @giorio94 in #1359
• connectivity: drop pre-1.11 allow-except-world test by @tklauser in #1364
• Dockerfile: Bump library/golang from 1.19.5-alpine3.16 to 1.20.0-alpine3.16 by @dependabot in #1365
• Update Go to 1.20, golangci-lint to v1.51.0 by @tklauser in #1368
• go.mod, vendor: update github.com/cilium/hubble to v0.11.1 by @tklauser in #1367
• ci: use cloud provider specific external target for pod-to-world tests by @tklauser in #1369
• ci: bump google-github-actions/setup-gcloud from 1.0.1 to 1.1.0 by @dependabot in #1370
• Update golangci-lint to v1.51.1 by @tklauser in #1372
• ci: bump docker/setup-buildx-action from 2.4.0 to 2.4.1 by @dependabot in #1373
• go.mod, vendor: bump google.golang.org/grpc from 1.52.3 to 1.53.0 by @dependabot in #1377
• go.mod, vendor: bump helm.sh/helm/v3 from 3.11.0 to 3.11.1 by @dependabot in #1375
• go.mod, vendor: bump golang.org/x/mod from 0.7.0 to 0.8.0 by @dependabot in #1376
• go.mod, vendor: bump github.com/cilium/workerpool from 1.1.3 to 1.2.0 by @dependabot in #1380
• Add JSON status (fix #956) by @raphink in #958
• uninstall: remove cilium-config-agent role/rolebinding by @giorio94 in #1382
• install: fix support for multi-object files by @squeed in #1388
• Prepare for release v0.12.13 by @michi-covalent in #1393

New Contributors

• @sathieu made their first contribution in #1345
• @eminaktas made their first contribution in #997
• @ChrsMark made their first contribution in #1302
• @fl64 made their first contribution in #1354
• @dharmicksai made their first contribution in #1353
• @giorio94 made their first contribution in #1362

Full Changelog: v0.12.12...v0.12.13