Update Helm release cilium to v1.16.17 #114

vshn-renovate · 2024-05-15T11:10:47Z

This PR contains the following updates:

Package	Update	Change
cilium (source)	patch	`1.16.4` -> `1.16.17`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

cilium/cilium (cilium)

`v1.16.17`: 1.16.17

Compare Source

Security Advisories

This release addresses GHSA-38pp-6gcp-rqvm.

Summary of Changes

Bugfixes:

cilium-operator: ciliumendpoints are not garbage collected until a minimum age is reached (5m by default) (Backport PR #42565, Upstream PR #42413, @zhouhaibing089)
encrypt status: also check tcx attachment on interfaces (Backport PR #42451, Upstream PR #42328, @bersoare)
Fix cilium_operator_lbipam_conflicting_pools metric to report correct value. (Backport PR #42321, Upstream PR #41999, @hanapedia)

CI Changes:

.github/actions/e2e: define static job names (Backport PR #42438, Upstream PR #42332, @aanm)
[v1.16] .github/workflows: Add base-SHA input to ariane triggered workflows (#42195, @dylandreimerink)
ariane: don't run full test suite for BPF test changes (Backport PR #41846, Upstream PR #34931, @julianwiedmann)
ariane: manage workflow exclusions for changes to CODEOWNERS and USERS.md (Backport PR #41846, Upstream PR #34894, @julianwiedmann)
Ariane: skip E2E tests when changing unit tests only (Backport PR #41846, Upstream PR #35334, @giorio94)
conformance-aws-cni: disable l7 proxy with aws-cni (Backport PR #42634, Upstream PR #42578, @aanm)
gh: ginkgo: fix focus for service hairpin test (Backport PR #42650, Upstream PR #42633, @julianwiedmann)
gha: allow configuring runner for workflows building Cilium binaries (Backport PR #42634, Upstream PR #42582, @giorio94)
Testing for RHEL8 compatibility now uses a RHEL8.10-compatible kernel (previously this was a RHEL8.6-compatible kernel). (Backport PR #42628, Upstream PR #41639, @julianwiedmann)

Misc Changes:

[v1.16] deps: bump CNI plugins version (#42445, @ferozsalam)
chore(deps): update all github action dependencies (v1.16) (#42406, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.16) (#42546, @cilium-renovate[bot])
chore(deps): update dependency cilium/cilium-cli to v0.18.8 (v1.16) (#42347, @cilium-renovate[bot])
chore(deps): update docker.io/library/busybox:1.36.1 docker digest to 355b3a1 (v1.16) (#42544, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.24.10 docker digest to c3ea417 (v1.16) (#42686, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.24.9 docker digest to 5034fa4 (v1.16) (#42410, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.24.9 docker digest to f542f0a (v1.16) (#42404, @cilium-renovate[bot])
chore(deps): update github artifact actions (v1.16) (#42407, @cilium-renovate[bot])
chore(deps): update go to v1.24.10 (v1.16) (#42623, @cilium-renovate[bot])
chore(deps): update module github.com/containerd/containerd to v1.7.29 [security] (v1.16) (#42639, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/certgen docker tag to v0.2.4 (v1.16) (#42422, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.34.10-1761014632-c360e8557eb41011dfb5210f8fb53fed6c0b3222 (v1.16) (#42405, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.34.10-1762597008-ff7ae7d623be00078865cff1b0672cc5d9bfc6d5 (v1.16) (#42687, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.16) (patch) (#42545, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.16) (patch) (#42688, @cilium-renovate[bot])
ci: Add workflow permissions for auto-approve and renovate (Backport PR #42321, Upstream PR #42281, @kyle-c-simmons)
ci: Fix call-backport-label-updater permissions (Backport PR #42634, Upstream PR #42510, @kyle-c-simmons)
ci: Skip full CI for USERS.md file (Backport PR #41846, Upstream PR #34605, @sayboras)
fix: run post-release and publish-helm workflows on cilium org (Backport PR #42321, Upstream PR #42279, @sekhar-isovalent)

Other Changes:

[v1.16] test: ginkgo: skip BPF masq tests on configs without external node (#42464, @julianwiedmann)
install: Update image digests for v1.16.16 (#42342, @cilium-release-bot[bot])
Stop tracking selectorPolicy in endpoint to fix policy deadlock referencing the the old identity after an identity change (#42418, @odinuge)

Docker Manifests

cilium

quay.io/cilium/cilium:v1.16.17@sha256:7b9f3b8b7d65e8ffa465a382e177049c11932d579071809cf5462d4b0c02afce

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.16.17@sha256:64816e7709210216d1b26d0bea74cbb022feb3c8a435c6a7cfa0007509f18019

docker-plugin

quay.io/cilium/docker-plugin:v1.16.17@sha256:e591717f6b74f2e275ac4c3ff17f12b77e52df1efddd22ff9cebb249a381157d

hubble-relay

quay.io/cilium/hubble-relay:v1.16.17@sha256:12fddb9968f7d2b917c80b6433bfde2349ed2c17ff869aa968091db6170352f1

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.16.17@sha256:4c84fcc22ece2d31bfeb0a09f027e48e3beb950ca3913a519c9797e466c9d95d

operator-aws

quay.io/cilium/operator-aws:v1.16.17@sha256:11dc378b59da62e02e8aa279cb0cade4bbbe61c002ab4595d87db135ccb4dac5

operator-azure

quay.io/cilium/operator-azure:v1.16.17@sha256:8b2d44de04325978919d9d852212d467f7f9b574b5b1cb482c38f2a177fccddb

operator-generic

quay.io/cilium/operator-generic:v1.16.17@sha256:b2e9174c454ed1c17d3ecc185fdc6effb9214f74a9216323e655cc3a495b2cf7

operator

quay.io/cilium/operator:v1.16.17@sha256:f3261fd198255efdd2efe7bcff040b2d170d98ee93fa714335eb030924ee7605

`v1.16.16`: 1.16.16

Compare Source

Summary of Changes

ℹ️ The images in this release were signed with cosign v3. Please use cosign v3 tooling to validate signatures with the following command syntax:

cosign verify --certificate-github-workflow-repository cilium/cilium --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-github-workflow-name 'Image Release Build' --certificate-github-workflow-ref refs/tags/v1.16.16 --certificate-identity https://github.com/cilium/cilium/.github/workflows/build-images-releases.yaml@refs/tags/v1.16.16 quay.io/cilium/operator-aws:v1.16.16 | jq -r '.[].critical.image'

Bugfixes:

bpf:tests:egressgw: fix metrics count (Backport PR #41824, Upstream PR #40338, @smagnani96)
Cilium now configures Envoy to allow websocket connections to be passed through with HTTP policies. (Backport PR #41830, Upstream PR #41729, @jrajahalme)
operator/pkg/lbipam: fix LoadBalancerIPPool conditions update logic (Backport PR #41830, Upstream PR #41322, @alimehrabikoshki)
xds: Fix a case in which after cilium-agent we were not sending updated resources to Envoy (Backport PR #41993, Upstream PR #38654, @marseel)

CI Changes:

.actions/cilium-config: add missing extraEnv in GH action (Backport PR #41830, Upstream PR #41420, @aanm)
.github/workflows: add variable for renovate bot username (Backport PR #41845, Upstream PR #41818, @aanm)
.github/workflows: automatically add /test for renovate PRs (Backport PR #41845, Upstream PR #41770, @aanm)
.github/workflows: do not wait on linters form forks (Backport PR #41830, Upstream PR #41822, @aanm)
.github/workflows: remove reviewers requested by auto-committer[bot] (Backport PR #41830, Upstream PR #41759, @aanm)
ginkgo: add test ownership for ginkgo tests (Backport PR #42057, Upstream PR #41950, @aanm)
workflows: fix GCP OIDC authentication's project ID (#42175, @nbusseneau)

Misc Changes:

.github/workflows: stop build CI images until base images are built (Backport PR #41830, Upstream PR #41681, @aanm)
chore(deps): update all github action dependencies (v1.16) (#41799, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.16) (#42034, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.16) (#42140, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.16) (#42270, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.16) (#42032, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.16) (#42118, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.16) (#42234, @cilium-renovate[bot])
chore(deps): update dependency cilium/little-vm-helper to v0.0.27 (v1.16) (#42269, @cilium-renovate[bot])
chore(deps): update dependency protocolbuffers/protobuf to v33 (v1.16) (#42271, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.24.7 docker digest to 2c5f7a0 (v1.16) (#42033, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.24.9 docker digest to 02ce1d7 (v1.16) (#42255, @cilium-renovate[bot])
chore(deps): update go to v1.24.8 (v1.16) (#42064, @cilium-renovate[bot])
chore(deps): update go to v1.24.9 (v1.16) (#42168, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.33.9-1759146487-8a1d7d426318c207eba89819cfdc1c4aaa1d5b5f (v1.16) (#41798, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.34.10-1760767433-887ebe7d6ccc2a9dc8c73f6ae4927283283b507e (v1.16) (#42250, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.34.8-1760431956-5396abb8b954867b98828b5af2b1f23bcc05f9dc (v1.16) (#42165, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.16) (patch) (#41732, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.16) (patch) (#42139, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.16) (patch) (#42302, @cilium-renovate[bot])
docs: fix broken Chainguard SBOM link (Backport PR #41830, Upstream PR #41719, @yashisrani)
docs: Update iproute2 compile steps in reference guide. (Backport PR #41830, Upstream PR #41638, @dkanaliev)
Update checkpatch and startup-script image digest (Backport PR #41830, Upstream PR #41710, @HadrienPatte)

Other Changes:

[v1.16] bpf:tests:egressgw: fix metrics count (part 2) (#42207, @julianwiedmann)
[v1.16] proxy: Bump envoy version to 1.34.x (#42096, @sayboras)
gh: ipsec-upgrade: fix patch-level upgrade from v1.16.14 (#41776, @julianwiedmann)
install: Update image digests for v1.16.15 (#41817, @cilium-release-bot[bot])

Docker Manifests

cilium

quay.io/cilium/cilium:v1.16.16@sha256:201acb2c6ab85221f067b1867fa727676b7acdbdfd641f5b1db12cf246d65668

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.16.16@sha256:b5cafba73ae0276a81022e2efe20badc2d2ec2183abb3a5f08794dcfef3d09b6

docker-plugin

quay.io/cilium/docker-plugin:v1.16.16@sha256:e8b4a4c17bd338ee282c73a945a335331a7e4580a086675737ce5c92b5337fb6

hubble-relay

quay.io/cilium/hubble-relay:v1.16.16@sha256:a8adcd27fbe2cb5f103c05521c406d9dc48a211c1b53ffce02352b8de0cbfe1d

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.16.16@sha256:fbb4ac3ba1e57324a9211dbe77cdf4080db867255b8c0585b0ab11bdda8754d6

operator-aws

quay.io/cilium/operator-aws:v1.16.16@sha256:236098b0829dc3efaaf34742ddfef8ea8eda183c1203cb333de08309460c5cca

operator-azure

quay.io/cilium/operator-azure:v1.16.16@sha256:e07597b849f33db0daa726f5c76fff0524ccfe68abdcea1d2bd9b9e726df5453

operator-generic

quay.io/cilium/operator-generic:v1.16.16@sha256:d37c99a2c87be522bc5ab271a8bd72d45b7a4096b73253f932009e5a7d682a99

operator

quay.io/cilium/operator:v1.16.16@sha256:d5cf570bbe21c0cd7562b258ec3033840ea930707bc204522fa1e14ebd0cd01f

`v1.16.15`: 1.16.15

Compare Source

⚠️ ⚠️ ⚠️ ⚠️
The v1.16.14 was never released due to a release process bug after tagging. The following summary of changes are based on the v1.16.13.
⚠️ ⚠️ ⚠️ ⚠️

Summary of Changes

CI Changes:

.github/workflows: simplify ginkgo workflow (Backport PR #41619, Upstream PR #41396, @aanm)
.github: Don't overwrite junit results (Backport PR #41042, Upstream PR #39159, @joestringer)
.github: fix upload artifacts for features.json (Backport PR #41372, Upstream PR #41119, @aanm)
.github: Run final steps when tests aren't skipped (Backport PR #41042, Upstream PR #40180, @joestringer)
[v1.16] images: update cilium-{runtime,builder} (#41696, @tklauser)
add missing extraArgs in CI (Backport PR #41372, Upstream PR #41005, @aanm)
builder: Add tparse,junit tooling (Backport PR #41042, Upstream PR #39092, @joestringer)
Centralize dynamic test ownership configuration (Backport PR #41042, Upstream PR #38045, @joestringer)
checkpatch: bump checkpatch version, and minor adaptations (Backport PR #41372, Upstream PR #41290, @giorio94)
CI: Add merge and upload composite action (Backport PR #41042, Upstream PR #35355, @brlbil)
ci: simplify scheduled test (Backport PR #41264, Upstream PR #41261, @brlbil)
CLI: Attribute tests to codeowners (Backport PR #41042, Upstream PR #37027, @joestringer)
Emit junit output from BPF unit tests (Backport PR #41042, Upstream PR #39099, @joestringer)
gha: run checkpatch check only on PR events (Backport PR #41372, Upstream PR #41308, @giorio94)
Improved test failure attribution on stable branches by using TESTOWNERS files to route failures to appropriate code quality teams rather than generic CI infrastructure teams. (Backport PR #41042, Upstream PR #40776, @pillai-ashwin)
pkg/metrics: define default CIDR policies values (Backport PR #41473, Upstream PR #41422, @aanm)
TESTOWNERS: Import cilium-cli owners from main (#41375, @joestringer)
Upload junit results for Go unit test runs (Backport PR #41042, Upstream PR #39015, @joestringer)

Misc Changes:

.github/workflows: add step 5 as part of the image build process (Backport PR #41179, Upstream PR #41113, @aanm)
build-images-release: specify main branch on reusable jobs (Backport PR #41179, Upstream PR #41530, @aanm)
checkpatch: Update image digest (Backport PR #41473, Upstream PR #41360, @HadrienPatte)
chore(deps): update all github action dependencies (v1.16) (#41355, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.16) (#41445, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.16) (#41571, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.16) (#41670, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.16) (#41342, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.16) (#41442, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.16) (#41511, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.16) (#41614, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.16) (#41718, @cilium-renovate[bot])
chore(deps): update dependency protocolbuffers/protobuf to v32 (v1.16) (#41225, @cilium-renovate[bot])
chore(deps): update dependency protocolbuffers/protobuf to v32.1 (v1.16) (#41669, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.24.6 docker digest to 714ad64 (v1.16) (#41354, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.24.6 docker digest to 8d9e57c (v1.16) (#41443, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.24.7 docker digest to 5e9d14d (v1.16) (#41666, @cilium-renovate[bot])
chore(deps): update go to v1.24.7 (v1.16) (#41570, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.33.7-1756004918-79963736ba1b039ff10f7dcb65fa43c5dd6556ed (v1.16) (#41359, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.33.9-1757593597-298d4cf0a4058d027aa846ef3647123e8411d2b0 (v1.16) (#41667, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.16) (patch) (#41444, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.16) (patch) (#41668, @cilium-renovate[bot])
cli: Load code owners dynamically via --code-owners (Backport PR #41042, Upstream PR #38044, @joestringer)
cli: Support filtering --log-code-owners (Backport PR #41042, Upstream PR #37905, @joestringer)
docs: document portmap binary requirements (Backport PR #41372, Upstream PR #41300, @nbusseneau)
Fix release script steps (Backport PR #41179, Upstream PR #41502, @aanm)
install: bump startup script version (Backport PR #41372, Upstream PR #41299, @Artyop)
lower log severity for stale metadata to avoid CI issue (Backport PR #41473, Upstream PR #41389, @liyihuang)
Makefile: Fix multi codeowner detection (Backport PR #41042, Upstream PR #40923, @joestringer)
Makefile: Improve tparse,junit output handling (Backport PR #41042, Upstream PR #39098, @joestringer)
metrics/features: remove aws-vpc-cni (Backport PR #41593, Upstream PR #41498, @aanm)
Prepare for release v1.16.14 (#41723, @cilium-release-bot[bot])
tools: Move codeowners library from cilium-cli dir (Backport PR #41042, Upstream PR #40253, @joestringer)
Update all github action dependencies (v1.16) (#41224, @cilium-renovate[bot])
Update all-dependencies (v1.16) (#41128, @cilium-renovate[bot])
Update docker.io/library/golang:1.24.6 Docker digest to e155b51 (v1.16) (#41222, @cilium-renovate[bot])
Update stable lvh-images (v1.16) (patch) (#41223, @cilium-renovate[bot])

Other Changes:

[v1.16] envoy: Start serving listeners only after clusters have been ACKed (#41607, @jrajahalme)
[v1.16] Pr/jrajahalme/41721 backport 1.16 (#41735, @jrajahalme)
CI: Fix junit upload for v1.16 (#41686, @joestringer)
Fix a bug that caused the kernel verifier on pre-v5.7 kernels to reject the bpf_sock program with "invalid func unknown#122" when the LocalRedirectPolicy feature is enabled. (#41457, @julianwiedmann)
install: Update image digests for v1.16.13 (#41180, @cilium-release-bot[bot])

Docker Manifests

cilium

quay.io/cilium/cilium:v1.16.15@sha256:c0fa87d70a7ba624fbe581d40a7b7e9e8773a6efd4bb17d0bd14ff854039ec75

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.16.15@sha256:7b44efa93e0428511341005e493efb8aa88efd369901c07f8832dc5b3d669a2d

docker-plugin

quay.io/cilium/docker-plugin:v1.16.15@sha256:13023f0825ef3df62e3f108480fab6f3539bcde05a51c435bf79985eea816a33

hubble-relay

quay.io/cilium/hubble-relay:v1.16.15@sha256:713f46f45f5e5c67c0f3e25c98669760f05b7f22b4a6a2b0b9934839a833618d

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.16.15@sha256:26b6da245ec124a7d5c12a0d05de75e0da272a67f802e59ebb95d328255232b3

operator-aws

quay.io/cilium/operator-aws:v1.16.15@sha256:bb914f013c4a2548ff6028af63fb8bcf730c173d5bf8a57efef150da2614a6ac

operator-azure

quay.io/cilium/operator-azure:v1.16.15@sha256:41ba9911403a151e79aa5544949e40839019ba0fa4600f366b4c3a544ae572eb

operator-generic

quay.io/cilium/operator-generic:v1.16.15@sha256:fea37022f858272c27cefe6b4959d45e2ca03d957decbfa210ce35931f346ecd

operator

quay.io/cilium/operator:v1.16.15@sha256:aadf3c529e7838c8a7de5ad196ccdd6d5797664e1afd5ddefd7830ae28835cf5

`v1.16.13`: 1.16.13

Compare Source

Summary of Changes

Minor Changes:

Add kernel_version, endpoint_routes_enabled, strict_mode_enabled and kubernetes_version feature metrics. (Backport PR #41073, Upstream PR #41003, @aanm)

Bugfixes:

bgp: Use private fork of the GoBGP to fix BGP MD5 auth (Backport PR #40579, Upstream PR #40566, @YutaroHayakawa)
Helm: Correct seccompProfile for cilium-agent pods (Backport PR #40579, Upstream PR #40476, @jcpunk)
install/kubernetes: fix clustermesh-apiserver extraEnv (Backport PR #41073, Upstream PR #41021, @aanm)

CI Changes:

.github/actions: only upload files with features-tested prefix (Backport PR #40989, Upstream PR #40975, @aanm)
[v1.16] .github: Remove use of cosign attest --recursive (#40700, @YutaroHayakawa)
[v1.16] ci: Revert build_commits runner to ubuntu-22.04 (#40867, @rastislavs)
ci: conformance-eks token extended to 8h (Backport PR #40579, Upstream PR #40474, @mathpl)
ci: more powerful runners for go linting (Backport PR #40764, Upstream PR #40582, @mathpl)
Fix GKE cluster creation failures when branch names exceed 63-byte label limit by implementing automatic truncation with hash-based uniqueness preservation. (Backport PR #40851, Upstream PR #40725, @pillai-ashwin)
spire: Fix unreliable test (Backport PR #40663, Upstream PR #40561, @joestringer)

Misc Changes:

.github/workflows: bump build-images-base timeout to 60 minutes (Backport PR #40989, Upstream PR #40919, @aanm)
.github: fix removal of all files in /mnt (Backport PR #40851, Upstream PR #40818, @aanm)
.github: fix upload artifacts for features.json (#41089, @aanm)
.github: remove all contents of /mnt in build images CI (Backport PR #40851, Upstream PR #40814, @aanm)
chore(deps): update actions/download-artifact action to v5 (v1.16) (#41061, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.16) (#40750, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.16) (#40909, @cilium-renovate[bot])
chore(deps): update all github action dependencies (v1.16) (#41062, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.16) (#40747, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.16) (#40985, @cilium-renovate[bot])
chore(deps): update dependency cilium/cilium-cli to v0.18.6 (v1.16) (#40906, @cilium-renovate[bot])
chore(deps): update dependency cilium/little-vm-helper to v0.0.26 (v1.16) (#40647, @cilium-renovate[bot])
chore(deps): update dependency protocolbuffers/protobuf to v31.1 (v1.16) (#40749, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang docker tag to v1.24.5 (v1.16) (#40748, @cilium-renovate[bot])
chore(deps): update go to v1.24.6 (v1.16) (#40995, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.33.6-1753919866-df8077dbd3932edccb59f1c5c70e01f2c1f63741 (v1.16) (#40907, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.16) (patch) (#40674, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.16) (patch) (#40908, @cilium-renovate[bot])
chore(deps): update stable lvh-images (v1.16) (patch) (#41060, @cilium-renovate[bot])
ci: add/change runner labels (Backport PR #40989, Upstream PR #40972, @Artyop)
daemon/test: explicitly wait for identities synchronization (Backport PR #40851, Upstream PR #40811, @giorio94)
doc:monitor: clarify direction traced with default aggregation level (Backport PR #40580, Upstream PR #40398, @smagnani96)
docs: Add missing IPAM modes to configuration page (Backport PR #40663, Upstream PR #40540, @RayyanSeliya)
docs: Add warning about changing an IP pool (Backport PR #40663, Upstream PR #40567, @sorrison)
docs: Extend Hubble Performance Tuning Documentation (Backport PR #40580, Upstream PR #34665, @glrf)
docs: remove l7 EnableDefaultDeny callout (Backport PR #40579, Upstream PR #40441, @squeed)
policy: redact sensitive tls context properties for logging (Backport PR #40579, Upstream PR #40417, @fristonio)

Other Changes:

images: update cilium-{runtime,builder} (#40840, @aanm)
install: Update image digests for v1.16.12 (#40545, @cilium-release-bot[bot])

Docker Manifests

cilium

quay.io/cilium/cilium:v1.16.13@sha256:ea59f51ba72cded67e6d2161192db680f422f0a3abfb1b8c37d0c3f1d5a934fd

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.16.13@sha256:c42f514226a7942d1ad0e24737f4af3e51f03cb5ebe8de3731b6ae204768edff

docker-plugin

quay.io/cilium/docker-plugin:v1.16.13@sha256:6e5bb7438f26268a9b9a4ded53a4d2df7324f40dfe212f2d7bba4a8bb6d0b4e4

hubble-relay

quay.io/cilium/hubble-relay:v1.16.13@sha256:55f659befd04e576348fbe6e06e52679dab4ae719301d22ce8cb131c4076e885

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.16.13@sha256:dd7721dbeaeb1cf7caf3345c28530ab3e9b8df7726d535e5753f3c87fe1df762

operator-aws

quay.io/cilium/operator-aws:v1.16.13@sha256:ffda94d43189a8c336dc018580703dad0b7b09e0f7d2b26b7633b08c2ebe78b8

operator-azure

quay.io/cilium/operator-azure:v1.16.13@sha256:e1ab6a0aecb8a9d9b7fcc36b3c7a568ae4fdf13ffab45e8eaaf76673cce8cf3e

operator-generic

quay.io/cilium/operator-generic:v1.16.13@sha256:94d0bed62d981b9ebd8d5041206705a92c49e7b3cfdabca9c4611f04ac82abc2

operator

quay.io/cilium/operator:v1.16.13@sha256:cad7dba55e741da80f7ae6cae745713b5945448a1bae63c9b1fe06ca25d664c9

`v1.16.12`: 1.16.12

Compare Source

Summary of Changes

Bugfixes:

Fix CIDRGroupRef handling in cilium network policy rule spec. (#40139, @fristonio)
LBIPAM: Fix deletion of CiliumLoadBalancerIPPool with multiple IP blocks that led to an operator crash (Backport PR #40093, Upstream PR #40013, @pippolo84)
pkg/egressgateway: ensure gateway IP is IPv4 (Backport PR #40331, Upstream PR #40209, @rgo3)

CI Changes:

Backported setting egressMasqueradeInterfaces and concurrent test runs to fix ci-eks workflow. (#40468, @jrajahalme)

Misc Changes:

.github/workflows: remove reviewers if ciliumbot approved PR (Backport PR #40093, Upstream PR #39989, @aanm)
auto-approve: add repository as part command (Backport PR #40093, Upstream PR #40050, @aanm)
auto-approve: add repository as part command (Backport PR #40331, Upstream PR #40089, @aanm)
chore(deps): update all-dependencies (v1.16) (#40159, @cilium-renovate[bot])
chore(deps): update all-dependencies (v1.16) (#40370, @cilium-renovate[bot])
chore(deps): update dependency cilium/cilium-cli to v0.18.5 (v1.16) (#40327, @cilium-renovate[bot])
chore(deps): update dependency go to v1.24.5 (v1.16) (#40425, @cilium-renovate[bot])
chore(deps): update docker.io/library/golang:1.24.4 docker digest to 20a022e (v1.16) (#40160, @cilium-renovate[bot])
contrib/git: add merge drivers to automate post-merge commands (Backport PR #40292, Upstream PR #40189, @aanm)
disk-cleanup: parallelize cleanup process to speed up step (Backport PR #40093, Upstream PR #40054, @aanm)
docs/ipsec: Fix incorrect statement on hostns encryption (Backport PR #40173, Upstream PR #40133, @pchaigno)
Makefile: Require API generation commands to succeed (Backport PR #40206, Upstream PR #40199, @joestringer)
operator/secretsync: silence reconciliation logs (Backport PR #40226, Upstream PR #40217, @tklauser)
proxy: Use upstream envoy control plane API (Backport PR #40242, Upstream PR #39672, @sayboras)

Other Changes:

[v1.16] deps: Update cilium-envoy image to 1.33.x (#40163, @sayboras)
Bpf datapath TCP conntrack entries are (re)created only in the forward direction, solving an issue with freezing proxy connections when backend connection is re-opened. (#40449, @jrajahalme)
install: Update image digests for v1.16.11 (#40115, @cilium-release-bot[bot])
v1.16: docs: Document encapsulation options (#40472, @pchaigno)

Docker Manifests

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Signed-off-by: Renovate Bot <tech+renovate@vshn.ch>

vshn-renovate added the dependency label May 15, 2024

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch from fb6ea1d to 7eafb0c Compare May 24, 2024 14:11

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch from 7eafb0c to b6abfe1 Compare June 10, 2024 16:50

vshn-renovate changed the title ~~Update Helm release cilium to v1.14.11~~ Update Helm release cilium to v1.14.12 Jun 10, 2024

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch 2 times, most recently from 7891bac to c5e7876 Compare June 20, 2024 14:48

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch 3 times, most recently from 7ae4bec to 8c40135 Compare July 9, 2024 13:49

vshn-renovate changed the title ~~Update Helm release cilium to v1.14.12~~ Update Helm release cilium to v1.14.12 - autoclosed Jul 9, 2024

vshn-renovate closed this Jul 9, 2024

vshn-renovate deleted the commodore-renovate/patch-cilium branch July 9, 2024 14:29

vshn-renovate changed the title ~~Update Helm release cilium to v1.14.12 - autoclosed~~ Update Helm release cilium to v1.14.12 Jul 11, 2024

vshn-renovate restored the commodore-renovate/patch-cilium branch July 11, 2024 19:28

vshn-renovate reopened this Jul 11, 2024

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch from 8c40135 to cca2792 Compare July 11, 2024 19:48

vshn-renovate changed the title ~~Update Helm release cilium to v1.14.12~~ Update Helm release cilium to v1.15.7 Jul 11, 2024

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch from cca2792 to 17a1094 Compare July 17, 2024 13:54

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch from 17a1094 to 068e414 Compare July 30, 2024 10:08

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch 3 times, most recently from 6a60eaa to 4e05d10 Compare August 14, 2024 13:08

vshn-renovate changed the title ~~Update Helm release cilium to v1.15.7~~ Update Helm release cilium to v1.15.8 Aug 14, 2024

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch 7 times, most recently from 3eb66a4 to ea9bf58 Compare August 15, 2024 13:09

vshn-renovate changed the title ~~Update Helm release cilium to v1.16.10~~ Update Helm release cilium to v1.16.11 Jun 19, 2025

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch 3 times, most recently from 1a1758d to aa140b5 Compare July 4, 2025 07:10

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch from aa140b5 to 0bbcba6 Compare July 16, 2025 11:50

vshn-renovate changed the title ~~Update Helm release cilium to v1.16.11~~ Update Helm release cilium to v1.16.12 Jul 16, 2025

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch 2 times, most recently from c54d950 to 6157c6f Compare July 29, 2025 13:49

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch from 6157c6f to 2ca49a8 Compare August 6, 2025 09:12

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch from 2ca49a8 to 1c78e27 Compare September 4, 2025 10:52

vshn-renovate changed the title ~~Update Helm release cilium to v1.16.12~~ Update Helm release cilium to v1.16.13 Sep 4, 2025

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch 2 times, most recently from 53f07ea to 9839355 Compare September 22, 2025 09:53

vshn-renovate changed the title ~~Update Helm release cilium to v1.16.13~~ Update Helm release cilium to v1.16.15 Sep 22, 2025

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch 5 times, most recently from 4ee1171 to 23e0ced Compare September 30, 2025 09:53

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch from 23e0ced to 177a393 Compare October 8, 2025 08:52

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch from 177a393 to af8d8ca Compare October 23, 2025 18:30

vshn-renovate changed the title ~~Update Helm release cilium to v1.16.15~~ Update Helm release cilium to v1.16.16 Oct 23, 2025

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch from af8d8ca to 202f686 Compare October 29, 2025 12:51

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch 4 times, most recently from 6073677 to 86a5512 Compare November 12, 2025 13:30

vshn-renovate changed the title ~~Update Helm release cilium to v1.16.16~~ Update Helm release cilium to v1.16.17 Nov 12, 2025

Update Helm release cilium to v1.16.17

8802e06

Signed-off-by: Renovate Bot <tech+renovate@vshn.ch>

vshn-renovate force-pushed the commodore-renovate/patch-cilium branch from 86a5512 to 8802e06 Compare November 12, 2025 14:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update Helm release cilium to v1.16.17 #114

Update Helm release cilium to v1.16.17 #114

Uh oh!

vshn-renovate commented May 15, 2024 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Update Helm release cilium to v1.16.17 #114

Are you sure you want to change the base?

Update Helm release cilium to v1.16.17 #114

Uh oh!

Conversation

vshn-renovate commented May 15, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.16.17: 1.16.17

Security Advisories

Summary of Changes

Docker Manifests

cilium

clustermesh-apiserver

docker-plugin

hubble-relay

operator-alibabacloud

operator-aws

operator-azure

operator-generic

operator

v1.16.16: 1.16.16

Summary of Changes

Docker Manifests

cilium

clustermesh-apiserver

docker-plugin

hubble-relay

operator-alibabacloud

operator-aws

operator-azure

operator-generic

operator

v1.16.15: 1.16.15

Summary of Changes

Docker Manifests

cilium

clustermesh-apiserver

docker-plugin

hubble-relay

operator-alibabacloud

operator-aws

operator-azure

operator-generic

operator

v1.16.13: 1.16.13

Summary of Changes

Docker Manifests

cilium

clustermesh-apiserver

docker-plugin

hubble-relay

operator-alibabacloud

operator-aws

operator-azure

operator-generic

operator

v1.16.12: 1.16.12

Summary of Changes

Docker Manifests

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

vshn-renovate commented May 15, 2024 •

edited

Loading

`v1.16.17`: 1.16.17

`v1.16.16`: 1.16.16

`v1.16.15`: 1.16.15

`v1.16.13`: 1.16.13

`v1.16.12`: 1.16.12