10000 Release 1.16.10 · cilium/cilium · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

1.16.10
Compare
Choose a tag to compare
@cilium-release-bot cilium-release-bot released this 15 May 18:48
· 7896 commits to main since this release
v1.16.10
This tag was signed with the committer’s verified signature.
joestringer Joe Stringer
SSH Key Fingerprint: up2UNiGoKPJzKD6RD0wAbZjD7U0m/YpqXK1sjpCgLQI
Verified
Learn about vigilant mode.
a93da32

Summary of Changes

Minor Changes:

Bugfixes:

  • Fix a bug where a CiliumNetworkPolicy/CiliumClusterwideNetworkPolicy containing invalid rules would not be reported with invalid status. (Backport PR #38949, Upstream PR #38801, @tklauser)
  • Fix a deadlock when a host has no IPv4 address. (Backport PR #39077, Upstream PR #38938, @EmilyShepherd)
  • Fix a panic happening in the ipset reconciler when a previous reconciliation failed. (Backport PR #38949, Upstream PR #38890, @pippolo84)
  • Fix bug that would cause the cilium-dbg encrypt status command to not list any decryption interfaces when KPR is enabled. (Backport PR #39215, Upstream PR #39170, @pchaigno)
  • Fixes a bug where layer-7 rules would override enableDefaultDeny: false, incorrectly dropping traffic. (Backport PR #39382, Upstream PR #38841, @nimishamehta5)
  • ipsec: Fix key derivation error in case of corrupted boot IDs (Backport PR #39077, Upstream PR #39059, @pchaigno)
  • k8s: Fixed a case when delete event for service endpointslices might have been missed if connectivity to k8s apiserver was broken causing stale service cache for service. (Backport PR #38949, Upstream PR #38779, @marseel)

CI Changes:

Misc Changes:

  • [v1.16] deps: bump CNI plugins version (#39331, @ferozsalam)
  • [v1.16] deps: bump github.com/osrg/gobgp/v3 to v3.35.0 (#39225, @ferozsalam)
  • [v1.16] deps: bump golang-jwt to 4.5.2 (#39495, @ferozsalam)
  • Add the doc for multi-pool ipam about how to update the existing ip pool (Backport PR #38949, Upstream PR #38539, @liyihuang)
  • chore(deps): update all github action dependencies (v1.16) (#39051, @cilium-renovate[bot])
  • chore(deps): update all github action dependencies (v1.16) (#39185, @cilium-renovate[bot])
  • chore(deps): update all-dependencies (v1.16) (#39325, @cilium-renovate[bot])
  • chore(deps): update docker.io/library/golang:1.23.8 docker digest to 87bb940 (v1.16) (#38912, @cilium-renovate[bot])
  • chore(deps): update docker.io/library/golang:1.23.8 docker digest to e54daaa (v1.16) (#39049, @cilium-renovate[bot])
  • chore(deps): update docker.io/library/golang:1.24.2 docker digest to 30baaea (v1.16) (#39317, @cilium-renovate[bot])
  • chore(deps): update go to v1.24.3 (v1.16) (#39381, @cilium-renovate[bot])
  • chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.5-1744328671-a8b58b35c03a3d100a2b026fc111417207183301 (v1.16) (#38913, @cilium-renovate[bot])
  • chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.5-1744798797-f7456c0c30336bbd437eff7743374370e415fc44 (v1.16) (#39050, @cilium-renovate[bot])
  • chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.5-1745916268-e485bbc0c95e30aa233cb06a753789375b12ad18 (v1.16) (#39227, @cilium-renovate[bot])
  • chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.5-1745971871-f98500f20b253684d483b783b29df2e4db05ea7c (v1.16) (#39257, @cilium-renovate[bot])
  • chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.6-1746661844-0f602c28cb2aa57b29078195049fb257d5b5246c (v1.16) (#39414, @cilium-renovate[bot])
  • chore(deps): update stable lvh-images (v1.16) (patch) (#38914, @cilium-renovate[bot])
  • chore(deps): update stable lvh-images (v1.16) (patch) (#38971, @cilium-renovate[bot])
  • chore(deps): update stable lvh-images (v1.16) (patch) (#39184, @cilium-renovate[bot])
  • chore(deps): update stable lvh-images (v1.16) (patch) (#39319, @cilium-renovate[bot])
  • chore(deps): update stable lvh-images (v1.16) (patch) (#39477, @cilium-renovate[bot])
  • chore: remove retention-days param in build-images-releases.yaml (Backport PR #39436, Upstream PR #39431, @sekhar-isovalent)
  • cilium: Fix device controller's dependency on netfilter (Backport PR #38949, Upstream PR #38777, @borkmann)
  • contrib/scripts: Fix IndexError in stacktrace script (Backport PR #39215, Upstream PR #39101, @christarazi)
  • contrib: Remove kind.sh dependency on git (Backport PR #39405, Upstream PR #39154, @joestringer)
  • docs: Add good kernel versions for the L7 policy IPv6 bug (Backport PR #39405, Upstream PR #39212, @gentoo-root)
  • docs: add warning about l7 policy and EnableDefaultDeny (Backport PR #39077, Upstream PR #38675, @squeed)
  • docs: Document L7 policy IPv6 bug (Backport PR #38949, Upstream PR #38591, @gentoo-root)
  • docs: Fix casing and formatting in L3 examples section (Backport PR #39405, Upstream PR #39065, @mikejoh)
  • docs: Fix variable naming in EKS-to-EKS Clustermesh guide (Backport PR #39077, Upstream PR #38821, @zzuckerfrei)
  • docs: The Installation on OpenShift OKD document has been updated to link to maintained operators for Cilium (Isovalent Enterprise for Cilium). This operator is validated on all current versions of OpenShift. (Backport PR #39405, Upstream PR #38886, @auriaave)
  • Documentation : Modification of eks-clustermesh-prep.rst (Backport PR #39215, Upstream PR #39025, @rwinieski)
  • documentation: fix get deployment cmd (Backport PR #39215, Upstream PR #39155, @g0gn)
  • k8s/resource: Don't Add to WaitGroup asynchronously (Backport PR #38949, Upstream PR #38692, @joamaki)
  • maglev: Fix division by zero upon table recreation (Backport PR #39077, Upstream PR #38659, @borkmann)
  • make: fix golangci-lint version detection (Backport PR #39077, Upstream PR #38996, @mhofstetter)
  • workflows: fix lint-workflows (Backport PR #39402, Upstream PR #39398, @aanm)

Other Changes:

  • [v1.16] integration: Regenerate consul certs (#39351, @sayboras)
  • chore(deps): update go to v1.24.2 (v1.16) (#39123, @sayboras)
  • install: Update image digests for v1.16.9 (#38934, @cilium-release-bot[bot])
  • ipsec,ci: test IPsec + Ingress on v1.16 (#38930, @ldelossa)

Docker Manifests

cilium

quay.io/cilium/cilium:v1.16.10@sha256:fc4ccc494c4a381439162fd3684c07ba9c26d3c2670a2b2e1623acee99097461

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.16.10@sha256:e1db8c139250a6d0405caeebd2e6a726b0128aa8f79e6b2923a489a81e9a6d6c

docker-plugin

quay.io/cilium/docker-plugin:v1.16.10@sha256:77fcdc5caa3737c23c004830ff82ee1d260f1180e961b63ba92ff5f9e250cb18

hubble-relay

quay.io/cilium/hubble-relay:v1.16.10@sha256:9fc781c5fb5183f18dd8c789e308fdc91b3343f9dd1f38c0eb002f3cb7611da1

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.16.10@sha256:029c166f9b9b90aa31a95632f9980e32da8d3e9b928baa1ce83c6ad0473b3432

operator-aws

quay.io/cilium/operator-aws:v1.16.10@sha256:82606b8724ebaf6812fe9c811b95fae5b7019e8755c7f393698d0bb8d2948758

operator-azure

quay.io/cilium/operator-azure:v1.16.10@sha256:c724ac8e030974e1565c02c8e70af324f12e46af4aae27dcc5a5f020e94d73e1

operator-generic

quay.io/cilium/operator-generic:v1.16.10@sha256:05e5f5e676aa51ae5e3bf6be3594ecf52958f46f07f9f55368a7a952012a13c1

operator

quay.io/cilium/operator:v1.16.10@sha256:54ee9bea865270dc16b30a7df754fca8ca0f0bc2007c264c496f3800891e0be1

Contributors

tklauser, squeed, and 26 other contributors
Assets 2
Loading
0