Commit Graph

126 Commits

Author SHA1 Message Date
5183040eb3 Update Helm release cilium to v1.18.0 (#1062)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 13s
renovate / renovate (push) Successful in 1m11s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/) ([source](https://github.com/cilium/cilium)) | minor | `1.17.6` -> `1.18.0` |

---

### Release Notes

<details>
<summary>cilium/cilium (cilium)</summary>

### [`v1.18.0`](https://github.com/cilium/cilium/releases/tag/v1.18.0): 1.18.0

[Compare Source](https://github.com/cilium/cilium/compare/1.17.6...1.18.0)

We are excited to announce the **[Cilium 1.18.0](https://github.com/cilium/cilium/releases/tag/v1.18.0)** release!

A total of **3298 new commits** have been contributed to this release by a growing community of over **955 developers** and over **22,000 GitHub stars**! 

To keep up to date with all the latest Cilium releases, see [Announcements](https://github.com/cilium/cilium/discussions/categories/announcements)

Here's what's new in [v1.18.0](https://github.com/cilium/cilium/releases/tag/v1.18.0):

#### 🚠 Networking

- **⚖️ Load Balancing Redesign**: The service load-balancing control-plane in the Cilium agent has been redesigned to reduce memory usage and improve future extensibility of load-balancing features ([cilium/cilium#38469](https://github.com/cilium/cilium/pull/38469), [@&#8203;joamaki](https://github.com/joamaki))
- **🔌 Virtual Network Devices**: Added support for new virtual network device configurations such as VXLAN in IPsec (VinE) and IPIP tunnels ([cilium/cilium#37723](https://github.com/cilium/cilium/pull/37723), [@&#8203;ldelossa](https://github.com/ldelossa); [cilium/cilium#37346](https://github.com/cilium/cilium/pull/37346), [@&#8203;gyutaeb](https://github.com/gyutaeb))
- **Ⓜ️ Multiple Egress Gateways**: Egress Gateways policies can now direct traffic towards multiple gateway nodes ([cilium/cilium#39304](https://github.com/cilium/cilium/pull/39304), [@&#8203;carlos-abad](https://github.com/carlos-abad))
- **🚦 Ingress Rate Limiting**: The bandwidth manager now supports ingress rate limiting ([cilium/cilium#36351](https://github.com/cilium/cilium/pull/36351), [@&#8203;l1b0k](https://github.com/l1b0k))
- **📢 Multi-Device L2 Announcements**: The L2 pod announcement feature now supports multiple devices ([cilium/cilium#38198](https://github.com/cilium/cilium/pull/38198), [@&#8203;dylandreimerink](https://github.com/dylandreimerink))
- **🏢 Neighbor Subsystem Rework**: The neighbor subsystem was made more resilient through a new system that reconciles desired neighbor entries with the kernel state ([cilium/cilium#39987](https://github.com/cilium/cilium/pull/39987), [@&#8203;dylandreimerink](https://github.com/dylandreimerink))

#### 🌐 IPv6

- **🚇 Tunneling Underlay**: The tunneling datapath mode now supports using an IPv6 network underlay, including when configured with IPsec transparent encryption ([cilium/cilium#38296](https://github.com/cilium/cilium/pull/38296), [cilium/cilium#39497](https://github.com/cilium/cilium/pull/39497), [@&#8203;pchaigno](https://github.com/pchaigno))
- **💬 Kube Proxy Replacement**: Cilium now implements service translation when running on an IPv6 underlay ([cilium/cilium#39074](https://github.com/cilium/cilium/pull/39074), [@&#8203;pchaigno](https://github.com/pchaigno))
- **📋 Delegated IPAM**: When delegating IP address management to a third party plugin, Cilium now configures IPv6 routes for connectivity if the plugin supports IPv6 ([cilium/cilium#38249](https://github.com/cilium/cilium/pull/38249), [@&#8203;caorui-io](https://github.com/caorui-io), [@&#8203;kadevu](https://github.com/kadevu))
- **📦 IP Fragment Support**: Cilium now processes ordered IPv6 fragments to apply policy and routing functionality ([cilium/cilium#38110](https://github.com/cilium/cilium/pull/38110), [@&#8203;gentoo-root](https://github.com/gentoo-root))
- **🚪 Egress gateway policies** can now match IPv6 address ranges ([cilium/cilium#38452](https://github.com/cilium/cilium/pull/38452), [@&#8203;rgo3](https://github.com/rgo3))

#### 🛡️ Policy & Observability

- **🏷️ Policy Names in Hubble-CLI**: Show the names of (C)CNPs that allowed or denied traffic when monitoring flows in Hubble ([cilium/cilium#39453](https://github.com/cilium/cilium/pull/39453), [@&#8203;antonipp](https://github.com/antonipp))
- **📝 Policy Log Fields**: A new free-text log field is added to policies, which is exposed in Hubble flows for easy correlation and searching ([cilium/cilium#39902](https://github.com/cilium/cilium/pull/39902), [@&#8203;squeed](https://github.com/squeed))
- **🛰️ Encapsulated Traffic Decoding**: Hubble decodes encapsulated traffic for deeper introspection into traffic flows ([cilium/cilium#37634](https://github.com/cilium/cilium/pull/37634), [@&#8203;kaworu](https://github.com/kaworu))
- **🏰 ClusterMesh Policy Restriction**: A new option allows the **cluster** entity to apply only to the local cluster in ClusterMesh environment ([cilium/cilium#39338](https://github.com/cilium/cilium/pull/39338), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
- ** Enhanced Policy Dashboard**: The Policy section of the Cilium Grafana dashboard has been improved to show more relevant graphs, including policy drops in both directions ([cilium/cilium#36492](https://github.com/cilium/cilium/pull/36492), [cilium/cilium#37445](https://github.com/cilium/cilium/pull/37445), [@&#8203;squeed](https://github.com/squeed))

#### 🌅 Performance

- **📊 Scale Test Results**: Cilium implements policies and services up to 45% faster in higher scale environments (Various; [@&#8203;marseel](https://github.com/marseel), [cilium/cilium#40227](https://github.com/cilium/cilium/pull/40227))
- **📦 Image Size Reduction**: Docker image sizes are reduced by 32% on arm64 architecture images ([cilium/cilium#40005](https://github.com/cilium/cilium/pull/40005), [@&#8203;marseel](https://github.com/marseel))
- ** Improved Policy Performance**: The DNS proxy can process large numbers of IPs faster, and the EndpointSelector match implementation has been optimized ([cilium/cilium#39340](https://github.com/cilium/cilium/pull/39340), [@&#8203;squeed](https://github.com/squeed); [cilium/cilium#40414](https://github.com/cilium/cilium/pull/40414), [@&#8203;marseel](https://github.com/marseel))
- **🪞 EndpointSlice Mirroring for Multi-Cluster Services**: Clustermesh mirrors EndpointSlice from the local cluster instead of copying the Service selectors when using the MCS-API controller ([cilium/cilium#38596](https://github.com/cilium/cilium/pull/38596), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
- **🌐 KVStoreMesh Optimization**: Cross-cluster state distribution is optimized by only synchronizing identities keyed by ID, not by value ([cilium/cilium#36471](https://github.com/cilium/cilium/pull/36471), [@&#8203;HadrienPatte](https://github.com/HadrienPatte))
- **🧠 Egress Gateway Processing**: Egress gateway policy processing is significantly improved when matching a large number of pods ([cilium/cilium#37714](https://github.com/cilium/cilium/pull/37714), [@&#8203;giorio94](https://github.com/giorio94))
- **🗑️ Optimized Garbage Collection for Connection Tracking**: Cilium leverages batched iterators for CTMap GC ([cilium/cilium#36288](https://github.com/cilium/cilium/pull/36288), [@&#8203;tommyp1ckles](https://github.com/tommyp1ckles))

#### ⚙️ Operations

- **📈 API Server Connections at Scale**: Improve kube-apiserver connections behavior at scale through failover and setting better jitter and backoff configurations ([cilium/cilium#37601](https://github.com/cilium/cilium/pull/37601), [@&#8203;aditighag](https://github.com/aditighag); [cilium/cilium#38031](https://github.com/cilium/cilium/pull/38031), [@&#8203;orange30](https://github.com/orange30); [cilium/cilium#36648](https://github.com/cilium/cilium/pull/36648), [@&#8203;wedaly](https://github.com/wedaly))
- **🔄 ConfigMap Synchronization**: New option to automatically synchronize ConfigMap changes into the agent and report metrics for when the effective configuration is different from the desired configuration ([cilium/cilium#36510](https://github.com/cilium/cilium/pull/36510), [@&#8203;ovidiutirla](https://github.com/ovidiutirla))
- **🎓 CRD Promotion to Stable**: Promote **CiliumCIDRGroup**, **CiliumLoadBalancerIPPool** and all **BGP** CRDs to stable API ([cilium/cilium#38940](https://github.com/cilium/cilium/pull/38940), [@&#8203;christarazi](https://github.com/christarazi); [cilium/cilium#39090](https://github.com/cilium/cilium/pull/39090), [@&#8203;pippolo84](https://github.com/pippolo84); [cilium/cilium#37765](https://github.com/cilium/cilium/pull/37765), [@&#8203;rastislavs](https://github.com/rastislavs))
- ** Node Taints Handling**: The cilium-operator Deployment uses a new default set of taints which avoids deploying to a drained node ([cilium/cilium#40137](https://github.com/cilium/cilium/pull/40137), [@&#8203;Murat](https://github.com/Murat) Parlakisik)
- **🪵 Migrate to Slog**: Cilium now uses slog as log library for all components ([cilium/cilium#39664](https://github.com/cilium/cilium/pull/39664), [@&#8203;aanm](https://github.com/aanm))
- **🔧 Cilium dependencies** were updated to Kubernetes v1.33, Envoy v1.34, LLVM 19.1, and CNI v1.1 ([cilium/cilium#39124](https://github.com/cilium/cilium/pull/39124), [cilium/cilium#40175](https://github.com/cilium/cilium/pull/40175), [cilium/cilium#39632](https://github.com/cilium/cilium/pull/39632), [@&#8203;sayboras](https://github.com/sayboras); [cilium/cilium#38868](https://github.com/cilium/cilium/pull/38868), [@&#8203;squeed](https://github.com/squeed))
- **🐧 Minimum Linux Requirements**: The minimum kernel version for this release series is Linux v5.10 or similar, such as RHEL 8.6 ([cilium/cilium#38308](https://github.com/cilium/cilium/pull/38308), [@&#8203;julianwiedmann](https://github.com/julianwiedmann))

#### 🕸️ Service Mesh & Gateway API

- **⛩️ Gateway API v1.3.0**: Gateway API support is bumped to v1.3.0 ([cilium/cilium#39590](https://github.com/cilium/cilium/pull/39590), [@&#8203;sayboras](https://github.com/sayboras))
- **🔗 Improved GatewayClass Configuration**: The new CiliumGatewayClassConfig object adds service type validation allows the configuration of extra settings on a per-GatewayClass level: LoadBalancerSourceRangesPolicy, ParametersRef fields. This allows Cilium to reconcile multiple GatewayClasses with different configurations ([cilium/cilium#37792](https://github.com/cilium/cilium/pull/37792), [cilium/cilium#37402](https://github.com/cilium/cilium/pull/37402), [cilium/cilium#40138](https://github.com/cilium/cilium/pull/40138), [@&#8203;sayboras](https://github.com/sayboras))
- **🚏 Multiple HTTPRoutes**: GAMMA reconciler now supports attaching multiple HTTPRoutes to the same Service ([cilium/cilium#39922](https://github.com/cilium/cilium/pull/39922), [@&#8203;youngnick](https://github.com/youngnick))
- **🪄 Route Changes Reconciliation**: Reconcile Gateway API based on all changes to routes. This allows label updates to trigger reconciliation correctly, amongst other things ([cilium/cilium#37798](https://github.com/cilium/cilium/pull/37798), [@&#8203;sayboras](https://github.com/sayboras))

#### 🏷️ IP Address Management

- **☁️ AWS Prefix Delegation**: Prefix delegation on AWS bare metal instances is now supported natively in Cilium's AWS ENI IPAM mode ([cilium/cilium#39678](https://github.com/cilium/cilium/pull/39678), [@&#8203;41ks](https://github.com/41ks))
- **🏬 Multi-Pool IPAM with KVStore**: Add support for Multi-Pool IPAM in external KVstore mode ([cilium/cilium#39638](https://github.com/cilium/cilium/pull/39638), [@&#8203;pippolo84](https://github.com/pippolo84))
- **🔐 Multi-Pool IPAM with IPSec**: Add support for Multi-Pool IPAM mode with IPSec transparent encryption in tunnel routing mode ([cilium/cilium#39442](https://github.com/cilium/cilium/pull/39442), [@&#8203;pippolo84](https://github.com/pippolo84))
- **↪️ Multi-Pool Tunnel Routing**: Add support for tunnel routing in multi-pool IPAM mode ([cilium/cilium#38483](https://github.com/cilium/cilium/pull/38483), [@&#8203;pippolo84](https://github.com/pippolo84))

#### 🛣️ BGP

- **📇 Route Aggregation**: Add support for BGP route aggregation in the control plane ([cilium/cilium#37275](https://github.com/cilium/cilium/pull/37275), [@&#8203;romanspb80](https://github.com/romanspb80))
- **🎯 Overlapping Selector Matches**: Support overlapping selector matches in **CiliumBGPAdvertisement** resources ([cilium/cilium#36414](https://github.com/cilium/cilium/pull/36414), [@&#8203;dswaffordcw](https://github.com/dswaffordcw))
- **🆔 New Router ID generation modes**: Generate router-id based on MAC addresses, or from an IP address pool ([cilium/cilium#36451](https://github.com/cilium/cilium/pull/36451), [@&#8203;yushoyamaguchi](https://github.com/yushoyamaguchi); [cilium/cilium#38300](https://github.com/cilium/cilium/pull/38300), [@&#8203;liyihuang](https://github.com/liyihuang))

#### 🧑‍💻 Development Experience

- **🧪 Test attribution**: Identify owners of test in GitHub workflow results to make it easier to connect with other developers on tricky problems ([cilium/cilium#37027](https://github.com/cilium/cilium/pull/37027), [@&#8203;Joe](https://github.com/Joe) Stringer)
- **🛏️ Policy REST API**: The Cilium policy API exposed over a local unix socket is deprecated. The other mechanisms to configure policy via Kubernetes resources or the local filesystem are preferred ([cilium/cilium#40212](https://github.com/cilium/cilium/pull/40212), [@&#8203;squeed](https://github.com/squeed))
- **🏗️ Feature Deprecation**: Deprecate underused features like Custom Calls, Recorder API and External Workloads ([cilium/cilium#38480](https://github.com/cilium/cilium/pull/38480), [cilium/cilium#39642](https://github.com/cilium/cilium/pull/39642), [cilium/cilium#37418](https://github.com/cilium/cilium/pull/37418), [@&#8203;brb](https://github.com/brb))

#### 🏢 Community

- **❤️ Production Case Studies**: Many end-users have stepped forward to tell their stories running Cilium in production. If your company wants to submit their case studies let us know. We would love to hear your feedback!
  - [ByteDance](https://www.youtube.com/watch?v=cKPW67D7X10), [Canopus Networks](https://www.youtube.com/watch?v=YXl9xuIxylY), [Corner Banca](https://www.youtube.com/watch?v=HVPKSefazl4), [DB Schenker](https://www.cncf.io/case-studies/db-schenker/), [eBay](https://www.youtube.com/watch?v=xEa4KFf5FzY), [ECCO](https://www.cncf.io/case-studies/ecco/), [G-Research](https://www.youtube.com/watch?v=kjSFN34dROQ), [Social Network Company](https://cilium.io/blog/2025/04/15/tetragon-social-networking-user-story/), and [Preferred Networks](https://www.youtube.com/watch?v=n7_I4zu6f_M)
- **🇬🇧 London Events**: The community gathered at [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/) and the [Cilium Developer Summit](https://github.com/cilium/dev-summits/tree/main/2025-EU) in London
- **🇺🇸 Atlanta Events**: Meet us at the upcoming [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/ciliumcon/) and Cilium Developers Summit in Atlanta, Georgia
- **👥 SIG Community Meetings**: [SIG Community](https://github.com/cilium/community/tree/main/sig-community) now meets every first and third Thursday to foster, grow, and sustain the Cilium open source community

#### 📔 Full CHANGELOG

- Full CHANGELOG.md can be found [here](https://github.com/cilium/cilium/blob/v1.18.0/CHANGELOG.md).

And finally, we would like to thank you to all contributors of Cilium that helped directly and indirectly with the project. The success of Cilium could not happen without all of you. ❤️ :people\_holding\_hands:  ❤️

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #1062
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-07-30 21:18:13 +00:00
009e12745d Update Helm release cilium to v1.17.6
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
lint-test-helm / helm-lint (pull_request) Successful in 10s
lint-test-helm / helm-lint (push) Successful in 8s
renovate / renovate (push) Successful in 1m31s
2025-07-17 12:01:34 +00:00
559bf8f978 Update Helm release cilium to v1.17.5
Some checks failed
lint-test-helm / helm-lint (push) Failing after 11s
renovate / renovate (push) Successful in 1m51s
renovate/stability-days Updates have met minimum release age requirement
lint-test-helm / helm-lint (pull_request) Successful in 8s
2025-06-20 18:21:43 +00:00
1c21d4d2a7 remove selector
Some checks failed
lint-test-helm / helm-lint (push) Failing after 3s
renovate / renovate (push) Successful in 3m0s
2025-06-19 21:06:47 -05:00
880f924864 disable bgp
Some checks failed
lint-test-helm / helm-lint (push) Failing after 3s
renovate / renovate (push) Failing after 1m40s
2025-06-19 20:44:08 -05:00
110b9ab674 switch gateway
All checks were successful
renovate / renovate (push) Successful in 2m1s
2025-06-07 18:33:40 -05:00
e3322a925d change advertist
All checks were successful
renovate / renovate (push) Successful in 2m15s
2025-06-07 18:24:58 -05:00
47736e6996 change advertist
All checks were successful
renovate / renovate (push) Successful in 2m40s
2025-06-07 18:18:51 -05:00
2df49e9982 add gateway
All checks were successful
renovate / renovate (push) Successful in 2m59s
2025-06-07 14:50:54 -05:00
dd484f8835 change pool
All checks were successful
renovate / renovate (push) Successful in 2m13s
2025-06-07 12:24:01 -05:00
c606f79b8e disable gateway
Some checks failed
renovate / renovate (push) Has been cancelled
2025-06-07 12:23:19 -05:00
bdb5007fd1 only advertise loadbalancer
All checks were successful
renovate / renovate (push) Successful in 1m41s
2025-06-06 21:44:15 -05:00
0c8c1e413f remove selectors
Some checks failed
renovate / renovate (push) Has been cancelled
2025-06-06 21:43:08 -05:00
d73d6c1c98 change hubble gateway
All checks were successful
renovate / renovate (push) Successful in 2m35s
2025-06-06 21:16:47 -05:00
903d272d2f change config
All checks were successful
renovate / renovate (push) Successful in 1m21s
2025-06-06 21:01:55 -05:00
8e05cb632a add gateway
All checks were successful
renovate / renovate (push) Successful in 1m45s
2025-06-06 20:46:47 -05:00
cf8af505a9 change label
Some checks failed
renovate / renovate (push) Has been cancelled
2025-06-06 20:45:08 -05:00
297aa3b529 disable gateway
All checks were successful
renovate / renovate (push) Successful in 1m24s
2025-06-06 20:39:39 -05:00
4f3c5ca102 remove ip
All checks were successful
renovate / renovate (push) Successful in 1m36s
2025-06-06 20:25:47 -05:00
f9ca58d9d4 add bgp
All checks were successful
renovate / renovate (push) Successful in 1m31s
2025-06-06 20:18:18 -05:00
7380539493 disable resources
All checks were successful
renovate / renovate (push) Successful in 2m5s
2025-06-06 20:15:00 -05:00
cb48587931 add bgp routing
All checks were successful
renovate / renovate (push) Successful in 2m20s
2025-06-06 20:12:08 -05:00
0d01329e9d remove ssh listener
All checks were successful
renovate / renovate (push) Successful in 1m35s
2025-06-06 19:52:39 -05:00
1d1a3bd6a9 change listen
Some checks failed
renovate / renovate (push) Has been cancelled
2025-06-06 19:51:35 -05:00
7f7ec4b800 fix indent
All checks were successful
renovate / renovate (push) Successful in 1m40s
2025-06-06 19:47:57 -05:00
9f5e38075d add cilium gateway
All checks were successful
renovate / renovate (push) Successful in 1m44s
2025-06-06 19:44:21 -05:00
ec05862bb3 fix resource namespace 2025-05-17 17:10:55 -05:00
4abab72cac fix labels 2025-05-17 17:09:05 -05:00
8b8829df3c update app-template chart 2025-05-16 22:07:36 -05:00
b593ba0d37 Update Helm release cilium to v1.17.4
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
lint-and-test-charts / lint-test (pull_request) Successful in 17s
2025-05-16 23:20:41 +00:00
d296ef8122 update chart data 2025-05-09 23:23:27 -05:00
800f680612 Update Helm release cilium to v1.17.3
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
lint-and-test-charts / lint-test (pull_request) Successful in 15s
2025-04-15 21:31:03 +00:00
renovate[bot]
dcd3187d6e Update Helm release cilium to v1.17.2 (#1408)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-15 19:47:10 -05:00
33eb9adcd2 add hubble route 2025-03-02 21:22:11 -06:00
bf7efe944b disable gateway 2025-03-02 20:45:09 -06:00
0a3cd2cf29 list devices 2025-03-02 18:42:29 -06:00
9fe661cf24 migration to next 2025-03-02 16:56:16 -06:00
1693ecd0ae remove debug 2025-03-02 15:36:22 -06:00
b4a27acc6f use shared lb 2025-03-02 14:31:17 -06:00
89ee49e9af disable node port 2025-03-02 14:25:23 -06:00
e918d88dd9 disable gateway 2025-03-02 14:22:47 -06:00
6811d37e9d fix 2025-03-02 14:03:37 -06:00
680217aa2d remove 2025-03-02 14:00:10 -06:00
9c4f29f5b1 remove priv 2025-03-02 13:54:29 -06:00
b6b6c087c2 set array 2025-03-02 13:50:29 -06:00
7e2e3f5c35 run priv 2025-03-02 13:49:50 -06:00
95ebc2f30c add capabilities 2025-03-02 13:48:58 -06:00
7c65daa3cf bfp masq 2025-03-02 13:36:43 -06:00
e00561cf22 chnage config 2025-03-02 13:32:27 -06:00
96feb66180 change cert 2025-03-02 12:59:30 -06:00