Release v0.16.24

What's Changed

Summary of Changes

Minor Changes:

• Cilium CLI now captures Tetragon helm data when performing cilium sysdump. (cilium/cilium#36749, @f1ko)
• cilium-cli: collect Cilium Agent logs from crashing / not ready / restarted pods (cilium/cilium#37013, @marseel)
• cli: Add support for helm --max-history command line flag (cilium/cilium#36677, @marcofranssen)
• cli: restrict conn test to ip families (cilium/cilium#37000, @viktor-kurchenko)
• Significantly reduce memory usage during cilium-cli sysdump collection (cilium/cilium#36987, @giorio94)

CI Changes:

• connectivity: Add retry all error for L7 header related test (cilium/cilium#37010, @sayboras)
• test: Add negative test case for TLS SNI (cilium/cilium#37122, @sayboras)

Misc Changes:

• .github: generate feature summary report from CI (cilium/cilium#36933, @aanm)
• chore(deps): update all-dependencies (main) (cilium/cilium#37199, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.5 docker digest to 8c10f21 (main) (cilium/cilium#37178, @cilium-renovate[bot])
• chore(deps): update go to v1.23.5 (main) (cilium/cilium#37064, @cilium-renovate[bot])
• Cilium CLI: Trim EKS cluster ARN to extract valid cluster name (cilium/cilium#36952, @jaehanbyun)
• cilium-cli: do not print checkmarks for non-binary values (cilium/cilium#36890, @aanm)
• connectivity: Add test for update TLS secret (cilium/cilium#36812, @sayboras)
• Remove always-nil error returns (cilium/cilium#36910, @tklauser)
• Update stable release to v0.16.23 by @michi-covalent in #2907
• chore(deps): update docker/build-push-action action to v6.11.0 by @renovate in #2906
• chore(deps): update actions/upload-artifact action to v4.6.0 by @renovate in #2908
• chore(deps): update docker/build-push-action action to v6.12.0 by @renovate in #2909
• chore(deps): update golangci/golangci-lint-action action to v6.2.0 by @renovate in #2911
• chore(deps): update dependency go to v1.23.5 by @renovate in #2910
• chore(deps): update all github action dependencies (minor) by @renovate in #2912
• chore(deps): update dependency cilium/cilium to v1.16.6 by @renovate in #2914
• renovate config migration remake by @bimmlerd in #2915
• chore(deps): update docker/build-push-action action to v6.13.0 by @renovate in #2916
• chore(deps): update aws-actions/configure-aws-credentials action to v4.0.3 by @renovate in #2917
• Prepare for v0.16.24 release by @michi-covalent in #2920

Full Changelog: v0.16.23...v0.16.24

Release v0.16.23

What's Changed

Minor Changes:

• cli: aws mixed nodes install fix (cilium/cilium#36336, @viktor-kurchenko)

Bugfixes:

• Cilium CLI fix for AWS ENI mode (cilium/cilium#36887, @viktor-kurchenko)
• Restore the original flag semantics for --egress-masquerade-interfaces to the same as v1.17.0-pre.2 or earlier (cilium/cilium#36504, @viktor-kurchenko)

CI Changes:

• Add --external-other-target parameter to cilium CLI connectivity tests. (cilium/cilium#36080, @wedaly)
• Change client-egress-l7-tls tests to sequential because flaky (cilium/cilium#36568, @youngnick)
• cilium-cli/connectivity: fix IPv6 feature check for 2ndary node IPv6 (cilium/cilium#36513, @tklauser)
• cilium-cli: Add envoy log pattern in error check (cilium/cilium#36498, @sayboras)
• Fix cilium CLI connectivity tests in IPv6-only clusters. (cilium/cilium#36026, @wedaly)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#36706, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.4 docker digest to 7003184 (main) (cilium/cilium#36604, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.4 docker digest to 7ea4c9d (main) (cilium/cilium#36808, @cilium-renovate[bot])
• ci/connectivity: Don't apply cnp to conn-disrupt pods in 1.15, 1.14 (cilium/cilium#36682, @jschwinger233)
• cilium-cli: skip some IPv6 connectivity tests for Cilium<1.14 when IPsec is enabled (cilium/cilium#36664, @jschwinger233)
• Isolate node-to-node encryption tests to wireguard (cilium/cilium#36556, @ldelossa)
• chore(deps): update all github action dependencies (minor) by @renovate in #2887
• Update stable release to v0.16.22 by @tklauser in #2888
• chore(deps): update module golang.org/x/crypto to v0.31.0 [security] by @renovate in #2889
• chore(deps): update all github action dependencies (minor) by @renovate in #2890
• Dockerfile: drop syntax comment by @tklauser in #2893
• chore(deps): update dependency kubernetes-sigs/kind to v0.26.0 by @renovate in #2892
• chore(deps): update dependency cilium/cilium to v1.16.5 by @renovate in #2894
• chore(deps): update actions/upload-artifact action to v4.5.0 by @renovate in #2896
• chore(deps): update module golang.org/x/net to v0.33.0 [security] by @renovate in #2895
• chore(deps): update golangci/golangci-lint docker tag to v1.63.0 by @renovate in #2899
• chore(deps): update golangci/golangci-lint docker tag to v1.63.4 by @renovate in #2902
• chore(deps): update helm/kind-action action to v1.12.0 by @renovate in #2901
• chore(deps): update softprops/action-gh-release action to v2.2.1 by @renovate in #2905
• Prepare for v0.16.23 release by @michi-covalent in #2903

Full Changelog: v0.16.22...v0.16.23

Release v0.16.22

Important

The default behavior for cilium upgrade has changed such that Helm values will be reset and then reused. This behavior can be reverted to the previous behavior by setting --reset-then-reuse-values=false or by explicitly specifying --reuse-values or --reset-values which always take precedence over --reset-then-reuse-values. See cilium/cilium#36347 for details.

What's Changed

• chore(deps): update golang:1.23.4-alpine3.19 docker digest to 5f33368 by @renovate in #2879
• Update stable release to v0.16.21 by @tklauser in #2880
• Pick up the latest cilium/cilium by @michi-covalent in #2883
• Makefile: Remove CILIUM_VERSION variable by @michi-covalent in #2884
• Prepare for v0.16.22 release by @tklauser in #2886

Full Changelog: v0.16.21...v0.16.22

Release v0.16.21

Tip

Cilium CLI now derives the default Cilium version to install from the source instead of injecting it at compile time. You no longer need to set github.com/cilium/cilium/cilium-cli/defaults.CLIVersion using -ldflags while compiling Cilium CLI. See cilium/cilium#36344 for details.

What's Changed

Minor Changes:

• Add cli support for impersonation --as and --as-group flags (cilium/cilium#35240, @cnmcavoy)
• AWS AL2023 support (cilium/cilium#36076, @viktor-kurchenko)
• cilium-cli: Derive the default version from cilium/charts (cilium/cilium#36344, @michi-covalent)
• Disable deprecated support for running the Cilium KVStore in pod network (cilium/cilium#35741, @giorio94)
• introducing a new CLI option to display ipcache information by labels or cidr (cilium/cilium#35275, @vasu-dasari)
• sysdump: respect worker count and collect Cilium profiling data as first task (cilium/cilium#35897, @giorio94)

Bugfixes:

• cilium-cli/connectivity: fix nil-pointer dereference if minimum version can't be detected (cilium/cilium#35802, @tklauser)
• Fix: cilium-cli install --repository flag respects repository even with cached versions. (cilium/cilium#35670, @renyunkang)

CI Changes:

• cilium-cli/connectivity: allow to specify log levels to check (cilium/cilium#36231, @tklauser)
• cilium-cli/connectivity: disable warning log checks before v1.17 (cilium/cilium#36358, @giorio94)
• cilium-cli: Improve tcpdump termination timeout handling (cilium/cilium#36021, @liyihuang)
• cilium-cli: retry exec-in-pod requests in case of transient errors (cilium/cilium#35961, @tklauser)
• cilium-cli: Run BGP tests sequentially (cilium/cilium#35727, @rastislavs)
• cli/connectivity: Check for unexpected warning logs (cilium/cilium#35723, @pchaigno)
• cli: Don't ignore datapath bug packet drops (cilium/cilium#36105, @pchaigno)
• Enabling IPSec pod-to-pod-with-l7-policy-encryption connectivity test for v1.15 and v1.16. (cilium/cilium#35742, @smagnani96)
• test, cli/connectivity: Remove stale error log exceptions (cilium/cilium#35848, @pchaigno)

Misc Changes:

• Add coverage for SNI enforcement in cilium-cli connectivity tests. (cilium/cilium#35887, @jrajahalme)
• Cilium-cli connectivity test now supports use of parallel requests with curl (cilium/cilium#35949, @jrajahalme)
• cilium-cli/install: remove deprecated no-op --disable-check flag (cilium/cilium#36110, @tklauser)
• cilium-cli: apply network policies to no-conn-disrupt test (cilium/cilium#35685, @giorio94)
• cilium-cli: Skip nil details for Service error in check-log-errors (cilium/cilium#35671, @rastislavs)
• cilium-cli: Use unique CNP names (cilium/cilium#36064, @jrajahalme)
• Miscellaneous improvements to DNS introspection policies in connectivity tests (cilium/cilium#36193, @giorio94)
• Revert "sysdump: collect Cilium profiling data as first task" (cilium/cilium#35771, @giorio94)
• sysdump: Collect crashed pod logs in cilium-test namespaces (cilium/cilium#35612, @jschwinger233)
• Update stable release to v0.16.20 by @michi-covalent in #2851
• .github: use netcat to check hubble port-forward success by @devodev in #2850
• chore(deps): update go to v1.23.3 (patch) by @renovate in #2854
• chore(deps): update golang docker tag to v1.23.3 by @renovate in #2853
• chore(deps): update golangci/golangci-lint docker tag to v1.62.0 by @renovate in #2858
• chore(deps): update dependency kubernetes-sigs/kind to v0.25.0 by @renovate in #2857
• Improve cacheability of Docker layers and add ca-certs to scratch image by @marcofranssen in #2842
• chore(deps): update docker/dockerfile:1.11 docker digest to 10c699f by @renovate in #2855
• chore(deps): update softprops/action-gh-release action to v2.1.0 by @renovate in #2860
• chore(deps): update docker.io/library/golang:1.23.3-alpine3.19 docker digest to f72297e by @renovate in #2863
• chore(deps): update dependency cilium/cilium to v1.16.4 by @renovate in #2864
• chore(deps): update golang:1.23.3-alpine3.19 docker digest to f72297e by @renovate in #2862
• chore(deps): update ubuntu:24.04 docker digest to 278628f by @renovate in #2865
• chore(deps): update docker/build-push-action action to v6.10.0 by @renovate in #2867
• chore(deps): update docker/dockerfile docker tag to v1.12 by @renovate in #2868
• chore(deps): update golangci/golangci-lint docker tag to v1.62.2 by @renovate in #2866
• action: Explicitly set go-version by @michi-covalent in #2871
• .github/workflows: add validation of renovate config by @tklauser in #2873
• renovate: update Go version in action.yaml by @tklauser in #2872
• chore(deps): update golang docker tag to v1.23.4 by @renovate in #2876
• chore(deps): update ubuntu:24.04 docker digest to 80dd3c3 by @renovate in #2875
• chore(deps): update go to v1.23.4 (patch) by @renovate in #2877
• Prepare for v0.16.21 release by @tklauser in #2869

New Contributors

• @marcofranssen made their first contribution in #2842

Full Changelog: v0.16.20...v0.16.21

Release v0.16.20

What's Changed

Minor Changes:

• Add CLI flag to specify --kubeconfig (cilium/cilium#34573, @ldlb9527)
• Add support for automatic port-forwarding in Hubble CLI Replace kubectl-based port-forwarding with native implementation in Cilium CLI (cilium/cilium#35483, @devodev)
• cilium-cli status: fail fast on terminal error (cilium/cilium#35048, @nimishamehta5)
• feat(clustermesh): Deploy in parallel the connections (cilium/cilium#35021, @littlejo)
• Miscellaneous improvements to the sysdump collection (cilium/cilium#35610, @giorio94)

Bugfixes:

• Fix packet drops for pod-to-pod connections that pass through ingress & egress proxy when using IPsec, caused by MTU misconfiguration. (cilium/cilium#35173, @smagnani96)
• Fixed Cilium CLI fatal error: concurrent map read and map write (cilium/cilium#35311, @chaunceyjiang)

CI Changes:

• Add concurrency to test-ipsec-upgrade (cilium/cilium#35362, @aanm)
• cilium-cli: Ignore "No egress gateway found" drops (cilium/cilium#35609, @pchaigno)
• cli/connectivity: Test strict mode encryption (cilium/cilium#35231, @jschwinger233)

Misc Changes:

• chore(deps): update all-dependencies (main) (cilium/cilium#35221, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#35376, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#35490, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.2 docker digest to a7f2fc9 (main) (cilium/cilium#35373, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.2 docker digest to ad5c126 (main) (cilium/cilium#35568, @cilium-renovate[bot])
• chore(deps): update go to v1.23.2 (main) (cilium/cilium#35199, @cilium-renovate[bot])
• cilium-cli: account for opt out labels in node to node encryption tests (cilium/cilium#35585, @giorio94)
• cilium-cli: connectivity test: support every kind of resource for tests (cilium/cilium#35314, @squeed)
• cilium-cli: Show config.cilium.io annotations on configmap (cilium/cilium#35020, @joamaki)
• connectivity: Introdue Multicast connectivity test (cilium/cilium#34530, @yushoyamaguchi)
• Enable testifylint to lint test files, and mechanically fix reported issues (cilium/cilium#35237, @giorio94)
• Fixed Cilium CLI fatal error: concurrent map read and map write (cilium/cilium#35396, @chaunceyjiang)
• refactor: Use error definition in github.com/cilium/ebpf instead of using hard-corded error message (cilium/cilium#35389, @yushoyamaguchi)
• Replace inctimer package with time.After (cilium/cilium#35653, @tklauser)
• Revert "Fixed Cilium CLI fatal error: concurrent map read and map write" (cilium/cilium#35391, @pchaigno)
• Strip quotes from modifier arg in all Dockerfiles (cilium/cilium#35427, @hemanthmalla)
• multicluster: Increase hubble-event-queue-size by @michi-covalent in #2823
• chore(deps): update golang docker tag to v1.23.2 by @renovate in #2825
• chore(deps): update ubuntu:24.04 docker digest to b359f10 by @renovate in #2826
• chore(deps): update google-github-actions/auth action to v2.1.6 - autoclosed by @renovate in #2821
• Update stable release to v0.16.19 by @michi-covalent in #2824
• chore(deps): update golangci/golangci-lint-action action to v6.1.1 by @renovate in #2827
• chore(deps): update docker/setup-buildx-action action to v3.7.0 by @renovate in #2828
• chore(deps): update docker/setup-buildx-action action to v3.7.1 by @renovate in #2830
• chore(deps): update all github action dependencies (patch) by @renovate in #2831
• chore(deps): update docker.io/library/golang docker tag to v1.23.2 by @renovate in #2829
• chore(deps): update actions/upload-artifact action to v4.4.2 by @renovate in #2832
• chore(deps): update actions/upload-artifact action to v4.4.3 by @renovate in #2833
• chore(deps): update ubuntu:24.04 docker digest to ee6860a by @renovate in #2834
• chore(deps): update ubuntu:24.04 docker digest to ab64a83 by @renovate in #2835
• chore(deps): update ubuntu:24.04 docker digest to d4f6f70 by @renovate in #2837
• chore(deps): update dependency cilium/cilium to v1.16.3 by @renovate in #2836
• chore(deps): update ubuntu:24.04 docker digest to 99c3519 by @renovate in #2838
• chore(deps): update actions/setup-go action to v5.1.0 by @renovate in #2841
• chore(deps): update actions/checkout action to v4.2.2 by @renovate in #2840
• action: allow to configure image repo for CI installs by @rgo3 in #2844
• chore(deps): update docker/dockerfile docker tag to v1.11 by @renovate in #2845
• chore(deps): update all github action dependencies (patch) by @renovate in #2843
• .github: support native hubble port-forwarding by @devodev in #2848
• chore(deps): update softprops/action-gh-release action to v2.0.9 by @renovate in #2846
• Prepare for v0.16.20 release by @michi-covalent in #2847

New Contributors

• @rgo3 made their first contribution in #2844
• @devodev made their first contribution in #2848

Full Changelog: v0.16.19...v0.16.20

Release v0.16.19

What's Changed

Minor Changes:

• cilium-cli: Deprecate --disable-check flag (cilium/cilium#34953, @michi-covalent)
• feat(cilium-cli-clustermesh): Improve --destination-context option for connecting multiple remote contexts (cilium/cilium#34510, @littlejo)
• version: Don't create k8s client if --client is specified (cilium/cilium#34914, @michi-covalent)

Bugfixes:

• cli: fix a case when connectivity perf command was hanging if LRP was enabled in the cluster (cilium/cilium#35063, @marseel)
• Correctly format cilium status -o json CLI output for errors and warnings (cilium/cilium#34654, @nimishamehta5)
• Fix missing Helm chart version for status command (cilium/cilium#34748, @pgils)
• fix(clustermesh): mesh connection mode (cilium/cilium#34932, @littlejo)

CI Changes:

• cilium-cli: connectivity: fix the local-redirect-policy flow validation (cilium/cilium#34919, @ysksuzuki)
• cilium-cli: Define CLI_MAIN_DIR Make variable (cilium/cilium#34910, @michi-covalent)

Misc Changes:

• .github: add cache to cilium-cli and hubble-cli build workflows (cilium/cilium#34847, @aanm)
• chore(deps): update all-dependencies (main) (cilium/cilium#34872, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (cilium/cilium#34969, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.1 docker digest to 4f063a2 (main) (cilium/cilium#35075, @cilium-renovate[bot])
• chore(deps): update go to v1.23.1 (main) (cilium/cilium#34732, @cilium-renovate[bot])
• cilium-cli/status: sort status lines (cilium/cilium#34927, @tklauser)
• cilium-cli/sysdump: export SubmitMetricsSubtask (cilium/cilium#34864, @tklauser)
• cilium-cli: collect BGPv2 CRD resources in sysdump (cilium/cilium#34684, @rastislavs)
• cilium-cli: remove copying of loop variables (cilium/cilium#34944, @tklauser)
• cli/connectivity: improvements for echo-ingress-l7-via-hostport test (cilium/cilium#34502, @julianwiedmann)
• go: Replace x/maps package by respective standard libraries (cilium/cilium#34649, @sayboras)
• Use Go standard library slices package more extensively (cilium/cilium#34796, @tklauser)

Other Changes:

• Update stable release to v0.16.18 by @michi-covalent in #2807
• multicluster: correctly specify the dst context to clustermes connect by @giorio94 in #2810
• github: Increase hubble-event-queue-size by @michi-covalent in #2815
• chore(deps): update dependency ubuntu to v24 by @renovate in #2814
• github: Add a workflow to close stale issues and PRs by @michi-covalent in #2813
• chore(deps): update all github action dependencies (minor) by @renovate in #2811
• chore(deps): update dependency cilium/cilium to v1.16.2 by @renovate in #2812
• Prepare for #2755 - Dockerfile only by @leppeK in #2817
• go.mod: pick up github.com/cilium/cilium v1.17.0-pre.1 by @tklauser in #2818
• chore(deps): update docker/build-push-action action to v6.9.0 by @renovate in #2816
• chore(deps): update dependency go to v1.23.2 by @renovate in #2820
• Prepare for v0.16.19 release by @michi-covalent in #2822

New Contributors

• @leppeK made their first contribution in #2817

Full Changelog: v0.16.18...v0.16.19

Release v0.16.18

What's Changed

• Update stable release to v0.16.17 by @michi-covalent in #2794
• action: Run version command with --client flag by @michi-covalent in #2797
• chore(deps): update ubuntu:24.04 docker digest to 56a8952 by @renovate in #2796
• vendor: Remove gops dependency by @michi-covalent in #2798
• github: Remove unused files by @michi-covalent in #2801
• chore(deps): update ubuntu:24.04 docker digest to dfc1087 by @renovate in #2800
• release: Install curl by @michi-covalent in #2803
• chore(deps): update azure/login action to v2.2.0 by @renovate in #2799
• Prepare for v0.16.18 release by @michi-covalent in #2805

Full Changelog: v0.16.17...v0.16.18

Release v0.16.17

Warning

DO NOT use this release, cilium install command is broken (#2795). Use v0.16.18 instead.

What's Changed

• connectivity: test namespace param by @viktor-kurchenko in cilium/cilium#34428
• hooks: support concurrent tests run by @viktor-kurchenko in cilium/cilium#34427
• CODEOWNERS: Assign vendor/ to cilium-cli-maintainers by @michi-covalent in #2772
• chore(deps): update go to v1.23.0 (minor) by @renovate in #2768
• chore(deps): update golangci/golangci-lint docker tag to v1.60.2 by @renovate in #2775
• build: fix CLIVersion ldflag ref by @chenrui333 in #2773
• chore(deps): update google-github-actions/auth action to v2.1.5 - autoclosed by @renovate in #2776
• chore(deps): update golangci/golangci-lint docker tag to v1.60.3 by @renovate in #2778
• make: set set latest stable version based on stable.txt by @tklauser in #2783
• github: Remove "Push to Loki" workflow by @michi-covalent in #2784
• chore(deps): update actions/upload-artifact action to v4.4.0 by @renovate in #2781
• chore(deps): update go to v1.23.1 (patch) by @renovate in #2786
• chore(deps): update golang docker tag to v1.23.1 by @renovate in #2787
• chore(deps): update golangci/golangci-lint docker tag to v1.61.0 by @renovate in #2789
• vendor: Pick up github.com/cilium/cilium v1.17.0-pre.0 by @michi-covalent in #2788
• chore(deps): update golang:1.23.1-alpine3.19 docker digest to e0ea2a1 by @renovate in #2790
• chore(deps): update docker/dockerfile docker tag to v1.10 by @renovate in #2792
• chore(deps): update docker.io/library/golang:1.23.1-alpine3.19 docker digest to e0ea2a1 by @renovate in #2791
• Prepare for v0.16.17 release by @michi-covalent in #2793

Full Changelog: v0.16.16...v0.16.17

Release v0.16.16

Summary of Changes

Minor Changes:

• connectivity: test namespace param (cilium/cilium#34428, @viktor-kurchenko)

Misc Changes:

• hooks: support concurrent tests run (cilium/cilium#34427, @viktor-kurchenko)

Other Changes:

• Update stable release to v0.16.15 by @michi-covalent in #2749
• chore(deps): update golang docker tag to v1.22.6 by @renovate in #2745
• Update CODEOWNERS by @michi-covalent in #2763
• Remove the repo lock workflow by @michi-covalent in #2762
• chore(deps): update actions/upload-artifact action to v4.3.5 by @renovate in #2741
• chore(deps): update docker/build-push-action action to v6.6.0 by @renovate in #2747
• chore(deps): update go to v1.22.6 (patch) by @renovate in #2751
• chore(deps): update dependency cilium/cilium to v1.16.1 by @renovate in #2757
• chore(deps): update golangci/golangci-lint docker tag to v1.60.1 by @renovate in #2756
• chore(deps): update golang-images (minor) by @renovate in #2754
• chore(deps): update all github action dependencies (minor) by @renovate in #2767
• chore(deps): update all github action dependencies (patch) by @renovate in #2766
• Prepare for v0.16.16 release by @michi-covalent in #2771

Release v0.16.15

What's Changed

• Update stable release to v0.16.14 by @michi-covalent in #2737
• Lock cilium-cli repo by @michi-covalent in #2743
• action: Handle multiple cilium-cli directories by @michi-covalent in #2746
• Prepare for v0.16.15 release by @michi-covalent in #2748

Full Changelog: v0.16.14...v0.16.15