Skip to content

1.11.0-rc1

Pre-release
Pre-release
Compare
Choose a tag to compare
@aanm aanm released this 15 Nov 17:00
v1.11.0-rc1
This tag was signed with the committer’s verified signature.
aanm André Martins
GPG key ID: A38D2FBA880D16AB
Learn about vigilant mode.
ddb1395

We are pleased to release Cilium v1.11.0-rc1.

Note: The summary of changes below reflect the diff between tag v1.11.0-rc0 and tag v1.11.0-rc1.

Summary of Changes

Major Changes:

Minor Changes:

  • Add flag to list all available configurations (#17303, @h3llix)
  • Add WireGuard status to cilium encrypt. (#17684, @h3llix)
  • crd: Add categories for cilium CRDs (#17162, @sayboras)
  • datapath,daemon: Enable multi-dev XDP (#17655, @brb)
  • datapath: Add a flag to set VXLAN and Geneve ports (#16874, @errordeveloper)
  • Detect devices from global unicast routes in addition to only
    looking for the device with the Kubernetes Node IP and the one with
    default route. This expands the set of devices used for kube-proxy
    replacement, host firewall and bandwidth manager and should reduce
    the need to specify devices manually. (#17219, @joamaki)
  • feat: allow installing hubble ui as standalone (#17473, @eddycharly)
  • helm: Use batch/v1 apiVersion for CronJob in K8s 1.21+ (#16635, @gandro)
  • option: Rename egress gateway flag to enable-ipv4-egress-gateway (#17695, @pchaigno)
  • Pod visibility annotations are now supported for Kafka and other policies implemented via Cilium Go extensions for Envoy. (#16935, @trvll)
  • Reduce bugtool memory usage (#17546, @tklauser)
  • Support advertising Pod CIDRs via BGP (#16525, @christarazi)
  • Support graceful termination for service load-balancing such that active connections don't break when endpoints are deleted. (#17716, @aditighag)
  • Support TLS certificate auto-generation using certmanager (#17238, @dungdm93)
  • vendor: Update k8s dependencies and tests to 1.22.0-rc.0 (#16989, @nathanjsweet)
  • wireguard: Add fallback to userspace implementation (#17451, @gandro)

Bugfixes:

  • Adds an ACCEPT rule for untracked pkts in filter:CILIUM_OUTPUT (#17585, @Weil0ng)
  • bug/pkg/health: Fix Nil Address Issue in Node Update Mechanism (#17667, @nathanjsweet)
  • Define operator feature flags to allow the operator to register related CRDs. (#17772, @pchaigno)
  • egress gateway: fix non-tunnel (direct routing) mode (#17517, @kkourt)
  • egressgateway: Allow several CENPs with same egress IP (#17773, @pchaigno)
  • Envoy configuration is fixed to work also when IPv6 is disabled. (#17281, @rock-andy)
  • Fix identity leak via FQDN selectors (#17699, @joestringer)
  • fix incorrect application of egress gateway policy to internal cluster traffic.
    require a 5.2 kernel or later for the egress gateway policy feature. (#17639, @kkourt)
  • Fix issue where local host IPs may be briefly associated with the remote-node identity, causing policy drops when policy should allow traffic from the host. (#17836, @joestringer)
  • Fix several complexity and program size issues when only one of IPv4/IPv6 is enabled. (#17573, @pchaigno)
  • Fixes a bug where IPv6 pod CIDRs with leading zeros where not supported (#17707, @gandro)
  • L7 proxy redirection on IPv6 ingress to a pod is fixed to properly update IPv6 hop limit. (#17718, @jrajahalme)
  • node-init: cleanup snat iptables rules when running in eni mode with masquerading disabled (#16840, @bmcustodio)
  • node: Skip ipcache for remote node IPs if IPsec is enabled (#17511, @pchaigno)
  • operator: only GC identity keys of its own cluster (#16825, @ArthurChiao)
  • pkg/k8s: fix invalid memory address or nil pointer dereference (#17642, @aanm)

CI Changes:

Misc Changes:

Contributors

twpayne, gandro, and 46 other contributors
Assets 2
Loading