Skip to content

1.12.4

Compare
Choose a tag to compare
@michi-covalent michi-covalent released this 18 Nov 00:07

We are pleased to release Cilium v1.12.4.

Summary of Changes

Minor Changes:

  • ctmap: add support for GC of DSR orphaned entries (Backport PR #21809, Upstream PR #21626, @jibi)

Bugfixes:

  • Add missing inner IP header in ICMP error-reply packet (Backport PR #22028, Upstream PR #21234, @nnbu)
  • bpf: always track egress gateway connections (Backport PR #21639, Upstream PR #21499, @jibi)
  • Fix overlapping/duplicate PodCIDR allocation when nodes are added while operator is down (Backport PR #22028, Upstream PR #21526, @dylandreimerink)
  • Fixed CCNP garbage collection (Backport PR #21809, Upstream PR #21394, @zuzzas)
  • Fixes a deadlock that can be exposed in high-churn clusters when Pods are deleted rapidly. (Backport PR #21809, Upstream PR #21771, @squeed)
  • nodeinit: Move kubelet version check to expected branch (Backport PR #22028, Upstream PR #21772, @dctrwatson)

Misc Changes:

  • Add a section with distro-specific considerations (Backport PR #22028, Upstream PR #21064, @bmcustodio)
  • build(deps): bump actions/cache from 3.0.10 to 3.0.11 (#21723, @dependabot[bot])
  • build(deps): bump actions/download-artifact from 3.0.0 to 3.0.1 (#21842, @dependabot[bot])
  • build(deps): bump actions/setup-go from 3.3.0 to 3.3.1 (#21789, @dependabot[bot])
  • build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.1 (#21850, @dependabot[bot])
  • build(deps): bump docker/build-push-action from 3.1.1 to 3.2.0 (#21703, @dependabot[bot])
  • build(deps): bump docker/login-action from 2.0.0 to 2.1.0 (#21706, @dependabot[bot])
  • build(deps): bump docker/setup-buildx-action from 2.0.0 to 2.1.0 (#21704, @dependabot[bot])
  • build(deps): bump docker/setup-buildx-action from 2.1.0 to 2.2.1 (#21788, @dependabot[bot])
  • build(deps): bump docker/setup-qemu-action from 2.0.0 to 2.1.0 (#21705, @dependabot[bot])
  • build(deps): bump dorny/paths-filter from 2.10.2 to 2.11.0 (#21707, @dependabot[bot])
  • build(deps): bump dorny/paths-filter from 2.11.0 to 2.11.1 (#21724, @dependabot[bot])
  • build(deps): bump github/codeql-action from 2.1.27 to 2.1.28 (#21790, @dependabot[bot])
  • build(deps): bump github/codeql-action from 2.1.28 to 2.1.29 (#21893, @dependabot[bot])
  • build(deps): bump github/codeql-action from 2.1.29 to 2.1.30 (#21974, @dependabot[bot])
  • build(deps): bump github/codeql-action from 2.1.30 to 2.1.31 (#22050, @dependabot[bot])
  • build(deps): bump github/codeql-action from 2.1.31 to 2.1.32 (#22166, @dependabot[bot])
  • build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (#21843, @dependabot[bot])
  • build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 (#22136, @dependabot[bot])
  • build(deps): bump KyleMayes/install-llvm-action from 1.5.5 to 1.6.0 (#21868, @dependabot[bot])
  • build(deps): bump library/alpine from bc41182 to 65a2763 in /images/cache (#22113, @dependabot[bot])
  • chore(deps): update docker.io/library/alpine docker tag to v3.16.2 (v1.12) (#22105, @renovate[bot])
  • chore(deps): update docker.io/library/alpine docker tag to v3.16.3 (v1.12) (#22142, @renovate[bot])
  • chore(deps): update docker.io/library/golang:1.18.7 docker digest to 1542419 (v1.12) (#22102, @renovate[bot])
  • chore(deps): update docker.io/library/golang:1.18.8 docker digest to 1cbe009 (v1.12) (#22189, @renovate[bot])
  • chore(deps): update docker.io/library/golang:1.18.8 docker digest to 6e3764d (v1.12) (#22169, @renovate[bot])
  • chore(deps): update docker.io/library/ubuntu:20.04 docker digest to 450e066 (v1.12) (#22104, @renovate[bot])
  • chore(deps): update module go to 1.18 (v1.12) (#22122, @renovate[bot])
  • Clarify in documentation that Azure CNI chaining is different from Azure CNI powered by Cilium. (Backport PR #22028, Upstream PR #21897, @wedaly)
  • docs: Fix 'interface' field indentation (Backport PR #21809, Upstream PR #21798, @lou-lan)
  • docs: Remove autoDirectNodeRoutes where not needed (Backport PR #22028, Upstream PR #21831, @pchaigno)
  • Docs: Remove RUNTIME=docker option in dev_setup, given that K8s 1.24+ no longer supports it (options: containerd (default), crio). (Backport PR #22028, Upstream PR #21940, @Shunpoco)
  • docs: Update k8s NetworkPolicy descriptions (Backport PR #21809, Upstream PR #21670, @joestringer)
  • Fix incorrect env var name used in docs for Helm installation on Rancher Desktop (Backport PR #22028, Upstream PR #21835, @ehausig)
  • k8s: optimize API calls made to kube-apiserver (Backport PR #21809, Upstream PR #21088, @aanm)
  • Remove unused sections for bpf_lxc from nodeport.h (Backport PR #22028, Upstream PR #21505, @alexkats)
  • v1.12: Update Go to 1.18.7 (#21592, @tklauser)
  • v1.12: Update Go to 1.18.8 (#22026, @tklauser)

Other Changes:

Docker Manifests

cilium

docker.io/cilium/cilium:v1.12.4@sha256:4b074fcfba9325c18e97569ed1988464309a5ebf64bbc79bec6f3d58cafcb8cf
quay.io/cilium/cilium:v1.12.4@sha256:4b074fcfba9325c18e97569ed1988464309a5ebf64bbc79bec6f3d58cafcb8cf
docker.io/cilium/cilium:stable@sha256:4b074fcfba9325c18e97569ed1988464309a5ebf64bbc79bec6f3d58cafcb8cf
quay.io/cilium/cilium:stable@sha256:4b074fcfba9325c18e97569ed1988464309a5ebf64bbc79bec6f3d58cafcb8cf

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.12.4@sha256:77a0cf983aa4064732d4488cbf2c0bd0da9036fe3c94b2444f9fc0e1b76a872e
quay.io/cilium/clustermesh-apiserver:v1.12.4@sha256:77a0cf983aa4064732d4488cbf2c0bd0da9036fe3c94b2444f9fc0e1b76a872e
docker.io/cilium/clustermesh-apiserver:stable@sha256:77a0cf983aa4064732d4488cbf2c0bd0da9036fe3c94b2444f9fc0e1b76a872e
quay.io/cilium/clustermesh-apiserver:stable@sha256:77a0cf983aa4064732d4488cbf2c0bd0da9036fe3c94b2444f9fc0e1b76a872e

docker-plugin

docker.io/cilium/docker-plugin:v1.12.4@sha256:60b4521f181b383b558b6c50badbce21d9d34dbdf8068673e1e49fbce4d232a2
quay.io/cilium/docker-plugin:v1.12.4@sha256:60b4521f181b383b558b6c50badbce21d9d34dbdf8068673e1e49fbce4d232a2
docker.io/cilium/docker-plugin:stable@sha256:60b4521f181b383b558b6c50badbce21d9d34dbdf8068673e1e49fbce4d232a2
quay.io/cilium/docker-plugin:stable@sha256:60b4521f181b383b558b6c50badbce21d9d34dbdf8068673e1e49fbce4d232a2

hubble-relay

docker.io/cilium/hubble-relay:v1.12.4@sha256:dc5b396e94f986f83ccef89f13a91c29df482d4af491ff3bd4d40c05873d351a
quay.io/cilium/hubble-relay:v1.12.4@sha256:dc5b396e94f986f83ccef89f13a91c29df482d4af491ff3bd4d40c05873d351a
docker.io/cilium/hubble-relay:stable@sha256:dc5b396e94f986f83ccef89f13a91c29df482d4af491ff3bd4d40c05873d351a
quay.io/cilium/hubble-relay:stable@sha256:dc5b396e94f986f83ccef89f13a91c29df482d4af491ff3bd4d40c05873d351a

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.12.4@sha256:97e85e8da451596725de49c9a4bb5319b8bf43c33ccf81eda26102b1e1c13686
quay.io/cilium/operator-alibabacloud:v1.12.4@sha256:97e85e8da451596725de49c9a4bb5319b8bf43c33ccf81eda26102b1e1c13686
docker.io/cilium/operator-alibabacloud:stable@sha256:97e85e8da451596725de49c9a4bb5319b8bf43c33ccf81eda26102b1e1c13686
quay.io/cilium/operator-alibabacloud:stable@sha256:97e85e8da451596725de49c9a4bb5319b8bf43c33ccf81eda26102b1e1c13686

operator-aws

docker.io/cilium/operator-aws:v1.12.4@sha256:cf6e5ee7396c476c879cd1043f16a58c2cebc6d6261ef4ff01da762c54cc30b2
quay.io/cilium/operator-aws:v1.12.4@sha256:cf6e5ee7396c476c879cd1043f16a58c2cebc6d6261ef4ff01da762c54cc30b2
docker.io/cilium/operator-aws:stable@sha256:cf6e5ee7396c476c879cd1043f16a58c2cebc6d6261ef4ff01da762c54cc30b2
quay.io/cilium/operator-aws:stable@sha256:cf6e5ee7396c476c879cd1043f16a58c2cebc6d6261ef4ff01da762c54cc30b2

operator-azure

docker.io/cilium/operator-azure:v1.12.4@sha256:3aacfd2373d34b671a3ee9f7c3c3b9f0e80ace30ec91473df5f9967d1496a41f
quay.io/cilium/operator-azure:v1.12.4@sha256:3aacfd2373d34b671a3ee9f7c3c3b9f0e80ace30ec91473df5f9967d1496a41f
docker.io/cilium/operator-azure:stable@sha256:3aacfd2373d34b671a3ee9f7c3c3b9f0e80ace30ec91473df5f9967d1496a41f
quay.io/cilium/operator-azure:stable@sha256:3aacfd2373d34b671a3ee9f7c3c3b9f0e80ace30ec91473df5f9967d1496a41f

operator-generic

docker.io/cilium/operator-generic:v1.12.4@sha256:071089ec5bca1f556afb8e541d9972a0dfb09d1e25504ae642ced021ecbedbd1
quay.io/cilium/operator-generic:v1.12.4@sha256:071089ec5bca1f556afb8e541d9972a0dfb09d1e25504ae642ced021ecbedbd1
docker.io/cilium/operator-generic:stable@sha256:071089ec5bca1f556afb8e541d9972a0dfb09d1e25504ae642ced021ecbedbd1
quay.io/cilium/operator-generic:stable@sha256:071089ec5bca1f556afb8e541d9972a0dfb09d1e25504ae642ced021ecbedbd1

operator

docker.io/cilium/operator:v1.12.4@sha256:95c9a3be33ec87fe404cc876719f6a06a27658464dab3efbedd9974969cab21c
quay.io/cilium/operator:v1.12.4@sha256:95c9a3be33ec87fe404cc876719f6a06a27658464dab3efbedd9974969cab21c
docker.io/cilium/operator:stable@sha256:95c9a3be33ec87fe404cc876719f6a06a27658464dab3efbedd9974969cab21c
quay.io/cilium/operator:stable@sha256:95c9a3be33ec87fe404cc876719f6a06a27658464dab3efbedd9974969cab21c