Skip to content

1.13.0-rc3

Pre-release
Pre-release
Compare
Choose a tag to compare
@aanm aanm released this 01 Dec 15:18
v1.13.0-rc3
This tag was signed with the committer’s verified signature.
aanm André Martins
GPG key ID: A38D2FBA880D16AB
Learn about vigilant mode.
d37596c

We are pleased to release Cilium v1.13.0-rc3.

Summary of Changes

Major Changes:

Minor Changes:

  • Add "cilium map events " command that lists bpf map operation events" (#21235, @tommyp1ckles)
  • Adjust CES bucket sizes for metrics (#21860, @AwesomePatrol)
  • Allow users to specify hostports with localhost hostIP (#21366, @aspsk)
  • Automatically adjust bpf-policy-map-max if the maximum value is exceeded (#22129, @vishal-chdhry)
  • bpf/tests: fix redundant usage of variable offset (#22390, @sahid)
  • Cilium Network Policy can now have TLS termination and/or origination without L7 rules. (#21808, @jrajahalme)
  • Disable and deprecate force-local-policy-eval-at-source (#22190, @pchaigno)
  • Disable eBPF host routing in cni chaining mode (#22044, @smwyzi)
  • Fatal when enabling DSR and tunneling on KubeProxyReplacement (#22031, @Shunpoco)
  • Get rid of KPR=probe and socket-LB protocols (#22083, @brb)
  • hubble: Add support for SockLB tracing (#21685, @gandro)
  • Improve policy deletion overhead by about 50% in large environments with a large number of policy rules (#22153, @odinuge)
  • In ENI IPAM mode, try to allocate new ENIs in the same subnet as the primary ENI instead of the subnet with the most available addresses. (#22000, @bimmlerd)
  • Introduce smarter internal cache to reduce memory consumption for FQDN / DNS policy usage, especially in environment with heavy FQDN / DNS policy usage (#21288, @odinuge)
  • relay: Add Go runtime metrics and process metrics (#22316, @chancez)
  • Traffic addressed to a service IP is dropped, if no backend is available. (#22388, @julianwiedmann)

Bugfixes:

  • Added Agent init check that removes all CiliumEndpoints referencing local Node that are not managed. This fixes issues where sometimes CiliumEndpoints referencing still running Pods can become unmanaged during Cilium restart. (#20350, @tommyp1ckles)
  • Clear stale CNP status nodes if updates have been disabled (#20366, @pippolo84)
  • docs: Update Cilium Sphinx RTD Theme reference (#22321, @kimstacy)
  • Fail validate-cnp preflight check if a CiliumClusterwideNetworkPolicy is using an empty toEndpoints/fromEndpoints selector (#21990, @thorn3r)
  • Fix bug that could lead to inconsistent pod IP information between agents, sometimes leading to a failure to decrypt IPsec traffic. (#22127, @aanm)
  • Fix bug where configuring the API rate limiter options could fail when providing multiple options (#22299, @thorn3r)
  • Fix Cilium fatal "Could not create or update CiliumNode resource, despite retries" on environments with enable-ipv4-egress-gateway (#22298, @aanm)
  • Fix cilium-bugtool --k8s-mode (#22160, @tbalthazar)
  • Fix forwarding of the security identity by the DNS proxy which could cause random policy denials (#22361, @aspsk)
  • Fix GC of CEPs that were not GCed by kube-apiserver (#22213, @aanm)
  • Fix label ordering in Hubble TCP metrics with contextOptions (#21824, @lambdanis)
  • fix: missing clustermesh metrics when more than one remote cluster is configured (#22033, @rcanderson23)
  • fix: some tofqdn flags not being parsed (#22346, @carloscastrojumo)
  • helm: Add relabelings config to ServiceMonitors and re-introduce node label on cilium/hubble metrics (#22297, @chancez)
  • Preserve instruction metadata when inlining global constants (#21933, @ti-mo)
  • Prevent cilium operator crash in AWS region with IPv6-only ENIs without subnet filters. (#22075, @bimmlerd)

CI Changes:

Misc Changes:

Contributors

tbalthazar, gandro, and 63 other contributors
Assets 2
Loading