1.9.15

We are pleased to release Cilium v1.9.15. See below for full notes on changes in this release.

Summary of Changes

Bugfixes:

• Fix a bug where a backend pod can be selected by a local redirect policy deployed in a different namespace if the local redirect policy was deployed first. (Backport PR #19252, Upstream PR #19193, @aditighag)
• helm: Removed unnecessary Kubernetes RBAC permissions for cilium-agent (Backport PR #19252, Upstream PR #19053, @nathanjsweet)
• helm: Update Clustermesh-APIServer RBAC permissions for platforms (like Openshift) that have the OwnerReferencesPermissionEnforcement admission controller enabled. (Backport PR #19252, Upstream PR #19071, @nathanjsweet)

CI Changes:

• test/helpers: Fix incorrect count of endpoints (Backport PR #19373, Upstream PR #16437, @pchaigno)

Misc Changes:

• build(deps): bump KyleMayes/install-llvm-action from 1.5.1 to 1.5.2 (#19323, @dependabot[bot])
• ci: Pin down image for the documentation workflow (Backport PR #19412, Upstream PR #19356, @qmonnet)
• docs: mark node-to-node IPSec encryption as beta (Backport PR #19412, Upstream PR #16200, @qmonnet)
• envoy: Limit accesslog socket permissions (Backport PR #19412, Upstream PR #19190, @jrajahalme)
• helm: Enable offline deployments for OpenShift clusters (Backport PR #19420, Upstream PR #18849, @nathanjsweet)
• ipcache: Add test asserting out-of-order Kubernetes events (Backport PR #19412, Upstream PR #19258, @christarazi)
• Test runtime cilium in container (take two) (Backport PR #19373, Upstream PR #19310, @jrajahalme)
• test: Fix whitespace in docker-run-cilium (Backport PR #19373, Upstream PR #19358, @jrajahalme)

Other Changes:

• install: Update image digests for v1.9.14 (#19238, @aanm)

Docker Manifests

cilium

docker.io/cilium/cilium:v1.9.15@sha256:20c0f6cedc09a880d76695e7ac70755a662c4bddf6d5197cf609ffe499ab72ce
quay.io/cilium/cilium:v1.9.15@sha256:20c0f6cedc09a880d76695e7ac70755a662c4bddf6d5197cf609ffe499ab72ce

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.9.15@sha256:59cabe18234077448b3410a1d9f0ffe9c78a41783e83cc3d80310ddd92b81822
quay.io/cilium/clustermesh-apiserver:v1.9.15@sha256:59cabe18234077448b3410a1d9f0ffe9c78a41783e83cc3d80310ddd92b81822

docker-plugin

docker.io/cilium/docker-plugin:v1.9.15@sha256:71122d659f0d19e1ea84c9b0a1356d7f1a06054bb6eebcdd297264fb0bc2ddcf
quay.io/cilium/docker-plugin:v1.9.15@sha256:71122d659f0d19e1ea84c9b0a1356d7f1a06054bb6eebcdd297264fb0bc2ddcf

hubble-relay

docker.io/cilium/hubble-relay:v1.9.15@sha256:748813e49877d66614d947495972f32b7f9675e9c327578c0ea81ca4f7adf322
quay.io/cilium/hubble-relay:v1.9.15@sha256:748813e49877d66614d947495972f32b7f9675e9c327578c0ea81ca4f7adf322

operator-aws

docker.io/cilium/operator-aws:v1.9.15@sha256:5ab748219bec4ac0a0e971e53e1b1ba6a569114eb6dea78951c2edb8ae460265
quay.io/cilium/operator-aws:v1.9.15@sha256:5ab748219bec4ac0a0e971e53e1b1ba6a569114eb6dea78951c2edb8ae460265

operator-azure

docker.io/cilium/operator-azure:v1.9.15@sha256:b1f236b2c9e99d1ed22ea99e7fcb6bd2f86707825b7c3d271715e6cbc29147d4
quay.io/cilium/operator-azure:v1.9.15@sha256:b1f236b2c9e99d1ed22ea99e7fcb6bd2f86707825b7c3d271715e6cbc29147d4

operator-generic

docker.io/cilium/operator-generic:v1.9.15@sha256:5f38912e638b96377f905369035e0afc89b45f24f7f27565b520f3573c4411f1
quay.io/cilium/operator-generic:v1.9.15@sha256:5f38912e638b96377f905369035e0afc89b45f24f7f27565b520f3573c4411f1

operator

docker.io/cilium/operator:v1.9.15@sha256:ee3a4a22a4d2df22238db65d9589356e43369335df02437c2cf23af9253f3c87
quay.io/cilium/operator:v1.9.15@sha256:ee3a4a22a4d2df22238db65d9589356e43369335df02437c2cf23af9253f3c87