Skip to content

1.9.2
Compare
Choose a tag to compare
@aanm aanm released this 20 Jan 16:06
v1.9.2
This tag was signed with the committer’s verified signature.
aanm André Martins
GPG key ID: A38D2FBA880D16AB
Learn about vigilant mode.
aad4e1c

NOTE: This release has been superseded by https://github.com/cilium/cilium/releases/v1.9.3 . Users are recommended to pull v1.9.3 instead due to an issue that occurred with v1.9.2 images served from Quay.io. For more details, see the v1.9.3 release notes.

Summary of Changes

Minor Changes:

  • Update Go to 1.15.6 (#14303, @tklauser)
  • k8s: Update libraries to v1.19.6 (#14480, @christarazi)
  • daemon, node: refresh neighbor by sending arping periodically (Backport PR #14578, Upstream PR #14498, @jaffcheng)
  • install: Provide quick-hubble-install.yaml for Relay and UI (Backport PR #14443, Upstream PR #14221, @gandro)
  • ipsec: Fatal on unsupported, <4.19 kernels in tunneling mode (Backport PR #14585, Upstream PR #14525, @pchaigno)
  • Istio integration is updated to Istio release 1.6.14 (Backport PR #14538, Upstream PR #14271, @jrajahalme)
  • No longer wait for and modify /var/run/azure-vnet.json. This confuses azure-vnet during Pod removal, causing it to incorrectly clean up machine state.
    In Azure IPAM mode, remove /var/run/azure-vnet.json on Cilium agent startup, flush ebtables and remove permanent neigh entries. (Backport PR #14613, Upstream PR #14452, @ti-mo)

Bugfixes:

  • Add missing requireIPv6PodCIDR setting (Backport PR #14538, Upstream PR #14508, @NeilW)
  • bpf: fix misconfigured nat to 0.0.0.0 on !masquerade config (Backport PR #14613, Upstream PR #14596, @borkmann)
  • cilium, gops: remap to fixed port to avoid collision with nodeport range (Backport PR #14419, Upstream PR #14329, @borkmann)
  • clustermesh: Ignore symlink files on fsnotify events (Backport PR #14613, Upstream PR #14565, @tgraf)
  • Fix BPF verifier rejection with IPv6 prefilter (Backport PR #14538, Upstream PR #14447, @pchaigno)
  • Fix bug where CCNPs are not validated properly in preflight (Backport PR #14613, Upstream PR #14557, @christarazi)
  • Fix bug where Cilium would constantly regenerate endpoints in environments with etcd and Linux 4.15 or below. (Backport PR #14405, Upstream PR #14300, @dctrwatson)
  • Fix CIDR rule bug potentially dropping allowed traffic or allowing denied traffic for deny policies (beta feature) when using ExceptCIDRs expressions. (Backport PR #14613, Upstream PR #14516, @jrajahalme)
  • Fix clustermesh-apiserver dependencies on pkg/option (Backport PR #14613, Upstream PR #14577, @tgraf)
  • Fix missing packet mark mask that can cause policy deny drops in IPSec configuration. (Backport PR #14419, Upstream PR #14381, @pchaigno)
  • Fix possible overflow in values presented in the k8s_event_lag_seconds metric. (Backport PR #14405, Upstream PR #14313, @aanm)
  • Fix potential nil pointer exception for an invalid CCNP in the Cilium Operator (Backport PR #14405, Upstream PR #14375, @aanm)
  • Fix potential panic when closing etcd connection on error (Backport PR #14644, Upstream PR #14623, @aanm)
  • Fix rare crash on startup when kubernetes initialization occurs before IP address configuration (Backport PR #14405, Upstream PR #14299, @joestringer)
  • Fixing Hubble ServiceMonitor k8s-app label (Backport PR #14538, Upstream PR #14473, @guilhermef)
  • Handle cluster names with dots for TLS server names. This prevented Hubble Relay from connecting to peers with TLS enabled in such a scenario. (Backport PR #14405, Upstream PR #14378, @rolinh)
  • helm/cilium-configmap: added checks to deduplicate keys (Backport PR #14308, Upstream PR #14153, @PranaviRoy)
  • helm: Fix preflight check resource quota conflict (Backport PR #14308, Upstream PR #14295, @gandro)
  • install/kubernetes: set the right option for expectAzureVnet (Backport PR #14538, Upstream PR #14449, @aanm)
  • maglev: Delete map if previous M's do not match (Backport PR #14424, Upstream PR #14345, @brb)
  • node: Remove check whether nextHop is in same L2 (#14453, @brb)
  • Split AKS node-init into two stages. Use azure0 presence as a condition for flushing ebtables & neigh. (Backport PR #14613, Upstream PR #14616, @ti-mo)
  • Remove 'bridge' parameter in Azure CNI chaining configuration. (Backport PR #14644, Upstream PR #14624, @ti-mo)

CI Changes:

Misc Changes:

Other Changes:

Assets 2