yolokube/core-deployments
yolokube/core-deployments
2
3
Fork 0
Code Issues 2 Pull requests 3 Projects Wiki Activity

Update Helm release cilium to v1.17.4 #983

Merged
tom merged 1 commit from renovate/cilium-1.x into main 2025-05-18 17:24:36 +02:00
Conversation 0 Commits 1 Files changed 1 +1 -1
renovate commented 2025-05-15 21:02:39 +02:00
Collaborator
Copy link

This PR contains the following updates:

Package Update Change
cilium (source) patch 1.17.3 -> 1.17.4

Release Notes

cilium/cilium (cilium)

v1.17.4: 1.17.4

Compare Source

Summary of Changes

Minor Changes:

  • Add TRACE_{FROM/TO}_CRYPTO observation point and bpf metrics for packets forwarded-to/received-from Wireguard. (Backport PR #​39260, Upstream PR #​34958, @​smagnani96)
  • Cilium Agent liveness probe no longer fails if Kubernetes apiserver cannot be reached. Earlier the agent was restarted if the apiserver could not be reached for approximately 5 minutes. This avoids traffic disruptions on apiserver downtime (e.g. due to maintenance) for features such as L7 and FQDN proxy that require cilium-agent to always be up. (Backport PR #​38703, Upstream PR #​38458, @​joamaki)
  • Update kafka apiKey helm chart value to true (Backport PR #​39214, Upstream PR #​38963, @​kyle-c-simmons)

Bugfixes:

CI Changes:

Misc Changes:

Other Changes:

Docker Manifests

cilium

quay.io/cilium/cilium:v1.17.4@​sha256:24a73fe795351cf3279ac8e84918633000b52a9654ff73a6b0d7223bcff4a67a
quay.io/cilium/cilium:stable@sha256:24a73fe795351cf3279ac8e84918633000b52a9654ff73a6b0d7223bcff4a67a

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.17.4@​sha256:0b72f3046cf36ff9b113d53cc61185e893edb5fe728a2c9e561c1083f806453d
quay.io/cilium/clustermesh-apiserver:stable@sha256:0b72f3046cf36ff9b113d53cc61185e893edb5fe728a2c9e561c1083f806453d

docker-plugin

quay.io/cilium/docker-plugin:v1.17.4@​sha256:d2e1caaf9e6c7194ec20d8044cfd6b0d513cdfd1552e70f41070f3c25206eefa
quay.io/cilium/docker-plugin:stable@sha256:d2e1caaf9e6c7194ec20d8044cfd6b0d513cdfd1552e70f41070f3c25206eefa

hubble-relay

quay.io/cilium/hubble-relay:v1.17.4@​sha256:c16de12a64b8b56de62b15c1652d036253b40cd7fa643d7e1a404dc71dc66441
quay.io/cilium/hubble-relay:stable@sha256:c16de12a64b8b56de62b15c1652d036253b40cd7fa643d7e1a404dc71dc66441

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.17.4@​sha256:eaa7b18b7cda65af1d454d54224d175fdb69a35199fa949ae7dfda2789c18dd6
quay.io/cilium/operator-alibabacloud:stable@sha256:eaa7b18b7cda65af1d454d54224d175fdb69a35199fa949ae7dfda2789c18dd6

operator-aws

quay.io/cilium/operator-aws:v1.17.4@​sha256:3c31583e57648470fbf6646ac67122ac5896ce5f979ab824d9a38cfc7eafc753
quay.io/cilium/operator-aws:stable@sha256:3c31583e57648470fbf6646ac67122ac5896ce5f979ab824d9a38cfc7eafc753

operator-azure

quay.io/cilium/operator-azure:v1.17.4@​sha256:d8d95049bfeab47cb1a3f995164e1ca2cdec8e6c7036c29799647999cdae07b1
quay.io/cilium/operator-azure:stable@sha256:d8d95049bfeab47cb1a3f995164e1ca2cdec8e6c7036c29799647999cdae07b1

operator-generic

quay.io/cilium/operator-generic:v1.17.4@​sha256:a3906412f477b09904f46aac1bed28eb522bef7899ed7dd81c15f78b7aa1b9b5
quay.io/cilium/operator-generic:stable@sha256:a3906412f477b09904f46aac1bed28eb522bef7899ed7dd81c15f78b7aa1b9b5

operator

quay.io/cilium/operator:v1.17.4@​sha256:d51d9f6958b23c48591e10194b62e217c1d3740cdfca1e293fd199d22db7f97f
quay.io/cilium/operator:stable@sha256:d51d9f6958b23c48591e10194b62e217c1d3740cdfca1e293fd199d22db7f97f

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [cilium](https://cilium.io/) ([source](https://github.com/cilium/cilium)) | patch | `1.17.3` -> `1.17.4` | --- ### Release Notes <details> <summary>cilium/cilium (cilium)</summary> ### [`v1.17.4`](https://github.com/cilium/cilium/releases/tag/v1.17.4): 1.17.4 [Compare Source](https://github.com/cilium/cilium/compare/1.17.3...1.17.4) ## Summary of Changes **Minor Changes:** - Add TRACE\_{FROM/TO}\_CRYPTO observation point and bpf metrics for packets forwarded-to/received-from Wireguard. (Backport PR [#&#8203;39260](https://github.com/cilium/cilium/issues/39260), Upstream PR [#&#8203;34958](https://github.com/cilium/cilium/issues/34958), [@&#8203;smagnani96](https://github.com/smagnani96)) - Cilium Agent liveness probe no longer fails if Kubernetes apiserver cannot be reached. Earlier the agent was restarted if the apiserver could not be reached for approximately 5 minutes. This avoids traffic disruptions on apiserver downtime (e.g. due to maintenance) for features such as L7 and FQDN proxy that require cilium-agent to always be up. (Backport PR [#&#8203;38703](https://github.com/cilium/cilium/issues/38703), Upstream PR [#&#8203;38458](https://github.com/cilium/cilium/issues/38458), [@&#8203;joamaki](https://github.com/joamaki)) - Update kafka apiKey helm chart value to true (Backport PR [#&#8203;39214](https://github.com/cilium/cilium/issues/39214), Upstream PR [#&#8203;38963](https://github.com/cilium/cilium/issues/38963), [@&#8203;kyle-c-simmons](https://github.com/kyle-c-simmons)) **Bugfixes:** - bpf: nodeport: avoid accidental NAT46x64 clash in from-container (Backport PR [#&#8203;39214](https://github.com/cilium/cilium/issues/39214), Upstream PR [#&#8203;38916](https://github.com/cilium/cilium/issues/38916), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - Check the TLSRoute and HasServiceImportSupport through the CRD. (Backport PR [#&#8203;39377](https://github.com/cilium/cilium/issues/39377), Upstream PR [#&#8203;39122](https://github.com/cilium/cilium/issues/39122), [@&#8203;liyihuang](https://github.com/liyihuang)) - Fix a bug where a `CiliumNetworkPolicy`/`CiliumClusterwideNetworkPolicy` containing invalid rules would not be reported with invalid status. (Backport PR [#&#8203;38948](https://github.com/cilium/cilium/issues/38948), Upstream PR [#&#8203;38801](https://github.com/cilium/cilium/issues/38801), [@&#8203;tklauser](https://github.com/tklauser)) - Fix a bug where services would fail to match wildcard protocols after switching to Local traffic policy with protocol differentiation enabled. (Backport PR [#&#8203;39404](https://github.com/cilium/cilium/issues/39404), Upstream PR [#&#8203;39360](https://github.com/cilium/cilium/issues/39360), [@&#8203;pasteley](https://github.com/pasteley)) - Fix a deadlock when a host has no IPv4 address. (Backport PR [#&#8203;39075](https://github.com/cilium/cilium/issues/39075), Upstream PR [#&#8203;38938](https://github.com/cilium/cilium/issues/38938), [@&#8203;EmilyShepherd](https://github.com/EmilyShepherd)) - Fix a panic happening in the ipset reconciler when a previous reconciliation failed. (Backport PR [#&#8203;39075](https://github.com/cilium/cilium/issues/39075), Upstream PR [#&#8203;38890](https://github.com/cilium/cilium/issues/38890), [@&#8203;pippolo84](https://github.com/pippolo84)) - Fix bug that would cause the `cilium-dbg encrypt status` command to not list any decryption interfaces when KPR is enabled. (Backport PR [#&#8203;39214](https://github.com/cilium/cilium/issues/39214), Upstream PR [#&#8203;39170](https://github.com/cilium/cilium/issues/39170), [@&#8203;pchaigno](https://github.com/pchaigno)) - Fixes a bug where layer-7 rules would override enableDefaultDeny: false, incorrectly dropping traffic. (Backport PR [#&#8203;39375](https://github.com/cilium/cilium/issues/39375), Upstream PR [#&#8203;38841](https://github.com/cilium/cilium/issues/38841), [@&#8203;nimishamehta5](https://github.com/nimishamehta5)) - gateway-api: Fix Gateway reconciler failure when TLSRoute CRD is not installed (Backport PR [#&#8203;39377](https://github.com/cilium/cilium/issues/39377), Upstream PR [#&#8203;38874](https://github.com/cilium/cilium/issues/38874), [@&#8203;syedazeez337](https://github.com/syedazeez337)) - gateway-api: Fix parentRefMatched to check Group and Kind (Backport PR [#&#8203;39377](https://github.com/cilium/cilium/issues/39377), Upstream PR [#&#8203;39275](https://github.com/cilium/cilium/issues/39275), [@&#8203;syedazeez337](https://github.com/syedazeez337)) - helm: fix hubble dynamic metrics config conflict (Backport PR [#&#8203;39075](https://github.com/cilium/cilium/issues/39075), Upstream PR [#&#8203;38893](https://github.com/cilium/cilium/issues/38893), [@&#8203;devodev](https://github.com/devodev)) - ipsec: Fix key derivation error in case of corrupted boot IDs (Backport PR [#&#8203;39214](https://github.com/cilium/cilium/issues/39214), Upstream PR [#&#8203;39059](https://github.com/cilium/cilium/issues/39059), [@&#8203;pchaigno](https://github.com/pchaigno)) - k8s: Fixed a case when delete event for service endpointslices might have been missed if connectivity to k8s apiserver was broken causing stale service cache for service. (Backport PR [#&#8203;38948](https://github.com/cilium/cilium/issues/38948), Upstream PR [#&#8203;38779](https://github.com/cilium/cilium/issues/38779), [@&#8203;marseel](https://github.com/marseel)) - wireguard:overlay: cleanup calls map when unused (Backport PR [#&#8203;38899](https://github.com/cilium/cilium/issues/38899), Upstream PR [#&#8203;38655](https://github.com/cilium/cilium/issues/38655), [@&#8203;smagnani96](https://github.com/smagnani96)) - xds: Fix a case in which after cilium-agent we were not sending updated resources to Envoy (Backport PR [#&#8203;38977](https://github.com/cilium/cilium/issues/38977), Upstream PR [#&#8203;38654](https://github.com/cilium/cilium/issues/38654), [@&#8203;marseel](https://github.com/marseel)) **CI Changes:** - .github/workflows: Enable DualStack for conformance-kind-proxy-embedded (Backport PR [#&#8203;39377](https://github.com/cilium/cilium/issues/39377), Upstream PR [#&#8203;36398](https://github.com/cilium/cilium/issues/36398), [@&#8203;dylandreimerink](https://github.com/dylandreimerink)) - \[v1.17] l4lb: Support environments with existing veth ([#&#8203;39408](https://github.com/cilium/cilium/issues/39408), [@&#8203;joestringer](https://github.com/joestringer)) - Align main and stable branch workflows for availability of cilium-cli (Backport PR [#&#8203;38141](https://github.com/cilium/cilium/issues/38141), Upstream PR [#&#8203;38138](https://github.com/cilium/cilium/issues/38138), [@&#8203;joestringer](https://github.com/joestringer)) - bpf: tests: fix ethertype when building inner headers of VXLAN packet (Backport PR [#&#8203;39075](https://github.com/cilium/cilium/issues/39075), Upstream PR [#&#8203;39060](https://github.com/cilium/cilium/issues/39060), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - ci-aks: Enable dual-stack in Conformance AKS (Backport PR [#&#8203;39377](https://github.com/cilium/cilium/issues/39377), Upstream PR [#&#8203;37704](https://github.com/cilium/cilium/issues/37704), [@&#8203;gandro](https://github.com/gandro)) - gateway-api: Add translation tests for GAMMA (Backport PR [#&#8203;39221](https://github.com/cilium/cilium/issues/39221), Upstream PR [#&#8203;39207](https://github.com/cilium/cilium/issues/39207), [@&#8203;sayboras](https://github.com/sayboras)) - gh: e2e-upgrade: check for unexpected drops from connectivity tests (Backport PR [#&#8203;39214](https://github.com/cilium/cilium/issues/39214), Upstream PR [#&#8203;39111](https://github.com/cilium/cilium/issues/39111), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - gh: e2e-upgrade: generate config matrix from file (Backport PR [#&#8203;39058](https://github.com/cilium/cilium/issues/39058), Upstream PR [#&#8203;38512](https://github.com/cilium/cilium/issues/38512), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - gh: e2e-upgrade: minor log output improvements (Backport PR [#&#8203;39058](https://github.com/cilium/cilium/issues/39058), Upstream PR [#&#8203;38011](https://github.com/cilium/cilium/issues/38011), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - gh: use e2e-upgrade for IPsec minor upgrade testing (Backport PR [#&#8203;39058](https://github.com/cilium/cilium/issues/39058), Upstream PR [#&#8203;38757](https://github.com/cilium/cilium/issues/38757), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - gha: always respect the given image tag in the wait-for-images action (Backport PR [#&#8203;38141](https://github.com/cilium/cilium/issues/38141), Upstream PR [#&#8203;37901](https://github.com/cilium/cilium/issues/37901), [@&#8203;giorio94](https://github.com/giorio94)) - rate: Disable TestStressRateLimiter (Backport PR [#&#8203;38896](https://github.com/cilium/cilium/issues/38896), Upstream PR [#&#8203;38877](https://github.com/cilium/cilium/issues/38877), [@&#8203;YutaroHayakawa](https://github.com/YutaroHayakawa)) **Misc Changes:** - \[v1.17] deps: bump CNI plugins version ([#&#8203;39329](https://github.com/cilium/cilium/issues/39329), [@&#8203;ferozsalam](https://github.com/ferozsalam)) - \[v1.17] deps: bump golang-jwt to 4.5.2 ([#&#8203;39491](https://github.com/cilium/cilium/issues/39491), [@&#8203;ferozsalam](https://github.com/ferozsalam)) - Add the doc for multi-pool ipam about how to update the existing ip pool (Backport PR [#&#8203;38948](https://github.com/cilium/cilium/issues/38948), Upstream PR [#&#8203;38539](https://github.com/cilium/cilium/issues/38539), [@&#8203;liyihuang](https://github.com/liyihuang)) - bpf: host: use MARK_MAGIC_EGW_DONE-embedded identity in to-netdev (Backport PR [#&#8203;38948](https://github.com/cilium/cilium/issues/38948), Upstream PR [#&#8203;38768](https://github.com/cilium/cilium/issues/38768), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - bpf: nat: ICMP v4 improvements (Backport PR [#&#8203;39332](https://github.com/cilium/cilium/issues/39332), Upstream PR [#&#8203;36767](https://github.com/cilium/cilium/issues/36767), [@&#8203;julianwiedmann](https://github.com/julianwiedmann)) - bpf:hubble: update trace/drop notify for L2-less packets (Backport PR [#&#8203;39263](https://github.com/cilium/cilium/issues/39263), Upstream PR [#&#8203;37097](https://github.com/cilium/cilium/issues/37097), [@&#8203;smagnani96](https://github.com/smagnani96)) - chore(deps): update all github action dependencies (v1.17) ([#&#8203;39183](https://github.com/cilium/cilium/issues/39183), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update all github action dependencies (v1.17) ([#&#8203;39316](https://github.com/cilium/cilium/issues/39316), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.23.8 docker digest to [`87bb940`](https://github.com/cilium/cilium/commit/87bb940) (v1.17) ([#&#8203;38908](https://github.com/cilium/cilium/issues/38908), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.23.8 docker digest to [`e54daaa`](https://github.com/cilium/cilium/commit/e54daaa) (v1.17) ([#&#8203;39046](https://github.com/cilium/cilium/issues/39046), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.24.2 docker digest to [`30baaea`](https://github.com/cilium/cilium/commit/30baaea) (v1.17) ([#&#8203;39314](https://github.com/cilium/cilium/issues/39314), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/ubuntu:24.04 docker digest to [`6015f66`](https://github.com/cilium/cilium/commit/6015f66) (v1.17) ([#&#8203;39379](https://github.com/cilium/cilium/issues/39379), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update go to v1.24.2 (v1.17) ([#&#8203;39113](https://github.com/cilium/cilium/issues/39113), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update go to v1.24.3 (v1.17) ([#&#8203;39380](https://github.com/cilium/cilium/issues/39380), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update google/cloud-sdk docker tag to v518 (v1.17) ([#&#8203;39048](https://github.com/cilium/cilium/issues/39048), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.5-1744328671-a8b58b35c03a3d100a2b026fc111417207183301 (v1.17) ([#&#8203;38909](https://github.com/cilium/cilium/issues/38909), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.5-1744798797-f7456c0c30336bbd437eff7743374370e415fc44 (v1.17) ([#&#8203;39047](https://github.com/cilium/cilium/issues/39047), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.5-1745916268-e485bbc0c95e30aa233cb06a753789375b12ad18 (v1.17) ([#&#8203;39226](https://github.com/cilium/cilium/issues/39226), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.5-1745971871-f98500f20b253684d483b783b29df2e4db05ea7c (v1.17) ([#&#8203;39248](https://github.com/cilium/cilium/issues/39248), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.5-1746405645-719d708b1802ce417568d3eaae4c0677dd60e128 (v1.17) ([#&#8203;39324](https://github.com/cilium/cilium/issues/39324), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.6-1746661844-0f602c28cb2aa57b29078195049fb257d5b5246c (v1.17) ([#&#8203;39413](https://github.com/cilium/cilium/issues/39413), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;38911](https://github.com/cilium/cilium/issues/38911), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;38970](https://github.com/cilium/cilium/issues/38970), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;39182](https://github.com/cilium/cilium/issues/39182), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;39315](https://github.com/cilium/cilium/issues/39315), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;39475](https://github.com/cilium/cilium/issues/39475), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot]) - chore: remove `retention-days` param in `build-images-releases.yaml` (Backport PR [#&#8203;39435](https://github.com/cilium/cilium/issues/39435), Upstream PR [#&#8203;39431](https://github.com/cilium/cilium/issues/39431), [@&#8203;sekhar-isovalent](https://github.com/sekhar-isovalent)) - cilium: Fix device controller's dependency on netfilter (Backport PR [#&#8203;38948](https://github.com/cilium/cilium/issues/38948), Upstream PR [#&#8203;38777](https://github.com/cilium/cilium/issues/38777), [@&#8203;borkmann](https://github.com/borkmann)) - cilium: Fix ipip device mtu (Backport PR [#&#8203;38948](https://github.com/cilium/cilium/issues/38948), Upstream PR [#&#8203;38682](https://github.com/cilium/cilium/issues/38682), [@&#8203;borkmann](https://github.com/borkmann)) - contrib/scripts: Fix IndexError in stacktrace script (Backport PR [#&#8203;39214](https://github.com/cilium/cilium/issues/39214), Upstream PR [#&#8203;39101](https://github.com/cilium/cilium/issues/39101), [@&#8203;christarazi](https://github.com/christarazi)) - contrib: Remove kind.sh dependency on git (Backport PR [#&#8203;39377](https://github.com/cilium/cilium/issues/39377), Upstream PR [#&#8203;39154](https://github.com/cilium/cilium/issues/39154), [@&#8203;joestringer](https://github.com/joestringer)) - docs: Add good kernel versions for the L7 policy IPv6 bug (Backport PR [#&#8203;39377](https://github.com/cilium/cilium/issues/39377), Upstream PR [#&#8203;39212](https://github.com/cilium/cilium/issues/39212), [@&#8203;gentoo-root](https://github.com/gentoo-root)) - docs: add warning about l7 policy and EnableDefaultDeny (Backport PR [#&#8203;39075](https://github.com/cilium/cilium/issues/39075), Upstream PR [#&#8203;38675](https://github.com/cilium/cilium/issues/38675), [@&#8203;squeed](https://github.com/squeed)) - docs: Document L7 policy IPv6 bug (Backport PR [#&#8203;38948](https://github.com/cilium/cilium/issues/38948), Upstream PR [#&#8203;38591](https://github.com/cilium/cilium/issues/38591), [@&#8203;gentoo-root](https://github.com/gentoo-root)) - docs: Document that traffic to the VPC in ENI mode is not masqueraded ([#&#8203;39156](https://github.com/cilium/cilium/issues/39156), [@&#8203;liyihuang](https://github.com/liyihuang)) - docs: Fix casing and formatting in L3 examples section (Backport PR [#&#8203;39377](https://github.com/cilium/cilium/issues/39377), Upstream PR [#&#8203;39065](https://github.com/cilium/cilium/issues/39065), [@&#8203;mikejoh](https://github.com/mikejoh)) - docs: Fix variable naming in EKS-to-EKS Clustermesh guide (Backport PR [#&#8203;39075](https://github.com/cilium/cilium/issues/39075), Upstream PR [#&#8203;38821](https://github.com/cilium/cilium/issues/38821), [@&#8203;zzuckerfrei](https://github.com/zzuckerfrei)) - docs: The Installation on OpenShift OKD document has been updated to link to maintained operators for Cilium (Isovalent Enterprise for Cilium). This operator is validated on all current versions of OpenShift. (Backport PR [#&#8203;39377](https://github.com/cilium/cilium/issues/39377), Upstream PR [#&#8203;38886](https://github.com/cilium/cilium/issues/38886), [@&#8203;auriaave](https://github.com/auriaave)) - docs: Update `hubble-metrics` flag documentation (Backport PR [#&#8203;39075](https://github.com/cilium/cilium/issues/39075), Upstream PR [#&#8203;38960](https://github.com/cilium/cilium/issues/38960), [@&#8203;HadrienPatte](https://github.com/HadrienPatte)) - Documentation : Modification of eks-clustermesh-prep.rst (Backport PR [#&#8203;39214](https://github.com/cilium/cilium/issues/39214), Upstream PR [#&#8203;39025](https://github.com/cilium/cilium/issues/39025), [@&#8203;rwinieski](https://github.com/rwinieski)) - documentation: fix get deployment cmd (Backport PR [#&#8203;39214](https://github.com/cilium/cilium/issues/39214), Upstream PR [#&#8203;39155](https://github.com/cilium/cilium/issues/39155), [@&#8203;g0gn](https://github.com/g0gn)) - dynamiclifecycle: fix goroutine leak (Backport PR [#&#8203;39214](https://github.com/cilium/cilium/issues/39214), Upstream PR [#&#8203;39149](https://github.com/cilium/cilium/issues/39149), [@&#8203;squeed](https://github.com/squeed)) - exclude the dummy device type when evaluating MTU, ensuring that local traffic does not interfere with MTU calculations. (Backport PR [#&#8203;39214](https://github.com/cilium/cilium/issues/39214), Upstream PR [#&#8203;38992](https://github.com/cilium/cilium/issues/38992), [@&#8203;liyihuang](https://github.com/liyihuang)) - Fix LRU maps to streamline distributed LRU flag implementation with map prealloc handling (Backport PR [#&#8203;39214](https://github.com/cilium/cilium/issues/39214), Upstream PR [#&#8203;39087](https://github.com/cilium/cilium/issues/39087), [@&#8203;borkmann](https://github.com/borkmann)) - Fix map recreation loop when distributed lru setting is enabled (Backport PR [#&#8203;39075](https://github.com/cilium/cilium/issues/39075), Upstream PR [#&#8203;38978](https://github.com/cilium/cilium/issues/38978), [@&#8203;borkmann](https://github.com/borkmann)) - hubble:monitor: align TraceNotify to DropNotify (Backport PR [#&#8203;39264](https://github.com/cilium/cilium/issues/39264), Upstream PR [#&#8203;38830](https://github.com/cilium/cilium/issues/38830), [@&#8203;smagnani96](https://github.com/smagnani96)) - ipsec: include ipv6 in v1.18 upgrade leak detection ([#&#8203;38843](https://github.com/cilium/cilium/issues/38843), [@&#8203;ldelossa](https://github.com/ldelossa)) - k8s/resource: Don't Add to WaitGroup asynchronously (Backport PR [#&#8203;38948](https://github.com/cilium/cilium/issues/38948), Upstream PR [#&#8203;38692](https://github.com/cilium/cilium/issues/38692), [@&#8203;joamaki](https://github.com/joamaki)) - make: fix golangci-lint version detection (Backport PR [#&#8203;39075](https://github.com/cilium/cilium/issues/39075), Upstream PR [#&#8203;38996](https://github.com/cilium/cilium/issues/38996), [@&#8203;mhofstetter](https://github.com/mhofstetter)) - Throw build bug when using TRACE\_{FROM,TO}\_CRYPTO from unexpected files and cleanup unevaluated build_bug_on. (Backport PR [#&#8203;39260](https://github.com/cilium/cilium/issues/39260), Upstream PR [#&#8203;38470](https://github.com/cilium/cilium/issues/38470), [@&#8203;smagnani96](https://github.com/smagnani96)) - workflows: fix lint-workflows (Backport PR [#&#8203;39403](https://github.com/cilium/cilium/issues/39403), Upstream PR [#&#8203;39398](https://github.com/cilium/cilium/issues/39398), [@&#8203;aanm](https://github.com/aanm)) **Other Changes:** - \[v1.17] k8s/statedb: Fix buffering order of objects ([#&#8203;38585](https://github.com/cilium/cilium/issues/38585), [@&#8203;joamaki](https://github.com/joamaki)) - \[v1.17] Stop TLS Interception config being included in preflight ([#&#8203;39481](https://github.com/cilium/cilium/issues/39481), [@&#8203;youngnick](https://github.com/youngnick)) - bpf,encrypt: fixes the placement of a particular vxlan helper function ([#&#8203;39088](https://github.com/cilium/cilium/issues/39088), [@&#8203;ldelossa](https://github.com/ldelossa)) - install: Update image digests for v1.17.3 ([#&#8203;38933](https://github.com/cilium/cilium/issues/38933), [@&#8203;cilium-release-bot](https://github.com/cilium-release-bot)\[bot]) - v1.17: Update Go version to 1.24 in go.mod ([#&#8203;39128](https://github.com/cilium/cilium/issues/39128), [@&#8203;pchaigno](https://github.com/pchaigno)) #### Docker Manifests ##### cilium `quay.io/cilium/cilium:v1.17.4@&#8203;sha256:24a73fe795351cf3279ac8e84918633000b52a9654ff73a6b0d7223bcff4a67a` `quay.io/cilium/cilium:stable@sha256:24a73fe795351cf3279ac8e84918633000b52a9654ff73a6b0d7223bcff4a67a` ##### clustermesh-apiserver `quay.io/cilium/clustermesh-apiserver:v1.17.4@&#8203;sha256:0b72f3046cf36ff9b113d53cc61185e893edb5fe728a2c9e561c1083f806453d` `quay.io/cilium/clustermesh-apiserver:stable@sha256:0b72f3046cf36ff9b113d53cc61185e893edb5fe728a2c9e561c1083f806453d` ##### docker-plugin `quay.io/cilium/docker-plugin:v1.17.4@&#8203;sha256:d2e1caaf9e6c7194ec20d8044cfd6b0d513cdfd1552e70f41070f3c25206eefa` `quay.io/cilium/docker-plugin:stable@sha256:d2e1caaf9e6c7194ec20d8044cfd6b0d513cdfd1552e70f41070f3c25206eefa` ##### hubble-relay `quay.io/cilium/hubble-relay:v1.17.4@&#8203;sha256:c16de12a64b8b56de62b15c1652d036253b40cd7fa643d7e1a404dc71dc66441` `quay.io/cilium/hubble-relay:stable@sha256:c16de12a64b8b56de62b15c1652d036253b40cd7fa643d7e1a404dc71dc66441` ##### operator-alibabacloud `quay.io/cilium/operator-alibabacloud:v1.17.4@&#8203;sha256:eaa7b18b7cda65af1d454d54224d175fdb69a35199fa949ae7dfda2789c18dd6` `quay.io/cilium/operator-alibabacloud:stable@sha256:eaa7b18b7cda65af1d454d54224d175fdb69a35199fa949ae7dfda2789c18dd6` ##### operator-aws `quay.io/cilium/operator-aws:v1.17.4@&#8203;sha256:3c31583e57648470fbf6646ac67122ac5896ce5f979ab824d9a38cfc7eafc753` `quay.io/cilium/operator-aws:stable@sha256:3c31583e57648470fbf6646ac67122ac5896ce5f979ab824d9a38cfc7eafc753` ##### operator-azure `quay.io/cilium/operator-azure:v1.17.4@&#8203;sha256:d8d95049bfeab47cb1a3f995164e1ca2cdec8e6c7036c29799647999cdae07b1` `quay.io/cilium/operator-azure:stable@sha256:d8d95049bfeab47cb1a3f995164e1ca2cdec8e6c7036c29799647999cdae07b1` ##### operator-generic `quay.io/cilium/operator-generic:v1.17.4@&#8203;sha256:a3906412f477b09904f46aac1bed28eb522bef7899ed7dd81c15f78b7aa1b9b5` `quay.io/cilium/operator-generic:stable@sha256:a3906412f477b09904f46aac1bed28eb522bef7899ed7dd81c15f78b7aa1b9b5` ##### operator `quay.io/cilium/operator:v1.17.4@&#8203;sha256:d51d9f6958b23c48591e10194b62e217c1d3740cdfca1e293fd199d22db7f97f` `quay.io/cilium/operator:stable@sha256:d51d9f6958b23c48591e10194b62e217c1d3740cdfca1e293fd199d22db7f97f` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xMi4xIiwidXBkYXRlZEluVmVyIjoiNDAuMTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate added 1 commit 2025-05-15 21:02:39 +02:00
Update Helm release cilium to v1.17.4
All checks were successful
ci/woodpecker/push/yamllint Pipeline was successful
Details
4f9bd3d840
tom merged commit 5e07dbbc29 into main 2025-05-18 17:24:36 +02:00
tom deleted branch renovate/cilium-1.x 2025-05-18 17:24:36 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
state
stale

  
state
to-do

  
state
waiting

  
system
argo

  
system
cni

  
system
dashboard

  
system
ingress

  
system
monitoring

  
system
sso

  
system
storage

  
system
woodpecker

  
type
bug
Something is not working

  
type
enhancement
New feature

  
type
update
Software needs an update

  
type
dependency-dashboard
Only for Renovate Dependency Dashboard

No labels
state
stale
state
to-do
state
waiting
system
argo
system
cni
system
dashboard
system
ingress
system
monitoring
system
sso
system
storage
system
woodpecker
type
bug
type
enhancement
type
update
type
dependency-dashboard
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: yolokube/core-deployments#983
No description provided.
Delete branch "renovate/cilium-1.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?