Prepare for release v1.13.0-rc5 #23270

joestringer · 2023-01-24T02:48:30Z

Prepare for release v1.13.0-rc5

Summary of Changes

Major Changes:

cilium: completion of nat46/64 gateway (Backport PR v1.13 backport 2023-01-05 #22948, Upstream PR cilium: completion of nat46/64 gateway #22421, @borkmann)
Support Kubernetes v1.21 new field internalTrafficPolicy=Local. (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR Internal traffic policy #21871, @gentoo-root)

Minor Changes:

Bump Linux minimum version to 4.19.57 (or equivalent) (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR Bump Linux minimum version to 4.19.57 (or equivalent) #23124, @joestringer)
feat(hubble): add L7 verdicts to hubble_policy_verdicts_total metric (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR feat(hubble): add L7 verdicts to hubble_policy_verdicts_total metric #22622, @raphink)
Fix crash of CES queue delay metric when CESTracker is nil (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR Fix crash of CES queue delay metric when CESTracker is nil #22884, @dlapcevic)
helm: Add node-role.kubernetes.io/control-plane key (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR helm: Add node-role.kubernetes.io/control-plane key #22893, @my-git9)
operator: Add RBAC permission for CiliumNodeConfigs resource (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR operator: Add RBAC permission for CiliumNodeConfigs resource #22824, @sayboras)
pkg/metrics: include revision and arch info in cilium_version (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR pkg/metrics: include revision and arch info in cilium_version #22795, @ArthurChiao)

Bugfixes:

bpf: lb: catch write error in lb6_xlate() (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR bpf: lb: catch write error in lb6_xlate() #23075, @julianwiedmann)
bpf: lb: fix check for L3 pseudo-hdr csum update in lb6_xlate() (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR bpf: lb: fix check for L3 pseudo-hdr csum update in lb6_xlate() #22953, @julianwiedmann)
bpf: nodeport: fix tracing for handle_nat_fwd() (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR bpf: nodeport: fix tracing for handle_nat_fwd() #22678, @julianwiedmann)
bpf: nodeport: handle revDNAT for local backends at to-netdev/to-overlay (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR bpf: nodeport: handle revDNAT for local backends at to-netdev/to-overlay #22756, @julianwiedmann)
clustermesh: Add missing brackets of IPv6 address for etcd option (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR clustermesh: Add missing brackets of etcd option #22962, @YutaroHayakawa)
daemon: Fix BPF host routing can't be enabled if the devices are wildcard (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR daemon: Fix BPF host routing can't be enabled if the devices are wildcard #23009, @ysksuzuki)
datapath: Fix L7 ingress with XDP (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR datapath: Fix L7 ingress with XDP #22985, @brb)
envoy: Fix lock leak in config validation failure (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR envoy: Fix lock leak in config validation failure #23077, @joestringer)
Fix bugs where ciliumendpoints for statefulset pods where being incorrectly overwritten/deleted (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR Endpoint/CEP Ownership Fix #21768, @tommyp1ckles)
Fix double-accounted RX packets in CT statistics when Nodeport is in use. (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR nodeport: fix CT accounting in revDNAT path #22810, @julianwiedmann)
Fix missing node neigh metric for counting arping requests (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR Fix missing node neigh metric for counting arping requests #22930, @christarazi)
Fix packet drops when service pod connects to itself via clusterIP, and selected by an ingress policy. (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR bpf: Fix LB loopback path with ingress policy #22972, @aditighag)
Fix socket-lb tracing in environments with systemd and container runtimes like containerd, crio, and docker. (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR Extend cgroup path detection to fix socket-lb tracing in certain environments #22773, @aditighag)
ingress/model: Support multiple certs based on SNI (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR ingress/model: Support multiple certs based on SNI #22671, @sayboras)

CI Changes:

.github: Pin docker buildx version to v0.9.1 (v2) (Backport PR v1.13 Backports 2023-01-23 (github worfklow's changes) #23233, Upstream PR .github: Pin docker buildx version to v0.9.1 (v2) #23220, @joestringer)
[v1.13] ci: update cilium-cli to v0.12.12 in v1.13 workflows ([v1.13] ci: update cilium-cli to v0.12.12 in v1.13 workflows #23129, @tklauser)
bpf: test: fix xdp_lb4_forward_to_other_node test (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR bpf: test: fix xdp_lb4_forward_to_other_node test #23018, @julianwiedmann)
ctmap: fix-up host_local flag in the DSR NAT entry for GC test (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR ctmap: fix-up host_local flag in the DSR NAT entry for GC test #23037, @julianwiedmann)
gh/workflows: ci-datapath updates (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR gh/workflows: ci-datapath updates #22811, @brb)
gh/workflows: Extend ci-datapath config to include lb-mode and endpoint-routes (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR gh/workflows: Extend ci-datapath config to include lb-mode and endpoint-routes #22825, @brb)
gha: Pin minikube version used in CI (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR gha: Pin minikube version used in CI #23099, @sayboras)
per-node config improvements: testing, null selector, cleanups (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR per-node config improvements: testing, null selector, cleanups #22950, @squeed)
test/l4lb,nat46x64: Replace Kind/Helm with DinD (Backport PR v1.13 backport 2023-01-23 #23242, Upstream PR test/l4lb,nat46x64: Replace Kind/Helm with DinD #22653, @brb)
test: Quarantine TLS test for now (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR test: Quarantine TLS test for now #22684, @jrajahalme)
workflows: fix skip condition for encryption tests in datapath conformance (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR workflows: fix skip condition for encryption tests in datapath conformance #22763, @tklauser)

Misc Changes:

Add Cilium configuration documentation (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR Add Cilium configuration documentation #22744, @squeed)
bpf: fix cb collisio 10000 n for nat46x64 (Backport PR v1.13 backport 2023-01-05 #22948, Upstream PR bpf: fix cb collision for nat46x64 #23012, @borkmann)
bpf: lb: fix L3 pseudo-hdr csum update for SCTP in __lb6_rev_nat() (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR bpf: lb: fix L3 pseudo-hdr csum update for SCTP in __lb6_rev_nat() #23063, @julianwiedmann)
bpf: nodeport: fix-up error check in rev_nodeport_lb*() for XDP (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR bpf: nodeport: fix-up error check in rev_nodeport_lb*() for XDP #23119, @julianwiedmann)
bpf: nodeport: NAT64 cleanups (Backport PR v1.13 backport 2023-01-05 #22948, Upstream PR bpf: nodeport: NAT64 cleanups #22915, @julianwiedmann)
bpf: nodeport: reset EDT aggregate ID for XDP-to-TC tunnel punt (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR bpf: nodeport: reset EDT aggregate ID for XDP-to-TC tunnel punt #23029, @julianwiedmann)
bpf: Relax constant check for dst_id for clang 14+ (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR bpf: Relax constant check for dst_id for clang 14+ #22919, @sayboras)
build(deps): bump actions/cache from 3.2.0 to 3.2.3 (build(deps): bump actions/cache from 3.2.0 to 3.2.3 #22992, @dependabot[bot])
build(deps): bump actions/download-artifact from 3.0.1 to 3.0.2 (build(deps): bump actions/download-artifact from 3.0.1 to 3.0.2 #22961, @dependabot[bot])
build(deps): bump docker/build-push-action from 3.2.0 to 3.3.0 (build(deps): bump docker/build-push-action from 3.2.0 to 3.3.0 #23116, @dependabot[bot])
build(deps): bump github/codeql-action from 2.1.37 to 2.1.38 (build(deps): bump github/codeql-action from 2.1.37 to 2.1.38 #23073, @dependabot[bot])
build(deps): bump github/codeql-action from 2.1.38 to 2.1.39 (build(deps): bump github/codeql-action from 2.1.38 to 2.1.39 #23191, @dependabot[bot])
build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 #23253, @dependabot[bot])
build(deps): update package dependencies (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR build(deps): update package dependencies #23140, @fengshunli)
build: Avoid re-building when building docs from the main Makefile (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR build: Avoid re-building when building docs from the main Makefile #22979, @jrajahalme)
build: Bump base image build time for SBOM (Backport PR v1.13 Backports 2023-01-23 (github worfklow's changes) #23233, Upstream PR build: Bump base image build time for SBOM #23148, @joestringer)
Change start time for policy_implementation_delay to when a CNP is first received by the Agent (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR Change start time for policy_implementation_delay to when a CNP is first received by the Agent #22503, @learnitall)
chore(deps): update docker.io/library/golang docker tag to v1.19.5 (v1.13) (chore(deps): update docker.io/library/golang docker tag to v1.19.5 (v1.13) #23243, @renovate[bot])
chore(deps): update docker.io/library/golang docker tag to v1.19.5 (v1.13) (chore(deps): update docker.io/library/golang docker tag to v1.19.5 (v1.13) #23244, @renovate[bot])
ci, github: Fix IPv6 conformance test (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR ci, github: Fix IPv6 conformance test #22774, @borkmann)
ci: extend nat46x64 l4lb test suite (Backport PR v1.13 backport 2023-01-23 #23242, Upstream PR ci: extend nat46x64 l4lb test suite #23020, @borkmann)
cilium: follow-up neigh fixes for gw (Backport PR v1.13 backport 2023-01-05 #22948, Upstream PR cilium: follow-up neigh fixes for gw #22814, @borkmann)
datapath: Get rid of NO_REDIRECT define (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR datapath: Get rid of NO_REDIRECT define #23076, @brb)
docs: Add install guide for deploying Cilium on K0s using k0sctl. (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR add documentation to explain how to deploy cilium on k0s #22029, @xinity)
docs: Document internalTrafficPolicy-related changes in the upgrade guide (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR docs: Document internalTrafficPolicy-related changes in the upgrade guide #22927, @gentoo-root)
docs: Fix inconsistent node label in egress gateway guide (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR docs: Fix inconsistent node label in egress gateway guide #23225, @pchaigno)
docs: Fix markup to properly emphasize Kubernetes version in a note (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR Docs: Fix kubernetes version which isn't emphasized #22976, @Shunpoco)
docs: Improve IPsec guide (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR docs: Improve IPsec guide #23135, @pchaigno)
docs: Improve wording for deny policies limitation (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR docs: Improve wording for deny policies limitation #23095, @joestringer)
docs: Mark pod-short option in Hubble metrics as deprecated (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR docs: Mark pod-short option in Hubble metrics as deprecated #23025, @lambdanis)
docs: move star wars demo to getting started (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR docs: move star wars demo to getting started #22379, @yoyo-go)
docs: update committer security requirements (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR docs: update committer security requirements #23134, @xmulligan)
docs: Update Minikube ver. requirement and manual BPFFS mount instructions (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR docs: Update Minikube ver. requirement and manual BPFFS mount instructions #22913, @kimstacy)
Document socket LB tracing (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR Document socket LB tracing #23141, @aditighag)
Fix issues with policy handling introduced by new policy match support for L4 ports on any protocol. (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR Bpf: Add missing policy match cases #22975, @jrajahalme)
Generate Software Bill of Materials during release (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR Generate Software Bill of Materials during release #22191, @sandipanpanda)
gh: fix indentation bug in ingress workflows (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR gh: fix indentation bug in ingress workflows #23195, @julianwiedmann)
gha: Bump k8s version in kind conformance tests (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR gha: Bump k8s version in kind conformance tests #22325, @sayboras)
gha: Improve coverage for Ingress/GatewayAPI (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR gha: Improve coverage for Ingress/GatewayAPI #23007, @sayboras)
github: do not generate SBOM from source (Backport PR v1.13 Backports 2023-01-23 (github worfklow's changes) #23233, Upstream PR github: do not generate SBOM from source #23161, @aanm)
hubble: Fix panic if IP address cannot be parsed (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR hubble: Fix panic if IP address cannot be parsed #22994, @gandro)
hubble: Update the reason label for hubble_drop_total metric (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR hubble: Update the reason label for hubble_drop_total metric #22408, @michi-covalent)
images/runtime: bump iptables package to 1.8.8 (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR images/runtime: bump iptables package to 1.8.8 #23163, @jibi)
images: Update Hubble CLI to v0.11.0 (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR images: Update Hubble CLI to v0.11.0 #23043, @gandro)
Improve fqdn events logging management (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR Improve fqdn events logging management #22745, @pippolo84)
IPsec: Refactor ipSecReplaceState{In,Out} functions (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR IPsec: Refactor ipSecReplaceState{In,Out} functions #23158, @pchaigno)
iptables: skip reverse IP lookup (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR iptables: skip reverse IP lookup #22977, @jibi)
k8s: Add node-role.kubernetes.io/control-plane taint (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR k8s: Add node-role.kubernetes.io/control-plane taint #22894, @sayboras)
k8s: Update dependencies to v0.26.0 (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR k8s: Update dependencies to v0.26.0 #22891, @sayboras)
Make cilium pprof listen address configurable (Backport PR v1.13 Backports 2023-01-18 #23147, Upstream PR Make cilium pprof listen address configurable #22768, @chancez)
pkg/maps,pkg/defaults: allow configuring map events on missing map types. (Backport PR v1.13 backports 2023-01-09 #23001, Upstream PR pkg/maps,pkg/defaults: allow configuring map events on missing maps. #22746, @tommyp1ckles)
refactoring of fetching cilium manifests in OKD installation (Backport PR v1.13 Backports 2023-01-23 #23232, Upstream PR refactoring of fetching cilium manifests in OKD installation #22695, @zisisli)

Other Changes:

install: Update image digests for v1.13.0-rc4 (install: Update image digests for v1.13.0-rc4 #22852, @joestringer)

Signed-off-by: Joe Stringer <joe@cilium.io>

joestringer requested review from a team as code owners January 24, 2023 02:48

joestringer added kind/release Used for a PR that releases a new Cilium version. backport/1.13 labels Jan 24, 2023

joestringer requested a review from nathanjsweet January 24, 2023 02:48

maintainer-s-little-helper bot added the kind/backports This PR provides functionality previously merged into master. label Jan 24, 2023

joestringer mentioned this pull request Jan 24, 2023

v1.13.0-rc5 release cilium/release#82

Closed

37 tasks

Prepare for release v1.13.0-rc5

954795f

Signed-off-by: Joe Stringer <joe@cilium.io>

joestringer force-pushed the pr/prepare-v1.13.0-rc5 branch from 661bac2 to 954795f Compare January 24, 2023 03:17

joestringer merged commit dc22a46 into v1.13 Jan 24, 2023

joestringer deleted the pr/prepare-v1.13.0-rc5 branch January 24, 2023 03:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Prepare for release v1.13.0-rc5 #23270

Prepare for release v1.13.0-rc5 #23270

Uh oh!

Uh oh!

Uh oh!

Prepare for release v1.13.0-rc5 #23270

Prepare for release v1.13.0-rc5 #23270

Uh oh!

Conversation

Summary of Changes

Uh oh!

Uh oh!