Prepare for release v1.13.9 #29118

nathanjsweet · 2023-11-12T21:13:40Z

Summary of Changes

Minor Changes:

Cilium DNS proxy now uses the original pod's address as the source address towards the DNS servers. (Backport PR [1.13] Author backport of #28928 (Dns proxy use original source address and port) #29089, Upstream PR Dns proxy use original source address and port #28928, @jrajahalme)
Cilium now properly deletes stale (deleted) nodes from the node_connectivity_status and node_connectivity_latency_seconds metrics, reducing metric cardinality. (Backport PR [v1.13] Author Backport of 28382 (Metrics associated with a deleted node should not be reported) #28932, Upstream PR Metrics associated with a deleted node should not be reported #28382, @derailed)
Display interfaces used for IPsec decryption in cilium encrypt status. (Backport PR v1.13 backports 2023-10-24 #28761, Upstream PR cmd: Display decryption interfaces in encrypt status #28640, @pchaigno)
ipsec: New Prometheus metrics for XFRM configs (Backport PR v1.13 backports 2023-10-24 #28761, Upstream PR ipsec: New Prometheus metrics for XFRM configs #28400, @pchaigno)
policy: Fixed a bug that incorrectly omitted port-protocol policy rules that omitted the "protocol" field. An omitted "protocol" field now, correctly, is the same as using the "ANY" protocol. (Backport PR v1.13 backports 2023-10-24 #28761, Upstream PR policy: Fix Unspecified Protocol Type #28703, @nathanjsweet)

Bugfixes:

[v1.13] Remove remote-node labels from ipcache on node delete ([v1.13] Remove remote-node labels from ipcache on node delete #28972, @tklauser)
bpf: Add TC_ACT_REDIRECT check for nodeport (Backport PR v1.13 Backports 2023-11-07 #29034, Upstream PR bpf: Add TC_ACT_REDIRECT check for nodeport #28927, @sayboras)
envoy: fix lb backend endpoint calculation (Backport PR v1.13 Backports 2023-10-30 #28877, Upstream PR envoy: fix lb backend endpoint calculation #27923, @mhofstetter)
Fix CIDR labels computation (Backport PR v1.13 Backports 2023-10-30 #28877, Upstream PR Fix CIDR labels computation #28788, @pippolo84)
Fix IPsec error logs to always have all information needed to identify the XFRM configuration on which the error happened. (Backport PR v1.13 Backports 2023-11-07 #29034, Upstream PR ipsec: Improve logging #28642, @pchaigno)
When the CT entry for a DSR connection is garbage-collected, the corresponding SNAT entry is now also removed. (Backport PR v1.13 Backports 2023-10-30 #28877, Upstream PR ctmap: add GC support for DSR NAT entries with nodeport-backed CT entry #28857, @julianwiedmann)

CI Changes:

[v1.13] Use pull_request_target in Update Backport Label workflow ([v1.13] Use pull_request_target in Update Backport Label workflow #29011, @pippolo84)
gh/workflows: Dump Cilium LB node logs in case of failure (Backport PR v1.13 Backports 2023-11-07 #29034, Upstream PR gh/workflows: Dump Cilium LB node logs in case of failure #28808, @brb)
Test both VXLAN and GENEVE tunneling as part of the Conformance Cluster Mesh workflow (Backport PR v1.13 Backports 2023-10-30 #28877, Upstream PR Test both VXLAN and GENEVE tunneling as part of the Conformance Cluster Mesh workflow #28767, @giorio94)

Misc Changes:

bpf: lb: fix missing drop reason in reverse_map_l4_port() (Backport PR v1.13 Backports 2023-11-07 #29034, Upstream PR bpf: lb: fix missing drop reason in reverse_map_l4_port() #28884, @julianwiedmann)
bpf: lxc: remove stale ENABLE_IDENTITY_MARK ifdefs (Backport PR v1.13 backports 2023-10-24 #28761, Upstream PR bpf: lxc: remove stale ENABLE_IDENTITY_MARK ifdefs #28391, @julianwiedmann)
bugtool: Collect XFRM error counters twice (Backport PR v1.13 Backports 2023-10-30 #28877, Upstream PR bugtool: Collect XFRM error counters twice #28790, @pchaigno)
chore(deps): update docker.io/library/golang docker tag to v1.20.11 (v1.13) (chore(deps): update docker.io/library/golang docker tag to v1.20.11 (v1.13) #29041, @renovate[bot])
datapath: Move linuxNodeHandler IPsec functions to their own file (Backport PR v1.13 Backports 2023-11-07 #29034, Upstream PR datapath: Move linuxNodeHandler IPsec functions to their own file #28941, @pchaigno)
docs: Clarify BPF Map Pressure Metric (Backport PR v1.13 backports 2023-10-24 #28761, Upstream PR docs: Clarify BPF Map Pressure Metric #28682, @nathanjsweet)
docs: Update IPsec key rotation command (Backport PR v1.13 backports 2023-10-24 #28761, Upstream PR docs: Update IPsec key rotation command #28141, @jschwinger233)
go.mod, vendor: use github.com/cilium/dns fork directly (Backport PR [1.13] Author backport of #28928 (Dns proxy use original source address and port) #29089, Upstream PR go.mod, vendor: use github.com/cilium/dns fork directly #27582, @tklauser)
ipsec: Improve encrypt flush command (Backport PR v1.13 Backports 2023-11-07 #29034, Upstream PR ipsec: Improve encrypt flush command #28795, @pchaigno)
ipsec: Remove dead code for IPsec node encryption (Backport PR v1.13 Backports 2023-11-07 #29034, Upstream PR ipsec: Remove dead code for IPsec node encryption #28898, @pchaigno)
labels/cidr: Memoize labels for already seen prefixes (Backport PR v1.13 Backports 2023-10-30 #28877, Upstream PR labels/cidr: Memoize labels for already seen prefixes #28465, @pippolo84)
labels/cidr: On the fly char replacement for IPv6 (Backport PR v1.13 Backports 2023-11-02 #28950, Upstream PR labels/cidr: On the fly char replacement for IPv6 #28647, @pippolo84)
labels: Use slices.Sort instead of sort.Strings (Backport PR v1.13 Backports 2023-11-02 #28950, Upstream PR labels: Use slices.Sort instead of sort.Strings #28649, @pippolo84)

Other Changes:

[v1.13] Always migrate cilium_calls_* during ELF load ([v1.13] Always migrate cilium_calls_* during ELF load #28829, @ti-mo)
[v1.13] backports 2023-10-25 ([v1.13] backports 2023-10-25 #28776, @sayboras)
[v1.13] envoy: Bump version to v1.26.6 ([v1.13] envoy: Bump version to v1.26.6 #28854, @sayboras)
[v1.13] envoy: Update envoy version to 1.25.x ([v1.13] envoy: Update envoy version to 1.25.x #28331, @sayboras)
install: Update image digests for v1.13.8 (install: Update image digests for v1.13.8 #28636, @jrajahalme)

Signed-off-by: Nate Sweet <nathanjsweet@pm.me>

Prepare for release v1.13.9

b5ab6cd

Signed-off-by: Nate Sweet <nathanjsweet@pm.me>

nathanjsweet requested a review from a team as a code owner November 12, 2023 21:13

nathanjsweet added kind/release Used for a PR that releases a new Cilium version. backport/1.13 labels Nov 12, 2023

maintainer-s-little-helper bot added the kind/backports This PR provides functionality previously merged into master. label Nov 12, 2023

sayboras closed this Nov 13, 2023

sayboras reopened this Nov 13, 2023

aanm approved these changes Nov 13, 2023

View reviewed changes

squeed approved these changes Nov 13, 2023

View reviewed changes

aanm merged commit cde7f96 into cilium:v1.13 Nov 13, 2023

nathanjsweet deleted the pr/prepare-v1.13.9 branch November 13, 2023 16:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Prepare for release v1.13.9 #29118

Prepare for release v1.13.9 #29118

Uh oh!

Uh oh!

Uh oh!

Prepare for release v1.13.9 #29118

Prepare for release v1.13.9 #29118

Uh oh!

Conversation

Summary of Changes

Uh oh!

Uh oh!