Releases: cilium/cilium-cli
Releases · cilium/cilium-cli
Release v0.14.2
What's Changed
- Update stable release to v0.14.1 by @tklauser in #1572
- README.md: Add upgrade command samples by @michi-covalent in #1573
- Handle OCI repositories by @michi-covalent in #1576
- go.mod, vendor: bump google.golang.org/grpc from 1.54.0 to 1.55.0 by @dependabot in #1577
- connectivity: add basic egress gateway test by @jibi in #1555
- suite: disable KNP tests when endpoint routes and IPv6 are enabled by @jibi in #1584
- Remove AKS Azure IPAM test coverage by @michi-covalent in #1580
- connectivity: enable outside to nodeport via IPv6 when IPsec is enabled by @jschwinger233 in #1581
- connectivity: Fix IPv6 skipping when EP routes are on by @brb in #1587
- Revert "suite: disable KNP tests when endpoint routes and IPv6 are enabled" by @jibi in #1588
- Prepare for v0.14.2 release by @jibi in #1589
Full Changelog: v0.14.1...v0.14.2
Release v0.14.1
What's Changed
- Update stable release to v0.14.0 by @michi-covalent in #1535
- Remove "Release Date" column from the release table by @michi-covalent in #1536
- connectivity: Add test cases for Ingress by @sayboras in #1533
- fixes versioncheck for l7 proxy disabling with wireguard encryption by @ShiroDN in #1529
- connectivity: Retry getting the policy revision by @pchaigno in #1541
- connectivity/tests: omit IPs and vendor name from test names by @tklauser in #1545
- Allow the Helm timeout to be set on uninstall by @meyskens in #1550
- helm mode: add clustermesh enable/disable by @asauber in #1527
- sysdump: Fix writing to absolute path by @pchaigno in #1552
- connectivity: Retry on inconclusive results by @pchaigno in #1543
- build: update golangci-lint to version 1.52.2 by @mhofstetter in #1544
- Address wording an style nits of #1550 by @meyskens in #1553
- multicluster CI: Use LoadBalancer for GKE etcd by @asauber in #1556
- helm mode: add workflow for clustermesh via upgrade by @asauber in #1515
- Add GHA to install Cilium CLI executable by @brb in #1563
- helm mode: Make Helm chart repository configurable by @michi-covalent in #1560
- connectivity: test accessing NodePort from outside with L7 policy by @jschwinger233 in #1547
- Update k8s deps to v1.27.1 by @tklauser in #1548
- Replace versioncheck.Version with semver.ParseTolerant by @michi-covalent in #1561
- Dockerfile: Bump library/golang from 1.20.3-alpine3.16 to 1.20.4-alpine3.16 by @dependabot in #1568
- connectivity: add retry to external targets by @brlbil in #1540
- connectivity: Add tests for Service Account related rules by @sayboras in #1532
- connectivity: report peer name in "no flows recorded" log message by @tklauser in #1570
- Prepare for v0.14.1 release by @tklauser in #1571
New Contributors
- @ShiroDN made their first contribution in #1529
- @jschwinger233 made their first contribution in #1547
Full Changelog: v0.14.0...v0.14.1
Release v0.14.0
🚀 New Feature: helm
installation mode
Feature Status: Experimental
This release introduces a new opt-in helm
installation mode. This mode enables you to use cilium-cli and helm interchangeably to manage your Cilium installations, while taking advantage of cilium-cli's advanced features such as Cilium configuration auto-detection.
Please see README.md for details.
What's Changed
- Update stable release to v0.13.2 by @tklauser in #1466
- Add a l7 header replace test by @meyskens in #1463
- Tetragon Tracing Policies by @soggiest in #1467
- Replace deprecated flags with --helm-set by @michi-covalent in #1474
- ci: bump actions/checkout from 3.4.0 to 3.5.0 by @dependabot in #1471
- Sysdump: Add missing Cilium CRDs by @soggiest in #1468
- go.mod, vendor: bump google.golang.org/grpc from 1.53.0 to 1.54.0 by @dependabot in #1469
- Dockerfile: Bump library/golang from
50e46c1
tob1f83bc
by @dependabot in #1478 - go.mod, vendor: bump github.com/go-openapi/strfmt from 0.21.5 to 0.21.7 by @dependabot in #1477
- Dockerfile: Bump library/golang from
b1f83bc
to08bd1aa
by @dependabot in #1481 - Dockerfile: Bump library/golang from
08bd1aa
to1d7fec2
by @dependabot in #1483 - Add Helm-based install / uninstall commands by @michi-covalent in #1475
- helm mode: Add hubble enable / disable commands by @michi-covalent in #1479
- go.mod, vendor: bump golang.org/x/mod from 0.9.0 to 0.10.0 by @dependabot in #1488
- go.mod, vendor: bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by @dependabot in #1487
- Dockerfile: Bump library/golang from 1.20.2-alpine3.16 to 1.20.3-alpine3.16 by @dependabot in #1491
- install: Support --nodes-without-cilium in Helm install mode by @christarazi in #1498
- vendor: get latest cilium by @harsimran-pabla in #1490
- go.mod, vendor: bump github.com/cloudflare/cfssl from 1.6.3 to 1.6.4 by @dependabot in #1497
- Use --set-string for node affinity by @christarazi in #1501
- helm mode install: Add --dry-run / --dry-run-helm-values flags by @michi-covalent in #1502
- Add CRD feature and add KNP tests by @doniacld in #1470
- ci: bump actions/checkout from 3.5.0 to 3.5.1 by @dependabot in #1508
- connectivity: Make detected Cilium Agent version available for feature detection by @jrajahalme in #1510
- go.mod, vendor: bump helm.sh/helm/v3 from 3.11.2 to 3.11.3 by @dependabot in #1509
- Add connectivity tests for auth by @meyskens in #1505
- BGP: Introduce new cli to get bgp peering state by @harsimran-pabla in #1500
- ci: bump actions/checkout from 3.5.1 to 3.5.2 by @dependabot in #1512
- Implement FromCIDR ingress tests by @christarazi in #1494
- Implement
cilium upgrade
using Helm by @asauber in #1492 - misc: get rid of Go label breaks & gotos by @mhofstetter in #1511
- Use Cilium v1.13.2 by default by @tklauser in #1517
- ci: bump google-github-actions/auth from 1.0.0 to 1.1.0 by @dependabot in #1516
- Add documentation for helm installation mode by @michi-covalent in #1504
- Rename master branch to main by @tklauser in #1519
- .github: add mirror from main -> master by @tklauser in #1525
- cli: adapt helm chart cleanup of deprecated hubble values by @mhofstetter in #1520
- defaults: bump json-mock to 1.3.5 by @jibi in #1528
- go.mod, vendor: bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible by @dependabot in #1530
- Prepare for v0.14.0 release by @michi-covalent in #1531
New Contributors
- @harsimran-pabla made their first contribution in #1490
- @doniacld made their first contribution in #1470
- @asauber made their first contribution in #1492
- @mhofstetter made their first contribution in #1511
Full Changelog: v0.13.2...v0.14.0
Release v0.13.2
What's Changed
- .github/workflows: use tag name instead of fully-formed ref in release name by @tklauser in #1435
- RELEASE.md: adjust release instructions after change to new release action by @tklauser in #1437
- go.mod, vendor: bump golang.org/x/mod from 0.8.0 to 0.9.0 by @dependabot in #1439
- Update stable release to v0.13.1 by @tklauser in #1436
- Update Go to 1.20.1 by @tklauser in #1434
- ingress: Create endpoint object by @sayboras in #1432
- Adds a test case for L7 policy with TLS by @meyskens in #1406
- ci: bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 by @dependabot in #1441
- go.mod, vendor: bump helm.sh/helm/v3 from 3.11.1 to 3.11.2 by @dependabot in #1443
- Dockerfile: Bump library/golang from 1.20.1-alpine3.16 to 1.20.2-alpine3.16 by @dependabot in #1444
- helm: fix incorrect log error formatting directive. by @tommyp1ckles in #1451
- ci: bump docker/setup-buildx-action from 2.4.1 to 2.5.0 by @dependabot in #1449
- install: Generate resource quotas from Helm chart by @michi-covalent in #1445
- connectivity: allow to restrict connectivity test pods using nodeSelector by @tklauser in #1446
- Dockerfile: Bump library/golang from
0848e98
to50e46c1
by @dependabot in #1450 - Allow installing Cilium snapshot versions by @tklauser in #1452
- refactor: Break generateManifests() into smaller functions by @michi-covalent in #1453
- Update Go to 1.20.2 by @tklauser in #1454
- clustermesh: correctly mount the etcd data dir in the init container by @giorio94 in #1457
- ci: bump actions/setup-go from 3.5.0 to 4.0.0 by @dependabot in #1455
- ci: bump actions/checkout from 3.3.0 to 3.4.0 by @dependabot in #1456
- uninstall: set "cni.uninstall" to true on uninstall by @squeed in #1418
- Pick up Cilium v1.13.1 by @michi-covalent in #1458
- connectivity: Report IP families that are being tested by @Neilblaze in #1440
- go.mod, vendor: bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.5 by @dependabot in #1460
- vendor: Pick up the latest cilium by @michi-covalent in #1464
- Prepare for v0.13.2 release by @michi-covalent in #1465
New Contributors
Full Changelog: v0.13.1...v0.13.2
Release v0.13.1
What's Changed
- go.mod, vendor: bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by @dependabot in #1420
- connectivity tests: fix issue on IPv6-only clusters by @giorio94 in #1414
- Update stable release to v0.13.0 by @tklauser in #1412
- enabled l7Proxy & removed err.log message for WireGuard by @Neilblaze in #1419
- clustermesh: update etcd version to v3.5.4 by @kahirokunn in #1421
- hubble: Patch Cilium DaemonSet with hubble-metrics port by @lambdanis in #1423
- go.mod, vendor: pull in latest cilium charts for v1.14.0-snapshot.0 by @tklauser in #1425
- Add profiling data(cpu/heap) of cilium agent to sysdump. by @marseel in #1424
- Prepare for v0.13.1 release by @tklauser in #1427
- Dockerfile: Bump library/golang from
9266e89
tobf83658
by @dependabot in #1431 - .github/workflows: use softprops/action-gh-release in release workflow by @tklauser in #1433
New Contributors
- @Neilblaze made their first contribution in #1419
- @kahirokunn made their first contribution in #1421
- @lambdanis made their first contribution in #1423
Full Changelog: v0.13.0...v0.13.1
Release v0.13.0
What's Changed
- Update stable release to v0.12.13 by @michi-covalent in #1394
- connectivity tests: support IPv6 in ICMP-related netpols by @giorio94 in #1403
- Dockerfile: Bump library/golang from 1.20.0-alpine3.16 to 1.20.1-alpine3.16 by @dependabot in #1395
- connectivity: skip nodeport tests with clustermesh if KPR is disabled by @giorio94 in #1401
- ingress: Create Ingress Service if required by @sayboras in #1404
- Wait for deletion of agent DaemonSet before deleting other resources. by @marseel in #1392
- defaults: Lower connectivity timeouts by @brb in #1399
- test: Wait for policy change if any policy changed by @jrajahalme in #1384
- status: detect when DaemonSets and Deployments are rolling out by @squeed in #1383
- go.mod, vendor: bump github.com/google/gops from 0.3.26 to 0.3.27 by @dependabot in #1408
- sysdump: distil events in to a nice filterable HTML table by @squeed in #1385
- Use Cilium v1.13.0 by default by @tklauser in #1407
- connectivity: Add IPv6 tests by @brb in #1390
- Prepare for v0.13.0 release by @tklauser in #1411
New Contributors
Full Changelog: v0.12.13...v0.13.0
Release v0.12.13
What's Changed
- Update stable release to v0.12.12 by @tklauser in #1327
- connectivity: Display last error after waiting k8s resources timeouts by @YutaroHayakawa in #1301
- RELEASE.md: check and merge PRs before the release by @tklauser in #1329
- build(deps): bump library/golang from 1.19.4-alpine3.16 to 1.19.5-alpine3.16 by @dependabot in #1331
- build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 by @dependabot in #1330
- Update Go to 1.19.5 by @tklauser in #1332
- install: Auto-enable BPF masquerade by @brb in #1333
- Update cilium vendoring by @raphink in #1334
- install: Do not enable BPF masq if ipv6 is enabled by @brb in #1338
- build(deps): bump docker/build-push-action from 3.2.0 to 3.3.0 by @dependabot in #1344
- connectivity: Set PreferDualStack for test services by @brb in #1339
- connectivity: Make pod to world test more configurable by @sathieu in #1345
- build(deps): bump helm.sh/helm/v3 from 3.10.3 to 3.11.0 by @dependabot in #1349
- build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 by @dependabot in #1350
- fix(connectivity): Add node-local-dns entitiy match for local ip usage case by @eminaktas in #997
- Honor global namespace flag in sysdump command by @ChrsMark in #1302
- sysdump: Collect new CR introduced as part of 1.13 by @sayboras in #1315
- dependabot config updates by @tklauser in #1328
- go.mod, vendor: bump google.golang.org/grpc from 1.52.0 to 1.52.3 by @dependabot in #1355
- [connectivity] add container name for health tests by @fl64 in #1354
- status: rename Hubble status to Hubble Relay by @kaworu in #1356
- Update Cilium charts, update default Cilium version to v1.12.6 by @tklauser in #1358
- ci: bump docker/build-push-action from 3.3.0 to 4.0.0 by @dependabot in #1360
- ci: bump docker/setup-buildx-action from 2.2.1 to 2.4.0 by @dependabot in #1361
- Check if context is cancelled before next iteration by @dharmicksai in #1353
- clustermesh: Add missing brackets of etcd option by @giorio94 in #1362
- clustermesh: adapt global service annotations by @giorio94 in #1359
- connectivity: drop pre-1.11 allow-except-world test by @tklauser in #1364
- Dockerfile: Bump library/golang from 1.19.5-alpine3.16 to 1.20.0-alpine3.16 by @dependabot in #1365
- Update Go to 1.20, golangci-lint to v1.51.0 by @tklauser in #1368
- go.mod, vendor: update github.com/cilium/hubble to v0.11.1 by @tklauser in #1367
- ci: use cloud provider specific external target for pod-to-world tests by @tklauser in #1369
- ci: bump google-github-actions/setup-gcloud from 1.0.1 to 1.1.0 by @dependabot in #1370
- Update golangci-lint to v1.51.1 by @tklauser in #1372
- ci: bump docker/setup-buildx-action from 2.4.0 to 2.4.1 by @dependabot in #1373
- go.mod, vendor: bump google.golang.org/grpc from 1.52.3 to 1.53.0 by @dependabot in #1377
- go.mod, vendor: bump helm.sh/helm/v3 from 3.11.0 to 3.11.1 by @dependabot in #1375
- go.mod, vendor: bump golang.org/x/mod from 0.7.0 to 0.8.0 by @dependabot in #1376
- go.mod, vendor: bump github.com/cilium/workerpool from 1.1.3 to 1.2.0 by @dependabot in #1380
- Add JSON status (fix #956) by @raphink in #958
- uninstall: remove cilium-config-agent role/rolebinding by @giorio94 in #1382
- install: fix support for multi-object files by @squeed in #1388
- Prepare for release v0.12.13 by @michi-covalent in #1393
New Contributors
- @sathieu made their first contribution in #1345
- @eminaktas made their first contribution in #997
- @ChrsMark made their first contribution in #1302
- @fl64 made their first contribution in #1354
- @dharmicksai made their first contribution in #1353
- @giorio94 made their first contribution in #1362
Full Changelog: v0.12.12...v0.12.13
Release v0.12.12
What's Changed
- build(deps): bump actions/setup-go from 3.3.1 to 3.4.0 by @dependabot in #1254
- build(deps): bump library/golang from
d171aa3
toa3cdc5a
by @dependabot in #1256 - connectivity: Reorder L7 ingress connectivity tests by @pchaigno in #1261
- workflows: Bump timeout for EKS workflow by @pchaigno in #1262
- workflows: Collect sysdump immediately after test failures by @pchaigno in #1263
- build(deps): bump library/golang from
a3cdc5a
to3607071
by @dependabot in #1265 - workflows: Bump timeout for External Workload workflow by @pchaigno in #1268
- .github: update get-kubeconfig.sh for k8s 1.24 by @tklauser in #1274
- defaults: update default Cilium version to v1.12.4 by @tklauser in #1272
- Update stable release to v0.12.11 by @tklauser in #1264
- build(deps): bump library/golang from 1.19.3-alpine3.16 to 1.19.4-alpine3.16 by @dependabot in #1270
- workflows: Test with Cilium v1.12.4 by @pchaigno in #1281
- Update Go to 1.19.4 by @tklauser in #1283
- sysdump: Log detected Cilium namespace by @michi-covalent in #1290
- connectivity: Add encryption tests by @brb in #1241
- README, dependabot: mark v0.10 branch as unmaintained by @tklauser in #1285
- install: update existing roles, bindings if already extant by @squeed in #1286
- build(deps): bump library/busybox from
62bc224
to898fba6
by @dependabot in #1288 - sysdump: Fix empty namespace error by @pchaigno in #1291
- Use exec.StreamWithContext to replace ExecInPodWithTTY and CtrlCReader by @tklauser in #1276
- build(deps): bump actions/checkout from 3.1.0 to 3.2.0 by @dependabot in #1294
- build(deps): bump azure/setup-helm from 3.4 to 3.5 by @dependabot in #1293
- .github: pin ubuntu runners to 22.04 by @tklauser in #1292
- connectivity: Fix tunnel feature detection by @brb in #1295
- build(deps): bump helm/kind-action from 1.4.0 to 1.5.0 by @dependabot in #1298
- sysdump: exclude endpoint object files by default by @tbalthazar in #1258
- build(deps): bump actions/setup-go from 3.4.0 to 3.5.0 by @dependabot in #1297
- .github: replace deprecated set-output commands by @tklauser in #1296
- k8s: Bring back TTY to Exec by @brb in #1299
- build(deps): bump helm.sh/helm/v3 from 3.10.2 to 3.10.3 by @dependabot in #1300
- connectivity: Fix iface derivation in encrypt tests by @brb in #1304
- build(deps): bump actions/upload-artifact from 3.1.1 to 3.1.2 by @dependabot in #1318
- connectivity: allow to specify maximum request and connect timeout by @tklauser in #1277
- build(deps): bump nick-invision/retry from 2.8.2 to 2.8.3 by @dependabot in #1311
- build(deps): bump actions/download-artifact from 3.0.1 to 3.0.2 by @dependabot in #1319
- hubble: port-forward only to localhost by @kaworu in #1317
- all: fix spacing with ℹ️ logs by @bengentil in #1305
- build(deps): bump actions/checkout from 3.2.0 to 3.3.0 by @dependabot in #1316
- build(deps): bump library/busybox from
898fba6
to5289a46
by @dependabot in #1307 - cli: Support client only in version sub-command by @sayboras in #1310
- hubble: port-forward only on IPv4 by @kaworu in #1322
- introduce --open-browser flag on cilium hubble UI by @zufardhiyaulhaq in #1321
- Make pod to world test configurable by @brlbil in #1267
- connectivity: Add node-to-node encryption tests by @brb in #1308
- Update default Cilium version to 1.12.5 by @tklauser in #1324
- Fix Typo [valye -> value] by @prabhakhar in #1325
- Increase copy retries by @nebril in #1320
- connectivity: Fix node2node test case feat requirement by @brb in #1326
- Prepare for v0.12.12 release by @tklauser in #1323
New Contributors
- @tbalthazar made their first contribution in #1258
- @bengentil made their first contribution in #1305
- @zufardhiyaulhaq made their first contribution in #1321
- @prabhakhar made their first contribution in #1325
Full Changelog: v0.12.11...v0.12.12
Release v0.12.11
What's Changed
- Update stable release to v0.12.10 by @tklauser in #1245
- clustermesh: use Cilium version extracted from helm secret if available by @tklauser in #1248
- status: Include pending pods in total Cluster Pods count by @felfa01 in #1249
- .github/workflows: remove duplicate CI Image release digest step by @tklauser in #1250
- workflows: add wait for no operation for cleaning up GKE by @brlbil in #1251
- go.mod, vendor: pull in latest cilium charts for v1.10.17, v1.11.11, v1.12.4 and v1.13-rc3 by @tklauser in #1253
- Prepare for v0.12.11 release by @tklauser in #1252
New Contributors
Full Changelog: v0.12.10...v0.12.11
Release v0.12.10
What's Changed
- build(deps): bump github.com/google/gops from 0.3.25 to 0.3.26 by @dependabot in #1231
- connectivity: collect sysdump also on test setup failure by @jibi in #1233
- status: Exclude non-running pods from total Cluster Pods count by @felfa01 in #1236
- clustermesh: Fix --bpf-lb-sock on < 1.12 by @brb in #1238
- connectivity, install: delete pods before deleting namespace by @tklauser in #1237
- defaults: update connectivity test image versions by @tklauser in #1239
- connectivity/check: fix logging in non-verbose mode with timestamps by @tklauser in #1234
- Prepare for v0.12.10 release by @tklauser in #1240
- ci, make: allow to build release as root user by @tklauser in #1242
- Makefile: Fix potential uid/gid collision by using setpriv by @tklauser in #1244
New Contributors
Full Changelog: v0.12.9...v0.12.10