Skip to content

Commit 8a77a4a

Browse files
committed
Prepare for release v1.10.10
Signed-off-by: Joe Stringer <joe@cilium.io>
1 parent 3f3fec1 commit 8a77a4a

File tree

10 files changed

+93
-40
lines changed

10 files changed

+93
-40
lines changed

.github/maintainers-little-helper.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
project: "https://github.com/cilium/cilium/projects/184"
1+
project: "https://github.com/cilium/cilium/projects/187"
22
column: "In progress"
33
auto-label:
44
- "kind/backports"

.mailmap

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,8 +48,9 @@ Jonathan Davies <jpds@protonmail.com>
4848
Joshua Roppo <joshroppo@gmail.com>
4949
Jun Chen <answer1991.chen@gmail.com>
5050
Junli Ou <oujunli306@gmail.com>
51-
Kamil Lach <kamil.lach.rs@gmail.com> <kamil@thor.asgard.local>
5251
Kaito Ii <kaitoii1111@gmail.com>
52+
Kamil Lach <kamil.lach.rs@gmail.com> <kamil@thor.asgard.local>
53+
Kante Yin <kerthcet@gmail.com>
5354
Karl Heins <karlheins@northwesternmutual.com>
5455
Kevin Holditch <82885135+kevholditch-f3@users.noreply.github.com>
5556
Bokang Li <libokang.dev@gmail.com>

AUTHORS

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -162,6 +162,7 @@ Jun Chen answer1991.chen@gmail.com
162162
Junli Ou oujunli306@gmail.com
163163
Jussi Maki jussi@isovalent.com
164164
Kaito Ii kaitoii1111@gmail.com
165+
Kante Yin kerthcet@gmail.com
165166
Karl Heins karlheins@northwesternmutual.com
166167
Katarzyna Borkmann kasia@iogearbox.net
167168
Kevin Burke kevin@burke.dev
@@ -243,6 +244,7 @@ Raghu Gyambavantha raghug@bld-ml-loan4.olympus.f5net.com
243244
Rahul Jadhav nyrahul@gmail.com
244245
Rajat Jindal rajatjindal83@gmail.com
245246
Raphael Campos raphael@accuknox.com
247+
Raphaël Pinson raphael@isovalent.com
246248
Ray Bejjani ray@isovalent.com
247249
Rei Shimizu Shikugawa@gmail.com
248250
Renat Tuktarov yandzeek@gmail.com
@@ -317,13 +319,15 @@ Weilong Cui cuiwl@google.com
317319
Wenxian Li wofanli@gmail.com
318320
Will Deuschle wdeuschle@palantir.com
319321
xentobias mosetobias@gmail.com
322+
Ye Sijun junnplus@gmail.com
320323
Yiannis Yiakoumis yiannis@selfienetworks.com
321324
Yongkun Gui ygui@google.com
322325
Yosh de Vos yosh@elzorro.nl
323326
Youssef Azrak yazrak.tech@gmail.com
324327
Yuan Liu liuyuan@google.com
325328
Yurii Dzobak yurii.dzobak@lotusflare.com
326329
Yurii Komar Subreptivus@gmail.com
330+
Yutaro Hayakawa yutaro.hayakawa@isovalent.com
327331
Yves Blusseau yves.blusseau@acoss.fr
328332
Zang Li zangli@google.com
329333
Zhiyuan Hou zhiyuan2048@linux.alibaba.com

CHANGELOG.md

Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,50 @@
11
# Changelog
22

3+
## v1.10.10
4+
5+
Summary of Changes
6+
------------------
7+
8+
**Minor Changes:**
9+
* Locally allocated identities are now restored during restart, helping avoid transient drops due to identity changes in policies. (Backport PR #19404, Upstream PR #19360, @jrajahalme)
10+
11+
**Bugfixes:**
12+
* cmd: Fix issue where a ConfigMap value of `{}` was parsed as `map["{}":""]`. (Backport PR #19254, Upstream PR #19172, @gandro)
13+
* Fix a bug where a backend pod can be selected by a local redirect policy deployed in a different namespace if the local redirect policy was deployed first. (Backport PR #19254, Upstream PR #19193, @aditighag)
14+
* Fix bug that would cause some pod traffic to leave through the wrong interface if --aws-release-excess-ips is used and masquerading disabled. (Backport PR #19296, Upstream PR #19162, @pchaigno)
15+
* Fix bug where FQDN policy calculation could trigger a deadlock in cilium-agent (Backport PR #19254, Upstream PR #19031, @joestringer)
16+
* Fix bug where the Cilium DNS proxy slows down significantly (and even OOMs) due to lock contention from spawning many goroutines when handling bursty DNS traffic (Backport PR #19416, Upstream PR #19336, @nebril)
17+
* Fixed node init in RKE (Backport PR #19416, Upstream PR #19286, @raphink)
18+
* helm: Removed unnecessary Kubernetes RBAC permissions for cilium-agent (Backport PR #19254, Upstream PR #19053, @nathanjsweet)
19+
* helm: Update Clustermesh-APIServer RBAC permissions for platforms (like Openshift) that have the OwnerReferencesPermissionEnforcement admission controller enabled. (Backport PR #19254, Upstream PR #19071, @nathanjsweet)
20+
* hubble/recorder: Sanitize pcap filename (Backport PR #19254, Upstream PR #18612, @gandro)
21+
* wireguard: Reject duplicate public keys (Backport PR #19416, Upstream PR #19344, @gandro)
22+
23+
**CI Changes:**
24+
* jenkinsfiles: Update calls to Quay API (Backport PR #19254, Upstream PR #19229, @pchaigno)
25+
* test: Wait until host EP is ready (=regenerated) (Backport PR #19331, Upstream PR #18859, @brb)
26+
* Use docker manifest inspect to wait for images instead of using quay API (Backport PR #19331, Upstream PR #19307, @YutaroHayakawa)
27+
* workflows: Update call to Quay API (Backport PR #19254, Upstream PR #19228, @pchaigno)
28+
29+
**Misc Changes:**
30+
* Add a 'Limitations' section to 'External Workloads'. (Backport PR #19416, Upstream PR #19366, @bmcustodio)
31+
* add context when return errors during datapath initialization (Backport PR #19254, Upstream PR #18011, @kerthcet)
32+
* build(deps): bump actions/cache from 3.0.0 to 3.0.1 (#19272, @dependabot[bot])
33+
* build(deps): bump actions/cache from 3.0.1 to 3.0.2 (#19392, @dependabot[bot])
34+
* build(deps): bump actions/checkout from 3.0.0 to 3.0.1 (#19446, @dependabot[bot])
35+
* build(deps): bump KyleMayes/install-llvm-action from 1.5.1 to 1.5.2 (#19324, @dependabot[bot])
36+
* ci: Pin down image for the documentation workflow (Backport PR #19416, Upstream PR #19356, @qmonnet)
37+
* docs: Clarify use of the `eni.subnetTagsFilter` option (Backport PR #19331, Upstream PR #19276, @gandro)
38+
* envoy: Limit accesslog socket permissions (Backport PR #19416, Upstream PR #19190, @jrajahalme)
39+
* ipcache: Add test asserting out-of-order Kubernetes events (Backport PR #19331, Upstream PR #19258, @christarazi)
40+
* Test runtime cilium in container (take two) (Backport PR #19404, Upstream PR #19310, @jrajahalme)
41+
* test: Fix whitespace in docker-run-cilium (Backport PR #19404, Upstream PR #19358, @jrajahalme)
42+
* vendor: pull in the latest changes from github.com/vishvananda/netlink (Backport PR #19404, Upstream PR #18618, @aditighag)
43+
* wireguard: Fix invalid bits when agent init (Backport PR #19254, Upstream PR #19118, @Junnplus)
44+
45+
**Other Changes:**
46+
* install: Update image digests for v1.10.9 (#19239, @aanm)
47+
348
## v1.10.9
449

550
Summary of Changes

Documentation/concepts/kubernetes/compatibility-table.rst

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -76,6 +76,8 @@
7676
+-----------------+----------------+
7777
| v1.9.13 | 1.22.6 |
7878
+-----------------+----------------+
79+
| v1.9.14 | 1.22.6 |
80+
+-----------------+----------------+
7981
| v1.9 | 1.22.6 |
8082
+-----------------+----------------+
8183
| v1.10.0-rc0 | 1.23.1 |
@@ -106,5 +108,6 @@
106108
+-----------------+----------------+
107109
| v1.10 | 1.23.4 |
108110
+-----------------+----------------+
109-
| latest / master | 1.24.2 |
111+
| latest / master | 1.26.0 |
112+
| 1.25.1 | |
110113
+-----------------+----------------+

VERSION

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
1.10.9
1+
1.10.10

install/kubernetes/Makefile.digests

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -2,12 +2,12 @@
22
# Copyright 2022 Authors of Cilium
33
# SPDX-License-Identifier: Apache-2.0
44

5-
CILIUM_DIGEST := "sha256:ebe1696cebfdaa95112a48c40bcef01e2771113ae2d4be0dda762bece78293b9"
6-
CLUSTERMESH_APISERVER_DIGEST := "sha256:ae43adb896c47a0ebfc2124afc0c46393ec694285e744d00df57ba697d957442"
7-
DOCKER_PLUGIN_DIGEST := "sha256:33d64e022c57f8f48c8b51ade2ee360d7b2be47af36d3b33b55994ed66a7019a"
8-
HUBBLE_RELAY_DIGEST := "sha256:92a895d77a8d6c71efceedc111adc848842e5c8bb8ee6d8c0a7812a97ebc1e00"
9-
OPERATOR_ALIBABACLOUD_DIGEST := "sha256:9d66f9ee6080ffedf46cfcb554a7303b25a15935e7bcdc73e742e1830da08f82"
10-
OPERATOR_AWS_DIGEST := "sha256:ff3dc39157b4a0935495a3cb417ce3e4c70ca906a0f7e79a323b2e920a0b0265"
11-
OPERATOR_AZURE_DIGEST := "sha256:1af911a1a15bc7be78ca2e4f8a0ccdff037f0077005993e8c44a88f881c59018"
12-
OPERATOR_GENERIC_DIGEST := "sha256:7f9bf92d7e38372dc19899cc3055a04d93095886687f3c03e41932ad5a32e3ac"
13-
OPERATOR_DIGEST := "sha256:a4f7f32530b8632eecfec3b051ac6616fdc7f6c25a91f48721676d4c2a0edf67"
5+
CILIUM_DIGEST := ""
6+
CLUSTERMESH_APISERVER_DIGEST := ""
7+
DOCKER_PLUGIN_DIGEST := ""
8+
HUBBLE_RELAY_DIGEST := ""
9+
OPERATOR_ALIBABACLOUD_DIGEST := ""
10+
OPERATOR_AWS_DIGEST := ""
11+
OPERATOR_AZURE_DIGEST := ""
12+
OPERATOR_GENERIC_DIGEST := ""
13+
OPERATOR_DIGEST := ""

install/kubernetes/cilium/Chart.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ apiVersion: v2
22
name: cilium
33
displayName: Cilium
44
home: https://cilium.io/
5-
version: 1.10.9
6-
appVersion: 1.10.9
5+
version: 1.10.10
6+
appVersion: 1.10.10
77
kubeVersion: ">= 1.16.0-0"
8-
icon: https://cdn.jsdelivr.net/gh/cilium/cilium@v1.10.9/Documentation/images/logo-solo.svg
8+
icon: https://cdn.jsdelivr.net/gh/cilium/cilium@v1.10.10/Documentation/images/logo-solo.svg
99
description: eBPF-based Networking, Security, and Observability
1010
keywords:
1111
- BPF

install/kubernetes/cilium/README.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# cilium
22

3-
![Version: 1.10.9](https://img.shields.io/badge/Version-1.10.9-informational?style=flat-square) ![AppVersion: 1.10.9](https://img.shields.io/badge/AppVersion-1.10.9-informational?style=flat-square)
3+
![Version: 1.10.10](https://img.shields.io/badge/Version-1.10.10-informational?style=flat-square) ![AppVersion: 1.10.10](https://img.shields.io/badge/AppVersion-1.10.10-informational?style=flat-square)
44

55
Cilium is open source software for providing and transparently securing
66
network connectivity and loadbalancing between application workloads such as
@@ -81,7 +81,7 @@ contributors across the globe, there is almost always someone available to help.
8181
| cluster.id | int | `nil` | Unique ID of the cluster. Must be unique across all connected clusters and in the range of 1 to 255. Only required for Cluster Mesh. |
8282
| cluster.name | string | `"default"` | Name of the cluster. Only required for Cluster Mesh. |
8383
| clustermesh.apiserver.etcd.image | object | `{"pullPolicy":"IfNotPresent","repository":"quay.io/coreos/etcd","tag":"v3.4.13"}` | Clustermesh API server etcd image. |
84-
| clustermesh.apiserver.image | object | `{"digest":"sha256:ae43adb896c47a0ebfc2124afc0c46393ec694285e744d00df57ba697d957442","pullPolicy":"IfNotPresent","repository":"quay.io/cilium/clustermesh-apiserver","tag":"v1.10.9","useDigest":true}` | Clustermesh API server image. |
84+
| clustermesh.apiserver.image | object | `{"digest":"","pullPolicy":"IfNotPresent","repository":"quay.io/cilium/clustermesh-apiserver","tag":"v1.10.10","useDigest":false}` | Clustermesh API server image. |
8585
| clustermesh.apiserver.nodeSelector | object | `{}` | Node labels for pod assignment ref: https://kubernetes.io/docs/user-guide/node-selection/ |
8686
| clustermesh.apiserver.podAnnotations | object | `{}` | Annotations to be added to clustermesh-apiserver pods |
8787
| clustermesh.apiserver.podLabels | object | `{}` | Labels to be added to clustermesh-apiserver pods |
@@ -198,7 +198,7 @@ contributors across the globe, there is almost always someone available to help.
198198
| hubble.metrics.serviceMonitor.labels | object | `{}` | Labels to add to ServiceMonitor hubble |
199199
| hubble.relay.dialTimeout | string | `nil` | Dial timeout to connect to the local hubble instance to receive peer information (e.g. "30s"). |
200200
| hubble.relay.enabled | bool | `false` | Enable Hubble Relay (requires hubble.enabled=true) |
201-
| hubble.relay.image | object | `{"digest":"sha256:92a895d77a8d6c71efceedc111adc848842e5c8bb8ee6d8c0a7812a97ebc1e00","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/hubble-relay","tag":"v1.10.9","useDigest":true}` | Hubble-relay container image. |
201+
| hubble.relay.image | object | `{"digest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/hubble-relay","tag":"v1.10.10","useDigest":false}` | Hubble-relay container image. |
202202
| hubble.relay.listenHost | string | `""` | Host to listen to. Specify an empty string to bind to all the interfaces. |
203203
| hubble.relay.listenPort | string | `"4245"` | Port to listen to. |
204204
| hubble.relay.nodeSelector | object | `{}` | Node labels for pod assignment ref: https://kubernetes.io/docs/user-guide/node-selection/ |
@@ -243,7 +243,7 @@ contributors across the globe, there is almost always someone available to help.
243243
| hubble.ui.tolerations | list | `[]` | Node tolerations for pod assignment on nodes with taints ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ |
244244
| hubble.ui.updateStrategy | object | `{"rollingUpdate":{"maxUnavailable":1},"type":"RollingUpdate"}` | hubble-ui update strategy. |
245245
| identityAllocationMode | string | `"crd"` | Method to use for identity allocation (`crd` or `kvstore`). |
246-
| image | object | `{"digest":"sha256:ebe1696cebfdaa95112a48c40bcef01e2771113ae2d4be0dda762bece78293b9","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/cilium","tag":"v1.10.9","useDigest":true}` | Agent container image. |
246+
| image | object | `{"digest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/cilium","tag":"v1.10.10","useDigest":false}` | Agent container image. |
247247
| imagePullSecrets | string | `nil` | Configure image pull secrets for pulling container images |
248248
| installIptablesRules | bool | `true` | Configure whether to install iptables rules to allow for TPROXY (L7 proxy injection), iptables-based masquerading and compatibility with kube-proxy. |
249249
| installNoConntrackIptablesRules | bool | `false` | Install Iptables rules to skip netfilter connection tracking on all pod traffic. This option is only effective when Cilium is running in direct routing and full KPR mode. Moreover, this option cannot be enabled when Cilium is running in a managed Kubernetes environment or in a chained CNI setup. |
@@ -302,7 +302,7 @@ contributors across the globe, there is almost always someone available to help.
302302
| operator.extraInitContainers | list | `[]` | Additional InitContainers to initialize the pod. |
303303
| operator.identityGCInterval | string | `"15m0s"` | Interval for identity garbage collection. |
304304
| operator.identityHeartbeatTimeout | string | `"30m0s"` | Timeout for identity heartbeats. |
305-
| operator.image | object | `{"alibabacloudDigest":"sha256:9d66f9ee6080ffedf46cfcb554a7303b25a15935e7bcdc73e742e1830da08f82","awsDigest":"sha256:ff3dc39157b4a0935495a3cb417ce3e4c70ca906a0f7e79a323b2e920a0b0265","azureDigest":"sha256:1af911a1a15bc7be78ca2e4f8a0ccdff037f0077005993e8c44a88f881c59018","genericDigest":"sha256:7f9bf92d7e38372dc19899cc3055a04d93095886687f3c03e41932ad5a32e3ac","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/operator","suffix":"","tag":"v1.10.9","useDigest":true}` | cilium-operator image. |
305+
| operator.image | object | `{"alibabacloudDigest":"","awsDigest":"","azureDigest":"","genericDigest":"","override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/operator","suffix":"","tag":"v1.10.10","useDigest":false}` | cilium-operator image. |
306306
| operator.nodeSelector | object | `{}` | Node labels for cilium-operator pod assignment ref: https://kubernetes.io/docs/user-guide/node-selection/ |
307307
| operator.podAnnotations | object | `{}` | Annotations to be added to cilium-operator pods |
308308
| operator.podDisruptionBudget | object | `{"enabled":false,"maxUnavailable":1}` | PodDisruptionBudget settings ref: https://kubernetes.io/docs/concepts/workloads/pods/disruptions/ |
@@ -330,7 +330,7 @@ contributors across the globe, there is almost always someone available to help.
330330
| preflight.extraEnv | object | `{}` | Additional preflight environment variables. |
331331
| preflight.extraHostPathMounts | list | `[]` | Additional preflight host path mounts. |
332332
| preflight.extraInitContainers | list | `[]` | Additional preflight init containers. |
333-
| preflight.image | object | `{"digest":"sha256:ebe1696cebfdaa95112a48c40bcef01e2771113ae2d4be0dda762bece78293b9","pullPolicy":"IfNotPresent","repository":"quay.io/cilium/cilium","tag":"v1.10.9","useDigest":true}` | Cilium pre-flight image. |
333+
| preflight.image | object | `{"digest":"","pullPolicy":"IfNotPresent","repository":"quay.io/cilium/cilium","tag":"v1.10.10","useDigest":false}` | Cilium pre-flight image. |
334334
| preflight.nodeSelector | object | `{}` | Node labels for preflight pod assignment ref: https://kubernetes.io/docs/user-guide/node-selection/ |
335335
| preflight.podAnnotations | object | `{}` | Annotations to be added to preflight pods |
336336
| preflight.podDisruptionBudget | object | `{"enabled":true,"maxUnavailable":2}` | PodDisruptionBudget settings ref: https://kubernetes.io/docs/concepts/workloads/pods/disruptions/ |

install/kubernetes/cilium/values.yaml

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -83,11 +83,11 @@ rollOutCiliumPods: false
8383
image:
8484
override: ~
8585
repository: quay.io/cilium/cilium
86-
tag: v1.10.9
86+
tag: v1.10.10
8787
pullPolicy: IfNotPresent
8888
# cilium-digest
89-
digest: "sha256:ebe1696cebfdaa95112a48c40bcef01e2771113ae2d4be0dda762bece78293b9"
90-
useDigest: true
89+
digest: ""
90+
useDigest: false
9191

9292
# -- Pod affinity for cilium-agent.
9393
affinity:
@@ -659,10 +659,10 @@ hubble:
659659
image:
660660
override: ~
661661
repository: quay.io/cilium/hubble-relay
662-
tag: v1.10.9
662+
tag: v1.10.10
663663
# hubble-relay-digest
664-
digest: "sha256:92a895d77a8d6c71efceedc111adc848842e5c8bb8ee6d8c0a7812a97ebc1e00"
665-
useDigest: true
664+
digest: ""
665+
useDigest: false
666666
pullPolicy: IfNotPresent
667667

668668
# -- Specifies the resources for the hubble-relay pods
@@ -1239,16 +1239,16 @@ operator:
12391239
image:
12401240
override: ~
12411241
repository: quay.io/cilium/operator
1242-
tag: v1.10.9
1242+
tag: v1.10.10
12431243
# operator-generic-digest
1244-
genericDigest: "sha256:7f9bf92d7e38372dc19899cc3055a04d93095886687f3c03e41932ad5a32e3ac"
1244+
genericDigest: ""
12451245
# operator-azure-digest
1246-
azureDigest: "sha256:1af911a1a15bc7be78ca2e4f8a0ccdff037f0077005993e8c44a88f881c59018"
1246+
azureDigest: ""
12471247
# operator-aws-digest
1248-
awsDigest: "sha256:ff3dc39157b4a0935495a3cb417ce3e4c70ca906a0f7e79a323b2e920a0b0265"
1248+
awsDigest: ""
12491249
# operator-alibabacloud-digest
1250-
alibabacloudDigest: "sha256:9d66f9ee6080ffedf46cfcb554a7303b25a15935e7bcdc73e742e1830da08f82"
1251-
useDigest: true
1250+
alibabacloudDigest: ""
1251+
useDigest: false
12521252
pullPolicy: IfNotPresent
12531253
suffix: ""
12541254

@@ -1468,10 +1468,10 @@ preflight:
14681468
# -- Cilium pre-flight image.
14691469
image:
14701470
repository: quay.io/cilium/cilium
1471-
tag: v1.10.9
1471+
tag: v1.10.10
14721472
# cilium-digest
1473-
digest: "sha256:ebe1696cebfdaa95112a48c40bcef01e2771113ae2d4be0dda762bece78293b9"
1474-
useDigest: true
1473+
digest: ""
1474+
useDigest: false
14751475
pullPolicy: IfNotPresent
14761476

14771477
# -- The priority class to use for the preflight pod.
@@ -1607,10 +1607,10 @@ clustermesh:
16071607
# -- Clustermesh API server image.
16081608
image:
16091609
repository: quay.io/cilium/clustermesh-apiserver
1610-
tag: v1.10.9
1610+
tag: v1.10.10
16111611
# clustermesh-apiserver-digest
1612-
digest: "sha256:ae43adb896c47a0ebfc2124afc0c46393ec694285e744d00df57ba697d957442"
1613-
useDigest: true
1612+
digest: ""
1613+
useDigest: false
16141614
pullPolicy: IfNotPresent
16151615

16161616
etcd:

0 commit comments

Comments
 (0)