|
1 | 1 | # Changelog |
2 | 2 |
|
| 3 | +## v1.11.4 |
| 4 | + |
| 5 | +Summary of Changes |
| 6 | +------------------ |
| 7 | + |
| 8 | +**Minor Changes:** |
| 9 | +* k8s: keep CiliumNode labels synced with Node object (Backport PR #19277, Upstream PR #18609, @jibi) |
| 10 | +* Locally allocated identities are now restored during restart, helping avoid transient drops due to identity changes in policies. (Backport PR #19403, Upstream PR #19360, @jrajahalme) |
| 11 | + |
| 12 | +**Bugfixes:** |
| 13 | +* bpf: Fix maglev hash with hostServices.hostNamespaceOnly (Backport PR #19277, Upstream PR #18336, @ysksuzuki) |
| 14 | +* clustermesh: Correct shared service annotation behaviour (Backport PR #19277, Upstream PR #19042, @sayboras) |
| 15 | +* cmd: Fix issue where a ConfigMap value of `{}` was parsed as `map["{}":""]`. (Backport PR #19277, Upstream PR #19172, @gandro) |
| 16 | +* Fix a bug where a backend pod can be selected by a local redirect policy deployed in a different namespace if the local redirect policy was deployed first. (Backport PR #19277, Upstream PR #19193, @aditighag) |
| 17 | +* Fix bug that would cause some pod traffic to leave through the wrong interface if --aws-release-excess-ips is used and masquerading disabled. (Backport PR #19277, Upstream PR #19162, @pchaigno) |
| 18 | +* Fix bug where the 'ipcache-inject-labels' controller constantly fails in non-Kubernetes environments (Backport PR #19277, Upstream PR #19165, @christarazi) |
| 19 | +* Fix bug where the Cilium DNS proxy slows down significantly (and even OOMs) due to lock contention from spawning many goroutines when handling bursty DNS traffic (Backport PR #19418, Upstream PR #19336, @nebril) |
| 20 | +* Fix log rotation of compressed logs (Backport PR #19277, Upstream PR #19152, @chancez) |
| 21 | +* Fixed node init in RKE (Backport PR #19418, Upstream PR #19286, @raphink) |
| 22 | +* helm: Update Clustermesh-APIServer RBAC permissions for platforms (like Openshift) that have the OwnerReferencesPermissionEnforcement admission controller enabled. (Backport PR #19277, Upstream PR #19071, @nathanjsweet) |
| 23 | +* Improve endpoint and DNS proxy lock contention during bursty DNS traffic (Backport PR #19418, Upstream PR #19347, @christarazi) |
| 24 | +* Improve reliably of faulty connections for kube-apiservers behind a LB. Reduce the number of connections to kube-apiserver by 6 for each cilium-agent. (Backport PR #19330, Upstream PR #19259, @aanm) |
| 25 | +* install/kubernetes: fix hubble-ui with TLS (Backport PR #19418, Upstream PR #19338, @aanm) |
| 26 | +* metallb: fix SIGSEGV error when Service resource is deleted. (Backport PR #19277, Upstream PR #19249, @Inode1) |
| 27 | +* Update the 'refresh period' formatting in readme and doc (Backport PR #19418, Upstream PR #19205, @dongwangdw) |
| 28 | +* wireguard: Reject duplicate public keys (Backport PR #19418, Upstream PR #19344, @gandro) |
| 29 | + |
| 30 | +**CI Changes:** |
| 31 | +* jenkinsfiles: Update calls to Quay API (Backport PR #19277, Upstream PR #19229, @pchaigno) |
| 32 | +* test: Don't redeploy in AfterAll of K8sServices test case (Backport PR #19277, Upstream PR #18869, @brb) |
| 33 | +* test: Flush CT tables after L7 proxy tests in K8sServices (Backport PR #19277, Upstream PR #18857, @brb) |
| 34 | +* Use docker manifest inspect to wait for images instead of using quay API (Backport PR #19330, Upstream PR #19307, @YutaroHayakawa) |
| 35 | +* workflows: Update call to Quay API (Backport PR #19277, Upstream PR #19228, @pchaigno) |
| 36 | + |
| 37 | +**Misc Changes:** |
| 38 | +* add 'refreshPeriod' to spelling wordlist (Backport PR #19418, Upstream PR #19394, @aanm) |
| 39 | +* Add a 'Limitations' section to 'External Workloads'. (Backport PR #19418, Upstream PR #19366, @bmcustodio) |
| 40 | +* add context when return errors during datapath initialization (Backport PR #19277, Upstream PR #18011, @kerthcet) |
| 41 | +* Bpf fix conditional compilation (Backport PR #19277, Upstream PR #19104, @jrajahalme) |
| 42 | +* build(deps): bump actions/cache from 3.0.0 to 3.0.1 (#19268, @dependabot[bot]) |
| 43 | +* build(deps): bump actions/cache from 3.0.1 to 3.0.2 (#19389, @dependabot[bot]) |
| 44 | +* build(deps): bump actions/checkout from 3.0.0 to 3.0.1 (#19447, @dependabot[bot]) |
| 45 | +* build(deps): bump github/codeql-action from 1.1.5 to 2.1.6 (#19270, @dependabot[bot]) |
| 46 | +* build(deps): bump github/codeql-action from 2.1.6 to 2.1.7 (#19343, @dependabot[bot]) |
| 47 | +* build(deps): bump github/codeql-action from 2.1.7 to 2.1.8 (#19374, @dependabot[bot]) |
| 48 | +* build(deps): bump KyleMayes/install-llvm-action from 1.5.1 to 1.5.2 (#19325, @dependabot[bot]) |
| 49 | +* build(deps): bump library/alpine from 3.12.7 to 3.15.4 in /images/cache (#19414, @dependabot[bot]) |
| 50 | +* ci: Pin down image for the documentation workflow (Backport PR #19418, Upstream PR #19356, @qmonnet) |
| 51 | +* docs: Clarify use of the `eni.subnetTagsFilter` option (Backport PR #19330, Upstream PR #19276, @gandro) |
| 52 | +* docs: Update shared service annotation docs (Backport PR #19418, Upstream PR #19313, @sayboras) |
| 53 | +* envoy: Limit accesslog socket permissions (Backport PR #19418, Upstream PR #19190, @jrajahalme) |
| 54 | +* ipcache: Add test asserting out-of-order Kubernetes events (Backport PR #19330, Upstream PR #19258, @christarazi) |
| 55 | +* k8s: Use kubelet's logic to close all idle connections (Backport PR #19330, Upstream PR #19290, @christarazi) |
| 56 | +* logo: fix position of central polygon (Backport PR #19277, Upstream PR #19216, @sisp) |
| 57 | +* Test runtime cilium in container (take two) (Backport PR #19403, Upstream PR #19310, @jrajahalme) |
| 58 | +* test: Fix whitespace in docker-run-cilium (Backport PR #19403, Upstream PR #19358, @jrajahalme) |
| 59 | +* v1.11: Update Go to 1.17.9 (#19445, @tklauser) |
| 60 | +* vendor: pull in the latest changes from github.com/vishvananda/netlink (Backport PR #19403, Upstream PR #18618, @aditighag) |
| 61 | +* wireguard: Fix invalid bits when agent init (Backport PR #19277, Upstream PR #19118, @Junnplus) |
| 62 | + |
| 63 | +**Other Changes:** |
| 64 | +* install: Update image digests for v1.11.3 (#19240, @aanm) |
| 65 | + |
3 | 66 | ## v1.11.3 |
4 | 67 |
|
5 | 68 | Summary of Changes |
|
0 commit comments