fix(deps): update module github.com/cilium/cilium to v1.17.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/cilium/cilium	v1.17.0-pre.3.0.20250219193210-bbf73fb4b71e -> v1.17.1

---

Release Notes

cilium/cilium (github.com/cilium/cilium)

v1.17.1: 1.17.1

Compare Source

Summary of Changes

Minor Changes:

• [v1.17] agent: Deprecate lb-only mode (#​37391, @​brb)
• helm: Update CiliumNodeConfig version (Backport PR #​37440, Upstream PR #​37403, @​sayboras)

Bugfixes:

• ces: Fix bug where stale endpoint information was injected into IPCache (Backport PR #​37416, Upstream PR #​37347, @​gandro)
• socket-lb: Fix null pointer dereference in socketlb/cgroup.go (Backport PR #​37440, Upstream PR #​37426, @​alvaroaleman)

CI Changes:

• test: Move the dind image to Quay to avoid rate-limiting (Backport PR #​37440, Upstream PR #​37388, @​pchaigno)

Misc Changes:

• chore(deps): update all github action dependencies (v1.17) (#​37502, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.17) (#​37342, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/little-vm-helper to v0.0.23 (v1.17) (#​37501, @​cilium-renovate[bot])
• chore(deps): update go to v1.23.6 (v1.17) (#​37446, @​cilium-renovate[bot])
• chore(deps): update stable lvh-images (v1.17) (patch) (#​37409, @​cilium-renovate[bot])
• chore(deps): update stable lvh-images (v1.17) (patch) (#​37496, @​cilium-renovate[bot])

Other Changes:

• install: Update image digests for v1.17.0 (#​37432, @​cilium-release-bot[bot])

Docker Manifests

cilium

quay.io/cilium/cilium:v1.17.1@​sha256:8969bfd9c87cbea91e40665f8ebe327268c99d844ca26d7d12165de07f702866
quay.io/cilium/cilium:stable@sha256:8969bfd9c87cbea91e40665f8ebe327268c99d844ca26d7d12165de07f702866

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.17.1@​sha256:1de22f46bfdd638de72c2224d5223ddc3bbeacda1803cb75799beca3d4bf7a4c
quay.io/cilium/clustermesh-apiserver:stable@sha256:1de22f46bfdd638de72c2224d5223ddc3bbeacda1803cb75799beca3d4bf7a4c

docker-plugin

quay.io/cilium/docker-plugin:v1.17.1@​sha256:d4d838be1d8c20eaf1810f1be1ccc963e8229653357ec6cf8e8c1a53f3f03a71
quay.io/cilium/docker-plugin:stable@sha256:d4d838be1d8c20eaf1810f1be1ccc963e8229653357ec6cf8e8c1a53f3f03a71

hubble-relay

quay.io/cilium/hubble-relay:v1.17.1@​sha256:397e8fbb188157f744390a7b272a1dec31234e605bcbe22d8919a166d202a3dc
quay.io/cilium/hubble-relay:stable@sha256:397e8fbb188157f744390a7b272a1dec31234e605bcbe22d8919a166d202a3dc

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.17.1@​sha256:034b479fba340f9d98510e509c7ce1c36e8889a109d5f1c2240fcb0942bc772c
quay.io/cilium/operator-alibabacloud:stable@sha256:034b479fba340f9d98510e509c7ce1c36e8889a109d5f1c2240fcb0942bc772c

operator-aws

quay.io/cilium/operator-aws:v1.17.1@​sha256:da74748057c836471bfdc0e65bb29ba0edb82916ec4b99f6a4f002b2fcc849d6
quay.io/cilium/operator-aws:stable@sha256:da74748057c836471bfdc0e65bb29ba0edb82916ec4b99f6a4f002b2fcc849d6

operator-azure

quay.io/cilium/operator-azure:v1.17.1@​sha256:b9e3e3994f5fcf1832e1f344f3b3b544832851b1990f124b2c2c68e3ffe04a9b
quay.io/cilium/operator-azure:stable@sha256:b9e3e3994f5fcf1832e1f344f3b3b544832851b1990f124b2c2c68e3ffe04a9b

operator-generic

quay.io/cilium/operator-generic:v1.17.1@​sha256:628becaeb3e4742a1c36c4897721092375891b58bae2bfcae48bbf4420aaee97
quay.io/cilium/operator-generic:stable@sha256:628becaeb3e4742a1c36c4897721092375891b58bae2bfcae48bbf4420aaee97

operator

quay.io/cilium/operator:v1.17.1@​sha256:5c5f4408112365ae10ebcbab2621c273cebc671fe63b0f19cc1376326f140f89
quay.io/cilium/operator:stable@sha256:5c5f4408112365ae10ebcbab2621c273cebc671fe63b0f19cc1376326f140f89

v1.17.0: 1.17.0

Compare Source

We are excited to announce the Cilium 1.17.0 release!

A total of 2761 new commits have been contributed to this release by a growing community of over 880 developers and over 20,800 GitHub stars! 🤩

To keep up to date with all the latest Cilium releases, see Announcements

Here's what's new in v1.17.0:

🚠 Networking

• 🚦 Quality of Service: Annotate your Pods for Guaranteed, Burstable or BestEffort egress network traffic priority (#​36025, @​hemanthmalla)
• 🌐 Multi-Cluster Service API: Use Kubernetes MCS to manage global services in a Cilium Cluster Mesh (#​34439, @​MrFreezeex)
• 🔀 Load Balance based on L4 Protocol: Differentiate TCP and UDP based protocols for load balancing, so multiple services on the same port can be directed to different backends (#​33434, @​jibi)
• 🧲 Per-Service LB Algorithms: Choose maglev or random load balancing algorithms for individual services (#​35735, @​kl52752)
• ⛔ Deny lists for Service source ranges: Control whether Kubernetes loadBalancerSourceRanges are treated as an allow or deny list (#​36120, @​borkmann)
• 🏊 Better control over IPAM: IPs can be allocated statically using AWS tags, and multi-pool can support single IP ranges for pools (#​34622, @​antonipp; #​34618, @​juliusmh)
• 🔌 Dynamic MTU detection: Cilium respects changes made to MTU made at runtime without requiring agent restart (#​34314, @​dylandreimerink)

💂‍♀️ Security

• 🚀 Improved network policy performance: The cost of computing complex combinations of network policies has been reduced (Various PRs by @​joamaki, @​jrajahalme, @​marseel, @​nathanjsweet, @​squeed and @​youngnick)
• 🗂️ Prioritize critical network policies: Cilium respects Kubernetes priorityNamespaces to prioritize endpoint propagation for critical namespaces when using CiliumEndpointSlices (#​34199, @​Kaczyniec)
• 📋 Validate Network Policies: Receive better feedback from Kubernetes when creating network policies (#​34585, @​squeed; #​35904, @​renyunkang; #​36598, @​pippolo84)
• 🏷️ Select CIDRGroups by Label: Add labels to CIDRGroups and use these for network policy selection (#​36087, @​squeed)
• 🛎️ Extend ToServices for in-cluster services: Services with a selector can be selected with ToServices network policies statements (#​34208, @​chaunceyjiang)
• 🚧 FQDN Filtering for hostNetwork: Use CiliumClusterwideNetworkPolicy to configure Layer 7 filtering for DNS requests on nodes in the cluster (#​34024, @​atykhyy)
• 📶 HTTP policies on port ranges: Redirect multiple ports in a single policy towards Envoy for Layer 7 filtering of HTTP traffic (#​36056, @​jrajahalme)

🕸️ Service Mesh & Gateway API

• ⛩️ Gateway API 1.2.1: Add support for the latest Gateway API v1.2.1 release, including HTTP retries and mirror fractions (#​34720, @​sayboras)
• 📝 Static Gateway Addressing: Cilium now supports statically specifying addresses for gateways (#​33042, @​chaunceyjiang)
• 🔐 Improved Envoy TLS handling: Use SDS for managing TLS visibility secrets in Envoy, improving policy calculation speed and secrets access (#​35513, @​youngnick)

🛰️ Observability

• 🔍 Dynamic Hubble Metrics: Configure Hubble metrics with a new hubble-metrics-config ConfigMap to tune your network observability (#​35185, @​rectified95)
• 🛤️ Track enabled features using Prometheus: The cilium-agent and cilium-operator components expose Prometheus metrics for which features are enabled. (#​35852, @​aanm)
• 📊 Many new metrics: Improved metrics related to BGP, network connections, network policy, pod management, and Cilium component status (Various PRs by @​AwesomePatrol, @​harsimran-pabla, @​joestringer, @​jshr-w, @​mikejoh, @​nimishamehta5, @​odinuge, @​ovidiutirla, @​rectified95 and @​sjdot)

🌅 Scale

• 📈 Better cluster connectivity checking: The cilium-health component for cluster-wide network connectivity health detection is better tuned for reliable health checking at high scale (#​35163, @​jshr-w)
• ⏳ Rate-limit monitor events: Balance the number of eBPF events against the CPU usage required to process them (#​29711, @​siwiutki)
• 👥 Double-Write Identity mode: New allocation mode for Security Identities to ease migration between CRD and KVStore identity backends (#​31920, @​antonipp)
• ⚖️ Better scale testing: This release benefits from regular automated scale testing for network policy (#​35278, @​marseel)

🏘️ Community

• ❤️ Many end-users have stepped forward to tell their stories running Cilium in production. If your company wants to submit their case studies let us know. We would love to hear your feedback!
  • Seznam, Alibaba Cloud, SysEleven, QingCloud, ECCO, Reddit, Confluent, SamsungAds, and Sony
• The Cilium Annual Report 2024 was released covering all the highlights from across the community and marking the “Year of Kubernetes Networking”
• The community gathered at Cilium + eBPF Day and the Cilium Developer Summit in Salt Lake City
• Meet us at the upcoming CiliumCon and the Cilium Developer Summit in London

And finally, we would like to thank you to all contributors of Cilium that helped directly and indirectly with the project. The success of Cilium could not happen without all of you. ❤️ ❤️ ❤️

For the full changelog check https://github.com/cilium/cilium/blob/v1.17.0/CHANGELOG.md

Docker Manifests

cilium

quay.io/cilium/cilium:v1.17.0@​sha256:51f21bdd003c3975b5aaaf41bd21aee23cc08f44efaa27effc91c621bc9d8b1d
quay.io/cilium/cilium:stable@sha256:51f21bdd003c3975b5aaaf41bd21aee23cc08f44efaa27effc91c621bc9d8b1d

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.17.0@​sha256:05ccf79102724a943b967337a7cd45177118b76b72fb937d0c8ecb3ce136605c
quay.io/cilium/clustermesh-apiserver:stable@sha256:05ccf79102724a943b967337a7cd45177118b76b72fb937d0c8ecb3ce136605c

docker-plugin

quay.io/cilium/docker-plugin:v1.17.0@​sha256:cf2a7b6779e1264c35d77a799aab25ee9bb67582764b297edf6ad62fa02a3c6f
quay.io/cilium/docker-plugin:stable@sha256:cf2a7b6779e1264c35d77a799aab25ee9bb67582764b297edf6ad62fa02a3c6f

hubble-relay

quay.io/cilium/hubble-relay:v1.17.0@​sha256:022c084588caad91108ac73e04340709926ea7fe12af95f57fcb794b68472e05
quay.io/cilium/hubble-relay:stable@sha256:022c084588caad91108ac73e04340709926ea7fe12af95f57fcb794b68472e05

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.17.0@​sha256:0154a855650dac844347d35404e08f3ad141c05e1d903a648558e6f15e4fef8b
quay.io/cilium/operator-alibabacloud:stable@sha256:0154a855650dac844347d35404e08f3ad141c05e1d903a648558e6f15e4fef8b

operator-aws

quay.io/cilium/operator-aws:v1.17.0@​sha256:a81cea10c4210589750c2588a20ece2822fd57be8529df4dc7779031cec66af7
quay.io/cilium/operator-aws:stable@sha256:a81cea10c4210589750c2588a20ece2822fd57be8529df4dc7779031cec66af7

operator-azure

quay.io/cilium/operator-azure:v1.17.0@​sha256:56e83fbdfbea161b2252c51c7ce03960f7141700473bbd2906bcdb53f46610d7
quay.io/cilium/operator-azure:stable@sha256:56e83fbdfbea161b2252c51c7ce03960f7141700473bbd2906bcdb53f46610d7

operator-generic

quay.io/cilium/operator-generic:v1.17.0@​sha256:1ce5a5a287166fc70b6a5ced3990aaa442496242d1d4930b5a3125e44cccdca8
quay.io/cilium/operator-generic:stable@sha256:1ce5a5a287166fc70b6a5ced3990aaa442496242d1d4930b5a3125e44cccdca8

operator

quay.io/cilium/operator:v1.17.0@​sha256:39c9221d75f47f717fe438912309a96b59b8257a74dc624fdeebebcfbd74b587
quay.io/cilium/operator:stable@sha256:39c9221d75f47f717fe438912309a96b59b8257a74dc624fdeebebcfbd74b587

v1.17.0-rc.2: 1.17.0-rc.2

Compare Source

Summary of Changes

Major Changes:

• The Helm setting tls.secretsBackend is deprecated and should be replaced with the use of the tls.readSecretsOnlyFromSecretsNamespace setting instead. tls.secretsBackend will be removed in a future Cilium version. (Backport PR #​37232, Upstream PR #​37076, @​youngnick)

Minor Changes:

• Add IngressDeny and EgressDeny rules validation for CiliumNetworkPolicy and CiliumClusterwideNetworkPolicy (Backport PR #​37126, Upstream PR #​36598, @​pippolo84)
• bpf: Address backend selection under session affinity with Maglev (Backport PR #​37126, Upstream PR #​37005, @​borkmann)
• clustermesh: add dualstack support for MCS-API and fix a spec compliance issue with headless services (Backport PR #​37126, Upstream PR #​37053, @​MrFreezeex)
• doc: Added hostLegacyRouting limitation for Talos (Backport PR #​37126, Upstream PR #​36852, @​PhilipSchmid)
• Improves Network Policy validation and default deny behavior. Policies now require at least one of Ingress, IngressDeny, Egress, or EgressDeny to be defined. (Backport PR #​37247, Upstream PR #​35904, @​renyunkang)
• ingress: Remove multiple network device limitation (Backport PR #​37126, Upstream PR #​36769, @​sayboras)
• k8s: Bump k8s/kubectl to v0.32.0 (Backport PR #​37126, Upstream PR #​36827, @​sayboras)

Bugfixes:

• Allow cilium agent to start on linux kernels that don't have CONFIG_XFRM. (Backport PR #​37247, Upstream PR #​37123, @​julianwiedmann)
• clustermesh: fix MCS-API service export cache not properly deleted (Backport PR #​37126, Upstream PR #​36892, @​MrFreezeex)
• clustermesh: add support for targetPort in MCS-API (Backport PR #​37126, Upstream PR #​36875, @​MrFreezeex)
• envoy: add configurable access log buffer size (Backport PR #​37126, Upstream PR #​36823, @​aetimmes)
• Fix a bug that prevents a pod from accessing Nodeport services when the pod is also in scope of a broad-range Egress Gateway policy. (Backport PR #​37126, Upstream PR #​36929, @​julianwiedmann)
• Fix bug causing the endpoint regeneration failure handler to be effective only once (Backport PR #​37247, Upstream PR #​37085, @​giorio94)
• Fix bug potentially causing newly added endpoints to remain stuck in waiting-to-regenerate state forever, causing traffic from/to that endpoint to be incorrectly dropped. (Backport PR #​37126, Upstream PR #​37086, @​giorio94)
• Fix configuration of proxy-max-concurrent-retries (Backport PR #​37247, Upstream PR #​37061, @​joestringer)
• Fix memory leak caused by service events when when CNPs/CCNPs are disabled (Backport PR #​37126, Upstream PR #​36727, @​giorio94)
• fix: Hubble metrics not deleted for deleted pods (Backport PR #​37126, Upstream PR #​36819, @​rectified95)
• hubble: fix metrics configuration parsing (Backport PR #​37126, Upstream PR #​36371, @​kaworu)
• operator: don't reconcile non-GAMMA xRoutes without a Cilium-managed Gateway (Backport PR #​37126, Upstream PR #​35718, @​aetimmes)

CI Changes:

• .github: Set --interactive=false for cilium status (Backport PR #​37247, Upstream PR #​37151, @​joestringer)
• ci-e2e-upgrade: Cover wireguard + geneve tunnel (Backport PR #​37247, Upstream PR #​37163, @​jschwinger233)
• ci: add leak detection to conformance-ipsec-upgrade (Backport PR #​37169, Upstream PR #​36377, @​smagnani96)
• ci: more robust hubble relay service port-forwarding (Backport PR #​37247, Upstream PR #​37110, @​rolinh)
• gh: e2e-upgrade: use DSR-Geneve in config 15 (Backport PR #​37126, Upstream PR #​36982, @​julianwiedmann)
• gh: update removed --loglevel option for kind (Backport PR #​37126, Upstream PR #​36935, @​julianwiedmann)
• gha: Bump k8s version to v1.32.0 (Backport PR #​37126, Upstream PR #​36905, @​sayboras)
• gha: bump ubuntu version in conformance-externalworkloads (Backport PR #​37126, Upstream PR #​36859, @​giorio94)
• gha: correctly downgrade to patch release in ipsec workflows (Backport PR #​37126, Upstream PR #​36858, @​giorio94)
• gha: Retrieve eks supported version via aws cli (Backport PR #​37222, Upstream PR #​37210, @​sayboras)
• integration: Bump ubuntu to 24.04 for arm runners (Backport PR #​37126, Upstream PR #​37042, @​sayboras)
• Modify bpftrace script in CI to ignore proxy traffic if destination is outside pod CIDRs. (Backport PR #​37126, Upstream PR #​36364, @​smagnani96)
• Skip tracking unmarked plain-text TCP RST packets generated from proxy timeouts in the CI bpftrace script. (Backport PR #​37247, Upstream PR #​36962, @​smagnani96)
• test: Fix the flake for TestRestoredPort (Backport PR #​37247, Upstream PR #​37106, @​sayboras)
• test: Move demo-httpd from Docker to Quay (Backport PR #​37247, Upstream PR #​37149, @​joestringer)

Misc Changes:

• .github/build-images-ci: re-enable floating tags for stable branches (Backport PR #​37126, Upstream PR #​36913, @​aanm)
• [v1.17] deps: bump x/crypto to v0.31 and x/net to v0.33 (#​36958, @​ferozsalam)
• Add GOARCH to go install dlv command (Backport PR #​37126, Upstream PR #​36853, @​gyutaeb)
• build: Remove debug leftover from Makefile (Backport PR #​37126, Upstream PR #​36917, @​gentoo-root)
• chore(deps): update actions/setup-go action to v5.3.0 (v1.17) (#​37116, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (v1.17) (#​36948, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (v1.17) (#​37073, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.17) (#​36916, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.17) (#​37032, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.17) (#​37115, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.17) (#​37150, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/little-vm-helper to v0.0.20 (v1.17) (#​37214, @​cilium-renovate[bot])
• chore(deps): update docker.io/alpine/socat docker tag to v1.8.0.1 (v1.17) (#​37071, @​cilium-renovate[bot])
• chore(deps): update go (v1.17) (#​37179, @​cilium-renovate[bot])
• chore(deps): update go to v1.23.5 (v1.17) (#​37044, @​cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.31.5-1737074032-41faf0e6060077f7cccb8bb34a08eff4afde2ccd (v1.17) (#​37040, @​cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.31.5-1737535524-fe8efeb16a7d233bffd05af9ea53599340d3f18e (v1.17) (#​37200, @​cilium-renovate[bot])
• cilium: minor hostport fixes (Backport PR #​37126, Upstream PR #​36856, @​borkmann)
• cli: Fix empty egress bandwidth and priority config display (Backport PR #​37247, Upstream PR #​37109, @​l1b0k)
• clustermesh: Add hidden flag --allow-unsafe-policy-skb-usage (Backport PR #​37126, Upstream PR #​36602, @​joestringer)
• clustermesh: update coredns version in mcs-api docs (Backport PR #​37126, Upstream PR #​36899, @​MrFreezeex)
• doc: ebpf host-routing and netfilter (Backport PR #​37126, Upstream PR #​36921, @​PhilipSchmid)
• doc: Removed nodeinit from aks byocni install (Backport PR #​37126, Upstream PR #​37048, @​PhilipSchmid)
• Docs: CiliumCIDRGroup updates & cleanups (Backport PR #​37126, Upstream PR #​37059, @​squeed)
• docs: Clarify Identity-Relevant Labels description (Backport PR #​37126, Upstream PR #​36924, @​joestringer)
• docs: pass current_version to html_context (Backport PR #​37126, Upstream PR #​37008, @​ayuspin)
• docs: remove some stale requirements (Backport PR #​37126, Upstream PR #​36861, @​julianwiedmann)
• docs: Remove stale limitation on KPR+IPsec (Backport PR #​37126, Upstream PR #​37054, @​pchaigno)
• docs: tuning: add config snippet for BPF Host Routing (Backport PR #​37126, Upstream PR #​36878, @​julianwiedmann)
• docs: Update L7 Port Range Information (Backport PR #​37126, Upstream PR #​36966, @​nathanjsweet)
• Endpoint policy before restoration (Backport PR #​37126, Upstream PR #​36433, @​jrajahalme)
• Fix make -C Documentation update-cmdref when make uses --jobserver-style=fifo. (Backport PR #​37126, Upstream PR #​36788, @​gentoo-root)
• localnodeconfig: dedup cluster routing mode (Backport PR #​37126, Upstream PR #​36932, @​julianwiedmann)
• make: Don't hide install errors (Backport PR #​37126, Upstream PR #​36980, @​joestringer)
• metrics: Use new style script flags (Backport PR #​37247, Upstream PR #​37088, @​joamaki)
• policy: Deprecating the toRequires and fromRequires fields in network policies. (Backport PR #​37126, Upstream PR #​36649, @​nathanjsweet)
• policy: reduce allocs by avoiding use of interface types, retire MapStateOwners (Backport PR #​37126, Upstream PR #​36798, @​jrajahalme)
• proxy: Mark restored port as configured (Backport PR #​37126, Upstream PR #​36953, @​jrajahalme)
• Remove outdated roadmap matrix and links to it (Backport PR #​37247, Upstream PR #​37170, @​xmulligan)
• watchers: demote "CEP deleted" log message to debug level (Backport PR #​37126, Upstream PR #​37081, @​giorio94)
• wireguard: attach Ingress program for native routing mode configurations (Backport PR #​37247, Upstream PR #​37108, @​julianwiedmann)

Other Changes:

• install: Update image digests for v1.17.0-rc.1 (#​36938, @​cilium-release-bot[bot])

Docker Manifests

cilium

quay.io/cilium/cilium:v1.17.0-rc.2@​sha256:a0d21e7191f7635c05f5aeb977c19369adafe50365eca65cfe364615a6cb8fc6

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.17.0-rc.2@​sha256:77e5bf1a8048e7f21704168af3763e9d399170371c6b6ae762676b75b60c1add

docker-plugin

quay.io/cilium/docker-plugin:v1.17.0-rc.2@​sha256:3e00442c12837297aab287bb99dbb3c30d795dc638c9d051307cbd4a017e70ad

hubble-relay

quay.io/cilium/hubble-relay:v1.17.0-rc.2@​sha256:409333bf0a3224ce6e26073a5a46156b5b15357818582f32c5be4d7d7608033b

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.17.0-rc.2@​sha256:a6b678e3e20954ee623dff5a49a27a40e17ba73b66ee364eb659c762658c20c8

operator-aws

quay.io/cilium/operator-aws:v1.17.0-rc.2@​sha256:3c5576e5a5bbedeede90ce684f9c3d99c9a675319a2c13c935f1b8245c1d3413

operator-azure

quay.io/cilium/operator-azure:v1.17.0-rc.2@​sha256:edee761954fbc5b1411aa7a270ee15e56074d462109b507aff1684d467d82742

operator-generic

quay.io/cilium/operator-generic:v1.17.0-rc.2@​sha256:13fcd5cbe871342bcbdc42dea9d72250c8e38cdd538ce049c5506a81f8f43b72

operator

quay.io/cilium/operator:v1.17.0-rc.2@​sha256:af7ef3aa16b39110a3f9e424a90f9b334ed31ebaf4235895fdf0392239b7cb51

v1.17.0-rc.1: 1.17.0-rc.1

Compare Source

Summary of Changes

Minor Changes:

• envoy: Use yaml format for bootstrap config (Backport PR #​36781, Upstream PR #​36820, @​sayboras)
• vendor: Bump gateway-api version to v1.2.1 (Backport PR #​36781, Upstream PR #​36773, @​sayboras)

Bugfixes:

• envoy: Configure internal address config based on IP family (Backport PR #​36781, Upstream PR #​36733, @​sayboras)

CI Changes:

• [v1.17] gh: replace kernel development trees with 6.12 kernel (#​36841, @​julianwiedmann)
• gha: Disable envoy version check in upgrade/downgrade tests (Backport PR #​36739, Upstream PR #​36734, @​sayboras)
• github: Fix branch name in build-go-caches.yaml (#​36906, @​michi-covalent)

Misc Changes:

• chore(deps): update all github action dependencies (v1.17) (#​36759, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.17) (#​36724, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.17) (#​36849, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/cilium-cli to v0.16.23 (v1.17) (#​36894, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.23.4 docker digest to 7ea4c9d (v1.17) (#​36848, @​cilium-renovate[bot])
• chore(deps): update helm/kind-action action to v1.12.0 (v1.17) (#​36837, @​cilium-renovate[bot])
• chore(deps): update kindest/node docker tag to v1.29.12 (v1.17) (#​36758, @​cilium-renovate[bot])
• chore(deps): update stable lvh-images (v1.17) (patch) (#​36722, @​cilium-renovate[bot])
• chore(deps): update stable lvh-images (v1.17) (patch) (#​36836, @​cilium-renovate[bot])
• doc: fix typo on kubeproxy-free (CEV -> CVE) (Backport PR #​36739, Upstream PR #​36701, @​alagoutte)
• ingress, gateway-api: Convert test fixtures to file based (Backport PR #​36781, Upstream PR #​36732, @​sayboras)
• ingress, gateway-api: Convert test fixtures to file based (Backport PR #​36781, Upstream PR #​36810, @​sayboras)
• Remove reference to DNS polling (Backport PR #​36739, Upstream PR #​36679, @​JacobHenner)
• vendor: bump ebpf-go to 0.17 (Backport PR #​36781, Upstream PR #​36723, @​ti-mo)

Other Changes:

• [v1.17] gha: use /test to trigger tests in stable branches (#​36690, @​giorio94)
• install: Update image digests for v1.17.0-rc.0 (#​36693, @​cilium-release-bot[bot])

Docker Manifests

cilium

quay.io/cilium/cilium:v1.17.0-rc.1@​sha256:a6e0b8285dc7979e89d2cec34fbd0c5997a459f1870ebd42c8ece3e061cf5f7e

clustermesh-apiserver

quay.io/cilium/clustermesh-apiserver:v1.17.0-rc.1@​sha256:2b7b7d2b97f635f6fb8cc238f3d3c2243ad77148fd5bd926cd59d21a7d6d1154

docker-plugin

quay.io/cilium/docker-plugin:v1.17.0-rc.1@​sha256:1d28c407cf853a89231d2b07e1f4b74e033b6067f755844c1ef6fb3c34865d1f

hubble-relay

quay.io/cilium/hubble-relay:v1.17.0-rc.1@​sha256:c5dc43e38cd54b332787f7da273dcffaf8fb0fc17826dc27ee53d1a9f7a5ee91

operator-alibabacloud

quay.io/cilium/operator-alibabacloud:v1.17.0-rc.1@​sha256:ada65be66352e2be8bb1170039f80ef89bb84a77be386d0445761a442ccee666

operator-aws

quay.io/cilium/operator-aws:v1.17.0-rc.1@​sha256:4bf0d1caddc56a826b5ffc21db9494284c65cd5ca5e531b935140f366367a4a6

operator-azure

quay.io/cilium/operator-azure:v1.17.0-rc.1@​sha256:b2549f4216a27001614235388a0f793d7d0113e36f70eca72292ab8a3b40f36c

operator-generic

quay.io/cilium/operator-generic:v1.17.0-rc.1@​sha256:67ecfb0e0f752faa3a83dd85e6a94b921a1cdb37c1c34750e17d2344932153a8

operator

quay.io/cilium/operator:v1.17.0-rc.1@​sha256:e3fa5d66a5d88dcbdc5cd1644ab76dbbf58bdef12c6f5faccebc51fd32c845dc

---

Configuration

📅 Schedule: Branch creation - "on friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: downloading github.com/cilium/cilium v1.17.1
go: github.com/cilium/cilium-cli/cmd/cilium imports
	github.com/cilium/cilium/cilium-cli/cli: cannot find module providing package github.com/cilium/cilium/cilium-cli/cli
go: github.com/cilium/cilium-cli/cmd/cilium imports
	github.com/cilium/cilium/cilium-cli/logging: cannot find module providing package github.com/cilium/cilium/cilium-cli/logging