Releases · cilium/cilium · GitHub

Summary of Changes Minor Changes: Add kernel_version, endpoint_routes_enabled, strict_mode_enabled and kubernetes_version feature metrics. (Backport PR #41078, Upstream PR #41003, @aanm) eni: improve logging and speed up ipam reconciliation in case of node scale-downs (Backport PR #40979, Upstream PR #40852, @marseel) kvstore: Cilium Agent no longer fails health-check if operator is unavailable (Backport PR #40979, Upstream PR #40920, @marseel) operator: CRDs are updated in series instead of in parallel now during Cilium upgrades. This should lower the pressure on the k8s control plane (Backport PR #40847, Upstream PR #40322, @marseel) Bugfixes: Add missing safeguards to topology-aware routing: use all backends when no suitable one matching the zone hints are found or a backend exists without a zone hint. (#41116, @joamaki) aws/eni: Don't use subnet tags to filter ENIs for GC (Backport PR #40979, Upstream PR #40656, @HadrienPatte) clustermesh: fix regression possibly causing cross-cluster connections disruption if the clustermesh-apiserver is restarted at the same time as Cilium agents. (Backport PR #40979, Upstream PR #40786, @giorio94) clustermesh: fix regression preventing global services with unnamed ports from including remote backends (Backport PR #40865, Upstream PR #40848, @giorio94) Fix bug where the presence of a label called "ingress" causes incorrect assignment of identities to workloads, affecting policy enforcement. (Backport PR #40847, Upstream PR #40791, @christarazi) Fix skipping of LoadBalancer services when IPMode is not set to VIP (KEP-1860) (Backport PR #40979, Upstream PR #40915, @joamaki) fix(GH-37724): Sync policies on startup (Backport PR #40847, Upstream PR #40357, @anubhabMajumdar) fix: create policy snapshot only for sdp (Backport PR #40979, Upstream PR #40785, @vipul-21) Fixes a bug where the Cilium agent may segfault when starting. (Backport PR #40847, Upstream PR #40824, @squeed) Fixes an error where the Ingress controller, when run in