Changelog for cilium-1.2.1-lp151.2.3.x86_64.rpm :

* Tue Sep 04 2018 ndasAATTsuse.de- change 00-cilium-cni.conf -> 10-cilium-cni.conf to keep sync with salt
* Mon Sep 03 2018 ndasAATTsuse.de- Use proper bash-completion dir- Updated to 1.2.1
* docker, bpf: add iproute2 version which works around missing af_alg
* docker, bpf: add bpftool for debugging and introspection
* test/k8sT: use specific commit for cilium/star-wars-demo YAMLs
* pkg/k8s: properly handle empty NamespaceSelector
* lxcmap: Improve error messages in DeleteElement()
* lxcmap: Fix always returning an error on delete
* ctmap: Mark IPv6 CT GC as completed on success
* endpoint: Fix endpoint regeneration failure metric
* Block locked code in TriggerPolicyUpdates
* Ignore non-existing link error in cni del
* fqdn: Strip toCIDRSet rules to be more resilient
* fqdn: Use UUIDs to manage rules
* fqdn: Inject IPs on initial rule insert
* xds: Ignore completion timeouts on resource upsert and delete
* endpoint: Log when BPF regeneration times out not because of Envoy
* endpoint: In BPF regeneration, create/remove listeners early
* doc: Restructure and simplify upgrade guide
* doc: Restructure installation guides
* doc: AWS EKS installation guide
* identity: Wait for initial set of security identities before restoring endpoints
* Wed Aug 08 2018 ndasAATTsuse.de- Updated to 1.2.0-rc1
* Inter cluster service routing
* BPF based flow aggregation
* BGP with kube-router more at https://github.com/cilium/cilium/releases/tag/v1.2.0-rc1- Add cilium group
* Mon Jun 04 2018 dcassanyAATTsuse.com- Refactor %license usage to simpler form
* Mon Jun 04 2018 dcassanyAATTsuse.com- Make use of %license macro
* Wed Apr 25 2018 ndasAATTsuse.de- Updated to v1.0.0 Bugfixes Changes:
* etcd: Clear the etcd status error when connectivity is OK (3824, AATTrlenglet)
* ipcache: Fix ipcache deletion of old identities on update (3865, AATTrlenglet)
* bpf: Fix tracing message for egress policy (3806, AATTjoestringer) [- envoy-optional.patch]- use url for source
* Wed Apr 18 2018 ndasAATTsuse.de- skip doc, less depedency- remove libelf1, zypper/rpm should auto resolve- define _fillupdir if not so
* Mon Apr 16 2018 ndasAATTsuse.de- clean up spec file- use %fillup_only for cilium sysconfig- move cilium-cni to %{_libexecdir}/cni like all other cni-plugins
* Mon Apr 16 2018 jengelhAATTinai.de- Combine %service_
* macro calls to reduce generated code.- Trim filler wording from description.- Use modern tar invocation syntax.
* Mon Apr 09 2018 mrosteckiAATTsuse.com- Updated to v1.0.0-rc10
* API preparation for 1.0 Changed the base prefix of the API from /v1beta to /v1 tada. The API will become stable with the 1.0 release. This makes client binaries with version < 1.0.0-rc10.
* Bugfixes Changes policymap: Avoid using golang arrays in entry (#3506, AATTjoestringer) etcd: Run etcd version check in the background (#3499, AATTtgraf) Test: Fix bugtool on kubernetes 1.7 (#3487, AATTeloycoto) Fix L4-only policy egress to world and CIDR-only egress to world (#3486, AATTjoestringer) proxy: Use the same proxy map size as in BPF (#3485, AATTrlenglet) bpf: Do not route packets from egress proxy back into cilium_host (#3473, AATTtgraf) Continue to show timestamps in error cases in CiliumNetworkPolicy NodeStatus. (#3461, AATTaanm) policy: Add missing EntitySlice autogen code (#3458, AATTraybejjani) Fix l3-dependent L4/L7 rules applying to CIDR egress traffic (#3434, AATTjoestringer) Other Changes bugtool: add ip rule and cilium-health status commands (#3500, AATTianvernon) Policy: Kafka multi-topic request support (#3445, AATTmanalibhutiyani)- build cilium without envoy [+envoy-optional.patch]
* Fri Jan 19 2018 ndasAATTsuse.de- Updated to v1.0.0-rc2
* Major Changes Tech preview of Envoy as Cilium HTTP proxy, adding HTTP2 and gRPC support. (#1580, AATTjrajahalme) Introduce \"cilium-health\", a new tool for investigating cluster connectivity issues. (#2052, AATTjoestringer) cilium-agent collects and serves prometheus metrics (#2127, AATTraybejjani) bugtool and debuginfo (#2044, AATTscanf) Add nightly test infrastructure (#2212, AATTianvernon) Separate ingress and egress default deny modes with better control (#2156, AATTmanalibhutiyani) k8s: add support for IPBlock and Egress Rules with IPBlock (#2096, AATTianvernon) Kafka: Support access logging for Kafka requests/responses (#1870, AATTmanalibhutiyani) Added cilium endpoint log command that returns the endpoint\'s status log (#2060, AATTraybejjani) Change endpoint status log in cilium endpoint get to show only the most recent log Routes connecting the host to the Cilium IP space is now implemented as individual route for each node in the cluster. This allows to assign IPs which are part of the cluster CIDR to endpoints outside of the cluster as long as the IPs are never used as node CIDRs. (#1888, AATTtgraf) Standardized structured logging (#1801, #1828, #1836, #1826, #1833, #1834, #1827, #1829, #1832, #1835, AATTraybejjani)
* Bugfixes Changes Fix L4Filter JSON marshalling (#1871, AATTjoestringer) Fix swapped src dst IPs on Conntrack related messages on the monitor\'s output (#2228, AATTaanm) Fix output of cilium endpoint list for endpoints using multiple labels. (#2225, AATTaanm) bpf: fix verifier error in dameon debug mode with newer LLVM versions (#2181, AATTborkmann) pkg/kvstore: fixed race in internal mutex map (#2179, AATTaanm) Proxy ingress policy fix for LLVM 4.0 and greater. Resolves return code 500 \'Internal Error\' seen with some policies and traffic patterns. (#2162, AATTjrfastab) Printing patch clang and kernel patch versions when starting cilium. (#2137, AATTaanm) Clean up Connection Tracking entries when a new policy no longer allows it. #1667, #1823 (#2136, AATTaanm) k8s: fix data race in d.loadBalancer.K8sEndpoints (#2129, AATTaanm) Add internal queue for k8s watcher updates #1966 (#2123, AATTaanm) k8s: fix missing deep copy when updating status (#2115, AATTaanm) Accept traffic to Cilium in FORWARD chain (#2112, AATTtgraf) Also clear the masquerade bit in the FORWARD chain to skip the masquerade rule installed by kube-proxy Fix SNAT issue in combination with kube-proxy, when masquerade rule installed by kube-proxy takes precedence over rule installed by Cilium. (#2108, AATTtgraf) Fixed infinite loop when importing CNP to kubernetes with an empty kafka version (#2090, AATTaanm) Mark cilium pod as CriticalPod in the DaemonSet (#2024, AATTmanalibhutiyani) proxy: Provide identities { host | world | cluster } in SourceEndpoint (#2022, AATTmanalibhutiyani) In kubernetes mode, fixed bug that was allowing cilium to start up even if the kubernetes api-server was not reachable #1973 (#2014, AATTaanm) Support policy with EndpointSelector missing (#1987, AATTraybejjani) Implemented deep copy functionality when receiving events from kubernetes watcher #1885 (#1986, AATTaanm) pkg/labels: Filter out pod-template-generation label (#1979, AATTmichi-covalent) bpf: Double timeout on building BPF programs (#1949, AATTraybejjani) policy: add PolicyTrace msg to AllowsRLocked() when L4 policies not evaluated (#1939, AATTgnahckire) Handle Kafka responses correctly (#1924, AATTmanalibhutiyani) bpf: Avoid excessive proxymap updates (#2210, AATTjoestringer) cilium-agent correctly restarts listening for CiliumNetworkPolicy changes when it sees decoding errors (#1899, AATTraybejjani)
* Wed Nov 08 2017 ndasAATTsuse.de- Initial version 0.12