Changelog for cilium-cli-0.16.19-lp155.1.2.x86_64.rpm :

* Wed Oct 02 2024 obsAATTtbadm.net- Update to version 0.16.19:
* Prepare for v0.16.19 release
* chore(deps): update dependency go to v1.23.2
* chore(deps): update docker/build-push-action action to v6.9.0
* go.mod: pick up github.com/cilium/cilium v1.17.0-pre.1
* Change default entrypoint for both usecases
* Prepare for #2755 - Dockerfile only
* chore(deps): update dependency cilium/cilium to v1.16.2
* chore(deps): update all github action dependencies
* github: Add a workflow to close stale issues and PRs
* chore(deps): update dependency ubuntu to v24
* github: Increase hubble-event-queue-size
* multicluster: correctly specify the dst context to clustermes connect
* Update stable release to v0.16.18
* Prepare for v0.16.18 release
* chore(deps): update azure/login action to v2.2.0
* release: Install curl
* chore(deps): update ubuntu:24.04 docker digest to dfc1087
* github: Remove unused files
* vendor: Remove gops dependency
* chore(deps): update ubuntu:24.04 docker digest to 56a8952
* action: Run version command with --client flag
* Update stable release to v0.16.17
* Prepare for v0.16.17 release
* chore(deps): update docker.io/library/golang:1.23.1-alpine3.19 docker digest to e0ea2a1
* chore(deps): update docker/dockerfile docker tag to v1.10
* chore(deps): update golang:1.23.1-alpine3.19 docker digest to e0ea2a1
* vendor: Pick up github.com/cilium/cilium v1.17.0-pre.0
* chore(deps): update golangci/golangci-lint docker tag to v1.61.0
* chore(deps): update golang docker tag to v1.23.1
* chore(deps): update go to v1.23.1
* chore(deps): update actions/upload-artifact action to v4.4.0
* github: Remove \"Push to Loki\" workflow
* make: set set latest stable version based on stable.txt
* chore(deps): update golangci/golangci-lint docker tag to v1.60.3
* chore(deps): update google-github-actions/auth action to v2.1.5
* build: fix CLIVersion ldflag ref
* chore(deps): update golangci/golangci-lint docker tag to v1.60.2
* chore(deps): update go to v1.23.0
* CODEOWNERS: Assign vendor/ to cilium-cli-maintainers
* Prepare for v0.16.16 release
* chore(deps): update all github action dependencies
* chore(deps): update all github action dependencies
* chore(deps): update golang-images
* chore(deps): update golangci/golangci-lint docker tag to v1.60.1
* chore(deps): update dependency cilium/cilium to v1.16.1
* chore(deps): update go to v1.22.6
* chore(deps): update docker/build-push-action action to v6.6.0
* chore(deps): update actions/upload-artifact action to v4.3.5
* Unlock the repo
* Remove unused files
* Use CLI from cilium/cilium repo
* Pick up the latest cilium from main branch
* Update CODEOWNERS
* chore(deps): update golang docker tag to v1.22.6
* Update stable release to v0.16.15
* Prepare for v0.16.15 release
* action: Handle multiple cilium-cli directories
* Lock cilium-cli repo
* Update stable release to v0.16.14
* Prepare for v0.16.14 release
* externalworkloads: Set cluster.id
* {externalworkloads,multicluster}: Shorten cluster names
* chore(deps): update dependency cilium/cilium to v1.16.0
* chore(deps): update docker/setup-buildx-action action to v3.6.1
* chore(deps): update golangci/golangci-lint-action action to v6.1.0
* connectivity: use TestNamespace and ExternalDeploymentPort params
* connectivity: Support multiple conditions
* chore(deps): update docker.io/coredns/coredns docker tag to v1.11.3
* chore(deps): update docker/setup-buildx-action action to v3.6.0
* kind: Pick up the latest kindest/node image
* Adding multicast subcommand
* sysdump: Gather gops from cilium-operator
* junit: collector fix
* Pick up kindest/node:v1.21.10
* fix(deps): update github.com/cilium/charts digest to 2a1e5b8
* fix(deps): update module github.com/cilium/cilium to v1.16.0
* chore(deps): update all github action dependencies
* chore(deps): update golang:1.22.5-alpine3.19 docker digest to 48aac60
* chore(deps): update docker.io/library/golang:1.22.5-alpine3.19 docker digest to 48aac60
* connectivity: Fix ineffective version check in BGP tests
* Assign release-related files to cilium-cli-maintainers
* connectivity: single JUnit report
* chore(deps): update golang:1.22.5-alpine3.19 docker digest to 653cab0
* chore(deps): update softprops/action-gh-release action to v2.0.8
* Update CONTRIBUTING.md
* sysdump: fix file separator
* chore(deps): update docker/build-push-action action to v6.4.1
* fix(deps): update github.com/cilium/charts digest to 2c16e87
* fix(deps): update module github.com/cilium/cilium to v1.16.0-rc.2
* connectivity: Assert BGP timer intervals in BGP connectivity tests
* connectivity: skip local-redirect-policy-with-node-dns
* connectivity: add local-redirect-policy-with-node-dns test
* connectivity: add LRP with node-local-dns test scenario
* connectivity: add node local DNS feature detection
* connectivity: use ExternalDeploymentPort for echoExternalNode headless svc
* connectivity: run LRP test with 1.16.0 or higher
* connectivity: skip LRP test resources creation if already exists
* ci: Set up node local DNS in the kind workflow
* connectivity: test namespace suffix
* connectivity: perf deployment improved
* chore(deps): update docker/build-push-action action to v6.4.0
* golangci-lint: Add errorlint
* Replace io.ReadAll with safeio.ReadAllLimit
* Replace timer.After with inctimer.After
* Replace sync with github.com/cilium/cilium/pkg/lock
* chore(deps): update docker/dockerfile docker tag to v1.9
* flags: Use option.NewNamedMapOptions
* connectivity: echo-ingress-l7-via-hostport-with-encryption only runs with cilium 1.16.0 or newer.
* vendor: Remove gopkg.in/check.v1 dependency
* connectivity: disrupt deployment improved
* connectivity: Add echo-ingress-l7-via-hostport-with-encryption
* connectivity/echo-ingress-l7: Make expectation a function
* chore(deps): update dependency cilium/cilium to v1.15.7
* fix(deps): update github.com/cilium/charts digest to 3eef298
* Update stable release to v0.16.13
* Prepare for v0.16.13 release
* chore(deps): update actions/setup-go action to v5.0.2
* fix(deps): update module helm.sh/helm/v3 to v3.15.3
* clustermesh: fix deprecated cloud internal LoadBalancer annotations
* clustermesh: explicitly validate service type, and forbid ClusterIP
* clustermesh: fix remote clusters configuration reset upon deactivation
* Add --disable-check flag to upgrade command
* connectivity: Add Port Range Tests
* Update stable release to v0.16.12
* Prepare for v0.16.12 release
* CODEOWNERS: Assign BGP/FRR source files to sig-bgp
* connectivity: Introduce BGP CP connectivity tests
* chore(deps): update all github action dependencies
* chore(deps): update go to v1.22.5
* kvstoremesh: don\'t disable by default
* chore(deps): update docker/setup-buildx-action action to v3.4.0
* chore(deps): update golang:1.22.5-alpine3.19 docker digest to 0642d4f
* fix(deps): update all go dependencies main
* chore(deps): update golang docker tag to v1.22.5
* chore(deps): update docker/build-push-action action to v6.3.0
* Add --disable-check flag back
* action: Use github.action_path when accessing cilium.sh
* connectivity: Label test namespaces
* fix(deps): update module github.com/cilium/cilium to v1.16.0-rc.1
* Update stable release to v0.16.11
* Dockerfile: Fix a warning
* Simplify Kind workflow
* Prepare for v0.16.11 release
* ci: speedup workflows
* sysdump: derive operator namespace from agent namespace if specified
* sysdump: fix no Cilium output if operator was not detected
* fix(deps): update all go dependencies main
* image: Push Docker image on tag push
* Remove cilium-cli-test-job-chart
* aks: Temporarily disable Hubble Relay
* fix(deps): update module github.com/cilium/cilium to v1.16.0-rc.0
* multicluster: Run cilium-cli inside a container
* chore(deps): update docker/build-push-action action to v6.2.0
* fix: ExternalTargetCANamespace name
* eks: Run cilium-cli inside a container
* connectivity: Ensure Hubble Relay is connected to all the nodes
* external-workloads: Run cilium-cli inside a container
* gke: Run cilium-cli inside a container
* gha: fix cluster names in kind workflow
* autodetect: try to sanitize autodetected cluster name
* azure: directly retrieve cluster name from kubeconfig
* action: Add an option to run cilium-cli inside a container
* connectivity: Add pod-to-pod-no-frag
* connectivity: Extend PingCommand to accept extra args
* chore(deps): pin ubuntu docker tag to 2e863c4
* connectivity: refactor initClients
* connectivity: introduce detectSingleNode method
* Dockerfile: Install aws / azure / gcloud CLIs
* chore(deps): update docker/build-push-action action to v6.1.0
* chore(deps): update all github action dependencies
* chore(deps): update golang:1.22.4-alpine3.19 docker digest to c46c460
* chore(deps): update docker.io/library/golang:1.22.4-alpine3.19 docker digest to c46c460
* chore(deps): update quay.io/cilium/alpine-curl docker tag to v1.10.0
* chore(deps): update docker.io/library/golang:1.22.4-alpine3.19 docker digest to e43a04e
* chore(deps): update golang-images
* gh/workflows: Fix display img digest step
* connectivity: Display last assertion error on failure
* connectivity: Extend pod-to-pod encryption tests
* chore(deps): update docker/build-push-action action to v6
* fix(deps): update all go dependencies main
* chore(deps): update docker.io/library/golang:1.22.4-alpine3.19 docker digest to d9b1f00
* chore(deps): update docker/build-push-action action to v5.4.0
* chore(deps): update golangci/golangci-lint docker tag to v1.59.1
* chore(deps): update golang-images
* Pick up the latest cilium/cilium from main branch
* chore(deps): update dependency cilium/cilium to v1.15.6
* chore(deps): update actions/checkout action to v4.1.7
* gha: increase disk size for GKE clusters
* fix(deps): update github.com/cilium/charts digest to 4be5659
* Update stable release to v0.16.10
* Prepare for v0.16.10 release
* fix(deps): update module golang.org/x/term to v0.21.0
* fix(deps): update all go dependencies main
* connectivity: Introduce local redirect policy tests
* connectivity: Add ResultCurlTimeout
* connectivity: Add a scenario getter
* features: Add LocalRedirectPolicy
* connectivity: add egress-gateway-with-l7-policy test
* connectivity: add pod to external with DNS case in EGW scenario
* chore(deps): update golang docker tag to v1.22.4
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 25e9fcb
* Update go.mod
* fix: properly count wrapped lines in status output in --wait mode
* chore(deps): update go to v1.22.4
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 082a03d
* fix: conn tests JUnit file name
* Update stable release to v0.16.9
* Prepare for v0.16.9 release
* fix(deps): update github.com/cilium/charts digest to f365292
* clustermesh: fix status retrieval on v1.14 with kvstoremesh enabled
* Update stable release to v0.16.8
* Prepare for v0.16.8 release
* chore(deps): update azure/login action to v2.1.1
* chore(deps): update docker/login-action action to v3.2.0
* chore(deps): update golangci/golangci-lint docker tag to v1.59.0
* fix: printer poll logic
* cleanup: unused methods and fields removed.
* fix: conn test junit file name
* feat: conn test concurrent logger
* fix: conn tests output improved
* fix(deps): update module helm.sh/helm/v3 to v3.15.1
* chore(deps): update golangci/golangci-lint docker tag to v1.58.2
* fix(deps): update module github.com/cilium/charts to v0.0.0-20240517144447-a8ec8771aab8
* sysdump: don\'t write extension twice in clustermesh debug files
* encrypt: broken IPsec algo removed
* hubble: Replace deprecated grpc.DialContext by grpc.NewClient
* fix(deps): update all go dependencies main
* chore(deps): update golangci/golangci-lint docker tag to v1.58.1
* chore(deps): update golangci/golangci-lint-action action to v6
* chore(deps): update all github action dependencies
* chore(deps): update docker.io/library/golang:1.22.3-alpine3.19 docker digest to f1fe698
* chore(deps): update dependency kubernetes-sigs/kind to v0.23.0
* chore(deps): update golang:1.22.3-alpine3.19 docker digest to f1fe698
* clustermesh: setup fix and CI
* fix: EchoServerHostPort moved into Parameters
* fix: test templates parsing
* ci: kind workflow updated with test-concurrency
* feat: MultiError implementation
* fix: typo fix
* feat: policy mutex
* feat: conn test concurrent run
* feat: test-concurrency conn test param
* chore(deps): update dependency cilium/cilium to v1.15.5
* clustermesh: reset remote clusters configuration upon disconnection
* fix(deps): update module github.com/cilium/charts to v0.0.0-20240507142034-8e0b9125ca4a
* chore(deps): update go to v1.22.3
* clustermesh: output tips in case of errors in clustermesh status
* clustermesh: output kvstoremesh status as part of clustermesh status
* sysdump: collect clustermesh-apiserver profiling data
* k8s: add method to proxy connection to container\'s TCP port
* sysdump: skip metric/gops collection if container does not exist
* sysdump: collect clustermesh-apiserver gops stats
* sysdump: collect clustermesh-related debug information
* sysdump: drop reference to clustermesh from metric collection errors
* sysdump: uniform operator/clustermesh metrics file name
* fix: Azure BYOCNI workflow
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 9bc27a7
* chore(deps): update golang docker tag to v1.22.3
* Display stderr when ExecInPod action fails.
* chore(deps): update golangci/golangci-lint-action action to v5.3.0
* chore(deps): update softprops/action-gh-release action to v2.0.5
* golangci: remove deprecated go version properties
* Remove cilium/hubble dependency
* RELEASE.md: make sure to push correct release branch
* Update stable release to v0.16.7
* Mon May 13 2024 obsAATTtbadm.net- Update to version 0.16.7:
* Prepare for v0.16.7 release
* connectivity: cover echo-{same,other}-node services in ingress tests
* chore(deps): update golangci/golangci-lint-action action to v5.2.0
* fix(deps): update all go dependencies main
* chore(deps): update actions/setup-go action to v5.0.1
* Update stable release to v0.16.6
* Prepare for v0.16.6 release
* connectivity: Delete test-conn-disrupt after test run
* connectivity: Use separate context for finalization
* connectivity: Pass context.Context to finalizers
* chore(deps): update actions/checkout action to v4.1.4
* chore(deps): update golangci/golangci-lint-action action to v5.1.0
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 735f3e2
* k8s: remove unused filter functionality from k8sclient.CiliumLogs
* Pin test-connection-disruption using multi-platform image SHA
* chore(deps): update docker/dockerfile:1.7 docker digest to a57df69
* chore(deps): update actions/download-artifact action to v4.1.7
* chore(deps): update golangci/golangci-lint-action action to v5
* fix(deps): update github.com/cilium/charts digest to d93188b
* Update stable release to v0.16.5
* Prepare for v0.16.5 release
* chore(deps): update helm/kind-action action to v1.10.0
* sysdump: Check --namespace flag for cilium-operator
* chore(deps): update all github action dependencies
* chore(deps): update dependency cilium/cilium to v1.15.4
* chore(deps): update module golang.org/x/net to v0.23.0 [security]
* Move the test namespace deletion logic to the install package
* chore(deps): update all github action dependencies
* feat: split conn tests into chunks
* sysdump: Clarify sysdump worker-count defaults to the number of available CPUs.
* Add zip binary to release environment
* ci: Use zip output for windows releases
* fix(deps): update module github.com/prometheus/common to v0.53.0
* fix(deps): update module github.com/cilium/hubble to v0.13.3
* fix(deps): update all go dependencies main
* chore(deps): update azure/login action to v2.1.0
* chore(deps): update docker/setup-buildx-action action to v3.3.0
* connectivity test: avoid segfault if no agent pods are found
* connectivity: add endpointslice clustermesh sync test
* sysdump: Capture hubble cert-manager certificates
* sysdump: Capture hubble-generate-certs cronjob and pod logs
* connectivity: configure endpoint selector for entity-cluster CNP
* connectivity: configure test-conn-disrupt CPU requests
* connectivity: bump test-conn-disrupt to v0.0.14
* connectivity: make test-conn-disrupt image configurable
* fix(deps): update all go dependencies main
* connectivity: introduce host firewall tests
* Revert \"Lock the connectivity command\"
* Revert \"Use connectivity package from cilium/cilium\"
* feat: encryption status output enriched with IPsec details
* fix(deps): update github.com/cilium/charts digest to 7815d99
* chore(deps): update go to v1.22.2
* sysdump: Collect helm metadata
* Use connectivity package from cilium/cilium
* chore(deps): update golang docker tag to v1.22.2
* fix(deps): update module github.com/cilium/cilium to v1.16.0-pre.1
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to cb6aeb5
* chore(deps): update golangci/golangci-lint docker tag to v1.57.2
* k8s: Remove Tetragon client
* Pin github.com/osrg/gobgp/v3 to v3.23.0
* fix(deps): update github.com/cilium/charts digest to 7ea270c
* Update stable release to v0.16.4
* fix(deps): update module github.com/prometheus/common to v0.51.1
* Lock the connectivity command
* Prepare for v0.16.4 release
* chore(deps): update golangci/golangci-lint docker tag to v1.57.1
* helm: fix KPR autodetection value
* errors: add [no-error-logs] exception for issue caused by fqdn bug.
* connectivity: add support for regex based log exceptions.
* chore(deps): update dependency cilium/cilium to v1.15.3
* refactor: Remove unused constants in defaults.go.
* refactor: Move default Helm release name to sysdump package.
* style: Reorganize parameters struct to enhance readability.
* fix: Add WaitDuration from defaults for hubble enable|disable for cilium install|uninstall --wait.
* feat: Add helmReleaseName to Hubble uninstall pre-phase of the core uninstall.
* feat: Add helmReleaseName to hubble disable parameters.
* style: Improve log message formatting. Make consistent/conventional.
* feat: Add customizable Helm release name for Cilium
* ci: fix installation on AKS
* ci: avoid overlapping pod and service CIDRs on AKS
* chore(deps): update docker.io/library/golang:1.22.1-alpine3.19 docker digest to 0466223
* status: Add --interactive flag
* connectivity: explicitly wait for ingress service creation
* connectivity: don\'t pre-populate the ingress service map
* renovate:: Pick up github.com/cilium/cilium prereleases
* connectivity: fix flow validation with fully-qualified DNS names
* Ignore \"Unsupported L2 protocol\" to known drops
* Improve Makefile
* defaults: Move Version and HelmRepository from const to var
* gha: configure fully-qualified DNS names as external targets
* connectivity: configure fully-qualified DNS names as external targets
* connectivity: configure Host header for fully-qualified DNS names
* connectivity: fix invalid CNP name with fully-qualified DNS names
* connectivity: remove domain references from FQDN policy name
* chore(deps): update module github.com/docker/docker to v25.0.5+incompatible [security]
* fix(deps): update module github.com/prometheus/common to v0.51.0
* connectivity: don\'t hard-code ingress service NodePorts
* tests: Add exceptions for error logs check
* Update stable release to v0.16.3
* Prepare for v0.16.3 release
* chore(deps): update golang:1.22.1-alpine3.19 docker digest to 0466223
* install: convert --nodes-without-cilium flag to boolean
* helm: configure nodes without cilium affinity on install and upgrade
* chore(deps): update golang:1.22.1-alpine3.19 docker digest to fa4add5
* refactor: Move logging outside internal
* Prepare for v0.16.2 release
* chore(deps): update all github action dependencies
* fix(deps): update github.com/cilium/charts digest to a5bec49
* fix(deps): update module helm.sh/helm/v3 to v3.14.3
* Revert \"ingress: Update backend service for Ingress\"
* gha: increase Multicluster timeout
* renovate: Don\'t pick up new Go patch versions in go.mod
* Revert \"chore(deps): update dependency go to v1.22.1\"
* Prepare for v0.16.1 release
* fix(deps): update github.com/cilium/charts digest to 724231f
* chore(deps): update dependency cilium/cilium to v1.15.2
* fix(deps): update module github.com/cilium/hubble to v0.13.2
* chore(deps): update docker/login-action action to v3.1.0
* chore(deps): update dependency go to v1.22.1
* refactor: Move Hooks to the api package
* refactor: Move sniff under connectivity
* Store namespace and k8sClient in the command context
* Add InitializeCommand hook
* chore(deps): update softprops/action-gh-release action to v2.0.4
* connectivity: collect sysdump from all clusters on failure
* gha: replace remaining references to deprecated KPR settings
* connectivity: fix KPR feature probing
* helm: improve KPR autodetection logic
* helm: uniform retrieval of nested helm value
* helm: remove bpf.masquerade autodetection logic
* helm: do not care for unsupported Cilium versions in values generation
* helm: remove unused fields/parameters from getHelmValues logic
* chore(deps): update go to v1.22.1
* chore(deps): update softprops/action-gh-release action to v2
* fix(deps): update all go dependencies main
* fix(deps): update all go dependencies main
* Don\'t depend on github.com/mholt/archiver
* chore(deps): update azure/login action to v2
* ingress: Update backend service for Ingress
* tetragon: remove tetragon CR code
* tetragon: use ListUnstructured for tetragon CRs
* sysdump: gather tetragon pod logs and configmap
* chore(deps): update docker/build-push-action action to v5.2.0
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 8425131
* Update stable release to v0.16.0
* chore(deps): update golang docker tag to v1.22.1
* chore(deps): update golang-images
* fix: update ldflags for local-release
* refactor: Move internal/cli to cli/
* Prepare for v0.16.0 release
* Add error log check exception for leader election errors.
* golangci: enable stylecheck linter for duplicate imports
* Remove duplicated imports
* Connectivity test builder component implemented.
* Move the CLI version string to the default package
* chore(deps): update actions/download-artifact action to v4.1.4
* sysdump: Export Hooks and InitSysdumpFlags
* sniffer: always dump captured packets in assert mode
* vendor: Pick up cilium/cilium v1.16.0-pre.0
* action: Add go-mod-directory parameter
* fix(deps): update module github.com/stretchr/testify to v1.9.0
* refactor: Move ctrlcreader.go under /k8s/internal/
* fix(deps): update module github.com/go-openapi/strfmt to v0.22.1
* fix(deps): update module github.com/prometheus/common to v0.49.0
* Remove --cluster-name flag
* refactor: Remove internal/utils/utils.go
* chore(deps): update all github action dependencies
* Remove golang.org/x/mod/semver dependency
* helm: Remove Get and GetParameter
* Ensure all hubble Pods are gone before proceeding with uninstall --wait.
* uninstall: when --wait is specified, use foreground deletion.
* Remove unused things
* docs: Update version matrix
* cursorUp() again
* Only active wait for OutputSummary
* cursorUp() function
* Silent wait in -o json
* Display formatted status during status wait
* connectivity: Remove --delete-cilium-pod-on-nodes flag
* utils: Remove IsInHelmMode()
* Delete classic mode clustermesh commands
* chore(deps): update docker/setup-buildx-action action to v3.1.0
* connectivity: fix encryption validation with wireguard encap + host fw
* k8s: don\'t drop stdout of kubectl exec
* Delete classic mode hubble commands
* Delete classic mode install/uninstall/upgrade commands
* Error handling fixed.
* Ignore Cilium endpoints not found error for the status command.
* sniffer: improve handling of tcpdump termination
* Status check error message improved.
* Refactor: Move junit package under connectivity package
* status: additionally check for endpoints readiness
* connectivity: improve reporting for no-unexpected-packet-drops check
* Add sig/encryption as owner of /encrypt/
* fix(deps): update module helm.sh/helm/v3 to v3.14.2 [security]
* fix(deps): update all go dependencies main
* connectivity: introduce host firewall tests
* connectivity: don\'t configure both timeout and deadline for ping
* connectivity: add support for CiliumClusterwideNetworkPolicies
* features: generalize CRD-based feature determination
* policies: extract namespace configuration for easier reuse
* policies: generalize the policies registration logic
* policies: generalize the policies creation/update logic
* policies: generalize the policies parsing logic
* connectivity: add forbidden ICMPv6 message as expected drop reason
* chore(deps): update dependency kubernetes-sigs/kind to v0.22.0
* chore(deps): update golangci/golangci-lint docker tag to v1.56.2
* chore(deps): update actions/setup-go action to v5
* chore(deps): update dependency cilium/cilium to v1.15.1
* fix(deps): update all go dependencies main
* renovate: additionally manage updates for action.yaml
* Use encryption models from Cilium dependency.
* Update stable release to v0.15.23
* Hide `key-per-node` flag.
* fix(deps): update all go dependencies main
* GCP OIDC instead of SA creds.
* fix(deps): update module helm.sh/helm/v3 to v3.14.1 [security]
* Prepare for v0.15.23 release
* gha: increase GKE disk size in external workloads workflow to 15GB
* gha: increase GKE and AKS timeouts
* chore: Amend connectivity tests for OpenShift
* IPsec key rotation with algorithm change support.
* chore(deps): update golangci/golangci-lint docker tag to v1.56.1
* chore(deps): update all github action dependencies
* chore(deps): update go to v1.22.0
* fix(deps): update module golang.org/x/mod to v0.15.0
* chore(deps): update golang docker tag to v1.22.0
* chore(deps): update helm/kind-action action to v1.9.0
* chore(deps): update golangci/golangci-lint-action action to v4
* connectivity: don\'t collect multiple sysdump in no-errors-in-logs
* connectivity: ignore timestamps in no-errors-in-logs
* connectivity: extend no-errors-in-logs check to other Cilium containers
* connectivity: print log errors only once
* connectivity: always check for log errors in newer Cilium versions
* external workloads: drop Cilium version retrieval for script generation
* AWS OIDC instead of access key.
* IPsec key status command implementation.
* Status struct renamed to Encrypt.
* Cipher IPsec key support added.
* IPsec key id renamed to spi. SPI suffix added to support SPI with `+` sign. Tests added.
* `encrypt rotate-key` command implementation.
* chore(deps): update dependency kubernetes-sigs/kind to v0.21.0
* gateway: Upgrade API version
* Prepare for v0.15.22 release
* fix: Remove check function validateInfoForConnect for DisconnectWithHelm function
* README.md: Update the title
* fix(deps): update all go dependencies main
* chore(deps): update docker.io/library/golang:1.21.6-alpine3.19 docker digest to a6a7f1f
* fix(deps): update module github.com/cilium/cilium to v1.15.0
* chore(deps): update dependency cilium/cilium to v1.15.0
* fix(deps): update module github.com/evanphx/json-patch to v5.9.0+incompatible
* chore(deps): update nick-invision/retry action to v3
* connectivity: fix panic if the cilium-health test fails
* Encryption status models and JSON output parsing support added.
* Encryption status sub command implemented.
* Update stable release to v0.15.21
* Prepare for v0.15.21 release
* hooks: split feature detection from setup and validation
* Revert \"gha: cleanup stale AWS-CNI iptables rules in EKS tunnel workflow\"
* fix(deps): update module google.golang.org/grpc to v1.61.0
* chore(deps): update actions/upload-artifact action to v4.3.0
* chore(deps): update dependency cilium/cilium to v1.14.6
* chore(deps): update golang:1.21.6-alpine3.19 docker digest to a6a7f1f
* chore(deps): update golang:1.21.6-alpine3.19 docker digest to 29fd37e
* chore(deps): update docker.io/library/golang:1.21.6-alpine3.19 docker digest to 51a7800
* bgp: enhance defaulting of `bgp routes` command
* connectivity: determine Pod CIDRs from CiliumNodes
* connectivity: retrieve CiliumNode information
* fix(deps): update all go dependencies main
* test: allow to tune sysdump collection policy on a per test basis
* action: introduce the NewGenericAction method
* action: do not attempt to capture hubble flows if given nil source pod
* connectivity: add unknown ICMPv4 code as expected drop reason
* fix(status): correct exit code
* features: improve tunnel feature determination
* features: extract tunnel feature determination in separate function
* chore(deps): update all github action dependencies to v2.1.0
* Go workflow: Add merge_group trigger
* Go workflow: Remove Cross-build step
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to e046063
* make: allow building with debug symbols
* sysdump: don\'t specify --follow while collecting hubble flows
* chore(deps): update actions/upload-artifact action to v4.2.0
* bgp: routes CLI - update min. cilium version, use `cilium` binary
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 83fc333
* connectivity: extract the encapsulated packets tcpdump filter
* connectivity: fix broken tcpdump filter matching encapsulated packets
* connectivity: generalize the sniffer logic
* connectivity: extract the sniffer logic into a separate package
* connectivity: extract safeBuffer into a separate package
* logging: add DebugEnabled method to Action
* fix(deps): update module github.com/cilium/cilium to v1.15.0-rc.1
* chore(deps): update azure/login action to v1.6.1
* connectivity: only wait for daemonsets if needed
* chore(deps): update actions/upload-artifact action to v4.1.0
* connectivity: add host to pod check
* bgp: Make `bgp neighbors` an alias for `bgp peers` command
* bgp: Add command for retrieving bgp routes
* refactor: improve error messaging for version command Signed-off-by: ssttehrani
* clustermesh: fix hardcode at service type
* Bump alpine images to 3.19
* Update stable release to v0.15.20
* Prepare for v0.15.20 release
* chore(deps): update actions/download-artifact action to v4.1.1
* ci: remove unnecessary steps unlabeling nodes in kind workflow
* ci: unique artifact name for junit reports in kind workflow
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 51d373b
* chore(deps): update quay.io/cilium/json-mock docker tag to v1.3.8
* chore(deps): update go to v1.21.6
* defaults: Ignore XfrmInStateInvalid errors if rare
* chore(deps): update golang docker tag to v1.21.6
* chore(deps): update actions/download-artifact action to v4.1.0
* chore(deps): update google-github-actions/auth action to v2.0.1
* connectivity: configure pause as entrypoint
* fix(deps): update all go dependencies main
* chore(deps): update all github action dependencies to v4
* chore(deps): update docker.io/library/golang:1.21.5-alpine3.18 docker digest to d8b9994
* chore(deps): update google-github-actions/setup-gcloud action to v2.0.1
* chore(deps): update golang:1.21.5-alpine3.18 docker digest to c157305
* chore(deps): update quay.io/cilium/alpine-curl docker tag to v1.9.0
* chore(deps): update azure/login action to v1.6.0
* gha: enable node without cilium tests for clustermesh
* gha: switch to kubeadm.k8s.io/v1beta3 API
* gha: don\'t wait for kind clusters to become ready
* connectivity: explicitly wait for daemonsets to become ready
* connectivity: make from external to pod tests ipv6 friendly
* connectivity: make ingress target echo-other-node deployment
* connectivity: skip more nodeport tests with clustermesh + KPR disabled
* connectivity: detect PodCIDR for both local and remote nodes
* connectivity: fix wait for external deployment with clustermesh
* fix(deps): update all go dependencies main
* fixed spelling mistake in help output
* clustermesh: make status command compatible with external kvstore
* clustermesh: make status command ignore the local cluster entry
* clustermesh: print last status when status --wait fails
* connectivity: don\'t configure pod port information when unused
* WaitForCiliumEndpoint function removed as unneeded.
* DisableEndpointCRD feature implemented to Cilium endpoint checks if it\'s disabled.
* check: rename ExcludedCIDRs to ExcludedCIDRsConf
* tests: egressgw: export WatiForEgressGatewayBpfPolicyEntries
* check: don\'t pass policy YAML to WithCiliumEgressPolicy()
* check: allow to configure pod selector in WithCiliumEgressPolicy()
* check: add ExcludedCIDRsKind enum
* defaults: add \'Host datapath not ready\' to expected drop reasons
* chore(deps): update module github.com/containerd/containerd to v1.7.11 [security]
* internal: export MustUnmarshalYAML/MustUnmarshalYAMLMulti methods
* internal: export EscapeJSONPatchString method
* chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
* chore(deps): update dependency cilium/cilium to v1.14.5
* fix(deps): update all go dependencies main
* fix(deps): update module helm.sh/helm/v3 to v3.13.3
* Thu Dec 21 2023 obsAATTtbadm.net- Update to version 0.15.19:
* Prepare for v0.15.19 release
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to ee22a58
* connectivity: Flag for expected XFRM errors
* connectivity, utils: Refactor computeExpectedDropReasons
* github: eks: bump timeout to 30m
* check: add third client scheduled on a different node
* Move perf tests to separate connectivity subcommand
* Update stable release to v0.15.18
* Prepare for v0.15.18 release
* connectivity: Bump test-connection-disruption img to v0.0.13
* Fri Nov 10 2023 obsAATTtbadm.net- Update to version 0.15.13:
* Prepare for v0.15.13 release
* connectivity: Detect WG encap on >= 1.15
* chore(deps): update actions/checkout action to v4.1.1
* chore(deps): update golang:1.21.3-alpine3.18 docker digest to 96a8a70
* Prepare for v0.15.12 release
* connectivity: Add feature detection for WG encapsulation
* connectivity: Add special case to test WG w/ tunneling
* connectivity: Change iface derivation for WG w/ tunnel
* connectivity: Move dstFilter derivation to getFilter
* connecitivity: Set proto filter in getFilter
* connectivity: Derive dstFilter by calling getFilter
* connectivity: Rename getSourceAddressFilter to getFilter
* chore(deps): update golang:1.21.3-alpine3.18 docker digest to 99bec74
* chore(deps): update module github.com/docker/docker to v24.0.7+incompatible [security]
* Revert \"chore(deps): update dependency cilium/cilium to v1.14.3\"
* connectivity: don\'t use an ephemeral port for the echo server
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 0fd246f
* README.md: remove v0.10.x from release table
* fix(deps): update all go dependencies main
* chore(deps): update golangci/golangci-lint docker tag to v1.55.1
* k8s: outdent else block to please golangci-lint
* go.mod, vendor: update cilium/cilium to latest
* fix(deps): update all go dependencies main
* action: Allow users to skip building CLI
* chore(deps): update dependency cilium/cilium to v1.14.3
* sysdump: Check if enable-envoy-config is set
* connectivity: don\'t run encryption tests on single node
* connectivity: extend encryption tests to validate both directions
* connectivity: add sanity checks for encryption tests
* connectivity: fix encryption validation when host firewall is enabled
* connectivity: fix encryption validation when running in ENI mode
* connectivity: fix pod-to-pod encryption validation
* connectivity: fix host-netns daemonset creation with clustermesh
* gha: cleanup stale AWS-CNI iptables rules in EKS tunnel workflow
* check: turn CurlClientIPCommand into more generic CurlCommandWithOutput
* check: add CurlCommandParallelWithOutput helper
* check: simplify NodeportService peer implementation
* check: add PodEchoIP peer implementation
* action: Do not install released vsn if CI vsn is specified
* Replace --helm-set with --set
* echo-external-node: Check if NodeWithoutCilium is enabled
* Update stable release to v0.15.11
* Prepare for v0.15.11 release
* fix(deps): update all go dependencies main
* vendor: Remove \"replace github.com/docker/docker\"
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 2ebcd9a
* chore(deps): update go to v1.21.3
* chore(deps): update module golang.org/x/net to v0.17.0 [security]
* chore(deps): update golang docker tag to v1.21.3
* check: Support SIGTERM with --pause-on-fail
* check: Fix pause on failure for test fail/fatal
* check: Refactor common failure paths
* sysdump feature detection: Don\'t depend on Cilium version
* sysdump: Detect if Gateway API support is enabled
* Update stable release to v0.15.10
* Check Auth Cert Provider status
* dep: Bump cilium/cilium to v1.15.0-pre.1+
* Prepare for v0.15.10 release
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to b3c6e53
* chore(deps): update golang docker tag to v1.21.2
* sysdump: Detect features from cilium-config ConfigMap
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to e2eb1d5
* chore(deps): update docker.io/library/golang:1.21.2-alpine3.18 docker digest to a76f153
* renovate: update Go image version used to build releases
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to a2251c1
* chore(deps): update docker.io/library/golang docker tag to v1.21.2
* connectivity test: Fix detectFeatures() logic
* chore(deps): update docker.io/library/golang:1.21.1-alpine3.18 docker digest to 1c9cc94
* fix(deps): update all go dependencies main
* chore(deps): update dependency go to v1.21.2
* helm-upgrade-clustermesh: Free up some disk space
* chore(deps): update nick-invision/retry action to v2.9.0
* clustermesh: Make cilium symlink install idempotent
* Prepare for v0.15.9 release
* clustermesh: Adapt clustermesh script to install cilium-dbg
* chore(deps): update aws-actions/configure-aws-credentials action to v4.0.1
* refactor: Move FeatureSet to a separate package
* chore(deps): update docker.io/library/golang:1.21.1-alpine3.18 docker digest to d101f4e
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to e718668
* Move IPFamily to a separate \"features\" package
* sysdump: Specify default selectors for log collection tasks
* install: Avoid using deprecated \"tunnel\" flag
* sysdump: Cache Cilium pods and cilium-config ConfigMap
* chore(deps): update module github.com/docker/docker to v23.0.7+incompatible
* fix(deps): update all go dependencies main
* golangci-lint: enable goheader check
* Refactor extractFeaturesFromConfigMap()
* utils: export WaitObserver methods into wait package
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 0bc2fda
* Clean up the node feature detection logic
* connectivity: test referencing nodes by CIDR
* sysdump: Collect Tetragon PodInfo custom resources
* chore(deps): update actions/checkout action to v4.1.0
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 84f7fcb
* fix(deps): update module google.golang.org/grpc to v1.58.2
* check: export label prefixes constants
* fix(deps): update module google.golang.org/grpc to v1.58.1
* check: export ciliumLogs method
* chore(deps): update dependency cilium/cilium to v1.14.2
* fix(deps): update all go dependencies main
* make: use short golangci-lint version format when comparing versions
* clustermesh: Add support for service annotations
* Update stable release to v0.15.8
* Prepare for v0.15.8 release
* connectivity: convert conn-disrupt-dispatch-interval to duration
* chore(deps): update docker/build-push-action action to v5
* chore(deps): update docker/setup-buildx-action action to v3
* chore(deps): update docker/build-push-action action to v4.2.1
* chore(deps): update docker/login-action action to v3
* connectivity: Expose test-conn-disrupt dispatch period
* chore(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 [security]
* fix(deps): update all go dependencies main
* chore(deps): update aws-actions/configure-aws-credentials action to v4
* chore(deps): update aws-actions/configure-aws-credentials action to v3.0.2
* chore(deps): update docker/build-push-action action to v4.2.0
* chore(deps): update actions/upload-artifact action to v3.1.3
* chore(deps): update go to v1.21.1
* connectivity: Reduce test-conn-disrupt-client interval to 10ms
* connectivity: Delete test-conn-disrupt pods after running tests
* Add operator and clustermesh metrics to sysdump
* Scrape Kubernetes metrics in sysdump
* fix(deps): update all go dependencies main
* chore(deps): update actions/checkout action to v4
* external-workloads: explicitly configure ClusterID/Name
* Update stable release to v0.15.7
* Prepare for v0.15.7 release
* connectivity: Use slices.Clone
* connectivity: Add secondary network NodePort tests
* chore(deps): update aws-actions/configure-aws-credentials action to v3.0.1
* chore(deps): update docker/setup-buildx-action action to v2.10.0
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to ba1b914
* Update bgp.go#2
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 171ecc4
* fix(deps): update module github.com/cilium/cilium to v1.14.1
* chore(deps): update aws-actions/configure-aws-credentials action to v3
* chore(deps): update actions/checkout action to v3.6.0
* connectivity: add and complete a few missing comments
* connectivity: display reason for skipping Tests and Scenarios
* Clarify classic / helm mode incompatibilities
* install: remove deprecated kube-proxy-replacement CLI flag
* chore(deps): update golangci/golangci-lint docker tag to v1.54.2
* implement helm get values with sysdump
* go.mod: bump Go to 1.21
* connectivity: print all captured packets
* connectivity: fix node-to-node encryption tests
* connectivity: document feature detection order
* connectivity: fix tunnel feature defaults
* Fine tune CODEOWNERS file
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 196c2d0
* install: Remove some auto-detection log messages
* fix(deps): update all go dependencies main
* chore(deps): update golangci/golangci-lint-action action to v3.7.0
* chore(deps): update docker.io/coredns/coredns docker tag to v1.11.1
* chore(deps): update dependency cilium/cilium to v1.14.1
* Tue Aug 29 2023 obsAATTtbadm.net- Update to version 0.15.6:
* Prepare for v0.15.6 release
* fix(deps): update all go dependencies main
* chore(deps): update actions/setup-go action to v4.1.0
* Update missing dependencies to Go 1.21
* Bump k8s to 1.28
* chore(deps): update golangci/golangci-lint docker tag to v1.54.1
* chore(deps): update dependency go to v1.21.0
* Expand warning about big sysdump
* fix(deps): update all go dependencies main
* gha: exercise connectivity disruption tests
* disruption tests: check restart counts from both clusters
* disruption tests: fix wait for deployments
* disruption tests: create svc in both clusters and mark as global
* connectivity tests: anticipate namespace creation in remote cluster
* chore(deps): update dependency ubuntu to v22
* chore(deps): update golangci/golangci-lint docker tag to v1.54.0
* connectivity: get nodename on which a pod is running via PodStatus
* chore(deps): update docker.io/coredns/coredns docker tag to v1.11.0
* clustermesh: fix failure during CA certificate retrieval
* chore(deps): update dependency go to v1.20.7
* Update stable release to v0.15.5
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to c62ce11
* Prepare for v0.15.5 release
* Update stable release to v0.15.4
* fix(deps): update all go dependencies main
* renovate: Don\'t update golang.org/x/exp
* fix: Changed regex to include capital letters.
* clustermesh status: improve error reporting when not ready
* clustermesh status: validate expected number of clusters
* clustermesh status: consistent output order
* clustermesh status: fix not ready message
* clustermesh status: drop wait logic from ClusterMeshConnectivity
* clustermesh status: always check deployment status
* clustermesh status: remove redundant service check
* clustermesh status: drop skip service check parameter
* wait: always log error upon the first failure
* Update the error log exceptions
* gha: configure routing mode in external-workloads workflow
* dockerfile: include CA certificates
* fix(deps): update module github.com/cilium/cilium to v1.14.0
* chore(deps): update dependency cilium/cilium to v1.14.0
* metrics: Set first retrieved metrics to 0 if absent
* kind: Run every 2 hours
* kind: Upload all the sysdumps
* connectivity: Hide --flush-ct
* fix(cli-example): optimize the example of the \'install\' command line.
* connectivity: Special inconclusive result treatment for ping command
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to d51b96d
* connectivity: Fix fetching of XFRM counters
* fix(deps): update all go dependencies main
* fix(deps): update module github.com/cilium/cilium to v1.14.0-snapshot.6
* Prepare for v0.15.4 release
* connectivity: add xfrm error check for IPsec conn disrupt test
* connectivity: generalize upgrade test
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 7338d0c
* kind: Configure external targets inside the cluster
* connectivity: Add an error log exception
* connectivity: Add flags to override CA bundle secret
* connectivity: Bump test-conn-disrupt img to v0.0.4
* Update stable release to v0.15.3
* Prepare for v0.15.3 release
* Update README.md
* k8s.NewClient: Initialize Helm action configuration
* Revert \"Create a separate RESTClientGetter for Helm client\"
* Partly revert \"connectivity: enable IPv6 test fort per-endpoint routing\"
* chore(deps): update dependency kubernetes-sigs/kind to v0.20.0
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 6f694cf
* connectivity: Wait for test-conn-disrupt-server deployment
* connectivity: Fix usage of src/dst clients in test-conn-disrupt
* connectivity: Use readiness probe for test-conn-disrupt-server
* fix(deps): update module helm.sh/helm/v3 to v3.12.2
* fix(deps): update all go dependencies main
* .github/workflows: let renovate update kind version
* chore(deps): update docker/setup-buildx-action action to v2.9.1
* Update stable release to v0.15.2
* Prepare for v0.15.2 release
* chore(deps): update dependency go to v1.20.6
* fix(deps): update all go dependencies main
* metrics: Fix format error log in validateMetric
* peer: Add a method on service to return the name without the namespace
* hooks: Add a setup and validate a new hook for extras
* fixup! sysdump: Collect node init Pod logs and DaemonSet
* sysdump: Collect node init Pod logs and DaemonSet
* sysdump: do not fail if cilium is not installed
* Update stable release to v0.15.1
* Fix pod summary for large numbers of pods
* GHA: fix \'install-cilium-cli\' issue when building from source
* Prepare for v0.15.1 release
* chore(deps): update helm/kind-action action to v1.8.0
* Eksctl version pinned.
* connectivity: Remove test-conn-disrupt tolerations
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 8a837d8
* connectivity: Ignore failedToListCRDs error
* connectivity: enable IPv6 test for per-endpoint routing
* Create a separate RESTClientGetter for Helm client
* fix(deps): update all go dependencies main
* chore(deps): update docker/setup-buildx-action action to v2.9.0
* fix(deps): update all go dependencies main
* Fix link in reference to helm mode
* connectivity: fix service propagation check with mismatching IP families
* .github/workflows: remove master mirror
* kind multi cluster: Use a dot in cluster names
* Helm mode: Handle \"cluster.name\" Helm value
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 95101b8
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to 6e47916
* Helm mode: don\'t suggest removed Azure flag
* sysdump: Use intermediate import package for supported envoy resources
* dep: Bump cilium/cilium to v1.14.0-rc0
* chore(deps): update docker/setup-buildx-action action to v2.8.0
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 7f1b8b8
* connectivity: Fix trailing newline in tail call drop counts
* fix(deps): update all go dependencies main
* connectivity: Add op=Exists toleration for test-conn-disrupt
* Update stable release to v0.15.0
* Prepare for v0.15.0 release
* connectivity: wait for service propagation in agents
* connectivity: extract and uniform wait functions
* connectivity: add Logger interface
* Use Helm mode by default
* eks-uninstall: Set CILIUM_CLI_MODE environment variable
* uninstall: Remove io.cilium/aws-node-enabled node selector
* defaults: update connectivity test alpine curl image version
* connectivity: Expose Features on ConnectivityTest
* GHA: extend \'install-cilium-cli\' to build from source
* Update stable release to v0.14.8
* chore(deps): update dependency cilium/cilium to v1.13.4
* Mon Jun 26 2023 obsAATTtbadm.net- Update to version 0.14.8:
* Prepare for v0.14.8 release
* renovate: let renovate update default Cilium version
* sysdump: Add more envoy resource types
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to a1bca94
* chore(deps): update all go dependencies main
* Using direnv to set CLI env vars
* Refactor cilium cluster version detection
* Add Helm Clustermesh disconnect command
* connectivity: Address migrate-svc changes
* fix(deps): update github.com/cilium/tetragon/pkg/k8s digest to dbf8f0c
* .github/workflows: don\'t error out if pkill finds no processes
* internal/cli/cmd: Fix error displayed on failure to disable Hubble
* internal/cli/cmd: Add line breaks after error messages
* install: Normalize --helm-
* flags
* connectivity: Add checks for drops due to missed tail calls
* connectivity: Check for Cilium agent errors
* while applying policies, wait for all expected policy revisions.
* chore(deps): update aws-actions/configure-aws-credentials action to v2.2.0
* clustermesh enable: add enable-kvstoremesh flag
* chore(deps): update docker/setup-buildx-action action to v2.7.0
* sysdump: collect spire server and agent configuration
* sysdump: collect spire server statefulset & agent daemonset
* sysdump: collect SPIRE agent and server Pod logs
* fix(deps): update all go dependencies main
* chore(deps): update docker/build-push-action action to v4.1.1
* chore(deps): update golangci/golangci-lint docker tag to v1.53.3
* sysdump: collect CiliumPodIPPools
* bgp: minor fix to bgp command help output
* fix(deps): update module github.com/cilium/cilium to v1.14.0-snapshot.4
* sysdump: Fix wrong CiliumLoadBalancerIPPools collector
* connectivity: Add upgrade tests
* connectivity: Add --flush-ct
* fix(deps): update all go dependencies main
* Update stable release to v0.14.7
* Mon Jun 19 2023 obsAATTtbadm.net- Update to version 0.14.7:
* Prepare for v0.14.7 release
* helm mode: Handle azure.resourceGroup Helm value
* chore(deps): update golangci/golangci-lint-action action to v3.6.0
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to 2a6835e
* chore(deps): update actions/checkout action to v3.5.3
* chore(deps): update docker/build-push-action action to v4.1.0
* chore(deps): update dependency go to v1.20.5
* sysdump: gather tetragon namespaced policies
* External workloads CI fixed.
* fix(deps): update module github.com/cilium/hubble to v0.11.6
* install: Add node affinity for Operator
* clustermesh connect: configure PKI upon CA mismatch
* helm mode: add implementation for clustermesh connect
* Helm mode: Use Helm chart version as running version
* Make CI test resources unique for retries.
* fix(deps): pin dependencies
* status: Print Helm chart version in Helm mode
* chore(deps): update all github action dependencies
* mutual-auth: Update the terminology/wording
* connectivity: Ability to add custom annotations to test deployment
* connectivity: Add annotations map helper type
* k8s: Add ability to specify namespace metadata
* Update stable release to v0.14.6
* chore(deps): update golangci/golangci-lint-action action to v3.5.0
* chore(deps): update golangci/golangci-lint docker tag to v1.53.2
* install: Skip version validation in Helm mode
* uninstall: Skip version detection / validation in Helm mode
* chore(deps): update golangci/golangci-lint docker tag to v1.53.1
* renovate: ignore pflag Go mod updates
* fix(deps): update module github.com/cilium/cilium to v1.14.0-snapshot.3
* Mon Jun 12 2023 obsAATTtbadm.net- Update to version 0.14.6:
* Prepare for v0.14.6 release
* README.md: update Cilium version in examples to latest stable releases
* ci: update Cilium version to v1.13.3
* defaults: install Cilium v1.13.3 by default
* multicluster tests: simplify secret rename logic
* chore(deps): update aws-actions/configure-aws-credentials action to v2.1.0
* fix(deps): pin dependencies
* ci/workflow: simplify junit uploads
* gh/workflow: change multicluster provisioning to none blocking mode
* fix(deps): update module github.com/stretchr/testify to v1.8.4
* connectivity/check: store metrics by pointer in TestMetricsIncrease
* install: Do not use individual HelmOpts
* install: Add native datapath mode
* connectivity: Add sanity check for IP routes w/o --include-unsafe-tests
* connectivity: add full egress gateway test suite
* check: delete CiliumEgressGatewayPolicies after test run
* check: add NodeportService wrapper
* chore(deps): update docker.io/coredns/coredns docker tag to v1.10.1
* Makefile: fix golangci-lint renovate datasource tag annotation
* Update stable release to v0.14.5
* Prepare for v0.14.5 release
* renovate: add annotations for connectivity test images
* sysdump: refactor submitTetragonBugtoolTasks to take defaults as parameters
* connectivity/check: pass metrics to metricsIncrease by pointer
* renovate: add renovate/stop-updating label on renovate\'s PRs
* Update stable release to v0.14.4
* connectivity: Skip north-south-loadbalancing-with-l7-policy w/o L7
* connectivity: Fix installing IP routes to nodes w/o Cilium
* connectivity: Fix FeatureTunnel.Mode
* Prepare for v0.14.4 release
* connectivity: add property flag fot junit
* Makefile: bump Go to v1.20.4 for release target
* chore(deps): update docker.io/library/busybox:stable-glibc docker digest to bf30051
* docs: Add an example for setting image.override
* Add GatewayAPI resources to sysdump
* Allow to pass --insecure to curl
* upgrade: Check for error before accessing release
* connectivity: Split host-netns daemonset into two
* connectity: Deploy host netns pods by default
* connectivity: Remove --datapath and add --include-unsafe-tests
* gh/workflows: Bump timeout in kind.yaml
* connectivity: Skip L7 N/S test on < v1.13.3
* connectivity: Add WithCiliumVersion
* connectivity: Disable flow validation for N/S with KP
* connectivity: Fix feature detection of KPR friends
* connectivity: Add FlowFilters() method for TestPeer
* connectivity: Install podCIDR => nodeIP on non-Cilium nodes
* connectivity/check: Add CAP_NET_ADMIN for host-netns ds
* check: update tunneling detection logic
* check: make (Service)Address() return an IP address
* cli: Export Version var to be set externally
* ci: Add prometheus enabled in kind config
* Add metrics increase validation and a simple test to check metrics on total request
* Add metrics validation in tests
* Collect metrics in Action
* Extract Result from policy.go into its own file
* Add metrics collector logic
* Add k8s dialer to port foward properly
* status: provide additional context for disabled Envoy DaemonSet
* readme.md: updated status section with updated envoy output
* sysdump: collect cilium envoy daemonset & configmap
* sysdump: collect logs from cilium envoy pods
* status: add cilium envoy daemonset
* ci: fix gke network starvation
* helm mode: autodetect service parameters for clustermesh
* fix(deps): update module github.com/stretchr/testify to v1.8.3
* fix(deps): pin dependencies
* helm mode: Add external workloads test coverage
* clustermesh enable: Add a flag to set externalWorkloads.enabled
* connectivity: Skip IPv6 requests in north-south-loadbalancing-with-l7-policy when running on < 1.14.0 Cilium
* sysdump: Don\'t save cilium-etcd-secrets
* connectivity: Add GetTest method
* connectivity: Move template utils from internal
* connectivity: Add WithFinalizer to register test finalizers
* connectivity: Expose connectivity test k8s clients
* connectivity: Add WithSetupFunc to register setup callbacks
* cli: Add hooks and exported NewCiliumCommand
* helm mode: Add EKS tunnel mode test coverage
* sysdump: Add support for CiliumCIDRGroup CRD
* install: Move the logic to unschedule aws-node to preinstall
* helm mode: Add EKS test coverage
* Sun May 21 2023 obsAATTtbadm.net- Update to version 0.14.3:
* Prepare for v0.14.3 release
* chore(deps): update helm/kind-action action to v1.7.0
* build(deps): bump github.com/docker/distribution
* chore(deps): update actions/setup-go action to v4.0.1
* Remove last-applied-configuration from etcd-secret in sysdump
* fix(deps): pin dependencies
* helm mode: Clarify upgrade command
* fix(deps): pin dependencies
* fix(deps): pin dependencies
* chore(deps): update google/mirror-branch-action digest to 30c52ee
* renovate: schedule Go module updates once a week
* uninstall: allow ciliumVersion to start with \"v\"
* install: fix TestK8sInstaller_getHelmValuesKind after update to yaml.v3
* fix(deps): update module gopkg.in/yaml.v2 to v3
* connectivity: Improve the logic to wait for Hubble Relay
* Add helm mode test coverage for AKS BYOCNI
* unit test: Restore the original env variable using defer
* fix(deps): pin dependencies
* fix(deps): update all go dependencies main
* chore(deps): update google/mirror-branch-action digest to 884625c
* .github/workflows: add missing GH action version annotations
* chore(deps): update google-github-actions/setup-gcloud action to v1.1.1
* chore(deps): update dependency go to v1.20.4
* chore(deps): update all github action dependencies
* Add a function to check if the CLI is in Helm mode
* Farewell dependabot 👋
* connectivity test: add junit output
* Remove az-binary check
* Don\'t enable nodeinit on EKS when not needed
* Update stable release to v0.14.2
* .github/workflows: add GH action version annotations
* renovate: exclude Cilium forks and k8s from automatic updates
* renovate: fix invalid whitespace characters
* renovate: fix invalid JSON syntax
* .github/workflows: bump AKS BYOCNI workflow timeout
* Add renovate configuration
* helm mode: add recursive deprecated secret logic
* Wed May 10 2023 obsAATTtbadm.net- Update to version 0.14.2:
* Prepare for v0.14.2 release
* Revert \"suite: disable KNP tests when endpoint routes and IPv6 are enabled\"
* connectivity: Fix IPv6 skipping when EP routes are on
* connectivity: enable outside to nodeport via IPv6 when IPsec is enabled
* Remove AKS Azure IPAM test coverage
* suite: disable KNP tests when endpoint routes and IPv6 are enabled
* features: add RequireFeatureDisabled helper
* workflows: kind: run IPSec connectivity test in test-namespace
* connectivity: derive egress gateway node name instead of hardcoding it
* connectivity: add basic egress gateway test
* connectivity: add support for CiliumEgressGatewayPolicy resources
* connectivity: add echo-external deployment
* features: add support for probing the egress gateway feature
* go.mod, vendor: bump google.golang.org/grpc from 1.54.0 to 1.55.0
* Handle OCI repositories
* README.md: Add upgrade command samples
* Update stable release to v0.14.1
* Prepare for v0.14.1 release
* connectivity: report peer name in \"no flows recorded\" log message
* connectivity: Add tests for egress rule with SA
* connectivity: Rename existing SA tests
* connectivity: add retry to external targets
* Dockerfile: Bump library/golang
* Replace versioncheck.Version with semver.ParseTolerant
* sysdump: replace deprecated methods
* connectivity/check: use existing label constants from corev1
* go.mod, vendor: update k8s deps to v1.27.1
* connectivity: test accessing NodePort from outside with L7 policy
* helm mode: Make Helm chart repository configurable
* Add GHA to install Cilium CLI executable
* Add CI workflow for clustermesh via helm
* multicluster CI: Use LoadBalancer for GKE etcd
* Address wording an style nits of #1550
* golangci-lint: fix warnings
* golangci-lint: fix unused parameter warnings
* build: update golangci-lint to v1.52.2
* connectivity: Retry on inconclusive results
* sysdump: Fix writing to absolute path
* helm mode: Set default clustermesh service type to NodePort
* helm: add unit tests for ParseVals
* Enable Helm mode matrix for multicluster tests
* Add cilium clustermesh {enable,disable} using Helm
* Allow the Helm timeout to be set on uninstall
* connectivity/tests: omit IPs and vendor names from test names
* connectivity: Retry getting the policy revision
* fixes versioncheck for l7 proxy disabling with wireguard encryption
* connectivity: Add Ingress related tests
* connectivity: Add Ingress resource for echo service
* Remove \"Release Date\" column from the release table
* Update stable release to v0.14.0
* Prepare for v0.14.0 release
* go.mod, vendor: bump github.com/docker/docker
* defaults: bump json-mock to 1.3.5
* cli: adapt helm chart cleanup of deprecated hubble values
* .github: add mirror from main -> master
* docs: update references to the main branch
* ci: rename master -> main
* Adjust cilium/cilium URLs after primary branch rename to `main`
* Add documentation for helm installation mode
* ci: bump google-github-actions/auth from 1.0.0 to 1.1.0
* ci: update Cilium version to v1.13.2
* defaults: install Cilium v1.13.2 by default
* go.mod, vendor: pull in latest cilium charts
* misc: replace label goto with extracted method or for loops
* misc: replace label breaks with extracted method
* Default Helm Upgrade to not reuse values
* Clean up signature and usage of helm Upgrade func
* Add chart version as parameter for upgrade
* Expose helm reset/reuse values as flags for upgrade
* Add upgrade implementation using Helm
* Factor out ListVersions from preinstall
* .github: Prepare workflows for tests with a 3rd node
* connectivity: Implement FromCIDR tests
* connectivity: Refactor scenarios passed to tests
* Rename current CIDR tests to to-cidr.go
* connectivity/check: Validate --external-from-cidrs
* .github/workflows: Install static routes for nodes without Cilium
* .github/workflows: Label nodes for --nodes-without-cilium
* internal/cli/cmd: Clarify --nodes-without-cilium
* connectivity/check: Deploy host-netns daemonset by default
* ci: bump actions/checkout from 3.5.1 to 3.5.2
* BGP: Introduce new cli to get bgp state
* Add connectivity tests for auth
* go.mod, vendor: bump helm.sh/helm/v3 from 3.11.2 to 3.11.3
* connectivity: Make detected Cilium Agent version available for feature detection
* ci: bump actions/checkout from 3.5.0 to 3.5.1
* Refactor generic policy to Cilium policy
* Add KNPs tests scenarios
* Add KNPs utils methods
* Add KNP feature
* Add CRD feature and CNP enabled requirement
* helm mode install: Add --dry-run / --dry-run-helm-values flags
* Use --set-string for node affinity
* go.mod, vendor: bump github.com/cloudflare/cfssl from 1.6.3 to 1.6.4
* vendor: get latest cilium
* install: Support --nodes-without-cilium in Helm install mode
* Fix quotation for Cilium schedule affinity
* Dockerfile: Bump library/golang
* go.mod, vendor: bump github.com/spf13/cobra from 1.6.1 to 1.7.0
* go.mod, vendor: bump golang.org/x/mod from 0.9.0 to 0.10.0
* helm mode: Test with GKE
* helm mode: Add hubble enable / disable commands
* Add Helm-based install / uninstall commands
* Refactor for Helm-based Cilium installation management
* Dockerfile: Bump library/golang from `08bd1aa` to `1d7fec2`
* Dockerfile: Bump library/golang from `b1f83bc` to `08bd1aa`
* go.mod, vendor: bump github.com/go-openapi/strfmt from 0.21.5 to 0.21.7
* Dockerfile: Bump library/golang from `50e46c1` to `b1f83bc`
* go.mod, vendor: bump google.golang.org/grpc from 1.53.0 to 1.54.0
* Sysdump: Add missing Cilium CRDs
* ci: bump actions/checkout from 3.4.0 to 3.5.0
* Replace deprecated flags with --helm-set
* Tetragon Tracing Policies
* Add a l7 header replace test
* Update stable release to v0.13.2
* Tue Mar 21 2023 obsAATTtbadm.net- Update to version 0.13.2:
* Prepare for v0.13.2 release
* vendor: Pick up the latest cilium
* go.mod, vendor: bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.5
* report IP families that are being tested
* Change the default Cilium version to v1.13.1
* vendor: Pick up the latest github.com/cilium/charts
* uninstall: set \"cni.uninstall\" to true
* ci: bump actions/checkout from 3.3.0 to 3.4.0
* ci: bump actions/setup-go from 3.5.0 to 4.0.0
* clustermesh: correctly mount the etcd data dir in the init container
* Update Go to 1.20.2
* refactor: Break generateManifests() into smaller functions
* internal/utils: match new snapshot release version format
* internal/utils: refactor CheckVersion to return an error
* go.mod, vendor: update cilium to latest master to pull in versioncheck fix
* Dockerfile: Bump library/golang from `0848e98` to `50e46c1`
* connectivity: allow to restrict connectivity test pods using nodeSelector
* install: Generate resource quotas from Helm chart
* ci: bump docker/setup-buildx-action from 2.4.1 to 2.5.0
* helm: fix incorrect log error formatting directive.
* Dockerfile: Bump library/golang
* go.mod, vendor: bump helm.sh/helm/v3 from 3.11.1 to 3.11.2
* ci: bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0
* Enable L7 and k8s secrets in tests
* Adds a test case for L7 policy with TLS
* ingress: Clean-up Ingress related resources
* ingress: Create Ingress Endpoint
* Update Go to 1.20.1
* Update stable release to v0.13.1
* go.mod, vendor: bump golang.org/x/mod from 0.8.0 to 0.9.0
* RELEASE.md: adjust release instructions after change to new release action
* .github/workflows: use tag name instead of fully-formed ref in release name
* .github/workflows: use softprops/action-gh-release in release workflow
* Dockerfile: Bump library/golang from `9266e89` to `bf83658`
* Prepare for v0.13.1 release
* Add profiling data(cpu/heap) of cilium agent to sysdump.
* go.mod, vendor: pull in latest cilium charts for v1.14.0-snapshot.0
* hubble: Patch Cilium DaemonSet with hubble-metrics port
* clustermesh: update etcd version to v3.5.4
* enabled l7Proxy & removed err.log message for WireGuard
* Update stable release to v0.13.0
* connectivity: switch \"waitForPodDNS\" check to use any IP address family
* connectivity: rename IPFamilyNone to IPFamilyAny
* go.mod, vendor: bump github.com/stretchr/testify from 1.8.1 to 1.8.2
* Prepare for v0.13.0 release
* connectivity: Use InternalIP for NodePort requests on GKE
* connectivity: Disable IPsec NodePort from outside via IPv6
* connectivity: Disable IPv6 with EP feat when netpols exist
* connectivity: Add IPv6 tests
* connectivity: Extend IPCache check to search for all addrs
* connectivity: Store Cilium nodes
* connectivity: Add v4/v6 and endpoint-routes features
* connectivity: Add IPFamily
* ci: update Cilium version to v1.13.0
* defaults: install Cilium v1.13.0 by default
* sysdump: distil events in to a nice filterable HTML table
* go.mod, vendor: bump github.com/google/gops from 0.3.26 to 0.3.27
* status: detect when DaemonSets and Deployments are rolling out
* test: Wait for policy change if any policy changed
* defaults: Lower connectivity timeouts
* Wait for deletion of agent DaemonSet before deleting other resources.
* ingress: Create Ingress Service if required
* ingress: Correct Ingress Class name
* connectivity: skip nodeport tests with clustermesh if KPR is disabled
* Dockerfile: Bump library/golang
* connectivity tests: support IPv6 in ICMP-related netpols
* Update stable release to v0.12.13
* Thu Feb 16 2023 obsAATTtbadm.net- Update to version 0.12.13:
* Prepare for v0.12.13 release
* vendor: Pick up github.com/cilium/cilium v1.13.0
* install: fix support for multi-object files
* uninstall: remove cilium-config-agent role/rolebinding
* feat: add json output for status and clustermesh status
* go.mod, vendor: bump github.com/cilium/workerpool from 1.1.3 to 1.2.0
* go.mod, vendor: bump golang.org/x/mod from 0.7.0 to 0.8.0
* go.mod, vendor: bump helm.sh/helm/v3 from 3.11.0 to 3.11.1
* go.mod, vendor: bump google.golang.org/grpc from 1.52.3 to 1.53.0
* ci: bump docker/setup-buildx-action from 2.4.0 to 2.4.1
* ci, make: update golangci-lint to v1.51.1
* k8s: don\'t append to non-zero slice with zero entries in (
*Client).ListAPIResources
* ci: bump google-github-actions/setup-gcloud from 1.0.1 to 1.1.0
* ci: use cloud provider specific external target for pod-to-world tests
* go.mod, vendor: update github.com/cilium/hubble to v0.11.1
* Update Go to 1.20
* ci, make: update golangci-lint to v1.51.0
* Dockerfile: Bump library/golang
* connectivity: drop pre-1.11 allow-except-world test
* clustermesh: adapt global service annotations
* clustermesh: Add missing brackets of etcd option
* Check if context is cancelled before next iteration
* ci: bump docker/setup-buildx-action from 2.2.1 to 2.4.0
* ci: bump docker/build-push-action from 3.3.0 to 4.0.0
* ci: update Cilium version to v1.12.6
* defaults: update default Cilium version to v1.12.6
* go.mod, vendor: pull in latest cilium charts for v1.10.19, v1.11.13, v1.12.6
* status: rename Hubble status to Hubble Relay
* [connectivity] add container name for health tests
* go.mod, vendor: bump google.golang.org/grpc from 1.52.0 to 1.52.3
* dependabot: bump open pull request limit for Go module updates
* dependabot: label dependabot PRs as release blocker
* dependabot: add custom prefixes to dependabot commit subjects
* sysdump: Collect new CR introduced as part of 1.13
* vendor: Bump cilium to v1.13.x version
* sysdump: always log used namespaces
* Honor global namespace flag in sysdump command
* fix(connectivity): Add node-local-dns entitiy match for local ip usage case
* build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0
* build(deps): bump helm.sh/helm/v3 from 3.10.3 to 3.11.0
* connectivity: Make pod to world test more configurable
* connectivity: Set PreferDualStack for test services
* build(deps): bump docker/build-push-action from 3.2.0 to 3.3.0
* install: Do not enable BPF masq if ipv6 is enabled
* Update cilium vendoring
* install: Auto-enable BPF masquerade
* Update Go to 1.19.5
* build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0
* build(deps): bump library/golang
* RELEASE.md: check and merge PRs before the release
* connectivity: Display last error after waiting k8s resources timeouts
* Update stable release to v0.12.12
* Tue Feb 14 2023 TB Adm - Build version 0.12.12