Skip to content

maps/multicast: set GroupV4OuterMap.logger in OpenGroupV4OuterMap#42080

Merged
tklauser merged 1 commit intomainfrom
pr/tklauser/multicast-set-logger-opengroupv4outermap
Oct 9, 2025
Merged

maps/multicast: set GroupV4OuterMap.logger in OpenGroupV4OuterMap#42080
tklauser merged 1 commit intomainfrom
pr/tklauser/multicast-set-logger-opengroupv4outermap

Conversation

@tklauser
Copy link
Copy Markdown
Member

@tklauser tklauser commented Oct 8, 2025

Otherwise multicast map access from cilium-dbg will cause a panic due to nil-pointer dereference:

[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x8a8018]

goroutine 1 [running]:
log/slog.(*Logger).Handler(...)
	/usr/local/go/src/log/slog/logger.go:121
log/slog.(*Logger).Enabled(0x49fce0?, {0x3cb4410?, 0x6454960?}, 0x735f747361636d5f?)
	/usr/local/go/src/log/slog/logger.go:168 +0x18
log/slog.(*Logger).log(0x0, {0x3cb4410?, 0x6454960?}, 0xfffffffffffffffc, {0x3792070, 0x12}, {0xc0008eb918, 0x2, 0x2})
	/usr/local/go/src/log/slog/logger.go:244 +0x99
log/slog.(*Logger).Debug(...)
	/usr/local/go/src/log/slog/logger.go:199
github.com/cilium/cilium/pkg/ebpf.registerMap(0xc000823700)
	/go/src/github.com/cilium/cilium/pkg/ebpf/map_register.go:22 +0x114
github.com/cilium/cilium/pkg/ebpf.(*Map).OpenOrCreate(0xc000823700)
	/go/src/github.com/cilium/cilium/pkg/ebpf/map.go:187 +0x68a
github.com/cilium/cilium/pkg/maps/multicast.newSubscriberV4InnerMap(0x0)
	/go/src/github.com/cilium/cilium/pkg/maps/multicast/subscribermap.go:320 +0xb2
github.com/cilium/cilium/pkg/maps/multicast.GroupV4OuterMap.Insert({0xc0008236c0?, 0x22?, 0x0?}, {{0x0?, 0x0?}, {0xc00000f680?}})
	/go/src/github.com/cilium/cilium/pkg/maps/multicast/subscribermap.go:138 +0x65
github.com/cilium/cilium/cilium-dbg/cmd.init.func74(0xc000cded00?, {0xc000d95ca0, 0x1, 0x1})
	/go/src/github.com/cilium/cilium/cilium-dbg/cmd/bpf_multicast_groups.go:97 +0x10c
github.com/spf13/cobra.(*Command).execute(0x5ed4120, {0xc000d95c60, 0x1, 0x1})
	/go/src/github.com/cilium/cilium/vendor/github.com/spf13/cobra/command.go:1019 +0xae7
github.com/spf13/cobra.(*Command).ExecuteC(0x5ed91a0)
	/go/src/github.com/cilium/cilium/vendor/github.com/spf13/cobra/command.go:1148 +0x465
github.com/spf13/cobra.(*Command).Execute(...)
	/go/src/github.com/cilium/cilium/vendor/github.com/spf13/cobra/command.go:1071
github.com/cilium/cilium/cilium-dbg/cmd.Execute()
	/go/src/github.com/cilium/cilium/cilium-dbg/cmd/root.go:45 +0x1a
main.main()
	/go/src/github.com/cilium/cilium/cilium-dbg/main.go:9 +0xf

Fixes: 4ce357a ("pkg/maps: migrate to slog")
Fixes #42079

Fix a fatal error when accessing multicast map using cilium-dbg bpf multicast

@tklauser tklauser requested a review from a team as a code owner October 8, 2025 22:22
@tklauser tklauser added release-note/bug This PR fixes an issue in a previous release of Cilium. area/multicast Impacts the Multicast feature. cilium-cli This PR contains changes related with cilium-cli labels Oct 8, 2025
@tklauser tklauser added the needs-backport/1.18 This PR / issue needs backporting to the v1.18 branch label Oct 8, 2025
@tklauser
Copy link
Copy Markdown
Member Author

tklauser commented Oct 8, 2025

/test

Otherwise multicast map access from cilium-dbg will cause a panic due to
nil-pointer dereference:

[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x8a8018]

goroutine 1 [running]:
log/slog.(*Logger).Handler(...)
	/usr/local/go/src/log/slog/logger.go:121
log/slog.(*Logger).Enabled(0x49fce0?, {0x3cb4410?, 0x6454960?}, 0x735f747361636d5f?)
	/usr/local/go/src/log/slog/logger.go:168 +0x18
log/slog.(*Logger).log(0x0, {0x3cb4410?, 0x6454960?}, 0xfffffffffffffffc, {0x3792070, 0x12}, {0xc0008eb918, 0x2, 0x2})
	/usr/local/go/src/log/slog/logger.go:244 +0x99
log/slog.(*Logger).Debug(...)
	/usr/local/go/src/log/slog/logger.go:199
github.com/cilium/cilium/pkg/ebpf.registerMap(0xc000823700)
	/go/src/github.com/cilium/cilium/pkg/ebpf/map_register.go:22 +0x114
github.com/cilium/cilium/pkg/ebpf.(*Map).OpenOrCreate(0xc000823700)
	/go/src/github.com/cilium/cilium/pkg/ebpf/map.go:187 +0x68a
github.com/cilium/cilium/pkg/maps/multicast.newSubscriberV4InnerMap(0x0)
	/go/src/github.com/cilium/cilium/pkg/maps/multicast/subscribermap.go:320 +0xb2
github.com/cilium/cilium/pkg/maps/multicast.GroupV4OuterMap.Insert({0xc0008236c0?, 0x22?, 0x0?}, {{0x0?, 0x0?}, {0xc00000f680?}})
	/go/src/github.com/cilium/cilium/pkg/maps/multicast/subscribermap.go:138 +0x65
github.com/cilium/cilium/cilium-dbg/cmd.init.func74(0xc000cded00?, {0xc000d95ca0, 0x1, 0x1})
	/go/src/github.com/cilium/cilium/cilium-dbg/cmd/bpf_multicast_groups.go:97 +0x10c
github.com/spf13/cobra.(*Command).execute(0x5ed4120, {0xc000d95c60, 0x1, 0x1})
	/go/src/github.com/cilium/cilium/vendor/github.com/spf13/cobra/command.go:1019 +0xae7
github.com/spf13/cobra.(*Command).ExecuteC(0x5ed91a0)
	/go/src/github.com/cilium/cilium/vendor/github.com/spf13/cobra/command.go:1148 +0x465
github.com/spf13/cobra.(*Command).Execute(...)
	/go/src/github.com/cilium/cilium/vendor/github.com/spf13/cobra/command.go:1071
github.com/cilium/cilium/cilium-dbg/cmd.Execute()
	/go/src/github.com/cilium/cilium/cilium-dbg/cmd/root.go:45 +0x1a
main.main()
	/go/src/github.com/cilium/cilium/cilium-dbg/main.go:9 +0xf

Fixes: 4ce357a ("pkg/maps: migrate to slog")

Signed-off-by: Tobias Klauser <tobias@cilium.io>
@tklauser tklauser force-pushed the pr/tklauser/multicast-set-logger-opengroupv4outermap branch from 75d0c72 to 402506e Compare October 9, 2025 09:26
@tklauser
Copy link
Copy Markdown
Member Author

tklauser commented Oct 9, 2025

/test

Copy link
Copy Markdown
Member

@YutaroHayakawa YutaroHayakawa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@tklauser tklauser added this pull request to the merge queue Oct 9, 2025
@maintainer-s-little-helper maintainer-s-little-helper Bot added ready-to-merge This PR has passed all tests and received consensus from code owners to merge. labels Oct 9, 2025
Merged via the queue into main with commit 72fc5c0 Oct 9, 2025
714 of 721 checks passed
@tklauser tklauser deleted the pr/tklauser/multicast-set-logger-opengroupv4outermap branch October 9, 2025 22:22
@glrf glrf mentioned this pull request Oct 13, 2025
4 tasks
@glrf glrf added backport-pending/1.18 The backport for Cilium 1.18.x for this PR is in progress. and removed needs-backport/1.18 This PR / issue needs backporting to the v1.18 branch labels Oct 13, 2025
@github-actions github-actions Bot added backport-done/1.18 The backport for Cilium 1.18.x for this PR is done. and removed backport-pending/1.18 The backport for Cilium 1.18.x for this PR is in progress. labels Oct 14, 2025
zocimek added a commit to zocimek/home-ops that referenced this pull request Dec 9, 2025
… ) (#398)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[aqua:cilium/cilium-cli](https://redirect.github.com/cilium/cilium-cli)
| patch | `0.18.7` -> `0.18.9` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>cilium/cilium-cli (aqua:cilium/cilium-cli)</summary>

###
[`v0.18.9`](https://redirect.github.com/cilium/cilium-cli/releases/tag/v0.18.9)

[Compare
Source](https://redirect.github.com/cilium/cilium-cli/compare/v0.18.8...v0.18.9)

## Summary of Changes

**Major Changes:**

- Operator prometheus support TLS/mTLS using existing secret
([cilium/cilium#42077](https://redirect.github.com/cilium/cilium/issues/42077),
[@&#8203;phuhung273](https://redirect.github.com/phuhung273))

**Minor Changes:**

- CLI: Allow users to set the default Cilium namespace via the
CILIUM\_NAMESPACE environment variable
([cilium/cilium#41557](https://redirect.github.com/cilium/cilium/issues/41557),
[@&#8203;td0ne](https://redirect.github.com/td0ne))
- Removed deprecated `CiliumBGPPeeringPolicy` CRD and its agent
implementation. Use `cilium.io/v2` CRDs (`CiliumBGPClusterConfig`,
`CiliumBGPPeerConfig`, `CiliumBGPAdvertisement`,
`CiliumBGPNodeConfigOverride`) for configuring BGP.
([cilium/cilium#42278](https://redirect.github.com/cilium/cilium/issues/42278),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))

**CI Changes:**

- Add CCNP cilium connectivity tests
([cilium/cilium#42051](https://redirect.github.com/cilium/cilium/issues/42051),
[@&#8203;karina-ranadive](https://redirect.github.com/karina-ranadive))
- Fix connectivity tests for access to link-local nodelocaldns
classified as 'host' entity
([cilium/cilium#42984](https://redirect.github.com/cilium/cilium/issues/42984),
[@&#8203;rptaylor](https://redirect.github.com/rptaylor))

**Misc Changes:**

- bgp: Correct misleading error message in GetPeeringState
([cilium/cilium#42945](https://redirect.github.com/cilium/cilium/issues/42945),
[@&#8203;hargrovee](https://redirect.github.com/hargrovee))
- bgp: Remove versions from bgp package names
([cilium/cilium#42503](https://redirect.github.com/cilium/cilium/issues/42503),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- cilium-cli: add own type for root command parameters
([cilium/cilium#42609](https://redirect.github.com/cilium/cilium/issues/42609),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cli: cleanups for pre-v1.15 removal
([cilium/cilium#42757](https://redirect.github.com/cilium/cilium/issues/42757),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- cli: require Cilium v1.15
([cilium/cilium#41538](https://redirect.github.com/cilium/cilium/issues/41538),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- go.mod, vendor: bump github.com/google/go-github to v79
([cilium/cilium#42857](https://redirect.github.com/cilium/cilium/issues/42857),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- Update lrp frontend IP address to avoid IMDS conflict in the cloud
environment in cilium-cli
([cilium/cilium#42737](https://redirect.github.com/cilium/cilium/issues/42737),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))
- Use modern Go constructs
([cilium/cilium#42525](https://redirect.github.com/cilium/cilium/issues/42525),
[@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))
- Update stable release to v0.18.8 by
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent) in
[#&#8203;3121](https://redirect.github.com/cilium/cilium-cli/pull/3121)
- chore(deps): update actions/upload-artifact action to v5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3124](https://redirect.github.com/cilium/cilium-cli/pull/3124)
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`8c945d3`](https://redirect.github.com/cilium/cilium-cli/commit/8c945d3)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3122](https://redirect.github.com/cilium/cilium-cli/pull/3122)
- chore(deps): update dependency cilium/cilium to v1.18.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3123](https://redirect.github.com/cilium/cilium-cli/pull/3123)
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`6bac879`](https://redirect.github.com/cilium/cilium-cli/commit/6bac879)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3125](https://redirect.github.com/cilium/cilium-cli/pull/3125)
- renovate: try to group dependency updates by
[@&#8203;tklauser](https://redirect.github.com/tklauser) in
[#&#8203;3126](https://redirect.github.com/cilium/cilium-cli/pull/3126)
- chore(deps): update golangci/golangci-lint docker tag to v2.6.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3127](https://redirect.github.com/cilium/cilium-cli/pull/3127)
- chore(deps): update helm/kind-action action to v1.13.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3128](https://redirect.github.com/cilium/cilium-cli/pull/3128)
- chore(deps): update golangci/golangci-lint docker tag to v2.6.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3129](https://redirect.github.com/cilium/cilium-cli/pull/3129)
- chore(deps): update golang docker tag to v1.25.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3130](https://redirect.github.com/cilium/cilium-cli/pull/3130)
- chore(deps): update go to v1.25.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3131](https://redirect.github.com/cilium/cilium-cli/pull/3131)
- chore(deps): update golang:1.25.4-alpine3.21 docker digest to
[`3289aac`](https://redirect.github.com/cilium/cilium-cli/commit/3289aac)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3132](https://redirect.github.com/cilium/cilium-cli/pull/3132)
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to
[`e68f6a0`](https://redirect.github.com/cilium/cilium-cli/commit/e68f6a0)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3135](https://redirect.github.com/cilium/cilium-cli/pull/3135)
- chore(deps): update golangci/golangci-lint docker tag to v2.6.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3136](https://redirect.github.com/cilium/cilium-cli/pull/3136)
- chore(deps): update golangci/golangci-lint-action action to v9 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3133](https://redirect.github.com/cilium/cilium-cli/pull/3133)
- chore(deps): update dependency cilium/cilium to v1.18.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3134](https://redirect.github.com/cilium/cilium-cli/pull/3134)
- chore(deps): update all github action dependencies by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3137](https://redirect.github.com/cilium/cilium-cli/pull/3137)
- chore(deps): update actions/setup-go action to v6.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3138](https://redirect.github.com/cilium/cilium-cli/pull/3138)
- chore(deps): update actions/checkout action to v6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3139](https://redirect.github.com/cilium/cilium-cli/pull/3139)
- chore(deps): update golangci/golangci-lint-action action to v9.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3141](https://redirect.github.com/cilium/cilium-cli/pull/3141)
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to
[`f60eaa8`](https://redirect.github.com/cilium/cilium-cli/commit/f60eaa8)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3140](https://redirect.github.com/cilium/cilium-cli/pull/3140)
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to
[`6981837`](https://redirect.github.com/cilium/cilium-cli/commit/6981837)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3143](https://redirect.github.com/cilium/cilium-cli/pull/3143)
- chore(deps): update softprops/action-gh-release action to v2.5.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3144](https://redirect.github.com/cilium/cilium-cli/pull/3144)
- chore(deps): update golang docker tag to v1.25.5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3147](https://redirect.github.com/cilium/cilium-cli/pull/3147)
- chore(deps): update actions/checkout action to v6.0.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3146](https://redirect.github.com/cilium/cilium-cli/pull/3146)
- Prepare for v0.18.9 release by
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent) in
[#&#8203;3145](https://redirect.github.com/cilium/cilium-cli/pull/3145)

**Full Changelog**:
<cilium/cilium-cli@v0.18.8...v0.18.9>

###
[`v0.18.8`](https://redirect.github.com/cilium/cilium-cli/releases/tag/v0.18.8)

[Compare
Source](https://redirect.github.com/cilium/cilium-cli/compare/v0.18.7...v0.18.8)

## Summary of Changes

**Minor Changes:**

- clustermesh: add endpoints metrics and change global service (and MCS
ServiceExport) metrics to report per cluster metrics instead of a global
count
([cilium/cilium#41323](https://redirect.github.com/cilium/cilium/issues/41323),
[@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))

**Bugfixes:**

- cilium-cli: Fix CNI config file collection in sysdump
([cilium/cilium#42111](https://redirect.github.com/cilium/cilium/issues/42111),
[@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))
- cilium-cli: Prevent panic in `node-to-node-encryption` connectivity
test
([cilium/cilium#41600](https://redirect.github.com/cilium/cilium/issues/41600),
[@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))
- connectivity-tests: limit IPv6 PodToIngress to Cilium >= v1.17
([cilium/cilium#42148](https://redirect.github.com/cilium/cilium/issues/42148),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Fix a fatal error when accessing multicast map using cilium-dbg bpf
multicast
([cilium/cilium#42080](https://redirect.github.com/cilium/cilium/issues/42080),
[@&#8203;tklauser](https://redirect.github.com/tklauser))

**CI Changes:**

- Add integration test to validate IPsec key derivation consistency
across nodes, ensuring tunnel keys are properly derived and identical
between Cilium pods.
([cilium/cilium#40808](https://redirect.github.com/cilium/cilium/issues/40808),
[@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))
- ci: enable copyloopvar linter
([cilium/cilium#41893](https://redirect.github.com/cilium/cilium/issues/41893),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cilium-cli, netns: fix golangci-lint 2.5.0 errors
([cilium/cilium#41856](https://redirect.github.com/cilium/cilium/issues/41856),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cilium-cli: Bring back NodePort Acceleration feature detection
([cilium/cilium#41812](https://redirect.github.com/cilium/cilium/issues/41812),
[@&#8203;brb](https://redirect.github.com/brb))
- cilium-cli: Reenable L7 IPv6 tests
([cilium/cilium#39662](https://redirect.github.com/cilium/cilium/issues/39662),
[@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))
- cilium-cli: Specify TARGET for building release binaries
([cilium/cilium#42177](https://redirect.github.com/cilium/cilium/issues/42177),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- cilium\_cli: Override GO\_BUILD Make variable
([cilium/cilium#42162](https://redirect.github.com/cilium/cilium/issues/42162),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- cli, ipsec: Fix bidirectional IPsec tunnel check
([cilium/cilium#42047](https://redirect.github.com/cilium/cilium/issues/42047),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- cli: Fix unreliable tests due to error emitted in Cilium logs
"retrieving device lxc\*: Link not found"
([cilium/cilium#42146](https://redirect.github.com/cilium/cilium/issues/42146),
[@&#8203;fristonio](https://redirect.github.com/fristonio))

**Misc Changes:**

- chore(deps): update all-dependencies (main)
([cilium/cilium#41611](https://redirect.github.com/cilium/cilium/issues/41611),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (main)
([cilium/cilium#42018](https://redirect.github.com/cilium/cilium/issues/42018),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/alpine/socat:1.8.0.3 docker digest to
[`0ce60b5`](https://redirect.github.com/cilium/cilium-cli/commit/0ce60b5)
(main)
([cilium/cilium#41558](https://redirect.github.com/cilium/cilium/issues/41558),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`8305f5f`](https://redirect.github.com/cilium/cilium-cli/commit/8305f5f)
(main)
([cilium/cilium#41649](https://redirect.github.com/cilium/cilium/issues/41649),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`d709837`](https://redirect.github.com/cilium/cilium-cli/commit/d709837)
(main)
([cilium/cilium#42019](https://redirect.github.com/cilium/cilium/issues/42019),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`6ea52a0`](https://redirect.github.com/cilium/cilium-cli/commit/6ea52a0)
(main)
([cilium/cilium#42252](https://redirect.github.com/cilium/cilium/issues/42252),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.25.1 (main)
([cilium/cilium#41560](https://redirect.github.com/cilium/cilium/issues/41560),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.25.3 (main)
([cilium/cilium#42061](https://redirect.github.com/cilium/cilium/issues/42061),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- cilium-cli/features: use common cmd metric list command
([cilium/cilium#41630](https://redirect.github.com/cilium/cilium/issues/41630),
[@&#8203;aanm](https://redirect.github.com/aanm))
- cilium-cli: drop disabled IP cache check from connectivity tests
([cilium/cilium#42240](https://redirect.github.com/cilium/cilium/issues/42240),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cli/clustermesh: remove leftover global services status info
([cilium/cilium#41727](https://redirect.github.com/cilium/cilium/issues/41727),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Refactor policy engine to use PolicyEntry as the internal
representation of policies, as described in CFP-39646.
([cilium/cilium#40213](https://redirect.github.com/cilium/cilium/issues/40213),
[@&#8203;TheBeeZee](https://redirect.github.com/TheBeeZee))
- sysdump: add resource usage of nodes and pods
([cilium/cilium#41415](https://redirect.github.com/cilium/cilium/issues/41415),
[@&#8203;darox](https://redirect.github.com/darox))
- chore(deps): update go to v1.25.1 (patch) by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3097](https://redirect.github.com/cilium/cilium-cli/pull/3097)
- chore(deps): update actions/setup-go action to v6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3094](https://redirect.github.com/cilium/cilium-cli/pull/3094)
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`d6bdb04`](https://redirect.github.com/cilium/cilium-cli/commit/d6bdb04)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3096](https://redirect.github.com/cilium/cilium-cli/pull/3096)
- chore(deps): update gcr.io/distroless/static:latest docker digest to
[`87bce11`](https://redirect.github.com/cilium/cilium-cli/commit/87bce11)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3099](https://redirect.github.com/cilium/cilium-cli/pull/3099)
- chore(deps): update softprops/action-gh-release action to v2.3.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3098](https://redirect.github.com/cilium/cilium-cli/pull/3098)
- chore(deps): update golang docker tag to v1.25.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3093](https://redirect.github.com/cilium/cilium-cli/pull/3093)
- chore(deps): update actions/stale action to v10 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3095](https://redirect.github.com/cilium/cilium-cli/pull/3095)
- chore(deps): update golang:1.25.1-alpine3.21 docker digest to
[`331bde4`](https://redirect.github.com/cilium/cilium-cli/commit/331bde4)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3100](https://redirect.github.com/cilium/cilium-cli/pull/3100)
- chore(deps): update dependency cilium/cilium to v1.18.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3102](https://redirect.github.com/cilium/cilium-cli/pull/3102)
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`8305f5f`](https://redirect.github.com/cilium/cilium-cli/commit/8305f5f)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3103](https://redirect.github.com/cilium/cilium-cli/pull/3103)
- chore(deps): update golangci/golangci-lint docker tag to v2.5.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3104](https://redirect.github.com/cilium/cilium-cli/pull/3104)
- chore(deps): update docker/login-action action to v3.6.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3105](https://redirect.github.com/cilium/cilium-cli/pull/3105)
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`ab1f5c4`](https://redirect.github.com/cilium/cilium-cli/commit/ab1f5c4)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3106](https://redirect.github.com/cilium/cilium-cli/pull/3106)
- chore(deps): update actions/stale action to v10.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3108](https://redirect.github.com/cilium/cilium-cli/pull/3108)
- chore(deps): update softprops/action-gh-release action to v2.3.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3107](https://redirect.github.com/cilium/cilium-cli/pull/3107)
- chore(deps): update softprops/action-gh-release action to v2.4.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3109](https://redirect.github.com/cilium/cilium-cli/pull/3109)
- chore(deps): update golang docker tag to v1.25.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3110](https://redirect.github.com/cilium/cilium-cli/pull/3110)
- chore(deps): update go to v1.25.2 (patch) by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3112](https://redirect.github.com/cilium/cilium-cli/pull/3112)
- chore(deps): update golang:1.25.2-alpine3.21 docker digest to
[`0134653`](https://redirect.github.com/cilium/cilium-cli/commit/0134653)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3113](https://redirect.github.com/cilium/cilium-cli/pull/3113)
- RELEASE: also look for release-blockers in cilium/cilium by
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann) in
[#&#8203;3116](https://redirect.github.com/cilium/cilium-cli/pull/3116)
- chore(deps): update golang docker tag to v1.25.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3117](https://redirect.github.com/cilium/cilium-cli/pull/3117)
- chore(deps): update softprops/action-gh-release action to v2.4.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3114](https://redirect.github.com/cilium/cilium-cli/pull/3114)
- chore(deps): update go to v1.25.3 (patch) by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3118](https://redirect.github.com/cilium/cilium-cli/pull/3118)
- chore(deps): update golang:1.25.3-alpine3.21 docker digest to
[`0c9f3e0`](https://redirect.github.com/cilium/cilium-cli/commit/0c9f3e0)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3115](https://redirect.github.com/cilium/cilium-cli/pull/3115)
- Makefile: fix renovate depname for GO\_IMAGE\_\* updates by
[@&#8203;tklauser](https://redirect.github.com/tklauser) in
[#&#8203;3119](https://redirect.github.com/cilium/cilium-cli/pull/3119)
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`6ea52a0`](https://redirect.github.com/cilium/cilium-cli/commit/6ea52a0)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3111](https://redirect.github.com/cilium/cilium-cli/pull/3111)
- Prepare for v0.18.8 release by
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent) in
[#&#8203;3120](https://redirect.github.com/cilium/cilium-cli/pull/3120)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTcuMSIsInVwZGF0ZWRJblZlciI6IjQyLjMwLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInR5cGUvcGF0Y2giXX0=-->

Co-authored-by: zocimek-renovate[bot] <134739422+zocimek-renovate[bot]@users.noreply.github.com>
Co-authored-by: Łukasz Pospiech <zocimek@users.noreply.github.com>
@cilium-release-bot cilium-release-bot Bot moved this to Released in cilium v1.19.0 Feb 3, 2026
schwarlex pushed a commit to la-demos/vcluster-workshop-prep that referenced this pull request Feb 11, 2026
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/) ([source](https://github.com/cilium/cilium)) | patch | `1.18.2` -> `1.18.3` |

---

### Release Notes

<details>
<summary>cilium/cilium (cilium)</summary>

### [`v1.18.3`](https://github.com/cilium/cilium/releases/tag/v1.18.3): 1.18.3

[Compare Source](cilium/cilium@1.18.2...1.18.3)

## Summary of Changes

:information\_source: The images in this release were signed with cosign v3. Please use cosign v3 tooling to validate signatures with the following command syntax:

```
cosign verify --certificate-github-workflow-repository cilium/cilium --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-github-workflow-name 'Image Release Build' --certificate-github-workflow-ref refs/tags/v1.18.3 --certificate-identity https://github.com/cilium/cilium/.github/workflows/build-images-releases.yaml@refs/tags/v1.18.3 quay.io/cilium/operator-aws:v1.18.3 | jq -r '.[].critical.image'
```

**Minor Changes:**

- Fix a complexity issue for the bpf\_xdp program (Backport PR [#&#8203;42198](cilium/cilium#42198), Upstream PR [#&#8203;42193](cilium/cilium#42193), [@&#8203;aspsk](https://github.com/aspsk))
- hubble: mark kafka l7 visibility as deprecated (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41072](cilium/cilium#41072), [@&#8203;kaworu](https://github.com/kaworu))

**Bugfixes:**

- add the port name for address based LRP so frontend can pick the right backend (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41602](cilium/cilium#41602), [@&#8203;liyihuang](https://github.com/liyihuang))
- Avoid scenario where ENI device configuration can be skipped. (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41760](cilium/cilium#41760), [@&#8203;jasonaliyetti](https://github.com/jasonaliyetti))
- Cilium now configures Envoy to allow websocket connections to be passed through with HTTP policies. (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41729](cilium/cilium#41729), [@&#8203;jrajahalme](https://github.com/jrajahalme))
- Fix a bug that was preventing Cilium to delete stale pod CIDRs routes when changing routing mode to native (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41819](cilium/cilium#41819), [@&#8203;pippolo84](https://github.com/pippolo84))
- Fix a fatal error when accessing multicast map using cilium-dbg bpf multicast (Backport PR [#&#8203;42151](cilium/cilium#42151), Upstream PR [#&#8203;42080](cilium/cilium#42080), [@&#8203;tklauser](https://github.com/tklauser))
- Fix BGP auto discovery not sending community info (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41920](cilium/cilium#41920), [@&#8203;jiashengz](https://github.com/jiashengz))
- Fix bug in ENI routing where Cilium would chose the wrong subnet for routing traffic on secondary interfaces (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;40860](cilium/cilium#40860), [@&#8203;liyihuang](https://github.com/liyihuang))
- Fix bug that could cause ICMP error packets to have an incorrect inner IP checksum when KPR is enabled. (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41551](cilium/cilium#41551), [@&#8203;yushoyamaguchi](https://github.com/yushoyamaguchi))
- Fix bug with delegated IPAM where IPv6 traffic was routed via the wrong interface (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41598](cilium/cilium#41598), [@&#8203;NihaNallappagari](https://github.com/NihaNallappagari))
- Fix failing node health check on dual stack cluster if NodeInternalIPs are not configured for both families. (Backport PR [#&#8203;42055](cilium/cilium#42055), Upstream PR [#&#8203;41633](cilium/cilium#41633), [@&#8203;Dennor](https://github.com/Dennor))
- Fix increase in memory usage when service names are looked up at high rate during Hubble flow creation (Backport PR [#&#8203;42151](cilium/cilium#42151), Upstream PR [#&#8203;41965](cilium/cilium#41965), [@&#8203;joamaki](https://github.com/joamaki))
- Fix panic at startup in IPsec subsystem with Multi-Pool IPAM mode ([#&#8203;41725](cilium/cilium#41725), [@&#8203;pippolo84](https://github.com/pippolo84))
- Fix race condition preventing the skiplbmap BPF map from sometimes being pruned after restart. (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41529](cilium/cilium#41529), [@&#8203;joamaki](https://github.com/joamaki))
- Fixes a rare bug where endpoints may have incomplete policies in large clusters. (Backport PR [#&#8203;42151](cilium/cilium#42151), Upstream PR [#&#8203;42049](cilium/cilium#42049), [@&#8203;squeed](https://github.com/squeed))
- hostfw: also exclude non-transparent proxy traffic when BPF masq is enabled (Backport PR [#&#8203;41989](cilium/cilium#41989), Upstream PR [#&#8203;41915](cilium/cilium#41915), [@&#8203;julianwiedmann](https://github.com/julianwiedmann))
- Ignore expected error in neighbor reconciliation (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41815](cilium/cilium#41815), [@&#8203;dylandreimerink](https://github.com/dylandreimerink))
- loadbalancer: allow HostPort for multiple protos on same port (Backport PR [#&#8203;41913](cilium/cilium#41913), Upstream PR [#&#8203;41521](cilium/cilium#41521), [@&#8203;bersoare](https://github.com/bersoare))
- operator/pkg/lbipam: fix LoadBalancerIPPool conditions update logic (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41322](cilium/cilium#41322), [@&#8203;alimehrabikoshki](https://github.com/alimehrabikoshki))

**CI Changes:**

- .actions/cilium-config: add missing extraEnv in GH action (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41420](cilium/cilium#41420), [@&#8203;aanm](https://github.com/aanm))
- .github/workflows: add variable for renovate bot username (Backport PR [#&#8203;41843](cilium/cilium#41843), Upstream PR [#&#8203;41818](cilium/cilium#41818), [@&#8203;aanm](https://github.com/aanm))
- .github/workflows: automatically add /test for renovate PRs (Backport PR [#&#8203;41843](cilium/cilium#41843), Upstream PR [#&#8203;41770](cilium/cilium#41770), [@&#8203;aanm](https://github.com/aanm))
- .github/workflows: do not wait on linters form forks (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41822](cilium/cilium#41822), [@&#8203;aanm](https://github.com/aanm))
- .github/workflows: remove reviewers requested by auto-committer\[bot] (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41759](cilium/cilium#41759), [@&#8203;aanm](https://github.com/aanm))
- cli: Fix unreliable tests due to error emitted in Cilium logs "retrieving device lxc\*: Link not found" (Backport PR [#&#8203;42200](cilium/cilium#42200), Upstream PR [#&#8203;42146](cilium/cilium#42146), [@&#8203;fristonio](https://github.com/fristonio))
- gha: Correct k8s version for f12-datapath-service-ns-misc (Backport PR [#&#8203;41756](cilium/cilium#41756), Upstream PR [#&#8203;41753](cilium/cilium#41753), [@&#8203;sayboras](https://github.com/sayboras))
- ginkgo: add test ownership for ginkgo tests (Backport PR [#&#8203;42055](cilium/cilium#42055), Upstream PR [#&#8203;41950](cilium/cilium#41950), [@&#8203;aanm](https://github.com/aanm))
- Streamline ci-multi-pool workflow (Backport PR [#&#8203;41631](cilium/cilium#41631), Upstream PR [#&#8203;40658](cilium/cilium#40658), [@&#8203;pippolo84](https://github.com/pippolo84))
- workflows: fix GCP OIDC authentication's project ID ([#&#8203;42173](cilium/cilium#42173), [@&#8203;nbusseneau](https://github.com/nbusseneau))

**Misc Changes:**

- .github/workflows: stop build CI images until base images are built (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41681](cilium/cilium#41681), [@&#8203;aanm](https://github.com/aanm))
- agent: Add Cilium health config cell (Backport PR [#&#8203;42055](cilium/cilium#42055), Upstream PR [#&#8203;41627](cilium/cilium#41627), [@&#8203;aditighag](https://github.com/aditighag))
- bpf/nat: Move `ipv6_nat_entry` to map (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41902](cilium/cilium#41902), [@&#8203;pchaigno](https://github.com/pchaigno))
- bpf: hostfw: have from-host always pass the ipcache-based src identity (Backport PR [#&#8203;42113](cilium/cilium#42113), Upstream PR [#&#8203;42093](cilium/cilium#42093), [@&#8203;julianwiedmann](https://github.com/julianwiedmann))
- bpf: Only send fillup signal to agent on ENOMEM error (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41864](cilium/cilium#41864), [@&#8203;borkmann](https://github.com/borkmann))
- chore(deps): update all github action dependencies (v1.18) ([#&#8203;41795](cilium/cilium#41795), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.18) ([#&#8203;41931](cilium/cilium#41931), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.18) ([#&#8203;42028](cilium/cilium#42028), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.18) ([#&#8203;42136](cilium/cilium#42136), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.18) ([#&#8203;42264](cilium/cilium#42264), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.18) ([#&#8203;41716](cilium/cilium#41716), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.18) ([#&#8203;41793](cilium/cilium#41793), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.18) ([#&#8203;42035](cilium/cilium#42035), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.18) ([#&#8203;42116](cilium/cilium#42116), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update dependency cilium/little-vm-helper to v0.0.27 (v1.18) ([#&#8203;42263](cilium/cilium#42263), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update dependency protocolbuffers/protobuf to v33 (v1.18) ([#&#8203;42265](cilium/cilium#42265), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.24.7 docker digest to [`2c5f7a0`](cilium/cilium@2c5f7a0) (v1.18) ([#&#8203;42026](cilium/cilium#42026), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.24.7 docker digest to [`87916ac`](cilium/cilium@87916ac) (v1.18) ([#&#8203;41792](cilium/cilium#41792), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.24.9 docker digest to [`02ce1d7`](cilium/cilium@02ce1d7) (v1.18) ([#&#8203;42253](cilium/cilium#42253), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.24.8 (v1.18) ([#&#8203;42062](cilium/cilium#42062), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.24.9 (v1.18) ([#&#8203;42166](cilium/cilium#42166), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.34.7-1759058812-49b096a457d6e7f6d650229cbf95c63d59759331 (v1.18) ([#&#8203;41933](cilium/cilium#41933), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;41730](cilium/cilium#41730), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;41794](cilium/cilium#41794), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;41930](cilium/cilium#41930), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;42027](cilium/cilium#42027), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;42135](cilium/cilium#42135), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;42300](cilium/cilium#42300), [@&#8203;cilium-renovate](https://github.com/cilium-renovate)\[bot])
- doc: add note on hostfw and ipsec interaction (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41810](cilium/cilium#41810), [@&#8203;darox](https://github.com/darox))
- docs/dsr: Remove IPIP example configuration (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41701](cilium/cilium#41701), [@&#8203;pchaigno](https://github.com/pchaigno))
- docs: Clarify list of capabilities in threat model (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41682](cilium/cilium#41682), [@&#8203;joestringer](https://github.com/joestringer))
- docs: fix broken Chainguard SBOM link (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41719](cilium/cilium#41719), [@&#8203;yashisrani](https://github.com/yashisrani))
- docs: remove stale kernel requirements (Backport PR [#&#8203;42151](cilium/cilium#42151), Upstream PR [#&#8203;42081](cilium/cilium#42081), [@&#8203;julianwiedmann](https://github.com/julianwiedmann))
- docs: Update iproute2 compile steps in reference guide. (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41638](cilium/cilium#41638), [@&#8203;dkanaliev](https://github.com/dkanaliev))
- endpoint: reduce missed-policy-update log severity for restoring eps (Backport PR [#&#8203;42055](cilium/cilium#42055), Upstream PR [#&#8203;41095](cilium/cilium#41095), [@&#8203;fristonio](https://github.com/fristonio))
- endpointsynchronizer: suppress warning log when endpoint is terminating (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41755](cilium/cilium#41755), [@&#8203;giorio94](https://github.com/giorio94))
- gateway-api: Fix incorrect `Owns` call in refactor (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41807](cilium/cilium#41807), [@&#8203;youngnick](https://github.com/youngnick))
- hubble: allow overrrides if building from outside the tree (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41726](cilium/cilium#41726), [@&#8203;tklauser](https://github.com/tklauser))
- ipsec: add support for using remote PodCIDR entries (Backport PR [#&#8203;42073](cilium/cilium#42073), Upstream PR [#&#8203;41519](cilium/cilium#41519), [@&#8203;julianwiedmann](https://github.com/julianwiedmann))
- Make kubeProxyReplacement available in the reference and documentation (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41535](cilium/cilium#41535), [@&#8203;liyihuang](https://github.com/liyihuang))
- redirectpolicy: Always OpenOrCreate SkipLB map to avoid loader race (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41707](cilium/cilium#41707), [@&#8203;joamaki](https://github.com/joamaki))
- redirectpolicy: Fix comparison of BackendParams (Backport PR [#&#8203;41848](cilium/cilium#41848), Upstream PR [#&#8203;41705](cilium/cilium#41705), [@&#8203;joamaki](https://github.com/joamaki))
- Remove kiam documentation from Local Redirect Policy (Backport PR [#&#8203;41968](cilium/cilium#41968), Upstream PR [#&#8203;41644](cilium/cilium#41644), [@&#8203;liyihuang](https://github.com/liyihuang))
- Update `checkpatch` and `startup-script` image digest (Backport PR [#&#8203;41828](cilium/cilium#41828), Upstream PR [#&#8203;41710](cilium/cilium#41710), [@&#8203;HadrienPatte](https://github.com/HadrienPatte))

**Other Changes:**

- \[v1.18] gateway-api: Refactor Gateway API reconciler ([#&#8203;41720](cilium/cilium#41720), [@&#8203;youngnick](https://github.com/youngnick))
- \[v1.18] workflows/release: add secrets for step 4 and 5 ([#&#8203;41733](cilium/cilium#41733), [@&#8203;jrajahalme](https://github.com/jrajahalme))
- install: Update image digests for v1.18.2 ([#&#8203;41722](cilium/cilium#41722), [@&#8203;cilium-release-bot](https://github.com/cilium-release-bot)\[bot])
- proxy: Bump cilium-envoy to 1.34.10 ([#&#8203;42251](cilium/cilium#42251), [@&#8203;sayboras](https://github.com/sayboras))

#### Docker Manifests

##### cilium

`quay.io/cilium/cilium:v1.18.3@&#8203;sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15`
`quay.io/cilium/cilium:stable@sha256:5649db451c88d928ea585514746d50d91e6210801b300c897283ea319d68de15`

##### clustermesh-apiserver

`quay.io/cilium/clustermesh-apiserver:v1.18.3@&#8203;sha256:0d15efc992a85003759232598bf05fb1a4cd3c9fa28fb96bee1789ffe27cc50d`
`quay.io/cilium/clustermesh-apiserver:stable@sha256:0d15efc992a85003759232598bf05fb1a4cd3c9fa28fb96bee1789ffe27cc50d`

##### docker-plugin

`quay.io/cilium/docker-plugin:v1.18.3@&#8203;sha256:996d9fa5747175b1806ce01dd90dc586a5f52a32b7da409937a1f42714827d67`
`quay.io/cilium/docker-plugin:stable@sha256:996d9fa5747175b1806ce01dd90dc586a5f52a32b7da409937a1f42714827d67`

##### hubble-relay

`quay.io/cilium/hubble-relay:v1.18.3@&#8203;sha256:e53e00c47fe4ffb9c086bad0c1c77f23cb968be4385881160683d9e15aa34dc3`
`quay.io/cilium/hubble-relay:stable@sha256:e53e00c47fe4ffb9c086bad0c1c77f23cb968be4385881160683d9e15aa34dc3`

##### operator-alibabacloud

`quay.io/cilium/operator-alibabacloud:v1.18.3@&#8203;sha256:df8b6830ef0545199cffc5fb9fbf14c9dc8d92093b0e6355d8659705227f89ef`
`quay.io/cilium/operator-alibabacloud:stable@sha256:df8b6830ef0545199cffc5fb9fbf14c9dc8d92093b0e6355d8659705227f89ef`

##### operator-aws

`quay.io/cilium/operator-aws:v1.18.3@&#8203;sha256:ef39d61183b3bdf0e235650461b6c4d9ec7aa5f61a6c770f33c47a6bc5165e24`
`quay.io/cilium/operator-aws:stable@sha256:ef39d61183b3bdf0e235650461b6c4d9ec7aa5f61a6c770f33c47a6bc5165e24`

##### operator-azure

`quay.io/cilium/operator-azure:v1.18.3@&#8203;sha256:10a8a83ca6f0b02432c1ca0e67af98a48fdbefb684af44a399f58184ab174143`
`quay.io/cilium/operator-azure:stable@sha256:10a8a83ca6f0b02432c1ca0e67af98a48fdbefb684af44a399f58184ab174143`

##### operator-generic

`quay.io/cilium/operator-generic:v1.18.3@&#8203;sha256:b5a0138e1a38e4437c5215257ff4e35373619501f4877dbaf92c89ecfad81797`
`quay.io/cilium/operator-generic:stable@sha256:b5a0138e1a38e4437c5215257ff4e35373619501f4877dbaf92c89ecfad81797`

##### operator

`quay.io/cilium/operator:v1.18.3@&#8203;sha256:e350cea751afeae2f226a1bc275649c77a04a1e1ff50e61d782a371eae6fb2ff`
`quay.io/cilium/operator:stable@sha256:e350cea751afeae2f226a1bc275649c77a04a1e1ff50e61d782a371eae6fb2ff`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTguMyIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->

Reviewed-on: https://kubara.git.onstackit.cloud/STACKIT/kubara/pulls/140
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/multicast Impacts the Multicast feature. backport-done/1.18 The backport for Cilium 1.18.x for this PR is done. cilium-cli This PR contains changes related with cilium-cli ready-to-merge This PR has passed all tests and received consensus from code owners to merge. release-note/bug This PR fixes an issue in a previous release of Cilium.

Projects

No open projects
Status: Released

Development

Successfully merging this pull request may close these issues.

Unable to create multicast group by fatal error

4 participants