1.14.18

Summary of Changes

Bugfixes:

• cilium-health-ep controller is made to be more robust against successive failures. (Backport PR #36074, Upstream PR #35936, @jrajahalme)
• Unbreak the cilium-dbg preflight migrate-identity command (Backport PR #36284, Upstream PR #36089, @giorio94)

CI Changes:

• [v1.14] ci: modularize chart CI push workflow (#35964, @ferozsalam)
• [v1.14] gha: Upgrade helm/kind-action to the latest upstream (#36416, @aanm)
• gha: configure environment in build-images-base/image-digests job (Backport PR #36465, Upstream PR #36318, @giorio94)
• github: Pass the workflow step timeout to go test (Backport PR #36074, Upstream PR #35814, @jrajahalme)
• Remove unnecessary hubble port-forward commands (Backport PR #36074, Upstream PR #33523, @michi-covalent)

Misc Changes:

• [v1.14] docs: egress masquerade selector (#36408, @nbusseneau)
• chore(deps): update all github action dependencies (v1.14) (#36163, @cilium-renovate[bot])
• chore(deps): update all github action dependencies (v1.14) (#36282, @cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.14) (#36160, @cilium-renovate[bot])
• chore(deps): update cilium/little-vm-helper action to v0.0.19 (v1.14) (#36161, @cilium-renovate[bot])
• chore(deps): update dependency cilium/cilium-cli to v0.16.22 (v1.14) (#36507, @cilium-renovate[bot])
• chore(deps): update dependency cilium/hubble to v1.16.4 (v1.14) (#36147, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.22.9 docker digest to 147f428 (v1.14) (#36224, @cilium-renovate[bot])
• chore(deps): update go to v1.22.10 (v1.14) (#36455, @cilium-renovate[bot])
• chore(deps): update old stable lvh-images (v1.14) (patch) (#36162, @cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.7-1733138674-96535afceef9d9f5c28a96cabe4068bf4472d053 (v1.14) (#36182, @cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.8-1733718623-70f73cfb053b8039d0541fdd0c120afc5f57a43d (v1.14) (#36457, @cilium-renovate[bot])
• chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.8-1733837904-eaae5aca0fb988583e5617170a65ac5aa51c0aa8 (v1.14) (#36497, @cilium-renovate[bot])
• docs: In k0s guide, remove dashes to fix invalid Bash variable names. (Backport PR #36074, Upstream PR #35923, @yilas)
• envoy: Configure internal_address_config to avoid warning log (Backport PR #36202, Upstream PR #35943, @sayboras)
• fix(deps): update module golang.org/x/crypto to v0.31.0 [security] (v1.14) (#36532, @cilium-renovate[bot])
• images: bump cni plugins to v1.6.0 (Backport PR #36088, Upstream PR #36075, @ferozsalam)
• Makefile: fix swagger definition for automatic renovate updates (Backport PR #36074, Upstream PR #35979, @aanm)

Other Changes:

• [1.14] xdp: make cilium_calls_xdp map per-endpoint (#36098, @ti-mo)
• install: Update image digests for v1.14.17 (#36045, @cilium-release-bot[bot])

Docker Manifests

cilium

docker.io/cilium/cilium:v1.14.18@sha256:a09bd4ee7345ccdb42679985bf3e5a696ad8416e31a70a3609129bc745804123
quay.io/cilium/cilium:v1.14.18@sha256:a09bd4ee7345ccdb42679985bf3e5a696ad8416e31a70a3609129bc745804123

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.14.18@sha256:2264b7e3ed698f38652fc18d036de1ede4e1a03c67bcb51b42a5ddc5f87df603
quay.io/cilium/clustermesh-apiserver:v1.14.18@sha256:2264b7e3ed698f38652fc18d036de1ede4e1a03c67bcb51b42a5ddc5f87df603

docker-plugin

docker.io/cilium/docker-plugin:v1.14.18@sha256:60bb79fd8571cca182ad53f84fe4e5aa5e45c70ec1b2a48810e685fe87e7a8c5
quay.io/cilium/docker-plugin:v1.14.18@sha256:60bb79fd8571cca182ad53f84fe4e5aa5e45c70ec1b2a48810e685fe87e7a8c5

hubble-relay

docker.io/cilium/hubble-relay:v1.14.18@sha256:a0a05a3b1aeb1429b76a00c8f6d9217427806faacbca2f7c6e340e51a683d476
quay.io/cilium/hubble-relay:v1.14.18@sha256:a0a05a3b1aeb1429b76a00c8f6d9217427806faacbca2f7c6e340e51a683d476

kvstoremesh

docker.io/cilium/kvstoremesh:v1.14.18@sha256:e4e96cfeb112acf9e8d88bd9ccebf1d3b9e5139eb8c632075341b623bb7105c4
quay.io/cilium/kvstoremesh:v1.14.18@sha256:e4e96cfeb112acf9e8d88bd9ccebf1d3b9e5139eb8c632075341b623bb7105c4

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.14.18@sha256:ccfc60f0f90ec12229f68f4ec1559dd0160424499860636c664b488dc553e05e
quay.io/cilium/operator-alibabacloud:v1.14.18@sha256:ccfc60f0f90ec12229f68f4ec1559dd0160424499860636c664b488dc553e05e

operator-aws

docker.io/cilium/operator-aws:v1.14.18@sha256:2240199f83156dd73b993524334fd924bbc176b5101a5276cd538cb6eb325580
quay.io/cilium/operator-aws:v1.14.18@sha256:2240199f83156dd73b993524334fd924bbc176b5101a5276cd538cb6eb325580

operator-azure

docker.io/cilium/operator-azure:v1.14.18@sha256:6c6576198e785232c8d26464fb5a9dabdddaeea22f26ce8eb06e2d5912451a82
quay.io/cilium/operator-azure:v1.14.18@sha256:6c6576198e785232c8d26464fb5a9dabdddaeea22f26ce8eb06e2d5912451a82

operator-generic

docker.io/cilium/operator-generic:v1.14.18@sha256:f41a9f3d899e14ba34a9696e7327147cd9811fc563c255668d59658ad90aa69e
quay.io/cilium/operator-generic:v1.14.18@sha256:f41a9f3d899e14ba34a9696e7327147cd9811fc563c255668d59658ad90aa69e

operator

docker.io/cilium/operator:v1.14.18@sha256:a94ffab61cb69549ec885aa70d4061e3acac3736c9dccf3f6b9c4e25241c950b
quay.io/cilium/operator:v1.14.18@sha256:a94ffab61cb69549ec885aa70d4061e3acac3736c9dccf3f6b9c4e25241c950b