Skip to content

cilium-cli: Prevent panic in node-to-node-encryption connectivity test#41600

Merged
pchaigno merged 1 commit intomainfrom
pr/HadrienPatte/cilium-cli-encryption-panic
Sep 10, 2025
Merged

cilium-cli: Prevent panic in node-to-node-encryption connectivity test#41600
pchaigno merged 1 commit intomainfrom
pr/HadrienPatte/cilium-cli-encryption-panic

Conversation

@HadrienPatte
Copy link
Copy Markdown
Member

@HadrienPatte HadrienPatte commented Sep 9, 2025

The node-to-node-encryption test currently panics when run on a cluster with node encryption disabled, see logs bellow.

This PR adds safeguards to properly fail with an appropriate error message in the situation that currently panics.

Note: I guess the feature detection should prevent ending up in this situation by skipping this test. In my case the feature detection produces:

🐛 Detected features:
[...]
🐛   encryption-node: Disabled:node-role.kubernetes.io/control-plane

But as a first step, this PR replaces the panic by a clean failure.

Panic logs:

$ cilium version
cilium-cli: v0.18.7 compiled with go1.25.0 on darwin/arm64

$ cilium connectivity test --test=node-to-node-encryption --debug
[...]
  [-] Scenario [node-to-node-encryption/node-to-node-encryption]
[=] [cilium-test-1] Test [node-to-node-encryption] [59/123]
  🐛 node-to-node-encryption test running in sanity mode, expecting unencrypted packets
  🐛 Finalizing Test node-to-node-encryption
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x2 addr=0x3c8 pc=0x1067f077c]

goroutine 1697 [running]:
github.com/cilium/cilium/cilium-cli/connectivity/check.Pod.Address({0x0, 0x0, {0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0}, 0x1)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/check/peer.go:109 +0x3c
github.com/cilium/cilium/cilium-cli/connectivity/tests.getFilter({0x1097d8718, 0x14000f86ac0}, 0x14000ea0f20, 0x14001592300, 0x14001592400, 0x140015924c0, 0x140015924c0, 0x1, 0x1, 0x0)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/tests/encryption.go:171 +0x75c
github.com/cilium/cilium/cilium-cli/connectivity/tests.testNoTrafficLeak({0x1097d8718, 0x14000f86ac0}, 0x14000ea0f20, {0x1097c3630, 0x14000a40a80}, 0x14001592300, 0x140015924c0, 0x14001592400, 0x140015924c0, 0x1, ...)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/tests/encryption.go:303 +0xb0
github.com/cilium/cilium/cilium-cli/connectivity/tests.(*nodeToNodeEncryption).Run.func1(0x1)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/tests/encryption.go:481 +0x8c
github.com/cilium/cilium/cilium-cli/connectivity/check.(*ConnectivityTest).ForEachIPFamily(0x14000878a88, 0xb0?, 0x14000d51c30)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/check/context.go:1326 +0x260
github.com/cilium/cilium/cilium-cli/connectivity/check.(*Test).ForEachIPFamily(0x14000ea0f20, 0x14000d51c30)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/check/test.go:916 +0xac
github.com/cilium/cilium/cilium-cli/connectivity/tests.(*nodeToNodeEncryption).Run(0x14000a40a80, {0x1097d8718, 0x14000f86ac0}, 0x14000ea0f20)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/tests/encryption.go:472 +0x6fc
github.com/cilium/cilium/cilium-cli/connectivity/check.(*Test).Run(0x14000ea0f20, {0x1097d8718, 0x14000f86ac0}, 0x3b)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/check/test.go:397 +0x45c
github.com/cilium/cilium/cilium-cli/connectivity/check.(*ConnectivityTest).Run.func1()
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/check/context.go:455 +0x68
created by github.com/cilium/cilium/cilium-cli/connectivity/check.(*ConnectivityTest).Run in goroutine 1567
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/check/context.go:449 +0x90

The `node-to-node-encryption` test currently panics when run on a
cluster with node encryption disabled, see logs bellow.

This PR adds safeguards to properly fail with an appropriate error
message in the situation that currently panics.

```sh
$ cilium version
cilium-cli: v0.18.7 compiled with go1.25.0 on darwin/arm64

$ cilium connectivity test --test=node-to-node-encryption --debug
[...]
  [-] Scenario [node-to-node-encryption/node-to-node-encryption]
[=] [cilium-test-1] Test [node-to-node-encryption] [59/123]
  🐛 node-to-node-encryption test running in sanity mode, expecting unencrypted packets
  🐛 Finalizing Test node-to-node-encryption
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x2 addr=0x3c8 pc=0x1067f077c]

goroutine 1697 [running]:
github.com/cilium/cilium/cilium-cli/connectivity/check.Pod.Address({0x0, 0x0, {0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0}, 0x1)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/check/peer.go:109 +0x3c
github.com/cilium/cilium/cilium-cli/connectivity/tests.getFilter({0x1097d8718, 0x14000f86ac0}, 0x14000ea0f20, 0x14001592300, 0x14001592400, 0x140015924c0, 0x140015924c0, 0x1, 0x1, 0x0)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/tests/encryption.go:171 +0x75c
github.com/cilium/cilium/cilium-cli/connectivity/tests.testNoTrafficLeak({0x1097d8718, 0x14000f86ac0}, 0x14000ea0f20, {0x1097c3630, 0x14000a40a80}, 0x14001592300, 0x140015924c0, 0x14001592400, 0x140015924c0, 0x1, ...)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/tests/encryption.go:303 +0xb0
github.com/cilium/cilium/cilium-cli/connectivity/tests.(*nodeToNodeEncryption).Run.func1(0x1)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/tests/encryption.go:481 +0x8c
github.com/cilium/cilium/cilium-cli/connectivity/check.(*ConnectivityTest).ForEachIPFamily(0x14000878a88, 0xb0?, 0x14000d51c30)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/check/context.go:1326 +0x260
github.com/cilium/cilium/cilium-cli/connectivity/check.(*Test).ForEachIPFamily(0x14000ea0f20, 0x14000d51c30)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/check/test.go:916 +0xac
github.com/cilium/cilium/cilium-cli/connectivity/tests.(*nodeToNodeEncryption).Run(0x14000a40a80, {0x1097d8718, 0x14000f86ac0}, 0x14000ea0f20)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/tests/encryption.go:472 +0x6fc
github.com/cilium/cilium/cilium-cli/connectivity/check.(*Test).Run(0x14000ea0f20, {0x1097d8718, 0x14000f86ac0}, 0x3b)
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/check/test.go:397 +0x45c
github.com/cilium/cilium/cilium-cli/connectivity/check.(*ConnectivityTest).Run.func1()
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/check/context.go:455 +0x68
created by github.com/cilium/cilium/cilium-cli/connectivity/check.(*ConnectivityTest).Run in goroutine 1567
        /cilium/vendor/github.com/cilium/cilium/cilium-cli/connectivity/check/context.go:449 +0x90
```

Signed-off-by: Hadrien Patte <[email protected]>
@maintainer-s-little-helper maintainer-s-little-helper bot added the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Sep 9, 2025
@github-actions github-actions bot added cilium-cli This PR contains changes related with cilium-cli cilium-cli-exclusive This PR only impacts cilium-cli binary labels Sep 9, 2025
@HadrienPatte HadrienPatte marked this pull request as ready for review September 9, 2025 16:06
@HadrienPatte HadrienPatte requested a review from a team as a code owner September 9, 2025 16:06
@pchaigno pchaigno added release-note/bug This PR fixes an issue in a previous release of Cilium. area/encryption Impacts encryption support such as IPSec, WireGuard, or kTLS. labels Sep 9, 2025
@maintainer-s-little-helper maintainer-s-little-helper bot removed dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. labels Sep 9, 2025
@pchaigno
Copy link
Copy Markdown
Member

pchaigno commented Sep 9, 2025

/test

@pchaigno pchaigno enabled auto-merge September 9, 2025 19:11
@pchaigno pchaigno added this pull request to the merge queue Sep 10, 2025
Merged via the queue into main with commit e9dde81 Sep 10, 2025
294 of 296 checks passed
@pchaigno pchaigno deleted the pr/HadrienPatte/cilium-cli-encryption-panic branch September 10, 2025 08:56
@maintainer-s-little-helper maintainer-s-little-helper bot added ready-to-merge This PR has passed all tests and received consensus from code owners to merge. labels Sep 10, 2025
zocimek added a commit to zocimek/home-ops that referenced this pull request Dec 9, 2025
… ) (#398)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[aqua:cilium/cilium-cli](https://redirect.github.com/cilium/cilium-cli)
| patch | `0.18.7` -> `0.18.9` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>cilium/cilium-cli (aqua:cilium/cilium-cli)</summary>

###
[`v0.18.9`](https://redirect.github.com/cilium/cilium-cli/releases/tag/v0.18.9)

[Compare
Source](https://redirect.github.com/cilium/cilium-cli/compare/v0.18.8...v0.18.9)

## Summary of Changes

**Major Changes:**

- Operator prometheus support TLS/mTLS using existing secret
([cilium/cilium#42077](https://redirect.github.com/cilium/cilium/issues/42077),
[@&#8203;phuhung273](https://redirect.github.com/phuhung273))

**Minor Changes:**

- CLI: Allow users to set the default Cilium namespace via the
CILIUM\_NAMESPACE environment variable
([cilium/cilium#41557](https://redirect.github.com/cilium/cilium/issues/41557),
[@&#8203;td0ne](https://redirect.github.com/td0ne))
- Removed deprecated `CiliumBGPPeeringPolicy` CRD and its agent
implementation. Use `cilium.io/v2` CRDs (`CiliumBGPClusterConfig`,
`CiliumBGPPeerConfig`, `CiliumBGPAdvertisement`,
`CiliumBGPNodeConfigOverride`) for configuring BGP.
([cilium/cilium#42278](https://redirect.github.com/cilium/cilium/issues/42278),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))

**CI Changes:**

- Add CCNP cilium connectivity tests
([cilium/cilium#42051](https://redirect.github.com/cilium/cilium/issues/42051),
[@&#8203;karina-ranadive](https://redirect.github.com/karina-ranadive))
- Fix connectivity tests for access to link-local nodelocaldns
classified as 'host' entity
([cilium/cilium#42984](https://redirect.github.com/cilium/cilium/issues/42984),
[@&#8203;rptaylor](https://redirect.github.com/rptaylor))

**Misc Changes:**

- bgp: Correct misleading error message in GetPeeringState
([cilium/cilium#42945](https://redirect.github.com/cilium/cilium/issues/42945),
[@&#8203;hargrovee](https://redirect.github.com/hargrovee))
- bgp: Remove versions from bgp package names
([cilium/cilium#42503](https://redirect.github.com/cilium/cilium/issues/42503),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- cilium-cli: add own type for root command parameters
([cilium/cilium#42609](https://redirect.github.com/cilium/cilium/issues/42609),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cli: cleanups for pre-v1.15 removal
([cilium/cilium#42757](https://redirect.github.com/cilium/cilium/issues/42757),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- cli: require Cilium v1.15
([cilium/cilium#41538](https://redirect.github.com/cilium/cilium/issues/41538),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- go.mod, vendor: bump github.com/google/go-github to v79
([cilium/cilium#42857](https://redirect.github.com/cilium/cilium/issues/42857),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- Update lrp frontend IP address to avoid IMDS conflict in the cloud
environment in cilium-cli
([cilium/cilium#42737](https://redirect.github.com/cilium/cilium/issues/42737),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))
- Use modern Go constructs
([cilium/cilium#42525](https://redirect.github.com/cilium/cilium/issues/42525),
[@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))
- Update stable release to v0.18.8 by
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent) in
[#&#8203;3121](https://redirect.github.com/cilium/cilium-cli/pull/3121)
- chore(deps): update actions/upload-artifact action to v5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3124](https://redirect.github.com/cilium/cilium-cli/pull/3124)
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`8c945d3`](https://redirect.github.com/cilium/cilium-cli/commit/8c945d3)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3122](https://redirect.github.com/cilium/cilium-cli/pull/3122)
- chore(deps): update dependency cilium/cilium to v1.18.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3123](https://redirect.github.com/cilium/cilium-cli/pull/3123)
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`6bac879`](https://redirect.github.com/cilium/cilium-cli/commit/6bac879)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3125](https://redirect.github.com/cilium/cilium-cli/pull/3125)
- renovate: try to group dependency updates by
[@&#8203;tklauser](https://redirect.github.com/tklauser) in
[#&#8203;3126](https://redirect.github.com/cilium/cilium-cli/pull/3126)
- chore(deps): update golangci/golangci-lint docker tag to v2.6.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3127](https://redirect.github.com/cilium/cilium-cli/pull/3127)
- chore(deps): update helm/kind-action action to v1.13.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3128](https://redirect.github.com/cilium/cilium-cli/pull/3128)
- chore(deps): update golangci/golangci-lint docker tag to v2.6.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3129](https://redirect.github.com/cilium/cilium-cli/pull/3129)
- chore(deps): update golang docker tag to v1.25.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3130](https://redirect.github.com/cilium/cilium-cli/pull/3130)
- chore(deps): update go to v1.25.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3131](https://redirect.github.com/cilium/cilium-cli/pull/3131)
- chore(deps): update golang:1.25.4-alpine3.21 docker digest to
[`3289aac`](https://redirect.github.com/cilium/cilium-cli/commit/3289aac)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3132](https://redirect.github.com/cilium/cilium-cli/pull/3132)
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to
[`e68f6a0`](https://redirect.github.com/cilium/cilium-cli/commit/e68f6a0)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3135](https://redirect.github.com/cilium/cilium-cli/pull/3135)
- chore(deps): update golangci/golangci-lint docker tag to v2.6.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3136](https://redirect.github.com/cilium/cilium-cli/pull/3136)
- chore(deps): update golangci/golangci-lint-action action to v9 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3133](https://redirect.github.com/cilium/cilium-cli/pull/3133)
- chore(deps): update dependency cilium/cilium to v1.18.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3134](https://redirect.github.com/cilium/cilium-cli/pull/3134)
- chore(deps): update all github action dependencies by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3137](https://redirect.github.com/cilium/cilium-cli/pull/3137)
- chore(deps): update actions/setup-go action to v6.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3138](https://redirect.github.com/cilium/cilium-cli/pull/3138)
- chore(deps): update actions/checkout action to v6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3139](https://redirect.github.com/cilium/cilium-cli/pull/3139)
- chore(deps): update golangci/golangci-lint-action action to v9.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3141](https://redirect.github.com/cilium/cilium-cli/pull/3141)
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to
[`f60eaa8`](https://redirect.github.com/cilium/cilium-cli/commit/f60eaa8)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3140](https://redirect.github.com/cilium/cilium-cli/pull/3140)
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to
[`6981837`](https://redirect.github.com/cilium/cilium-cli/commit/6981837)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3143](https://redirect.github.com/cilium/cilium-cli/pull/3143)
- chore(deps): update softprops/action-gh-release action to v2.5.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3144](https://redirect.github.com/cilium/cilium-cli/pull/3144)
- chore(deps): update golang docker tag to v1.25.5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3147](https://redirect.github.com/cilium/cilium-cli/pull/3147)
- chore(deps): update actions/checkout action to v6.0.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3146](https://redirect.github.com/cilium/cilium-cli/pull/3146)
- Prepare for v0.18.9 release by
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent) in
[#&#8203;3145](https://redirect.github.com/cilium/cilium-cli/pull/3145)

**Full Changelog**:
<cilium/cilium-cli@v0.18.8...v0.18.9>

###
[`v0.18.8`](https://redirect.github.com/cilium/cilium-cli/releases/tag/v0.18.8)

[Compare
Source](https://redirect.github.com/cilium/cilium-cli/compare/v0.18.7...v0.18.8)

## Summary of Changes

**Minor Changes:**

- clustermesh: add endpoints metrics and change global service (and MCS
ServiceExport) metrics to report per cluster metrics instead of a global
count
([cilium/cilium#41323](https://redirect.github.com/cilium/cilium/issues/41323),
[@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))

**Bugfixes:**

- cilium-cli: Fix CNI config file collection in sysdump
([cilium/cilium#42111](https://redirect.github.com/cilium/cilium/issues/42111),
[@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))
- cilium-cli: Prevent panic in `node-to-node-encryption` connectivity
test
([cilium/cilium#41600](https://redirect.github.com/cilium/cilium/issues/41600),
[@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))
- connectivity-tests: limit IPv6 PodToIngress to Cilium >= v1.17
([cilium/cilium#42148](https://redirect.github.com/cilium/cilium/issues/42148),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Fix a fatal error when accessing multicast map using cilium-dbg bpf
multicast
([cilium/cilium#42080](https://redirect.github.com/cilium/cilium/issues/42080),
[@&#8203;tklauser](https://redirect.github.com/tklauser))

**CI Changes:**

- Add integration test to validate IPsec key derivation consistency
across nodes, ensuring tunnel keys are properly derived and identical
between Cilium pods.
([cilium/cilium#40808](https://redirect.github.com/cilium/cilium/issues/40808),
[@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))
- ci: enable copyloopvar linter
([cilium/cilium#41893](https://redirect.github.com/cilium/cilium/issues/41893),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cilium-cli, netns: fix golangci-lint 2.5.0 errors
([cilium/cilium#41856](https://redirect.github.com/cilium/cilium/issues/41856),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cilium-cli: Bring back NodePort Acceleration feature detection
([cilium/cilium#41812](https://redirect.github.com/cilium/cilium/issues/41812),
[@&#8203;brb](https://redirect.github.com/brb))
- cilium-cli: Reenable L7 IPv6 tests
([cilium/cilium#39662](https://redirect.github.com/cilium/cilium/issues/39662),
[@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))
- cilium-cli: Specify TARGET for building release binaries
([cilium/cilium#42177](https://redirect.github.com/cilium/cilium/issues/42177),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- cilium\_cli: Override GO\_BUILD Make variable
([cilium/cilium#42162](https://redirect.github.com/cilium/cilium/issues/42162),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- cli, ipsec: Fix bidirectional IPsec tunnel check
([cilium/cilium#42047](https://redirect.github.com/cilium/cilium/issues/42047),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- cli: Fix unreliable tests due to error emitted in Cilium logs
"retrieving device lxc\*: Link not found"
([cilium/cilium#42146](https://redirect.github.com/cilium/cilium/issues/42146),
[@&#8203;fristonio](https://redirect.github.com/fristonio))

**Misc Changes:**

- chore(deps): update all-dependencies (main)
([cilium/cilium#41611](https://redirect.github.com/cilium/cilium/issues/41611),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (main)
([cilium/cilium#42018](https://redirect.github.com/cilium/cilium/issues/42018),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/alpine/socat:1.8.0.3 docker digest to
[`0ce60b5`](https://redirect.github.com/cilium/cilium-cli/commit/0ce60b5)
(main)
([cilium/cilium#41558](https://redirect.github.com/cilium/cilium/issues/41558),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`8305f5f`](https://redirect.github.com/cilium/cilium-cli/commit/8305f5f)
(main)
([cilium/cilium#41649](https://redirect.github.com/cilium/cilium/issues/41649),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`d709837`](https://redirect.github.com/cilium/cilium-cli/commit/d709837)
(main)
([cilium/cilium#42019](https://redirect.github.com/cilium/cilium/issues/42019),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`6ea52a0`](https://redirect.github.com/cilium/cilium-cli/commit/6ea52a0)
(main)
([cilium/cilium#42252](https://redirect.github.com/cilium/cilium/issues/42252),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.25.1 (main)
([cilium/cilium#41560](https://redirect.github.com/cilium/cilium/issues/41560),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.25.3 (main)
([cilium/cilium#42061](https://redirect.github.com/cilium/cilium/issues/42061),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- cilium-cli/features: use common cmd metric list command
([cilium/cilium#41630](https://redirect.github.com/cilium/cilium/issues/41630),
[@&#8203;aanm](https://redirect.github.com/aanm))
- cilium-cli: drop disabled IP cache check from connectivity tests
([cilium/cilium#42240](https://redirect.github.com/cilium/cilium/issues/42240),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cli/clustermesh: remove leftover global services status info
([cilium/cilium#41727](https://redirect.github.com/cilium/cilium/issues/41727),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Refactor policy engine to use PolicyEntry as the internal
representation of policies, as described in CFP-39646.
([cilium/cilium#40213](https://redirect.github.com/cilium/cilium/issues/40213),
[@&#8203;TheBeeZee](https://redirect.github.com/TheBeeZee))
- sysdump: add resource usage of nodes and pods
([cilium/cilium#41415](https://redirect.github.com/cilium/cilium/issues/41415),
[@&#8203;darox](https://redirect.github.com/darox))
- chore(deps): update go to v1.25.1 (patch) by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3097](https://redirect.github.com/cilium/cilium-cli/pull/3097)
- chore(deps): update actions/setup-go action to v6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3094](https://redirect.github.com/cilium/cilium-cli/pull/3094)
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`d6bdb04`](https://redirect.github.com/cilium/cilium-cli/commit/d6bdb04)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3096](https://redirect.github.com/cilium/cilium-cli/pull/3096)
- chore(deps): update gcr.io/distroless/static:latest docker digest to
[`87bce11`](https://redirect.github.com/cilium/cilium-cli/commit/87bce11)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3099](https://redirect.github.com/cilium/cilium-cli/pull/3099)
- chore(deps): update softprops/action-gh-release action to v2.3.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3098](https://redirect.github.com/cilium/cilium-cli/pull/3098)
- chore(deps): update golang docker tag to v1.25.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3093](https://redirect.github.com/cilium/cilium-cli/pull/3093)
- chore(deps): update actions/stale action to v10 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3095](https://redirect.github.com/cilium/cilium-cli/pull/3095)
- chore(deps): update golang:1.25.1-alpine3.21 docker digest to
[`331bde4`](https://redirect.github.com/cilium/cilium-cli/commit/331bde4)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3100](https://redirect.github.com/cilium/cilium-cli/pull/3100)
- chore(deps): update dependency cilium/cilium to v1.18.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3102](https://redirect.github.com/cilium/cilium-cli/pull/3102)
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`8305f5f`](https://redirect.github.com/cilium/cilium-cli/commit/8305f5f)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3103](https://redirect.github.com/cilium/cilium-cli/pull/3103)
- chore(deps): update golangci/golangci-lint docker tag to v2.5.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3104](https://redirect.github.com/cilium/cilium-cli/pull/3104)
- chore(deps): update docker/login-action action to v3.6.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3105](https://redirect.github.com/cilium/cilium-cli/pull/3105)
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`ab1f5c4`](https://redirect.github.com/cilium/cilium-cli/commit/ab1f5c4)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3106](https://redirect.github.com/cilium/cilium-cli/pull/3106)
- chore(deps): update actions/stale action to v10.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3108](https://redirect.github.com/cilium/cilium-cli/pull/3108)
- chore(deps): update softprops/action-gh-release action to v2.3.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3107](https://redirect.github.com/cilium/cilium-cli/pull/3107)
- chore(deps): update softprops/action-gh-release action to v2.4.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3109](https://redirect.github.com/cilium/cilium-cli/pull/3109)
- chore(deps): update golang docker tag to v1.25.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3110](https://redirect.github.com/cilium/cilium-cli/pull/3110)
- chore(deps): update go to v1.25.2 (patch) by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3112](https://redirect.github.com/cilium/cilium-cli/pull/3112)
- chore(deps): update golang:1.25.2-alpine3.21 docker digest to
[`0134653`](https://redirect.github.com/cilium/cilium-cli/commit/0134653)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3113](https://redirect.github.com/cilium/cilium-cli/pull/3113)
- RELEASE: also look for release-blockers in cilium/cilium by
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann) in
[#&#8203;3116](https://redirect.github.com/cilium/cilium-cli/pull/3116)
- chore(deps): update golang docker tag to v1.25.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3117](https://redirect.github.com/cilium/cilium-cli/pull/3117)
- chore(deps): update softprops/action-gh-release action to v2.4.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3114](https://redirect.github.com/cilium/cilium-cli/pull/3114)
- chore(deps): update go to v1.25.3 (patch) by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3118](https://redirect.github.com/cilium/cilium-cli/pull/3118)
- chore(deps): update golang:1.25.3-alpine3.21 docker digest to
[`0c9f3e0`](https://redirect.github.com/cilium/cilium-cli/commit/0c9f3e0)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3115](https://redirect.github.com/cilium/cilium-cli/pull/3115)
- Makefile: fix renovate depname for GO\_IMAGE\_\* updates by
[@&#8203;tklauser](https://redirect.github.com/tklauser) in
[#&#8203;3119](https://redirect.github.com/cilium/cilium-cli/pull/3119)
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`6ea52a0`](https://redirect.github.com/cilium/cilium-cli/commit/6ea52a0)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3111](https://redirect.github.com/cilium/cilium-cli/pull/3111)
- Prepare for v0.18.8 release by
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent) in
[#&#8203;3120](https://redirect.github.com/cilium/cilium-cli/pull/3120)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTcuMSIsInVwZGF0ZWRJblZlciI6IjQyLjMwLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInR5cGUvcGF0Y2giXX0=-->

Co-authored-by: zocimek-renovate[bot] <134739422+zocimek-renovate[bot]@users.noreply.github.com>
Co-authored-by: Łukasz Pospiech <[email protected]>
@cilium-release-bot cilium-release-bot bot moved this to Released in cilium v1.19.0 Feb 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/encryption Impacts encryption support such as IPSec, WireGuard, or kTLS. cilium-cli This PR contains changes related with cilium-cli cilium-cli-exclusive This PR only impacts cilium-cli binary ready-to-merge This PR has passed all tests and received consensus from code owners to merge. release-note/bug This PR fixes an issue in a previous release of Cilium.

Projects

No open projects
Status: Released

Development

Successfully merging this pull request may close these issues.

2 participants