Skip to content

add ccnp cilium connectivity tests#42051

Merged
pchaigno merged 1 commit intocilium:mainfrom
karina-ranadive:pr/addCCNPTests
Nov 13, 2025
Merged

add ccnp cilium connectivity tests#42051
pchaigno merged 1 commit intocilium:mainfrom
karina-ranadive:pr/addCCNPTests

Conversation

@karina-ranadive
Copy link
Copy Markdown

@karina-ranadive karina-ranadive commented Oct 6, 2025

Creates 2 happy path cilium connectivity tests to validate the functionality of CCNP. This includes the deployment of the CCNP testing environment which is 2 namespaces that have a pod each as well as respective yamls for CCNPs to validate CCNP independently. The testing environment is created similarly to the Local Redirect Policy cilium connectivity tests. The CCNP testing environment is deployed in the deployment phase which includes cilium-test-ccnp1 namespace and cilium-test-ccnp2 test namespace and each has a pod deployed within it where connectivity is tested between the pods with the corresponding scenarios below.

  • Egress-to-Specific-Namespace-CCNP
  • Ingress-From-Specific-Namespace-CCNP
<style> </style>
Test Name CNP Deployed CCNP Deployed Description of Test
Egress-to-Specific-Namespace-CCNP No Yes This deploys a CCNP that allows pods in the cilium-test-ccnp1 namespace to send egress traffic to pods in the cilium-test-ccnp2 namespace and then verifies their connectivity through having the pods ping each other across namespaces.
Ingress-From-Specific-Namespace-CCNP No Yes This test deploys a CCNP that allows pods in the cilium-test-ccnp1 namespace to receive traffic from pods in the cilium-test-ccnp2 namespace and then verifies connectivity through pods pinging each other across namespaces
<style> </style>
Cluster type/Cilium version Regular Multiple Ns Force Deploy
quay.io/cilium/cilium:v1.19.0-pre.1   kind Passed Passed Passed
quay.io/cilium/cilium:v1.18.2   kind Passed Passed Passed
quay.io/cilium/cilium:v1.17.8   kind Passed Passed Passed
quay.io/cilium/cilium:v1.16.15     kind Passed Passed Passed
aks single stack cilium 1.14 Passed Passed Passed
aks dual stack cilium 1.14 Passed Passed Passed
aks single stack cilium 1.17 Passed Passed Passed
aks dual stack cilium 1.17 Passed Passed Passed
aks ss cilium 1.16 Passed Passed Passed
aks ds cilium 1.16 Passed Passed Passed

Please ensure your pull request adheres to the following guidelines:

  • For first time contributors, read Submitting a pull request
  • All code is covered by unit and/or runtime tests where feasible.
  • All commits contain a well written commit description including a title,
    description and a Fixes: #XXX line if the commit addresses a particular
    GitHub issue.
  • If your commit description contains a Fixes: <commit-id> tag, then
    please add the commit author[s] as reviewer[s] to this issue.
  • All commits are signed off. See the section Developer’s Certificate of Origin
  • Provide a title or release-note blurb suitable for the release notes.
  • Are you a user of Cilium? Please add yourself to the Users doc
  • Thanks for contributing!

Fixes: #issue-number

Add CCNP cilium connectivity tests

@maintainer-s-little-helper maintainer-s-little-helper bot added the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Oct 6, 2025
@github-actions github-actions bot added cilium-cli This PR contains changes related with cilium-cli cilium-cli-exclusive This PR only impacts cilium-cli binary kind/community-contribution This was a contribution made by a community member. labels Oct 6, 2025
@karina-ranadive karina-ranadive marked this pull request as ready for review October 8, 2025 18:29
@karina-ranadive karina-ranadive requested a review from a team as a code owner October 8, 2025 18:29
Copy link
Copy Markdown
Member

@christarazi christarazi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for submitting this PR!

Can you elaborate on the justification and motivation for this change?

@karina-ranadive
Copy link
Copy Markdown
Author

Thanks for submitting this PR!

Can you elaborate on the justification and motivation for this change?

Yeah the motivation for this change is to have cilium connectivity tests for Cilium Clusterwide Network Policies since there is not any present yet for end to end coverage.

@pchaigno pchaigno added the release-note/ci This PR makes changes to the CI. label Oct 9, 2025
@maintainer-s-little-helper maintainer-s-little-helper bot removed the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Oct 9, 2025
@maintainer-s-little-helper

This comment was marked as resolved.

@maintainer-s-little-helper maintainer-s-little-helper bot added the dont-merge/needs-sign-off The author needs to add signoff to their commits before merge. label Oct 28, 2025
@maintainer-s-little-helper maintainer-s-little-helper bot removed the dont-merge/needs-sign-off The author needs to add signoff to their commits before merge. label Oct 28, 2025
@vipul-21
Copy link
Copy Markdown
Contributor

/test

@pchaigno pchaigno requested a review from christarazi October 28, 2025 08:39
@karina-ranadive karina-ranadive force-pushed the pr/addCCNPTests branch 2 times, most recently from 3b9a56e to f783767 Compare November 10, 2025 18:59
@pchaigno pchaigno requested a review from a team November 11, 2025 12:39
Copy link
Copy Markdown
Member

@pchaigno pchaigno left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Only small formatting stuff below.

@maintainer-s-little-helper

This comment was marked as resolved.

@maintainer-s-little-helper maintainer-s-little-helper bot added the dont-merge/needs-sign-off The author needs to add signoff to their commits before merge. label Nov 11, 2025
@maintainer-s-little-helper maintainer-s-little-helper bot removed the dont-merge/needs-sign-off The author needs to add signoff to their commits before merge. label Nov 11, 2025
Creates 2 cilium connectivity tests to validate the functionality of
CCNP. This includes the deployment of the CCNP testing environment
with: Egress-to-Specific-Namespace-CCNP,Ingress-From-Specific-Namespace-CCNP
Signed-off-by: Karina Ranadive <[email protected]>
@pchaigno
Copy link
Copy Markdown
Member

/test

@pchaigno pchaigno enabled auto-merge November 13, 2025 07:58
@pchaigno pchaigno added this pull request to the merge queue Nov 13, 2025
@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Nov 13, 2025
Merged via the queue into cilium:main with commit d067b16 Nov 13, 2025
72 of 74 checks passed
zocimek added a commit to zocimek/home-ops that referenced this pull request Dec 9, 2025
… ) (#398)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[aqua:cilium/cilium-cli](https://redirect.github.com/cilium/cilium-cli)
| patch | `0.18.7` -> `0.18.9` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>cilium/cilium-cli (aqua:cilium/cilium-cli)</summary>

###
[`v0.18.9`](https://redirect.github.com/cilium/cilium-cli/releases/tag/v0.18.9)

[Compare
Source](https://redirect.github.com/cilium/cilium-cli/compare/v0.18.8...v0.18.9)

## Summary of Changes

**Major Changes:**

- Operator prometheus support TLS/mTLS using existing secret
([cilium/cilium#42077](https://redirect.github.com/cilium/cilium/issues/42077),
[@&#8203;phuhung273](https://redirect.github.com/phuhung273))

**Minor Changes:**

- CLI: Allow users to set the default Cilium namespace via the
CILIUM\_NAMESPACE environment variable
([cilium/cilium#41557](https://redirect.github.com/cilium/cilium/issues/41557),
[@&#8203;td0ne](https://redirect.github.com/td0ne))
- Removed deprecated `CiliumBGPPeeringPolicy` CRD and its agent
implementation. Use `cilium.io/v2` CRDs (`CiliumBGPClusterConfig`,
`CiliumBGPPeerConfig`, `CiliumBGPAdvertisement`,
`CiliumBGPNodeConfigOverride`) for configuring BGP.
([cilium/cilium#42278](https://redirect.github.com/cilium/cilium/issues/42278),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))

**CI Changes:**

- Add CCNP cilium connectivity tests
([cilium/cilium#42051](https://redirect.github.com/cilium/cilium/issues/42051),
[@&#8203;karina-ranadive](https://redirect.github.com/karina-ranadive))
- Fix connectivity tests for access to link-local nodelocaldns
classified as 'host' entity
([cilium/cilium#42984](https://redirect.github.com/cilium/cilium/issues/42984),
[@&#8203;rptaylor](https://redirect.github.com/rptaylor))

**Misc Changes:**

- bgp: Correct misleading error message in GetPeeringState
([cilium/cilium#42945](https://redirect.github.com/cilium/cilium/issues/42945),
[@&#8203;hargrovee](https://redirect.github.com/hargrovee))
- bgp: Remove versions from bgp package names
([cilium/cilium#42503](https://redirect.github.com/cilium/cilium/issues/42503),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- cilium-cli: add own type for root command parameters
([cilium/cilium#42609](https://redirect.github.com/cilium/cilium/issues/42609),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cli: cleanups for pre-v1.15 removal
([cilium/cilium#42757](https://redirect.github.com/cilium/cilium/issues/42757),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- cli: require Cilium v1.15
([cilium/cilium#41538](https://redirect.github.com/cilium/cilium/issues/41538),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- go.mod, vendor: bump github.com/google/go-github to v79
([cilium/cilium#42857](https://redirect.github.com/cilium/cilium/issues/42857),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- Update lrp frontend IP address to avoid IMDS conflict in the cloud
environment in cilium-cli
([cilium/cilium#42737](https://redirect.github.com/cilium/cilium/issues/42737),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))
- Use modern Go constructs
([cilium/cilium#42525](https://redirect.github.com/cilium/cilium/issues/42525),
[@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))
- Update stable release to v0.18.8 by
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent) in
[#&#8203;3121](https://redirect.github.com/cilium/cilium-cli/pull/3121)
- chore(deps): update actions/upload-artifact action to v5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3124](https://redirect.github.com/cilium/cilium-cli/pull/3124)
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`8c945d3`](https://redirect.github.com/cilium/cilium-cli/commit/8c945d3)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3122](https://redirect.github.com/cilium/cilium-cli/pull/3122)
- chore(deps): update dependency cilium/cilium to v1.18.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3123](https://redirect.github.com/cilium/cilium-cli/pull/3123)
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`6bac879`](https://redirect.github.com/cilium/cilium-cli/commit/6bac879)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3125](https://redirect.github.com/cilium/cilium-cli/pull/3125)
- renovate: try to group dependency updates by
[@&#8203;tklauser](https://redirect.github.com/tklauser) in
[#&#8203;3126](https://redirect.github.com/cilium/cilium-cli/pull/3126)
- chore(deps): update golangci/golangci-lint docker tag to v2.6.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3127](https://redirect.github.com/cilium/cilium-cli/pull/3127)
- chore(deps): update helm/kind-action action to v1.13.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3128](https://redirect.github.com/cilium/cilium-cli/pull/3128)
- chore(deps): update golangci/golangci-lint docker tag to v2.6.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3129](https://redirect.github.com/cilium/cilium-cli/pull/3129)
- chore(deps): update golang docker tag to v1.25.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3130](https://redirect.github.com/cilium/cilium-cli/pull/3130)
- chore(deps): update go to v1.25.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3131](https://redirect.github.com/cilium/cilium-cli/pull/3131)
- chore(deps): update golang:1.25.4-alpine3.21 docker digest to
[`3289aac`](https://redirect.github.com/cilium/cilium-cli/commit/3289aac)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3132](https://redirect.github.com/cilium/cilium-cli/pull/3132)
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to
[`e68f6a0`](https://redirect.github.com/cilium/cilium-cli/commit/e68f6a0)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3135](https://redirect.github.com/cilium/cilium-cli/pull/3135)
- chore(deps): update golangci/golangci-lint docker tag to v2.6.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3136](https://redirect.github.com/cilium/cilium-cli/pull/3136)
- chore(deps): update golangci/golangci-lint-action action to v9 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3133](https://redirect.github.com/cilium/cilium-cli/pull/3133)
- chore(deps): update dependency cilium/cilium to v1.18.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3134](https://redirect.github.com/cilium/cilium-cli/pull/3134)
- chore(deps): update all github action dependencies by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3137](https://redirect.github.com/cilium/cilium-cli/pull/3137)
- chore(deps): update actions/setup-go action to v6.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3138](https://redirect.github.com/cilium/cilium-cli/pull/3138)
- chore(deps): update actions/checkout action to v6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3139](https://redirect.github.com/cilium/cilium-cli/pull/3139)
- chore(deps): update golangci/golangci-lint-action action to v9.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3141](https://redirect.github.com/cilium/cilium-cli/pull/3141)
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to
[`f60eaa8`](https://redirect.github.com/cilium/cilium-cli/commit/f60eaa8)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3140](https://redirect.github.com/cilium/cilium-cli/pull/3140)
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to
[`6981837`](https://redirect.github.com/cilium/cilium-cli/commit/6981837)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3143](https://redirect.github.com/cilium/cilium-cli/pull/3143)
- chore(deps): update softprops/action-gh-release action to v2.5.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3144](https://redirect.github.com/cilium/cilium-cli/pull/3144)
- chore(deps): update golang docker tag to v1.25.5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3147](https://redirect.github.com/cilium/cilium-cli/pull/3147)
- chore(deps): update actions/checkout action to v6.0.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3146](https://redirect.github.com/cilium/cilium-cli/pull/3146)
- Prepare for v0.18.9 release by
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent) in
[#&#8203;3145](https://redirect.github.com/cilium/cilium-cli/pull/3145)

**Full Changelog**:
<cilium/cilium-cli@v0.18.8...v0.18.9>

###
[`v0.18.8`](https://redirect.github.com/cilium/cilium-cli/releases/tag/v0.18.8)

[Compare
Source](https://redirect.github.com/cilium/cilium-cli/compare/v0.18.7...v0.18.8)

## Summary of Changes

**Minor Changes:**

- clustermesh: add endpoints metrics and change global service (and MCS
ServiceExport) metrics to report per cluster metrics instead of a global
count
([cilium/cilium#41323](https://redirect.github.com/cilium/cilium/issues/41323),
[@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))

**Bugfixes:**

- cilium-cli: Fix CNI config file collection in sysdump
([cilium/cilium#42111](https://redirect.github.com/cilium/cilium/issues/42111),
[@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))
- cilium-cli: Prevent panic in `node-to-node-encryption` connectivity
test
([cilium/cilium#41600](https://redirect.github.com/cilium/cilium/issues/41600),
[@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))
- connectivity-tests: limit IPv6 PodToIngress to Cilium >= v1.17
([cilium/cilium#42148](https://redirect.github.com/cilium/cilium/issues/42148),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Fix a fatal error when accessing multicast map using cilium-dbg bpf
multicast
([cilium/cilium#42080](https://redirect.github.com/cilium/cilium/issues/42080),
[@&#8203;tklauser](https://redirect.github.com/tklauser))

**CI Changes:**

- Add integration test to validate IPsec key derivation consistency
across nodes, ensuring tunnel keys are properly derived and identical
between Cilium pods.
([cilium/cilium#40808](https://redirect.github.com/cilium/cilium/issues/40808),
[@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))
- ci: enable copyloopvar linter
([cilium/cilium#41893](https://redirect.github.com/cilium/cilium/issues/41893),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cilium-cli, netns: fix golangci-lint 2.5.0 errors
([cilium/cilium#41856](https://redirect.github.com/cilium/cilium/issues/41856),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cilium-cli: Bring back NodePort Acceleration feature detection
([cilium/cilium#41812](https://redirect.github.com/cilium/cilium/issues/41812),
[@&#8203;brb](https://redirect.github.com/brb))
- cilium-cli: Reenable L7 IPv6 tests
([cilium/cilium#39662](https://redirect.github.com/cilium/cilium/issues/39662),
[@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))
- cilium-cli: Specify TARGET for building release binaries
([cilium/cilium#42177](https://redirect.github.com/cilium/cilium/issues/42177),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- cilium\_cli: Override GO\_BUILD Make variable
([cilium/cilium#42162](https://redirect.github.com/cilium/cilium/issues/42162),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- cli, ipsec: Fix bidirectional IPsec tunnel check
([cilium/cilium#42047](https://redirect.github.com/cilium/cilium/issues/42047),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- cli: Fix unreliable tests due to error emitted in Cilium logs
"retrieving device lxc\*: Link not found"
([cilium/cilium#42146](https://redirect.github.com/cilium/cilium/issues/42146),
[@&#8203;fristonio](https://redirect.github.com/fristonio))

**Misc Changes:**

- chore(deps): update all-dependencies (main)
([cilium/cilium#41611](https://redirect.github.com/cilium/cilium/issues/41611),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (main)
([cilium/cilium#42018](https://redirect.github.com/cilium/cilium/issues/42018),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/alpine/socat:1.8.0.3 docker digest to
[`0ce60b5`](https://redirect.github.com/cilium/cilium-cli/commit/0ce60b5)
(main)
([cilium/cilium#41558](https://redirect.github.com/cilium/cilium/issues/41558),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`8305f5f`](https://redirect.github.com/cilium/cilium-cli/commit/8305f5f)
(main)
([cilium/cilium#41649](https://redirect.github.com/cilium/cilium/issues/41649),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`d709837`](https://redirect.github.com/cilium/cilium-cli/commit/d709837)
(main)
([cilium/cilium#42019](https://redirect.github.com/cilium/cilium/issues/42019),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`6ea52a0`](https://redirect.github.com/cilium/cilium-cli/commit/6ea52a0)
(main)
([cilium/cilium#42252](https://redirect.github.com/cilium/cilium/issues/42252),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.25.1 (main)
([cilium/cilium#41560](https://redirect.github.com/cilium/cilium/issues/41560),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.25.3 (main)
([cilium/cilium#42061](https://redirect.github.com/cilium/cilium/issues/42061),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- cilium-cli/features: use common cmd metric list command
([cilium/cilium#41630](https://redirect.github.com/cilium/cilium/issues/41630),
[@&#8203;aanm](https://redirect.github.com/aanm))
- cilium-cli: drop disabled IP cache check from connectivity tests
([cilium/cilium#42240](https://redirect.github.com/cilium/cilium/issues/42240),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cli/clustermesh: remove leftover global services status info
([cilium/cilium#41727](https://redirect.github.com/cilium/cilium/issues/41727),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Refactor policy engine to use PolicyEntry as the internal
representation of policies, as described in CFP-39646.
([cilium/cilium#40213](https://redirect.github.com/cilium/cilium/issues/40213),
[@&#8203;TheBeeZee](https://redirect.github.com/TheBeeZee))
- sysdump: add resource usage of nodes and pods
([cilium/cilium#41415](https://redirect.github.com/cilium/cilium/issues/41415),
[@&#8203;darox](https://redirect.github.com/darox))
- chore(deps): update go to v1.25.1 (patch) by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3097](https://redirect.github.com/cilium/cilium-cli/pull/3097)
- chore(deps): update actions/setup-go action to v6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3094](https://redirect.github.com/cilium/cilium-cli/pull/3094)
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`d6bdb04`](https://redirect.github.com/cilium/cilium-cli/commit/d6bdb04)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3096](https://redirect.github.com/cilium/cilium-cli/pull/3096)
- chore(deps): update gcr.io/distroless/static:latest docker digest to
[`87bce11`](https://redirect.github.com/cilium/cilium-cli/commit/87bce11)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3099](https://redirect.github.com/cilium/cilium-cli/pull/3099)
- chore(deps): update softprops/action-gh-release action to v2.3.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3098](https://redirect.github.com/cilium/cilium-cli/pull/3098)
- chore(deps): update golang docker tag to v1.25.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3093](https://redirect.github.com/cilium/cilium-cli/pull/3093)
- chore(deps): update actions/stale action to v10 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3095](https://redirect.github.com/cilium/cilium-cli/pull/3095)
- chore(deps): update golang:1.25.1-alpine3.21 docker digest to
[`331bde4`](https://redirect.github.com/cilium/cilium-cli/commit/331bde4)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3100](https://redirect.github.com/cilium/cilium-cli/pull/3100)
- chore(deps): update dependency cilium/cilium to v1.18.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3102](https://redirect.github.com/cilium/cilium-cli/pull/3102)
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`8305f5f`](https://redirect.github.com/cilium/cilium-cli/commit/8305f5f)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3103](https://redirect.github.com/cilium/cilium-cli/pull/3103)
- chore(deps): update golangci/golangci-lint docker tag to v2.5.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3104](https://redirect.github.com/cilium/cilium-cli/pull/3104)
- chore(deps): update docker/login-action action to v3.6.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3105](https://redirect.github.com/cilium/cilium-cli/pull/3105)
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`ab1f5c4`](https://redirect.github.com/cilium/cilium-cli/commit/ab1f5c4)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3106](https://redirect.github.com/cilium/cilium-cli/pull/3106)
- chore(deps): update actions/stale action to v10.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3108](https://redirect.github.com/cilium/cilium-cli/pull/3108)
- chore(deps): update softprops/action-gh-release action to v2.3.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3107](https://redirect.github.com/cilium/cilium-cli/pull/3107)
- chore(deps): update softprops/action-gh-release action to v2.4.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3109](https://redirect.github.com/cilium/cilium-cli/pull/3109)
- chore(deps): update golang docker tag to v1.25.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3110](https://redirect.github.com/cilium/cilium-cli/pull/3110)
- chore(deps): update go to v1.25.2 (patch) by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3112](https://redirect.github.com/cilium/cilium-cli/pull/3112)
- chore(deps): update golang:1.25.2-alpine3.21 docker digest to
[`0134653`](https://redirect.github.com/cilium/cilium-cli/commit/0134653)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3113](https://redirect.github.com/cilium/cilium-cli/pull/3113)
- RELEASE: also look for release-blockers in cilium/cilium by
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann) in
[#&#8203;3116](https://redirect.github.com/cilium/cilium-cli/pull/3116)
- chore(deps): update golang docker tag to v1.25.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3117](https://redirect.github.com/cilium/cilium-cli/pull/3117)
- chore(deps): update softprops/action-gh-release action to v2.4.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3114](https://redirect.github.com/cilium/cilium-cli/pull/3114)
- chore(deps): update go to v1.25.3 (patch) by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3118](https://redirect.github.com/cilium/cilium-cli/pull/3118)
- chore(deps): update golang:1.25.3-alpine3.21 docker digest to
[`0c9f3e0`](https://redirect.github.com/cilium/cilium-cli/commit/0c9f3e0)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3115](https://redirect.github.com/cilium/cilium-cli/pull/3115)
- Makefile: fix renovate depname for GO\_IMAGE\_\* updates by
[@&#8203;tklauser](https://redirect.github.com/tklauser) in
[#&#8203;3119](https://redirect.github.com/cilium/cilium-cli/pull/3119)
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`6ea52a0`](https://redirect.github.com/cilium/cilium-cli/commit/6ea52a0)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3111](https://redirect.github.com/cilium/cilium-cli/pull/3111)
- Prepare for v0.18.8 release by
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent) in
[#&#8203;3120](https://redirect.github.com/cilium/cilium-cli/pull/3120)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTcuMSIsInVwZGF0ZWRJblZlciI6IjQyLjMwLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInR5cGUvcGF0Y2giXX0=-->

Co-authored-by: zocimek-renovate[bot] <134739422+zocimek-renovate[bot]@users.noreply.github.com>
Co-authored-by: Łukasz Pospiech <[email protected]>
@cilium-release-bot cilium-release-bot bot moved this to Released in cilium v1.19.0 Feb 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cilium-cli This PR contains changes related with cilium-cli cilium-cli-exclusive This PR only impacts cilium-cli binary kind/community-contribution This was a contribution made by a community member. ready-to-merge This PR has passed all tests and received consensus from code owners to merge. release-note/ci This PR makes changes to the CI.

Projects

No open projects
Status: Released

Development

Successfully merging this pull request may close these issues.

4 participants