Skip to content

Fix connectivity tests for access to link-local (host) nodelocaldns#42984

Merged
pchaigno merged 1 commit intocilium:mainfrom
rptaylor:20251125-dns-policy
Dec 1, 2025
Merged

Fix connectivity tests for access to link-local (host) nodelocaldns#42984
pchaigno merged 1 commit intocilium:mainfrom
rptaylor:20251125-dns-policy

Conversation

@rptaylor
Copy link
Copy Markdown
Contributor

@rptaylor rptaylor commented Nov 25, 2025

Please ensure your pull request adheres to the following guidelines:

  • For first time contributors, read Submitting a pull request
  • All code is covered by unit and/or runtime tests where feasible.
  • All commits contain a well written commit description including a title,
    description and a Fixes: #XXX line if the commit addresses a particular
    GitHub issue.
  • If your commit description contains a Fixes: <commit-id> tag, then
    please add the commit author[s] as reviewer[s] to this issue.
  • All commits are signed off. See the section Developer’s Certificate of Origin
  • Provide a title or release-note blurb suitable for the release notes.
  • Are you a user of Cilium? Please add yourself to the Users doc
  • Thanks for contributing!

Fixes: #42528

As discussed there, the policy required for the link-local mode of nodelocaldns to work is now with entity 'host' instead of 'world', but I did not remove 'world' because that would be a risk of a breaking change in case some other unknown use case relies on it. I only added 'host'.

Fix connectivity tests for access to link-local nodelocaldns classified as 'host' entity

@rptaylor rptaylor requested review from a team as code owners November 25, 2025 23:46
@rptaylor rptaylor requested a review from gandro November 25, 2025 23:46
@maintainer-s-little-helper
Copy link
Copy Markdown

@rptaylor rptaylor requested a review from Artyop November 25, 2025 23:46
@maintainer-s-little-helper maintainer-s-little-helper bot added dont-merge/needs-sign-off The author needs to add signoff to their commits before merge. dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. labels Nov 25, 2025
@github-actions github-actions bot added cilium-cli This PR contains changes related with cilium-cli kind/community-contribution This was a contribution made by a community member. labels Nov 25, 2025
@rptaylor rptaylor force-pushed the 20251125-dns-policy branch from dfac21f to 468d3ec Compare November 25, 2025 23:46
@maintainer-s-little-helper
Copy link
Copy Markdown

@rptaylor rptaylor force-pushed the 20251125-dns-policy branch from 468d3ec to fedbd84 Compare November 25, 2025 23:52
@maintainer-s-little-helper
Copy link
Copy Markdown

@rptaylor rptaylor force-pushed the 20251125-dns-policy branch from fedbd84 to c3be1bf Compare November 25, 2025 23:58
@maintainer-s-little-helper maintainer-s-little-helper bot removed the dont-merge/needs-sign-off The author needs to add signoff to their commits before merge. label Nov 25, 2025
@rptaylor
Copy link
Copy Markdown
Contributor Author

I'm not sure about client-egress-node-local-dns.yaml ; this seems to allow nodelocaldns only via a service. It doesn't have the 'world' workaround so I figured it shouldn't need the 'host' one either.

@rptaylor
Copy link
Copy Markdown
Contributor Author

Can this be tagged in a v1.17 release please?

Copy link
Copy Markdown
Member

@gandro gandro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! However, if the last version to show the old behavior is Cilium v1.13, then I think we should no longer special case it. Our CLI only supports Cilium v1.15 and newer: #41538

@gandro
Copy link
Copy Markdown
Member

gandro commented Nov 26, 2025

Can this be tagged in a v1.17 release please?

Since this only affects Cilium CLI, we cannot backport these changes, as Cilium CLI is not not tagged from release branches (in fact, the affected files don't even exist in the v1.17 branch anymore). But the next version of Cilium CLI that is released after this has been merged will contain these fixes.

@gandro gandro added the release-note/ci This PR makes changes to the CI. label Nov 26, 2025
@maintainer-s-little-helper maintainer-s-little-helper bot removed the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Nov 26, 2025
@maintainer-s-little-helper
Copy link
Copy Markdown

@maintainer-s-little-helper maintainer-s-little-helper bot added the dont-merge/needs-sign-off The author needs to add signoff to their commits before merge. label Nov 26, 2025
@gandro
Copy link
Copy Markdown
Member

gandro commented Nov 27, 2025

Please also note that we cannot merge this PR when the branch contains a merge commit as it currently does. Use rebase to pull in the most recent upstream changes (though that should only be necessary if there are breaking changes to the tests). Make sure your change is neatly contained in one single commit.

Copy link
Copy Markdown
Contributor

@Artyop Artyop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi! Thanks for the PR. Please remove the merge commit and rebase the branch onto main to avoid unsigned commits and keep the history clean.

@rptaylor rptaylor force-pushed the 20251125-dns-policy branch from 1c10354 to 518babd Compare November 27, 2025 20:22
@maintainer-s-little-helper maintainer-s-little-helper bot removed the dont-merge/needs-sign-off The author needs to add signoff to their commits before merge. label Nov 27, 2025
@Artyop Artyop self-requested a review November 28, 2025 00:43
@Artyop
Copy link
Copy Markdown
Contributor

Artyop commented Nov 28, 2025

/test

Copy link
Copy Markdown
Contributor

@Artyop Artyop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

from ci-structure perspective lgtm

Copy link
Copy Markdown
Member

@gandro gandro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Dec 1, 2025
@pchaigno pchaigno added this pull request to the merge queue Dec 1, 2025
Merged via the queue into cilium:main with commit aa5b4a9 Dec 1, 2025
77 checks passed
zocimek added a commit to zocimek/home-ops that referenced this pull request Dec 9, 2025
… ) (#398)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[aqua:cilium/cilium-cli](https://redirect.github.com/cilium/cilium-cli)
| patch | `0.18.7` -> `0.18.9` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>cilium/cilium-cli (aqua:cilium/cilium-cli)</summary>

###
[`v0.18.9`](https://redirect.github.com/cilium/cilium-cli/releases/tag/v0.18.9)

[Compare
Source](https://redirect.github.com/cilium/cilium-cli/compare/v0.18.8...v0.18.9)

## Summary of Changes

**Major Changes:**

- Operator prometheus support TLS/mTLS using existing secret
([cilium/cilium#42077](https://redirect.github.com/cilium/cilium/issues/42077),
[@&#8203;phuhung273](https://redirect.github.com/phuhung273))

**Minor Changes:**

- CLI: Allow users to set the default Cilium namespace via the
CILIUM\_NAMESPACE environment variable
([cilium/cilium#41557](https://redirect.github.com/cilium/cilium/issues/41557),
[@&#8203;td0ne](https://redirect.github.com/td0ne))
- Removed deprecated `CiliumBGPPeeringPolicy` CRD and its agent
implementation. Use `cilium.io/v2` CRDs (`CiliumBGPClusterConfig`,
`CiliumBGPPeerConfig`, `CiliumBGPAdvertisement`,
`CiliumBGPNodeConfigOverride`) for configuring BGP.
([cilium/cilium#42278](https://redirect.github.com/cilium/cilium/issues/42278),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))

**CI Changes:**

- Add CCNP cilium connectivity tests
([cilium/cilium#42051](https://redirect.github.com/cilium/cilium/issues/42051),
[@&#8203;karina-ranadive](https://redirect.github.com/karina-ranadive))
- Fix connectivity tests for access to link-local nodelocaldns
classified as 'host' entity
([cilium/cilium#42984](https://redirect.github.com/cilium/cilium/issues/42984),
[@&#8203;rptaylor](https://redirect.github.com/rptaylor))

**Misc Changes:**

- bgp: Correct misleading error message in GetPeeringState
([cilium/cilium#42945](https://redirect.github.com/cilium/cilium/issues/42945),
[@&#8203;hargrovee](https://redirect.github.com/hargrovee))
- bgp: Remove versions from bgp package names
([cilium/cilium#42503](https://redirect.github.com/cilium/cilium/issues/42503),
[@&#8203;rastislavs](https://redirect.github.com/rastislavs))
- cilium-cli: add own type for root command parameters
([cilium/cilium#42609](https://redirect.github.com/cilium/cilium/issues/42609),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cli: cleanups for pre-v1.15 removal
([cilium/cilium#42757](https://redirect.github.com/cilium/cilium/issues/42757),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- cli: require Cilium v1.15
([cilium/cilium#41538](https://redirect.github.com/cilium/cilium/issues/41538),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- go.mod, vendor: bump github.com/google/go-github to v79
([cilium/cilium#42857](https://redirect.github.com/cilium/cilium/issues/42857),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- Update lrp frontend IP address to avoid IMDS conflict in the cloud
environment in cilium-cli
([cilium/cilium#42737](https://redirect.github.com/cilium/cilium/issues/42737),
[@&#8203;liyihuang](https://redirect.github.com/liyihuang))
- Use modern Go constructs
([cilium/cilium#42525](https://redirect.github.com/cilium/cilium/issues/42525),
[@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))
- Update stable release to v0.18.8 by
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent) in
[#&#8203;3121](https://redirect.github.com/cilium/cilium-cli/pull/3121)
- chore(deps): update actions/upload-artifact action to v5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3124](https://redirect.github.com/cilium/cilium-cli/pull/3124)
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`8c945d3`](https://redirect.github.com/cilium/cilium-cli/commit/8c945d3)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3122](https://redirect.github.com/cilium/cilium-cli/pull/3122)
- chore(deps): update dependency cilium/cilium to v1.18.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3123](https://redirect.github.com/cilium/cilium-cli/pull/3123)
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`6bac879`](https://redirect.github.com/cilium/cilium-cli/commit/6bac879)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3125](https://redirect.github.com/cilium/cilium-cli/pull/3125)
- renovate: try to group dependency updates by
[@&#8203;tklauser](https://redirect.github.com/tklauser) in
[#&#8203;3126](https://redirect.github.com/cilium/cilium-cli/pull/3126)
- chore(deps): update golangci/golangci-lint docker tag to v2.6.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3127](https://redirect.github.com/cilium/cilium-cli/pull/3127)
- chore(deps): update helm/kind-action action to v1.13.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3128](https://redirect.github.com/cilium/cilium-cli/pull/3128)
- chore(deps): update golangci/golangci-lint docker tag to v2.6.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3129](https://redirect.github.com/cilium/cilium-cli/pull/3129)
- chore(deps): update golang docker tag to v1.25.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3130](https://redirect.github.com/cilium/cilium-cli/pull/3130)
- chore(deps): update go to v1.25.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3131](https://redirect.github.com/cilium/cilium-cli/pull/3131)
- chore(deps): update golang:1.25.4-alpine3.21 docker digest to
[`3289aac`](https://redirect.github.com/cilium/cilium-cli/commit/3289aac)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3132](https://redirect.github.com/cilium/cilium-cli/pull/3132)
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to
[`e68f6a0`](https://redirect.github.com/cilium/cilium-cli/commit/e68f6a0)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3135](https://redirect.github.com/cilium/cilium-cli/pull/3135)
- chore(deps): update golangci/golangci-lint docker tag to v2.6.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3136](https://redirect.github.com/cilium/cilium-cli/pull/3136)
- chore(deps): update golangci/golangci-lint-action action to v9 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3133](https://redirect.github.com/cilium/cilium-cli/pull/3133)
- chore(deps): update dependency cilium/cilium to v1.18.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3134](https://redirect.github.com/cilium/cilium-cli/pull/3134)
- chore(deps): update all github action dependencies by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3137](https://redirect.github.com/cilium/cilium-cli/pull/3137)
- chore(deps): update actions/setup-go action to v6.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3138](https://redirect.github.com/cilium/cilium-cli/pull/3138)
- chore(deps): update actions/checkout action to v6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3139](https://redirect.github.com/cilium/cilium-cli/pull/3139)
- chore(deps): update golangci/golangci-lint-action action to v9.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3141](https://redirect.github.com/cilium/cilium-cli/pull/3141)
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to
[`f60eaa8`](https://redirect.github.com/cilium/cilium-cli/commit/f60eaa8)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3140](https://redirect.github.com/cilium/cilium-cli/pull/3140)
- chore(deps): update docker.io/library/golang:1.25.4 docker digest to
[`6981837`](https://redirect.github.com/cilium/cilium-cli/commit/6981837)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3143](https://redirect.github.com/cilium/cilium-cli/pull/3143)
- chore(deps): update softprops/action-gh-release action to v2.5.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3144](https://redirect.github.com/cilium/cilium-cli/pull/3144)
- chore(deps): update golang docker tag to v1.25.5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3147](https://redirect.github.com/cilium/cilium-cli/pull/3147)
- chore(deps): update actions/checkout action to v6.0.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3146](https://redirect.github.com/cilium/cilium-cli/pull/3146)
- Prepare for v0.18.9 release by
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent) in
[#&#8203;3145](https://redirect.github.com/cilium/cilium-cli/pull/3145)

**Full Changelog**:
<cilium/cilium-cli@v0.18.8...v0.18.9>

###
[`v0.18.8`](https://redirect.github.com/cilium/cilium-cli/releases/tag/v0.18.8)

[Compare
Source](https://redirect.github.com/cilium/cilium-cli/compare/v0.18.7...v0.18.8)

## Summary of Changes

**Minor Changes:**

- clustermesh: add endpoints metrics and change global service (and MCS
ServiceExport) metrics to report per cluster metrics instead of a global
count
([cilium/cilium#41323](https://redirect.github.com/cilium/cilium/issues/41323),
[@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))

**Bugfixes:**

- cilium-cli: Fix CNI config file collection in sysdump
([cilium/cilium#42111](https://redirect.github.com/cilium/cilium/issues/42111),
[@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))
- cilium-cli: Prevent panic in `node-to-node-encryption` connectivity
test
([cilium/cilium#41600](https://redirect.github.com/cilium/cilium/issues/41600),
[@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))
- connectivity-tests: limit IPv6 PodToIngress to Cilium >= v1.17
([cilium/cilium#42148](https://redirect.github.com/cilium/cilium/issues/42148),
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
- Fix a fatal error when accessing multicast map using cilium-dbg bpf
multicast
([cilium/cilium#42080](https://redirect.github.com/cilium/cilium/issues/42080),
[@&#8203;tklauser](https://redirect.github.com/tklauser))

**CI Changes:**

- Add integration test to validate IPsec key derivation consistency
across nodes, ensuring tunnel keys are properly derived and identical
between Cilium pods.
([cilium/cilium#40808](https://redirect.github.com/cilium/cilium/issues/40808),
[@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))
- ci: enable copyloopvar linter
([cilium/cilium#41893](https://redirect.github.com/cilium/cilium/issues/41893),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cilium-cli, netns: fix golangci-lint 2.5.0 errors
([cilium/cilium#41856](https://redirect.github.com/cilium/cilium/issues/41856),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cilium-cli: Bring back NodePort Acceleration feature detection
([cilium/cilium#41812](https://redirect.github.com/cilium/cilium/issues/41812),
[@&#8203;brb](https://redirect.github.com/brb))
- cilium-cli: Reenable L7 IPv6 tests
([cilium/cilium#39662](https://redirect.github.com/cilium/cilium/issues/39662),
[@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))
- cilium-cli: Specify TARGET for building release binaries
([cilium/cilium#42177](https://redirect.github.com/cilium/cilium/issues/42177),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- cilium\_cli: Override GO\_BUILD Make variable
([cilium/cilium#42162](https://redirect.github.com/cilium/cilium/issues/42162),
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent))
- cli, ipsec: Fix bidirectional IPsec tunnel check
([cilium/cilium#42047](https://redirect.github.com/cilium/cilium/issues/42047),
[@&#8203;pchaigno](https://redirect.github.com/pchaigno))
- cli: Fix unreliable tests due to error emitted in Cilium logs
"retrieving device lxc\*: Link not found"
([cilium/cilium#42146](https://redirect.github.com/cilium/cilium/issues/42146),
[@&#8203;fristonio](https://redirect.github.com/fristonio))

**Misc Changes:**

- chore(deps): update all-dependencies (main)
([cilium/cilium#41611](https://redirect.github.com/cilium/cilium/issues/41611),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (main)
([cilium/cilium#42018](https://redirect.github.com/cilium/cilium/issues/42018),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/alpine/socat:1.8.0.3 docker digest to
[`0ce60b5`](https://redirect.github.com/cilium/cilium-cli/commit/0ce60b5)
(main)
([cilium/cilium#41558](https://redirect.github.com/cilium/cilium/issues/41558),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`8305f5f`](https://redirect.github.com/cilium/cilium-cli/commit/8305f5f)
(main)
([cilium/cilium#41649](https://redirect.github.com/cilium/cilium/issues/41649),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`d709837`](https://redirect.github.com/cilium/cilium-cli/commit/d709837)
(main)
([cilium/cilium#42019](https://redirect.github.com/cilium/cilium/issues/42019),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`6ea52a0`](https://redirect.github.com/cilium/cilium-cli/commit/6ea52a0)
(main)
([cilium/cilium#42252](https://redirect.github.com/cilium/cilium/issues/42252),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.25.1 (main)
([cilium/cilium#41560](https://redirect.github.com/cilium/cilium/issues/41560),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.25.3 (main)
([cilium/cilium#42061](https://redirect.github.com/cilium/cilium/issues/42061),
[@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- cilium-cli/features: use common cmd metric list command
([cilium/cilium#41630](https://redirect.github.com/cilium/cilium/issues/41630),
[@&#8203;aanm](https://redirect.github.com/aanm))
- cilium-cli: drop disabled IP cache check from connectivity tests
([cilium/cilium#42240](https://redirect.github.com/cilium/cilium/issues/42240),
[@&#8203;tklauser](https://redirect.github.com/tklauser))
- cli/clustermesh: remove leftover global services status info
([cilium/cilium#41727](https://redirect.github.com/cilium/cilium/issues/41727),
[@&#8203;giorio94](https://redirect.github.com/giorio94))
- Refactor policy engine to use PolicyEntry as the internal
representation of policies, as described in CFP-39646.
([cilium/cilium#40213](https://redirect.github.com/cilium/cilium/issues/40213),
[@&#8203;TheBeeZee](https://redirect.github.com/TheBeeZee))
- sysdump: add resource usage of nodes and pods
([cilium/cilium#41415](https://redirect.github.com/cilium/cilium/issues/41415),
[@&#8203;darox](https://redirect.github.com/darox))
- chore(deps): update go to v1.25.1 (patch) by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3097](https://redirect.github.com/cilium/cilium-cli/pull/3097)
- chore(deps): update actions/setup-go action to v6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3094](https://redirect.github.com/cilium/cilium-cli/pull/3094)
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`d6bdb04`](https://redirect.github.com/cilium/cilium-cli/commit/d6bdb04)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3096](https://redirect.github.com/cilium/cilium-cli/pull/3096)
- chore(deps): update gcr.io/distroless/static:latest docker digest to
[`87bce11`](https://redirect.github.com/cilium/cilium-cli/commit/87bce11)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3099](https://redirect.github.com/cilium/cilium-cli/pull/3099)
- chore(deps): update softprops/action-gh-release action to v2.3.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3098](https://redirect.github.com/cilium/cilium-cli/pull/3098)
- chore(deps): update golang docker tag to v1.25.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3093](https://redirect.github.com/cilium/cilium-cli/pull/3093)
- chore(deps): update actions/stale action to v10 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3095](https://redirect.github.com/cilium/cilium-cli/pull/3095)
- chore(deps): update golang:1.25.1-alpine3.21 docker digest to
[`331bde4`](https://redirect.github.com/cilium/cilium-cli/commit/331bde4)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3100](https://redirect.github.com/cilium/cilium-cli/pull/3100)
- chore(deps): update dependency cilium/cilium to v1.18.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3102](https://redirect.github.com/cilium/cilium-cli/pull/3102)
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`8305f5f`](https://redirect.github.com/cilium/cilium-cli/commit/8305f5f)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3103](https://redirect.github.com/cilium/cilium-cli/pull/3103)
- chore(deps): update golangci/golangci-lint docker tag to v2.5.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3104](https://redirect.github.com/cilium/cilium-cli/pull/3104)
- chore(deps): update docker/login-action action to v3.6.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3105](https://redirect.github.com/cilium/cilium-cli/pull/3105)
- chore(deps): update docker.io/library/golang:1.25.1 docker digest to
[`ab1f5c4`](https://redirect.github.com/cilium/cilium-cli/commit/ab1f5c4)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3106](https://redirect.github.com/cilium/cilium-cli/pull/3106)
- chore(deps): update actions/stale action to v10.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3108](https://redirect.github.com/cilium/cilium-cli/pull/3108)
- chore(deps): update softprops/action-gh-release action to v2.3.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3107](https://redirect.github.com/cilium/cilium-cli/pull/3107)
- chore(deps): update softprops/action-gh-release action to v2.4.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3109](https://redirect.github.com/cilium/cilium-cli/pull/3109)
- chore(deps): update golang docker tag to v1.25.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3110](https://redirect.github.com/cilium/cilium-cli/pull/3110)
- chore(deps): update go to v1.25.2 (patch) by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3112](https://redirect.github.com/cilium/cilium-cli/pull/3112)
- chore(deps): update golang:1.25.2-alpine3.21 docker digest to
[`0134653`](https://redirect.github.com/cilium/cilium-cli/commit/0134653)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3113](https://redirect.github.com/cilium/cilium-cli/pull/3113)
- RELEASE: also look for release-blockers in cilium/cilium by
[@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann) in
[#&#8203;3116](https://redirect.github.com/cilium/cilium-cli/pull/3116)
- chore(deps): update golang docker tag to v1.25.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3117](https://redirect.github.com/cilium/cilium-cli/pull/3117)
- chore(deps): update softprops/action-gh-release action to v2.4.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3114](https://redirect.github.com/cilium/cilium-cli/pull/3114)
- chore(deps): update go to v1.25.3 (patch) by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3118](https://redirect.github.com/cilium/cilium-cli/pull/3118)
- chore(deps): update golang:1.25.3-alpine3.21 docker digest to
[`0c9f3e0`](https://redirect.github.com/cilium/cilium-cli/commit/0c9f3e0)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3115](https://redirect.github.com/cilium/cilium-cli/pull/3115)
- Makefile: fix renovate depname for GO\_IMAGE\_\* updates by
[@&#8203;tklauser](https://redirect.github.com/tklauser) in
[#&#8203;3119](https://redirect.github.com/cilium/cilium-cli/pull/3119)
- chore(deps): update docker.io/library/golang:1.25.3 docker digest to
[`6ea52a0`](https://redirect.github.com/cilium/cilium-cli/commit/6ea52a0)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;3111](https://redirect.github.com/cilium/cilium-cli/pull/3111)
- Prepare for v0.18.8 release by
[@&#8203;michi-covalent](https://redirect.github.com/michi-covalent) in
[#&#8203;3120](https://redirect.github.com/cilium/cilium-cli/pull/3120)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTcuMSIsInVwZGF0ZWRJblZlciI6IjQyLjMwLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInR5cGUvcGF0Y2giXX0=-->

Co-authored-by: zocimek-renovate[bot] <134739422+zocimek-renovate[bot]@users.noreply.github.com>
Co-authored-by: Łukasz Pospiech <[email protected]>
@cilium-release-bot cilium-release-bot bot moved this to Released in cilium v1.19.0 Feb 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cilium-cli This PR contains changes related with cilium-cli kind/community-contribution This was a contribution made by a community member. ready-to-merge This PR has passed all tests and received consensus from code owners to merge. release-note/ci This PR makes changes to the CI.

Projects

No open projects
Status: Released

Development

Successfully merging this pull request may close these issues.

cilium connectivity tests fail in v1.17 and later with nodelocaldns and host port

4 participants