Release v0.16.21

Tip

Cilium CLI now derives the default Cilium version to install from the source instead of injecting it at compile time. You no longer need to set github.com/cilium/cilium/cilium-cli/defaults.CLIVersion using -ldflags while compiling Cilium CLI. See cilium/cilium#36344 for details.

What's Changed

Minor Changes:

• Add cli support for impersonation --as and --as-group flags (cilium/cilium#35240, @cnmcavoy)
• AWS AL2023 support (cilium/cilium#36076, @viktor-kurchenko)
• cilium-cli: Derive the default version from cilium/charts (cilium/cilium#36344, @michi-covalent)
• Disable deprecated support for running the Cilium KVStore in pod network (cilium/cilium#35741, @giorio94)
• introducing a new CLI option to display ipcache information by labels or cidr (cilium/cilium#35275, @vasu-dasari)
• sysdump: respect worker count and collect Cilium profiling data as first task (cilium/cilium#35897, @giorio94)

Bugfixes:

• cilium-cli/connectivity: fix nil-pointer dereference if minimum version can't be detected (cilium/cilium#35802, @tklauser)
• Fix: cilium-cli install --repository flag respects repository even with cached versions. (cilium/cilium#35670, @renyunkang)

CI Changes:

• cilium-cli/connectivity: allow to specify log levels to check (cilium/cilium#36231, @tklauser)
• cilium-cli/connectivity: disable warning log checks before v1.17 (cilium/cilium#36358, @giorio94)
• cilium-cli: Improve tcpdump termination timeout handling (cilium/cilium#36021, @liyihuang)
• cilium-cli: retry exec-in-pod requests in case of transient errors (cilium/cilium#35961, @tklauser)
• cilium-cli: Run BGP tests sequentially (cilium/cilium#35727, @rastislavs)
• cli/connectivity: Check for unexpected warning logs (cilium/cilium#35723, @pchaigno)
• cli: Don't ignore datapath bug packet drops (cilium/cilium#36105, @pchaigno)
• Enabling IPSec pod-to-pod-with-l7-policy-encryption connectivity test for v1.15 and v1.16. (cilium/cilium#35742, @smagnani96)
• test, cli/connectivity: Remove stale error log exceptions (cilium/cilium#35848, @pchaigno)

Misc Changes:

• Add coverage for SNI enforcement in cilium-cli connectivity tests. (cilium/cilium#35887, @jrajahalme)
• Cilium-cli connectivity test now supports use of parallel requests with curl (cilium/cilium#35949, @jrajahalme)
• cilium-cli/install: remove deprecated no-op --disable-check flag (cilium/cilium#36110, @tklauser)
• cilium-cli: apply network policies to no-conn-disrupt test (cilium/cilium#35685, @giorio94)
• cilium-cli: Skip nil details for Service error in check-log-errors (cilium/cilium#35671, @rastislavs)
• cilium-cli: Use unique CNP names (cilium/cilium#36064, @jrajahalme)
• Miscellaneous improvements to DNS introspection policies in connectivity tests (cilium/cilium#36193, @giorio94)
• Revert "sysdump: collect Cilium profiling data as first task" (cilium/cilium#35771, @giorio94)
• sysdump: Collect crashed pod logs in cilium-test namespaces (cilium/cilium#35612, @jschwinger233)
• Update stable release to v0.16.20 by @michi-covalent in #2851
• .github: use netcat to check hubble port-forward success by @devodev in #2850
• chore(deps): update go to v1.23.3 (patch) by @renovate in #2854
• chore(deps): update golang docker tag to v1.23.3 by @renovate in #2853
• chore(deps): update golangci/golangci-lint docker tag to v1.62.0 by @renovate in #2858
• chore(deps): update dependency kubernetes-sigs/kind to v0.25.0 by @renovate in #2857
• Improve cacheability of Docker layers and add ca-certs to scratch image by @marcofranssen in #2842
• chore(deps): update docker/dockerfile:1.11 docker digest to 10c699f by @renovate in #2855
• chore(deps): update softprops/action-gh-release action to v2.1.0 by @renovate in #2860
• chore(deps): update docker.io/library/golang:1.23.3-alpine3.19 docker digest to f72297e by @renovate in #2863
• chore(deps): update dependency cilium/cilium to v1.16.4 by @renovate in #2864
• chore(deps): update golang:1.23.3-alpine3.19 docker digest to f72297e by @renovate in #2862
• chore(deps): update ubuntu:24.04 docker digest to 278628f by @renovate in #2865
• chore(deps): update docker/build-push-action action to v6.10.0 by @renovate in #2867
• chore(deps): update docker/dockerfile docker tag to v1.12 by @renovate in #2868
• chore(deps): update golangci/golangci-lint docker tag to v1.62.2 by @renovate in #2866
• action: Explicitly set go-version by @michi-covalent in #2871
• .github/workflows: add validation of renovate config by @tklauser in #2873
• renovate: update Go version in action.yaml by @tklauser in #2872
• chore(deps): update golang docker tag to v1.23.4 by @renovate in #2876
• chore(deps): update ubuntu:24.04 docker digest to 80dd3c3 by @renovate in #2875
• chore(deps): update go to v1.23.4 (patch) by @renovate in #2877
• Prepare for v0.16.21 release by @tklauser in #2869

New Contributors

• @marcofranssen made their first contribution in #2842

Full Changelog: v0.16.20...v0.16.21