cluster.meta

Issues/PRs archive for MTRNord/cluster
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.meta.git
Log | Files | Refs

96.md (27718B)


      1 # PR #96 chore(deps): update helm release cilium to v1.19.1 - autoclosed
      2 
      3 - **Status:** closed
      4 - **Author:** @renovate[bot]
      5 - **Created:** 2026-02-27T19:35:24Z
      6 - **Branch:** renovate/minor-1.19-minor-updates β†’ main
      7 - **Closed:** 2026-03-01T22:07:49Z
      8 - **Labels:** type/minor-update
      9 - **Diff:** [96.diff](./96.diff)
     10 
     11 ---
     12 
     13 This PR contains the following updates:
     14 
     15 | Package | Update | Change |
     16 |---|---|---|
     17 | [cilium](https://cilium.io/) ([source](https://redirect.github.com/cilium/cilium)) | minor | `1.18.7` β†’ `1.19.1` |
     18 
     19 ---
     20 
     21 ### Release Notes
     22 
     23 <details>
     24 <summary>cilium/cilium (cilium)</summary>
     25 
     26 ### [`v1.19.1`](https://redirect.github.com/cilium/cilium/releases/tag/v1.19.1): 1.19.1
     27 
     28 [Compare Source](https://redirect.github.com/cilium/cilium/compare/1.19.0...1.19.1)
     29 
     30 ## Summary of Changes
     31 
     32 **Bugfixes:**
     33 
     34 - clustermesh: fix CRD update permission for MCS-API CRD install (Backport PR [#&#8203;44280](https://redirect.github.com/cilium/cilium/issues/44280), Upstream PR [#&#8203;44224](https://redirect.github.com/cilium/cilium/issues/44224), [@&#8203;Preisschild](https://redirect.github.com/Preisschild))
     35 - Fix panic during datapath reinitialization if DirectRouting device is required but missing (Backport PR [#&#8203;44280](https://redirect.github.com/cilium/cilium/issues/44280), Upstream PR [#&#8203;44219](https://redirect.github.com/cilium/cilium/issues/44219), [@&#8203;fristonio](https://redirect.github.com/fristonio))
     36 - helm: Fixed RBAC errors with `operator.enabled=false` by aligning cilium-tlsinterception-secrets Role/RoleBinding conditionals (Backport PR [#&#8203;44280](https://redirect.github.com/cilium/cilium/issues/44280), Upstream PR [#&#8203;44159](https://redirect.github.com/cilium/cilium/issues/44159), [@&#8203;puwun](https://redirect.github.com/puwun))
     37 - Reduces rtnl\_mutex contention on SR-IOV nodes by not requesting VF information in netlink RTM\_GETLINK operations (Backport PR [#&#8203;44280](https://redirect.github.com/cilium/cilium/issues/44280), Upstream PR [#&#8203;43517](https://redirect.github.com/cilium/cilium/issues/43517), [@&#8203;pasteley](https://redirect.github.com/pasteley))
     38 
     39 **CI Changes:**
     40 
     41 - ci: e2e: add `kernel` to workflow job names (Backport PR [#&#8203;44127](https://redirect.github.com/cilium/cilium/issues/44127), Upstream PR [#&#8203;44291](https://redirect.github.com/cilium/cilium/issues/44291), [@&#8203;smagnani96](https://redirect.github.com/smagnani96))
     42 - gh: ariane: don't run cloud workflows for LVH kernel updates (Backport PR [#&#8203;44147](https://redirect.github.com/cilium/cilium/issues/44147), Upstream PR [#&#8203;44109](https://redirect.github.com/cilium/cilium/issues/44109), [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
     43 - gh: ariane: skip more workflows for LVH kernel updates (Backport PR [#&#8203;44147](https://redirect.github.com/cilium/cilium/issues/44147), Upstream PR [#&#8203;44115](https://redirect.github.com/cilium/cilium/issues/44115), [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
     44 
     45 **Misc Changes:**
     46 
     47 - chore(deps): update all github action dependencies (v1.19) ([#&#8203;44248](https://redirect.github.com/cilium/cilium/issues/44248), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     48 - chore(deps): update all github action dependencies (v1.19) ([#&#8203;44368](https://redirect.github.com/cilium/cilium/issues/44368), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     49 - chore(deps): update all-dependencies (v1.19) ([#&#8203;44363](https://redirect.github.com/cilium/cilium/issues/44363), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     50 - chore(deps): update base-images (v1.19) ([#&#8203;44247](https://redirect.github.com/cilium/cilium/issues/44247), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     51 - chore(deps): update cilium/cilium-cli action to v0.19.1 (v1.19) ([#&#8203;44343](https://redirect.github.com/cilium/cilium/issues/44343), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     52 - chore(deps): update dependency cilium/cilium-cli to v0.19.1 (v1.19) ([#&#8203;44400](https://redirect.github.com/cilium/cilium/issues/44400), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     53 - chore(deps): update docker.io/library/busybox:1.37.0 docker digest to [`b3255e7`](https://redirect.github.com/cilium/cilium/commit/b3255e7) (v1.19) ([#&#8203;44242](https://redirect.github.com/cilium/cilium/issues/44242), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     54 - chore(deps): update docker.io/library/golang:1.25.7 docker digest to [`85c0ab0`](https://redirect.github.com/cilium/cilium/commit/85c0ab0) (v1.19) ([#&#8203;44364](https://redirect.github.com/cilium/cilium/issues/44364), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     55 - chore(deps): update gcr.io/distroless/static:nonroot docker digest to [`f9f84bd`](https://redirect.github.com/cilium/cilium/commit/f9f84bd) (v1.19) ([#&#8203;44243](https://redirect.github.com/cilium/cilium/issues/44243), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     56 - chore(deps): update gcr.io/etcd-development/etcd docker tag to v3.6.8 (v1.19) ([#&#8203;44365](https://redirect.github.com/cilium/cilium/issues/44365), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     57 - chore(deps): update module sigs.k8s.io/kube-api-linter to v0.0.0-20260206102632-39e3d06a2850 (v1.19) ([#&#8203;44244](https://redirect.github.com/cilium/cilium/issues/44244), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     58 - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.35.9-1770265024-9828c064a10df81f1939b692b01203d88bb439e4 (v1.19) ([#&#8203;44245](https://redirect.github.com/cilium/cilium/issues/44245), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     59 - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.35.9-1770554954-8ce3bb4eca04188f4a0a1bfbd0a06a40f90883de (v1.19) ([#&#8203;44262](https://redirect.github.com/cilium/cilium/issues/44262), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     60 - chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.35.9-1770979049-232ed4a26881e4ab4f766f251f258ed424fff663 (v1.19) ([#&#8203;44366](https://redirect.github.com/cilium/cilium/issues/44366), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     61 - chore(deps): update stable lvh-images (v1.19) (patch) ([#&#8203;44246](https://redirect.github.com/cilium/cilium/issues/44246), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     62 - chore(deps): update stable lvh-images (v1.19) (patch) ([#&#8203;44367](https://redirect.github.com/cilium/cilium/issues/44367), [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
     63 - ci: e2e: improve GitHub action readability (Backport PR [#&#8203;44127](https://redirect.github.com/cilium/cilium/issues/44127), Upstream PR [#&#8203;44126](https://redirect.github.com/cilium/cilium/issues/44126), [@&#8203;smagnani96](https://redirect.github.com/smagnani96))
     64 - docs: Update docsearch to v4.5.4 (Backport PR [#&#8203;44272](https://redirect.github.com/cilium/cilium/issues/44272), Upstream PR [#&#8203;44233](https://redirect.github.com/cilium/cilium/issues/44233), [@&#8203;joestringer](https://redirect.github.com/joestringer))
     65 - endpoint/watchdog: fetch all endpoints without programs loaded (Backport PR [#&#8203;44280](https://redirect.github.com/cilium/cilium/issues/44280), Upstream PR [#&#8203;44111](https://redirect.github.com/cilium/cilium/issues/44111), [@&#8203;mhofstetter](https://redirect.github.com/mhofstetter))
     66 - gateway-apis: Correct supported versions in docs ([#&#8203;44217](https://redirect.github.com/cilium/cilium/issues/44217), [@&#8203;youngnick](https://redirect.github.com/youngnick))
     67 - Policy Tiers: feature-flagging, add fuzzer, fix corner cases (Backport PR [#&#8203;44267](https://redirect.github.com/cilium/cilium/issues/44267), Upstream PR [#&#8203;43893](https://redirect.github.com/cilium/cilium/issues/43893), [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
     68 - Policy: Fix rule origin for ordered policies (Backport PR [#&#8203;44280](https://redirect.github.com/cilium/cilium/issues/44280), Upstream PR [#&#8203;44178](https://redirect.github.com/cilium/cilium/issues/44178), [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
     69 
     70 **Other Changes:**
     71 
     72 - install: Update image digests for v1.19.0 ([#&#8203;44172](https://redirect.github.com/cilium/cilium/issues/44172), [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\[bot])
     73 
     74 #### Docker Manifests
     75 
     76 ##### cilium
     77 
     78 `quay.io/cilium/cilium:v1.19.1@&#8203;sha256:41f1f74a0000de8656f1de4088ea00c8f2d49d6edea579034c73c5fd5fe01792`
     79 
     80 ##### clustermesh-apiserver
     81 
     82 `quay.io/cilium/clustermesh-apiserver:v1.19.1@&#8203;sha256:56d6c3dc13b50126b80ecb571707a0ea97f6db694182b9d61efd386d04e5bb28`
     83 
     84 ##### docker-plugin
     85 
     86 `quay.io/cilium/docker-plugin:v1.19.1@&#8203;sha256:6edfbf46ca484b1ed961f3c7382159ba7f0227e7af692159e99e8d4810ecaf34`
     87 
     88 ##### hubble-relay
     89 
     90 `quay.io/cilium/hubble-relay:v1.19.1@&#8203;sha256:d8c4e13bc36a56179292bb52bc6255379cb94cb873700d316ea3139b1bdb8165`
     91 
     92 ##### operator-alibabacloud
     93 
     94 `quay.io/cilium/operator-alibabacloud:v1.19.1@&#8203;sha256:837b12f4239e88ea5b4b5708ab982c319a94ee05edaecaafe5fd0e5b1962f554`
     95 
     96 ##### operator-aws
     97 
     98 `quay.io/cilium/operator-aws:v1.19.1@&#8203;sha256:18913d05a6c4d205f0b7126c4723bb9ccbd4dc24403da46ed0f9f4bf2a142804`
     99 
    100 ##### operator-azure
    101 
    102 `quay.io/cilium/operator-azure:v1.19.1@&#8203;sha256:82bce78603056e709d4c4e9f9ebb25c222c36d8a07f8c05381c2372d9078eca8`
    103 
    104 ##### operator-generic
    105 
    106 `quay.io/cilium/operator-generic:v1.19.1@&#8203;sha256:e7278d763e448bf6c184b0682cf98cdca078d58a27e1b2f3c906792670aa211a`
    107 
    108 ##### operator
    109 
    110 `quay.io/cilium/operator:v1.19.1@&#8203;sha256:93a6306d4543f1d8eccd79d6770c00ef4d4791f66326d97f9851f9d316e70141`
    111 
    112 ### [`v1.19.0`](https://redirect.github.com/cilium/cilium/releases/tag/v1.19.0): 1.19.0
    113 
    114 [Compare Source](https://redirect.github.com/cilium/cilium/compare/1.18.7...1.19.0)
    115 
    116 πŸŽ‰ **Release Announcement** πŸŽ‰: We are excited to announce the [Cilium 1.19.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.19.0) release!
    117 
    118 A total of **2934 new commits** have been contributed to this release by a growing community of over **1010 developers** and over **23,600 GitHub stars**! 🀩
    119 
    120 ⚠️ You may need to take action during upgrade to Cilium v1.19 if you use Network Policies, Cluster Mesh, LoadBalancer IPAM or BGP. See the [Upgrade Guide](https://docs.cilium.io/en/v1.19/operations/upgrade/#upgrade-notes) for more details.
    121 
    122 The full changelog can be found [here](https://redirect.github.com/cilium/cilium/blob/v1.19/CHANGELOG.md).
    123 
    124 Here are some of the highlights:
    125 
    126 - πŸ›‘οΈ **Network Policy**
    127   - πŸƒ **Multi-Level DNS Matches**: DNS Policies match pattern now support a wildcard prefix(*`**.`*) to match multilevel subdomain as pattern prefix. ([cilium/cilium#43420](https://redirect.github.com/cilium/cilium/pull/43420), [@&#8203;fristonio](https://redirect.github.com/fristonio))
    128   - πŸ“‘ **Match New Protocols**: You can now match VRRP and IGMP protocols in host firewall rules. ([cilium/cilium#39872](https://redirect.github.com/cilium/cilium/pull/39872), [@&#8203;aditighag](https://redirect.github.com/aditighag); [cilium/cilium#41949](https://redirect.github.com/cilium/cilium/pull/41949), [@&#8203;kyounghunJang](https://redirect.github.com/kyounghunJang))
    129   - β›” **Actively Deny Connections**: When Network Policies deny a connection, Cilium can return ICMPv4 "Destination unreachable" messages for a friendlier deny. ([cilium/cilium#41406](https://redirect.github.com/cilium/cilium/pull/41406), [@&#8203;antonipp](https://redirect.github.com/antonipp))
    130   - 🌐 **Select Clusters Explicitly**: When network policy selectors don't explicitly define a cluster for communication to be allowed, they will now default to only allowing the local cluster. ([cilium/cilium#40609](https://redirect.github.com/cilium/cilium/pull/40609), [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))
    131   - πŸ”§ **Unlock Future Work**: This release brings several internal improvements to the network policy engine in preparation for features planned in the next Cilium minor release ([cilium/cilium#39906](https://redirect.github.com/cilium/cilium/pull/39906), [@&#8203;vipul-21](https://redirect.github.com/vipul-21); [cilium/cilium#42784](https://redirect.github.com/cilium/cilium/pull/42784), [cilium/cilium#42896](https://redirect.github.com/cilium/cilium/pull/42896), [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))
    132   - ⚠️ **Deprecate underutilized features**: To focus on solving common problems Cilium users face, this release deprecates the Kafka protocol match fields (beta), as well as the `ToRequires` and `FromRequires` policy fields. ([cilium/cilium#43167](https://redirect.github.com/cilium/cilium/pull/43167), [@&#8203;sayboras](https://redirect.github.com/sayboras); [cilium/cilium#40967](https://redirect.github.com/cilium/cilium/pull/40967), [@&#8203;TheBeeZee](https://redirect.github.com/TheBeeZee))
    133 
    134 - πŸ”’ **Encryption & Authentication**
    135   - πŸ” **Encryption Strict Modes**: Both IPsec and WireGuard transparent encryption modes now support a "strict mode" to require traffic to be encrypted between nodes. Unencrypted traffic will be dropped in this mode. ([cilium/cilium#39239](https://redirect.github.com/cilium/cilium/pull/39239), [cilium/cilium#42115](https://redirect.github.com/cilium/cilium/pull/42115), [@&#8203;rgo3](https://redirect.github.com/rgo3), [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))
    136   - πŸš‡ **Ztunnel Beta**: You can enroll namespaces into Ztunnel, which enables TCP connections between workloads to be transparently encrypted and authenticated. ([cilium/cilium#42766](https://redirect.github.com/cilium/cilium/pull/42766), [cilium/cilium#42819](https://redirect.github.com/cilium/cilium/pull/42819), [cilium/cilium#43227](https://redirect.github.com/cilium/cilium/pull/43227) and others,  [@&#8203;ldelossa](https://redirect.github.com/ldelossa), [@&#8203;rgo3](https://redirect.github.com/rgo3), [@&#8203;nddq](https://redirect.github.com/nddq))
    137   - πŸ‘₯ **Mutual Authentication**: The out-of-band [Mutual Authentication](https://docs.cilium.io/en/v1.19/network/servicemesh/mutual-authentication/mutual-authentication/) feature is now disabled by default, pending community feedback. If you have a requirement for mTLS, consider trying the new Ztunnel integration. ([cilium/cilium#42665](https://redirect.github.com/cilium/cilium/pull/42665), [@&#8203;christarazi](https://redirect.github.com/christarazi))
    138   - β†ͺ️ **Accelerate IPsec**: The IPsec encryption mode now supports BPF Host Routing for faster route lookups ([cilium/cilium#41997](https://redirect.github.com/cilium/cilium/pull/41997), [@&#8203;pchaigno](https://redirect.github.com/pchaigno))
    139 
    140 - 🚠 **Networking**
    141   - πŸš€  **BIG TCP in Tunnels**: Leverage upcoming Linux support for BIG TCP when communicating over UDP-based tunnels such as VXLAN and Geneve. ([cilium/cilium#43416](https://redirect.github.com/cilium/cilium/pull/43416), [@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))
    142   - πŸ₯Œ **Packetization-Layer Path MTU Discovery**: Detect maximum transmission unit (MTU) sizes for network paths using TCP. ([cilium/cilium#42012](https://redirect.github.com/cilium/cilium/pull/42012), [cilium/cilium#43710](https://redirect.github.com/cilium/cilium/pull/43710), [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))
    143   - πŸš† **IPv6 Underlay**: You can now choose IPv6 for the tunnel underlay address family on dual-stack clusters. ([cilium/cilium#40324](https://redirect.github.com/cilium/cilium/pull/40324), [@&#8203;pchaigno](https://redirect.github.com/pchaigno))
    144   - 🏷️ **Multi-Pool IPAM is ready for wider use**: Update the Multi-Pool IPAM feature to work with IPsec and direct routing modes, and promote it from Beta to Stable. ([cilium/cilium#40460](https://redirect.github.com/cilium/cilium/pull/40460), [cilium/cilium#42191](https://redirect.github.com/cilium/cilium/pull/42191), [@&#8203;pippolo84](https://redirect.github.com/pippolo84))
    145   - 🎭 **More Configurable Masquerade**: IP Masquerade configuration can now be customized for traffic sent to nodes in other IP subnets, and addresses in IPAM pools can be excluded from masquerade ([cilium/cilium#37568](https://redirect.github.com/cilium/cilium/pull/37568), [@&#8203;behzad-mir](https://redirect.github.com/behzad-mir); [cilium/cilium#43380](https://redirect.github.com/cilium/cilium/pull/43380), [@&#8203;alimehrabikoshki](https://redirect.github.com/alimehrabikoshki))
    146 
    147 - πŸ•ΈοΈ **Services and Service Mesh**
    148   - πŸ“£ **Layer-2 Announcements**: Add support for Neighbor Discovery Advertisements for IPv6 Layer-2 Announcements. ([cilium/cilium#39648](https://redirect.github.com/cilium/cilium/pull/39648), [@&#8203;msune](https://redirect.github.com/msune))
    149   - πŸ” **IPv6 Service Loopback**: Pods can now connect to themselves via a Kubernetes "loopback service" using IPv6. ([cilium/cilium#39594](https://redirect.github.com/cilium/cilium/pull/39594), [@&#8203;saiaunghlyanhtet](https://redirect.github.com/saiaunghlyanhtet))
    150   - ⛩️ **Gateway API Enhancements**: Cilium's GAMMA support now includes support for using GRPCRoute as well as HTTPRoute. ([cilium/cilium#41936](https://redirect.github.com/cilium/cilium/pull/41936), [@&#8203;youngnick](https://redirect.github.com/youngnick))
    151 
    152 - πŸ›£οΈ **Border Gateway Protocol (BGP)**
    153   - πŸ”Œ **Advertise Addresses from Interfaces**: There's a new Interface BGP advertisement type that allows advertisement of IPs assigned on local interfaces. This can be useful for example in multi-homing setups, where a common node's loopback address can be advertised via multiple BGP sessions over different network interfaces. ([cilium/cilium#42469](https://redirect.github.com/cilium/cilium/pull/42469), [@&#8203;rastislavs](https://redirect.github.com/rastislavs))
    154   - βœ‰οΈ **Override Source IP addresses**: You can override the auto-generated BGP session source IP with the IP address applied on the configured `sourceInterface` to allow binding the BGP connection to the loopback address which is not tied to the specific physical interface's lifecycle ([cilium/cilium#42583](https://redirect.github.com/cilium/cilium/pull/42583), [@&#8203;rastislavs](https://redirect.github.com/rastislavs))
    155   - πŸ” **Withdraw Empty Routes**: Optionally withdraw BGP routes when a service has 0 endpoints, to allow balancing to a different DC/cluster with `externalTrafficPolicy=Cluster` ([cilium/cilium#40717](https://redirect.github.com/cilium/cilium/pull/40717), [@&#8203;oblazek](https://redirect.github.com/oblazek))
    156   - ⚠️ **Move to `cilium.io/v2` API**: The support for the older `CiliumBGPPeeringPolicy` v1 API is now removed and should be replaced with v2 APIs. ([cilium/cilium#42278](https://redirect.github.com/cilium/cilium/pull/42278), [@&#8203;rastislavs](https://redirect.github.com/rastislavs))
    157 
    158 - πŸ›°οΈ **Observability**
    159   - πŸ”¬ **Trace IP Options**: Configure Cilium and Hubble to trace specific packets through the cluster using IP Options. ([cilium/cilium#41306](https://redirect.github.com/cilium/cilium/pull/41306), [@&#8203;Bigdelle](https://redirect.github.com/Bigdelle))
    160   - 🚩 **Filter Encrypted Flows**: Filter flows when using the `hubble` command line to understand the encryption status of the traffic, either `--encrypted` or `--unencrypted`. ([cilium/cilium#43096](https://redirect.github.com/cilium/cilium/pull/43096), [@&#8203;SRodi](https://redirect.github.com/SRodi))
    161   - πŸ”– **Tag Drops with Policy Names**: Hubble v1.Events drop messages now include which Network Policy caused the drop. ([cilium/cilium#41693](https://redirect.github.com/cilium/cilium/pull/41693), [@&#8203;41ks](https://redirect.github.com/41ks))
    162 
    163 - πŸŒ… **Performance and Scale**
    164   - ⚑ **Faster Network Policy Computation**: Improve Cilium resource usage for handling selectors in network policies. ([cilium/cilium#42008](https://redirect.github.com/cilium/cilium/pull/42008), [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme); [cilium/cilium#42580](https://redirect.github.com/cilium/cilium/pull/42580), [@&#8203;odinuge](https://redirect.github.com/odinuge))
    165   - πŸ”Œ **More Efficient Connection Tracking**: Several improvements have been made to reduce the number of connections being tracked by Cilium, particularly when using Geneve, VXLAN or WireGuard. ([cilium/cilium#38782](https://redirect.github.com/cilium/cilium/pull/38782), [@&#8203;BenoitKnecht](https://redirect.github.com/BenoitKnecht); [cilium/cilium#41990](https://redirect.github.com/cilium/cilium/pull/41990), [@&#8203;bersoare](https://redirect.github.com/bersoare))
    166   - πŸ’Ύ **Better Scale in AWS**: Reduce memory usage for cilium-operator in large AWS environments with many resources. ([cilium/cilium#42529](https://redirect.github.com/cilium/cilium/pull/42529), [@&#8203;liyihuang](https://redirect.github.com/liyihuang))
    167 
    168 - βš™οΈ **Operations**
    169   - πŸ“¦ **Access Helm charts via Registry**: Helm charts are also available under `quay.io/cilium/charts/cilium` ([cilium/cilium#43624](https://redirect.github.com/cilium/cilium/pull/43624), [@&#8203;aanm](https://redirect.github.com/aanm))
    170   - πŸ“Š **Metrics Encryption**: Add TLS/mTLS support for Prometheus metrics exposed by the Cilium Operator. ([cilium/cilium#42077](https://redirect.github.com/cilium/cilium/pull/42077), [@&#8203;phuhung273](https://redirect.github.com/phuhung273))
    171   - πŸ€– **Easier Multi-Cluster install**: There's now support for auto-installing the Custom Resource Definitions (CRDs) for Multi-Cluster  Services (MCS). ([cilium/cilium#40729](https://redirect.github.com/cilium/cilium/pull/40729), [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))
    172   - πŸ“œ **Simpler Certificate Management**: Streamline Cluster Mesh and Hubble certificate generation when using GitOps approaches. ([cilium/cilium#42298](https://redirect.github.com/cilium/cilium/pull/42298), [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))
    173   - πŸ› οΈ **Cilium dependencies** were updated to Kubernetes v1.35, Envoy v1.35, Gateway API v1.4, and GoBGP v3.37. ([cilium/cilium#43422](https://redirect.github.com/cilium/cilium/pull/43422), [@&#8203;aanm](https://redirect.github.com/aanm); [cilium/cilium#40569](https://redirect.github.com/cilium/cilium/pull/40569), [@&#8203;sayboras](https://redirect.github.com/sayboras); [cilium/cilium#41936](https://redirect.github.com/cilium/cilium/pull/41936), [@&#8203;youngnick](https://redirect.github.com/youngnick); [cilium/cilium#42824](https://redirect.github.com/cilium/cilium/pull/42824), [@&#8203;rastislavs](https://redirect.github.com/rastislavs)).
    174 
    175 - 🏠 **Community**
    176   - ❀️ **Production Case Studies**: Many end-users have stepped forward to tell their stories running Cilium in production. If your company wants to submit their case studies let us know. We would love to hear your feedback!
    177   - πŸ“° See studies with [Airbnb](https://youtu.be/7KHenRXNGAw?si=ldTS-X_W0svxo429\&t=546), [Cloudera](https://aws.amazon.com/blogs/migration-and-modernization/scaling-clouderas-development-environment-leveraging-amazon-eks-karpenter-bottlerocket-and-cilium-for-hybrid-cloud/),[ Cybozu](https://www.cncf.io/case-studies/cybozu/), [ESnet](https://www.cncf.io/case-studies/esnet/),[ Nutanix](https://www.cncf.io/case-studies/nutanix/), [OVHcloud](https://corporate.ovhcloud.com/en-gb/newsroom/news/ovhcloud-managed-kubernetes-service-standard-3az/), [TikTok](https://www.youtube.com/watch?v=y0qlhiKtDGo), [University of Wisconsin–Madison](https://www.cncf.io/case-studies/university-of-wisconsin-madison/).
    178   - πŸ‡ΊπŸ‡Έ **Atlanta Events**: The community gathered at [CiliumCon](https://www.youtube.com/playlist?list=PLDg_GiBbAx-mOnWuzd_NXoRfuW9HZAxeZ) and the [Cilium Developer Summit](https://redirect.github.com/cilium/dev-summits/blob/main/2025-NA/README.md) in Atlanta.
    179   - πŸ‡³πŸ‡± **Amsterdam Events**: Meet us at the upcoming [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/) and [Cilium Developer Summit](https://redirect.github.com/cilium/dev-summits/tree/main/2026-EU) in Amsterdam, March 23-27. [Read more](https://cilium.io/blog/2026/01/23/cilium-at-kubecon-eu-2026/) about where to find Cilium during the show.
    180   - πŸ”Ÿ **Cilium is 10**: Read the [2025 Cilium Annual Report](https://www.cncf.io/wp-content/uploads/2025/12/cilium-annual-report-2025-final.pdf) to see the latest project milestones, a decade on from its first commit.
    181 
    182 To keep up to date with all the latest Cilium releases, join #release πŸŽ‰
    183 
    184 :birthday::heart::heart::heart::birthday:
    185 This is a very special release for Cilium, as it celebrates **10 years** since the first commit. We couldn’t be more proud of what this project has accomplished. All the GitHub issues, pull requests, reviews, stars, forks, Docker pulls, Helm installs, Kubernetes applies, CI runs, bug reports, design docs, discussions, meetings, Slack messages, YouTube streams, eCHO episodes, conference talks, blog posts, demos, and presentations have made the project the success it is today.
    186 :birthday::heart::heart::heart::birthday:
    187 
    188 #### Docker Manifests
    189 
    190 ##### cilium
    191 
    192 `quay.io/cilium/cilium:v1.19.0@&#8203;sha256:be9f8571c2e114b3e12e41f785f2356ade703b2eac936aa878805565f0468c60`
    193 
    194 ##### clustermesh-apiserver
    195 
    196 `quay.io/cilium/clustermesh-apiserver:v1.19.0@&#8203;sha256:0e3b89fdb116eb0f5579fe8ee3fabb1a7c4d97987a1ae927491d9185785d4a49`
    197 
    198 ##### docker-plugin
    199 
    200 `quay.io/cilium/docker-plugin:v1.19.0@&#8203;sha256:35727047384f3d7a2684885003b266bf7a7add8fc66ca564b222f71c16057f50`
    201 
    202 ##### hubble-relay
    203 
    204 `quay.io/cilium/hubble-relay:v1.19.0@&#8203;sha256:7f17e5bb51a9f35bbc8e7a9ad5e347f03ff8003c2e5cc81171e8727a10bf03b4`
    205 
    206 ##### operator-alibabacloud
    207 
    208 `quay.io/cilium/operator-alibabacloud:v1.19.0@&#8203;sha256:5cb3d6981c233616037f3e13b5bc0020d114ad8db1b7360618b224e4c0b02ef0`
    209 
    210 ##### operator-aws
    211 
    212 `quay.io/cilium/operator-aws:v1.19.0@&#8203;sha256:7a236ae256a4fbd3f72d516921131eba5b43f401ba37cdee5cd0e8c26f9263e6`
    213 
    214 ##### operator-azure
    215 
    216 `quay.io/cilium/operator-azure:v1.19.0@&#8203;sha256:6ae7e0d75c74836af3600b775201c89ea7fcc13d6e08fdb0c52927309f31cd2a`
    217 
    218 ##### operator-generic
    219 
    220 `quay.io/cilium/operator-generic:v1.19.0@&#8203;sha256:5b04006015e5800307dc6314676edc4c0bb7ac2fc7848be2b94b43bb030ab648`
    221 
    222 ##### operator
    223 
    224 `quay.io/cilium/operator:v1.19.0@&#8203;sha256:deca84f442752dca0745dd09b13e8004569414839019ad79ac58f9fcaa3b9d65`
    225 
    226 </details>
    227 
    228 ---
    229 
    230 ### Configuration
    231 
    232 πŸ“… **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
    233 
    234 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
    235 
    236 β™» **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
    237 
    238 πŸ”• **Ignore**: Close this PR and you won't be reminded about this update again.
    239 
    240 ---
    241 
    242  - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
    243 
    244 ---
    245 
    246 This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/MTRNord/cluster).
    247 <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNDMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9taW5vci11cGRhdGUiXX0=-->
    248 
    249