🌱 Bump github.com/cilium/cilium from 1.17.6 to 1.18.0

[dependabot]

Bumps github.com/cilium/cilium from 1.17.6 to 1.18.0.

Release notes

Sourced from github.com/cilium/cilium's releases.

1.18.0

We are excited to announce the Cilium 1.18.0 release!

A total of 3298 new commits have been contributed to this release by a growing community of over 955 developers and over 22,000 GitHub stars! ⭐

To keep up to date with all the latest Cilium releases, see Announcements

Here's what's new in v1.18.0:

🚠 Networking

• ⚖️ Load Balancing Redesign: The service load-balancing control-plane in the Cilium agent has been redesigned to reduce memory usage and improve future extensibility of load-balancing features (cilium/cilium#38469, @​joamaki)
• 🔌 Virtual Network Devices: Added support for new virtual network device configurations such as VXLAN in IPsec (VinE) and IPIP tunnels (cilium/cilium#37723, @​ldelossa; cilium/cilium#37346, @​gyutaeb)
• Ⓜ️ Multiple Egress Gateways: Egress Gateways policies can now direct traffic towards multiple gateway nodes (cilium/cilium#39304, @​carlos-abad)
• 🚦 Ingress Rate Limiting: The bandwidth manager now supports ingress rate limiting (cilium/cilium#36351, @​l1b0k)
• 📢 Multi-Device L2 Announcements: The L2 pod announcement feature now supports multiple devices (cilium/cilium#38198, @​dylandreimerink)
• 🏢 Neighbor Subsystem Rework: The neighbor subsystem was made more resilient through a new system that reconciles desired neighbor entries with the kernel state (cilium/cilium#39987, @​dylandreimerink)

🌐 IPv6

• 🚇 Tunneling Underlay: The tunneling datapath mode now supports using an IPv6 network underlay, including when configured with IPsec transparent encryption (cilium/cilium#38296, cilium/cilium#39497, @​pchaigno)
• 💬 Kube Proxy Replacement: Cilium now implements service translation when running on an IPv6 underlay (cilium/cilium#39074, @​pchaigno)
• 📋 Delegated IPAM: When delegating IP address management to a third party plugin, Cilium now configures IPv6 routes for connectivity if the plugin supports IPv6 (cilium/cilium#38249, @​caorui-io, @​kadevu)
• 📦 IP Fragment Support: Cilium now processes ordered IPv6 fragments to apply policy and routing functionality (cilium/cilium#38110, @​gentoo-root)
• 🚪 Egress gateway policies can now match IPv6 address ranges (cilium/cilium#38452, @​rgo3)

🛡️ Policy & Observability

• 🏷️ Policy Names in Hubble-CLI: Show the names of (C)CNPs that allowed or denied traffic when monitoring flows in Hubble (cilium/cilium#39453, @​antonipp)
• 📝 Policy Log Fields: A new free-text log field is added to policies, which is exposed in Hubble flows for easy correlation and searching (cilium/cilium#39902, @​squeed)
• 🛰️ Encapsulated Traffic Decoding: Hubble decodes encapsulated traffic for deeper introspection into traffic flows (cilium/cilium#37634, @​kaworu)
• 🏰 ClusterMesh Policy Restriction: A new option allows the cluster entity to apply only to the local cluster in ClusterMesh environment (cilium/cilium#39338, @​MrFreezeex)
• ✨ Enhanced Policy Dashboard: The Policy section of the Cilium Grafana dashboard has been improved to show more relevant graphs, including policy drops in both directions (cilium/cilium#36492, cilium/cilium#37445, @​squeed)

🌅 Performance

• 📊 Scale Test Results: Cilium implements policies and services up to 45% faster in higher scale environments (Various; @​marseel, cilium/cilium#40227)
• 📦 Image Size Reduction: Docker image sizes are reduced by 32% on arm64 architecture images (cilium/cilium#40005, @​marseel)
• ⚡ Improved Policy Performance: The DNS proxy can process large numbers of IPs faster, and the EndpointSelector match implementation has been optimized (cilium/cilium#39340, @​squeed; cilium/cilium#40414, @​marseel)
• 🪞 EndpointSlice Mirroring for Multi-Cluster Services: Clustermesh mirrors EndpointSlice from the local cluster instead of copying the Service selectors when using the MCS-API controller (cilium/cilium#38596, @​MrFreezeex)
• 🌐 KVStoreMesh Optimization: Cross-cluster state distribution is optimized by only synchronizing identities keyed by ID, not by value (cilium/cilium#36471, @​HadrienPatte)
• 🧠 Egress Gateway Processing: Egress gateway policy processing is significantly improved when matching a large number of pods (cilium/cilium#37714, @​giorio94)
• 🗑️ Optimized Garbage Collection for Connection Tracking: Cilium leverages batched iterators for CTMap GC (cilium/cilium#36288, @​tommyp1ckles)

⚙️ Operations

• 📈 API Server Connections at Scale: Improve kube-apiserver connections behavior at scale through failover and setting better jitter and backoff configurations (cilium/cilium#37601, @​aditighag; cilium/cilium#38031, @​orange30; cilium/cilium#36648, @​wedaly)
• 🔄 ConfigMap Synchronization: New option to automatically synchronize ConfigMap changes into the agent and report metrics for when the effective configuration is different from the desired configuration (cilium/cilium#36510, @​ovidiutirla)
• 🎓 CRD Promotion to Stable: Promote CiliumCIDRGroup, CiliumLoadBalancerIPPool and all BGP CRDs to stable API (cilium/cilium#38940, @​christarazi; cilium/cilium#39090, @​pippolo84; cilium/cilium#37765, @​rastislavs)
• ⛔ Node Taints Handling: The cilium-operator Deployment uses a new default set of taints which avoids deploying to a drained node (cilium/cilium#40137, @​Murat Parlakisik)

... (truncated)

Changelog

Sourced from github.com/cilium/cilium's changelog.

v1.18.0

Summary of Changes

Major Changes:

• cilium/cilium#38452@​rgo3)
• cilium/cilium#37601@​aditighag)
• cilium/cilium#39074@​pchaigno)
• cilium/cilium#39304@​carlos-abad)
• cilium/cilium#38110@​gentoo-root)
• cilium/cilium#37723@​ldelossa)
• cilium/cilium#34484@​AwesomePatrol)
• cilium/cilium#38198@​dylandreimerink)
• cilium/cilium#39902@​squeed)
• cilium/cilium#36351@​l1b0k)
• cilium/cilium#36510@​ovidiutirla)
• cilium/cilium#39664@​aanm)
• Promote CiliumBGPClusterConfig, CiliumBGPPeerConfig, CiliumBGPAdvertisement, CiliumBGPNodeConfig and CiliumBGPNodeConfigOverridecilium/cilium#37765@​rastislavs)
• Promote CiliumCIDRGroupcilium/cilium#38940@​christarazi)
• Promote CiliumLoadBalancerIPPoolcilium/cilium#39090@​pippolo84)
• cilium/cilium#39497@​pchaigno)
• cilium/cilium#38296@​pchaigno)
• cilium/cilium#38249@​kadevu)
• cilium/cilium#39590@​sayboras)
• cilium/cilium#40212@​squeed)
• cilium/cilium#38469@​joamaki)

Minor Changes:

• cilium/cilium#37733@​rptaylor)
• cilium_agent_bootstrap_secondscilium/cilium#37576@​giorio94)
• A new option --identity-max-jittercilium/cilium#38031@​orange30)
• Add cilium-dbg bpf ipcache matchcilium/cilium#38579@​pippolo84)
• Add cilium-dbg bpf socknat listcilium/cilium#38901@​pillai-ashwin)
• Add cilium-dbg shell -- health command that takes a optional prefix and prints the reporter tree similar to current cilium-dbg status --verbosecilium/cilium#38076@​tommyp1ckles)
• cilium/cilium#37873@​aspsk)
• cilium/cilium#37986@​mereta)
• cilium/cilium#40097@​giorio94)
• cilium/cilium#36490@​ozerovandrei)
• cilium/cilium#37789@​itspooya)
• cilium/cilium#39205@​Sindvero)
• cilium/cilium#38017@​liyihuang)
• cilium/cilium#39638@​pippolo84)
• cilium/cilium#39442@​pippolo84)
• cilium/cilium#38483@​pippolo84)
• cilium/cilium#38402@​giorio94)
• cilium/cilium#36216@​balous)
• Adds support for the CNI STATUS operation (https://github.com/containernetworking/cni/blob/main/SPEC.md#status-check-plugin-statuscilium/cilium#37028@​architkulkarni)
• cilium/cilium#37305@​kejne)
• cilium/cilium#39259@​julianwiedmann)

... (truncated)

Commits

• 274205f Prepare for release v1.18.0
• ed3768b fix(deps): update module github.com/aws/aws-sdk-go-v2/service/ec2 to v1.236.0
• 8a40186 fix(deps): update module github.com/azure/azure-sdk-for-go/sdk/resourcemanage...
• 27e7fc1 chore(deps): update all github action dependencies
• 95df154 chore(deps): update all github action dependencies
• e639e33 cli,docs/ipsec: Sequence number is on 64bits
• 3f09e41 ci: bump libtinfo version
• 76e2363 ci: bump ubuntu version for lint build commit wf
• 95155f3 fix(deps): update all-dependencies
• 6620ef7 images: update cilium-{runtime,builder}
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[AshleyDumaine]

We shouldn't take any .0 patch versions.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.