Cilium - v1.12.13

We are pleased to release Cilium v1.12.13. This release includes bugfixes for IPsec and ipcache as well as many docs and CI changes.

Remaining issues on the IPSec stack may cause interrupted connections during key rotations. Users may upgrade to this release only if this is considered acceptable.

Summary of Changes

Bugfixes:
* Remove remote-node labels from ipcache on node delete (#27406, @joestringer)
* Fix a bug that could cause packet drops of type XfrmOutPolBlock when IPsec is enabled and node are recycled. (Backport PR #27138, Upstream PR #27029, @pchaigno)
* Fix a bug that could cause IPsec-encrypted packets to be sent to the wrong destination node when node churn is high. (Backport PR #27138, Upstream PR #27029, @pchaigno)
* operator: Adjust CiliumEndpoint gc to account for kvstore mode (Backport PR #27155, Upstream PR #25324, @learnitall)

CI Changes:
* Add renovate tags for automatic updates of kernel version in v1.12 (#27388, @aanm)
* ci: fix Azure cluster names sometimes being too long (Backport PR #27031, Upstream PR #26933, @nbusseneau)
* test: Fix and unquarantine Skip conntrack test (Backport PR #27031, Upstream PR #25038, @pchaigno)
* Trigger required workflows using Ariane (Backport PR #27094, Upstream PR #27002, @michi-covalent)

Misc Changes:
* chore(deps): update all github action dependencies (v1.12) (patch) (#27294, @renovate[bot])
* chore(deps): update docker.io/library/golang docker tag to v1.19.11 (v1.12) (#27019, @renovate[bot])
* chore(deps): update docker.io/library/golang docker tag to v1.19.12 (v1.12) (#27295, @renovate[bot])
* chore(deps): update helm/kind-action action to v1.8.0 (v1.12) (#26830, @renovate[bot])
* docs/ipsec: Document RSS limitation (Backport PR #27031, Upstream PR #26979, @pchaigno)
* docs/ipsec: Extend troubleshooting section (Backport PR #27031, Upstream PR #26808, @pchaigno)
* docs: Fix gRPC API generation for online docs (Backport PR #27094, Upstream PR #27014, @qmonnet)
* docs: Replace non-portable "sed -i" in Makefile (Backport PR #27240, Upstream PR #27122, @qmonnet)
* docs: Specify Helm chart version in "cilium install" commands (Backport PR #27031, Upstream PR #26934, @michi-covalent)
* Documentation: fix the broken links/dead links (Backport PR #27155, Upstream PR #26880, @vipul-21)

Other Changes:
* backport v1.12: IPsec upgrade tests (#27173, @brb)
* Delete IP Label metadata on delete from ipcache (#26958, @meyskens)
* install: Update image digests for v1.12.12 (#27124, @nathanjsweet)
* k8s: fix incorrect EndpointSlice API version (#27378, @nebril)
* Update Service Mesh docs to fix a number of issues (#27335, @youngnick)

Docker Manifests

cilium

docker.io/cilium/cilium:v1.12.13@sha256:4d19b0b809889debc768fc20d9eb2b53e2ff60d45be639c2e898923eeb124e80
quay.io/cilium/cilium:v1.12.13@sha256:4d19b0b809889debc768fc20d9eb2b53e2ff60d45be639c2e898923eeb124e80

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.12.13@sha256:b2e35ca950680fe9a431d8b3e6c4fe1014497ccb7ba48437915850e16c1fd1e1
quay.io/cilium/clustermesh-apiserver:v1.12.13@sha256:b2e35ca950680fe9a431d8b3e6c4fe1014497ccb7ba48437915850e16c1fd1e1

docker-plugin

docker.io/cilium/docker-plugin:v1.12.13@sha256:08f4ab574ea2bbbc49f24c8ce7fb3cd4509eff4c7c82619610e0ff5079cb2046
quay.io/cilium/docker-plugin:v1.12.13@sha256:08f4ab574ea2bbbc49f24c8ce7fb3cd4509eff4c7c82619610e0ff5079cb2046

hubble-relay

docker.io/cilium/hubble-relay:v1.12.13@sha256:9b7fc17534514342b12ee9a7ed05084d1f933028d778eb5173c7f0f0aa494414
quay.io/cilium/hubble-relay:v1.12.13@sha256:9b7fc17534514342b12ee9a7ed05084d1f933028d778eb5173c7f0f0aa494414

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.12.13@sha256:f53cc108451a3a57e5733c6bcd07950fc1e9f3c36ea8300f271f6c088a073e87
quay.io/cilium/operator-alibabacloud:v1.12.13@sha256:f53cc108451a3a57e5733c6bcd07950fc1e9f3c36ea8300f271f6c088a073e87

operator-aws

docker.io/cilium/operator-aws:v1.12.13@sha256:fd95a5ff57718809e1ccf3555d98b5c646e003e5de4a2da11775aa74ef1bafb8
quay.io/cilium/operator-aws:v1.12.13@sha256:fd95a5ff57718809e1ccf3555d98b5c646e003e5de4a2da11775aa74ef1bafb8

operator-azure

docker.io/cilium/operator-azure:v1.12.13@sha256:7a79de4cad736611e3e24138012b1d9c9f47a8d672dc08bd1e65ee0ef0661149
quay.io/cilium/operator-azure:v1.12.13@sha256:7a79de4cad736611e3e24138012b1d9c9f47a8d672dc08bd1e65ee0ef0661149

operator-generic

docker.io/cilium/operator-generic:v1.12.13@sha256:4a7387684297f5072f0933331696c5d89954c35d30669aca0f5d92c2294fff37
quay.io/cilium/operator-generic:v1.12.13@sha256:4a7387684297f5072f0933331696c5d89954c35d30669aca0f5d92c2294fff37

operator

docker.io/cilium/operator:v1.12.13@sha256:a37c66f243a2b7555aeb6f2ab59e69eb9384a50446a3818fe0225dde4876d9ca
quay.io/cilium/operator:v1.12.13@sha256:a37c66f243a2b7555aeb6f2ab59e69eb9384a50446a3818fe0225dde4876d9ca