Cilium - v1.9.13

The Cilium core team is pleased to announce Cilium v1.9.13. This release includes a range of bugfixes and updates Envoy to v1.21.1 to address several low, moderate and high severity CVEs.

Summary of Changes

Bugfixes:
* Cilium host proxy is updated to Envoy release 1.21.1 (Backport PR #18892, Upstream PR #18899, @jrajahalme)
* Fix bug where Cilium drops traffic from remote nodes in etcd mode, despite policy that allows the traffic (Backport PR #18802, Upstream PR #18777, @joestringer)
* Fix connectivity outage periods with ENI IPAM mode and IPsec enabled when nodes are deleted from the cluster (Backport PR #18847, Upstream PR #18827, @christarazi)
* labelfilter: Refine default label regexps (Backport PR #18741, Upstream PR #18693, @twpayne)

CI Changes:
* ci: remove box download timeout in upstream tests (Backport PR #18741, Upstream PR #18707, @nbusseneau)

Misc Changes:
* build(deps): bump actions/setup-go from 2.1.5 to 2.2.0 (#18753, @dependabot[bot])
* build(deps): bump docker/build-push-action from 2.8.0 to 2.9.0 (#18688, @dependabot[bot])
* build(deps): bump docker/login-action from 1.12.0 to 1.13.0 (#18844, @dependabot[bot])
* Cilium host proxy is updated to Envoy release 1.21.0 (Backport PR #18892, Upstream PR #18748, @jrajahalme)
* contrib: Fix backport submission for own PRs (Backport PR #18666, Upstream PR #17988, @joestringer)
* docs: add Hands-on tutorial (Backport PR #18741, Upstream PR #18583, @vannyle)
* update k8s library versions (#18589, @aanm)
* v1.9: Update Cilium base images (#18874, @joestringer)

Other Changes:
* install: Update image digests for v1.9.12 (#18536, @joestringer)
* ui: update envoy config to work with v1.18.4 envoy (#18740, @geakstr)

Docker Manifests

cilium

docker.io/cilium/cilium:v1.9.13@sha256:12752fd66c5448194062befaf59aaefc446cbff729aa8b2d7ea4801113d3a31a
quay.io/cilium/cilium:v1.9.13@sha256:12752fd66c5448194062befaf59aaefc446cbff729aa8b2d7ea4801113d3a31a

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.9.13@sha256:3c5ae05e0c10a24a2e1c1d269a8522346dc33671fae82d9b15a4b93f9d25710c
quay.io/cilium/clustermesh-apiserver:v1.9.13@sha256:3c5ae05e0c10a24a2e1c1d269a8522346dc33671fae82d9b15a4b93f9d25710c

docker-plugin

docker.io/cilium/docker-plugin:v1.9.13@sha256:903def48e38ba32e519950fc119bc8982e84cbfbc5aa2599bf31232a203d1afe
quay.io/cilium/docker-plugin:v1.9.13@sha256:903def48e38ba32e519950fc119bc8982e84cbfbc5aa2599bf31232a203d1afe

hubble-relay

docker.io/cilium/hubble-relay:v1.9.13@sha256:bd374bd8cd6abccce817f6cfabd5e58f243a7ec8d0fcf4dd22f0713713ab6969
quay.io/cilium/hubble-relay:v1.9.13@sha256:bd374bd8cd6abccce817f6cfabd5e58f243a7ec8d0fcf4dd22f0713713ab6969

operator-aws

docker.io/cilium/operator-aws:v1.9.13@sha256:9a3d04b41be1b3d79d079e3ee8021230440845073aa1beca6e7835743fbdc017
quay.io/cilium/operator-aws:v1.9.13@sha256:9a3d04b41be1b3d79d079e3ee8021230440845073aa1beca6e7835743fbdc017

operator-azure

docker.io/cilium/operator-azure:v1.9.13@sha256:aab870367b39b7220fcc0997b13a4d5b8f78696ee9e39caf742f90b504a92fa8
quay.io/cilium/operator-azure:v1.9.13@sha256:aab870367b39b7220fcc0997b13a4d5b8f78696ee9e39caf742f90b504a92fa8

operator-generic

docker.io/cilium/operator-generic:v1.9.13@sha256:826136116ce840ae37efad5e63d4e2a6d7f47a3277b840ab3d45758f19f1fc78
quay.io/cilium/operator-generic:v1.9.13@sha256:826136116ce840ae37efad5e63d4e2a6d7f47a3277b840ab3d45758f19f1fc78

operator

docker.io/cilium/operator:v1.9.13@sha256:18423690655c2c9c4190657608a6b3753b87fd8fd151f112ea216aa9e3cc4fec
quay.io/cilium/operator:v1.9.13@sha256:18423690655c2c9c4190657608a6b3753b87fd8fd151f112ea216aa9e3cc4fec