Cilium - v1.9.17

We are pleased to announce Cilium v1.9.17. This release includes a range of bugfixes and updates Envoy to v1.21.3 to address several moderate, high and critical severity CVEs. See below for additional bugfixes included in this release.

Summary of Changes

Minor Changes:
* envoy: Bump cilium envoy to latest version v1.21.3 (Backport PR #20148, Upstream PR #20142, @sayboras)

Bugfixes:
* ipsec: Fix off-by-one error on max keyID (Backport PR #20016, Upstream PR #16647, @pchaigno)

Misc Changes:
* api: change "group not found" log to debug (Backport PR #20016, Upstream PR #19927, @tklauser)
* build(deps): bump actions/upload-artifact from 3.0.0 to 3.1.0 (#19916, @dependabot[bot])
* build(deps): bump docker/build-push-action from 2.10.0 to 3 (#19739, @dependabot[bot])
* build(deps): bump KyleMayes/install-llvm-action from 1.5.2 to 1.5.3 (#19866, @dependabot[bot])
* docs: Add docs-builder build as dependency to live preview (Backport PR #20016, Upstream PR #19885, @qmonnet)
* docs: Document operator.unmanagedPodWatcher (Backport PR #19844, Upstream PR #19820, @joestringer)
* docs: Fix incorrect FQDN flag (Backport PR #20016, Upstream PR #19930, @pchaigno)
* docs: Fix max SPI value for IPsec key rotations (Backport PR #20016, Upstream PR #19893, @pchaigno)
* Improve Cilium DNS Proxy-related error metrics (Backport PR #19769, Upstream PR #19702, @christarazi)

Other Changes:
* install: Update image digests for v1.9.16 (#19838, @joestringer)
* Remove group from the right Dockerfile (#19924, @aanm)

Docker Manifests

cilium

docker.io/cilium/cilium:v1.9.17@sha256:92877eb661fb472d601bfce31dcc63e05ec3632e972edd6b65eced94cce92b7c
quay.io/cilium/cilium:v1.9.17@sha256:92877eb661fb472d601bfce31dcc63e05ec3632e972edd6b65eced94cce92b7c

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.9.17@sha256:6852efd1a29c5ac9d69a82b889e8f959f929918e35c7e0a65ccc50ebe440dc9b
quay.io/cilium/clustermesh-apiserver:v1.9.17@sha256:6852efd1a29c5ac9d69a82b889e8f959f929918e35c7e0a65ccc50ebe440dc9b

docker-plugin

docker.io/cilium/docker-plugin:v1.9.17@sha256:517dc7187da0bff8c9bbfd241b15ba61b185f91069ff21761179250ccd5530d5
quay.io/cilium/docker-plugin:v1.9.17@sha256:517dc7187da0bff8c9bbfd241b15ba61b185f91069ff21761179250ccd5530d5

hubble-relay

docker.io/cilium/hubble-relay:v1.9.17@sha256:e7bfec0eafffd5f74ae7d380bba1413cb4fba37db3ba21e690fe6492b458d69a
quay.io/cilium/hubble-relay:v1.9.17@sha256:e7bfec0eafffd5f74ae7d380bba1413cb4fba37db3ba21e690fe6492b458d69a

operator-aws

docker.io/cilium/operator-aws:v1.9.17@sha256:0575a6e93b432f2dbad786a7f0958818cfda33f11e3a3f105a2c7e525090a60d
quay.io/cilium/operator-aws:v1.9.17@sha256:0575a6e93b432f2dbad786a7f0958818cfda33f11e3a3f105a2c7e525090a60d

operator-azure

docker.io/cilium/operator-azure:v1.9.17@sha256:92730c4b288134106d0405c3f8b7973d00b288b6b75ac74697c0621e39a13d50
quay.io/cilium/operator-azure:v1.9.17@sha256:92730c4b288134106d0405c3f8b7973d00b288b6b75ac74697c0621e39a13d50

operator-generic

docker.io/cilium/operator-generic:v1.9.17@sha256:32a27400788539af5ef3a573c6b52cc2e8b5a4925c3e4727a8c093cffaa66b64
quay.io/cilium/operator-generic:v1.9.17@sha256:32a27400788539af5ef3a573c6b52cc2e8b5a4925c3e4727a8c093cffaa66b64

operator

docker.io/cilium/operator:v1.9.17@sha256:303055772ebf9c78bdec0f6742cecc3a162e6aa16d919a3381e0679a8fdf3e7d
quay.io/cilium/operator:v1.9.17@sha256:303055772ebf9c78bdec0f6742cecc3a162e6aa16d919a3381e0679a8fdf3e7d