chore(deps): update cilium (patch)

[renovate]

This PR contains the following updates:

Package	Update	Change
cilium/cilium	patch	1.14.14 -> 1.14.15
cilium/cilium	patch	1.15.8 -> 1.15.9
cilium/cilium	patch	1.16.1 -> 1.16.2

---

Release Notes

cilium/cilium (cilium/cilium)

v1.14.15: 1.14.15

Compare Source

We are happy to release Cilium v1.14.15!

This release brings us upstream filter chains for L7 LB policy enforcement, bugfixes, CI fixes and many many more! See summary of changes below!

Summary of Changes

Minor Changes:

• cilium-envoy now uses upstream filter chains for L7 LB policy enforcement. (Backport PR #​34458, Upstream PR #​32119, @​jrajahalme)
• docs: Update examples for CNP L7 Host (Backport PR #​34646, Upstream PR #​34578, @​sayboras)

Bugfixes:

• config: fix disabling config 'Debug' (Backport PR #​34471, Upstream PR #​34401, @​mhofstetter)
• envoy: fix log level mapping when changing log level via API (Backport PR #​34459, Upstream PR #​34400, @​mhofstetter)
• ipcache: Yet another refcounting fix with mix of APIs (Backport PR #​34713, Upstream PR #​34715, @​gandro)

CI Changes:

• .github: change nick-invision/retry -> nick-fields/retry. (#​34737, @​michi-covalent)
• ci: clean disk only on ubuntu-latest runners (Backport PR #​34829, Upstream PR #​34711, @​marseel)
• ci: Confromance E2E wait for images before matrix generation (Backport PR #​34829, Upstream PR #​34707, @​marseel)
• ci: multi pool run tests concurrently (Backport PR #​34364, Upstream PR #​33945, @​viktor-kurchenko)
• ci: Wait for images before generating test matrix (Backport PR #​34829, Upstream PR #​34727, @​marseel)
• Fix: push PR changes when renovate build images under the workflow_call context (Backport PR #​34829, Upstream PR #​34650, @​Artyop)
• gha: Add disk cleanup step for build and test workflow (Backport PR #​34364, Upstream PR #​34339, @​sayboras)
• gha: Free up Github runner disk space (Backport PR #​34364, Upstream PR #​34247, @​sayboras)
• gha: Remove ci-aks workflow (#​34606, @​sayboras)

Misc Changes:

• [v1.14] hive: prevent goleak error due to race condition (#​34658, @​marseel)
• Add source IP visibility info to Ingress and Gateway API docs (Backport PR #​34369, Upstream PR #​34137, @​youngnick)
• Add source IP visibility info to Ingress and Gateway API docs (Backport PR #​34459, Upstream PR #​34137, @​youngnick)
• chore(deps): update all github action dependencies (v1.14) (#​34572, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (v1.14) (#​34763, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/cilium-cli to v0.16.15 (v1.14) (#​34120, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/cilium-cli to v0.16.16 (v1.14) (#​34508, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/cilium-cli to v0.16.17 (v1.14) (#​34885, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/hubble to v1.16.1 (v1.14) (#​34854, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/alpine docker tag to v3.18.9 (v1.14) (#​34762, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/golang:1.22.7 docker digest to 4594271 (v1.14) (#​34901, @​cilium-renovate[bot])
• chore(deps): update docker.io/library/ubuntu:22.04 docker digest to adbb901 (v1.14) (#​34697, @​cilium-renovate[bot])
• chore(deps): update gcr.io/etcd-development/etcd docker tag to v3.5.16 (v1.14) (#​34905, @​cilium-renovate[bot])
• chore(deps): update go to v1.22.7 (v1.14) (#​34734, @​cilium-renovate[bot])
• chore(deps): update kindest/node docker tag to v1.27.16 (v1.14) (#​34509, @​cilium-renovate[bot])
• chore: Avoid docker warning due to casing (Backport PR #​34859, Upstream PR #​34125, @​sayboras)
• cilium-dbg: add Envoy admin commands (Backport PR #​34495, Upstream PR #​34398, @​mhofstetter)
• docs: Avoid using wildcard TLS certificate (Backport PR #​34829, Upstream PR #​34609, @​sayboras)
• docs: Improve Ingress documentation (Backport PR #​34369, Upstream PR #​33698, @​youngnick)
• docs: Improve Ingress documentation (Backport PR #​34459, Upstream PR #​33698, @​youngnick)
• Documentation: Update readthedocs configuration (Backport PR #​34364, Upstream PR #​34190, @​joestringer)
• fix: base image update workflow will now be triggered on renovate branches with a workflow_call event type (Backport PR #​34459, Upstream PR #​34372, @​Artyop)
• images: fix path script (Backport PR #​34766, Upstream PR #​34764, @​aanm)
• ipsec: Document a new cause of XfrmInStateProtoError (Backport PR #​34495, Upstream PR #​34221, @​jschwinger233)

Other Changes:

• [v1.14] CODEOWNERS: switch cilium/tophat to cilium/committers (#​34888, @​julianwiedmann)
• [v1.14] envoy: Bump envoy version from v1.29.7 to v1.29.9 (#​34963, @​sayboras)
• [v1.14] envoy: Switch to image with timestamp tag (#​34393, @​sayboras)
• envoy: Bump golang version (#​34329, @​sayboras)
• install: Update image digests for v1.14.14 (#​34377, @​cilium-release-bot[bot])

Docker Manifests

cilium

docker.io/cilium/cilium:v1.14.15@​sha256:9a7977e8a685ac8ef8477c6be76a10d2aabf680bfe13916fa8ba7fec4429705d
quay.io/cilium/cilium:v1.14.15@​sha256:9a7977e8a685ac8ef8477c6be76a10d2aabf680bfe13916fa8ba7fec4429705d

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.14.15@​sha256:1254404bd6a9c9cd0702727f5fe9bf26477a3dac3fa6cb144a57c84b328d079b
quay.io/cilium/clustermesh-apiserver:v1.14.15@​sha256:1254404bd6a9c9cd0702727f5fe9bf26477a3dac3fa6cb144a57c84b328d079b

docker-plugin

docker.io/cilium/docker-plugin:v1.14.15@​sha256:5d123a4fd747b42a5ea3153930b23b93b0803ea881a6dbac26531deeb926cb9f
quay.io/cilium/docker-plugin:v1.14.15@​sha256:5d123a4fd747b42a5ea3153930b23b93b0803ea881a6dbac26531deeb926cb9f

hubble-relay

docker.io/cilium/hubble-relay:v1.14.15@​sha256:f104b07f38d0fa206bc41d5bd7a02ea42e32b18de7022f8401492bad35bbedc7
quay.io/cilium/hubble-relay:v1.14.15@​sha256:f104b07f38d0fa206bc41d5bd7a02ea42e32b18de7022f8401492bad35bbedc7

kvstoremesh

docker.io/cilium/kvstoremesh:v1.14.15@​sha256:93d81162805edf7145a9b6f2b22790c51a730f439f7644399d55cfc083c665e0
quay.io/cilium/kvstoremesh:v1.14.15@​sha256:93d81162805edf7145a9b6f2b22790c51a730f439f7644399d55cfc083c665e0

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.14.15@​sha256:db526ebf79874a0376c37fa987a820ff572a5a9b9c23697c393ab5d8721a20dd
quay.io/cilium/operator-alibabacloud:v1.14.15@​sha256:db526ebf79874a0376c37fa987a820ff572a5a9b9c23697c393ab5d8721a20dd

operator-aws

docker.io/cilium/operator-aws:v1.14.15@​sha256:e17ee0a65edf75f13e9fb380ef2dc4c80096d8a08581f8b8a65386e35589a175
quay.io/cilium/operator-aws:v1.14.15@​sha256:e17ee0a65edf75f13e9fb380ef2dc4c80096d8a08581f8b8a65386e35589a175

operator-azure

docker.io/cilium/operator-azure:v1.14.15@​sha256:e4ce4f4bce9431493efc59aba38277dd831836c3112af34e48e97c3d6bf4d668
quay.io/cilium/operator-azure:v1.14.15@​sha256:e4ce4f4bce9431493efc59aba38277dd831836c3112af34e48e97c3d6bf4d668

operator-generic

docker.io/cilium/operator-generic:v1.14.15@​sha256:233c4ab72cd6a06e8b4c8bed4991d625df8389e6225b27bc72f088c10036b870
quay.io/cilium/operator-generic:v1.14.15@​sha256:233c4ab72cd6a06e8b4c8bed4991d625df8389e6225b27bc72f088c10036b870

operator

docker.io/cilium/operator:v1.14.15@​sha256:064d2449a4ceaaf8bab2f14fb49544061bb4a9d508d78ea3596b3be03c20b82f
quay.io/cilium/operator:v1.14.15@​sha256:064d2449a4ceaaf8bab2f14fb49544061bb4a9d508d78ea3596b3be03c20b82f

---

Configuration

📅 Schedule: Branch creation - "before 7am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.