What cilium/cilium shipped
Generated by FoxPlug from public activity — not affiliated with Cilium.
Week of September 14, 2026
What shipped
- Released version 1.20.2 with a fix for AWS IPAM operator trying to release prefix IPs as individual IPs when still in use, and added node label selector support for gateway-api when hostNetwork is enabled. Release
- Released version 1.19.8 with fixes for AWS IPAM prefix delegation on subnets that ran out of prefixes and agent crashes when dumping map events. Release
- Released version 1.18.14 with fixes for AWS IPAM prefix delegation allocation failures and agent crashes when dumping map events. Release
- Fixed unloading DNS policies on shutdown where endpoints would timeout waiting for policy computation that was never requested. Pull request #48747
- Fixed cilium-operator metrics list to support both IPv4 and IPv6 loopback addresses, allowing it to work in IPv6-only mode on dual-stack nodes. Pull request #48780
- Fixed restoration of terminating load-balancing backends on restart to properly distinguish between quarantine states from termination versus health-check failures. Pull request #48763
- Fixed MCS EndpointSlice mirroring to handle service names that exceed 63 characters. Pull request #48783
- Fixed operator to shut down when the controller-runtime manager fails instead of silently continuing. Pull request #48385
- Fixed Envoy policy tier rendering to correctly include port-specific Pass rules when a tier contains a wildcard port rule. Pull request #48854
- Fixed validation of LocalRedirectPolicy to reject policies with empty redirectBackend.toPorts array to prevent agent panic. Pull request #48491
Why it matters
Three patch releases were published addressing AWS IPAM issues affecting production deployments, along with critical fixes for DNS policy handling, operator reliability, and networking edge cases. These fixes improve stability in dual-stack environments and cloud deployments where Cilium is commonly used.
Changelog entry
- gateway-api: node label selector for when hostNetwork is enabled Release
- aws/ipam: Fixed operator trying to release prefix IPs as individual IPs when in use Release
- aws/ipam: Fixed operator failing to allocate IPs on subnets that ran out of prefixes with prefix delegation enabled Release
- bpf: Fixed agent crash when dumping map events Release
- daemon: Fixed unloading DNS policies on shutdown to properly request policy computation Pull request #48747
- operator: Fixed metrics list to try both IPv4 and IPv6 loopback addresses Pull request #48780
- loadbalancer: Fixed restoration of terminating backends on restart Pull request #48763
- k8s: Fixed MCS EndpointSlice mirroring with service names exceeding 63 characters Pull request #48783
- operator: Fixed shutdown when controller-runtime manager fails Pull request #48385
- envoy: Fixed policy tier rendering for port-specific Pass rules Pull request #48854
- k8s: Added validation to reject LocalRedirectPolicy with empty redirectBackend.toPorts Pull request #48491
v1.20.2, v1.19.8, and v1.18.14 released. Fixes for AWS IPAM prefix delegation, DNS policy shutdown, operator crashes, IPv6-only mode support, and Envoy policy tiers.
Cilium releases v1.20.2, v1.19.8, and v1.18.14 now available. Key fixes include: AWS IPAM prefix delegation on exhausted subnets, DNS policy unloading on shutdown, operator reliability improvements, IPv6-only mode support for dual-stack nodes, and Envoy policy tier rendering with port-specific rules. These updates address stability issues in production cloud deployments and improve dual-stack networking support.