all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    ubuntu-jammy:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fed3:fea3
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 816f1655-6ecc-48ae-8cb1-fcdeace7b89b
        host_id: 4667d18e0398acd2fb730ad41ba32e35789c4ac8cd4c0875d25b316b
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fed3:fea3
        label: ubuntu-jammy
        node_properties: {}
        private_ipv4: 10.128.7.129
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.109
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fed3:fea3
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: YAKEcloud/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job python-black explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#54>'
      - '<Job python-black explicit: None implied: None source: YAKEcloud/yake-ansible/.zuul.yaml@main#82>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 84e72e6ae37a43dcbdb1591e47027841
      build_refs:
      - branch: main
        change: '247'
        change_message: "chore(deps): update dependency cilium/cilium to v1.18.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [cilium/cilium](https://redirect.github.com/cilium/cilium) | minor | `1.17.4`
          -> `1.18.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>cilium/cilium
          (cilium/cilium)</summary>\n\n### [`v1.18.0`](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):
          1.18.0\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.6...1.18.0)\n\nWe
          are excited to announce the **[Cilium 1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0)**
          release!\n\nA total of **3298 new commits** have been contributed to this
          release by a growing community of over **955 developers** and over **22,000
          GitHub stars**! \u2B50\n\nTo keep up to date with all the latest Cilium
          releases, see [Announcements](https://redirect.github.com/cilium/cilium/discussions/categories/announcements)\n\nHere's
          what's new in [v1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):\n\n####
          \U0001F6A0 Networking\n\n- **\u2696\uFE0F Load Balancing Redesign**: The
          service load-balancing control-plane in the Cilium agent has been redesigned
          to reduce memory usage and improve future extensibility of load-balancing
          features ([cilium/cilium#38469](https://redirect.github.com/cilium/cilium/pull/38469),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- **\U0001F50C
          Virtual Network Devices**: Added support for new virtual network device
          configurations such as VXLAN in IPsec (VinE) and IPIP tunnels ([cilium/cilium#37723](https://redirect.github.com/cilium/cilium/pull/37723),
          [@&#8203;ldelossa](https://redirect.github.com/ldelossa); [cilium/cilium#37346](https://redirect.github.com/cilium/cilium/pull/37346),
          [@&#8203;gyutaeb](https://redirect.github.com/gyutaeb))\n- **\u24C2\uFE0F
          Multiple Egress Gateways**: Egress Gateways policies can now direct traffic
          towards multiple gateway nodes ([cilium/cilium#39304](https://redirect.github.com/cilium/cilium/pull/39304),
          [@&#8203;carlos-abad](https://redirect.github.com/carlos-abad))\n- **\U0001F6A6
          Ingress Rate Limiting**: The bandwidth manager now supports ingress rate
          limiting ([cilium/cilium#36351](https://redirect.github.com/cilium/cilium/pull/36351),
          [@&#8203;l1b0k](https://redirect.github.com/l1b0k))\n- **\U0001F4E2 Multi-Device
          L2 Announcements**: The L2 pod announcement feature now supports multiple
          devices ([cilium/cilium#38198](https://redirect.github.com/cilium/cilium/pull/38198),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          **\U0001F3E2 Neighbor Subsystem Rework**: The neighbor subsystem was made
          more resilient through a new system that reconciles desired neighbor entries
          with the kernel state ([cilium/cilium#39987](https://redirect.github.com/cilium/cilium/pull/39987),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n\n####
          \U0001F310 IPv6\n\n- **\U0001F687 Tunneling Underlay**: The tunneling datapath
          mode now supports using an IPv6 network underlay, including when configured
          with IPsec transparent encryption ([cilium/cilium#38296](https://redirect.github.com/cilium/cilium/pull/38296),
          [cilium/cilium#39497](https://redirect.github.com/cilium/cilium/pull/39497),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4AC
          Kube Proxy Replacement**: Cilium now implements service translation when
          running on an IPv6 underlay ([cilium/cilium#39074](https://redirect.github.com/cilium/cilium/pull/39074),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4CB
          Delegated IPAM**: When delegating IP address management to a third party
          plugin, Cilium now configures IPv6 routes for connectivity if the plugin
          supports IPv6 ([cilium/cilium#38249](https://redirect.github.com/cilium/cilium/pull/38249),
          [@&#8203;caorui-io](https://redirect.github.com/caorui-io), [@&#8203;kadevu](https://redirect.github.com/kadevu))\n-
          **\U0001F4E6 IP Fragment Support**: Cilium now processes ordered IPv6 fragments
          to apply policy and routing functionality ([cilium/cilium#38110](https://redirect.github.com/cilium/cilium/pull/38110),
          [@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))\n- **\U0001F6AA
          Egress gateway policies** can now match IPv6 address ranges ([cilium/cilium#38452](https://redirect.github.com/cilium/cilium/pull/38452),
          [@&#8203;rgo3](https://redirect.github.com/rgo3))\n\n#### \U0001F6E1\uFE0F
          Policy & Observability\n\n- **\U0001F3F7\uFE0F Policy Names in Hubble-CLI**:
          Show the names of (C)CNPs that allowed or denied traffic when monitoring
          flows in Hubble ([cilium/cilium#39453](https://redirect.github.com/cilium/cilium/pull/39453),
          [@&#8203;antonipp](https://redirect.github.com/antonipp))\n- **\U0001F4DD
          Policy Log Fields**: A new free-text log field is added to policies, which
          is exposed in Hubble flows for easy correlation and searching ([cilium/cilium#39902](https://redirect.github.com/cilium/cilium/pull/39902),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F6F0\uFE0F
          Encapsulated Traffic Decoding**: Hubble decodes encapsulated traffic for
          deeper introspection into traffic flows ([cilium/cilium#37634](https://redirect.github.com/cilium/cilium/pull/37634),
          [@&#8203;kaworu](https://redirect.github.com/kaworu))\n- **\U0001F3F0 ClusterMesh
          Policy Restriction**: A new option allows the **cluster** entity to apply
          only to the local cluster in ClusterMesh environment ([cilium/cilium#39338](https://redirect.github.com/cilium/cilium/pull/39338),
          [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\u2728
          Enhanced Policy Dashboard**: The Policy section of the Cilium Grafana dashboard
          has been improved to show more relevant graphs, including policy drops in
          both directions ([cilium/cilium#36492](https://redirect.github.com/cilium/cilium/pull/36492),
          [cilium/cilium#37445](https://redirect.github.com/cilium/cilium/pull/37445),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n\n#### \U0001F305
          Performance\n\n- **\U0001F4CA Scale Test Results**: Cilium implements policies
          and services up to 45% faster in higher scale environments (Various; [@&#8203;marseel](https://redirect.github.com/marseel),
          [cilium/cilium#40227](https://redirect.github.com/cilium/cilium/pull/40227))\n-
          **\U0001F4E6 Image Size Reduction**: Docker image sizes are reduced by 32%
          on arm64 architecture images ([cilium/cilium#40005](https://redirect.github.com/cilium/cilium/pull/40005),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\u26A1 Improved
          Policy Performance**: The DNS proxy can process large numbers of IPs faster,
          and the EndpointSelector match implementation has been optimized ([cilium/cilium#39340](https://redirect.github.com/cilium/cilium/pull/39340),
          [@&#8203;squeed](https://redirect.github.com/squeed); [cilium/cilium#40414](https://redirect.github.com/cilium/cilium/pull/40414),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\U0001FA9E
          EndpointSlice Mirroring for Multi-Cluster Services**: Clustermesh mirrors
          EndpointSlice from the local cluster instead of copying the Service selectors
          when using the MCS-API controller ([cilium/cilium#38596](https://redirect.github.com/cilium/cilium/pull/38596),
          [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\U0001F310
          KVStoreMesh Optimization**: Cross-cluster state distribution is optimized
          by only synchronizing identities keyed by ID, not by value ([cilium/cilium#36471](https://redirect.github.com/cilium/cilium/pull/36471),
          [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- **\U0001F9E0
          Egress Gateway Processing**: Egress gateway policy processing is significantly
          improved when matching a large number of pods ([cilium/cilium#37714](https://redirect.github.com/cilium/cilium/pull/37714),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- **\U0001F5D1\uFE0F
          Optimized Garbage Collection for Connection Tracking**: Cilium leverages
          batched iterators for CTMap GC ([cilium/cilium#36288](https://redirect.github.com/cilium/cilium/pull/36288),
          [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))\n\n####
          \u2699\uFE0F Operations\n\n- **\U0001F4C8 API Server Connections at Scale**:
          Improve kube-apiserver connections behavior at scale through failover and
          setting better jitter and backoff configurations ([cilium/cilium#37601](https://redirect.github.com/cilium/cilium/pull/37601),
          [@&#8203;aditighag](https://redirect.github.com/aditighag); [cilium/cilium#38031](https://redirect.github.com/cilium/cilium/pull/38031),
          [@&#8203;orange30](https://redirect.github.com/orange30); [cilium/cilium#36648](https://redirect.github.com/cilium/cilium/pull/36648),
          [@&#8203;wedaly](https://redirect.github.com/wedaly))\n- **\U0001F504 ConfigMap
          Synchronization**: New option to automatically synchronize ConfigMap changes
          into the agent and report metrics for when the effective configuration is
          different from the desired configuration ([cilium/cilium#36510](https://redirect.github.com/cilium/cilium/pull/36510),
          [@&#8203;ovidiutirla](https://redirect.github.com/ovidiutirla))\n- **\U0001F393
          CRD Promotion to Stable**: Promote **CiliumCIDRGroup**, **CiliumLoadBalancerIPPool**
          and all **BGP** CRDs to stable API ([cilium/cilium#38940](https://redirect.github.com/cilium/cilium/pull/38940),
          [@&#8203;christarazi](https://redirect.github.com/christarazi); [cilium/cilium#39090](https://redirect.github.com/cilium/cilium/pull/39090),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84); [cilium/cilium#37765](https://redirect.github.com/cilium/cilium/pull/37765),
          [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- **\u26D4
          Node Taints Handling**: The cilium-operator Deployment uses a new default
          set of taints which avoids deploying to a drained node ([cilium/cilium#40137](https://redirect.github.com/cilium/cilium/pull/40137),
          [@&#8203;Murat](https://redirect.github.com/Murat) Parlakisik)\n- **:wood:
          Migrate to Slog**: Cilium now uses slog as log library for all components
          ([cilium/cilium#39664](https://redirect.github.com/cilium/cilium/pull/39664),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- **\U0001F527 Cilium
          dependencies** were updated to Kubernetes v1.33, Envoy v1.34, LLVM 19.1,
          and CNI v1.1 ([cilium/cilium#39124](https://redirect.github.com/cilium/cilium/pull/39124),
          [cilium/cilium#40175](https://redirect.github.com/cilium/cilium/pull/40175),
          [cilium/cilium#39632](https://redirect.github.com/cilium/cilium/pull/39632),
          [@&#8203;sayboras](https://redirect.github.com/sayboras); [cilium/cilium#38868](https://redirect.github.com/cilium/cilium/pull/38868),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F427 Minimum
          Linux Requirements**: The minimum kernel version for this release series
          is Linux v5.10 or similar, such as RHEL 8.6 ([cilium/cilium#38308](https://redirect.github.com/cilium/cilium/pull/38308),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n\n####
          \U0001F578\uFE0F Service Mesh & Gateway API\n\n- **\u26E9\uFE0F Gateway
          API v1.3.0**: Gateway API support is bumped to v1.3.0 ([cilium/cilium#39590](https://redirect.github.com/cilium/cilium/pull/39590),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F517
          Improved GatewayClass Configuration**: The new CiliumGatewayClassConfig
          object adds service type validation allows the configuration of extra settings
          on a per-GatewayClass level: LoadBalancerSourceRangesPolicy, ParametersRef
          fields. This allows Cilium to reconcile multiple GatewayClasses with different
          configurations ([cilium/cilium#37792](https://redirect.github.com/cilium/cilium/pull/37792),
          [cilium/cilium#37402](https://redirect.github.com/cilium/cilium/pull/37402),
          [cilium/cilium#40138](https://redirect.github.com/cilium/cilium/pull/40138),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F68F
          Multiple HTTPRoutes**: GAMMA reconciler now supports attaching multiple
          HTTPRoutes to the same Service ([cilium/cilium#39922](https://redirect.github.com/cilium/cilium/pull/39922),
          [@&#8203;youngnick](https://redirect.github.com/youngnick))\n- **\U0001FA84
          Route Changes Reconciliation**: Reconcile Gateway API based on all changes
          to routes. This allows label updates to trigger reconciliation correctly,
          amongst other things ([cilium/cilium#37798](https://redirect.github.com/cilium/cilium/pull/37798),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n\n#### \U0001F3F7\uFE0F
          IP Address Management\n\n- **\u2601\uFE0F AWS Prefix Delegation**: Prefix
          delegation on AWS bare metal instances is now supported natively in Cilium's
          AWS ENI IPAM mode ([cilium/cilium#39678](https://redirect.github.com/cilium/cilium/pull/39678),
          [@&#8203;41ks](https://redirect.github.com/41ks))\n- **\U0001F3EC Multi-Pool
          IPAM with KVStore**: Add support for Multi-Pool IPAM in external KVstore
          mode ([cilium/cilium#39638](https://redirect.github.com/cilium/cilium/pull/39638),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\U0001F510
          Multi-Pool IPAM with IPSec**: Add support for Multi-Pool IPAM mode with
          IPSec transparent encryption in tunnel routing mode ([cilium/cilium#39442](https://redirect.github.com/cilium/cilium/pull/39442),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\u21AA\uFE0F
          Multi-Pool Tunnel Routing**: Add support for tunnel routing in multi-pool
          IPAM mode ([cilium/cilium#38483](https://redirect.github.com/cilium/cilium/pull/38483),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n\n#### \U0001F6E3\uFE0F
          BGP\n\n- **\U0001F4C7 Route Aggregation**: Add support for BGP route aggregation
          in the control plane ([cilium/cilium#37275](https://redirect.github.com/cilium/cilium/pull/37275),
          [@&#8203;romanspb80](https://redirect.github.com/romanspb80))\n- **\U0001F3AF
          Overlapping Selector Matches**: Support overlapping selector matches in
          **CiliumBGPAdvertisement** resources ([cilium/cilium#36414](https://redirect.github.com/cilium/cilium/pull/36414),
          [@&#8203;dswaffordcw](https://redirect.github.com/dswaffordcw))\n- **\U0001F194
          New Router ID generation modes**: Generate router-id based on MAC addresses,
          or from an IP address pool ([cilium/cilium#36451](https://redirect.github.com/cilium/cilium/pull/36451),
          [@&#8203;yushoyamaguchi](https://redirect.github.com/yushoyamaguchi); [cilium/cilium#38300](https://redirect.github.com/cilium/cilium/pull/38300),
          [@&#8203;liyihuang](https://redirect.github.com/liyihuang))\n\n#### \U0001F9D1\u200D\U0001F4BB
          Development Experience\n\n- **\U0001F9EA Test attribution**: Identify owners
          of test in GitHub workflow results to make it easier to connect with other
          developers on tricky problems ([cilium/cilium#37027](https://redirect.github.com/cilium/cilium/pull/37027),
          [@&#8203;Joe](https://redirect.github.com/Joe) Stringer)\n- **\U0001F6CF\uFE0F
          Policy REST API**: The Cilium policy API exposed over a local unix socket
          is deprecated. The other mechanisms to configure policy via Kubernetes resources
          or the local filesystem are preferred ([cilium/cilium#40212](https://redirect.github.com/cilium/cilium/pull/40212),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F3D7\uFE0F
          Feature Deprecation**: Deprecate underused features like Custom Calls, Recorder
          API and External Workloads ([cilium/cilium#38480](https://redirect.github.com/cilium/cilium/pull/38480),
          [cilium/cilium#39642](https://redirect.github.com/cilium/cilium/pull/39642),
          [cilium/cilium#37418](https://redirect.github.com/cilium/cilium/pull/37418),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n#### \U0001F3E2 Community\n\n-
          **\u2764\uFE0F Production Case Studies**: Many end-users have stepped forward
          to tell their stories running Cilium in production. If your company wants
          to submit their case studies let us know. We would love to hear your feedback!\n
          \ - [ByteDance](https://www.youtube.com/watch?v=cKPW67D7X10), [Canopus Networks](https://www.youtube.com/watch?v=YXl9xuIxylY),
          [Corner Banca](https://www.youtube.com/watch?v=HVPKSefazl4), [DB Schenker](https://www.cncf.io/case-studies/db-schenker/),
          [eBay](https://www.youtube.com/watch?v=xEa4KFf5FzY), [ECCO](https://www.cncf.io/case-studies/ecco/),
          [G-Research](https://www.youtube.com/watch?v=kjSFN34dROQ), [Social Network
          Company](https://cilium.io/blog/2025/04/15/tetragon-social-networking-user-story/),
          and [Preferred Networks](https://www.youtube.com/watch?v=n7_I4zu6f_M)\n-
          **\U0001F1EC\U0001F1E7 London Events**: The community gathered at [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/)
          and the [Cilium Developer Summit](https://redirect.github.com/cilium/dev-summits/tree/main/2025-EU)
          in London\n- **\U0001F1FA\U0001F1F8 Atlanta Events**: Meet us at the upcoming
          [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/ciliumcon/)
          and Cilium Developers Summit in Atlanta, Georgia\n- **\U0001F465 SIG Community
          Meetings**: [SIG Community](https://redirect.github.com/cilium/community/tree/main/sig-community)
          now meets every first and third Thursday to foster, grow, and sustain the
          Cilium open source community\n\n#### \U0001F4D4 Full CHANGELOG\n\n- Full
          CHANGELOG.md can be found [here](https://redirect.github.com/cilium/cilium/blob/v1.18.0/CHANGELOG.md).\n\nAnd
          finally, we would like to thank you to all contributors of Cilium that helped
          directly and indirectly with the project. The success of Cilium could not
          happen without all of you. \u2764\uFE0F :people\\_holding\\_hands:  \u2764\uFE0F\n\n###
          [`v1.17.6`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.6):
          1.17.6\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.5...1.17.6)\n\n##
          Summary of Changes\n\n**Minor Changes:**\n\n- helm: KPR subflag changes
          (Backport PR [#&#8203;40222](https://redirect.github.com/cilium/cilium/issues/40222),
          Upstream PR [#&#8203;39721](https://redirect.github.com/cilium/cilium/issues/39721),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n**Bugfixes:**\n\n- Deny
          policies are now synced to Envoy so that they can be enforced for Ingress
          policies. (Backport PR [#&#8203;40187](https://redirect.github.com/cilium/cilium/issues/40187),
          Upstream PR [#&#8203;39736](https://redirect.github.com/cilium/cilium/issues/39736),
          [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n- Do not
          fail the agent startup in case IPv6 support is enabled and the node does
          not have an IPv6 address assigned yet (Backport PR [#&#8203;40205](https://redirect.github.com/cilium/cilium/issues/40205),
          Upstream PR [#&#8203;40143](https://redirect.github.com/cilium/cilium/issues/40143),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- Fix bug preventing
          a global service from including remote backends, if the local service has
          no selector, and the remote one gets removed and then added again. ([#&#8203;40361](https://redirect.github.com/cilium/cilium/issues/40361),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix data race
          involving DumpReliablyWithCallback map operation. (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;38590](https://redirect.github.com/cilium/cilium/issues/38590),
          [@&#8203;aditighag](https://redirect.github.com/aditighag))\n- Fix IPAM
          IP release racing condition when IP reassigned back to ENI (Backport PR
          [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40019](https://redirect.github.com/cilium/cilium/issues/40019),
          [@&#8203;victorcq](https://redirect.github.com/victorcq))\n- hubble automatically
          pick the `hubble-prefer-ipv6` to `true` if ipv4 not enabled (Backport PR
          [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40210](https://redirect.github.com/cilium/cilium/issues/40210),
          [@&#8203;chengjoey](https://redirect.github.com/chengjoey))\n- LBIPAM: Fix
          deletion of CiliumLoadBalancerIPPool with multiple IP blocks that led to
          an operator crash (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40013](https://redirect.github.com/cilium/cilium/issues/40013),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- pkg/egressgateway:
          ensure gateway IP is IPv4 (Backport PR [#&#8203;40332](https://redirect.github.com/cilium/cilium/issues/40332),
          Upstream PR [#&#8203;40209](https://redirect.github.com/cilium/cilium/issues/40209),
          [@&#8203;rgo3](https://redirect.github.com/rgo3))\n- policy: fix error handling
          for selector policy resolution ([#&#8203;40404](https://redirect.github.com/cilium/cilium/issues/40404),
          [@&#8203;fristonio](https://redirect.github.com/fristonio))\n\n**CI Changes:**\n\n-
          ci: do not run north-south conn disrupt tests for 5.4 kernels ([#&#8203;39443](https://redirect.github.com/cilium/cilium/issues/39443),
          [@&#8203;ldelossa](https://redirect.github.com/ldelossa))\n- ci: fix north-south
          conn disrupt for 5.4 kernel ([#&#8203;40434](https://redirect.github.com/cilium/cilium/issues/40434),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n\n**Misc
          Changes:**\n\n- .github/workflows: remove reviewers if ciliumbot approved
          PR (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;39989](https://redirect.github.com/cilium/cilium/issues/39989),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
          as part command (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40050](https://redirect.github.com/cilium/cilium/issues/40050),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
          as part command (Backport PR [#&#8203;40332](https://redirect.github.com/cilium/cilium/issues/40332),
          Upstream PR [#&#8203;40089](https://redirect.github.com/cilium/cilium/issues/40089),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- chore(deps): update
          all github action dependencies (v1.17) ([#&#8203;40158](https://redirect.github.com/cilium/cilium/issues/40158),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;40044](https://redirect.github.com/cilium/cilium/issues/40044),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;40458](https://redirect.github.com/cilium/cilium/issues/40458),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency cilium/cilium-cli to v0.18.5 (v1.17) ([#&#8203;39948](https://redirect.github.com/cilium/cilium/issues/39948),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update go to v1.24.5 (v1.17) ([#&#8203;40424](https://redirect.github.com/cilium/cilium/issues/40424),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.33.4-1752151664-7c2edb0b44cf95f326d628b837fcdd845102ba68
          (v1.17) ([#&#8203;40466](https://redirect.github.com/cilium/cilium/issues/40466),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;40157](https://redirect.github.com/cilium/cilium/issues/40157),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          cilium: fix socket termination for v4-in-v6 clients (Backport PR [#&#8203;40295](https://redirect.github.com/cilium/cilium/issues/40295),
          Upstream PR [#&#8203;39994](https://redirect.github.com/cilium/cilium/issues/39994),
          [@&#8203;borkmann](https://redirect.github.com/borkmann))\n- contrib/git:
          add merge drivers to automate post-merge commands (Backport PR [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40189](https://redirect.github.com/cilium/cilium/issues/40189),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- disk-cleanup: parallelize
          cleanup process to speed up step (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40054](https://redirect.github.com/cilium/cilium/issues/40054),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- doc:ipsec:kvstore:
          explicit limitations that could lead to staling XFRM states and no connectivity
          (Backport PR [#&#8203;40176](https://redirect.github.com/cilium/cilium/issues/40176),
          Upstream PR [#&#8203;39719](https://redirect.github.com/cilium/cilium/issues/39719),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- docs/ipsec:
          Fix incorrect statement on hostns encryption (Backport PR [#&#8203;40176](https://redirect.github.com/cilium/cilium/issues/40176),
          Upstream PR [#&#8203;40133](https://redirect.github.com/cilium/cilium/issues/40133),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- Makefile: Require
          API generation commands to succeed (Backport PR [#&#8203;40205](https://redirect.github.com/cilium/cilium/issues/40205),
          Upstream PR [#&#8203;40199](https://redirect.github.com/cilium/cilium/issues/40199),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- operator/secretsync:
          silence reconciliation logs (Backport PR [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40217](https://redirect.github.com/cilium/cilium/issues/40217),
          [@&#8203;tklauser](https://redirect.github.com/tklauser))\n- proxy: Use
          upstream envoy control plane API (Backport PR [#&#8203;40216](https://redirect.github.com/cilium/cilium/issues/40216),
          Upstream PR [#&#8203;39672](https://redirect.github.com/cilium/cilium/issues/39672),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- v1.17: helm:
          Restore hostPort.enabled flag ([#&#8203;40480](https://redirect.github.com/cilium/cilium/issues/40480),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n**Other Changes:**\n\n-
          \\[v1.17] deps: Update cilium-envoy image to 1.33.x ([#&#8203;40088](https://redirect.github.com/cilium/cilium/issues/40088),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- Backport: kube-proxy-healthz
          to return 503 if node terminating ([#&#8203;40317](https://redirect.github.com/cilium/cilium/issues/40317),
          [@&#8203;tamilmani1989](https://redirect.github.com/tamilmani1989))\n- Bpf
          datapath TCP conntrack entries are (re)created only in the forward direction,
          solving an issue with freezing proxy connections when backend connection
          is re-opened. ([#&#8203;40448](https://redirect.github.com/cilium/cilium/issues/40448),
          [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n- envoy:
          Bump cilium-envoy to the latest v1.33.x ([#&#8203;40368](https://redirect.github.com/cilium/cilium/issues/40368),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- install: Update
          image digests for v1.17.5 ([#&#8203;40117](https://redirect.github.com/cilium/cilium/issues/40117),
          [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n-
          proxy: Bump envoy version to the latest v1.33.x ([#&#8203;40181](https://redirect.github.com/cilium/cilium/issues/40181),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- v1.17: docs:
          Document encapsulation options ([#&#8203;40471](https://redirect.github.com/cilium/cilium/issues/40471),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n\n#### Docker
          Manifests\n\n##### cilium\n\n`quay.io/cilium/cilium:v1.17.6@&#8203;sha256:544de3d4fed7acba72758413812780a4972d47c39035f2a06d6145d8644a3353`\n`quay.io/cilium/cilium:stable@sha256:544de3d4fed7acba72758413812780a4972d47c39035f2a06d6145d8644a3353`\n\n#####
          clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.17.6@&#8203;sha256:f619e97432db427e1511bf91af3be8ded418c53a353a09629e04c5880659d1df`\n`quay.io/cilium/clustermesh-apiserver:stable@sha256:f619e97432db427e1511bf91af3be8ded418c53a353a09629e04c5880659d1df`\n\n#####
          docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.17.6@&#8203;sha256:2d6175582c036dde241448b2b937353ce304d7a30eec9b66e96279b4b39c4f36`\n`quay.io/cilium/docker-plugin:stable@sha256:2d6175582c036dde241448b2b937353ce304d7a30eec9b66e96279b4b39c4f36`\n\n#####
          hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.17.6@&#8203;sha256:7d17ec10b3d37341c18ca56165b2f29a715cb8ee81311fd07088d8bf68c01e60`\n`quay.io/cilium/hubble-relay:stable@sha256:7d17ec10b3d37341c18ca56165b2f29a715cb8ee81311fd07088d8bf68c01e60`\n\n#####
          operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.17.6@&#8203;sha256:5352e670719dc61f059c1e1a04bc0563c2144738386fa7236dc167ff3fef4c64`\n`quay.io/cilium/operator-alibabacloud:stable@sha256:5352e670719dc61f059c1e1a04bc0563c2144738386fa7236dc167ff3fef4c64`\n\n#####
          operator-aws\n\n`quay.io/cilium/operator-aws:v1.17.6@&#8203;sha256:24db5c811e24e51e7ce166e8e056967875bf3544cc2ead6984f34f705fe71847`\n`quay.io/cilium/operator-aws:stable@sha256:24db5c811e24e51e7ce166e8e056967875bf3544cc2ead6984f34f705fe71847`\n\n#####
          operator-azure\n\n`quay.io/cilium/operator-azure:v1.17.6@&#8203;sha256:1b7e193ccbc718f723993a0f11eb8fbf16376e822fe8c4dc792d7696701d57c8`\n`quay.io/cilium/operator-azure:stable@sha256:1b7e193ccbc718f723993a0f11eb8fbf16376e822fe8c4dc792d7696701d57c8`\n\n#####
          operator-generic\n\n`quay.io/cilium/operator-generic:v1.17.6@&#8203;sha256:91ac3bf7be7bed30e90218f219d4f3062a63377689ee7246062fa0cc3839d096`\n`quay.io/cilium/operator-generic:stable@sha256:91ac3bf7be7bed30e90218f219d4f3062a63377689ee7246062fa0cc3839d096`\n\n#####
          operator\n\n`quay.io/cilium/operator:v1.17.6@&#8203;sha256:e7b41cdba20875f8a6595eca1baf1cff1b8367417cffa99be7b1b9b0a11ab677`\n`quay.io/cilium/operator:stable@sha256:e7b41cdba20875f8a6595eca1baf1cff1b8367417cffa99be7b1b9b0a11ab677`\n\n###
          [`v1.17.5`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.5):
          1.17.5\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.4...1.17.5)\n\n##
          Summary of Changes\n\n**Bugfixes:**\n\n- aws/ENI: Only use pagination when
          not specifying IDs (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39120](https://redirect.github.com/cilium/cilium/issues/39120),
          [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- Fix
          connections to deleted service backends not getting terminated in certain
          cases involving services with multiple protocol ports. (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;37745](https://redirect.github.com/cilium/cilium/issues/37745),
          [@&#8203;foyerunix](https://redirect.github.com/foyerunix))\n- Fix handle\\_policy\\_egress
          programs not being cleaned up during endpoint teardown (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39560](https://redirect.github.com/cilium/cilium/issues/39560),
          [@&#8203;ti-mo](https://redirect.github.com/ti-mo))\n- Fixed bug where datapath
          is unable to compile when active connection tracking and IPv6 are enabled
          at the same time. (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39509](https://redirect.github.com/cilium/cilium/issues/39509),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          Fixes a bug where a CIDRRule of  0.0.0.0/0 would not select all external
          traffic. (Backport PR [#&#8203;39765](https://redirect.github.com/cilium/cilium/issues/39765),
          Upstream PR [#&#8203;39693](https://redirect.github.com/cilium/cilium/issues/39693),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- gateway-api: Use
          original source address for GAMMA (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39206](https://redirect.github.com/cilium/cilium/issues/39206),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- helm/hubble:
          Fix wrong value for metrics server tls existingSecret (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39668](https://redirect.github.com/cilium/cilium/issues/39668),
          [@&#8203;devodev](https://redirect.github.com/devodev))\n- install/kubernetes:
          change mapDynamicSizeRatio from number to string (Backport PR [#&#8203;39963](https://redirect.github.com/cilium/cilium/issues/39963),
          Upstream PR [#&#8203;39834](https://redirect.github.com/cilium/cilium/issues/39834),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- operator: skip retry
          of node taint update when node not found (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39517](https://redirect.github.com/cilium/cilium/issues/39517),
          [@&#8203;jshr-w](https://redirect.github.com/jshr-w))\n- Persist parent
          interface index of endpoint across agent restarts (Backport PR [#&#8203;39765](https://redirect.github.com/cilium/cilium/issues/39765),
          Upstream PR [#&#8203;39575](https://redirect.github.com/cilium/cilium/issues/39575),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          Policy updates to Envoy no longer consider a single selector as an L3 wildcard.
          Cilium bpf datapath policy enforcement is not done for Cilium Ingress policy
          enforcement so the L3 identity needs to be enforced in all cases. (Backport
          PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39511](https://redirect.github.com/cilium/cilium/issues/39511),
          [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n\n**CI Changes:**\n\n-
          bpf: test: fix up mis-spelled HAVE\\_NETNS\\_COOKIE (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39420](https://redirect.github.com/cilium/cilium/issues/39420),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          call for metrics in smoke tests from runner instead of installing apt/curl
          on cilium pod (Backport PR [#&#8203;39862](https://redirect.github.com/cilium/cilium/issues/39862),
          Upstream PR [#&#8203;37362](https://redirect.github.com/cilium/cilium/issues/37362),
          [@&#8203;Artyop](https://redirect.github.com/Artyop))\n- gh: e2e: enable
          secondary-network LB testing for all KPR=true configs (Backport PR [#&#8203;39780](https://redirect.github.com/cilium/cilium/issues/39780),
          Upstream PR [#&#8203;39718](https://redirect.github.com/cilium/cilium/issues/39718),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          gh: eks: restore concurrent execution of connectivity tests (Backport PR
          [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39673](https://redirect.github.com/cilium/cilium/issues/39673),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          Re-optimize CI build process (Backport PR [#&#8203;39862](https://redirect.github.com/cilium/cilium/issues/39862),
          Upstream PR [#&#8203;39802](https://redirect.github.com/cilium/cilium/issues/39802),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n\n**Misc Changes:**\n\n-
          .github/workflows: remove cilium-cli from build-go-caches ([#&#8203;39801](https://redirect.github.com/cilium/cilium/issues/39801),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- \\[v1.17] bpf: host:
          don't detect WG traffic in from-netdev@cilium\\_wg0 ([#&#8203;38233](https://redirect.github.com/cilium/cilium/issues/38233),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          Add a section to talk about the native routing masquerading in the cloud
          environment. (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39343](https://redirect.github.com/cilium/cilium/issues/39343),
          [@&#8203;liyihuang](https://redirect.github.com/liyihuang))\n- bpf: host:
          flag Cilium's ESP traffic as TRACE\\_REASON\\_ENCRYPTED (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39558](https://redirect.github.com/cilium/cilium/issues/39558),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          bpf: Skip lxc src IP check for proxy traffic (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39530](https://redirect.github.com/cilium/cilium/issues/39530),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- bpf:wireguard:
          reuse MARK\\_MAGIC\\_ENCRYPT for encrypted packets (Backport PR [#&#8203;39652](https://redirect.github.com/cilium/cilium/issues/39652),
          Upstream PR [#&#8203;39651](https://redirect.github.com/cilium/cilium/issues/39651),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- chore(deps):
          update all github action dependencies (v1.17) ([#&#8203;39476](https://redirect.github.com/cilium/cilium/issues/39476),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.17) ([#&#8203;39704](https://redirect.github.com/cilium/cilium/issues/39704),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;39570](https://redirect.github.com/cilium/cilium/issues/39570),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;39687](https://redirect.github.com/cilium/cilium/issues/39687),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;39821](https://redirect.github.com/cilium/cilium/issues/39821),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;39879](https://redirect.github.com/cilium/cilium/issues/39879),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency protocolbuffers/protobuf to v31 (v1.17) ([#&#8203;39607](https://redirect.github.com/cilium/cilium/issues/39607),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency protocolbuffers/protobuf to v31.1 (v1.17)
          ([#&#8203;39951](https://redirect.github.com/cilium/cilium/issues/39951),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update docker.io/library/golang:1.24.3 docker digest to [`4c0a181`](https://redirect.github.com/cilium/cilium/commit/4c0a181)
          (v1.17) ([#&#8203;39725](https://redirect.github.com/cilium/cilium/issues/39725),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update docker.io/library/golang:1.24.3 docker digest to [`81bf592`](https://redirect.github.com/cilium/cilium/commit/81bf592)
          (v1.17) ([#&#8203;39822](https://redirect.github.com/cilium/cilium/issues/39822),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update docker.io/library/golang:1.24.3 docker digest to [`86b4cff`](https://redirect.github.com/cilium/cilium/commit/86b4cff)
          (v1.17) ([#&#8203;39605](https://redirect.github.com/cilium/cilium/issues/39605),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update gcr.io/distroless/static:nonroot docker digest to [`188ddfb`](https://redirect.github.com/cilium/cilium/commit/188ddfb)
          (v1.17) ([#&#8203;39606](https://redirect.github.com/cilium/cilium/issues/39606),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update go to v1.24.4 (v1.17) ([#&#8203;39949](https://redirect.github.com/cilium/cilium/issues/39949),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.6-1749031919-98c55b1d0c1154fb6c9e760583c2dcd7778686e2
          (v1.17) ([#&#8203;39886](https://redirect.github.com/cilium/cilium/issues/39886),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.6-1749271279-0864395884b263913eac200ee2048fd985f8e626
          (v1.17) ([#&#8203;39935](https://redirect.github.com/cilium/cilium/issues/39935),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;39703](https://redirect.github.com/cilium/cilium/issues/39703),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;39950](https://redirect.github.com/cilium/cilium/issues/39950),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          HELM: Adding Label Support to clustermesh apiserver service (Backport PR
          [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39520](https://redirect.github.com/cilium/cilium/issues/39520),
          [@&#8203;camrossi](https://redirect.github.com/camrossi))\n- mtu/endpoint\\_updater.go:
          Check for unix.EINVAL not os.ErrInvalid (Backport PR [#&#8203;39862](https://redirect.github.com/cilium/cilium/issues/39862),
          Upstream PR [#&#8203;39658](https://redirect.github.com/cilium/cilium/issues/39658),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          mtu: Catch expected error in endpoint MTU updater (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;36596](https://redirect.github.com/cilium/cilium/issues/36596),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          pkg/fswatcher: Rewrite without underlying use of fsnotify (Backport PR [#&#8203;39963](https://redirect.github.com/cilium/cilium/issues/39963),
          Upstream PR [#&#8203;38537](https://redirect.github.com/cilium/cilium/issues/38537),
          [@&#8203;glibsm](https://redirect.github.com/glibsm))\n\n**Other Changes:**\n\n-
          \\[v1.17] chore(deps): revert etcd bump to v3.6.0 ([#&#8203;39628](https://redirect.github.com/cilium/cilium/issues/39628),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- \\[v1.17] vendor:
          Bump Hive and StateDB ([#&#8203;39689](https://redirect.github.com/cilium/cilium/issues/39689),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- install: Update
          image digests for v1.17.4 ([#&#8203;39548](https://redirect.github.com/cilium/cilium/issues/39548),
          [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n\n####
          Docker Manifests\n\n##### cilium\n\n`quay.io/cilium/cilium:v1.17.5@&#8203;sha256:baf8541723ee0b72d6c489c741c81a6fdc5228940d66cb76ef5ea2ce3c639ea6`\n`quay.io/cilium/cilium:stable@sha256:baf8541723ee0b72d6c489c741c81a6fdc5228940d66cb76ef5ea2ce3c639ea6`\n\n#####
          clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.17.5@&#8203;sha256:78dc40b9cb8d7b1ad21a76ff3e11541809acda2ac4ef94150cc832100edc247d`\n`quay.io/cilium/clustermesh-apiserver:stable@sha256:78dc40b9cb8d7b1ad21a76ff3e11541809acda2ac4ef94150cc832100edc247d`\n\n#####
          docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.17.5@&#8203;sha256:0da0960b1d34d07ff1aba99d491e2413f0285cf09d94b183c4329e7e7b6949cb`\n`quay.io/cilium/docker-plugin:stable@sha256:0da0960b1d34d07ff1aba99d491e2413f0285cf09d94b183c4329e7e7b6949cb`\n\n#####
          hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.17.5@&#8203;sha256:fbb8a6afa8718200fca9381ad274ed695792dbadd2417b0e99c36210ae4964ff`\n`quay.io/cilium/hubble-relay:stable@sha256:fbb8a6afa8718200fca9381ad274ed695792dbadd2417b0e99c36210ae4964ff`\n\n#####
          operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.17.5@&#8203;sha256:654db67929f716b6178a34a15cb8f95e391465085bcf48cdba49819a56fcd259`\n`quay.io/cilium/operator-alibabacloud:stable@sha256:654db67929f716b6178a34a15cb8f95e391465085bcf48cdba49819a56fcd259`\n\n#####
          operator-aws\n\n`quay.io/cilium/operator-aws:v1.17.5@&#8203;sha256:3e189ec1e286f1bf23d47c45bdeac6025ef7ec3d2dc16190ee768eb94708cbc3`\n`quay.io/cilium/operator-aws:stable@sha256:3e189ec1e286f1bf23d47c45bdeac6025ef7ec3d2dc16190ee768eb94708cbc3`\n\n#####
          operator-azure\n\n`quay.io/cilium/operator-azure:v1.17.5@&#8203;sha256:add78783fdaced7453a324612eeb9ebecf56002b56c14c73596b3b4923321026`\n`quay.io/cilium/operator-azure:stable@sha256:add78783fdaced7453a324612eeb9ebecf56002b56c14c73596b3b4923321026`\n\n#####
          operator-generic\n\n`quay.io/cilium/operator-generic:v1.17.5@&#8203;sha256:f954c97eeb1b47ed67d08cc8fb4108fb829f869373cbb3e698a7f8ef1085b09e`\n`quay.io/cilium/operator-generic:stable@sha256:f954c97eeb1b47ed67d08cc8fb4108fb829f869373cbb3e698a7f8ef1085b09e`\n\n#####
          operator\n\n`quay.io/cilium/operator:v1.17.5@&#8203;sha256:815f6e0648724ed4cdbdc072889ad4223de251f21e0503035af91d41dd547cc4`\n`quay.io/cilium/operator:stable@sha256:815f6e0648724ed4cdbdc072889ad4223de251f21e0503035af91d41dd547cc4`\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC42MC4xIiwidXBkYXRlZEluVmVyIjoiNDEuNTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/247
        commit_id: 509ffc4c1cdc89300381de019311071d52515836
        patchset: 509ffc4c1cdc89300381de019311071d52515836
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      buildset: 14e229221d5644b7b90963caa2a84ae1
      buildset_refs:
      - branch: main
        change: '247'
        change_message: "chore(deps): update dependency cilium/cilium to v1.18.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [cilium/cilium](https://redirect.github.com/cilium/cilium) | minor | `1.17.4`
          -> `1.18.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>cilium/cilium
          (cilium/cilium)</summary>\n\n### [`v1.18.0`](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):
          1.18.0\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.6...1.18.0)\n\nWe
          are excited to announce the **[Cilium 1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0)**
          release!\n\nA total of **3298 new commits** have been contributed to this
          release by a growing community of over **955 developers** and over **22,000
          GitHub stars**! \u2B50\n\nTo keep up to date with all the latest Cilium
          releases, see [Announcements](https://redirect.github.com/cilium/cilium/discussions/categories/announcements)\n\nHere's
          what's new in [v1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):\n\n####
          \U0001F6A0 Networking\n\n- **\u2696\uFE0F Load Balancing Redesign**: The
          service load-balancing control-plane in the Cilium agent has been redesigned
          to reduce memory usage and improve future extensibility of load-balancing
          features ([cilium/cilium#38469](https://redirect.github.com/cilium/cilium/pull/38469),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- **\U0001F50C
          Virtual Network Devices**: Added support for new virtual network device
          configurations such as VXLAN in IPsec (VinE) and IPIP tunnels ([cilium/cilium#37723](https://redirect.github.com/cilium/cilium/pull/37723),
          [@&#8203;ldelossa](https://redirect.github.com/ldelossa); [cilium/cilium#37346](https://redirect.github.com/cilium/cilium/pull/37346),
          [@&#8203;gyutaeb](https://redirect.github.com/gyutaeb))\n- **\u24C2\uFE0F
          Multiple Egress Gateways**: Egress Gateways policies can now direct traffic
          towards multiple gateway nodes ([cilium/cilium#39304](https://redirect.github.com/cilium/cilium/pull/39304),
          [@&#8203;carlos-abad](https://redirect.github.com/carlos-abad))\n- **\U0001F6A6
          Ingress Rate Limiting**: The bandwidth manager now supports ingress rate
          limiting ([cilium/cilium#36351](https://redirect.github.com/cilium/cilium/pull/36351),
          [@&#8203;l1b0k](https://redirect.github.com/l1b0k))\n- **\U0001F4E2 Multi-Device
          L2 Announcements**: The L2 pod announcement feature now supports multiple
          devices ([cilium/cilium#38198](https://redirect.github.com/cilium/cilium/pull/38198),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          **\U0001F3E2 Neighbor Subsystem Rework**: The neighbor subsystem was made
          more resilient through a new system that reconciles desired neighbor entries
          with the kernel state ([cilium/cilium#39987](https://redirect.github.com/cilium/cilium/pull/39987),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n\n####
          \U0001F310 IPv6\n\n- **\U0001F687 Tunneling Underlay**: The tunneling datapath
          mode now supports using an IPv6 network underlay, including when configured
          with IPsec transparent encryption ([cilium/cilium#38296](https://redirect.github.com/cilium/cilium/pull/38296),
          [cilium/cilium#39497](https://redirect.github.com/cilium/cilium/pull/39497),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4AC
          Kube Proxy Replacement**: Cilium now implements service translation when
          running on an IPv6 underlay ([cilium/cilium#39074](https://redirect.github.com/cilium/cilium/pull/39074),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4CB
          Delegated IPAM**: When delegating IP address management to a third party
          plugin, Cilium now configures IPv6 routes for connectivity if the plugin
          supports IPv6 ([cilium/cilium#38249](https://redirect.github.com/cilium/cilium/pull/38249),
          [@&#8203;caorui-io](https://redirect.github.com/caorui-io), [@&#8203;kadevu](https://redirect.github.com/kadevu))\n-
          **\U0001F4E6 IP Fragment Support**: Cilium now processes ordered IPv6 fragments
          to apply policy and routing functionality ([cilium/cilium#38110](https://redirect.github.com/cilium/cilium/pull/38110),
          [@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))\n- **\U0001F6AA
          Egress gateway policies** can now match IPv6 address ranges ([cilium/cilium#38452](https://redirect.github.com/cilium/cilium/pull/38452),
          [@&#8203;rgo3](https://redirect.github.com/rgo3))\n\n#### \U0001F6E1\uFE0F
          Policy & Observability\n\n- **\U0001F3F7\uFE0F Policy Names in Hubble-CLI**:
          Show the names of (C)CNPs that allowed or denied traffic when monitoring
          flows in Hubble ([cilium/cilium#39453](https://redirect.github.com/cilium/cilium/pull/39453),
          [@&#8203;antonipp](https://redirect.github.com/antonipp))\n- **\U0001F4DD
          Policy Log Fields**: A new free-text log field is added to policies, which
          is exposed in Hubble flows for easy correlation and searching ([cilium/cilium#39902](https://redirect.github.com/cilium/cilium/pull/39902),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F6F0\uFE0F
          Encapsulated Traffic Decoding**: Hubble decodes encapsulated traffic for
          deeper introspection into traffic flows ([cilium/cilium#37634](https://redirect.github.com/cilium/cilium/pull/37634),
          [@&#8203;kaworu](https://redirect.github.com/kaworu))\n- **\U0001F3F0 ClusterMesh
          Policy Restriction**: A new option allows the **cluster** entity to apply
          only to the local cluster in ClusterMesh environment ([cilium/cilium#39338](https://redirect.github.com/cilium/cilium/pull/39338),
          [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\u2728
          Enhanced Policy Dashboard**: The Policy section of the Cilium Grafana dashboard
          has been improved to show more relevant graphs, including policy drops in
          both directions ([cilium/cilium#36492](https://redirect.github.com/cilium/cilium/pull/36492),
          [cilium/cilium#37445](https://redirect.github.com/cilium/cilium/pull/37445),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n\n#### \U0001F305
          Performance\n\n- **\U0001F4CA Scale Test Results**: Cilium implements policies
          and services up to 45% faster in higher scale environments (Various; [@&#8203;marseel](https://redirect.github.com/marseel),
          [cilium/cilium#40227](https://redirect.github.com/cilium/cilium/pull/40227))\n-
          **\U0001F4E6 Image Size Reduction**: Docker image sizes are reduced by 32%
          on arm64 architecture images ([cilium/cilium#40005](https://redirect.github.com/cilium/cilium/pull/40005),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\u26A1 Improved
          Policy Performance**: The DNS proxy can process large numbers of IPs faster,
          and the EndpointSelector match implementation has been optimized ([cilium/cilium#39340](https://redirect.github.com/cilium/cilium/pull/39340),
          [@&#8203;squeed](https://redirect.github.com/squeed); [cilium/cilium#40414](https://redirect.github.com/cilium/cilium/pull/40414),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\U0001FA9E
          EndpointSlice Mirroring for Multi-Cluster Services**: Clustermesh mirrors
          EndpointSlice from the local cluster instead of copying the Service selectors
          when using the MCS-API controller ([cilium/cilium#38596](https://redirect.github.com/cilium/cilium/pull/38596),
          [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\U0001F310
          KVStoreMesh Optimization**: Cross-cluster state distribution is optimized
          by only synchronizing identities keyed by ID, not by value ([cilium/cilium#36471](https://redirect.github.com/cilium/cilium/pull/36471),
          [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- **\U0001F9E0
          Egress Gateway Processing**: Egress gateway policy processing is significantly
          improved when matching a large number of pods ([cilium/cilium#37714](https://redirect.github.com/cilium/cilium/pull/37714),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- **\U0001F5D1\uFE0F
          Optimized Garbage Collection for Connection Tracking**: Cilium leverages
          batched iterators for CTMap GC ([cilium/cilium#36288](https://redirect.github.com/cilium/cilium/pull/36288),
          [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))\n\n####
          \u2699\uFE0F Operations\n\n- **\U0001F4C8 API Server Connections at Scale**:
          Improve kube-apiserver connections behavior at scale through failover and
          setting better jitter and backoff configurations ([cilium/cilium#37601](https://redirect.github.com/cilium/cilium/pull/37601),
          [@&#8203;aditighag](https://redirect.github.com/aditighag); [cilium/cilium#38031](https://redirect.github.com/cilium/cilium/pull/38031),
          [@&#8203;orange30](https://redirect.github.com/orange30); [cilium/cilium#36648](https://redirect.github.com/cilium/cilium/pull/36648),
          [@&#8203;wedaly](https://redirect.github.com/wedaly))\n- **\U0001F504 ConfigMap
          Synchronization**: New option to automatically synchronize ConfigMap changes
          into the agent and report metrics for when the effective configuration is
          different from the desired configuration ([cilium/cilium#36510](https://redirect.github.com/cilium/cilium/pull/36510),
          [@&#8203;ovidiutirla](https://redirect.github.com/ovidiutirla))\n- **\U0001F393
          CRD Promotion to Stable**: Promote **CiliumCIDRGroup**, **CiliumLoadBalancerIPPool**
          and all **BGP** CRDs to stable API ([cilium/cilium#38940](https://redirect.github.com/cilium/cilium/pull/38940),
          [@&#8203;christarazi](https://redirect.github.com/christarazi); [cilium/cilium#39090](https://redirect.github.com/cilium/cilium/pull/39090),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84); [cilium/cilium#37765](https://redirect.github.com/cilium/cilium/pull/37765),
          [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- **\u26D4
          Node Taints Handling**: The cilium-operator Deployment uses a new default
          set of taints which avoids deploying to a drained node ([cilium/cilium#40137](https://redirect.github.com/cilium/cilium/pull/40137),
          [@&#8203;Murat](https://redirect.github.com/Murat) Parlakisik)\n- **:wood:
          Migrate to Slog**: Cilium now uses slog as log library for all components
          ([cilium/cilium#39664](https://redirect.github.com/cilium/cilium/pull/39664),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- **\U0001F527 Cilium
          dependencies** were updated to Kubernetes v1.33, Envoy v1.34, LLVM 19.1,
          and CNI v1.1 ([cilium/cilium#39124](https://redirect.github.com/cilium/cilium/pull/39124),
          [cilium/cilium#40175](https://redirect.github.com/cilium/cilium/pull/40175),
          [cilium/cilium#39632](https://redirect.github.com/cilium/cilium/pull/39632),
          [@&#8203;sayboras](https://redirect.github.com/sayboras); [cilium/cilium#38868](https://redirect.github.com/cilium/cilium/pull/38868),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F427 Minimum
          Linux Requirements**: The minimum kernel version for this release series
          is Linux v5.10 or similar, such as RHEL 8.6 ([cilium/cilium#38308](https://redirect.github.com/cilium/cilium/pull/38308),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n\n####
          \U0001F578\uFE0F Service Mesh & Gateway API\n\n- **\u26E9\uFE0F Gateway
          API v1.3.0**: Gateway API support is bumped to v1.3.0 ([cilium/cilium#39590](https://redirect.github.com/cilium/cilium/pull/39590),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F517
          Improved GatewayClass Configuration**: The new CiliumGatewayClassConfig
          object adds service type validation allows the configuration of extra settings
          on a per-GatewayClass level: LoadBalancerSourceRangesPolicy, ParametersRef
          fields. This allows Cilium to reconcile multiple GatewayClasses with different
          configurations ([cilium/cilium#37792](https://redirect.github.com/cilium/cilium/pull/37792),
          [cilium/cilium#37402](https://redirect.github.com/cilium/cilium/pull/37402),
          [cilium/cilium#40138](https://redirect.github.com/cilium/cilium/pull/40138),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F68F
          Multiple HTTPRoutes**: GAMMA reconciler now supports attaching multiple
          HTTPRoutes to the same Service ([cilium/cilium#39922](https://redirect.github.com/cilium/cilium/pull/39922),
          [@&#8203;youngnick](https://redirect.github.com/youngnick))\n- **\U0001FA84
          Route Changes Reconciliation**: Reconcile Gateway API based on all changes
          to routes. This allows label updates to trigger reconciliation correctly,
          amongst other things ([cilium/cilium#37798](https://redirect.github.com/cilium/cilium/pull/37798),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n\n#### \U0001F3F7\uFE0F
          IP Address Management\n\n- **\u2601\uFE0F AWS Prefix Delegation**: Prefix
          delegation on AWS bare metal instances is now supported natively in Cilium's
          AWS ENI IPAM mode ([cilium/cilium#39678](https://redirect.github.com/cilium/cilium/pull/39678),
          [@&#8203;41ks](https://redirect.github.com/41ks))\n- **\U0001F3EC Multi-Pool
          IPAM with KVStore**: Add support for Multi-Pool IPAM in external KVstore
          mode ([cilium/cilium#39638](https://redirect.github.com/cilium/cilium/pull/39638),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\U0001F510
          Multi-Pool IPAM with IPSec**: Add support for Multi-Pool IPAM mode with
          IPSec transparent encryption in tunnel routing mode ([cilium/cilium#39442](https://redirect.github.com/cilium/cilium/pull/39442),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\u21AA\uFE0F
          Multi-Pool Tunnel Routing**: Add support for tunnel routing in multi-pool
          IPAM mode ([cilium/cilium#38483](https://redirect.github.com/cilium/cilium/pull/38483),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n\n#### \U0001F6E3\uFE0F
          BGP\n\n- **\U0001F4C7 Route Aggregation**: Add support for BGP route aggregation
          in the control plane ([cilium/cilium#37275](https://redirect.github.com/cilium/cilium/pull/37275),
          [@&#8203;romanspb80](https://redirect.github.com/romanspb80))\n- **\U0001F3AF
          Overlapping Selector Matches**: Support overlapping selector matches in
          **CiliumBGPAdvertisement** resources ([cilium/cilium#36414](https://redirect.github.com/cilium/cilium/pull/36414),
          [@&#8203;dswaffordcw](https://redirect.github.com/dswaffordcw))\n- **\U0001F194
          New Router ID generation modes**: Generate router-id based on MAC addresses,
          or from an IP address pool ([cilium/cilium#36451](https://redirect.github.com/cilium/cilium/pull/36451),
          [@&#8203;yushoyamaguchi](https://redirect.github.com/yushoyamaguchi); [cilium/cilium#38300](https://redirect.github.com/cilium/cilium/pull/38300),
          [@&#8203;liyihuang](https://redirect.github.com/liyihuang))\n\n#### \U0001F9D1\u200D\U0001F4BB
          Development Experience\n\n- **\U0001F9EA Test attribution**: Identify owners
          of test in GitHub workflow results to make it easier to connect with other
          developers on tricky problems ([cilium/cilium#37027](https://redirect.github.com/cilium/cilium/pull/37027),
          [@&#8203;Joe](https://redirect.github.com/Joe) Stringer)\n- **\U0001F6CF\uFE0F
          Policy REST API**: The Cilium policy API exposed over a local unix socket
          is deprecated. The other mechanisms to configure policy via Kubernetes resources
          or the local filesystem are preferred ([cilium/cilium#40212](https://redirect.github.com/cilium/cilium/pull/40212),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F3D7\uFE0F
          Feature Deprecation**: Deprecate underused features like Custom Calls, Recorder
          API and External Workloads ([cilium/cilium#38480](https://redirect.github.com/cilium/cilium/pull/38480),
          [cilium/cilium#39642](https://redirect.github.com/cilium/cilium/pull/39642),
          [cilium/cilium#37418](https://redirect.github.com/cilium/cilium/pull/37418),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n#### \U0001F3E2 Community\n\n-
          **\u2764\uFE0F Production Case Studies**: Many end-users have stepped forward
          to tell their stories running Cilium in production. If your company wants
          to submit their case studies let us know. We would love to hear your feedback!\n
          \ - [ByteDance](https://www.youtube.com/watch?v=cKPW67D7X10), [Canopus Networks](https://www.youtube.com/watch?v=YXl9xuIxylY),
          [Corner Banca](https://www.youtube.com/watch?v=HVPKSefazl4), [DB Schenker](https://www.cncf.io/case-studies/db-schenker/),
          [eBay](https://www.youtube.com/watch?v=xEa4KFf5FzY), [ECCO](https://www.cncf.io/case-studies/ecco/),
          [G-Research](https://www.youtube.com/watch?v=kjSFN34dROQ), [Social Network
          Company](https://cilium.io/blog/2025/04/15/tetragon-social-networking-user-story/),
          and [Preferred Networks](https://www.youtube.com/watch?v=n7_I4zu6f_M)\n-
          **\U0001F1EC\U0001F1E7 London Events**: The community gathered at [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/)
          and the [Cilium Developer Summit](https://redirect.github.com/cilium/dev-summits/tree/main/2025-EU)
          in London\n- **\U0001F1FA\U0001F1F8 Atlanta Events**: Meet us at the upcoming
          [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/ciliumcon/)
          and Cilium Developers Summit in Atlanta, Georgia\n- **\U0001F465 SIG Community
          Meetings**: [SIG Community](https://redirect.github.com/cilium/community/tree/main/sig-community)
          now meets every first and third Thursday to foster, grow, and sustain the
          Cilium open source community\n\n#### \U0001F4D4 Full CHANGELOG\n\n- Full
          CHANGELOG.md can be found [here](https://redirect.github.com/cilium/cilium/blob/v1.18.0/CHANGELOG.md).\n\nAnd
          finally, we would like to thank you to all contributors of Cilium that helped
          directly and indirectly with the project. The success of Cilium could not
          happen without all of you. \u2764\uFE0F :people\\_holding\\_hands:  \u2764\uFE0F\n\n###
          [`v1.17.6`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.6):
          1.17.6\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.5...1.17.6)\n\n##
          Summary of Changes\n\n**Minor Changes:**\n\n- helm: KPR subflag changes
          (Backport PR [#&#8203;40222](https://redirect.github.com/cilium/cilium/issues/40222),
          Upstream PR [#&#8203;39721](https://redirect.github.com/cilium/cilium/issues/39721),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n**Bugfixes:**\n\n- Deny
          policies are now synced to Envoy so that they can be enforced for Ingress
          policies. (Backport PR [#&#8203;40187](https://redirect.github.com/cilium/cilium/issues/40187),
          Upstream PR [#&#8203;39736](https://redirect.github.com/cilium/cilium/issues/39736),
          [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n- Do not
          fail the agent startup in case IPv6 support is enabled and the node does
          not have an IPv6 address assigned yet (Backport PR [#&#8203;40205](https://redirect.github.com/cilium/cilium/issues/40205),
          Upstream PR [#&#8203;40143](https://redirect.github.com/cilium/cilium/issues/40143),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- Fix bug preventing
          a global service from including remote backends, if the local service has
          no selector, and the remote one gets removed and then added again. ([#&#8203;40361](https://redirect.github.com/cilium/cilium/issues/40361),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix data race
          involving DumpReliablyWithCallback map operation. (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;38590](https://redirect.github.com/cilium/cilium/issues/38590),
          [@&#8203;aditighag](https://redirect.github.com/aditighag))\n- Fix IPAM
          IP release racing condition when IP reassigned back to ENI (Backport PR
          [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40019](https://redirect.github.com/cilium/cilium/issues/40019),
          [@&#8203;victorcq](https://redirect.github.com/victorcq))\n- hubble automatically
          pick the `hubble-prefer-ipv6` to `true` if ipv4 not enabled (Backport PR
          [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40210](https://redirect.github.com/cilium/cilium/issues/40210),
          [@&#8203;chengjoey](https://redirect.github.com/chengjoey))\n- LBIPAM: Fix
          deletion of CiliumLoadBalancerIPPool with multiple IP blocks that led to
          an operator crash (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40013](https://redirect.github.com/cilium/cilium/issues/40013),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- pkg/egressgateway:
          ensure gateway IP is IPv4 (Backport PR [#&#8203;40332](https://redirect.github.com/cilium/cilium/issues/40332),
          Upstream PR [#&#8203;40209](https://redirect.github.com/cilium/cilium/issues/40209),
          [@&#8203;rgo3](https://redirect.github.com/rgo3))\n- policy: fix error handling
          for selector policy resolution ([#&#8203;40404](https://redirect.github.com/cilium/cilium/issues/40404),
          [@&#8203;fristonio](https://redirect.github.com/fristonio))\n\n**CI Changes:**\n\n-
          ci: do not run north-south conn disrupt tests for 5.4 kernels ([#&#8203;39443](https://redirect.github.com/cilium/cilium/issues/39443),
          [@&#8203;ldelossa](https://redirect.github.com/ldelossa))\n- ci: fix north-south
          conn disrupt for 5.4 kernel ([#&#8203;40434](https://redirect.github.com/cilium/cilium/issues/40434),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n\n**Misc
          Changes:**\n\n- .github/workflows: remove reviewers if ciliumbot approved
          PR (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;39989](https://redirect.github.com/cilium/cilium/issues/39989),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
          as part command (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40050](https://redirect.github.com/cilium/cilium/issues/40050),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
          as part command (Backport PR [#&#8203;40332](https://redirect.github.com/cilium/cilium/issues/40332),
          Upstream PR [#&#8203;40089](https://redirect.github.com/cilium/cilium/issues/40089),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- chore(deps): update
          all github action dependencies (v1.17) ([#&#8203;40158](https://redirect.github.com/cilium/cilium/issues/40158),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;40044](https://redirect.github.com/cilium/cilium/issues/40044),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;40458](https://redirect.github.com/cilium/cilium/issues/40458),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency cilium/cilium-cli to v0.18.5 (v1.17) ([#&#8203;39948](https://redirect.github.com/cilium/cilium/issues/39948),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update go to v1.24.5 (v1.17) ([#&#8203;40424](https://redirect.github.com/cilium/cilium/issues/40424),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.33.4-1752151664-7c2edb0b44cf95f326d628b837fcdd845102ba68
          (v1.17) ([#&#8203;40466](https://redirect.github.com/cilium/cilium/issues/40466),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;40157](https://redirect.github.com/cilium/cilium/issues/40157),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          cilium: fix socket termination for v4-in-v6 clients (Backport PR [#&#8203;40295](https://redirect.github.com/cilium/cilium/issues/40295),
          Upstream PR [#&#8203;39994](https://redirect.github.com/cilium/cilium/issues/39994),
          [@&#8203;borkmann](https://redirect.github.com/borkmann))\n- contrib/git:
          add merge drivers to automate post-merge commands (Backport PR [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40189](https://redirect.github.com/cilium/cilium/issues/40189),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- disk-cleanup: parallelize
          cleanup process to speed up step (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40054](https://redirect.github.com/cilium/cilium/issues/40054),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- doc:ipsec:kvstore:
          explicit limitations that could lead to staling XFRM states and no connectivity
          (Backport PR [#&#8203;40176](https://redirect.github.com/cilium/cilium/issues/40176),
          Upstream PR [#&#8203;39719](https://redirect.github.com/cilium/cilium/issues/39719),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- docs/ipsec:
          Fix incorrect statement on hostns encryption (Backport PR [#&#8203;40176](https://redirect.github.com/cilium/cilium/issues/40176),
          Upstream PR [#&#8203;40133](https://redirect.github.com/cilium/cilium/issues/40133),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- Makefile: Require
          API generation commands to succeed (Backport PR [#&#8203;40205](https://redirect.github.com/cilium/cilium/issues/40205),
          Upstream PR [#&#8203;40199](https://redirect.github.com/cilium/cilium/issues/40199),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- operator/secretsync:
          silence reconciliation logs (Backport PR [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40217](https://redirect.github.com/cilium/cilium/issues/40217),
          [@&#8203;tklauser](https://redirect.github.com/tklauser))\n- proxy: Use
          upstream envoy control plane API (Backport PR [#&#8203;40216](https://redirect.github.com/cilium/cilium/issues/40216),
          Upstream PR [#&#8203;39672](https://redirect.github.com/cilium/cilium/issues/39672),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- v1.17: helm:
          Restore hostPort.enabled flag ([#&#8203;40480](https://redirect.github.com/cilium/cilium/issues/40480),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n**Other Changes:**\n\n-
          \\[v1.17] deps: Update cilium-envoy image to 1.33.x ([#&#8203;40088](https://redirect.github.com/cilium/cilium/issues/40088),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- Backport: kube-proxy-healthz
          to return 503 if node terminating ([#&#8203;40317](https://redirect.github.com/cilium/cilium/issues/40317),
          [@&#8203;tamilmani1989](https://redirect.github.com/tamilmani1989))\n- Bpf
          datapath TCP conntrack entries are (re)created only in the forward direction,
          solving an issue with freezing proxy connections when backend connection
          is re-opened. ([#&#8203;40448](https://redirect.github.com/cilium/cilium/issues/40448),
          [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n- envoy:
          Bump cilium-envoy to the latest v1.33.x ([#&#8203;40368](https://redirect.github.com/cilium/cilium/issues/40368),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- install: Update
          image digests for v1.17.5 ([#&#8203;40117](https://redirect.github.com/cilium/cilium/issues/40117),
          [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n-
          proxy: Bump envoy version to the latest v1.33.x ([#&#8203;40181](https://redirect.github.com/cilium/cilium/issues/40181),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- v1.17: docs:
          Document encapsulation options ([#&#8203;40471](https://redirect.github.com/cilium/cilium/issues/40471),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n\n#### Docker
          Manifests\n\n##### cilium\n\n`quay.io/cilium/cilium:v1.17.6@&#8203;sha256:544de3d4fed7acba72758413812780a4972d47c39035f2a06d6145d8644a3353`\n`quay.io/cilium/cilium:stable@sha256:544de3d4fed7acba72758413812780a4972d47c39035f2a06d6145d8644a3353`\n\n#####
          clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.17.6@&#8203;sha256:f619e97432db427e1511bf91af3be8ded418c53a353a09629e04c5880659d1df`\n`quay.io/cilium/clustermesh-apiserver:stable@sha256:f619e97432db427e1511bf91af3be8ded418c53a353a09629e04c5880659d1df`\n\n#####
          docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.17.6@&#8203;sha256:2d6175582c036dde241448b2b937353ce304d7a30eec9b66e96279b4b39c4f36`\n`quay.io/cilium/docker-plugin:stable@sha256:2d6175582c036dde241448b2b937353ce304d7a30eec9b66e96279b4b39c4f36`\n\n#####
          hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.17.6@&#8203;sha256:7d17ec10b3d37341c18ca56165b2f29a715cb8ee81311fd07088d8bf68c01e60`\n`quay.io/cilium/hubble-relay:stable@sha256:7d17ec10b3d37341c18ca56165b2f29a715cb8ee81311fd07088d8bf68c01e60`\n\n#####
          operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.17.6@&#8203;sha256:5352e670719dc61f059c1e1a04bc0563c2144738386fa7236dc167ff3fef4c64`\n`quay.io/cilium/operator-alibabacloud:stable@sha256:5352e670719dc61f059c1e1a04bc0563c2144738386fa7236dc167ff3fef4c64`\n\n#####
          operator-aws\n\n`quay.io/cilium/operator-aws:v1.17.6@&#8203;sha256:24db5c811e24e51e7ce166e8e056967875bf3544cc2ead6984f34f705fe71847`\n`quay.io/cilium/operator-aws:stable@sha256:24db5c811e24e51e7ce166e8e056967875bf3544cc2ead6984f34f705fe71847`\n\n#####
          operator-azure\n\n`quay.io/cilium/operator-azure:v1.17.6@&#8203;sha256:1b7e193ccbc718f723993a0f11eb8fbf16376e822fe8c4dc792d7696701d57c8`\n`quay.io/cilium/operator-azure:stable@sha256:1b7e193ccbc718f723993a0f11eb8fbf16376e822fe8c4dc792d7696701d57c8`\n\n#####
          operator-generic\n\n`quay.io/cilium/operator-generic:v1.17.6@&#8203;sha256:91ac3bf7be7bed30e90218f219d4f3062a63377689ee7246062fa0cc3839d096`\n`quay.io/cilium/operator-generic:stable@sha256:91ac3bf7be7bed30e90218f219d4f3062a63377689ee7246062fa0cc3839d096`\n\n#####
          operator\n\n`quay.io/cilium/operator:v1.17.6@&#8203;sha256:e7b41cdba20875f8a6595eca1baf1cff1b8367417cffa99be7b1b9b0a11ab677`\n`quay.io/cilium/operator:stable@sha256:e7b41cdba20875f8a6595eca1baf1cff1b8367417cffa99be7b1b9b0a11ab677`\n\n###
          [`v1.17.5`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.5):
          1.17.5\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.4...1.17.5)\n\n##
          Summary of Changes\n\n**Bugfixes:**\n\n- aws/ENI: Only use pagination when
          not specifying IDs (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39120](https://redirect.github.com/cilium/cilium/issues/39120),
          [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- Fix
          connections to deleted service backends not getting terminated in certain
          cases involving services with multiple protocol ports. (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;37745](https://redirect.github.com/cilium/cilium/issues/37745),
          [@&#8203;foyerunix](https://redirect.github.com/foyerunix))\n- Fix handle\\_policy\\_egress
          programs not being cleaned up during endpoint teardown (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39560](https://redirect.github.com/cilium/cilium/issues/39560),
          [@&#8203;ti-mo](https://redirect.github.com/ti-mo))\n- Fixed bug where datapath
          is unable to compile when active connection tracking and IPv6 are enabled
          at the same time. (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39509](https://redirect.github.com/cilium/cilium/issues/39509),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          Fixes a bug where a CIDRRule of  0.0.0.0/0 would not select all external
          traffic. (Backport PR [#&#8203;39765](https://redirect.github.com/cilium/cilium/issues/39765),
          Upstream PR [#&#8203;39693](https://redirect.github.com/cilium/cilium/issues/39693),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- gateway-api: Use
          original source address for GAMMA (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39206](https://redirect.github.com/cilium/cilium/issues/39206),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- helm/hubble:
          Fix wrong value for metrics server tls existingSecret (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39668](https://redirect.github.com/cilium/cilium/issues/39668),
          [@&#8203;devodev](https://redirect.github.com/devodev))\n- install/kubernetes:
          change mapDynamicSizeRatio from number to string (Backport PR [#&#8203;39963](https://redirect.github.com/cilium/cilium/issues/39963),
          Upstream PR [#&#8203;39834](https://redirect.github.com/cilium/cilium/issues/39834),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- operator: skip retry
          of node taint update when node not found (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39517](https://redirect.github.com/cilium/cilium/issues/39517),
          [@&#8203;jshr-w](https://redirect.github.com/jshr-w))\n- Persist parent
          interface index of endpoint across agent restarts (Backport PR [#&#8203;39765](https://redirect.github.com/cilium/cilium/issues/39765),
          Upstream PR [#&#8203;39575](https://redirect.github.com/cilium/cilium/issues/39575),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          Policy updates to Envoy no longer consider a single selector as an L3 wildcard.
          Cilium bpf datapath policy enforcement is not done for Cilium Ingress policy
          enforcement so the L3 identity needs to be enforced in all cases. (Backport
          PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39511](https://redirect.github.com/cilium/cilium/issues/39511),
          [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n\n**CI Changes:**\n\n-
          bpf: test: fix up mis-spelled HAVE\\_NETNS\\_COOKIE (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39420](https://redirect.github.com/cilium/cilium/issues/39420),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          call for metrics in smoke tests from runner instead of installing apt/curl
          on cilium pod (Backport PR [#&#8203;39862](https://redirect.github.com/cilium/cilium/issues/39862),
          Upstream PR [#&#8203;37362](https://redirect.github.com/cilium/cilium/issues/37362),
          [@&#8203;Artyop](https://redirect.github.com/Artyop))\n- gh: e2e: enable
          secondary-network LB testing for all KPR=true configs (Backport PR [#&#8203;39780](https://redirect.github.com/cilium/cilium/issues/39780),
          Upstream PR [#&#8203;39718](https://redirect.github.com/cilium/cilium/issues/39718),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          gh: eks: restore concurrent execution of connectivity tests (Backport PR
          [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39673](https://redirect.github.com/cilium/cilium/issues/39673),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          Re-optimize CI build process (Backport PR [#&#8203;39862](https://redirect.github.com/cilium/cilium/issues/39862),
          Upstream PR [#&#8203;39802](https://redirect.github.com/cilium/cilium/issues/39802),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n\n**Misc Changes:**\n\n-
          .github/workflows: remove cilium-cli from build-go-caches ([#&#8203;39801](https://redirect.github.com/cilium/cilium/issues/39801),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- \\[v1.17] bpf: host:
          don't detect WG traffic in from-netdev@cilium\\_wg0 ([#&#8203;38233](https://redirect.github.com/cilium/cilium/issues/38233),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          Add a section to talk about the native routing masquerading in the cloud
          environment. (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39343](https://redirect.github.com/cilium/cilium/issues/39343),
          [@&#8203;liyihuang](https://redirect.github.com/liyihuang))\n- bpf: host:
          flag Cilium's ESP traffic as TRACE\\_REASON\\_ENCRYPTED (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39558](https://redirect.github.com/cilium/cilium/issues/39558),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          bpf: Skip lxc src IP check for proxy traffic (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39530](https://redirect.github.com/cilium/cilium/issues/39530),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- bpf:wireguard:
          reuse MARK\\_MAGIC\\_ENCRYPT for encrypted packets (Backport PR [#&#8203;39652](https://redirect.github.com/cilium/cilium/issues/39652),
          Upstream PR [#&#8203;39651](https://redirect.github.com/cilium/cilium/issues/39651),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- chore(deps):
          update all github action dependencies (v1.17) ([#&#8203;39476](https://redirect.github.com/cilium/cilium/issues/39476),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.17) ([#&#8203;39704](https://redirect.github.com/cilium/cilium/issues/39704),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;39570](https://redirect.github.com/cilium/cilium/issues/39570),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;39687](https://redirect.github.com/cilium/cilium/issues/39687),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;39821](https://redirect.github.com/cilium/cilium/issues/39821),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;39879](https://redirect.github.com/cilium/cilium/issues/39879),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency protocolbuffers/protobuf to v31 (v1.17) ([#&#8203;39607](https://redirect.github.com/cilium/cilium/issues/39607),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency protocolbuffers/protobuf to v31.1 (v1.17)
          ([#&#8203;39951](https://redirect.github.com/cilium/cilium/issues/39951),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update docker.io/library/golang:1.24.3 docker digest to [`4c0a181`](https://redirect.github.com/cilium/cilium/commit/4c0a181)
          (v1.17) ([#&#8203;39725](https://redirect.github.com/cilium/cilium/issues/39725),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update docker.io/library/golang:1.24.3 docker digest to [`81bf592`](https://redirect.github.com/cilium/cilium/commit/81bf592)
          (v1.17) ([#&#8203;39822](https://redirect.github.com/cilium/cilium/issues/39822),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update docker.io/library/golang:1.24.3 docker digest to [`86b4cff`](https://redirect.github.com/cilium/cilium/commit/86b4cff)
          (v1.17) ([#&#8203;39605](https://redirect.github.com/cilium/cilium/issues/39605),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update gcr.io/distroless/static:nonroot docker digest to [`188ddfb`](https://redirect.github.com/cilium/cilium/commit/188ddfb)
          (v1.17) ([#&#8203;39606](https://redirect.github.com/cilium/cilium/issues/39606),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update go to v1.24.4 (v1.17) ([#&#8203;39949](https://redirect.github.com/cilium/cilium/issues/39949),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.6-1749031919-98c55b1d0c1154fb6c9e760583c2dcd7778686e2
          (v1.17) ([#&#8203;39886](https://redirect.github.com/cilium/cilium/issues/39886),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.6-1749271279-0864395884b263913eac200ee2048fd985f8e626
          (v1.17) ([#&#8203;39935](https://redirect.github.com/cilium/cilium/issues/39935),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;39703](https://redirect.github.com/cilium/cilium/issues/39703),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;39950](https://redirect.github.com/cilium/cilium/issues/39950),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          HELM: Adding Label Support to clustermesh apiserver service (Backport PR
          [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39520](https://redirect.github.com/cilium/cilium/issues/39520),
          [@&#8203;camrossi](https://redirect.github.com/camrossi))\n- mtu/endpoint\\_updater.go:
          Check for unix.EINVAL not os.ErrInvalid (Backport PR [#&#8203;39862](https://redirect.github.com/cilium/cilium/issues/39862),
          Upstream PR [#&#8203;39658](https://redirect.github.com/cilium/cilium/issues/39658),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          mtu: Catch expected error in endpoint MTU updater (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;36596](https://redirect.github.com/cilium/cilium/issues/36596),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          pkg/fswatcher: Rewrite without underlying use of fsnotify (Backport PR [#&#8203;39963](https://redirect.github.com/cilium/cilium/issues/39963),
          Upstream PR [#&#8203;38537](https://redirect.github.com/cilium/cilium/issues/38537),
          [@&#8203;glibsm](https://redirect.github.com/glibsm))\n\n**Other Changes:**\n\n-
          \\[v1.17] chore(deps): revert etcd bump to v3.6.0 ([#&#8203;39628](https://redirect.github.com/cilium/cilium/issues/39628),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- \\[v1.17] vendor:
          Bump Hive and StateDB ([#&#8203;39689](https://redirect.github.com/cilium/cilium/issues/39689),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- install: Update
          image digests for v1.17.4 ([#&#8203;39548](https://redirect.github.com/cilium/cilium/issues/39548),
          [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n\n####
          Docker Manifests\n\n##### cilium\n\n`quay.io/cilium/cilium:v1.17.5@&#8203;sha256:baf8541723ee0b72d6c489c741c81a6fdc5228940d66cb76ef5ea2ce3c639ea6`\n`quay.io/cilium/cilium:stable@sha256:baf8541723ee0b72d6c489c741c81a6fdc5228940d66cb76ef5ea2ce3c639ea6`\n\n#####
          clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.17.5@&#8203;sha256:78dc40b9cb8d7b1ad21a76ff3e11541809acda2ac4ef94150cc832100edc247d`\n`quay.io/cilium/clustermesh-apiserver:stable@sha256:78dc40b9cb8d7b1ad21a76ff3e11541809acda2ac4ef94150cc832100edc247d`\n\n#####
          docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.17.5@&#8203;sha256:0da0960b1d34d07ff1aba99d491e2413f0285cf09d94b183c4329e7e7b6949cb`\n`quay.io/cilium/docker-plugin:stable@sha256:0da0960b1d34d07ff1aba99d491e2413f0285cf09d94b183c4329e7e7b6949cb`\n\n#####
          hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.17.5@&#8203;sha256:fbb8a6afa8718200fca9381ad274ed695792dbadd2417b0e99c36210ae4964ff`\n`quay.io/cilium/hubble-relay:stable@sha256:fbb8a6afa8718200fca9381ad274ed695792dbadd2417b0e99c36210ae4964ff`\n\n#####
          operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.17.5@&#8203;sha256:654db67929f716b6178a34a15cb8f95e391465085bcf48cdba49819a56fcd259`\n`quay.io/cilium/operator-alibabacloud:stable@sha256:654db67929f716b6178a34a15cb8f95e391465085bcf48cdba49819a56fcd259`\n\n#####
          operator-aws\n\n`quay.io/cilium/operator-aws:v1.17.5@&#8203;sha256:3e189ec1e286f1bf23d47c45bdeac6025ef7ec3d2dc16190ee768eb94708cbc3`\n`quay.io/cilium/operator-aws:stable@sha256:3e189ec1e286f1bf23d47c45bdeac6025ef7ec3d2dc16190ee768eb94708cbc3`\n\n#####
          operator-azure\n\n`quay.io/cilium/operator-azure:v1.17.5@&#8203;sha256:add78783fdaced7453a324612eeb9ebecf56002b56c14c73596b3b4923321026`\n`quay.io/cilium/operator-azure:stable@sha256:add78783fdaced7453a324612eeb9ebecf56002b56c14c73596b3b4923321026`\n\n#####
          operator-generic\n\n`quay.io/cilium/operator-generic:v1.17.5@&#8203;sha256:f954c97eeb1b47ed67d08cc8fb4108fb829f869373cbb3e698a7f8ef1085b09e`\n`quay.io/cilium/operator-generic:stable@sha256:f954c97eeb1b47ed67d08cc8fb4108fb829f869373cbb3e698a7f8ef1085b09e`\n\n#####
          operator\n\n`quay.io/cilium/operator:v1.17.5@&#8203;sha256:815f6e0648724ed4cdbdc072889ad4223de251f21e0503035af91d41dd547cc4`\n`quay.io/cilium/operator:stable@sha256:815f6e0648724ed4cdbdc072889ad4223de251f21e0503035af91d41dd547cc4`\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC42MC4xIiwidXBkYXRlZEluVmVyIjoiNDEuNTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/247
        commit_id: 509ffc4c1cdc89300381de019311071d52515836
        patchset: 509ffc4c1cdc89300381de019311071d52515836
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      change: '247'
      change_message: "chore(deps): update dependency cilium/cilium to v1.18.0\n\nThis
        PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
        [cilium/cilium](https://redirect.github.com/cilium/cilium) | minor | `1.17.4`
        -> `1.18.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>cilium/cilium
        (cilium/cilium)</summary>\n\n### [`v1.18.0`](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):
        1.18.0\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.6...1.18.0)\n\nWe
        are excited to announce the **[Cilium 1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0)**
        release!\n\nA total of **3298 new commits** have been contributed to this
        release by a growing community of over **955 developers** and over **22,000
        GitHub stars**! \u2B50\n\nTo keep up to date with all the latest Cilium releases,
        see [Announcements](https://redirect.github.com/cilium/cilium/discussions/categories/announcements)\n\nHere's
        what's new in [v1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):\n\n####
        \U0001F6A0 Networking\n\n- **\u2696\uFE0F Load Balancing Redesign**: The service
        load-balancing control-plane in the Cilium agent has been redesigned to reduce
        memory usage and improve future extensibility of load-balancing features ([cilium/cilium#38469](https://redirect.github.com/cilium/cilium/pull/38469),
        [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- **\U0001F50C Virtual
        Network Devices**: Added support for new virtual network device configurations
        such as VXLAN in IPsec (VinE) and IPIP tunnels ([cilium/cilium#37723](https://redirect.github.com/cilium/cilium/pull/37723),
        [@&#8203;ldelossa](https://redirect.github.com/ldelossa); [cilium/cilium#37346](https://redirect.github.com/cilium/cilium/pull/37346),
        [@&#8203;gyutaeb](https://redirect.github.com/gyutaeb))\n- **\u24C2\uFE0F
        Multiple Egress Gateways**: Egress Gateways policies can now direct traffic
        towards multiple gateway nodes ([cilium/cilium#39304](https://redirect.github.com/cilium/cilium/pull/39304),
        [@&#8203;carlos-abad](https://redirect.github.com/carlos-abad))\n- **\U0001F6A6
        Ingress Rate Limiting**: The bandwidth manager now supports ingress rate limiting
        ([cilium/cilium#36351](https://redirect.github.com/cilium/cilium/pull/36351),
        [@&#8203;l1b0k](https://redirect.github.com/l1b0k))\n- **\U0001F4E2 Multi-Device
        L2 Announcements**: The L2 pod announcement feature now supports multiple
        devices ([cilium/cilium#38198](https://redirect.github.com/cilium/cilium/pull/38198),
        [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
        **\U0001F3E2 Neighbor Subsystem Rework**: The neighbor subsystem was made
        more resilient through a new system that reconciles desired neighbor entries
        with the kernel state ([cilium/cilium#39987](https://redirect.github.com/cilium/cilium/pull/39987),
        [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n\n####
        \U0001F310 IPv6\n\n- **\U0001F687 Tunneling Underlay**: The tunneling datapath
        mode now supports using an IPv6 network underlay, including when configured
        with IPsec transparent encryption ([cilium/cilium#38296](https://redirect.github.com/cilium/cilium/pull/38296),
        [cilium/cilium#39497](https://redirect.github.com/cilium/cilium/pull/39497),
        [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4AC
        Kube Proxy Replacement**: Cilium now implements service translation when running
        on an IPv6 underlay ([cilium/cilium#39074](https://redirect.github.com/cilium/cilium/pull/39074),
        [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4CB
        Delegated IPAM**: When delegating IP address management to a third party plugin,
        Cilium now configures IPv6 routes for connectivity if the plugin supports
        IPv6 ([cilium/cilium#38249](https://redirect.github.com/cilium/cilium/pull/38249),
        [@&#8203;caorui-io](https://redirect.github.com/caorui-io), [@&#8203;kadevu](https://redirect.github.com/kadevu))\n-
        **\U0001F4E6 IP Fragment Support**: Cilium now processes ordered IPv6 fragments
        to apply policy and routing functionality ([cilium/cilium#38110](https://redirect.github.com/cilium/cilium/pull/38110),
        [@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))\n- **\U0001F6AA
        Egress gateway policies** can now match IPv6 address ranges ([cilium/cilium#38452](https://redirect.github.com/cilium/cilium/pull/38452),
        [@&#8203;rgo3](https://redirect.github.com/rgo3))\n\n#### \U0001F6E1\uFE0F
        Policy & Observability\n\n- **\U0001F3F7\uFE0F Policy Names in Hubble-CLI**:
        Show the names of (C)CNPs that allowed or denied traffic when monitoring flows
        in Hubble ([cilium/cilium#39453](https://redirect.github.com/cilium/cilium/pull/39453),
        [@&#8203;antonipp](https://redirect.github.com/antonipp))\n- **\U0001F4DD
        Policy Log Fields**: A new free-text log field is added to policies, which
        is exposed in Hubble flows for easy correlation and searching ([cilium/cilium#39902](https://redirect.github.com/cilium/cilium/pull/39902),
        [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F6F0\uFE0F
        Encapsulated Traffic Decoding**: Hubble decodes encapsulated traffic for deeper
        introspection into traffic flows ([cilium/cilium#37634](https://redirect.github.com/cilium/cilium/pull/37634),
        [@&#8203;kaworu](https://redirect.github.com/kaworu))\n- **\U0001F3F0 ClusterMesh
        Policy Restriction**: A new option allows the **cluster** entity to apply
        only to the local cluster in ClusterMesh environment ([cilium/cilium#39338](https://redirect.github.com/cilium/cilium/pull/39338),
        [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\u2728
        Enhanced Policy Dashboard**: The Policy section of the Cilium Grafana dashboard
        has been improved to show more relevant graphs, including policy drops in
        both directions ([cilium/cilium#36492](https://redirect.github.com/cilium/cilium/pull/36492),
        [cilium/cilium#37445](https://redirect.github.com/cilium/cilium/pull/37445),
        [@&#8203;squeed](https://redirect.github.com/squeed))\n\n#### \U0001F305 Performance\n\n-
        **\U0001F4CA Scale Test Results**: Cilium implements policies and services
        up to 45% faster in higher scale environments (Various; [@&#8203;marseel](https://redirect.github.com/marseel),
        [cilium/cilium#40227](https://redirect.github.com/cilium/cilium/pull/40227))\n-
        **\U0001F4E6 Image Size Reduction**: Docker image sizes are reduced by 32%
        on arm64 architecture images ([cilium/cilium#40005](https://redirect.github.com/cilium/cilium/pull/40005),
        [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\u26A1 Improved
        Policy Performance**: The DNS proxy can process large numbers of IPs faster,
        and the EndpointSelector match implementation has been optimized ([cilium/cilium#39340](https://redirect.github.com/cilium/cilium/pull/39340),
        [@&#8203;squeed](https://redirect.github.com/squeed); [cilium/cilium#40414](https://redirect.github.com/cilium/cilium/pull/40414),
        [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\U0001FA9E EndpointSlice
        Mirroring for Multi-Cluster Services**: Clustermesh mirrors EndpointSlice
        from the local cluster instead of copying the Service selectors when using
        the MCS-API controller ([cilium/cilium#38596](https://redirect.github.com/cilium/cilium/pull/38596),
        [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\U0001F310
        KVStoreMesh Optimization**: Cross-cluster state distribution is optimized
        by only synchronizing identities keyed by ID, not by value ([cilium/cilium#36471](https://redirect.github.com/cilium/cilium/pull/36471),
        [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- **\U0001F9E0
        Egress Gateway Processing**: Egress gateway policy processing is significantly
        improved when matching a large number of pods ([cilium/cilium#37714](https://redirect.github.com/cilium/cilium/pull/37714),
        [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- **\U0001F5D1\uFE0F
        Optimized Garbage Collection for Connection Tracking**: Cilium leverages batched
        iterators for CTMap GC ([cilium/cilium#36288](https://redirect.github.com/cilium/cilium/pull/36288),
        [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))\n\n####
        \u2699\uFE0F Operations\n\n- **\U0001F4C8 API Server Connections at Scale**:
        Improve kube-apiserver connections behavior at scale through failover and
        setting better jitter and backoff configurations ([cilium/cilium#37601](https://redirect.github.com/cilium/cilium/pull/37601),
        [@&#8203;aditighag](https://redirect.github.com/aditighag); [cilium/cilium#38031](https://redirect.github.com/cilium/cilium/pull/38031),
        [@&#8203;orange30](https://redirect.github.com/orange30); [cilium/cilium#36648](https://redirect.github.com/cilium/cilium/pull/36648),
        [@&#8203;wedaly](https://redirect.github.com/wedaly))\n- **\U0001F504 ConfigMap
        Synchronization**: New option to automatically synchronize ConfigMap changes
        into the agent and report metrics for when the effective configuration is
        different from the desired configuration ([cilium/cilium#36510](https://redirect.github.com/cilium/cilium/pull/36510),
        [@&#8203;ovidiutirla](https://redirect.github.com/ovidiutirla))\n- **\U0001F393
        CRD Promotion to Stable**: Promote **CiliumCIDRGroup**, **CiliumLoadBalancerIPPool**
        and all **BGP** CRDs to stable API ([cilium/cilium#38940](https://redirect.github.com/cilium/cilium/pull/38940),
        [@&#8203;christarazi](https://redirect.github.com/christarazi); [cilium/cilium#39090](https://redirect.github.com/cilium/cilium/pull/39090),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84); [cilium/cilium#37765](https://redirect.github.com/cilium/cilium/pull/37765),
        [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- **\u26D4
        Node Taints Handling**: The cilium-operator Deployment uses a new default
        set of taints which avoids deploying to a drained node ([cilium/cilium#40137](https://redirect.github.com/cilium/cilium/pull/40137),
        [@&#8203;Murat](https://redirect.github.com/Murat) Parlakisik)\n- **:wood:
        Migrate to Slog**: Cilium now uses slog as log library for all components
        ([cilium/cilium#39664](https://redirect.github.com/cilium/cilium/pull/39664),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- **\U0001F527 Cilium dependencies**
        were updated to Kubernetes v1.33, Envoy v1.34, LLVM 19.1, and CNI v1.1 ([cilium/cilium#39124](https://redirect.github.com/cilium/cilium/pull/39124),
        [cilium/cilium#40175](https://redirect.github.com/cilium/cilium/pull/40175),
        [cilium/cilium#39632](https://redirect.github.com/cilium/cilium/pull/39632),
        [@&#8203;sayboras](https://redirect.github.com/sayboras); [cilium/cilium#38868](https://redirect.github.com/cilium/cilium/pull/38868),
        [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F427 Minimum
        Linux Requirements**: The minimum kernel version for this release series is
        Linux v5.10 or similar, such as RHEL 8.6 ([cilium/cilium#38308](https://redirect.github.com/cilium/cilium/pull/38308),
        [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n\n####
        \U0001F578\uFE0F Service Mesh & Gateway API\n\n- **\u26E9\uFE0F Gateway API
        v1.3.0**: Gateway API support is bumped to v1.3.0 ([cilium/cilium#39590](https://redirect.github.com/cilium/cilium/pull/39590),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F517
        Improved GatewayClass Configuration**: The new CiliumGatewayClassConfig object
        adds service type validation allows the configuration of extra settings on
        a per-GatewayClass level: LoadBalancerSourceRangesPolicy, ParametersRef fields.
        This allows Cilium to reconcile multiple GatewayClasses with different configurations
        ([cilium/cilium#37792](https://redirect.github.com/cilium/cilium/pull/37792),
        [cilium/cilium#37402](https://redirect.github.com/cilium/cilium/pull/37402),
        [cilium/cilium#40138](https://redirect.github.com/cilium/cilium/pull/40138),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F68F
        Multiple HTTPRoutes**: GAMMA reconciler now supports attaching multiple HTTPRoutes
        to the same Service ([cilium/cilium#39922](https://redirect.github.com/cilium/cilium/pull/39922),
        [@&#8203;youngnick](https://redirect.github.com/youngnick))\n- **\U0001FA84
        Route Changes Reconciliation**: Reconcile Gateway API based on all changes
        to routes. This allows label updates to trigger reconciliation correctly,
        amongst other things ([cilium/cilium#37798](https://redirect.github.com/cilium/cilium/pull/37798),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n\n#### \U0001F3F7\uFE0F
        IP Address Management\n\n- **\u2601\uFE0F AWS Prefix Delegation**: Prefix
        delegation on AWS bare metal instances is now supported natively in Cilium's
        AWS ENI IPAM mode ([cilium/cilium#39678](https://redirect.github.com/cilium/cilium/pull/39678),
        [@&#8203;41ks](https://redirect.github.com/41ks))\n- **\U0001F3EC Multi-Pool
        IPAM with KVStore**: Add support for Multi-Pool IPAM in external KVstore mode
        ([cilium/cilium#39638](https://redirect.github.com/cilium/cilium/pull/39638),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\U0001F510
        Multi-Pool IPAM with IPSec**: Add support for Multi-Pool IPAM mode with IPSec
        transparent encryption in tunnel routing mode ([cilium/cilium#39442](https://redirect.github.com/cilium/cilium/pull/39442),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\u21AA\uFE0F
        Multi-Pool Tunnel Routing**: Add support for tunnel routing in multi-pool
        IPAM mode ([cilium/cilium#38483](https://redirect.github.com/cilium/cilium/pull/38483),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n\n#### \U0001F6E3\uFE0F
        BGP\n\n- **\U0001F4C7 Route Aggregation**: Add support for BGP route aggregation
        in the control plane ([cilium/cilium#37275](https://redirect.github.com/cilium/cilium/pull/37275),
        [@&#8203;romanspb80](https://redirect.github.com/romanspb80))\n- **\U0001F3AF
        Overlapping Selector Matches**: Support overlapping selector matches in **CiliumBGPAdvertisement**
        resources ([cilium/cilium#36414](https://redirect.github.com/cilium/cilium/pull/36414),
        [@&#8203;dswaffordcw](https://redirect.github.com/dswaffordcw))\n- **\U0001F194
        New Router ID generation modes**: Generate router-id based on MAC addresses,
        or from an IP address pool ([cilium/cilium#36451](https://redirect.github.com/cilium/cilium/pull/36451),
        [@&#8203;yushoyamaguchi](https://redirect.github.com/yushoyamaguchi); [cilium/cilium#38300](https://redirect.github.com/cilium/cilium/pull/38300),
        [@&#8203;liyihuang](https://redirect.github.com/liyihuang))\n\n#### \U0001F9D1\u200D\U0001F4BB
        Development Experience\n\n- **\U0001F9EA Test attribution**: Identify owners
        of test in GitHub workflow results to make it easier to connect with other
        developers on tricky problems ([cilium/cilium#37027](https://redirect.github.com/cilium/cilium/pull/37027),
        [@&#8203;Joe](https://redirect.github.com/Joe) Stringer)\n- **\U0001F6CF\uFE0F
        Policy REST API**: The Cilium policy API exposed over a local unix socket
        is deprecated. The other mechanisms to configure policy via Kubernetes resources
        or the local filesystem are preferred ([cilium/cilium#40212](https://redirect.github.com/cilium/cilium/pull/40212),
        [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F3D7\uFE0F
        Feature Deprecation**: Deprecate underused features like Custom Calls, Recorder
        API and External Workloads ([cilium/cilium#38480](https://redirect.github.com/cilium/cilium/pull/38480),
        [cilium/cilium#39642](https://redirect.github.com/cilium/cilium/pull/39642),
        [cilium/cilium#37418](https://redirect.github.com/cilium/cilium/pull/37418),
        [@&#8203;brb](https://redirect.github.com/brb))\n\n#### \U0001F3E2 Community\n\n-
        **\u2764\uFE0F Production Case Studies**: Many end-users have stepped forward
        to tell their stories running Cilium in production. If your company wants
        to submit their case studies let us know. We would love to hear your feedback!\n
        \ - [ByteDance](https://www.youtube.com/watch?v=cKPW67D7X10), [Canopus Networks](https://www.youtube.com/watch?v=YXl9xuIxylY),
        [Corner Banca](https://www.youtube.com/watch?v=HVPKSefazl4), [DB Schenker](https://www.cncf.io/case-studies/db-schenker/),
        [eBay](https://www.youtube.com/watch?v=xEa4KFf5FzY), [ECCO](https://www.cncf.io/case-studies/ecco/),
        [G-Research](https://www.youtube.com/watch?v=kjSFN34dROQ), [Social Network
        Company](https://cilium.io/blog/2025/04/15/tetragon-social-networking-user-story/),
        and [Preferred Networks](https://www.youtube.com/watch?v=n7_I4zu6f_M)\n- **\U0001F1EC\U0001F1E7
        London Events**: The community gathered at [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/)
        and the [Cilium Developer Summit](https://redirect.github.com/cilium/dev-summits/tree/main/2025-EU)
        in London\n- **\U0001F1FA\U0001F1F8 Atlanta Events**: Meet us at the upcoming
        [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/ciliumcon/)
        and Cilium Developers Summit in Atlanta, Georgia\n- **\U0001F465 SIG Community
        Meetings**: [SIG Community](https://redirect.github.com/cilium/community/tree/main/sig-community)
        now meets every first and third Thursday to foster, grow, and sustain the
        Cilium open source community\n\n#### \U0001F4D4 Full CHANGELOG\n\n- Full CHANGELOG.md
        can be found [here](https://redirect.github.com/cilium/cilium/blob/v1.18.0/CHANGELOG.md).\n\nAnd
        finally, we would like to thank you to all contributors of Cilium that helped
        directly and indirectly with the project. The success of Cilium could not
        happen without all of you. \u2764\uFE0F :people\\_holding\\_hands:  \u2764\uFE0F\n\n###
        [`v1.17.6`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.6):
        1.17.6\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.5...1.17.6)\n\n##
        Summary of Changes\n\n**Minor Changes:**\n\n- helm: KPR subflag changes (Backport
        PR [#&#8203;40222](https://redirect.github.com/cilium/cilium/issues/40222),
        Upstream PR [#&#8203;39721](https://redirect.github.com/cilium/cilium/issues/39721),
        [@&#8203;brb](https://redirect.github.com/brb))\n\n**Bugfixes:**\n\n- Deny
        policies are now synced to Envoy so that they can be enforced for Ingress
        policies. (Backport PR [#&#8203;40187](https://redirect.github.com/cilium/cilium/issues/40187),
        Upstream PR [#&#8203;39736](https://redirect.github.com/cilium/cilium/issues/39736),
        [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n- Do not fail
        the agent startup in case IPv6 support is enabled and the node does not have
        an IPv6 address assigned yet (Backport PR [#&#8203;40205](https://redirect.github.com/cilium/cilium/issues/40205),
        Upstream PR [#&#8203;40143](https://redirect.github.com/cilium/cilium/issues/40143),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- Fix bug preventing
        a global service from including remote backends, if the local service has
        no selector, and the remote one gets removed and then added again. ([#&#8203;40361](https://redirect.github.com/cilium/cilium/issues/40361),
        [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix data race
        involving DumpReliablyWithCallback map operation. (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
        Upstream PR [#&#8203;38590](https://redirect.github.com/cilium/cilium/issues/38590),
        [@&#8203;aditighag](https://redirect.github.com/aditighag))\n- Fix IPAM IP
        release racing condition when IP reassigned back to ENI (Backport PR [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
        Upstream PR [#&#8203;40019](https://redirect.github.com/cilium/cilium/issues/40019),
        [@&#8203;victorcq](https://redirect.github.com/victorcq))\n- hubble automatically
        pick the `hubble-prefer-ipv6` to `true` if ipv4 not enabled (Backport PR [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
        Upstream PR [#&#8203;40210](https://redirect.github.com/cilium/cilium/issues/40210),
        [@&#8203;chengjoey](https://redirect.github.com/chengjoey))\n- LBIPAM: Fix
        deletion of CiliumLoadBalancerIPPool with multiple IP blocks that led to an
        operator crash (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
        Upstream PR [#&#8203;40013](https://redirect.github.com/cilium/cilium/issues/40013),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- pkg/egressgateway:
        ensure gateway IP is IPv4 (Backport PR [#&#8203;40332](https://redirect.github.com/cilium/cilium/issues/40332),
        Upstream PR [#&#8203;40209](https://redirect.github.com/cilium/cilium/issues/40209),
        [@&#8203;rgo3](https://redirect.github.com/rgo3))\n- policy: fix error handling
        for selector policy resolution ([#&#8203;40404](https://redirect.github.com/cilium/cilium/issues/40404),
        [@&#8203;fristonio](https://redirect.github.com/fristonio))\n\n**CI Changes:**\n\n-
        ci: do not run north-south conn disrupt tests for 5.4 kernels ([#&#8203;39443](https://redirect.github.com/cilium/cilium/issues/39443),
        [@&#8203;ldelossa](https://redirect.github.com/ldelossa))\n- ci: fix north-south
        conn disrupt for 5.4 kernel ([#&#8203;40434](https://redirect.github.com/cilium/cilium/issues/40434),
        [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n\n**Misc Changes:**\n\n-
        .github/workflows: remove reviewers if ciliumbot approved PR (Backport PR
        [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094), Upstream
        PR [#&#8203;39989](https://redirect.github.com/cilium/cilium/issues/39989),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
        as part command (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
        Upstream PR [#&#8203;40050](https://redirect.github.com/cilium/cilium/issues/40050),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
        as part command (Backport PR [#&#8203;40332](https://redirect.github.com/cilium/cilium/issues/40332),
        Upstream PR [#&#8203;40089](https://redirect.github.com/cilium/cilium/issues/40089),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- chore(deps): update all
        github action dependencies (v1.17) ([#&#8203;40158](https://redirect.github.com/cilium/cilium/issues/40158),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all-dependencies (v1.17) ([#&#8203;40044](https://redirect.github.com/cilium/cilium/issues/40044),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all-dependencies (v1.17) ([#&#8203;40458](https://redirect.github.com/cilium/cilium/issues/40458),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update dependency cilium/cilium-cli to v0.18.5 (v1.17) ([#&#8203;39948](https://redirect.github.com/cilium/cilium/issues/39948),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update go to v1.24.5 (v1.17) ([#&#8203;40424](https://redirect.github.com/cilium/cilium/issues/40424),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.33.4-1752151664-7c2edb0b44cf95f326d628b837fcdd845102ba68
        (v1.17) ([#&#8203;40466](https://redirect.github.com/cilium/cilium/issues/40466),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;40157](https://redirect.github.com/cilium/cilium/issues/40157),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        cilium: fix socket termination for v4-in-v6 clients (Backport PR [#&#8203;40295](https://redirect.github.com/cilium/cilium/issues/40295),
        Upstream PR [#&#8203;39994](https://redirect.github.com/cilium/cilium/issues/39994),
        [@&#8203;borkmann](https://redirect.github.com/borkmann))\n- contrib/git:
        add merge drivers to automate post-merge commands (Backport PR [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
        Upstream PR [#&#8203;40189](https://redirect.github.com/cilium/cilium/issues/40189),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- disk-cleanup: parallelize
        cleanup process to speed up step (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
        Upstream PR [#&#8203;40054](https://redirect.github.com/cilium/cilium/issues/40054),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- doc:ipsec:kvstore: explicit
        limitations that could lead to staling XFRM states and no connectivity (Backport
        PR [#&#8203;40176](https://redirect.github.com/cilium/cilium/issues/40176),
        Upstream PR [#&#8203;39719](https://redirect.github.com/cilium/cilium/issues/39719),
        [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- docs/ipsec:
        Fix incorrect statement on hostns encryption (Backport PR [#&#8203;40176](https://redirect.github.com/cilium/cilium/issues/40176),
        Upstream PR [#&#8203;40133](https://redirect.github.com/cilium/cilium/issues/40133),
        [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- Makefile: Require
        API generation commands to succeed (Backport PR [#&#8203;40205](https://redirect.github.com/cilium/cilium/issues/40205),
        Upstream PR [#&#8203;40199](https://redirect.github.com/cilium/cilium/issues/40199),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- operator/secretsync:
        silence reconciliation logs (Backport PR [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
        Upstream PR [#&#8203;40217](https://redirect.github.com/cilium/cilium/issues/40217),
        [@&#8203;tklauser](https://redirect.github.com/tklauser))\n- proxy: Use upstream
        envoy control plane API (Backport PR [#&#8203;40216](https://redirect.github.com/cilium/cilium/issues/40216),
        Upstream PR [#&#8203;39672](https://redirect.github.com/cilium/cilium/issues/39672),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- v1.17: helm:
        Restore hostPort.enabled flag ([#&#8203;40480](https://redirect.github.com/cilium/cilium/issues/40480),
        [@&#8203;brb](https://redirect.github.com/brb))\n\n**Other Changes:**\n\n-
        \\[v1.17] deps: Update cilium-envoy image to 1.33.x ([#&#8203;40088](https://redirect.github.com/cilium/cilium/issues/40088),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- Backport: kube-proxy-healthz
        to return 503 if node terminating ([#&#8203;40317](https://redirect.github.com/cilium/cilium/issues/40317),
        [@&#8203;tamilmani1989](https://redirect.github.com/tamilmani1989))\n- Bpf
        datapath TCP conntrack entries are (re)created only in the forward direction,
        solving an issue with freezing proxy connections when backend connection is
        re-opened. ([#&#8203;40448](https://redirect.github.com/cilium/cilium/issues/40448),
        [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n- envoy: Bump
        cilium-envoy to the latest v1.33.x ([#&#8203;40368](https://redirect.github.com/cilium/cilium/issues/40368),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- install: Update
        image digests for v1.17.5 ([#&#8203;40117](https://redirect.github.com/cilium/cilium/issues/40117),
        [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n-
        proxy: Bump envoy version to the latest v1.33.x ([#&#8203;40181](https://redirect.github.com/cilium/cilium/issues/40181),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- v1.17: docs:
        Document encapsulation options ([#&#8203;40471](https://redirect.github.com/cilium/cilium/issues/40471),
        [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n\n#### Docker Manifests\n\n#####
        cilium\n\n`quay.io/cilium/cilium:v1.17.6@&#8203;sha256:544de3d4fed7acba72758413812780a4972d47c39035f2a06d6145d8644a3353`\n`quay.io/cilium/cilium:stable@sha256:544de3d4fed7acba72758413812780a4972d47c39035f2a06d6145d8644a3353`\n\n#####
        clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.17.6@&#8203;sha256:f619e97432db427e1511bf91af3be8ded418c53a353a09629e04c5880659d1df`\n`quay.io/cilium/clustermesh-apiserver:stable@sha256:f619e97432db427e1511bf91af3be8ded418c53a353a09629e04c5880659d1df`\n\n#####
        docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.17.6@&#8203;sha256:2d6175582c036dde241448b2b937353ce304d7a30eec9b66e96279b4b39c4f36`\n`quay.io/cilium/docker-plugin:stable@sha256:2d6175582c036dde241448b2b937353ce304d7a30eec9b66e96279b4b39c4f36`\n\n#####
        hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.17.6@&#8203;sha256:7d17ec10b3d37341c18ca56165b2f29a715cb8ee81311fd07088d8bf68c01e60`\n`quay.io/cilium/hubble-relay:stable@sha256:7d17ec10b3d37341c18ca56165b2f29a715cb8ee81311fd07088d8bf68c01e60`\n\n#####
        operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.17.6@&#8203;sha256:5352e670719dc61f059c1e1a04bc0563c2144738386fa7236dc167ff3fef4c64`\n`quay.io/cilium/operator-alibabacloud:stable@sha256:5352e670719dc61f059c1e1a04bc0563c2144738386fa7236dc167ff3fef4c64`\n\n#####
        operator-aws\n\n`quay.io/cilium/operator-aws:v1.17.6@&#8203;sha256:24db5c811e24e51e7ce166e8e056967875bf3544cc2ead6984f34f705fe71847`\n`quay.io/cilium/operator-aws:stable@sha256:24db5c811e24e51e7ce166e8e056967875bf3544cc2ead6984f34f705fe71847`\n\n#####
        operator-azure\n\n`quay.io/cilium/operator-azure:v1.17.6@&#8203;sha256:1b7e193ccbc718f723993a0f11eb8fbf16376e822fe8c4dc792d7696701d57c8`\n`quay.io/cilium/operator-azure:stable@sha256:1b7e193ccbc718f723993a0f11eb8fbf16376e822fe8c4dc792d7696701d57c8`\n\n#####
        operator-generic\n\n`quay.io/cilium/operator-generic:v1.17.6@&#8203;sha256:91ac3bf7be7bed30e90218f219d4f3062a63377689ee7246062fa0cc3839d096`\n`quay.io/cilium/operator-generic:stable@sha256:91ac3bf7be7bed30e90218f219d4f3062a63377689ee7246062fa0cc3839d096`\n\n#####
        operator\n\n`quay.io/cilium/operator:v1.17.6@&#8203;sha256:e7b41cdba20875f8a6595eca1baf1cff1b8367417cffa99be7b1b9b0a11ab677`\n`quay.io/cilium/operator:stable@sha256:e7b41cdba20875f8a6595eca1baf1cff1b8367417cffa99be7b1b9b0a11ab677`\n\n###
        [`v1.17.5`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.5):
        1.17.5\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.4...1.17.5)\n\n##
        Summary of Changes\n\n**Bugfixes:**\n\n- aws/ENI: Only use pagination when
        not specifying IDs (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
        Upstream PR [#&#8203;39120](https://redirect.github.com/cilium/cilium/issues/39120),
        [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- Fix connections
        to deleted service backends not getting terminated in certain cases involving
        services with multiple protocol ports. (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
        Upstream PR [#&#8203;37745](https://redirect.github.com/cilium/cilium/issues/37745),
        [@&#8203;foyerunix](https://redirect.github.com/foyerunix))\n- Fix handle\\_policy\\_egress
        programs not being cleaned up during endpoint teardown (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
        Upstream PR [#&#8203;39560](https://redirect.github.com/cilium/cilium/issues/39560),
        [@&#8203;ti-mo](https://redirect.github.com/ti-mo))\n- Fixed bug where datapath
        is unable to compile when active connection tracking and IPv6 are enabled
        at the same time. (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
        Upstream PR [#&#8203;39509](https://redirect.github.com/cilium/cilium/issues/39509),
        [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
        Fixes a bug where a CIDRRule of  0.0.0.0/0 would not select all external traffic.
        (Backport PR [#&#8203;39765](https://redirect.github.com/cilium/cilium/issues/39765),
        Upstream PR [#&#8203;39693](https://redirect.github.com/cilium/cilium/issues/39693),
        [@&#8203;squeed](https://redirect.github.com/squeed))\n- gateway-api: Use
        original source address for GAMMA (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
        Upstream PR [#&#8203;39206](https://redirect.github.com/cilium/cilium/issues/39206),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- helm/hubble:
        Fix wrong value for metrics server tls existingSecret (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
        Upstream PR [#&#8203;39668](https://redirect.github.com/cilium/cilium/issues/39668),
        [@&#8203;devodev](https://redirect.github.com/devodev))\n- install/kubernetes:
        change mapDynamicSizeRatio from number to string (Backport PR [#&#8203;39963](https://redirect.github.com/cilium/cilium/issues/39963),
        Upstream PR [#&#8203;39834](https://redirect.github.com/cilium/cilium/issues/39834),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- operator: skip retry
        of node taint update when node not found (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
        Upstream PR [#&#8203;39517](https://redirect.github.com/cilium/cilium/issues/39517),
        [@&#8203;jshr-w](https://redirect.github.com/jshr-w))\n- Persist parent interface
        index of endpoint across agent restarts (Backport PR [#&#8203;39765](https://redirect.github.com/cilium/cilium/issues/39765),
        Upstream PR [#&#8203;39575](https://redirect.github.com/cilium/cilium/issues/39575),
        [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
        Policy updates to Envoy no longer consider a single selector as an L3 wildcard.
        Cilium bpf datapath policy enforcement is not done for Cilium Ingress policy
        enforcement so the L3 identity needs to be enforced in all cases. (Backport
        PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
        Upstream PR [#&#8203;39511](https://redirect.github.com/cilium/cilium/issues/39511),
        [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n\n**CI Changes:**\n\n-
        bpf: test: fix up mis-spelled HAVE\\_NETNS\\_COOKIE (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
        Upstream PR [#&#8203;39420](https://redirect.github.com/cilium/cilium/issues/39420),
        [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n- call
        for metrics in smoke tests from runner instead of installing apt/curl on cilium
        pod (Backport PR [#&#8203;39862](https://redirect.github.com/cilium/cilium/issues/39862),
        Upstream PR [#&#8203;37362](https://redirect.github.com/cilium/cilium/issues/37362),
        [@&#8203;Artyop](https://redirect.github.com/Artyop))\n- gh: e2e: enable secondary-network
        LB testing for all KPR=true configs (Backport PR [#&#8203;39780](https://redirect.github.com/cilium/cilium/issues/39780),
        Upstream PR [#&#8203;39718](https://redirect.github.com/cilium/cilium/issues/39718),
        [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n- gh:
        eks: restore concurrent execution of connectivity tests (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
        Upstream PR [#&#8203;39673](https://redirect.github.com/cilium/cilium/issues/39673),
        [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n- Re-optimize
        CI build process (Backport PR [#&#8203;39862](https://redirect.github.com/cilium/cilium/issues/39862),
        Upstream PR [#&#8203;39802](https://redirect.github.com/cilium/cilium/issues/39802),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n\n**Misc Changes:**\n\n-
        .github/workflows: remove cilium-cli from build-go-caches ([#&#8203;39801](https://redirect.github.com/cilium/cilium/issues/39801),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- \\[v1.17] bpf: host:
        don't detect WG traffic in from-netdev@cilium\\_wg0 ([#&#8203;38233](https://redirect.github.com/cilium/cilium/issues/38233),
        [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n- Add
        a section to talk about the native routing masquerading in the cloud environment.
        (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
        Upstream PR [#&#8203;39343](https://redirect.github.com/cilium/cilium/issues/39343),
        [@&#8203;liyihuang](https://redirect.github.com/liyihuang))\n- bpf: host:
        flag Cilium's ESP traffic as TRACE\\_REASON\\_ENCRYPTED (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
        Upstream PR [#&#8203;39558](https://redirect.github.com/cilium/cilium/issues/39558),
        [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n- bpf:
        Skip lxc src IP check for proxy traffic (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
        Upstream PR [#&#8203;39530](https://redirect.github.com/cilium/cilium/issues/39530),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- bpf:wireguard:
        reuse MARK\\_MAGIC\\_ENCRYPT for encrypted packets (Backport PR [#&#8203;39652](https://redirect.github.com/cilium/cilium/issues/39652),
        Upstream PR [#&#8203;39651](https://redirect.github.com/cilium/cilium/issues/39651),
        [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- chore(deps):
        update all github action dependencies (v1.17) ([#&#8203;39476](https://redirect.github.com/cilium/cilium/issues/39476),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all github action dependencies (v1.17) ([#&#8203;39704](https://redirect.github.com/cilium/cilium/issues/39704),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all-dependencies (v1.17) ([#&#8203;39570](https://redirect.github.com/cilium/cilium/issues/39570),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all-dependencies (v1.17) ([#&#8203;39687](https://redirect.github.com/cilium/cilium/issues/39687),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all-dependencies (v1.17) ([#&#8203;39821](https://redirect.github.com/cilium/cilium/issues/39821),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all-dependencies (v1.17) ([#&#8203;39879](https://redirect.github.com/cilium/cilium/issues/39879),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update dependency protocolbuffers/protobuf to v31 (v1.17) ([#&#8203;39607](https://redirect.github.com/cilium/cilium/issues/39607),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update dependency protocolbuffers/protobuf to v31.1 (v1.17) ([#&#8203;39951](https://redirect.github.com/cilium/cilium/issues/39951),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update docker.io/library/golang:1.24.3 docker digest to [`4c0a181`](https://redirect.github.com/cilium/cilium/commit/4c0a181)
        (v1.17) ([#&#8203;39725](https://redirect.github.com/cilium/cilium/issues/39725),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update docker.io/library/golang:1.24.3 docker digest to [`81bf592`](https://redirect.github.com/cilium/cilium/commit/81bf592)
        (v1.17) ([#&#8203;39822](https://redirect.github.com/cilium/cilium/issues/39822),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update docker.io/library/golang:1.24.3 docker digest to [`86b4cff`](https://redirect.github.com/cilium/cilium/commit/86b4cff)
        (v1.17) ([#&#8203;39605](https://redirect.github.com/cilium/cilium/issues/39605),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update gcr.io/distroless/static:nonroot docker digest to [`188ddfb`](https://redirect.github.com/cilium/cilium/commit/188ddfb)
        (v1.17) ([#&#8203;39606](https://redirect.github.com/cilium/cilium/issues/39606),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update go to v1.24.4 (v1.17) ([#&#8203;39949](https://redirect.github.com/cilium/cilium/issues/39949),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.6-1749031919-98c55b1d0c1154fb6c9e760583c2dcd7778686e2
        (v1.17) ([#&#8203;39886](https://redirect.github.com/cilium/cilium/issues/39886),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.6-1749271279-0864395884b263913eac200ee2048fd985f8e626
        (v1.17) ([#&#8203;39935](https://redirect.github.com/cilium/cilium/issues/39935),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;39703](https://redirect.github.com/cilium/cilium/issues/39703),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;39950](https://redirect.github.com/cilium/cilium/issues/39950),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        HELM: Adding Label Support to clustermesh apiserver service (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
        Upstream PR [#&#8203;39520](https://redirect.github.com/cilium/cilium/issues/39520),
        [@&#8203;camrossi](https://redirect.github.com/camrossi))\n- mtu/endpoint\\_updater.go:
        Check for unix.EINVAL not os.ErrInvalid (Backport PR [#&#8203;39862](https://redirect.github.com/cilium/cilium/issues/39862),
        Upstream PR [#&#8203;39658](https://redirect.github.com/cilium/cilium/issues/39658),
        [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
        mtu: Catch expected error in endpoint MTU updater (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
        Upstream PR [#&#8203;36596](https://redirect.github.com/cilium/cilium/issues/36596),
        [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
        pkg/fswatcher: Rewrite without underlying use of fsnotify (Backport PR [#&#8203;39963](https://redirect.github.com/cilium/cilium/issues/39963),
        Upstream PR [#&#8203;38537](https://redirect.github.com/cilium/cilium/issues/38537),
        [@&#8203;glibsm](https://redirect.github.com/glibsm))\n\n**Other Changes:**\n\n-
        \\[v1.17] chore(deps): revert etcd bump to v3.6.0 ([#&#8203;39628](https://redirect.github.com/cilium/cilium/issues/39628),
        [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- \\[v1.17] vendor:
        Bump Hive and StateDB ([#&#8203;39689](https://redirect.github.com/cilium/cilium/issues/39689),
        [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- install: Update
        image digests for v1.17.4 ([#&#8203;39548](https://redirect.github.com/cilium/cilium/issues/39548),
        [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n\n####
        Docker Manifests\n\n##### cilium\n\n`quay.io/cilium/cilium:v1.17.5@&#8203;sha256:baf8541723ee0b72d6c489c741c81a6fdc5228940d66cb76ef5ea2ce3c639ea6`\n`quay.io/cilium/cilium:stable@sha256:baf8541723ee0b72d6c489c741c81a6fdc5228940d66cb76ef5ea2ce3c639ea6`\n\n#####
        clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.17.5@&#8203;sha256:78dc40b9cb8d7b1ad21a76ff3e11541809acda2ac4ef94150cc832100edc247d`\n`quay.io/cilium/clustermesh-apiserver:stable@sha256:78dc40b9cb8d7b1ad21a76ff3e11541809acda2ac4ef94150cc832100edc247d`\n\n#####
        docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.17.5@&#8203;sha256:0da0960b1d34d07ff1aba99d491e2413f0285cf09d94b183c4329e7e7b6949cb`\n`quay.io/cilium/docker-plugin:stable@sha256:0da0960b1d34d07ff1aba99d491e2413f0285cf09d94b183c4329e7e7b6949cb`\n\n#####
        hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.17.5@&#8203;sha256:fbb8a6afa8718200fca9381ad274ed695792dbadd2417b0e99c36210ae4964ff`\n`quay.io/cilium/hubble-relay:stable@sha256:fbb8a6afa8718200fca9381ad274ed695792dbadd2417b0e99c36210ae4964ff`\n\n#####
        operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.17.5@&#8203;sha256:654db67929f716b6178a34a15cb8f95e391465085bcf48cdba49819a56fcd259`\n`quay.io/cilium/operator-alibabacloud:stable@sha256:654db67929f716b6178a34a15cb8f95e391465085bcf48cdba49819a56fcd259`\n\n#####
        operator-aws\n\n`quay.io/cilium/operator-aws:v1.17.5@&#8203;sha256:3e189ec1e286f1bf23d47c45bdeac6025ef7ec3d2dc16190ee768eb94708cbc3`\n`quay.io/cilium/operator-aws:stable@sha256:3e189ec1e286f1bf23d47c45bdeac6025ef7ec3d2dc16190ee768eb94708cbc3`\n\n#####
        operator-azure\n\n`quay.io/cilium/operator-azure:v1.17.5@&#8203;sha256:add78783fdaced7453a324612eeb9ebecf56002b56c14c73596b3b4923321026`\n`quay.io/cilium/operator-azure:stable@sha256:add78783fdaced7453a324612eeb9ebecf56002b56c14c73596b3b4923321026`\n\n#####
        operator-generic\n\n`quay.io/cilium/operator-generic:v1.17.5@&#8203;sha256:f954c97eeb1b47ed67d08cc8fb4108fb829f869373cbb3e698a7f8ef1085b09e`\n`quay.io/cilium/operator-generic:stable@sha256:f954c97eeb1b47ed67d08cc8fb4108fb829f869373cbb3e698a7f8ef1085b09e`\n\n#####
        operator\n\n`quay.io/cilium/operator:v1.17.5@&#8203;sha256:815f6e0648724ed4cdbdc072889ad4223de251f21e0503035af91d41dd547cc4`\n`quay.io/cilium/operator:stable@sha256:815f6e0648724ed4cdbdc072889ad4223de251f21e0503035af91d41dd547cc4`\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no
        schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
        **Automerge**: Disabled by config. Please merge this manually once you are
        satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
        tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and
        you won't be reminded about this update again.\n\n---\n\n - [ ] <!-- rebase-check
        -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was
        generated by [Mend Renovate](https://mend.io/renovate/). View the [repository
        job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC42MC4xIiwidXBkYXRlZEluVmVyIjoiNDEuNTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
      change_url: https://github.com/YAKEcloud/yake-ansible/pull/247
      child_jobs: []
      commit_id: 509ffc4c1cdc89300381de019311071d52515836
      event_id: 07aaa7e0-7383-11f0-8fa2-1251f2f222a6
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/84e72e6ae37a43dcbdb1591e47027841/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/84e72e6ae37a43dcbdb1591e47027841/work/logs
        result_data_file: /var/lib/zuul/builds/84e72e6ae37a43dcbdb1591e47027841/work/results.json
        src_root: /var/lib/zuul/builds/84e72e6ae37a43dcbdb1591e47027841/work/src
        work_root: /var/lib/zuul/builds/84e72e6ae37a43dcbdb1591e47027841/work
      include_vars: []
      items:
      - branch: main
        change: '247'
        change_message: "chore(deps): update dependency cilium/cilium to v1.18.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [cilium/cilium](https://redirect.github.com/cilium/cilium) | minor | `1.17.4`
          -> `1.18.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>cilium/cilium
          (cilium/cilium)</summary>\n\n### [`v1.18.0`](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):
          1.18.0\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.6...1.18.0)\n\nWe
          are excited to announce the **[Cilium 1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0)**
          release!\n\nA total of **3298 new commits** have been contributed to this
          release by a growing community of over **955 developers** and over **22,000
          GitHub stars**! \u2B50\n\nTo keep up to date with all the latest Cilium
          releases, see [Announcements](https://redirect.github.com/cilium/cilium/discussions/categories/announcements)\n\nHere's
          what's new in [v1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):\n\n####
          \U0001F6A0 Networking\n\n- **\u2696\uFE0F Load Balancing Redesign**: The
          service load-balancing control-plane in the Cilium agent has been redesigned
          to reduce memory usage and improve future extensibility of load-balancing
          features ([cilium/cilium#38469](https://redirect.github.com/cilium/cilium/pull/38469),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- **\U0001F50C
          Virtual Network Devices**: Added support for new virtual network device
          configurations such as VXLAN in IPsec (VinE) and IPIP tunnels ([cilium/cilium#37723](https://redirect.github.com/cilium/cilium/pull/37723),
          [@&#8203;ldelossa](https://redirect.github.com/ldelossa); [cilium/cilium#37346](https://redirect.github.com/cilium/cilium/pull/37346),
          [@&#8203;gyutaeb](https://redirect.github.com/gyutaeb))\n- **\u24C2\uFE0F
          Multiple Egress Gateways**: Egress Gateways policies can now direct traffic
          towards multiple gateway nodes ([cilium/cilium#39304](https://redirect.github.com/cilium/cilium/pull/39304),
          [@&#8203;carlos-abad](https://redirect.github.com/carlos-abad))\n- **\U0001F6A6
          Ingress Rate Limiting**: The bandwidth manager now supports ingress rate
          limiting ([cilium/cilium#36351](https://redirect.github.com/cilium/cilium/pull/36351),
          [@&#8203;l1b0k](https://redirect.github.com/l1b0k))\n- **\U0001F4E2 Multi-Device
          L2 Announcements**: The L2 pod announcement feature now supports multiple
          devices ([cilium/cilium#38198](https://redirect.github.com/cilium/cilium/pull/38198),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          **\U0001F3E2 Neighbor Subsystem Rework**: The neighbor subsystem was made
          more resilient through a new system that reconciles desired neighbor entries
          with the kernel state ([cilium/cilium#39987](https://redirect.github.com/cilium/cilium/pull/39987),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n\n####
          \U0001F310 IPv6\n\n- **\U0001F687 Tunneling Underlay**: The tunneling datapath
          mode now supports using an IPv6 network underlay, including when configured
          with IPsec transparent encryption ([cilium/cilium#38296](https://redirect.github.com/cilium/cilium/pull/38296),
          [cilium/cilium#39497](https://redirect.github.com/cilium/cilium/pull/39497),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4AC
          Kube Proxy Replacement**: Cilium now implements service translation when
          running on an IPv6 underlay ([cilium/cilium#39074](https://redirect.github.com/cilium/cilium/pull/39074),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4CB
          Delegated IPAM**: When delegating IP address management to a third party
          plugin, Cilium now configures IPv6 routes for connectivity if the plugin
          supports IPv6 ([cilium/cilium#38249](https://redirect.github.com/cilium/cilium/pull/38249),
          [@&#8203;caorui-io](https://redirect.github.com/caorui-io), [@&#8203;kadevu](https://redirect.github.com/kadevu))\n-
          **\U0001F4E6 IP Fragment Support**: Cilium now processes ordered IPv6 fragments
          to apply policy and routing functionality ([cilium/cilium#38110](https://redirect.github.com/cilium/cilium/pull/38110),
          [@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))\n- **\U0001F6AA
          Egress gateway policies** can now match IPv6 address ranges ([cilium/cilium#38452](https://redirect.github.com/cilium/cilium/pull/38452),
          [@&#8203;rgo3](https://redirect.github.com/rgo3))\n\n#### \U0001F6E1\uFE0F
          Policy & Observability\n\n- **\U0001F3F7\uFE0F Policy Names in Hubble-CLI**:
          Show the names of (C)CNPs that allowed or denied traffic when monitoring
          flows in Hubble ([cilium/cilium#39453](https://redirect.github.com/cilium/cilium/pull/39453),
          [@&#8203;antonipp](https://redirect.github.com/antonipp))\n- **\U0001F4DD
          Policy Log Fields**: A new free-text log field is added to policies, which
          is exposed in Hubble flows for easy correlation and searching ([cilium/cilium#39902](https://redirect.github.com/cilium/cilium/pull/39902),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F6F0\uFE0F
          Encapsulated Traffic Decoding**: Hubble decodes encapsulated traffic for
          deeper introspection into traffic flows ([cilium/cilium#37634](https://redirect.github.com/cilium/cilium/pull/37634),
          [@&#8203;kaworu](https://redirect.github.com/kaworu))\n- **\U0001F3F0 ClusterMesh
          Policy Restriction**: A new option allows the **cluster** entity to apply
          only to the local cluster in ClusterMesh environment ([cilium/cilium#39338](https://redirect.github.com/cilium/cilium/pull/39338),
          [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\u2728
          Enhanced Policy Dashboard**: The Policy section of the Cilium Grafana dashboard
          has been improved to show more relevant graphs, including policy drops in
          both directions ([cilium/cilium#36492](https://redirect.github.com/cilium/cilium/pull/36492),
          [cilium/cilium#37445](https://redirect.github.com/cilium/cilium/pull/37445),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n\n#### \U0001F305
          Performance\n\n- **\U0001F4CA Scale Test Results**: Cilium implements policies
          and services up to 45% faster in higher scale environments (Various; [@&#8203;marseel](https://redirect.github.com/marseel),
          [cilium/cilium#40227](https://redirect.github.com/cilium/cilium/pull/40227))\n-
          **\U0001F4E6 Image Size Reduction**: Docker image sizes are reduced by 32%
          on arm64 architecture images ([cilium/cilium#40005](https://redirect.github.com/cilium/cilium/pull/40005),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\u26A1 Improved
          Policy Performance**: The DNS proxy can process large numbers of IPs faster,
          and the EndpointSelector match implementation has been optimized ([cilium/cilium#39340](https://redirect.github.com/cilium/cilium/pull/39340),
          [@&#8203;squeed](https://redirect.github.com/squeed); [cilium/cilium#40414](https://redirect.github.com/cilium/cilium/pull/40414),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\U0001FA9E
          EndpointSlice Mirroring for Multi-Cluster Services**: Clustermesh mirrors
          EndpointSlice from the local cluster instead of copying the Service selectors
          when using the MCS-API controller ([cilium/cilium#38596](https://redirect.github.com/cilium/cilium/pull/38596),
          [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\U0001F310
          KVStoreMesh Optimization**: Cross-cluster state distribution is optimized
          by only synchronizing identities keyed by ID, not by value ([cilium/cilium#36471](https://redirect.github.com/cilium/cilium/pull/36471),
          [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- **\U0001F9E0
          Egress Gateway Processing**: Egress gateway policy processing is significantly
          improved when matching a large number of pods ([cilium/cilium#37714](https://redirect.github.com/cilium/cilium/pull/37714),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- **\U0001F5D1\uFE0F
          Optimized Garbage Collection for Connection Tracking**: Cilium leverages
          batched iterators for CTMap GC ([cilium/cilium#36288](https://redirect.github.com/cilium/cilium/pull/36288),
          [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))\n\n####
          \u2699\uFE0F Operations\n\n- **\U0001F4C8 API Server Connections at Scale**:
          Improve kube-apiserver connections behavior at scale through failover and
          setting better jitter and backoff configurations ([cilium/cilium#37601](https://redirect.github.com/cilium/cilium/pull/37601),
          [@&#8203;aditighag](https://redirect.github.com/aditighag); [cilium/cilium#38031](https://redirect.github.com/cilium/cilium/pull/38031),
          [@&#8203;orange30](https://redirect.github.com/orange30); [cilium/cilium#36648](https://redirect.github.com/cilium/cilium/pull/36648),
          [@&#8203;wedaly](https://redirect.github.com/wedaly))\n- **\U0001F504 ConfigMap
          Synchronization**: New option to automatically synchronize ConfigMap changes
          into the agent and report metrics for when the effective configuration is
          different from the desired configuration ([cilium/cilium#36510](https://redirect.github.com/cilium/cilium/pull/36510),
          [@&#8203;ovidiutirla](https://redirect.github.com/ovidiutirla))\n- **\U0001F393
          CRD Promotion to Stable**: Promote **CiliumCIDRGroup**, **CiliumLoadBalancerIPPool**
          and all **BGP** CRDs to stable API ([cilium/cilium#38940](https://redirect.github.com/cilium/cilium/pull/38940),
          [@&#8203;christarazi](https://redirect.github.com/christarazi); [cilium/cilium#39090](https://redirect.github.com/cilium/cilium/pull/39090),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84); [cilium/cilium#37765](https://redirect.github.com/cilium/cilium/pull/37765),
          [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- **\u26D4
          Node Taints Handling**: The cilium-operator Deployment uses a new default
          set of taints which avoids deploying to a drained node ([cilium/cilium#40137](https://redirect.github.com/cilium/cilium/pull/40137),
          [@&#8203;Murat](https://redirect.github.com/Murat) Parlakisik)\n- **:wood:
          Migrate to Slog**: Cilium now uses slog as log library for all components
          ([cilium/cilium#39664](https://redirect.github.com/cilium/cilium/pull/39664),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- **\U0001F527 Cilium
          dependencies** were updated to Kubernetes v1.33, Envoy v1.34, LLVM 19.1,
          and CNI v1.1 ([cilium/cilium#39124](https://redirect.github.com/cilium/cilium/pull/39124),
          [cilium/cilium#40175](https://redirect.github.com/cilium/cilium/pull/40175),
          [cilium/cilium#39632](https://redirect.github.com/cilium/cilium/pull/39632),
          [@&#8203;sayboras](https://redirect.github.com/sayboras); [cilium/cilium#38868](https://redirect.github.com/cilium/cilium/pull/38868),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F427 Minimum
          Linux Requirements**: The minimum kernel version for this release series
          is Linux v5.10 or similar, such as RHEL 8.6 ([cilium/cilium#38308](https://redirect.github.com/cilium/cilium/pull/38308),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n\n####
          \U0001F578\uFE0F Service Mesh & Gateway API\n\n- **\u26E9\uFE0F Gateway
          API v1.3.0**: Gateway API support is bumped to v1.3.0 ([cilium/cilium#39590](https://redirect.github.com/cilium/cilium/pull/39590),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F517
          Improved GatewayClass Configuration**: The new CiliumGatewayClassConfig
          object adds service type validation allows the configuration of extra settings
          on a per-GatewayClass level: LoadBalancerSourceRangesPolicy, ParametersRef
          fields. This allows Cilium to reconcile multiple GatewayClasses with different
          configurations ([cilium/cilium#37792](https://redirect.github.com/cilium/cilium/pull/37792),
          [cilium/cilium#37402](https://redirect.github.com/cilium/cilium/pull/37402),
          [cilium/cilium#40138](https://redirect.github.com/cilium/cilium/pull/40138),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F68F
          Multiple HTTPRoutes**: GAMMA reconciler now supports attaching multiple
          HTTPRoutes to the same Service ([cilium/cilium#39922](https://redirect.github.com/cilium/cilium/pull/39922),
          [@&#8203;youngnick](https://redirect.github.com/youngnick))\n- **\U0001FA84
          Route Changes Reconciliation**: Reconcile Gateway API based on all changes
          to routes. This allows label updates to trigger reconciliation correctly,
          amongst other things ([cilium/cilium#37798](https://redirect.github.com/cilium/cilium/pull/37798),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n\n#### \U0001F3F7\uFE0F
          IP Address Management\n\n- **\u2601\uFE0F AWS Prefix Delegation**: Prefix
          delegation on AWS bare metal instances is now supported natively in Cilium's
          AWS ENI IPAM mode ([cilium/cilium#39678](https://redirect.github.com/cilium/cilium/pull/39678),
          [@&#8203;41ks](https://redirect.github.com/41ks))\n- **\U0001F3EC Multi-Pool
          IPAM with KVStore**: Add support for Multi-Pool IPAM in external KVstore
          mode ([cilium/cilium#39638](https://redirect.github.com/cilium/cilium/pull/39638),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\U0001F510
          Multi-Pool IPAM with IPSec**: Add support for Multi-Pool IPAM mode with
          IPSec transparent encryption in tunnel routing mode ([cilium/cilium#39442](https://redirect.github.com/cilium/cilium/pull/39442),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\u21AA\uFE0F
          Multi-Pool Tunnel Routing**: Add support for tunnel routing in multi-pool
          IPAM mode ([cilium/cilium#38483](https://redirect.github.com/cilium/cilium/pull/38483),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n\n#### \U0001F6E3\uFE0F
          BGP\n\n- **\U0001F4C7 Route Aggregation**: Add support for BGP route aggregation
          in the control plane ([cilium/cilium#37275](https://redirect.github.com/cilium/cilium/pull/37275),
          [@&#8203;romanspb80](https://redirect.github.com/romanspb80))\n- **\U0001F3AF
          Overlapping Selector Matches**: Support overlapping selector matches in
          **CiliumBGPAdvertisement** resources ([cilium/cilium#36414](https://redirect.github.com/cilium/cilium/pull/36414),
          [@&#8203;dswaffordcw](https://redirect.github.com/dswaffordcw))\n- **\U0001F194
          New Router ID generation modes**: Generate router-id based on MAC addresses,
          or from an IP address pool ([cilium/cilium#36451](https://redirect.github.com/cilium/cilium/pull/36451),
          [@&#8203;yushoyamaguchi](https://redirect.github.com/yushoyamaguchi); [cilium/cilium#38300](https://redirect.github.com/cilium/cilium/pull/38300),
          [@&#8203;liyihuang](https://redirect.github.com/liyihuang))\n\n#### \U0001F9D1\u200D\U0001F4BB
          Development Experience\n\n- **\U0001F9EA Test attribution**: Identify owners
          of test in GitHub workflow results to make it easier to connect with other
          developers on tricky problems ([cilium/cilium#37027](https://redirect.github.com/cilium/cilium/pull/37027),
          [@&#8203;Joe](https://redirect.github.com/Joe) Stringer)\n- **\U0001F6CF\uFE0F
          Policy REST API**: The Cilium policy API exposed over a local unix socket
          is deprecated. The other mechanisms to configure policy via Kubernetes resources
          or the local filesystem are preferred ([cilium/cilium#40212](https://redirect.github.com/cilium/cilium/pull/40212),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F3D7\uFE0F
          Feature Deprecation**: Deprecate underused features like Custom Calls, Recorder
          API and External Workloads ([cilium/cilium#38480](https://redirect.github.com/cilium/cilium/pull/38480),
          [cilium/cilium#39642](https://redirect.github.com/cilium/cilium/pull/39642),
          [cilium/cilium#37418](https://redirect.github.com/cilium/cilium/pull/37418),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n#### \U0001F3E2 Community\n\n-
          **\u2764\uFE0F Production Case Studies**: Many end-users have stepped forward
          to tell their stories running Cilium in production. If your company wants
          to submit their case studies let us know. We would love to hear your feedback!\n
          \ - [ByteDance](https://www.youtube.com/watch?v=cKPW67D7X10), [Canopus Networks](https://www.youtube.com/watch?v=YXl9xuIxylY),
          [Corner Banca](https://www.youtube.com/watch?v=HVPKSefazl4), [DB Schenker](https://www.cncf.io/case-studies/db-schenker/),
          [eBay](https://www.youtube.com/watch?v=xEa4KFf5FzY), [ECCO](https://www.cncf.io/case-studies/ecco/),
          [G-Research](https://www.youtube.com/watch?v=kjSFN34dROQ), [Social Network
          Company](https://cilium.io/blog/2025/04/15/tetragon-social-networking-user-story/),
          and [Preferred Networks](https://www.youtube.com/watch?v=n7_I4zu6f_M)\n-
          **\U0001F1EC\U0001F1E7 London Events**: The community gathered at [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/)
          and the [Cilium Developer Summit](https://redirect.github.com/cilium/dev-summits/tree/main/2025-EU)
          in London\n- **\U0001F1FA\U0001F1F8 Atlanta Events**: Meet us at the upcoming
          [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/ciliumcon/)
          and Cilium Developers Summit in Atlanta, Georgia\n- **\U0001F465 SIG Community
          Meetings**: [SIG Community](https://redirect.github.com/cilium/community/tree/main/sig-community)
          now meets every first and third Thursday to foster, grow, and sustain the
          Cilium open source community\n\n#### \U0001F4D4 Full CHANGELOG\n\n- Full
          CHANGELOG.md can be found [here](https://redirect.github.com/cilium/cilium/blob/v1.18.0/CHANGELOG.md).\n\nAnd
          finally, we would like to thank you to all contributors of Cilium that helped
          directly and indirectly with the project. The success of Cilium could not
          happen without all of you. \u2764\uFE0F :people\\_holding\\_hands:  \u2764\uFE0F\n\n###
          [`v1.17.6`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.6):
          1.17.6\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.5...1.17.6)\n\n##
          Summary of Changes\n\n**Minor Changes:**\n\n- helm: KPR subflag changes
          (Backport PR [#&#8203;40222](https://redirect.github.com/cilium/cilium/issues/40222),
          Upstream PR [#&#8203;39721](https://redirect.github.com/cilium/cilium/issues/39721),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n**Bugfixes:**\n\n- Deny
          policies are now synced to Envoy so that they can be enforced for Ingress
          policies. (Backport PR [#&#8203;40187](https://redirect.github.com/cilium/cilium/issues/40187),
          Upstream PR [#&#8203;39736](https://redirect.github.com/cilium/cilium/issues/39736),
          [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n- Do not
          fail the agent startup in case IPv6 support is enabled and the node does
          not have an IPv6 address assigned yet (Backport PR [#&#8203;40205](https://redirect.github.com/cilium/cilium/issues/40205),
          Upstream PR [#&#8203;40143](https://redirect.github.com/cilium/cilium/issues/40143),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- Fix bug preventing
          a global service from including remote backends, if the local service has
          no selector, and the remote one gets removed and then added again. ([#&#8203;40361](https://redirect.github.com/cilium/cilium/issues/40361),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix data race
          involving DumpReliablyWithCallback map operation. (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;38590](https://redirect.github.com/cilium/cilium/issues/38590),
          [@&#8203;aditighag](https://redirect.github.com/aditighag))\n- Fix IPAM
          IP release racing condition when IP reassigned back to ENI (Backport PR
          [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40019](https://redirect.github.com/cilium/cilium/issues/40019),
          [@&#8203;victorcq](https://redirect.github.com/victorcq))\n- hubble automatically
          pick the `hubble-prefer-ipv6` to `true` if ipv4 not enabled (Backport PR
          [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40210](https://redirect.github.com/cilium/cilium/issues/40210),
          [@&#8203;chengjoey](https://redirect.github.com/chengjoey))\n- LBIPAM: Fix
          deletion of CiliumLoadBalancerIPPool with multiple IP blocks that led to
          an operator crash (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40013](https://redirect.github.com/cilium/cilium/issues/40013),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- pkg/egressgateway:
          ensure gateway IP is IPv4 (Backport PR [#&#8203;40332](https://redirect.github.com/cilium/cilium/issues/40332),
          Upstream PR [#&#8203;40209](https://redirect.github.com/cilium/cilium/issues/40209),
          [@&#8203;rgo3](https://redirect.github.com/rgo3))\n- policy: fix error handling
          for selector policy resolution ([#&#8203;40404](https://redirect.github.com/cilium/cilium/issues/40404),
          [@&#8203;fristonio](https://redirect.github.com/fristonio))\n\n**CI Changes:**\n\n-
          ci: do not run north-south conn disrupt tests for 5.4 kernels ([#&#8203;39443](https://redirect.github.com/cilium/cilium/issues/39443),
          [@&#8203;ldelossa](https://redirect.github.com/ldelossa))\n- ci: fix north-south
          conn disrupt for 5.4 kernel ([#&#8203;40434](https://redirect.github.com/cilium/cilium/issues/40434),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n\n**Misc
          Changes:**\n\n- .github/workflows: remove reviewers if ciliumbot approved
          PR (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;39989](https://redirect.github.com/cilium/cilium/issues/39989),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
          as part command (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40050](https://redirect.github.com/cilium/cilium/issues/40050),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
          as part command (Backport PR [#&#8203;40332](https://redirect.github.com/cilium/cilium/issues/40332),
          Upstream PR [#&#8203;40089](https://redirect.github.com/cilium/cilium/issues/40089),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- chore(deps): update
          all github action dependencies (v1.17) ([#&#8203;40158](https://redirect.github.com/cilium/cilium/issues/40158),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;40044](https://redirect.github.com/cilium/cilium/issues/40044),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;40458](https://redirect.github.com/cilium/cilium/issues/40458),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency cilium/cilium-cli to v0.18.5 (v1.17) ([#&#8203;39948](https://redirect.github.com/cilium/cilium/issues/39948),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update go to v1.24.5 (v1.17) ([#&#8203;40424](https://redirect.github.com/cilium/cilium/issues/40424),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.33.4-1752151664-7c2edb0b44cf95f326d628b837fcdd845102ba68
          (v1.17) ([#&#8203;40466](https://redirect.github.com/cilium/cilium/issues/40466),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;40157](https://redirect.github.com/cilium/cilium/issues/40157),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          cilium: fix socket termination for v4-in-v6 clients (Backport PR [#&#8203;40295](https://redirect.github.com/cilium/cilium/issues/40295),
          Upstream PR [#&#8203;39994](https://redirect.github.com/cilium/cilium/issues/39994),
          [@&#8203;borkmann](https://redirect.github.com/borkmann))\n- contrib/git:
          add merge drivers to automate post-merge commands (Backport PR [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40189](https://redirect.github.com/cilium/cilium/issues/40189),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- disk-cleanup: parallelize
          cleanup process to speed up step (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40054](https://redirect.github.com/cilium/cilium/issues/40054),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- doc:ipsec:kvstore:
          explicit limitations that could lead to staling XFRM states and no connectivity
          (Backport PR [#&#8203;40176](https://redirect.github.com/cilium/cilium/issues/40176),
          Upstream PR [#&#8203;39719](https://redirect.github.com/cilium/cilium/issues/39719),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- docs/ipsec:
          Fix incorrect statement on hostns encryption (Backport PR [#&#8203;40176](https://redirect.github.com/cilium/cilium/issues/40176),
          Upstream PR [#&#8203;40133](https://redirect.github.com/cilium/cilium/issues/40133),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- Makefile: Require
          API generation commands to succeed (Backport PR [#&#8203;40205](https://redirect.github.com/cilium/cilium/issues/40205),
          Upstream PR [#&#8203;40199](https://redirect.github.com/cilium/cilium/issues/40199),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- operator/secretsync:
          silence reconciliation logs (Backport PR [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40217](https://redirect.github.com/cilium/cilium/issues/40217),
          [@&#8203;tklauser](https://redirect.github.com/tklauser))\n- proxy: Use
          upstream envoy control plane API (Backport PR [#&#8203;40216](https://redirect.github.com/cilium/cilium/issues/40216),
          Upstream PR [#&#8203;39672](https://redirect.github.com/cilium/cilium/issues/39672),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- v1.17: helm:
          Restore hostPort.enabled flag ([#&#8203;40480](https://redirect.github.com/cilium/cilium/issues/40480),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n**Other Changes:**\n\n-
          \\[v1.17] deps: Update cilium-envoy image to 1.33.x ([#&#8203;40088](https://redirect.github.com/cilium/cilium/issues/40088),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- Backport: kube-proxy-healthz
          to return 503 if node terminating ([#&#8203;40317](https://redirect.github.com/cilium/cilium/issues/40317),
          [@&#8203;tamilmani1989](https://redirect.github.com/tamilmani1989))\n- Bpf
          datapath TCP conntrack entries are (re)created only in the forward direction,
          solving an issue with freezing proxy connections when backend connection
          is re-opened. ([#&#8203;40448](https://redirect.github.com/cilium/cilium/issues/40448),
          [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n- envoy:
          Bump cilium-envoy to the latest v1.33.x ([#&#8203;40368](https://redirect.github.com/cilium/cilium/issues/40368),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- install: Update
          image digests for v1.17.5 ([#&#8203;40117](https://redirect.github.com/cilium/cilium/issues/40117),
          [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n-
          proxy: Bump envoy version to the latest v1.33.x ([#&#8203;40181](https://redirect.github.com/cilium/cilium/issues/40181),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- v1.17: docs:
          Document encapsulation options ([#&#8203;40471](https://redirect.github.com/cilium/cilium/issues/40471),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n\n#### Docker
          Manifests\n\n##### cilium\n\n`quay.io/cilium/cilium:v1.17.6@&#8203;sha256:544de3d4fed7acba72758413812780a4972d47c39035f2a06d6145d8644a3353`\n`quay.io/cilium/cilium:stable@sha256:544de3d4fed7acba72758413812780a4972d47c39035f2a06d6145d8644a3353`\n\n#####
          clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.17.6@&#8203;sha256:f619e97432db427e1511bf91af3be8ded418c53a353a09629e04c5880659d1df`\n`quay.io/cilium/clustermesh-apiserver:stable@sha256:f619e97432db427e1511bf91af3be8ded418c53a353a09629e04c5880659d1df`\n\n#####
          docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.17.6@&#8203;sha256:2d6175582c036dde241448b2b937353ce304d7a30eec9b66e96279b4b39c4f36`\n`quay.io/cilium/docker-plugin:stable@sha256:2d6175582c036dde241448b2b937353ce304d7a30eec9b66e96279b4b39c4f36`\n\n#####
          hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.17.6@&#8203;sha256:7d17ec10b3d37341c18ca56165b2f29a715cb8ee81311fd07088d8bf68c01e60`\n`quay.io/cilium/hubble-relay:stable@sha256:7d17ec10b3d37341c18ca56165b2f29a715cb8ee81311fd07088d8bf68c01e60`\n\n#####
          operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.17.6@&#8203;sha256:5352e670719dc61f059c1e1a04bc0563c2144738386fa7236dc167ff3fef4c64`\n`quay.io/cilium/operator-alibabacloud:stable@sha256:5352e670719dc61f059c1e1a04bc0563c2144738386fa7236dc167ff3fef4c64`\n\n#####
          operator-aws\n\n`quay.io/cilium/operator-aws:v1.17.6@&#8203;sha256:24db5c811e24e51e7ce166e8e056967875bf3544cc2ead6984f34f705fe71847`\n`quay.io/cilium/operator-aws:stable@sha256:24db5c811e24e51e7ce166e8e056967875bf3544cc2ead6984f34f705fe71847`\n\n#####
          operator-azure\n\n`quay.io/cilium/operator-azure:v1.17.6@&#8203;sha256:1b7e193ccbc718f723993a0f11eb8fbf16376e822fe8c4dc792d7696701d57c8`\n`quay.io/cilium/operator-azure:stable@sha256:1b7e193ccbc718f723993a0f11eb8fbf16376e822fe8c4dc792d7696701d57c8`\n\n#####
          operator-generic\n\n`quay.io/cilium/operator-generic:v1.17.6@&#8203;sha256:91ac3bf7be7bed30e90218f219d4f3062a63377689ee7246062fa0cc3839d096`\n`quay.io/cilium/operator-generic:stable@sha256:91ac3bf7be7bed30e90218f219d4f3062a63377689ee7246062fa0cc3839d096`\n\n#####
          operator\n\n`quay.io/cilium/operator:v1.17.6@&#8203;sha256:e7b41cdba20875f8a6595eca1baf1cff1b8367417cffa99be7b1b9b0a11ab677`\n`quay.io/cilium/operator:stable@sha256:e7b41cdba20875f8a6595eca1baf1cff1b8367417cffa99be7b1b9b0a11ab677`\n\n###
          [`v1.17.5`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.5):
          1.17.5\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.4...1.17.5)\n\n##
          Summary of Changes\n\n**Bugfixes:**\n\n- aws/ENI: Only use pagination when
          not specifying IDs (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39120](https://redirect.github.com/cilium/cilium/issues/39120),
          [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- Fix
          connections to deleted service backends not getting terminated in certain
          cases involving services with multiple protocol ports. (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;37745](https://redirect.github.com/cilium/cilium/issues/37745),
          [@&#8203;foyerunix](https://redirect.github.com/foyerunix))\n- Fix handle\\_policy\\_egress
          programs not being cleaned up during endpoint teardown (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39560](https://redirect.github.com/cilium/cilium/issues/39560),
          [@&#8203;ti-mo](https://redirect.github.com/ti-mo))\n- Fixed bug where datapath
          is unable to compile when active connection tracking and IPv6 are enabled
          at the same time. (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39509](https://redirect.github.com/cilium/cilium/issues/39509),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          Fixes a bug where a CIDRRule of  0.0.0.0/0 would not select all external
          traffic. (Backport PR [#&#8203;39765](https://redirect.github.com/cilium/cilium/issues/39765),
          Upstream PR [#&#8203;39693](https://redirect.github.com/cilium/cilium/issues/39693),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- gateway-api: Use
          original source address for GAMMA (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39206](https://redirect.github.com/cilium/cilium/issues/39206),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- helm/hubble:
          Fix wrong value for metrics server tls existingSecret (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39668](https://redirect.github.com/cilium/cilium/issues/39668),
          [@&#8203;devodev](https://redirect.github.com/devodev))\n- install/kubernetes:
          change mapDynamicSizeRatio from number to string (Backport PR [#&#8203;39963](https://redirect.github.com/cilium/cilium/issues/39963),
          Upstream PR [#&#8203;39834](https://redirect.github.com/cilium/cilium/issues/39834),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- operator: skip retry
          of node taint update when node not found (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39517](https://redirect.github.com/cilium/cilium/issues/39517),
          [@&#8203;jshr-w](https://redirect.github.com/jshr-w))\n- Persist parent
          interface index of endpoint across agent restarts (Backport PR [#&#8203;39765](https://redirect.github.com/cilium/cilium/issues/39765),
          Upstream PR [#&#8203;39575](https://redirect.github.com/cilium/cilium/issues/39575),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          Policy updates to Envoy no longer consider a single selector as an L3 wildcard.
          Cilium bpf datapath policy enforcement is not done for Cilium Ingress policy
          enforcement so the L3 identity needs to be enforced in all cases. (Backport
          PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39511](https://redirect.github.com/cilium/cilium/issues/39511),
          [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n\n**CI Changes:**\n\n-
          bpf: test: fix up mis-spelled HAVE\\_NETNS\\_COOKIE (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39420](https://redirect.github.com/cilium/cilium/issues/39420),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          call for metrics in smoke tests from runner instead of installing apt/curl
          on cilium pod (Backport PR [#&#8203;39862](https://redirect.github.com/cilium/cilium/issues/39862),
          Upstream PR [#&#8203;37362](https://redirect.github.com/cilium/cilium/issues/37362),
          [@&#8203;Artyop](https://redirect.github.com/Artyop))\n- gh: e2e: enable
          secondary-network LB testing for all KPR=true configs (Backport PR [#&#8203;39780](https://redirect.github.com/cilium/cilium/issues/39780),
          Upstream PR [#&#8203;39718](https://redirect.github.com/cilium/cilium/issues/39718),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          gh: eks: restore concurrent execution of connectivity tests (Backport PR
          [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39673](https://redirect.github.com/cilium/cilium/issues/39673),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          Re-optimize CI build process (Backport PR [#&#8203;39862](https://redirect.github.com/cilium/cilium/issues/39862),
          Upstream PR [#&#8203;39802](https://redirect.github.com/cilium/cilium/issues/39802),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n\n**Misc Changes:**\n\n-
          .github/workflows: remove cilium-cli from build-go-caches ([#&#8203;39801](https://redirect.github.com/cilium/cilium/issues/39801),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- \\[v1.17] bpf: host:
          don't detect WG traffic in from-netdev@cilium\\_wg0 ([#&#8203;38233](https://redirect.github.com/cilium/cilium/issues/38233),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          Add a section to talk about the native routing masquerading in the cloud
          environment. (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39343](https://redirect.github.com/cilium/cilium/issues/39343),
          [@&#8203;liyihuang](https://redirect.github.com/liyihuang))\n- bpf: host:
          flag Cilium's ESP traffic as TRACE\\_REASON\\_ENCRYPTED (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;39558](https://redirect.github.com/cilium/cilium/issues/39558),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n-
          bpf: Skip lxc src IP check for proxy traffic (Backport PR [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39530](https://redirect.github.com/cilium/cilium/issues/39530),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- bpf:wireguard:
          reuse MARK\\_MAGIC\\_ENCRYPT for encrypted packets (Backport PR [#&#8203;39652](https://redirect.github.com/cilium/cilium/issues/39652),
          Upstream PR [#&#8203;39651](https://redirect.github.com/cilium/cilium/issues/39651),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- chore(deps):
          update all github action dependencies (v1.17) ([#&#8203;39476](https://redirect.github.com/cilium/cilium/issues/39476),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.17) ([#&#8203;39704](https://redirect.github.com/cilium/cilium/issues/39704),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;39570](https://redirect.github.com/cilium/cilium/issues/39570),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;39687](https://redirect.github.com/cilium/cilium/issues/39687),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;39821](https://redirect.github.com/cilium/cilium/issues/39821),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;39879](https://redirect.github.com/cilium/cilium/issues/39879),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency protocolbuffers/protobuf to v31 (v1.17) ([#&#8203;39607](https://redirect.github.com/cilium/cilium/issues/39607),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency protocolbuffers/protobuf to v31.1 (v1.17)
          ([#&#8203;39951](https://redirect.github.com/cilium/cilium/issues/39951),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update docker.io/library/golang:1.24.3 docker digest to [`4c0a181`](https://redirect.github.com/cilium/cilium/commit/4c0a181)
          (v1.17) ([#&#8203;39725](https://redirect.github.com/cilium/cilium/issues/39725),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update docker.io/library/golang:1.24.3 docker digest to [`81bf592`](https://redirect.github.com/cilium/cilium/commit/81bf592)
          (v1.17) ([#&#8203;39822](https://redirect.github.com/cilium/cilium/issues/39822),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update docker.io/library/golang:1.24.3 docker digest to [`86b4cff`](https://redirect.github.com/cilium/cilium/commit/86b4cff)
          (v1.17) ([#&#8203;39605](https://redirect.github.com/cilium/cilium/issues/39605),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update gcr.io/distroless/static:nonroot docker digest to [`188ddfb`](https://redirect.github.com/cilium/cilium/commit/188ddfb)
          (v1.17) ([#&#8203;39606](https://redirect.github.com/cilium/cilium/issues/39606),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update go to v1.24.4 (v1.17) ([#&#8203;39949](https://redirect.github.com/cilium/cilium/issues/39949),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.6-1749031919-98c55b1d0c1154fb6c9e760583c2dcd7778686e2
          (v1.17) ([#&#8203;39886](https://redirect.github.com/cilium/cilium/issues/39886),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.32.6-1749271279-0864395884b263913eac200ee2048fd985f8e626
          (v1.17) ([#&#8203;39935](https://redirect.github.com/cilium/cilium/issues/39935),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;39703](https://redirect.github.com/cilium/cilium/issues/39703),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;39950](https://redirect.github.com/cilium/cilium/issues/39950),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          HELM: Adding Label Support to clustermesh apiserver service (Backport PR
          [#&#8203;39564](https://redirect.github.com/cilium/cilium/issues/39564),
          Upstream PR [#&#8203;39520](https://redirect.github.com/cilium/cilium/issues/39520),
          [@&#8203;camrossi](https://redirect.github.com/camrossi))\n- mtu/endpoint\\_updater.go:
          Check for unix.EINVAL not os.ErrInvalid (Backport PR [#&#8203;39862](https://redirect.github.com/cilium/cilium/issues/39862),
          Upstream PR [#&#8203;39658](https://redirect.github.com/cilium/cilium/issues/39658),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          mtu: Catch expected error in endpoint MTU updater (Backport PR [#&#8203;39685](https://redirect.github.com/cilium/cilium/issues/39685),
          Upstream PR [#&#8203;36596](https://redirect.github.com/cilium/cilium/issues/36596),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          pkg/fswatcher: Rewrite without underlying use of fsnotify (Backport PR [#&#8203;39963](https://redirect.github.com/cilium/cilium/issues/39963),
          Upstream PR [#&#8203;38537](https://redirect.github.com/cilium/cilium/issues/38537),
          [@&#8203;glibsm](https://redirect.github.com/glibsm))\n\n**Other Changes:**\n\n-
          \\[v1.17] chore(deps): revert etcd bump to v3.6.0 ([#&#8203;39628](https://redirect.github.com/cilium/cilium/issues/39628),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- \\[v1.17] vendor:
          Bump Hive and StateDB ([#&#8203;39689](https://redirect.github.com/cilium/cilium/issues/39689),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- install: Update
          image digests for v1.17.4 ([#&#8203;39548](https://redirect.github.com/cilium/cilium/issues/39548),
          [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n\n####
          Docker Manifests\n\n##### cilium\n\n`quay.io/cilium/cilium:v1.17.5@&#8203;sha256:baf8541723ee0b72d6c489c741c81a6fdc5228940d66cb76ef5ea2ce3c639ea6`\n`quay.io/cilium/cilium:stable@sha256:baf8541723ee0b72d6c489c741c81a6fdc5228940d66cb76ef5ea2ce3c639ea6`\n\n#####
          clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.17.5@&#8203;sha256:78dc40b9cb8d7b1ad21a76ff3e11541809acda2ac4ef94150cc832100edc247d`\n`quay.io/cilium/clustermesh-apiserver:stable@sha256:78dc40b9cb8d7b1ad21a76ff3e11541809acda2ac4ef94150cc832100edc247d`\n\n#####
          docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.17.5@&#8203;sha256:0da0960b1d34d07ff1aba99d491e2413f0285cf09d94b183c4329e7e7b6949cb`\n`quay.io/cilium/docker-plugin:stable@sha256:0da0960b1d34d07ff1aba99d491e2413f0285cf09d94b183c4329e7e7b6949cb`\n\n#####
          hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.17.5@&#8203;sha256:fbb8a6afa8718200fca9381ad274ed695792dbadd2417b0e99c36210ae4964ff`\n`quay.io/cilium/hubble-relay:stable@sha256:fbb8a6afa8718200fca9381ad274ed695792dbadd2417b0e99c36210ae4964ff`\n\n#####
          operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.17.5@&#8203;sha256:654db67929f716b6178a34a15cb8f95e391465085bcf48cdba49819a56fcd259`\n`quay.io/cilium/operator-alibabacloud:stable@sha256:654db67929f716b6178a34a15cb8f95e391465085bcf48cdba49819a56fcd259`\n\n#####
          operator-aws\n\n`quay.io/cilium/operator-aws:v1.17.5@&#8203;sha256:3e189ec1e286f1bf23d47c45bdeac6025ef7ec3d2dc16190ee768eb94708cbc3`\n`quay.io/cilium/operator-aws:stable@sha256:3e189ec1e286f1bf23d47c45bdeac6025ef7ec3d2dc16190ee768eb94708cbc3`\n\n#####
          operator-azure\n\n`quay.io/cilium/operator-azure:v1.17.5@&#8203;sha256:add78783fdaced7453a324612eeb9ebecf56002b56c14c73596b3b4923321026`\n`quay.io/cilium/operator-azure:stable@sha256:add78783fdaced7453a324612eeb9ebecf56002b56c14c73596b3b4923321026`\n\n#####
          operator-generic\n\n`quay.io/cilium/operator-generic:v1.17.5@&#8203;sha256:f954c97eeb1b47ed67d08cc8fb4108fb829f869373cbb3e698a7f8ef1085b09e`\n`quay.io/cilium/operator-generic:stable@sha256:f954c97eeb1b47ed67d08cc8fb4108fb829f869373cbb3e698a7f8ef1085b09e`\n\n#####
          operator\n\n`quay.io/cilium/operator:v1.17.5@&#8203;sha256:815f6e0648724ed4cdbdc072889ad4223de251f21e0503035af91d41dd547cc4`\n`quay.io/cilium/operator:stable@sha256:815f6e0648724ed4cdbdc072889ad4223de251f21e0503035af91d41dd547cc4`\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC42MC4xIiwidXBkYXRlZEluVmVyIjoiNDEuNTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/247
        commit_id: 509ffc4c1cdc89300381de019311071d52515836
        patchset: 509ffc4c1cdc89300381de019311071d52515836
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
          src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      job: python-black
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 509ffc4c1cdc89300381de019311071d52515836
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/YAKEcloud/zuul-config:
            canonical_name: github.com/YAKEcloud/zuul-config
            checkout: main
            commit: 187ca9c93783cf78b5778e0c84c687f3aefbe0a7
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 9b966b7c4a2bfb253652691d791f76f825145a9c
          untrusted/project_1/github.com/YAKEcloud/zuul-config:
            canonical_name: github.com/YAKEcloud/zuul-config
            checkout: main
            commit: 187ca9c93783cf78b5778e0c84c687f3aefbe0a7
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/python-black/run.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/YAKEcloud/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/YAKEcloud/yake-ansible
        name: YAKEcloud/yake-ansible
        short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
      projects:
        github.com/YAKEcloud/yake-ansible:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          checkout: main
          checkout_description: zuul branch
          commit: bd8ce80f3999b5c004b37ccfeed942a04473ecdb
          name: YAKEcloud/yake-ansible
          required: false
          short_name: yake-ansible
          src_dir: src/github.com/YAKEcloud/yake-ansible
      ref: refs/pull/247/head
      resources: {}
      tenant: yakecloud
      timeout: 1800
      topic: null
      voting: true
