Publish Helm charts to OCI registries (cilium/cilium#43624, @aanm)
Minor Changes:
Add Strict Mode Ingress Encryption Support for Wireguard (cilium/cilium#39239, @rgo3)
helm: add SYSLOG capability for Cilium Agent (cilium/cilium#43201, @marseel)
policy: Mark FromRequires and ToRequires as deprecated (cilium/cilium#43167, @TheBeeZee)
Remove deprecated l2-pod-announcements-interface flag (cilium/cilium#43063, @dylandreimerink)
renovate: Allow cilium-envoy 1.35.x for v1.18 (cilium/cilium#43623, @sayboras)
Support BIG TCP in tunneling mode, provided that kernel supports BIG TCP for UDP tunnels. (cilium/cilium#43416, @gentoo-root)
Bugfixes:
bpf:wireguard: delivery host packets to bpf_host for ingress policies (cilium/cilium#42892, @smagnani96)
Fix an issue in proxy NOTRACK iptables rule for aws-cni chaining mode which causes proxy->upstream(outside cluster) traffic not being SNAT'd. (cilium/cilium#43566, @fristonio)
Fix bug in LoadBalancer that would cause node connectivity faults if Service LoadBalancer VIPs are allocated with Node-IPAM. (cilium/cilium#43565, @ajmmm)
Fix ICMP error packet handling by adding the missing checksum recalculation performed during RevNAT for SNATed load-balanced traffic. (cilium/cilium#43196, @yushoyamaguchi)
fix: incorrect schema entries for cpu limits (cilium/cilium#43735, @jcpunk)
Fixed a race condition while trying to create per endpoint routes which could result in connectivity issues (cilium/cilium#42915, @dylandreimerink)
loadbalancer: Fix GetInstancesOfService to avoid removing an endpoint from Service A causes all requests to Service B to fail if the name of Service A is the prefix of Service B (cilium/cilium#43620, @imroc)
pkg/azure/api : Fixed an issue where public IP assignment would permanently fail on Azure VMSS VMs. (cilium/cilium#43598, @41ks)
pkg/loadbalancer: further restrict use of wildcard svc entries (cilium/cilium#43721, @ajmmm)
xds: fix nil-pointer in processRequestStream (cilium/cilium#43609, @mhofstetter)
CI Changes:
bgp: Add component test for DefaultGateway auto-discovery (cilium/cilium#43430, @rastislavs)
chore(deps): update module sigs.k8s.io/kube-api-linter to v0.0.0-20260109151746-62264808e5f3 (main) (cilium/cilium#43658, @cilium-renovate[bot])
chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.35.9-1767794330-db497dd19e346b39d81d7b5c0dedf6c812bcc5c9 (main) (cilium/cilium#43637, @cilium-renovate[bot])
ci: bump eks cluster pool cleanup timeout (cilium/cilium#43733, @Artyop)