Cilium

v1.18.7Networking & Messaging

2026년 2월 13일

v1.18.7은 운영자 설정과 기본 동작에 영향을 주는 변경을 담고 있습니다. `topology.kubernetes.io` 레이블을 보안 레이블에 포함해 사용하는 워크로드에 적용되는 내용입니다.

영향 확인 (1)

breaking보안 레이블에서 topology.kubernetes.io 레이블 기본 제외
topology.kubernetes.io 레이블을 보안 레이블에 포함하는 워크로드에 적용됩니다.
기본 설정에서 topology.kubernetes.io 레이블을 보안 레이블에서 제외합니다.

그 외 기록된 변경 27건 전체value changes 15 · fixes 11 · additions 1

chore(deps): update all-dependencies (v1.18)
chore(deps): update base-images (v1.18)×3
chore(deps): update docker.io/library/alpine docker tag to v3.22.3 (v1.18)
chore(deps): update docker.io/library/busybox:… docker digest to … (…)×2
chore(deps): update docker.io/library/ubuntu:24.04 docker digest to cd1dba6 (v1.18)
chore(deps): update gcr.io/distroless/static:nonroot docker digest to f9f84bd (v1.18)
chore(deps): update quay.io/cilium/certgen docker tag to v0.3.2 (v1.18)
chore(deps): update quay.io/cilium/cilium-envoy docker tag to … (…)×4
install: Update image digests for v1.18.6

Add permissions to the cilium-operator so that it can create EndpointSlices when the admission plugin OwnerReferencesPermissionEnforcement is activated
bpf: Correct refinement of inner packet L4 checksum detection
bpf: Fix marker to skip nodeport when punting to proxy
clustermesh: correctly phase out not ready/not service endpoints from global services
Fix a bug with local redirect service entries being created when backend pods weren't ready.
Fix ICMP error packet handling by adding the missing checksum recalculation performed during RevNAT for SNATed load-balanced traffic.
Grant permissions to the cilium-operator so that it can reconcile ingresses when the when the admission plugin OwnerReferencesPermissionEnforcement is activated
helm: Fixed RBAC errors with operator.enabled=false by aligning cilium-tlsinterception-secrets Role/RoleBinding conditionals
loadbalancer: Fix GetInstancesOfService to avoid removing an endpoint from Service A causes all requests to Service B to fail if the name of Service A is the prefix of Service B
Reduces rtnl_mutex contention on SR-IOV nodes by not requesting VF information in netlink RTM_GETLINK operations
multicast: fix nil assignment to node configuration cell.Out map

hubble-relay: Add hubble.relay.logOptions.format and hubble.relay.logOptions.level Helm values to configure log format (text, text-ts, json, json-ts) and level (debug, info, warn, error)

Cilium 스택에 추가

조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 브레이킹 체인지 같은 것들입니다.