Prepare for release v1.14.1

Signed-off-by: Maciej Kwiek <maciej@isovalent.com>

.github/maintainers-little-helper.yaml

@@ -1,4 +1,4 @@
-project: "https://github.com/cilium/cilium/projects/241"
+project: "https://github.com/cilium/cilium/projects/247"
 column: "In progress"
 auto-label:
   - "kind/backports"

AUTHORS

@@ -145,7 +145,7 @@ Daniel T. Lee                           danieltimlee@gmail.com
 Danni Skov Høglund                      skuffe@pwnz.dk
 Dan Sexton                              dan.b.sexton@gmail.com
 Dan Wendlandt                           dan@covalent.io
-Dario Mader                             9934402+darox@users.noreply.github.com
+Dario Mader                             maderdario@gmail.com
 darox                                   maderdario@gmail.com
 Darren Foo                              darren.foo@shopify.com
 Darren Mackintosh                       unixdaddy@gmail.com
@@ -459,6 +459,7 @@ Oliver Ni                               oliver.ni@gmail.com
 Oliver Wang                             a0924100192@gmail.com
 Omar Aloraini                           ooraini.dev@gmail.com
 Ondrej Blazek                           ondrej.blazek@firma.seznam.cz
+Osthues                                 osthues.matthias@gmail.com
 Pablo Ruiz                              pablo.ruiz@gmail.com
 Paco Xu                                 paco.xu@daocloud.io
 Parth Patel                             parth.psu@gmail.com
@@ -506,6 +507,7 @@ Rémy Léone                              rleone@scaleway.com
 Renat Tuktarov                          yandzeek@gmail.com
 Rene Luria                              rene@luria.ch
 Rene Zbinden                            rene.zbinden@postfinance.ch
+Ricky Ho                                horicky78@gmail.com
 Rio Kierkels                            riokierkels@gmail.com
 Robin Gögge                             r.goegge@isovalent.com
 Robin Hahling                           robin.hahling@gw-computing.net
@@ -611,7 +613,7 @@ Viktor Kuzmin                           kvaster@gmail.com
 Viktor Oreshkin                         imselfish@stek29.rocks
 Ville Ojamo                             bluikko@users.noreply.github.com
 Vincent Li                              vincent.mc.li@gmail.com
-Vipul Singh                             vipul21sept@gmail.com
+Vipul Singh                             singhvipul@microsoft.com
 Vishal Choudhary                        sendtovishalchoudhary@gmail.com
 Vishnu Soman K                          vishnusomank05@gmail.com
 Vlad Artamonov                          742047+vladdy@users.noreply.github.com

CHANGELOG.md

@@ -1,5 +1,54 @@
 # Changelog
 
+## v1.14.1
+
+Summary of Changes
+------------------
+
+**Minor Changes:**
+* gateway-api: Upgrade to v0.7.1 (Backport PR #27238, Upstream PR #27157, @sayboras)
+* Prevent Cilium from running with Delegated IPAM at the same time as Ingress (Backport PR #27238, Upstream PR #26744, @rickysumho)
+
+**Bugfixes:**
+* Fix a bug that affected the health-check feature in Stand-alone L4LB mode. For certain configurations (eg if both IPv4 and IPv6 support is enabled) health-check traffic would not get IPIP-encapsulated. (Backport PR #27190, Upstream PR #27015, @julianwiedmann)
+* Fix a bug that affected the RevDNAT translation of IPv6 packets with extension headers. (Backport PR #27345, Upstream PR #27312, @julianwiedmann)
+* Fix a bug that could cause packet drops of type XfrmOutPolBlock when IPsec is enabled and node are recycled. Fix a bug that could cause IPsec-encrypted packets to be sent to the wrong destination node when node churn is high. (Backport PR #27238, Upstream PR #27029, @pchaigno)
+* Fix agent panic in case malformed objects are retrieved from the kvstore, and improve validation (Backport PR #27345, Upstream PR #27237, @giorio94)
+* Fix bug limiting pod-to-pod network performance under high load when tunneling and IPSec are both enabled. (Backport PR #27345, Upstream PR #27168, @learnitall)
+* Fix bug where startup CIDR restore logic would mishandle reference counting, leading to persistent packet loss to those CIDRs (Backport PR #27419, Upstream PR #27327, @joestringer)
+* Fix generation of the clustermesh config through Helm when kvstoremesh is enabled, and the TLS key/cert pair is manually specified for a given remote cluster (Backport PR #27238, Upstream PR #27177, @giorio94)
+* operator: Adjust CiliumEndpoint gc to account for kvstore mode (Backport PR #27190, Upstream PR #25324, @learnitall)
+* Resolve a deadlock on startup when local redirect policies are used. (Backport PR #27238, Upstream PR #27115, @bimmlerd)
+
+**CI Changes:**
+* .github: rebuild ginkgo tests in case of cache miss (Backport PR #27190, Upstream PR #27158, @sayboras)
+* Add renovate tags for automatic updates of kernel version in v1.14 (#27386, @aanm)
+* ci: fix and standardize checkouts in privileged workflows (Backport PR #27238, Upstream PR #27193, @nbusseneau)
+* ci: increase connectivity test timeout in GHA external workload (Backport PR #27345, Upstream PR #26975, @mhofstetter)
+
+**Misc Changes:**
+* Add note for changing IPAM settings (Backport PR #27238, Upstream PR #27090, @darox)
+* chore(deps): update cilium/little-vm-helper action to v0.0.12 (v1.14) (#27270, @renovate[bot])
+* chore(deps): update dependency cilium/cilium-cli to v0.15.5 (v1.14) (#27271, @renovate[bot])
+* chore(deps): update go to v1.20.6 (v1.14) (patch) (#26783, @renovate[bot])
+* chore(deps): update go to v1.20.7 (v1.14) (patch) (#27284, @renovate[bot])
+* docs/ipsec: Extend troubleshooting for long key rotations (Backport PR #27190, Upstream PR #26809, @pchaigno)
+* docs: Document `DROP_NO_NODE_ID` for IPsec (Backport PR #27345, Upstream PR #27184, @pchaigno)
+* docs: Have Makefile print generated image tags when running with V=0 (Backport PR #27345, Upstream PR #27250, @qmonnet)
+* docs: kpr: remove caveat about XDP + tunnel performance (Backport PR #27190, Upstream PR #27091, @julianwiedmann)
+* docs: Replace non-portable "sed -i" in Makefile (Backport PR #27238, Upstream PR #27122, @qmonnet)
+* docs: Simplify clustermesh example (Backport PR #27238, Upstream PR #27172, @joestringer)
+* docs: update roadmap after 1.14 release (Backport PR #27238, Upstream PR #27089, @lizrice)
+* Documentation: fix the broken links/dead links (Backport PR #27190, Upstream PR #26880, @vipul-21)
+* fix: use proper helm param name for specifying pod cidr (Backport PR #27238, Upstream PR #27141, @yandzee)
+* mutual-auth: Add note for PVC requirement (Backport PR #27345, Upstream PR #27311, @sayboras)
+* remove systemd-based distributions issue from  docs (Backport PR #27345, Upstream PR #27208, @WeirdMachine)
+* Update Service Mesh docs (Backport PR #27345, Upstream PR #27231, @youngnick)
+
+**Other Changes:**
+* backport v1.14: IPsec upgrade tests (#27175, @brb)
+* install: Update image digests for v1.14.0 (#27111, @aanm)
+
 ## v1.14.0
 
 Summary of Changes

Documentation/network/kubernetes/compatibility-table.rst

@@ -34,6 +34,8 @@
 +--------------------+----------------+
 | v1.12.11           | 1.25.7         |
 +--------------------+----------------+
+| v1.12.12           | 1.25.7         |
++--------------------+----------------+
 | v1.12              | 1.25.7         |
 +--------------------+----------------+
 | v1.13.0-rc0        | 1.26.0         |
@@ -58,6 +60,8 @@
 +--------------------+----------------+
 | v1.13.4            | 1.26.7         |
 +--------------------+----------------+
+| v1.13.5            | 1.26.7         |
++--------------------+----------------+
 | v1.13              | 1.26.7         |
 +--------------------+----------------+
 | v1.14.0-pre.2      | 1.26.8         |
@@ -80,6 +84,8 @@
 +--------------------+----------------+
 | v1.14.0-snapshot.6 | 1.26.10        |
 +--------------------+----------------+
+| v1.14.0            | 1.26.10        |
++--------------------+----------------+
 | v1.14              | 1.26.10        |
 +--------------------+----------------+
 | latest / main      | 1.26.9         |

VERSION

@@ -1 +1 @@
-1.14.0
+1.14.1

install/kubernetes/Makefile.digests

@@ -2,13 +2,13 @@
 # Copyright 2023 Authors of Cilium
 # SPDX-License-Identifier: Apache-2.0
 
-export CILIUM_DIGEST := "sha256:5a94b561f4651fcfd85970a50bc78b201cfbd6e2ab1a03848eab25a82832653a"
-export CLUSTERMESH_APISERVER_DIGEST := "sha256:2eb0f9ddd91682e1a591b23fcbd29563e6f9b2e1555903a2f417791516ffdf38"
-export DOCKER_PLUGIN_DIGEST := "sha256:db6a4cafbfb50d81aa1a3a2ab5facf2a407786d3e808295c49cf323cf53b7df1"
-export HUBBLE_RELAY_DIGEST := "sha256:bfe6ef86a1c0f1c3e8b105735aa31db64bcea97dd4732db6d0448c55a3c8e70c"
-export KVSTOREMESH_DIGEST := "sha256:efa5d069ec6227b14928da65c5df646d4013737fd5973b17c74d0ede654e47bb"
-export OPERATOR_ALIBABACLOUD_DIGEST := "sha256:85f658cd4494b70218b542f63f25377ba15e32a49a54d596655dd3aaefe4f4e8"
-export OPERATOR_AWS_DIGEST := "sha256:396953225ca4b356a22e526a9e1e04e65d33f84a0447bc6374c14da12f5756cd"
-export OPERATOR_AZURE_DIGEST := "sha256:f510bf051684534b81d86bafcbbe7b7a9a6f7b1e7bb598b904d75d0e6b90071a"
-export OPERATOR_GENERIC_DIGEST := "sha256:3014d4bcb8352f0ddef90fa3b5eb1bbf179b91024813a90a0066eb4517ba93c9"
-export OPERATOR_DIGEST := "sha256:0fad2cce5d17221e90538dfff552c402aae93266ab8ce531b04f722f407f71a8"
+export CILIUM_DIGEST := ""
+export CLUSTERMESH_APISERVER_DIGEST := ""
+export DOCKER_PLUGIN_DIGEST := ""
+export HUBBLE_RELAY_DIGEST := ""
+export KVSTOREMESH_DIGEST := ""
+export OPERATOR_ALIBABACLOUD_DIGEST := ""
+export OPERATOR_AWS_DIGEST := ""
+export OPERATOR_AZURE_DIGEST := ""
+export OPERATOR_GENERIC_DIGEST := ""
+export OPERATOR_DIGEST := ""

install/kubernetes/cilium/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: cilium
 displayName: Cilium
 home: https://cilium.io/
-version: 1.14.0
-appVersion: 1.14.0
+version: 1.14.1
+appVersion: 1.14.1
 kubeVersion: ">= 1.16.0-0"
 icon: https://cdn.jsdelivr.net/gh/cilium/cilium@v1.14/Documentation/images/logo-solo.svg
 description: eBPF-based Networking, Security, and Observability