Prepare for release v1.12.14

Signed-off-by: Michi Mutsuzaki <michi@isovalent.com>

.github/maintainers-little-helper.yaml

@@ -1,4 +1,4 @@
-project: "https://github.com/cilium/cilium/projects/248"
+project: "https://github.com/cilium/cilium/projects/251"
 column: "In progress"
 auto-label:
   - "kind/backports"

AUTHORS

@@ -32,6 +32,7 @@ Andree Klattenhoff                      mail@andr.ee
 André Martins                           andre@cilium.io
 Andrew Bulford                          andrew.bulford@form3.tech
 Andrew Holt                             andrew.holt@utmost.co
+Andrew Sauber                           2046750+asauber@users.noreply.github.com
 Andrew Sy Kim                           kim.andrewsy@gmail.com
 Andrey Devyatkin                        andrey.devyatkin@fivexl.io
 Andrey Klimentyev                       andrey.klimentyev@flant.com
@@ -85,6 +86,7 @@ Changyu Wang                            changyuwang@tencent.com
 Charles-Edouard Brétéché                charled.breteche@gmail.com
 Charles-Henri Guérin                    charles-henri.guerin@zenika.com
 Chen Kang                               kongchen28@gmail.com
+chentanjun                              tanjunchen20@gmail.com
 chenyahui                               chenyahui9@jd.com
 Chen Yaqi                               chenyaqi01@baidu.com
 Chris Tarazi                            chris@isovalent.com
@@ -144,6 +146,7 @@ Dmitry Kharitonov                       geakstr@me.com
 Dmitry Savintsev                        dsavints@verizonmedia.com
 Dom Del Nano                            ddelnano@gmail.com
 Dom Goodwin                             dom.goodwin@capgemini.com
+Donia Chaiehloudj                       donia.cld@isovalent.com
 Dorde Lapcevic                          dordel@google.com
 Duffie Cooley                           dcooley@isovalent.com
 Dylan Reimerink                         dylan.reimerink@isovalent.com
@@ -189,6 +192,7 @@ Guilherme Oki                           guilherme.oki@wildlifestudios.com
 Guilherme Souza                         101073+guilhermef@users.noreply.github.com
 Gunju Kim                               gjkim042@gmail.com
 Haitao Li                               lihaitao@gmail.com
+Haiyue Wang                             haiyue.wang@intel.com
 Hang Yan                                hang.yan@hotmail.com
 Han Zhou                                hzhou8@ebay.com
 Harsh Modi                              harshmodi@google.com
@@ -205,6 +209,7 @@ Ian Vernon                              ian@cilium.io
 Ifeanyi Ubah                            ify1992@yahoo.com
 Ilya Dmitrichenko                       errordeveloper@gmail.com
 Ilya Shaisultanov                       ilya.shaisultanov@gmail.com
+ishuar                                  ishansharma887@gmail.com
 Ivan Makarychev                         i.makarychev@tinkoff.ru
 Ivar Lazzaro                            ivarlazzaro@gmail.com
 Jaff Cheng                              jaff.cheng.sh@gmail.com
@@ -279,7 +284,7 @@ Liz Rice                                liz@lizrice.com
 Lorenzo Fundaró                         lorenzofundaro@gmail.com
 Louis DeLosSantos                       louis@isovalent.com
 lou-lan                                 loulan@loulan.me
-Maartje Eyskens                         maartje.eyskens@isovalent.com
+Maartje Eyskens                         maartje@eyskens.me
 Maciej Fijalkowski                      maciej.fijalkowski@intel.com
 Maciej Kwiek                            maciej@isovalent.com
 Maciej Skrocki                          maciejskrocki@google.com

CHANGELOG.md

@@ -1,5 +1,58 @@
 # Changelog
 
+## v1.12.14
+
+Summary of Changes
+------------------
+
+**Bugfixes:**
+* bpf: lxc: support Pod->Service->Pod hairpinning with endpoint routes (Backport PR #27980, Upstream PR #27798, @ti-mo)
+* Fix a bug that affected the RevDNAT translation of IPv6 packets with extension headers. (Backport PR #27394, Upstream PR #27312, @julianwiedmann)
+* Fix a bug that could cause an incorrect max. sequence number to be reported by `cilium encrypt status` when IPsec is enabled. (Backport PR #27934, Upstream PR #27656, @pchaigno)
+* Fix bug limiting pod-to-pod network performance under high load when tunneling and IPSec are both enabled. (Backport PR #27394, Upstream PR #27168, @learnitall)
+* Fix bug that could cause packet drops of type XfrmOutPolBlock while rotating the IPsec key. (Backport PR #27588, Upstream PR #27319, @jrfastab)
+* Fix connectivity issues caused by missing conntrack entry when service pod connects to itself via clusterIP. (Backport PR #27980, Upstream PR #27602, @julianwiedmann)
+* IPSec fix for race on init resulting in Xfrm*In* errors and dropped packets (Backport PR #28029, Upstream PR #28012, @jrfastab)
+* k8s: Restrict configuring reserved:init policy via CNP (Backport PR #28040, Upstream PR #28007, @joestringer)
+* Prioritization of which DNS mappings to keep was suboptimal, leading to evictions of mappings related to alive connections, worsening performance of fqdn policies and causing spurious logging. (Backport PR #27934, Upstream PR #27572, @bimmlerd)
+* proxy: Ignore visibility annotation if proxy is disabled (Backport PR #27660, Upstream PR #27597, @sayboras)
+
+**CI Changes:**
+* .github/workflows: unify time to wait for images to become available (Backport PR #27934, Upstream PR #27706, @tklauser)
+* Add missing ariane trigger phrases (Backport PR #27980, Upstream PR #27822, @tklauser)
+* ci-ipsec-upgrade: Bump CLI to v0.15.5 (Backport PR #27394, Upstream PR #27230, @brb)
+* ci-ipsec-upgrade: Skip upon test/Documentation changes (Backport PR #27744, Upstream PR #27644, @brb)
+* ci: remove unavailable K8s 1.22 from GKE config (Backport PR #27394, Upstream PR #27365, @mhofstetter)
+* CI: Rename workflow names (Backport PR #27744, Upstream PR #27391, @brlbil)
+* CI: Update tested k8s version for aks (Backport PR #27660, Upstream PR #27457, @brlbil)
+* gh/workflows: Use cilium-config action in ci-ipsec-upgrade (Backport PR #27934, Upstream PR #27359, @brb)
+* ingress: Add conformance test for KPR=false (Backport PR #27980, Upstream PR #27304, @sayboras)
+
+**Misc Changes:**
+* chore(deps): update actions/checkout action to v4 (v1.12) (#27950, @renovate[bot])
+* chore(deps): update all github action dependencies (v1.12) (minor) (#27787, @renovate[bot])
+* chore(deps): update all lvh-images main (v1.12) (patch) (#27785, @renovate[bot])
+* chore(deps): update aws-actions/configure-aws-credentials action to v3 (v1.12) (#27788, @renovate[bot])
+* chore(deps): update cilium/coccicheck docker tag to v2.4 (v1.12) (#27949, @renovate[bot])
+* chore(deps): update dependency ubuntu to v22 (v1.12) (#27789, @renovate[bot])
+* chore(deps): update docker.io/library/alpine docker tag to v3.16.7 (v1.12) (#27786, @renovate[bot])
+* chore(deps): update docker.io/library/golang docker tag to v1.20.7 (v1.12) (#27487, @renovate[bot])
+* chore(deps): update docker.io/library/golang docker tag to v1.20.8 (v1.12) (#27992, @renovate[bot])
+* chore(deps): update docker.io/library/ubuntu:20.04 docker digest to 33a5cc2 (v1.12) (#27338, @renovate[bot])
+* docs: Document `DROP_NO_NODE_ID` for IPsec (Backport PR #27394, Upstream PR #27184, @pchaigno)
+* docs: Fix config option for spelling filters (Backport PR #27660, Upstream PR #27537, @qmonnet)
+* docs: Fix Documentation Makefile to make Helm reference updates compatible with macOS (Backport PR #27660, Upstream PR #27495, @ishuar)
+* docs: Harmonise references to Cilium Slack (Backport PR #27832, Upstream PR #27346, @qmonnet)
+* docs: Have Makefile print generated image tags when running with V=0 (Backport PR #27394, Upstream PR #27250, @qmonnet)
+* docs: update L7 traffic CiliumClusterwideEnvoyConfig example (Backport PR #27660, Upstream PR #27409, @tanjunchen)
+* docs: Update the microservices-demo link (Backport PR #27934, Upstream PR #27814, @haiyuewa)
+* Update Cilium certgen from v0.1.8 to v0.1.9 (Backport PR #27660, Upstream PR #27511, @rolinh)
+
+**Other Changes:**
+* [1.12] test: add namespace name in pod metadata test (#28034, @nebril)
+* doc: Migrate to .readthedocs.yaml configuration file v2 (#27569, @doniacld)
+* install: Update image digests for v1.12.13 (#27501, @asauber)
+
 ## v1.12.13
 
 Summary of Changes

Documentation/concepts/kubernetes/compatibility-table.rst

@@ -138,6 +138,8 @@
 +-----------------+----------------+
 | v1.12.12        | 1.25.7         |
 +-----------------+----------------+
+| v1.12.13        | 1.25.7         |
++-----------------+----------------+
 | v1.12           | 1.25.7         |
 +-----------------+----------------+
 | latest / master | 1.26.9         |

VERSION

@@ -1 +1 @@
-1.12.13
+1.12.14

install/kubernetes/Makefile.digests

@@ -2,12 +2,12 @@
 # Copyright 2023 Authors of Cilium
 # SPDX-License-Identifier: Apache-2.0
 
-export CILIUM_DIGEST := "sha256:4d19b0b809889debc768fc20d9eb2b53e2ff60d45be639c2e898923eeb124e80"
-export CLUSTERMESH_APISERVER_DIGEST := "sha256:b2e35ca950680fe9a431d8b3e6c4fe1014497ccb7ba48437915850e16c1fd1e1"
-export DOCKER_PLUGIN_DIGEST := "sha256:08f4ab574ea2bbbc49f24c8ce7fb3cd4509eff4c7c82619610e0ff5079cb2046"
-export HUBBLE_RELAY_DIGEST := "sha256:9b7fc17534514342b12ee9a7ed05084d1f933028d778eb5173c7f0f0aa494414"
-export OPERATOR_ALIBABACLOUD_DIGEST := "sha256:f53cc108451a3a57e5733c6bcd07950fc1e9f3c36ea8300f271f6c088a073e87"
-export OPERATOR_AWS_DIGEST := "sha256:fd95a5ff57718809e1ccf3555d98b5c646e003e5de4a2da11775aa74ef1bafb8"
-export OPERATOR_AZURE_DIGEST := "sha256:7a79de4cad736611e3e24138012b1d9c9f47a8d672dc08bd1e65ee0ef0661149"
-export OPERATOR_GENERIC_DIGEST := "sha256:4a7387684297f5072f0933331696c5d89954c35d30669aca0f5d92c2294fff37"
-export OPERATOR_DIGEST := "sha256:a37c66f243a2b7555aeb6f2ab59e69eb9384a50446a3818fe0225dde4876d9ca"
+export CILIUM_DIGEST := ""
+export CLUSTERMESH_APISERVER_DIGEST := ""
+export DOCKER_PLUGIN_DIGEST := ""
+export HUBBLE_RELAY_DIGEST := ""
+export OPERATOR_ALIBABACLOUD_DIGEST := ""
+export OPERATOR_AWS_DIGEST := ""
+export OPERATOR_AZURE_DIGEST := ""
+export OPERATOR_GENERIC_DIGEST := ""
+export OPERATOR_DIGEST := ""

install/kubernetes/cilium/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: cilium
 displayName: Cilium
 home: https://cilium.io/
-version: 1.12.13
-appVersion: 1.12.13
+version: 1.12.14
+appVersion: 1.12.14
 kubeVersion: ">= 1.16.0-0"
 icon: https://cdn.jsdelivr.net/gh/cilium/cilium@v1.12/Documentation/images/logo-solo.svg
 description: eBPF-based Networking, Security, and Observability