chore(deps): update cilium (patch)

[renovate]

This PR contains the following updates:

Package	Update	Change
cilium/cilium	patch	1.14.13 -> 1.14.14
cilium/cilium	patch	1.15.7 -> 1.15.8

---

Release Notes

cilium/cilium (cilium/cilium)

v1.14.14: 1.14.14

Compare Source

Summary of Changes

Bugfixes:

• DNS Proxy: Allow SO_LINGER to be set to the socket to upstream (Backport PR #​33815, Upstream PR #​33592, @​gandro)
• Fix bug causing etcd upsertion/deletion events to be potentially missed during the initial synchronization, when Cilium operates in KVStore mode, or Cluster Mesh is enabled. (Backport PR #​34184, Upstream PR #​34091, @​giorio94)
• Fix rare race condition afflicting clustermesh while stopping the retrieval of the remote cluster configuration, possibly causing a deadlock (Backport PR #​33815, Upstream PR #​33735, @​giorio94)
• pkg/metrics: fix data race warning on metrics init hook. (Backport PR #​33963, Upstream PR #​33823, @​tommyp1ckles)
• Report the correct drop reason when a packet is dropped by the bpf_lxc program. (Backport PR #​31735, Upstream PR #​33551, @​julianwiedmann)
• The cilium agent will now recover from stale nodeID mappings which could occur in clusters with high node churn, possibly manifesting itself in dropped IPsec traffic. (Backport PR #​34150, Upstream PR #​33666, @​bimmlerd)

CI Changes:

• [v1.14] ci/ipsec: add missing config for patch-upgrade test with 6.6 kernel (#​33737, @​julianwiedmann)
• gha: Add http client timeout in Ingress (Backport PR #​33815, Upstream PR #​33683, @​sayboras)
• gha: add spot input to setup-eks-cluster action (#​33848, @​giorio94)
• gha: don't fail if all cloud provider matrix entries are filtered out (Backport PR #​33963, Upstream PR #​33819, @​giorio94)
• gha: ensure that helm values.schema.json is not accidentally backported (Backport PR #​33963, Upstream PR #​33845, @​giorio94)
• gha: lint absence of trailing spaces in workflow files (Backport PR #​34150, Upstream PR #​33908, @​giorio94)
• gha: simplify the call-backport-label-updater workflow (Backport PR #​33963, Upstream PR #​33934, @​giorio94)
• test: use cgr.dev/chainguard/busybox:latest instead of docker.io image. (Backport PR #​34150, Upstream PR #​34004, @​tommyp1ckles)
• workflow: Use per-tunnel keys for the IPsec upgrade test (Backport PR #​34150, Upstream PR #​33769, @​pchaigno)

Misc Changes:

• [v1.14] Update Docker dependency (#​34189, @​ferozsalam)
• chore(deps): update all github action dependencies (v1.14) (#​34054, @​cilium-renovate[bot])
• chore(deps): update all github action dependencies (v1.14) (#​34171, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.14) (#​33651, @​cilium-renovate[bot])
• chore(deps): update all-dependencies (v1.14) (#​34052, @​cilium-renovate[bot])
• chore(deps): update cilium/little-vm-helper action to v0.0.19 (v1.14) (#​33800, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/cilium-cli to v0.16.13 (v1.14) (#​33801, @​cilium-renovate[bot])
• chore(deps): update dependency cilium/hubble to v1 (v1.14) (#​34055, @​cilium-renovate[bot])
• chore(deps): update go to v1.22.6 (v1.14) (#​34264, @​cilium-renovate[bot])
• daemon/ipam: don't swallow parse error of CIDR (Backport PR #​33815, Upstream PR #​33283, @​bimmlerd)
• doc: update slack channel reference (Backport PR #​34150, Upstream PR #​34044, @​Huweicai)
• docs,LRP: Add steps to restart agent and operator pods and update feature roadmap status (Backport PR #​33815, Upstream PR #​33655, @​aditighag)
• docs: Extend LRP guide with troubleshooting section (Backport PR #​33815, Upstream PR #​33373, @​aditighag)
• docs: remove mention of outdated clustermesh + L7 policies + tunnel limitation (Backport PR #​33815, Upstream PR #​33626, @​giorio94)
• docs: Update LVH VM image pull instructions (Backport PR #​33815, Upstream PR #​33621, @​brb)
• Documentation: Add --set cni.exclusive=false for Azure Chain Mode (Backport PR #​33815, Upstream PR #​33708, @​Mais316)
• helm: Allow socket linger timeout to be set to zero (Backport PR #​33963, Upstream PR #​33887, @​gandro)
• renovate: onboard etcd image used in integration tests (Backport PR #​33815, Upstream PR #​33679, @​giorio94)

Other Changes:

• [v1.14] ci: use base and head SHAs from context in lint-build-commits workflow (#​34268, @​tklauser)
• [v1.14] Revert "docs: Update LRP feature status" (#​34239, @​ysksuzuki)
• chore(deps): update go to v1.22.5 (#​34073, @​YutaroHayakawa)
• Fix IPSec XfrmInStateProtoError errors on agent restart in cluster pool IPAM mode (#​34030, @​dylandreimerink)
• install: Update image digests for v1.14.13 (#​33746, @​cilium-release-bot[bot])

Docker Manifests

cilium

docker.io/cilium/cilium:v1.14.14@​sha256:43d664501afbf35496e494dae0c5a7f8680a51ed9084997bea9c64bf4451a637
quay.io/cilium/cilium:v1.14.14@​sha256:43d664501afbf35496e494dae0c5a7f8680a51ed9084997bea9c64bf4451a637

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.14.14@​sha256:43171d3f988ffa7b5ef58b7f329bab77a5382c620b56ed9a64909e4358174135
quay.io/cilium/clustermesh-apiserver:v1.14.14@​sha256:43171d3f988ffa7b5ef58b7f329bab77a5382c620b56ed9a64909e4358174135

docker-plugin

docker.io/cilium/docker-plugin:v1.14.14@​sha256:8f4722b3fc3b64438065eeb8d4a003f8166032bf2bc1bad0480495cd7f9feef2
quay.io/cilium/docker-plugin:v1.14.14@​sha256:8f4722b3fc3b64438065eeb8d4a003f8166032bf2bc1bad0480495cd7f9feef2

hubble-relay

docker.io/cilium/hubble-relay:v1.14.14@​sha256:6fdad9d7ce64efbb966745005a2060223d9677cc4407177171b865691ab00aac
quay.io/cilium/hubble-relay:v1.14.14@​sha256:6fdad9d7ce64efbb966745005a2060223d9677cc4407177171b865691ab00aac

kvstoremesh

docker.io/cilium/kvstoremesh:v1.14.14@​sha256:ac7b4ddc38abfa0a27a503c7453dc8a8d4b3b1b1e785b02fda3ccbe613987c41
quay.io/cilium/kvstoremesh:v1.14.14@​sha256:ac7b4ddc38abfa0a27a503c7453dc8a8d4b3b1b1e785b02fda3ccbe613987c41

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.14.14@​sha256:2a88642e1c76548a0c4d8e8fe2facaed5f6955040bdd4729a6d1090eafde5e49
quay.io/cilium/operator-alibabacloud:v1.14.14@​sha256:2a88642e1c76548a0c4d8e8fe2facaed5f6955040bdd4729a6d1090eafde5e49

operator-aws

docker.io/cilium/operator-aws:v1.14.14@​sha256:adb1ea6a98b2715c5bed74ba4ab9fab89f6862aff462a5a05acd0d8c39d3af80
quay.io/cilium/operator-aws:v1.14.14@​sha256:adb1ea6a98b2715c5bed74ba4ab9fab89f6862aff462a5a05acd0d8c39d3af80

operator-azure

docker.io/cilium/operator-azure:v1.14.14@​sha256:4a88010d124b70ca1b1df90e0ca40bd79a99e344f72bfc821b9ef490421d0f51
quay.io/cilium/operator-azure:v1.14.14@​sha256:4a88010d124b70ca1b1df90e0ca40bd79a99e344f72bfc821b9ef490421d0f51

operator-generic

docker.io/cilium/operator-generic:v1.14.14@​sha256:0f2c8178bd20189fc9aeaa71224e6becdf71b42642209610b57390f7b798aae2
quay.io/cilium/operator-generic:v1.14.14@​sha256:0f2c8178bd20189fc9aeaa71224e6becdf71b42642209610b57390f7b798aae2

operator

docker.io/cilium/operator:v1.14.14@​sha256:8d1445bb129ccc56e6f2410369e0c9bacbb3ae9b7fde522c76734f01005e9ded
quay.io/cilium/operator:v1.14.14@​sha256:8d1445bb129ccc56e6f2410369e0c9bacbb3ae9b7fde522c76734f01005e9ded

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 5am every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.