https://cybertoolchain.io/tools/cilium-cli New releases and features in cilium-cli, tracked by The Cyber Toolchain. en Thu, 29 Oct 2026 11:37:00 GMT https://github.com/cilium/cilium-cli/releases/tag/v0.20.2 https://github.com/cilium/cilium-cli/releases/tag/v0.20.2 Thu, 29 Oct 2026 11:37:00 GMT cilium-cli adds WebSocket fallback for SPDY-rejecting proxies and applies labels to all new test namespaces⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • cilium-cli now falls back to WebSocket when a proxy rejects the SPDY upgrade, so connectivity tests work through proxies that block SPDY.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • cilium-cli now applies labels to all new test namespaces, making it easier to identify and filter test resources. Breaking changes: • The deprecated `v2alpha1` version of the BGP CRDs is removed; clusters using `v2alpha1` BGP CRDs must migrate before upgrading. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.20.0 https://github.com/cilium/cilium-cli/releases/tag/v0.20.0 Fri, 28 Aug 2026 08:26:28 GMT cilium-cli v0.20.0 adds reservedRanges for multi-pool IPAM and HTTP CONNECT support in Envoy • Adds `reservedRanges` field to `CiliumPodIPPools` for multi-pool IPAM, enabling operators to exclude specific address ranges from pool allocation. • Adds HTTP CONNECT support to the Envoy integration, enabling tunneled proxy traffic through Cilium-managed Envoy. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.19.6 https://github.com/cilium/cilium-cli/releases/tag/v0.19.6 Tue, 14 Jul 2026 22:03:20 GMT cilium-cli v0.19.6 adds table-json BGP output, hybrid routing mode support, Gateway API listenersets in sysdump, and TCPRoute/UDPRoute v1. • Adds `table-json` output format to `cilium-dbg bgp peers` and `cilium-dbg bgp routes` for machine-readable BGP state. • Includes Gateway API listenersets in `cilium sysdump` captures. • Supports `hybrid` routing mode (`routing-mode: hybrid`), dynamically choosing native routing for same-subnet traffic and tunnel encapsulation for cross-subnet traffic. • Upgrades TCPRoute and UDPRoute Gateway API resources to v1. • Bumps minimum supported Cilium version to v1.16. Breaking changes: • The minimum compatible Cilium version is now v1.16; clusters running Cilium v1.15 or older are no longer supported by this CLI version. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.19.5 https://github.com/cilium/cilium-cli/releases/tag/v0.19.5 Thu, 25 Jun 2026 08:16:05 GMT cilium-cli v0.19.5 expands sysdump coverage with Gateway API and ClusterMesh resources • Adds `CiliumGatewayClassConfig` CRD collection to sysdump for Gateway API troubleshooting • Adds Gateway API `BackendTLSPolicy` resource collection to sysdump • Captures additional operator and clustermesh-apiserver troubleshooting information in sysdump • Adds ClusterMesh endpoint slices watch and kvstoremesh wiring support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.19.5 https://github.com/cilium/cilium-cli/releases/tag/v0.19.5 Thu, 25 Jun 2026 08:16:05 GMT cilium-cli v0.19.5 adds richer sysdump capture, ClusterMesh endpoint-slice wiring, and BGP library upgrade to GoBGP v4. • Upgrades GoBGP from v3 to v4.5.0, enabling updated BGP protocol support in Cilium's BGP control plane. • Expands `sysdump` to capture additional operator and clustermesh-apiserver troubleshooting information. • Adds `CiliumGatewayClassConfig` CRD collection to sysdump for Gateway API diagnostics. • Adds Gateway API `BackendTLSPolicy` resource collection to sysdump. • Enables ClusterMesh endpoint-slice watch and kvstoremesh wiring for improved multi-cluster networking. • Disables node-init on AKS by default, aligning installation behaviour with AKS BYOCNI requirements. • Replaces BoringCrypto with upstream Go crypto libraries, changing the cryptographic backend used in the CLI binary. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.19.3 https://github.com/cilium/cilium-cli/releases/tag/v0.19.3 Wed, 20 May 2026 14:28:56 GMT cilium-cli v0.19.3 adds log-scoped connectivity checks, cleanup flag, Cluster Mesh sysdump artifacts, and L2 Announcement Policy collection. • Adds `--log-check-only-test-time` flag to connectivity tests to check only logs written after tests start, reducing false positives. • Adds `--cleanup` flag to remove connectivity test artifacts after a test run. • Adds `--exit-zero-on-failure` flag to connectivity tests to return exit code 0 even on test failure. • Sysdumps now additionally collect Cluster Mesh certificate generation artifacts. • Sysdumps now collect Cilium L2 Announcement Policies. Breaking changes: • The `enable-encryption-strict-mode`, `encryption-strict-mode-cidr`, and `encryption-strict-mode-allow-remote-node-identities` options have been removed (previously deprecated). • The `v2alpha1` `CiliumNodeConfig` API has been removed; use the `v2` API promoted in Cilium 1.16. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.19.1 https://github.com/cilium/cilium-cli/releases/tag/v0.19.1 Tue, 17 Feb 2026 09:56:48 GMT cilium-cli v0.19.1 adds a restart flag to `cilium upgrade` and CA-bundle-based cluster mesh connections. • Adds `-r`/`-restart` parameter to `cilium upgrade` for restarting components during upgrade. • Uses CA bundle to connect clusters in ClusterMesh, improving cross-cluster TLS trust handling. • Sysdump now uses label selectors for Hubble UI/Relay deployment collection, enabling more targeted diagnostics. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.18.9 https://github.com/cilium/cilium-cli/releases/tag/v0.18.9 Wed, 03 Dec 2025 04:15:44 GMT cilium-cli v0.18.9 adds TLS/mTLS for Operator Prometheus and CILIUM_NAMESPACE env var support • Adds TLS/mTLS support for the Operator Prometheus endpoint using an existing Kubernetes secret. • Allows setting the default Cilium namespace via the `CILIUM_NAMESPACE` environment variable, replacing the need to pass `--namespace` on every command. Breaking changes: • The `CiliumBGPPeeringPolicy` CRD and its agent implementation have been removed. Migrate to the `cilium.io/v2` CRDs: `CiliumBGPClusterConfig`, `CiliumBGPPeerConfig`, `CiliumBGPAdvertisement`, and `CiliumBGPNodeConfigOverride`. • Cilium v1.15 is now the minimum required version; clusters running older Cilium releases are no longer supported. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.18.8 https://github.com/cilium/cilium-cli/releases/tag/v0.18.8 Wed, 22 Oct 2025 18:11:53 GMT ClusterMesh gains per-cluster endpoint and service metrics; sysdump now captures node/pod resource usage. • Adds per-cluster metrics for ClusterMesh endpoints, global services, and MCS ServiceExport — replacing the previous single global count. • Adds node and pod resource usage collection to sysdump output. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.18.7 https://github.com/cilium/cilium-cli/releases/tag/v0.18.7 Wed, 03 Sep 2025 16:30:07 GMT cilium-cli v0.18.7 expands clustermesh CLI with multi-IP support, dict Helm values, and BGP peer data in sysdumps. • Supports more than one service IP when connecting to remote clustermesh-apiserver (excluding NodePort Services). • Adds dict format support for Helm value `clustermesh.config.clusters` when connecting clusters. • Outputs `clustermesh.config.clusters` in the new dict format automatically for clusters running Cilium >= 1.20. • Includes BGP remote peer capabilities in sysdump output. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.18.6 https://github.com/cilium/cilium-cli/releases/tag/v0.18.6 Wed, 30 Jul 2025 21:03:45 GMT cilium-cli v0.18.6 adds node annotation cleanup on uninstall and partial BGP peer output on errors • Adds automatic removal of annotations from Kubernetes nodes during `cilium uninstall` when `clean-cilium-state: true` is set. • Prints partial output when `cilium bgp peers` encounters errors, rather than silently failing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.18.5 https://github.com/cilium/cilium-cli/releases/tag/v0.18.5 Wed, 02 Jul 2025 14:12:20 GMT cilium-cli v0.18.5 adds clustermesh policy inspection, tolerations flag for connectivity tests, and improved EKS name detection. • Adds `clustermesh inspect-policy-default-local-cluster` command to inspect default local cluster policy settings. • Adds support for `policy-default-local-cluster` option in connectivity tests. • Enables the `--tolerations` flag for all connectivity tests, not just a subset. • Adds OpenShift cluster Kind recognition to the CLI. • Includes detailed failure messages in the connectivity test JUnit report. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.18.4 https://github.com/cilium/cilium-cli/releases/tag/v0.18.4 Tue, 03 Jun 2025 23:08:46 GMT cilium-cli v0.18.4 adds VXLAN-over-IPsec, IPv6 tunnel underlay, IPv6 egress gateway policies, and promotes CiliumLoadBalancerIPPool to v2 API. • Adds VXLAN-in-IPsec (VinE) support, enabling encrypted VXLAN tunnels via IPsec. • Supports IPv6 as a tunneling underlay for overlay networking. • Adds support for IPv6 egress gateway policies. • Promotes `CiliumLoadBalancerIPPool` CRD to v2 API version. • Adds TLS SNI ServerNames validation in policy configuration. • New clusters created in ENI mode no longer masquerade pod traffic to the external world. • Removes tunnel map references from `cilium-dbg`, `cilium status`, and bugtool now that pod CIDRs are stored in the ipcache map. • Allows `BINDIR` environment variable to be dynamically configured for the CLI install path. • Migrates from `corev1.Endpoints` to `discoveryv1.EndpointSlice` internally. • Drops support for Cilium versions older than v1.14. Breaking changes: • Cilium v1.14 is now the minimum required version; clusters running older Cilium releases will not be supported. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.18.3 https://github.com/cilium/cilium-cli/releases/tag/v0.18.3 Thu, 03 Apr 2025 21:25:25 GMT cilium-cli v0.18.3 adds kernel profiling during perf tests, standalone perf testing, and IPSec key rotation validation. • Adds support to capture kernel profiles during performance testing. • Enables performance tests to run independently of Cilium, removing the Cilium dependency. • Rejects IPSec key rotation attempts when key lengths mismatch, preventing IPv6 disruptions. • Cilium CLI releases are now available as Docker images on quay.io/repository/cilium/cilium-cli. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.18.2 https://github.com/cilium/cilium-cli/releases/tag/v0.18.2 Fri, 07 Mar 2025 22:38:59 GMT cilium-cli v0.18.2 adds egress gateway perf testing, cross-namespace sysdump selectors, and new image/log-owner filters. • Extends `cilium connectivity perf` to support egress gateway performance testing. • Relaxes `--extra-label-selectors` in `cilium sysdump` to target all namespaces, not just a single one. • Adds a parameter to print the container images used by Cilium components. • Supports filtering by `--log-code-owners` in CLI log output. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.18.1 https://github.com/cilium/cilium-cli/releases/tag/v0.18.1 Thu, 06 Mar 2025 23:55:54 GMT cilium-cli v0.18.1 adds a kubeconfig option to the GitHub Actions integration. • Adds `--kubeconfig` option to the `gh` command, enabling users to specify a custom kubeconfig path. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.24 https://github.com/cilium/cilium-cli/releases/tag/v0.16.24 Wed, 29 Jan 2025 23:09:09 GMT cilium-cli v0.16.24 adds Tetragon sysdump capture, IP-family-scoped connectivity tests, and Helm max-history flag support. • Adds Tetragon Helm data collection to `cilium sysdump` output. • Collects Cilium Agent logs from crashing, not-ready, and restarted pods during sysdump. • Adds `--max-history` flag to Helm-based CLI commands. • Adds `--ip-family` restriction for connectivity tests to scope tests to specific IP families. • Significantly reduces memory usage during `cilium sysdump` collection, enabling sysdumps on larger clusters. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.22 https://github.com/cilium/cilium-cli/releases/tag/v0.16.22 Wed, 11 Dec 2024 09:45:27 GMT cilium upgrade now supports `--reset-then-reuse-values` flag to control Helm value merging behavior • Adds `--reset-then-reuse-values` flag to `cilium upgrade` to explicitly control Helm value reset and reuse logic Breaking changes: • The default behavior for `cilium upgrade` has changed such that Helm values will be reset and then reused; previous behavior can only be restored by setting `--reset-then-reuse-values=false` or explicitly using `--reuse-values`/`--reset-values`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.21 https://github.com/cilium/cilium-cli/releases/tag/v0.16.21 Fri, 06 Dec 2024 11:49:28 GMT cilium-cli v0.16.21 adds kubectl impersonation flags, AWS AL2023 support, and a new ipcache lookup by label/CIDR. • Adds `--as` and `--as-group` flags for kubectl-style impersonation across cilium-cli commands. • Adds AWS AL2023 platform support for cilium-cli installs. • New CLI option to display ipcache information filtered by labels or CIDR. • Default Cilium version to install is now derived from cilium/charts source instead of being injected at compile time via `-ldflags`. Breaking changes: • Support for running the Cilium KVStore in pod network is disabled; setups relying on this deprecated mode will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.20 https://github.com/cilium/cilium-cli/releases/tag/v0.16.20 Wed, 06 Nov 2024 17:19:19 GMT cilium-cli v0.16.20 adds --kubeconfig flag, native Hubble port-forwarding, parallel clustermesh connections, and multicast connectivity tests. • Adds `--kubeconfig` flag to explicitly specify a kubeconfig file for all CLI commands. • Replaces kubectl-based Hubble port-forwarding with a native implementation built into the Cilium CLI. • Deploys clustermesh connections in parallel, speeding up multi-cluster setup. • Adds multicast connectivity test to the connectivity test suite. • Adds `config.cilium.io` annotation display to `cilium-cli status` configmap output. • Increases `hubble-event-queue-size` for multicluster deployments. • Expands sysdump collection with miscellaneous improvements. • `cilium-cli status` now fails fast on terminal errors instead of waiting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.19 https://github.com/cilium/cilium-cli/releases/tag/v0.16.19 Wed, 02 Oct 2024 00:54:21 GMT cilium-cli v0.16.19 improves clustermesh multi-context connections and adds BGPv2 CRD collection to sysdump • Improves `--destination-context` option for `clustermesh connect` to support connecting multiple remote contexts in one operation. • Collects BGPv2 CRD resources automatically during `sysdump` captures. • Skips Kubernetes client creation when `--client` is specified in the `version` command, enabling faster offline version checks. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.16 https://github.com/cilium/cilium-cli/releases/tag/v0.16.16 Tue, 20 Aug 2024 08:20:41 GMT cilium-cli v0.16.16 adds a test namespace parameter for connectivity tests and concurrent test run support. • Adds a `--test-namespace` parameter to connectivity tests, enabling control over which namespace tests run in. • Supports concurrent connectivity test execution via hooks, enabling parallel test workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.14 https://github.com/cilium/cilium-cli/releases/tag/v0.16.14 Wed, 31 Jul 2024 21:35:02 GMT cilium-cli v0.16.14 adds a multicast subcommand, new L7/LRP connectivity tests, BGP timer assertions, and a single JUnit report output. • Adds `multicast` subcommand for managing multicast networking. • New `echo-ingress-l7-via-hostport-with-encryption` connectivity test case (requires Cilium ≥ 1.16.0). • New `local-redirect-policy-with-node-dns` connectivity test case. • Connectivity tests now assert BGP timer intervals in BGP connectivity tests. • Sysdump now gathers `gops` data from the `cilium-operator`. • Connectivity test runs now produce a single consolidated JUnit report. Breaking changes: • The `--test-namespace` flag now always appends a concurrent group number suffix: the default test namespace is `cilium-test-1` instead of `cilium-test`, even when `--test-concurrency` is set to 1. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.13 https://github.com/cilium/cilium-cli/releases/tag/v0.16.13 Thu, 11 Jul 2024 18:18:26 GMT Adds port range connectivity tests and `--disable-check` flag to upgrade • Adds `--disable-check` flag to the `cilium upgrade` command to skip pre-flight health checks during upgrades. • Adds support for port range tests in connectivity testing to validate traffic across multiple ports simultaneously. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.12 https://github.com/cilium/cilium-cli/releases/tag/v0.16.12 Wed, 10 Jul 2024 00:34:38 GMT Adds `--disable-check` flag to bypass validation and supports BGP CP connectivity testing • `action: Use github.action_path when accessing cilium.sh` • BGP CP connectivity tests Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.11 https://github.com/cilium/cilium-cli/releases/tag/v0.16.11 Thu, 27 Jun 2024 15:55:54 GMT Adds `--container` option to cluster deployment actions and new pod-to-pod-no-frag connectivity check • Adds a new `--container` flag to `cilium cluster deploy` (and related cluster management commands) to run cilium-cli inside a container instead of natively on the host, simplifying dependency management for GKE, EKS, AKS, and external workloads deployments • Adds a new connectivity test `pod-to-pod-no-frag` that checks for MTU misconfigurations by sending non-fragmented packets between pods Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.10 https://github.com/cilium/cilium-cli/releases/tag/v0.16.10 Fri, 07 Jun 2024 23:34:12 GMT cilium-cli v0.16.10 adds egress-gateway-with-l7-policy and local redirect policy connectivity tests • Adds `egress-gateway-with-l7-policy` test case for validating Layer 7 policies with egress gateways in connectivity testing Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.8 https://github.com/cilium/cilium-cli/releases/tag/v0.16.8 Wed, 29 May 2024 22:13:47 GMT Adds concurrent connectivity tests and expanded ClusterMesh sysdump data • Expands `sysdump` output to include additional ClusterMesh troubleshooting information and KVStoreMesh status • Improves ClusterMesh status reporting by displaying KVStoreMesh information directly in the CLI output Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.7 https://github.com/cilium/cilium-cli/releases/tag/v0.16.7 Mon, 06 May 2024 14:55:01 GMT cilium-cli v0.16.7 improves coverage for Ingress service connectivity checks • Improves coverage of `Ingress` service in the `connectivity check` command Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.5 https://github.com/cilium/cilium-cli/releases/tag/v0.16.5 Fri, 26 Apr 2024 17:20:55 GMT cilium-cli v0.16.5 adds host firewall tests to connectivity suite and enriches encryption status output with IPsec details • `connectivity test` now includes host firewall tests to verify endpoint-to-host connectivity policies. • `encryption status` output is enriched with IPsec details, providing deeper visibility into IPSec tunnel state. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.4 https://github.com/cilium/cilium-cli/releases/tag/v0.16.4 Thu, 28 Mar 2024 18:15:39 GMT cilium-cli v0.16.4 adds support for non-default Helm release names and fully-qualified DNS external targets • Add `--helm-release-name` flag to enable Cilium CLI with a non-default Helm release name • Support fully-qualified domain names (FQDNs) as external targets Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.16.3 https://github.com/cilium/cilium-cli/releases/tag/v0.16.3 Mon, 18 Mar 2024 19:41:48 GMT Add explicit affinity configuration for nodes without Cilium • Adds explicit 'nodes without cilium' affinity configuration for both initial installation and subsequent upgrades Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.23 https://github.com/cilium/cilium-cli/releases/tag/v0.15.23 Fri, 16 Feb 2024 00:11:38 GMT cilli v0.15.23 adds IPsec key management commands and AWS OIDC auth. • Adds `cilium ipsec key rotate` command for rotating IPsec keys with optional algorithm changes • Adds `cilium ipsec key status` command to display current IPsec key status • Enables AWS OIDC authentication instead of static access keys for cloud integrations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.22 https://github.com/cilium/cilium-cli/releases/tag/v0.15.22 Thu, 01 Feb 2024 22:33:59 GMT Adds `encryption status` subcommand to display encryption configuration and state. • Adds `encryption status` sub command to display the current cluster encryption state. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.21 https://github.com/cilium/cilium-cli/releases/tag/v0.15.21 Wed, 31 Jan 2024 01:29:12 GMT cilium-cli v0.15.21 adds `bgp routes` CLI command to retrieve BGP routes from the cluster • Adds `bgp routes` subcommand for retrieving Border Gateway Protocol (BGP) routes Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.20 https://github.com/cilium/cilium-cli/releases/tag/v0.15.20 Wed, 10 Jan 2024 22:24:45 GMT cilium-cli v0.15.20 adds clustermesh status support for external kvstores and enables connectivity tests without a Cilium node. • `cilium clustermesh status` now works correctly with external key-value stores (e.g., etcd) instead of only Kubernetes configmaps • Connectivity tests can now run on nodes that do not have Cilium installed, enabling mixed-cluster or partial-deployment testing scenarios Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.19 https://github.com/cilium/cilium-cli/releases/tag/v0.15.19 Mon, 18 Dec 2023 13:32:03 GMT cilium v0.15.19 introduces `cilium connectivity check` with third client support • `cilium connectivity check` adds a third client scheduled on a different node to validate cross-node policy enforcement Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.17 https://github.com/cilium/cilium-cli/releases/tag/v0.15.17 Tue, 05 Dec 2023 18:35:15 GMT cilium-cli v0.15.17 adds a timeout flag for connectivity test suites. • Introduces `--timeout` flag for the `cilium connectivity test` command to limit execution time. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.15 https://github.com/cilium/cilium-cli/releases/tag/v0.15.15 Tue, 28 Nov 2023 05:13:34 GMT cilium-cli v0.15.15 adds max-connected-clusters support, latency measurement in connectivity tests, and --nodes-without-cilium with SPIRE • Connectivity tests output includes counters for test results via `connectivity/check` improvements • `--nodes-without-cilium` flag now works with SPIRE for node filtering Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.14 https://github.com/cilium/cilium-cli/releases/tag/v0.15.14 Thu, 16 Nov 2023 16:43:49 GMT sysdump now collects serial trace data and SPIRE server entries; connectivity tests gain control plane node and ingress controller support • `sysdump` tasks now support "serial" execution mode to enable sequential trace data collection workflows Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.13 https://github.com/cilium/cilium-cli/releases/tag/v0.15.13 Mon, 06 Nov 2023 23:22:53 GMT Adds WG encap detection for Kubernetes >= 1.15 • Detects WireGuard encapsulation on Kubernetes clusters version 1.15 and above. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.12 https://github.com/cilium/cilium-cli/releases/tag/v0.15.12 Thu, 02 Nov 2023 16:22:22 GMT cilium-cli v0.15.12 adds --set flag (replacing --helm-set), skips build in actions, and improves encryption tests • `--set` replaces `--helm-set` for passing Helm values to the CLI's helm operations. • `action` now supports skipping the CLI build step via a new configuration option. • `check` command now uses a more generic `CurlCommandWithOutput` internally, improving reliability of connectivity tests. • Encryption-related connectivity tests are now more reliable, reducing false negatives. Breaking changes: • The `--helm-set` flag is removed; use `--set` instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.11 https://github.com/cilium/cilium-cli/releases/tag/v0.15.11 Mon, 16 Oct 2023 16:07:00 GMT cilium-cli v0.15.11 adds Gateway API detection to sysdump and picks up SPIRE status messages • `sysdump` now detects if Gateway API support is enabled in the cluster Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.9 https://github.com/cilium/cilium-cli/releases/tag/v0.15.9 Wed, 04 Oct 2023 22:42:26 GMT cilium-cli v0.15.9 adds cluster-mesh service annotation support, CIDR-referencing connectivity tests, and expanded sysdump collection. • `clustermesh` now supports Kubernetes service annotations for mesh configuration • `connectivity` checks can now reference nodes by CIDR in test definitions • `sysdump` task collects Tetragon PodInfo custom resources • `sysdump` task caches Cilium pods and `cilium-config` ConfigMap data • `sysdump` defaults to specific selectors for log collection tasks Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.8 https://github.com/cilium/cilium-cli/releases/tag/v0.15.8 Tue, 12 Sep 2023 18:52:14 GMT cilium-cli v0.15.8 adds Kubernetes, operator, and clustermesh metrics to sysdump for deeper troubleshooting. • `cilium sysdump` now scrapes Kubernetes API metrics during collection • `cilium sysdump` collects Cilium operator and CilmeshClusterService (clustermesh) metrics Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.7 https://github.com/cilium/cilium-cli/releases/tag/v0.15.7 Thu, 31 Aug 2023 17:11:04 GMT cilium-cli v0.15.7 adds `helm get values` integration to sysdump for troubleshooting • `sysdump` command now includes Helm release values via `helm get values` for easier debugging of Cilium deployments Breaking changes: • The deprecated `kube-proxy-replacement` CLI flag has been removed; use the standard replacement flags instead Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.5 https://github.com/cilium/cilium-cli/releases/tag/v0.15.5 Wed, 02 Aug 2023 20:58:48 GMT cilium-cli v0.15.5 improves clustermesh status and ping connectivity checks • Improves the `clustermesh status` command output with better status reporting. • Adds special inconclusive result treatment for the `ping` connectivity check. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.15.2 https://github.com/cilium/cilium-cli/releases/tag/v0.15.2 Wed, 12 Jul 2023 14:19:53 GMT Adds SetupAndValidate() hook and collects node init Pod logs in sysdump for Cilium CLI v0.15.2 • Adds the SetupAndValidate() hook to the hooks interface, allowing pre-execution validation or setup logic before CLI commands run • Extends `sysdump` to collect node init Pod logs and DaemonSet manifests during troubleshooting Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.14.8 https://github.com/cilium/cilium-cli/releases/tag/v0.14.8 Fri, 23 Jun 2023 16:47:20 GMT cilium-cli v0.14.8 adds `--enable-kvstoremesh`, a new Helm flag for Clustermesh installs and a disconnect command. • Adds `--enable-kvstoremesh` flag to `clustermesh enable` to control KVStoreMesh deployment. • Adds a new `helm clustermesh disconnect` subcommand to manage Clustermesh Helm releases. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli https://github.com/cilium/cilium-cli/releases/tag/v0.14.7 https://github.com/cilium/cilium-cli/releases/tag/v0.14.7 Wed, 14 Jun 2023 17:33:02 GMT cilium-cli v0.14.7 adds custom test annotations, node affinity for Operator install, and clustermesh connect support in Helm mode • `install` command now supports passing node affinity configuration to the Cilium Operator via the `operator.nodeAffinity` Helm value. • `connectivity check` allows adding custom annotations to the test deployment pods for targeted testing scenarios. • `status` command now prints the Helm chart version when running in Helm mode, aiding in deployment verification. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cilium-cli