Prepare for release v1.18.1

Signed-off-by: Cilium Release Bot <[email protected]>

Author: Cilium Release Bot

AUTHORS

@@ -160,6 +160,7 @@ Brandon Ewing                           [email protected]
 Brandon McNama                          [email protected]
 Brian Payne                             [email protected]
 Brian Topping                           [email protected]
+brlbil                                  [email protected]
 Bruno Miguel Custódio                   [email protected]
 Bryan Stenson                           [email protected]
 bzsuni                                  [email protected]
@@ -569,6 +570,7 @@ Liz Rice                                [email protected]
 log1cb0mb                               [email protected]
 logica0419                              [email protected]
 Loïc Blot                               [email protected]
+lomackie                                [email protected]
 LongHui Li                              [email protected]
 loomkoom                                [email protected]
 Lorenz Bauer                            [email protected]
@@ -822,6 +824,7 @@ renyunkang                              [email protected]
 Reza Abbasalipour                       [email protected]
 Richard Lavoie                          [email protected]
 Richard Tweed                           [email protected]
+Rich Theobald                           [email protected]
 Rick Rackow                             [email protected]
 Ricky Ho                                [email protected]
 Rio Kierkels                            [email protected]

CHANGELOG.md

@@ -1,5 +1,74 @@
 # Changelog
 
+## v1.18.1
+
+Summary of Changes
+------------------
+
+**Minor Changes:**
+* Add `kernel_version`, `endpoint_routes_enabled`, `strict_mode_enabled` and `kubernetes_version` feature metrics. (Backport PR cilium/cilium#41078, Upstream PR cilium/cilium#41003, @aanm)
+* eni: improve logging and speed up ipam reconciliation in case of node scale-downs (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40852, @marseel)
+* kvstore: Cilium Agent no longer fails health-check if operator is unavailable (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40920, @marseel)
+* operator: CRDs are updated in series instead of in parallel now during Cilium upgrades. This should lower the pressure on the k8s control plane (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40322, @marseel)
+
+**Bugfixes:**
+* Add missing safeguards to topology-aware routing: use all backends when no suitable one matching the zone hints are found or a backend exists without a zone hint. (cilium/cilium#41116, @joamaki)
+* aws/eni: Don't use subnet tags to filter ENIs for GC (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40656, @HadrienPatte)
+* clustermesh: fix regression possibly causing cross-cluster connections disruption if the clustermesh-apiserver is restarted at the same time as Cilium agents. (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40786, @giorio94)
+* clustermesh: fix regression preventing global services with unnamed ports from including remote backends (Backport PR cilium/cilium#40865, Upstream PR cilium/cilium#40848, @giorio94)
+* Fix bug where the presence of a label called "ingress" causes incorrect assignment of identities to workloads, affecting policy enforcement. (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40791, @christarazi)
+* Fix skipping of LoadBalancer services when IPMode is not set to VIP (KEP-1860) (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40915, @joamaki)
+* fix(GH-37724): Sync policies on startup (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40357, @anubhabMajumdar)
+* fix: create policy snapshot only for sdp (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40785, @vipul-21)
+* Fixes a bug where the Cilium agent may segfault when starting. (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40824, @squeed)
+* Fixes an error where the Ingress controller, when run in host network, created an invalid Service. (Backport PR cilium/cilium#41078, Upstream PR cilium/cilium#40232, @rtheobald)
+* helm: Create envoy-config ConfigMap for preflight (Backport PR cilium/cilium#41078, Upstream PR cilium/cilium#40875, @sayboras)
+* install/kubernetes: fix clustermesh-apiserver extraEnv (Backport PR cilium/cilium#41078, Upstream PR cilium/cilium#41021, @aanm)
+* loadbalancer: Fix backend state in REST API (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40780, @mhofstetter)
+
+**CI Changes:**
+* .github/actions: only upload files with features-tested prefix (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40975, @aanm)
+* Add TESTOWNERS file (cilium/cilium#40864, @joestringer)
+* ci: Add Cleanup Disk space step into conformance-runtime (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40973, @rastislavs)
+* ci: Fix CI-Fuzz Build failures (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40728, @lomackie)
+* ci: Reuse connectivity test flags in proxy-embedded (Backport PR cilium/cilium#41078, Upstream PR cilium/cilium#41036, @joestringer)
+* endpoint: Avoid unnecessarily logging a warning during endpoint deletion (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40927, @christarazi)
+* Fix GKE cluster creation failures when branch names exceed 63-byte label limit by implementing automatic truncation with hash-based uniqueness preservation. (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40725, @pillai-ashwin)
+* Improved test failure attribution on stable branches by using TESTOWNERS files to route failures to appropriate code quality teams rather than generic CI infrastructure teams. (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40776, @pillai-ashwin)
+* ipsec: fix privileged tests (Backport PR cilium/cilium#41078, Upstream PR cilium/cilium#41006, @smagnani96)
+* tools/testowners: de-duplicate error logs (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40778, @tklauser)
+* workflows/ipsec: Fix leak detection for IPv6-only in e2e downgrade (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40881, @smagnani96)
+
+**Misc Changes:**
+* .github/workflows: bump build-images-base timeout to 60 minutes (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40919, @aanm)
+* .github/workflows: print open file descriptors (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40941, @aanm)
+* .github: fix removal of all files in /mnt (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40818, @aanm)
+* .github: remove all contents of /mnt in build images CI (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40814, @aanm)
+* chore(deps): update actions/download-artifact action to v5 (v1.18) (cilium/cilium#41055, @cilium-renovate[bot])
+* chore(deps): update all github action dependencies (v1.18) (cilium/cilium#40901, @cilium-renovate[bot])
+* chore(deps): update all github action dependencies (v1.18) (cilium/cilium#41056, @cilium-renovate[bot])
+* chore(deps): update all-dependencies (v1.18) (cilium/cilium#40900, @cilium-renovate[bot])
+* chore(deps): update dependency cilium/cilium-cli to v0.18.6 (v1.18) (cilium/cilium#40898, @cilium-renovate[bot])
+* chore(deps): update go to v1.24.6 (v1.18) (cilium/cilium#40993, @cilium-renovate[bot])
+* chore(deps): update stable lvh-images (v1.18) (patch) (cilium/cilium#40899, @cilium-renovate[bot])
+* chore(deps): update stable lvh-images (v1.18) (patch) (cilium/cilium#41054, @cilium-renovate[bot])
+* ci: add/change runner labels (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40972, @Artyop)
+* daemon/test: explicitly wait for identities synchronization (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40811, @giorio94)
+* docs: Remove references to v1.15 (Backport PR cilium/cilium#41078, Upstream PR cilium/cilium#41033, @joestringer)
+* Fix loadbalancer handling of backends with ClusterID set (Backport PR cilium/cilium#41078, Upstream PR cilium/cilium#40968, @giorio94)
+* Fix race condition issues (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40949, @aanm)
+* fix(deps): update module github.com/docker/docker to v28.3.3+incompatible [security] (v1.18) (cilium/cilium#40793, @cilium-renovate[bot])
+* loadbalancer: Raise default retry duration to 1 second (Backport PR cilium/cilium#41078, Upstream PR cilium/cilium#40997, @joamaki)
+* loadbalancer: Use unique for L3n4Addr (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40633, @joamaki)
+* Makefile: Fix multi codeowner detection (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40923, @joestringer)
+* Reduced memory usage by roughly 10% for large EndpointSlices by sharing identical objects. (Backport PR cilium/cilium#41078, Upstream PR cilium/cilium#40987, @joamaki)
+* values(.yaml.tmpl): Add Geneve (Class Option) to dsrDispatch paramater (Backport PR cilium/cilium#40847, Upstream PR cilium/cilium#40625, @alagoutte)
+* vendor: Bump to StateDB v0.4.5 (Backport PR cilium/cilium#40979, Upstream PR cilium/cilium#40783, @joamaki)
+
+**Other Changes:**
+* ci: reduce gke failures (cilium/cilium#41070, @brlbil)
+* install: Update image digests for v1.18.0 (cilium/cilium#40782, @cilium-release-bot[bot])
+
 ## v1.18.0
 
 Summary of Changes

Documentation/helm-values.rst

@@ -86,6 +86,8 @@
 +--------------------+----------------+
 | v1.18.0-rc.1       | 1.31.11        |
 +--------------------+----------------+
+| v1.18.0            | 1.31.11        |
++--------------------+----------------+
 | v1.18              | 1.31.11        |
 +--------------------+----------------+
 | latest / main      | 1.32.0         |

Documentation/network/kubernetes/compatibility-table.rst

@@ -1 +1 @@
-1.18.0
+1.18.1

VERSION

@@ -2,12 +2,12 @@
 # Copyright 2025 Authors of Cilium
 # SPDX-License-Identifier: Apache-2.0
 
-export CILIUM_DIGEST := "sha256:dfea023972d06ec183cfa3c9e7809716f85daaff042e573ef366e9ec6a0c0ab2"
-export CLUSTERMESH_APISERVER_DIGEST := "sha256:5df242380d6071465c5aa86c7185f582707134c19a587b70248af6c503683a69"
-export DOCKER_PLUGIN_DIGEST := "sha256:afbeae87daa20c13c85525a5e7c674b8d7f68164bf9fd17ce3e5c66cf9e1b22b"
-export HUBBLE_RELAY_DIGEST := "sha256:c13679f22ed250457b7f3581189d97f035608fe13c87b51f57f8a755918e793a"
-export OPERATOR_ALIBABACLOUD_DIGEST := "sha256:84d94fe30e22e1222279a160ff76b1453f89b8c840972153d12bb20169cf1d8e"
-export OPERATOR_AWS_DIGEST := "sha256:8869b1e91624bbd8c528addaa4e0a20d28b1f3753de0a493f622d787c7ff0974"
-export OPERATOR_AZURE_DIGEST := "sha256:3943819e0a5652f2cb64cc2e28081838de6b9b32746a9ca4f1aed34c607f8ad4"
-export OPERATOR_GENERIC_DIGEST := "sha256:398378b4507b6e9db22be2f4455d8f8e509b189470061b0f813f0fabaf944f51"
-export OPERATOR_DIGEST := "sha256:47acd4b839d7b75adaac723857e679f0aad884f3ed05eb1cc5b4c010e6dbba7f"
+export CILIUM_DIGEST := ""
+export CLUSTERMESH_APISERVER_DIGEST := ""
+export DOCKER_PLUGIN_DIGEST := ""
+export HUBBLE_RELAY_DIGEST := ""
+export OPERATOR_ALIBABACLOUD_DIGEST := ""
+export OPERATOR_AWS_DIGEST := ""
+export OPERATOR_AZURE_DIGEST := ""
+export OPERATOR_GENERIC_DIGEST := ""
+export OPERATOR_DIGEST := ""

install/kubernetes/Makefile.digests

@@ -2,8 +2,8 @@ apiVersion: v2
 name: cilium
 displayName: Cilium
 home: https://cilium.io/
-version: 1.18.0
-appVersion: 1.18.0
+version: 1.18.1
+appVersion: 1.18.1
 kubeVersion: ">= 1.21.0-0"
 icon: https://cdn.jsdelivr.net/gh/cilium/cilium@main/Documentation/images/logo-solo.svg
 description: eBPF-based Networking, Security, and Observability