From 9b092a4f49717bac60c3c79cf7c2fcf7f4cac417 Mon Sep 17 00:00:00 2001
From: Ali Afsharzadeh <afsharzadeh8@gmail.com>
Date: Sat, 25 Jul 2026 10:05:53 +0330
Subject: [PATCH] Upgrade cilium from 1.19.5 to 1.19.6 (#13376)

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
---
 README.md                                           |  2 +-
 docs/CNI/cilium.md                                  |  2 +-
 roles/kubespray_defaults/defaults/main/download.yml |  4 ++--
 roles/kubespray_defaults/vars/main/checksums.yml    | 12 ++++++++++++
 4 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index 8ddf6ed7d..d7e7189bb 100644
--- a/README.md
+++ b/README.md
@@ -119,7 +119,7 @@ Note:
 - Network Plugin
   - [cni-plugins](https://github.com/containernetworking/plugins) 1.9.1
   - [calico](https://github.com/projectcalico/calico) 3.31.6
-  - [cilium](https://github.com/cilium/cilium) 1.19.5
+  - [cilium](https://github.com/cilium/cilium) 1.19.6
   - [flannel](https://github.com/flannel-io/flannel) 0.28.4
   - [kube-ovn](https://github.com/alauda/kube-ovn) 1.12.21
   - [kube-router](https://github.com/cloudnativelabs/kube-router) 2.1.1
diff --git a/docs/CNI/cilium.md b/docs/CNI/cilium.md
index 63247216e..79a0e142f 100644
--- a/docs/CNI/cilium.md
+++ b/docs/CNI/cilium.md
@@ -245,7 +245,7 @@ cilium_operator_extra_volume_mounts:
 ## Choose Cilium version
 
 ```yml
-cilium_version: "1.19.5"
+cilium_version: "1.19.6"
 ```
 
 ## Add variable to config
diff --git a/roles/kubespray_defaults/defaults/main/download.yml b/roles/kubespray_defaults/defaults/main/download.yml
index dbee5588f..68ebb37be 100644
--- a/roles/kubespray_defaults/defaults/main/download.yml
+++ b/roles/kubespray_defaults/defaults/main/download.yml
@@ -116,7 +116,7 @@ flannel_version: 0.28.4
 flannel_cni_version: 1.7.1-flannel1
 cni_version: "{{ (cni_binary_checksums['amd64'] | dict2items)[0].key }}"
 
-cilium_version: "1.19.5"
+cilium_version: "1.19.6"
 cilium_cli_version: "{{ (ciliumcli_binary_checksums['amd64'] | dict2items)[0].key }}"
 cilium_enable_hubble: false
 
@@ -239,7 +239,7 @@ cilium_operator_image_tag: "v{{ cilium_version }}"
 cilium_hubble_relay_image_repo: "{{ quay_image_repo }}/cilium/hubble-relay"
 cilium_hubble_relay_image_tag: "v{{ cilium_version }}"
 cilium_certgen_image_repo: "{{ quay_image_repo }}/cilium/certgen"
-cilium_certgen_image_tag: "v0.4.5"
+cilium_certgen_image_tag: "v0.4.6"
 cilium_hubble_ui_image_repo: "{{ quay_image_repo }}/cilium/hubble-ui"
 cilium_hubble_ui_image_tag: "v0.13.5"
 cilium_hubble_ui_backend_image_repo: "{{ quay_image_repo }}/cilium/hubble-ui-backend"
diff --git a/roles/kubespray_defaults/vars/main/checksums.yml b/roles/kubespray_defaults/vars/main/checksums.yml
index a29190c8e..9cfbe44d9 100644
--- a/roles/kubespray_defaults/vars/main/checksums.yml
+++ b/roles/kubespray_defaults/vars/main/checksums.yml
@@ -549,6 +549,12 @@ calicoctl_binary_checksums:
     3.29.0: sha256:c9c2a29a349c6f681aa79b5f5d6aee738305d95aa7f158b6217f487808758e53
 ciliumcli_binary_checksums:
   arm64:
+    0.19.6: sha256:fe8140aaaa561b7d59d8c0e7eef169c298b2d558924934c95aab8bb81382296f
+    0.19.5: sha256:5498defafc248160ca44a38be39f5ba090769ef112f9ec34a19e72dfa7e7eb25
+    0.19.4: sha256:866c86683aa63c943a94ca2af5dc2b0db3483d1c3ed8c72baeeabd13061a7e42
+    0.19.2: sha256:205ad0eba18a105e4542a5ff41fea74929f8cb4af831d35c0fac591bfe48bbf1
+    0.19.1: sha256:a0726d4f7e3ed4a86d503ce40b3d6532729393f5d850d97eae0250900a7bf537
+    0.19.0: sha256:483a80607a37f6346866a89285b1c722dae9626f8388c250c4360f3b9e0be0f9
     0.18.9: sha256:eaa2b3570d3737592ec912505a247173e25fc7bca92d16b32d72b3aca94a743f
     0.18.8: sha256:44e6dd188336b9168986945c99f8e0882ec4e54a4b6422d44d8e36ec449ba929
     0.18.7: sha256:dbaa2ab4b1969f4402adf430d6a1bd914c5ab52475ec68f50b3af6fa7fe2fecc
@@ -586,6 +592,12 @@ ciliumcli_binary_checksums:
     0.16.1: sha256:07f3f2ba4d772140e46004ee7fa239134acc27afc4f79fc301ee7037617babc1
     0.16.0: sha256:fe16bcd447fc6fe764ca75712f5832d7504845e9f782684ff09c9f52548237fe
   amd64:
+    0.19.6: sha256:65ae7592ab873acc0b242b8e679e0a0a856255e34fdd0082e7b048b6285a9842
+    0.19.5: sha256:67e59489b7ad17dea8eb8cc930435105dff3a4575643ad62567fb2c5ae80d246
+    0.19.4: sha256:98ecd554591a592b0ee32f5d73871133bcee06639619f1c032bcba339340dc26
+    0.19.2: sha256:aa25cd2542614051573008ed18adb7d697fd78e4b0345db83d1650cdaf4492de
+    0.19.1: sha256:57dd16923c6f3bbc7acfa87238fd034dff8139344a28d4650a20c9f91333540c
+    0.19.0: sha256:590ed39488371bc02e1d71ae85f1f99d7d73d2a660465dd00e32846fa7ff4734
     0.18.9: sha256:15978aaf82373b0682aa87ab217848b3fb6e3cd80adad365d34696fe92543923
     0.18.8: sha256:422940f0b7eb6eabc1e126945d1772e3f824c3f4f9fbb0df0dbbf00a271311ba
     0.18.7: sha256:7f5ff96f1793ee389ef77435a72debf122f5ec253d41418fca99d2c21472016a