chore(deps): update dependency cilium/cilium-cli to v0.17.0

[joestringer]

This PR contains the following updates:

Package	Type	Update	Change
cilium/cilium-cli		patch	v0.16.24 -> v0.17.0
cilium/cilium-cli	action	patch	v0.16.24 -> v0.17.0

---

Release Notes

cilium/cilium-cli (cilium/cilium-cli)

v0.17.0

Compare Source

⚠️ A Breaking Change ⚠️

Cilium CLI removes the External workloads feature in this release (#37418). More specifically, it removes:

• cilium clustermesh external-workload command.
• --enable-external-workloads flag in cilium clustermesh enable command.
• Connectivity tests related to external workloads.
• Sysdump support for external workloads.

Cilium community plans to stop maintaining the external workload feature in all the stable release branches (v1.15, v1.16, and v1.17), and the feature will be removed in v1.18 release.

What's Changed

Minor Changes:

• Cilium CLI IPsec fixes (Cilium CLI IPsec fixes #37018, @viktor-kurchenko)
• cli: Improve fetching of Cilium component logs in failure scenarios (cli: Improve fetching of Cilium component logs in failure scenarios #37160, @joestringer)
• Remove external-workload feature from Cilium and cilium-cli. Use previous version of cilium-cli if needed to provision unsupported external-workload clusters. (Remove External Workload #37418, @brb)

CI Changes:

• cilium-cli/connectivity: additionally check for container restarts (cilium-cli/connectivity: additionally check for container restarts #36299, @giorio94)
• cilium-cli: add explicit IPv6 testing to PodToK8sLocal (cilium-cli: add explicit IPv6 testing to PodToK8sLocal #37461, @saiaunghlyanhtet)
• cilium-cli: extend no-interrupted-connections to test NodePort from outside (cilium-cli: extend no-interrupted-connections to test NodePort from outside #37294, @ysksuzuki)
• cilium-cli: Fix GITHUB_WORKFLOW_REF parsing (cilium-cli: Fix GITHUB_WORKFLOW_REF parsing #37686, @joestringer)
• CLI: Attribute tests to codeowners (CLI: Attribute tests to codeowners #37027, @joestringer)
• Update stable release to v0.16.24 by @michi-covalent in Update stable release to v0.16.24 cilium-cli#2921
• chore(deps): update all github action dependencies (patch) by @renovate in chore(deps): update all github action dependencies (patch) cilium-cli#2922
• chore(deps): update ubuntu:24.04 docker digest to 7229784 by @renovate in chore(deps): update ubuntu:24.04 docker digest to 7229784 cilium-cli#2923
• chore(deps): update golangci/golangci-lint-action action to v6.3.0 by @renovate in chore(deps): update golangci/golangci-lint-action action to v6.3.0 cilium-cli#2925
• Remove v0.15.22 from the release list by @michi-covalent in Remove v0.15.22 from the release list cilium-cli#2930
• chore(deps): update docker/setup-buildx-action action to v3.9.0 by @renovate in chore(deps): update docker/setup-buildx-action action to v3.9.0 cilium-cli#2928
• chore(deps): update golangci/golangci-lint-action action to v6.3.1 by @renovate in chore(deps): update golangci/golangci-lint-action action to v6.3.1 cilium-cli#2929
• chore(deps): update dependency go to v1.23.6 by @renovate in chore(deps): update dependency go to v1.23.6 cilium-cli#2927
• chore(deps): update aws-actions/configure-aws-credentials action to v4.1.0 by @renovate in chore(deps): update aws-actions/configure-aws-credentials action to v4.1.0 cilium-cli#2932
• chore(deps): update golangci/golangci-lint-action action to v6.3.2 by @renovate in chore(deps): update golangci/golangci-lint-action action to v6.3.2 cilium-cli#2931
• chore(deps): update golangci/golangci-lint docker tag to v1.64.2 by @renovate in chore(deps): update golangci/golangci-lint docker tag to v1.64.2 cilium-cli#2933
• .github: Pass through GITHUB_WORKFLOW_REF by @joestringer in .github: Pass through GITHUB_WORKFLOW_REF cilium-cli#2936
• chore(deps): update golangci/golangci-lint-action action to v6.4.0 by @renovate in chore(deps): update golangci/golangci-lint-action action to v6.4.0 cilium-cli#2938
• ci: avoid using deprecated tls.secretsBackend flag by @tklauser in ci: avoid using deprecated tls.secretsBackend flag cilium-cli#2934
• chore(deps): update golangci/golangci-lint docker tag to v1.64.4 by @renovate in chore(deps): update golangci/golangci-lint docker tag to v1.64.4 cilium-cli#2935
• chore(deps): update golangci/golangci-lint docker tag to v1.64.5 by @renovate in chore(deps): update golangci/golangci-lint docker tag to v1.64.5 cilium-cli#2940
• chore(deps): update dependency cilium/cilium to v1.16.7 by @renovate in chore(deps): update dependency cilium/cilium to v1.16.7 cilium-cli#2943
• chore(deps): update all github action dependencies (patch) - autoclosed by @renovate in chore(deps): update all github action dependencies (patch) - autoclosed cilium-cli#2937
• chore(deps): update dependency kubernetes-sigs/kind to v0.27.0 by @renovate in chore(deps): update dependency kubernetes-sigs/kind to v0.27.0 cilium-cli#2941
• github: Remove externalworkloads.yaml by @michi-covalent in github: Remove externalworkloads.yaml cilium-cli#2944
• chore(deps): update golangci/golangci-lint-action action to v6.5.0 by @renovate in chore(deps): update golangci/golangci-lint-action action to v6.5.0 cilium-cli#2945
• chore(deps): update docker/build-push-action action to v6.14.0 by @renovate in chore(deps): update docker/build-push-action action to v6.14.0 cilium-cli#2946
• Prepare for v0.17.0 release by @michi-covalent in Prepare for v0.17.0 release cilium-cli#2947

Misc Changes:

• chore(deps): update all-dependencies (main) (chore(deps): update all-dependencies (main) #37341, @cilium-renovate[bot])
• chore(deps): update all-dependencies (main) (chore(deps): update all-dependencies (main) #37660, @cilium-renovate[bot])
• chore(deps): update docker.io/library/golang docker tag to v1.24.0 (main) (chore(deps): update docker.io/library/golang docker tag to v1.24.0 (main) #37603, @cilium-renovate[bot])
• chore(deps): update go to v1.23.6 (main) (chore(deps): update go to v1.23.6 (main) #37495, @cilium-renovate[bot])
• cilium-cli/connectivity: ignore hubble-ui warning in no-errors-in-logs test (cilium-cli/connectivity: ignore hubble-ui warning in no-errors-in-logs test #37563, @tklauser)
• cilium-cli/sysdump: drop obsolete CiliumEgressNATPolicy entry (cilium-cli/sysdump: drop obsolete CiliumEgressNATPolicy entry #37584, @giorio94)
• cilium-cli: enable websockets for k8s exec (cilium-cli: enable websockets for k8s exec #37538, @asauber)
• cilium-cli: re-fix GITHUB_WORKFLOW_REF parsing (cilium-cli: re-fix GITHUB_WORKFLOW_REF parsing #37707, @kaworu)
• cli: Ensure EGW tests trigger failures via actions (cli: Ensure EGW tests trigger failures via actions #37649, @joestringer)
• connectivity: Add curl retry params for TLS inspection test (connectivity: Add curl retry params for TLS inspection test #37424, @sayboras)
• connectivity: Avoid hard-coded external target in warning log (connectivity: Avoid hard-coded external target in warning log #37443, @sayboras)
• Preparation to test IPv4 and IPv6 explicitly in connectivity tests (cilium-cli: Force curl to use IPv4/IPv6 when asked #37468, @gentoo-root)
• Revert "cli: Use error def of github.com/cilium/ebpf" (Revert "cli: Use error def of github.com/cilium/ebpf" #37687, @joestringer)
• test: Update negative test case for TLS SNI (test: Update negative test case for TLS SNI #37386, @sayboras)
• wireguard: introduce v2 pod-to-pod connectivity tests (ci,wireguard: introduce pod to pod v2 connectivity tests for Wireguard #37533, @ldelossa)

Full Changelog: cilium/cilium-cli@v0.16.24...v0.17.0

[joestringer]

Basic build passed, but this will be easier if renovate triggers the PR. I've initiated that process, will close this one in favor of renovate.