86 Pull requests merged by 36 people

• test: Update negative test case for TLS SNI

  #37386 merged Feb 1, 2025

• plugins/cilium-cni: implement CNI STATUS support

  #37028 merged Jan 31, 2025

• remove stable tags from image build

  #37394 merged Jan 31, 2025

• [operator] Always generate debug symbols

  #37093 merged Jan 31, 2025

• v1.16 Backports 2025-01-31

  #37375 merged Jan 31, 2025

• test: Move the dind image to Quay to avoid rate-limiting

  #37388 merged Jan 31, 2025

• envoy: cleanup xds server initialization

  #37373 merged Jan 31, 2025

• daemon: Create NAT retries maps early on startup

  #37387 merged Jan 31, 2025

• v1.17 Backports 2025-01-31

  #37374 merged Jan 31, 2025

• ci: set --interactive=false for cilium status in delegated ipam e2e

  #37368 merged Jan 31, 2025

• cli: Improve fetching of Cilium component logs in failure scenarios

  #37160 merged Jan 31, 2025

• fix: Change CNI CHECK Error Code from 1 to 101

  #37001 merged Jan 31, 2025

• Helm: Preserve root context for .Values access

  #36939 merged Jan 31, 2025

• ces: Fix bug where stale endpoint information was injected into IPCache

  #37347 merged Jan 31, 2025

• bgpv1: Extend component test timeout

  #37370 merged Jan 31, 2025

• ci: fix curl call for metrics in smoke tests

  #37362 merged Jan 31, 2025

• gha: fix retrieval of DNS server in conformance external workloads

  #37361 merged Jan 31, 2025

• [v1.17] agent: Deprecate --enable-k8s-terminating-endpoint flag

  #37351 merged Jan 30, 2025

• fix concurrency issue related with allocator cache

  #37328 merged Jan 30, 2025

• daemon: remove deprecated no-op --k8s-watcher-endpoint-selector flag

  #37359 merged Jan 30, 2025

• cilium: Fix hashing wrt port swap on maglev

  #37353 merged Jan 30, 2025

• ipsec: Prepare XFRM rules for Encrypted Overlay with IPv6

  #37331 merged Jan 30, 2025

• [v1.17] daemon: deprecate no-op --k8s-watcher-endpoint-selector flag

  #37358 merged Jan 30, 2025

• ci: use runtime image set by env var action

  #37253 merged Jan 30, 2025

• bpf: Add unit tests for SNAT port allocation

  #37145 merged Jan 30, 2025

• deprecate cilium-docker-plugin

  #37357 merged Jan 30, 2025

• v1.17: Deprecate External Workloads

  #37349 merged Jan 30, 2025

• envoy: skip secret sync registration if l7-proxy is disabled

  #37348 merged Jan 30, 2025

• agent: defend against null pointer refs in cecManager.getEndpoint()

  #37188 merged Jan 30, 2025

• v1.16 Backports 2025-01-27

  #37278 merged Jan 30, 2025

• Fix some issues with DedupMetadata

  #37327 merged Jan 30, 2025

• chore(deps): update dependency cilium/cilium-cli to v0.16.24 (v1.15)

  #37339 merged Jan 30, 2025

• chore(deps): update dependency cilium/cilium-cli to v0.16.24 (main)

  #37336 merged Jan 30, 2025

• chore(deps): update dependency cilium/cilium-cli to v0.16.24 (v1.16)

  #37338 merged Jan 30, 2025

• chore(deps): update dependency cilium/cilium-cli to v0.16.24 (v1.17)

  #37337 merged Jan 30, 2025

• chore(deps): update dependency cilium/cilium-cli to v0.16.24 (v1.14)

  #37340 merged Jan 30, 2025

• Fix the Mutual Authentication Example to work under M macs

  #37267 merged Jan 29, 2025

• cilium-dbg/troubleshoot: do not import cilium-dbg from operator

  #37326 merged Jan 29, 2025

• v1.17 Backports 2025-01-27

  #37277 merged Jan 29, 2025

• cilium: various misc refactoring & improvements

  #37254 merged Jan 29, 2025

• Update CI Chart Push workflow mechanism to workflow_call

  #37030 merged Jan 29, 2025

• CES: remove identity-based mode

  #37211 merged Jan 29, 2025

• chore(deps): update dependency cilium/little-vm-helper to v0.0.21 (main)

  #37213 merged Jan 29, 2025

• v1.14 Backports 2025-01-27

  #37287 merged Jan 29, 2025

• chore(deps): update cilium/cilium-cli action to v0.16.23 (main)

  #37302 merged Jan 29, 2025

• bpf: remove guards around CILIUM_NET_IFINDEX / CILIUM_HOST_MAC

  #37323 merged Jan 29, 2025

• endpoint: Skip incremental updates on an endpoint without policy map

  #37312 merged Jan 29, 2025

• v1.15 Backports 2025-01-27

  #37281 merged Jan 29, 2025

• chore(deps): update all github action dependencies (main)

  #37304 merged Jan 29, 2025

• gh: harmonize lvh kernel naming scheme

  #37322 merged Jan 29, 2025

• chore(deps): update all github action dependencies (v1.16)

  #37244 merged Jan 29, 2025

• chore(deps): update all github action dependencies (v1.15)

  #37245 merged Jan 29, 2025

• ipsec: Fix XFRM leak test for encrypted overlay

  #37307 merged Jan 29, 2025

• chore(deps): update all github action dependencies (v1.17)

  #37243 merged Jan 29, 2025

• test: Remove deprecated v1alpha2 CiliumNodeConfig

  #37272 merged Jan 29, 2025

• cleanup: Remove cilium-cli related files

  #37003 merged Jan 29, 2025

• policy: clean up synthesised deny entries

  #36884 merged Jan 29, 2025

• docs: Fix broken link in BGP control plane docs

  #37241 merged Jan 28, 2025

• doc(glossary): Geneve as final RFC

  #37316 merged Jan 28, 2025

• SNAT metrics

  #36730 merged Jan 28, 2025

• bpf: harmonize cilium_host / cilium_net macro naming

  #37082 merged Jan 28, 2025

• daemon/k8s: restore time.Now and TZ after TestScript

  #37299 merged Jan 28, 2025

• chore(deps): update dependency go to v1.23.5 (main)

  #37303 merged Jan 28, 2025

• Add an experimental xDS client

  #34484 merged Jan 28, 2025

• test: drop no-op -cilium.provision-k8s flag

  #37300 merged Jan 28, 2025

• fix(deps): update module github.com/aws/aws-sdk-go-v2/service/ec2 to v1.201.0 (main)

  #37242 merged Jan 28, 2025

• nodeinit: move kubelet restart inside if/else in startup.bash

  #37282 merged Jan 28, 2025

• [1.16] Do not leak ipcache entries when apiserver entities are cluster external

  #36927 merged Jan 28, 2025

• ci, scale: Add EGW masquerade delay scale test

  #34431 merged Jan 28, 2025

• bgpv1: Extend adverts tests duration timeout

  #37284 merged Jan 28, 2025

• hubble-export: fix allowlist and denylist flow-filters parsing

  #37261 merged Jan 28, 2025

• k8s: Convert from Resource[Pod] to Table[LocalPod]

  #36101 merged Jan 28, 2025

• Revert "k8s: Debounce service events"

  #37274 merged Jan 27, 2025

• Policy test cleanups: round 2

  #37058 merged Jan 27, 2025

• experimental: Test reliability improvements

  #37251 merged Jan 27, 2025

• Makefile: Increase timeout for integration tests to 12min

  #37279 merged Jan 27, 2025

• Documentation: clean up toServices docs

  #37089 merged Jan 27, 2025

• helm: configure cilium-operator managing identities

  #36411 merged Jan 27, 2025

• chore(deps): update all github action dependencies (main) (patch)

  #37195 merged Jan 27, 2025

• chore(deps): update all github action dependencies (main)

  #37196 merged Jan 27, 2025

• chore(deps): update all github action dependencies (v1.14)

  #37246 merged Jan 27, 2025

• docs: Add SNI policy example

  #37234 merged Jan 27, 2025

• maps/nat/stats: Use Start context when waiting for maps

  #37262 merged Jan 27, 2025

• gha: Enable promtool check again

  #37079 merged Jan 27, 2025

• Remove "_total" suffix from doublewrite metrics

  #37248 merged Jan 26, 2025

• Bump controller-runtime to match k8s.io/* versions

  #37268 merged Jan 26, 2025

48 Pull requests opened by 35 people

• Bgp control plane: add route aggregation feature

  #37275 opened Jan 27, 2025

• wip

  #37285 opened Jan 27, 2025

• identity: make locally-scoped identities observable

  #37288 opened Jan 27, 2025

• endpoint: Fix Lockdown Logic Duplication

  #37291 opened Jan 27, 2025

• docs: add "devices" to helm reference guide

  #37292 opened Jan 28, 2025

• operator: Fix duplicate configurations

  #37293 opened Jan 28, 2025

• cilium-cli: extend no-interrupted-connections to test NodePort from outside

  #37294 opened Jan 28, 2025

• feat(helm): Allow for referencing k8sServiceHost config instead of lookup

  #37305 opened Jan 28, 2025

• bpf: lxc: ICMP fragmentation fix

  #37306 opened Jan 28, 2025

• Clean up high scale ipcache leftovers

  #37308 opened Jan 28, 2025

• node/manager: Trigger node neighbor reconciliation after carrier down

  #37310 opened Jan 28, 2025

• datapath/sockets: Export various types in sockets library.

  #37313 opened Jan 28, 2025

• hubble-relay: remove deprecated dial-timeout flag

  #37314 opened Jan 28, 2025

• docs: add documentation for operator managing identities

  #37320 opened Jan 29, 2025

• bpf: host: defer dmac rewrite in from-host path

  #37324 opened Jan 29, 2025

• policy: clean up PolicyMap types a bit

  #37330 opened Jan 29, 2025

• created 4 e2e cilium connectivity tests - CCNP & CNP

  #37332 opened Jan 29, 2025

• chore(deps): update all-dependencies (main)

  #37341 opened Jan 30, 2025

• chore(deps): update all-dependencies (v1.17)

  #37342 opened Jan 30, 2025

• chore(deps): update all-dependencies (v1.16)

  #37343 opened Jan 30, 2025

• chore(deps): update all-dependencies (v1.15)

  #37344 opened Jan 30, 2025

• chore(deps): update all-dependencies (v1.14)

  #37345 opened Jan 30, 2025

• Pr/piggy backing ipip dev

  #37346 opened Jan 30, 2025

• cilium: Unconditionally upsert neighbor entries

  #37352 opened Jan 30, 2025

• operator: promote invalid policy from debug to error level

  #37356 opened Jan 30, 2025

• remove cilium-docker-plugin integration

  #37360 opened Jan 30, 2025

• [metrics] Increase available api_duration_seconds metric buckets

  #37365 opened Jan 30, 2025

• operator: Explicitly init the FQDN regex LRU cache

  #37366 opened Jan 30, 2025

• hubble: move exporter creation behind interface in dynamic exporter

  #37367 opened Jan 30, 2025

• v1.15 Backports 2025-01-31

  #37376 opened Jan 31, 2025

• v1.14 Backports 2025-01-31

  #37377 opened Jan 31, 2025

• bpf: minor clean-ups for the ENI symmetric routing feature

  #37379 opened Jan 31, 2025

• [v1.16] ctmap/gc: don't clamp conntrack scan timeout in CI

  #37380 opened Jan 31, 2025

• k8s/resource: NewTableEventStream to adapt from Resource to Tables

  #37382 opened Jan 31, 2025

• WIP: exp/lb

  #37384 opened Jan 31, 2025

• bpf: Reduce SNAT_COLLISION_RETRIES to 32

  #37389 opened Jan 31, 2025

• cli: Added parameter to print used images

  #37390 opened Jan 31, 2025

• [v1.17] agent: Deprecate lb-only mode

  #37391 opened Jan 31, 2025

• .github: Use --interactive=false more widely

  #37392 opened Jan 31, 2025

• Prepare for release v1.17.0

  #37393 opened Jan 31, 2025

• Update releases and stable with v1.17.0

  #37395 opened Jan 31, 2025

• bgp: Decouple CRD from Router interface

  #37396 opened Jan 31, 2025

• ipsec: Test potential XFRM bug on marks

  #37397 opened Jan 31, 2025

• cilium-dbg: output parentIfIndex in bpf endpoint list

  #37398 opened Jan 31, 2025

• refactor: move WithUnixSocketListener to a linux specific file

  #37399 opened Jan 31, 2025

• fix FixedIdentityMapping validation logic

  #37400 opened Jan 31, 2025

• hubble: escape terminal special characters from observe output

  #37401 opened Jan 31, 2025

• gateway-api: Add support for ParametersRef in GatewayClass

  #37402 opened Feb 1, 2025

23 Issues closed by 14 people

• CI: Conformance Cluster Mesh: `client-egress-tls-sni-denied`

  #37381 closed Feb 1, 2025

• CFP: BGP Connection Health Checks

  #35934 closed Feb 1, 2025

• CFP: Support CNI STATUS operation in Cilium-CNI

  #35631 closed Jan 31, 2025

• CI: Cilium E2E Upgrade - timeout reached waiting for deployment cilium-test-1/test-conn-disrupt-client to become ready ("cilium_snat_v4_alloc_retries: file exists")

  #37325 closed Jan 31, 2025

• Failed to install 1.17.0-rc.2 helm chart with dashboard config map enabled for cilium-agent

  #37371 closed Jan 31, 2025

• CI: Runtime Test: Test_PodCIDRAdvert: `did not receive expected peering state`

  #37280 closed Jan 31, 2025

• CI: Runtime Test (privileged): Test_LBEgressAdvertisementWithLoadBalancerIP

  #36254 closed Jan 31, 2025

• CI: Runtime Test (privileged) - Test_NeighborGracefulRestart - `did not receive expected peering state ["ESTABLISHED"]`

  #28415 closed Jan 31, 2025

• agent: segfault in cecManager.getEndpoint()

  #37187 closed Jan 30, 2025

• Add IPv6 testing for `PodToExternalWorkload` cilium-cli connecivity test scenario

  #37133 closed Jan 30, 2025

• CFP: ClusterMesh global service cluster affinity

  #29200 closed Jan 30, 2025

• Setting loadBalancer.acceleration=native causes Cilium Status to report unexpected end of JSON input

  #35873 closed Jan 30, 2025

• Mutual TLS example doesn't work on M mac

  #37185 closed Jan 29, 2025

• GatewayAPI: Incorrect HTTPRoutes traffic forwarding

  #24318 closed Jan 29, 2025

• Cilium L7 Network Policy causes 404 when routing HTTPS through a proxy

  #36039 closed Jan 29, 2025

• Importing the Cilium go CRD api package results in dependecy on cilium/cilium

  #36265 closed Jan 29, 2025

• nat: CT creation and SNAT src port allocation failure metrics

  #35621 closed Jan 28, 2025

• Hubble export deny/allow list flag parsing broken

  #37233 closed Jan 28, 2025

• CI: Conformance E2E: Setup & Test (10, 5.15-20240215.093821...) [check-log-errors]: error retrieving resource lock

  #31050 closed Jan 28, 2025

• Cilium operator doesn't release excess IPv4 CIDR block in AWS ENI when prefix delegation is enabled

  #32209 closed Jan 28, 2025

• Very slow in the LoadBalancer type service

  #35866 closed Jan 28, 2025

• CI: Check iptables masquerading with random-fully: Unable to sync key

  #35780 closed Jan 27, 2025

• JSON logging is lacking testing

  #35896 closed Jan 26, 2025

19 Issues opened by 19 people

• CI: [v1.14/v1.15] Integration Tests - TestStressRateLimiter - arm64

  #37385 opened Jan 31, 2025

• Concurrent access of CT map might lead to early closure of CT map while doing GC?

  #37383 opened Jan 31, 2025

• cilium-dbg: output `parentIfIndex` in `bpf endpoint list`

  #37378 opened Jan 31, 2025

• CiliumNetworkPolicy CRD validation marks DNS policies with matchPattern as invalid

  #37355 opened Jan 30, 2025

• Re-using namespaces seem to cause mTLS issues

  #37354 opened Jan 30, 2025

• CFP: Clang-format for BPF formatting

  #37350 opened Jan 30, 2025

• L7 network policy doesn't work with GAMMA

  #37335 opened Jan 29, 2025

• Inconsistent Policy Map State for Endpoints with Same Identity

  #37334 opened Jan 29, 2025

• CFP: Allow disconnection from Cilium Clustermesh APIServer to revoke cached objects

  #37333 opened Jan 29, 2025

• CiliumL2AnnouncementPolicy creates lease outside of nodeSelector scope

  #37329 opened Jan 29, 2025

• Ingress from Host Network is dropped when using Native-Routing

  #37321 opened Jan 29, 2025

• Improve maintainability of cilium-cli related GitHub workflows

  #37319 opened Jan 29, 2025

• L2Announce + Wifi Mesh Network: ARP Resolution Failed

  #37318 opened Jan 28, 2025

• With k3s Network Policy is blocking Readiness probes

  #37317 opened Jan 28, 2025

• CFP: Auto Peer Discovery for Cilium BGP

  #37315 opened Jan 28, 2025

• Cilium can't find kube-apiserver entities

  #37298 opened Jan 28, 2025

• CI: Conformance AWS-CNI: hubble-relay: `Failed to create peer notify client for peers change notification`

  #37289 opened Jan 27, 2025

• CFP: Ability to enable BBR selectively for specific pods/specific egress destinations/egress interfaces

  #37286 opened Jan 27, 2025

• Not possible to dynamically add k8sServiceEndpoint in Helm chart

  #37276 opened Jan 27, 2025

118 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• experimental: Standalone support via local file synchronization

  #36547 commented on Jan 28, 2025 • 27 new comments

• helm: kvstoremesh with external etcd

  #36216 commented on Jan 31, 2025 • 16 new comments

• datapath: configuration using type-safe Go structs

  #36991 commented on Jan 30, 2025 • 9 new comments

• ipam/aws: Remove UpdateEC2AdapterLimitViaAPI option and static mapping for aws enviroment and always fetch from EC2 API

  #36922 commented on Jan 31, 2025 • 8 new comments

• GRPC contract between Standalone DNS Proxy (SDP) and Cilium Agent

  #36121 commented on Jan 31, 2025 • 8 new comments

• Replace the deprecated workqueue with the generic TypedWorkqueue

  #37269 commented on Jan 30, 2025 • 7 new comments

• bpf: monitor: hubble: wireguard: add TRACE_{FROM/TO}_CRYPTO

  #34958 commented on Jan 31, 2025 • 6 new comments

• bpf: overlay: report REMOTE_NODE_ID when forwarding service replies

  #37017 commented on Jan 29, 2025 • 4 new comments

• policy: Run namespace watcher only when policies are enabled

  #36686 commented on Jan 29, 2025 • 2 new comments

• Use ipcache for tunneling

  #37146 commented on Jan 29, 2025 • 2 new comments

• bandwidth: support ingress rate limiting using eBPF token bucket

  #36351 commented on Jan 31, 2025 • 2 new comments

• experimental: ServiceCache and ServiceManager adapters

  #37083 commented on Jan 31, 2025 • 2 new comments

• xds: Add ack and nack metrics

  #37078 commented on Jan 29, 2025 • 2 new comments

• Updating the header file with DNS rules during policy update

  #36851 commented on Jan 30, 2025 • 1 new comment

• refactor(ipcache): Allow IP/Service Cache to run as a standalone component

  #37025 commented on Jan 28, 2025 • 1 new comment

• pkg/health: use configurable probing interval

  #36175 commented on Jan 31, 2025 • 1 new comment

• Create a go module for the api package

  #37266 commented on Jan 31, 2025 • 1 new comment

• ci: add conformance-ginkgo-race

  #27979 commented on Jan 31, 2025 • 0 new comments

• helm: add configuration for node-labels

  #36662 commented on Jan 30, 2025 • 0 new comments

• identity: fix bug where fromNodes could be used to allow custom endpoint

  #36657 commented on Jan 30, 2025 • 0 new comments

• [WIP]Support IPv6 for delegated IPAM

  #36656 commented on Jan 27, 2025 • 0 new comments

• cilium-cli: connectivity: clean up any leftover egw routes.

  #36651 commented on Jan 31, 2025 • 0 new comments

• helm: configure kube client-go exponential backoff by default

  #36648 commented on Jan 28, 2025 • 0 new comments

• mtu: Ignore link errors instead of logging and health degradation

  #36596 commented on Jan 28, 2025 • 0 new comments

• datapath: Add eni parent interface to short-cut the FIB lookup

  #36563 commented on Jan 26, 2025 • 0 new comments

• CiliumLocalRedirectPolicies support for experimental control-plane

  #35652 commented on Jan 31, 2025 • 0 new comments

• k8s/watchers: only watch local pods if network policies disabled

  #36528 commented on Jan 29, 2025 • 0 new comments

• test: e2e test for operator manages identities

  #36522 commented on Jan 31, 2025 • 0 new comments

• bpf: tests: de-dup IPv4 header validation

  #35688 commented on Jan 31, 2025 • 0 new comments

• Add GH workflow for BW Manager and invoke net QoS tests

  #36381 commented on Jan 26, 2025 • 0 new comments

• Set available addresses when Azure returns nil IP configs

  #36379 commented on Jan 31, 2025 • 0 new comments

• bpf: misc ICMPv6 ND fixes (srcip, nollsrcopt...)

  #36024 commented on Jan 29, 2025 • 0 new comments

• test/runtime: Remove Chaos and KVStore suites

  #36241 commented on Jan 30, 2025 • 0 new comments

• Test

  #36359 commented on Jan 28, 2025 • 0 new comments

• cilium-cli/connectivity: additionally check for container restarts

  #36299 commented on Jan 28, 2025 • 0 new comments

• doc: add ingress for bandwidth

  #37270 commented on Jan 30, 2025 • 0 new comments

• gh: Improve check-ipsec-leaks.bt

  #37250 commented on Jan 26, 2025 • 0 new comments

• fix(deps): update all go dependencies main (main)

  #37240 commented on Jan 31, 2025 • 0 new comments

• Update RTD theme commit hash to fix slack url

  #37237 commented on Jan 31, 2025 • 0 new comments

• cilium-config configmap incorrectly resulting in values like `2.097152e+06` instead of `2097152`

  #37236 commented on Jan 28, 2025 • 0 new comments

• Add cli connectivity test for NodePort traffic to host netns pods

  #37235 commented on Jan 29, 2025 • 0 new comments

• ipam/aws: enhance findSuitableSubnet logic

  #37229 commented on Jan 31, 2025 • 0 new comments

• cilium-cli: add IPv6 connectivity test for LocalRedirectPolicy

  #37192 commented on Jan 30, 2025 • 0 new comments

• Remove usage of depreciated `aws.EndpointResolver`

  #37098 commented on Jan 31, 2025 • 0 new comments

• bpf:hubble: update trace/drop notify for L2-less packets

  #37097 commented on Jan 31, 2025 • 0 new comments

• Update isFqdn fn based on the source github.com/miekg/dns

  #37037 commented on Jan 31, 2025 • 0 new comments

• policy: Batch Policy Updates into BPF Maps

  #37029 commented on Jan 27, 2025 • 0 new comments

• Acknowledge different types of error from NotifyOnDNSMsg

  #36990 commented on Jan 27, 2025 • 0 new comments

• Fix dropped NodePort traffic to hostNetwork backends with Geneve+DSR

  #36978 commented on Jan 30, 2025 • 0 new comments

• Emit azure API rate limits metrics

  #36919 commented on Jan 27, 2025 • 0 new comments

• identity/cache: ensure we never mutate identities

  #36918 commented on Jan 29, 2025 • 0 new comments

• IPsec VinE GH Action Workflow

  #36900 commented on Jan 27, 2025 • 0 new comments

• Helm: Increase Cilium Agent Startup Failure Threshold

  #36897 commented on Jan 31, 2025 • 0 new comments

• feat(datapath/hubble): IP Packet Tracing Implementation

  #36825 commented on Jan 31, 2025 • 0 new comments

• cilium-dbg: add logging options

  #36802 commented on Jan 31, 2025 • 0 new comments

• Add route summarization to bgp advertistments services

  #36791 commented on Jan 27, 2025 • 0 new comments

• pkg/ciliumidentity: skip CID creation for unmanaged pods

  #36779 commented on Jan 29, 2025 • 0 new comments

• wireguard: track allowedIPs with a bitlpm.CIDRTrie and use pod CIDRs when available

  #36728 commented on Jan 31, 2025 • 0 new comments

• policy: Make CES config compatible with disabled policies

  #36726 commented on Jan 29, 2025 • 0 new comments

• Geneve DSR is broken when running w/o BPF masquerade

  #32189 commented on Feb 1, 2025 • 0 new comments

• CiliumNetworkPolicy doesn't allow incoming traffic despite fromCIDR whitelist.

  #35682 commented on Jan 29, 2025 • 0 new comments

• hubble-relay: remove dial-timeout following deprecation in 1.17

  #36240 commented on Jan 29, 2025 • 0 new comments

• CI: Conformance Runtime (ci-runtime): TestHandleK8sDelete

  #36253 commented on Jan 29, 2025 • 0 new comments

• Cilium sporadically loses track of HostPort associated with daemonset pods

  #32805 commented on Jan 28, 2025 • 0 new comments

• Cannot run cilium mesh (kvstoremesh) through etcd grpc proxy

  #37260 commented on Jan 28, 2025 • 0 new comments

• enrich datapath WireGuard tracing from/to cilium_wg0

  #35280 commented on Jan 28, 2025 • 0 new comments

• wireguard: introduce from-wireguard program

  #33676 commented on Jan 28, 2025 • 0 new comments

• CFP: Cilium-native multi-homing

  #20129 commented on Jan 28, 2025 • 0 new comments

• Minimize dropped packets on pod startup for mutual auth workloads

  #23808 commented on Jan 28, 2025 • 0 new comments

• CFP: Improving the interaction between clustermesh and network policies

  #36194 commented on Jan 28, 2025 • 0 new comments

• ariane: "/test" re-triggers tests that has already passed

  #35662 commented on Jan 28, 2025 • 0 new comments

• CI: [v1.15] Cilium E2E Upgrade - Cilium CrashLoopBackOff -- failed to initialize WireGuard agent: failed to set link up: address already in use

  #35928 commented on Jan 28, 2025 • 0 new comments

• CI: [v1.16] Cilium IPsec upgrade (ci-ipsec-upgrade) - conn-disrupt-test-check after downgrading

  #36086 commented on Jan 28, 2025 • 0 new comments

• CI: [v1.15] Cilium E2E upgrade - no unexpected packet drops ("No mapping for NAT masquerade")

  #36232 commented on Jan 28, 2025 • 0 new comments

• CFP: Include BGP peer capabilities into sysdump

  #30785 commented on Jan 28, 2025 • 0 new comments

• Unable to connect to external IPs of other nodes

  #36123 commented on Jan 27, 2025 • 0 new comments

• Clean up endpoint regeneration lifecycle

  #37209 commented on Jan 27, 2025 • 0 new comments

• [question] Point-in-time connection to the world metric

  #37055 commented on Jan 27, 2025 • 0 new comments

• cilium do not restore some endpoint and leave them stale

  #37077 commented on Jan 27, 2025 • 0 new comments

• CiliumNetworkPolicy egress overrides CiliumClusterwideNetworkPolicy egress

  #34390 commented on Jan 27, 2025 • 0 new comments

• CI: K8sKafkaPolicyTest Kafka Policy Tests KafkaPolicies

  #18889 commented on Jan 27, 2025 • 0 new comments

• CFP: Improve encrypted traffic performance over load shared network bonds

  #35667 commented on Jan 27, 2025 • 0 new comments

• Node ID to IP mappings become inconsistent with out of order events

  #36052 commented on Jan 27, 2025 • 0 new comments

• ci: Introduce stack leak detection for BPF host routing

  #35634 commented on Jan 27, 2025 • 0 new comments

• k8sServiceHost multiple IPs/Hosts

  #19038 commented on Jan 27, 2025 • 0 new comments

• CiliumEndpointSlice : some ces and cep are lost control and cannot be deleted

  #35532 commented on Jan 27, 2025 • 0 new comments

• Feature request: BGP Control Plane - BGP advertisements, route aggregation

  #36777 commented on Jan 27, 2025 • 0 new comments

• [1.16 on GKE] Upgrade to 1.16.x breaks `prometheus-to-sd` in kube-system containers

  #36685 commented on Jan 26, 2025 • 0 new comments

• ci-ipsec-e2e: plain-text TCP syn, ack, fin (Conformance E2E IPSec: Assert that no unencrypted packets are leaked)

  #37120 commented on Jan 26, 2025 • 0 new comments

• After upgrade Cilium to 1.16.6 or 1.17.0rc0, some pods lost network connectivity

  #37271 commented on Feb 1, 2025 • 0 new comments

• CI: Integration tests - TestNodesPodCIDRManager_Delete

  #36296 commented on Feb 1, 2025 • 0 new comments

• Dependency Dashboard

  #33550 commented on Feb 1, 2025 • 0 new comments

• Can't ping services via kubeproxyreplacement

  #14118 commented on Jan 31, 2025 • 0 new comments

• Routing is "extremely" slow using BGP, with many TCP Retransmissions, to nodes outside cluster

  #34972 commented on Jan 31, 2025 • 0 new comments

• Tracking issue for experimental load-balancing control-plane

  #34176 commented on Jan 31, 2025 • 0 new comments

• bpf: tracing: hubble: erroneously parse of L2-less packets in trace/drop notifications

  #37095 commented on Jan 31, 2025 • 0 new comments

• Requests to GatewayAPI and L2 backed service times out

  #30510 commented on Jan 31, 2025 • 0 new comments

• Cilium Egress Gateway SNAT Cluster Internal Traffic

  #23240 commented on Jan 31, 2025 • 0 new comments

• Consolidate the mock maps used for tests, instead of re-implementing them for each map package

  #13305 commented on Jan 31, 2025 • 0 new comments

• Kubevirt VMs not running with Cilium netkit enabled

  #37265 commented on Jan 31, 2025 • 0 new comments

• BPF verifier reject in tail_handle_ipv4_from_host (was: Installing cilium on AKS with delegated plugin in tunnel mode results in permissions error)

  #36936 commented on Jan 31, 2025 • 0 new comments

• Deprecate / remove Docker plugin

  #27022 commented on Jan 31, 2025 • 0 new comments

• CI: Conformance EKS - no-errors-in-logs - Unable to assign additional IPs to interface, will create new interface

  #36428 commented on Jan 30, 2025 • 0 new comments

• datapath: transport source identity in MARK_MAGIC_PROXY_TO_WORLD

  #37166 commented on Jan 30, 2025 • 0 new comments

• Proper ICMPv6 handling for enable-endpoint-routes

  #16555 commented on Jan 30, 2025 • 0 new comments

• Multiple policies with the same endpointSelector are not correctly enforced on 1.14+

  #28256 commented on Jan 30, 2025 • 0 new comments

• CI: `cilium.io/v2alpha1 CiliumNodeConfig` is still used in CI tests

  #37249 commented on Jan 30, 2025 • 0 new comments

• bpf-nat-global-max cannot be set above 1M with helm

  #34010 commented on Jan 29, 2025 • 0 new comments

• Document installation on vSphere

  #21801 commented on Jan 29, 2025 • 0 new comments

• add additional cilium cli connectivity tests: Cilium Clusterwide Network Policy

  #37036 commented on Jan 29, 2025 • 0 new comments

• Rework ipcache to handle metadata from multiple sources via a dedicated worker goroutine

  #21142 commented on Jan 29, 2025 • 0 new comments

• Сilium L7 LB loses traffic when rolling update

  #34991 commented on Jan 29, 2025 • 0 new comments

• Unify datapath configuration infrastructure

  #30893 commented on Jan 29, 2025 • 0 new comments

• CFP: BackendTLSPolicy for Cilium Gateway API and HTTPRoutes

  #31352 commented on Jan 29, 2025 • 0 new comments

• CFP: separate go module for k8s API types

  #35015 commented on Jan 29, 2025 • 0 new comments

• IPv6 Neighbor solicitation packets dropped when network policy is enabled

  #16285 commented on Jan 29, 2025 • 0 new comments

• No response from remote cluster with Istio enabled

  #34015 commented on Jan 29, 2025 • 0 new comments

• v1.16.1 cnp validator invalid memory address or nil pointer difference

  #34440 commented on Jan 29, 2025 • 0 new comments