101 Pull requests merged by 36 people

• cilium-dbg: Reprint header line periodically with statedb

  #32798 merged May 31, 2024

• metallb bgp: introduce hive cell

  #32806 merged May 31, 2024

• bgpv2: Configuration guide for BGPv2 APIs

  #32774 merged May 31, 2024

• k8s: use `netip.IPv{4,6}Unspecified`

  #32818 merged May 31, 2024

• reinstate hive health metrics

  #32603 merged May 31, 2024

• v1.15 Backports 2024-05-30

  #32789 merged May 31, 2024

• (v1.14) Bump golang.org/x/net

  #32792 merged May 31, 2024

• Cilium BGPv1 Reconciler - Handle updated and deprecated Cidr fields for CiliumLoadBalancerIPPool

  #32694 merged May 31, 2024

• chore(deps): update all lvh-images main to bpf-next-20240521.012924 (main) (patch)

  #32631 merged May 31, 2024

• helm: Configuring hasKey to enable boolean Usage

  #32441 merged May 31, 2024

• docs: Add user manual how to enable and configure multicast feature.

  #32612 merged May 31, 2024

• Helm: Add Clustermesh certificate creation variable

  #32196 merged May 31, 2024

• ingress: add a new annotation for dedicated LoadBalancerClass

  #31650 merged May 31, 2024

• gateway-api: ALPN support

  #32486 merged May 31, 2024

• build(deps): bump requests from 2.31.0 to 2.32.0 in /Documentation

  #32626 merged May 31, 2024

• [debug] Always include debug symbols in the agent debug image

  #32032 merged May 31, 2024

• loader: Remove out-of-band data access

  #32706 merged May 31, 2024

• v1.14 Backports 2024-05-30

  #32787 merged May 31, 2024

• ci: Filter supported versions of EKS

  #32304 merged May 31, 2024

• policy: fix flaky unit test

  #32808 merged May 31, 2024

• chore(deps): update dependency protocolbuffers/protobuf to v27 (main)

  #32767 merged May 31, 2024

• config: remove ingress & gateway api leftovers from global agent config

  #32782 merged May 31, 2024

• ClusterMesh: improve validation of remote nodes and services

  #32749 merged May 31, 2024

• (v1.13) Bump golang.org/x/net

  #32791 merged May 31, 2024

• (v1.15) Bump golang.org/x/net

  #32793 merged May 31, 2024

• ipsec: minor cleanups

  #31390 merged May 31, 2024

• Consolidate regeneration metrics accounting

  #32677 merged May 30, 2024

• [v1.15] egressgw: Let the EGW manager relax rp_filter on egress device

  #32778 merged May 30, 2024

• chore(deps): update docker.io/library/ubuntu:22.04 docker digest to a6d2b38 (v1.13)

  #32376 merged May 30, 2024

• bgpv2: update multi-homing lab to use config overrides

  #32775 merged May 30, 2024

• k8s: cleanup k8s watcher

  #32790 merged May 30, 2024

• v1.13 Backports 2024-05-30

  #32786 merged May 30, 2024

• refactor: config options combined into DNS proxy config struct

  #32777 merged May 30, 2024

• restoration: checkpoint local allocator state, utilize on restoration

  #32310 merged May 30, 2024

• helm: Remove CILIUM_BRANCH variable

  #32776 merged May 30, 2024

• FQDN: some small performance optimizations around logging

  #32049 merged May 30, 2024

• cleanup: Use context package from std libraries

  #32795 merged May 30, 2024

• PolicyRepository: index and replace rules by resource.

  #32703 merged May 30, 2024

• contrib: Clean up un-used scripts

  #32456 merged May 30, 2024

• chore(deps): update dependency cilium/cilium-cli to v0.16.8 (v1.15)

  #32780 merged May 30, 2024

• chore(deps): update dependency cilium/cilium-cli to v0.16.8 (main)

  #32779 merged May 30, 2024

• k8s: Add new fields into slim Service/Endpoint/EndpointSlice structs

  #32754 merged May 30, 2024

• chore(deps): update docker.io/library/golang:1.21.10 docker digest to 16438a8 (v1.13)

  #32740 merged May 29, 2024

• chore(deps): update cilium/cilium-cli action to v0.16.7 (main)

  #32771 merged May 29, 2024

• chore(deps): update dependency go to v1.22.3 (main)

  #32772 merged May 29, 2024

• chore(deps): update golangci/golangci-lint docker tag to v1.58.0 (main)

  #32363 merged May 29, 2024

• Update vishvananda/netlink

  #31671 merged May 29, 2024

• policy: Add Port Range Support for Policies Part 2/3

  #32675 merged May 29, 2024

• renovate: fix config (missing comma)

  #32765 merged May 29, 2024

• (v1.14) Generate SBOMs using Syft instead of bom

  #32750 merged May 29, 2024

• images/builder: let renovate update protoc and proto plugins

  #32739 merged May 29, 2024

• bwmap: Reconcile cilium_throttle with StateDB reconciler

  #32438 merged May 29, 2024

• ipcache: Introduce the ability to inherit CIDR prefixes

  #32578 merged May 29, 2024

• v1.15: Revert the change to the golang image version of hubble-relay

  #32732 merged May 29, 2024

• Add Ænix to the cilium users

  #32738 merged May 28, 2024

• bgpv2: removing v2Enable feature flag

  #32692 merged May 28, 2024

• chore(deps): update all github action dependencies (main)

  #32718 merged May 28, 2024

• helm: remove CriticalAddonsOnly toleration in preflight DaemonSet

  #32682 merged May 28, 2024

• envoy: Use upstream filters for L7 LB policy enforcement

  #32119 merged May 28, 2024

• chore(deps): update all github action dependencies (v1.13)

  #32742 merged May 28, 2024

• bgpv2: container labs for various types of advertisements

  #32522 merged May 28, 2024

• bitlpm: Convert UintTrie to Struct

  #32676 merged May 28, 2024

• Add fqdn perf test

  #32514 merged May 28, 2024

• v1.15 Backports - background node sync improvements

  #32748 merged May 28, 2024

• clustermesh: drop redundant OnClusterDelete from GlobalServiceCache

  #32751 merged May 28, 2024

• chore(deps): update all github action dependencies (v1.14)

  #32741 merged May 28, 2024

• ipam: lower loglevel from error to warn if eni link list can't be listed

  #32602 merged May 28, 2024

• Introduce clustermesh source to differentiate data retrieved from remote clusters

  #32688 merged May 28, 2024

• chore(deps): update docker.io/library/golang:1.22.3 docker digest to f43c6f0 (main)

  #32579 merged May 28, 2024

• Fix threat model typo

  #32752 merged May 28, 2024

• Bump timeout of lint-build-commits.yaml

  #32746 merged May 28, 2024

• [v1.13] ipsec: Safely delete Xfrm state

  #32705 merged May 28, 2024

• [v1.14] ipsec: Safely delete Xfrm state

  #32704 merged May 28, 2024

• chore(deps): update docker.io/library/golang:1.21.10 docker digest to 16438a8 (v1.14)

  #32636 merged May 28, 2024

• cni: Reserve local ports for DNS proxy even if IPv6 is disabled

  #32725 merged May 28, 2024

• gha: cover TLS auth mode in clustermesh upgrade/downgrade tests

  #32684 merged May 28, 2024

• ClusterMesh/helm: only enable session affinity for HA deployments

  #32657 merged May 28, 2024

• gha: test certificate generation methods in conformance clustermesh

  #32654 merged May 28, 2024

• helm: drop localhost SAN from the clustermesh admin certificate

  #32662 merged May 28, 2024

• clustermesh: introduce circuit breaker in wait for synchronization operations

  #32671 merged May 28, 2024

• v1.13 Backports 2024-05-24

  #32696 merged May 28, 2024

• pkg/cgroups: Remove noisy log

  #32613 merged May 28, 2024

• fix(deps): update module github.com/aliyun/alibaba-cloud-sdk-go to v1.62.748 (main)

  #32736 merged May 27, 2024

• Unconditionally require the clustermesh cluster configuration to be always present

  #32505 merged May 27, 2024

• node-manager: fix race-condition

  #32606 merged May 27, 2024

• chore(deps): update stable lvh-images (v1.14) (patch)

  #32723 merged May 27, 2024

• chore(deps): update hubble cli to v0.13.4 (v1.14)

  #32722 merged May 27, 2024

• v1.14 Backports 2024-05-24

  #32695 merged May 27, 2024

• chore(deps): update go (v1.15)

  #32623 merged May 27, 2024

• bpf: lxc: enrich trace event in cil_to_container

  #32737 merged May 27, 2024

• bpf: nodeport: clean up stale comment

  #32734 merged May 27, 2024

• chore(deps): update all github action dependencies (v1.15)

  #32719 merged May 27, 2024

• ipcache: Only update policy maps for new identities

  #32628 merged May 27, 2024

• [v1.15] iptables: Do not install NOTRACK rules if IPv4NativeRoutingCIDR is nil

  #32649 merged May 27, 2024

• Operator/CES: Simplify rate limit configuration

  #32523 merged May 27, 2024

• fix(deps): update all go dependencies main (main)

  #32717 merged May 27, 2024

• iptables: Do not set no-track rules with empty native routing CIDR

  #32648 merged May 27, 2024

• k8s: use cilium slices sort utility to sort Pod IP's from status

  #32697 merged May 27, 2024

• chore(deps): update all github action dependencies (v1.14)

  #32720 merged May 27, 2024

• [v1.13] iptables: Do not install NOTRACK rules if IPv4NativeRoutingCIDR is nil

  #32652 merged May 27, 2024

• [v1.14] iptables: Do not install NOTRACK rules if IPv4NativeRoutingCIDR is nil

  #32650 merged May 27, 2024

37 Pull requests opened by 26 people

• daemon: Make cilium status independent from k8s status

  #32724 opened May 27, 2024

• pkg/controller: ensure latest controller params are updated

  #32726 opened May 27, 2024

• Set informational Network Policy validation condition in the operator.

  #32727 opened May 27, 2024

• Add port to Hubble peer's change notifications

  #32729 opened May 27, 2024

• Introduce --force-device-detection option

  #32730 opened May 27, 2024

• datapath: Add support for skipping direct routes on different L2 networks

  #32733 opened May 27, 2024

• fix(deps): update all go dependencies main (main)

  #32743 opened May 27, 2024

• Add GAMMA support to Cilium Operator

  #32744 opened May 28, 2024

• clustermesh: forbid connecting to cluster with same ID as local

  #32753 opened May 28, 2024

• ci-e2e: Add the coverage for Ingress + bpf.masquerade

  #32761 opened May 29, 2024

• Add dispatch for fqdn_perf test

  #32762 opened May 29, 2024

• ci: Split conn-disrupt-test action

  #32763 opened May 29, 2024

• Check for scan failure in container scanning

  #32764 opened May 29, 2024

• fqdn: Improve performance by using selectors as labels

  #32769 opened May 29, 2024

• k8s: remove unused policyRepository from k8swatcher

  #32773 opened May 29, 2024

• ci: connectivity tests concurrent run

  #32784 opened May 30, 2024

• ClusterMesh: improve validation of remote endpoints and identities

  #32785 opened May 30, 2024

• bpf,srv6: North-South Service over SRv6 L3VPN

  #32788 opened May 30, 2024

• Pr/gray/v1.15/decouple ipsec gh actions

  #32794 opened May 30, 2024

• LRP: Add explicit dependency to k8s ServiceCache

  #32796 opened May 30, 2024

• cgroup manager: introduce hive cell

  #32799 opened May 30, 2024

• CES scale test: prelim testing for 5k scale test

  #32800 opened May 30, 2024

• v1.15 Backports 2024-05-30

  #32802 opened May 30, 2024

• daemon: log health endpoint launch error

  #32803 opened May 30, 2024

• images: Regenerate api/v1 when updating builder

  #32804 opened May 30, 2024

• policy: Add Port Range Support for Policies 3/3

  #32807 opened May 30, 2024

• WIP: Restore NAT entry when it is evicted due to LRU.

  #32809 opened May 31, 2024

• cleanup: untangle unnecessarily complex policy initialization

  #32813 opened May 31, 2024

• policy/api: add more CRD validations

  #32814 opened May 31, 2024

• images: Update LLVM to 18.1.6

  #32816 opened May 31, 2024

• pkg/endpoint: make identity resolver use the current revision

  #32817 opened May 31, 2024

• [v1.17] Strictly validate the cluster name format

  #32819 opened May 31, 2024

• [v1.17] Cleanup clustermesh-related deprecated flag and kvstore key

  #32821 opened May 31, 2024

• lbmap: Fix skip_lb map iteration callback

  #32822 opened May 31, 2024

• helm: allow configuring the clustermesh-apiserver storage medium

  #32823 opened May 31, 2024

• envoy/xds: Await until endpoint restoration is done

  #32824 opened May 31, 2024

• Fix incompatibility issue between Egress Gateway and L7 Policy

  #32828 opened Jun 2, 2024

29 Issues closed by 11 people

• DSR IP Option preserved in packet forwarded to backend

  #29900 closed Jun 2, 2024

• ipam, metrics: Add capacity and used ip addresses metrics for multi-pool

  #30258 closed Jun 2, 2024

• Node lost all network connectivity on agent stop (and restart)

  #30609 closed Jun 2, 2024

• Docs: Document process for determining correct MTU

  #31423 closed Jun 2, 2024

• Docs: Add note about `kube-apiserver` port requiring the endpoint port and not the service port

  #31434 closed Jun 2, 2024

• CI: Conformance Kind Envoy Embedded / Installation and Connectivity Test: all-ingress-deny/pod-to-cidr/external-1111-0

  #31492 closed Jun 2, 2024

• L2 Announcement with custom wireguard connection refused when wg is down

  #31508 closed Jun 2, 2024

• 400 Bad Request on Gateway API with EndpointSlice

  #32811 closed Jun 1, 2024

• CI: v1.12: Suite-k8s-1.20.K8sServicesTest Checks E/W loadbalancing (ClusterIP, NodePort from inside cluster, etc) with L4 policy Tests NodePort with L4 Policy

  #30018 closed Jun 1, 2024

• CFP: Stable release with Renovate

  #32825 closed May 31, 2024

• Cilium pods crash loop backoff after certain period of time

  #32797 closed May 31, 2024

• BGP Advertised Path Attributes fails to match CiliumLoadBalancerIPPool

  #32693 closed May 31, 2024

• Impossible to configure cilium via helm values

  #28381 closed May 31, 2024

• CFP: multicast support

  #28750 closed May 31, 2024

• CFP: Gateway API - add ALPN negotiation to cilium-envoy for gRPC support

  #30794 closed May 31, 2024

• Packet drops with `externalTrafficPolicy: Cluster` in generic-veth chaining mode

  #32714 closed May 29, 2024

• Dependency Dashboard (don't unpin!)

  #22100 closed May 29, 2024

• [1.15] DNS proxy doesn't get traffic when ipv6 is disabled in kernel

  #30744 closed May 29, 2024

• Action Required: Fix Renovate Configuration

  #23230 closed May 29, 2024

• Unable to reach the kube-dns from external workload

  #32517 closed May 29, 2024

• CI: [v1.13] K8sAgentPolicyTest Multi-node policy test validates fromEntities policies with remote-node identity disabled Allows from all hosts with cnp fromEntities host policy

  #31414 closed May 29, 2024

• Preflight daemonset with wrong tolerations

  #27317 closed May 28, 2024

• Simplify CiliumEndpointSlice configuration

  #32591 closed May 28, 2024

• Enable CiliumEndpointSlice in CI tests

  #32590 closed May 28, 2024

• clustermesh-apiserver service sessionAffinity regression

  #32646 closed May 28, 2024

• CI: ConformanceAKS - timeout during kubernetes.default lookup

  #26102 closed May 28, 2024

• Cilium Identity entry to external IP gets removed by mistake

  #30627 closed May 28, 2024

• CI: Conformance GKE: Installation and Connectivity Test: Error: Unable to determine status: timeout while waiting for status to become successful: context deadline exceeded

  #31385 closed May 28, 2024

• CI: Conformance Ginkgo (ci-ginkgo) - f20-kafka: endpoint regeneration failed

  #31377 closed May 27, 2024

19 Issues opened by 19 people

• Intermittent 403 Errors After Cilium Upgrade

  #32829 opened Jun 2, 2024

• Erroneous documentation instructions, related to Hubble configuration

  #32827 opened Jun 1, 2024

• Cosmetic: BGPv1 Control Plane accepts BGP Paths that have no effect

  #32826 opened Jun 1, 2024

• CFP: Scalable node-to-node connectivity health-checking

  #32820 opened May 31, 2024

• Allow new connections to terminating pods

  #32815 opened May 31, 2024

• 1.15.5: ebpf causing issues on Talos Linux (RPi4)

  #32812 opened May 31, 2024

• CFP: Add hybrid routing mode (native-routing on same subnet, encapsulation on cross-subnets)

  #32810 opened May 31, 2024

• Cilium sporadically loses track of HostPort associated with daemonset pods

  #32805 opened May 30, 2024

• Upgrade to LLVM 18.1.6

  #32801 opened May 30, 2024

• BPF masquerading doesn't allow access to Ingress-created LoadBalancer internal or external IP

  #32783 opened May 30, 2024

• Race condition between Cilium and other "control plane" workloads

  #32770 opened May 29, 2024

• Failure to bind envoy ingress to HTTP ports 80 and 443 on the host

  #32768 opened May 29, 2024

• Dependency Dashboard

  #32766 opened May 29, 2024

• CFP: Cilium mTLS via mTLS Agent

  #32759 opened May 29, 2024

• Unexpected behaviour when creating services with IDs > 65535

  #32758 opened May 28, 2024

• problem with new feature enforce_policy_on_l7lb

  #32755 opened May 28, 2024

• Duplicate metrics with `envoy.prometheus.enabled=true` in Helm chart

  #32747 opened May 28, 2024

• Behaviour of CNP's when CIDR Group not existing

  #32735 opened May 27, 2024

• CFP: Option to append device to autodetected devices list

  #32721 opened May 27, 2024

110 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• "Double Write" Identity Allocation Mode for seamless KVStore -> CRD identity migration

  #31920 commented on May 30, 2024 • 36 new comments

• xfrm: add rules for encrypt overlay

  #31757 commented on May 31, 2024 • 30 new comments

• NAT source port metrics & table

  #32152 commented on Jun 1, 2024 • 26 new comments

• IPAM: Adds AWS ENI IPv6 Prefix Delegation Support

  #32352 commented on May 30, 2024 • 20 new comments

• ci: add tests for migration to CiliumEndpointSlice

  #32268 commented on May 31, 2024 • 15 new comments

• ipsec: Fix unencrypted traffic when IPsec is used with L7 egress proxy

  #32683 commented on May 31, 2024 • 14 new comments

• ClusterwideNetworkPolicy causes intermittent connection problems to k8s API

  #32698 commented on May 29, 2024 • 10 new comments

• Experimental load-balancing control-plane with StateDB

  #32185 commented on May 31, 2024 • 9 new comments

• bpf: Remove CT_REOPENED, return CT_NEW instead

  #32653 commented on May 29, 2024 • 7 new comments

• CI: Cilium E2E Upgrade - no-errors-in-logs - retrieving device lxc_health: Link not found

  #32689 commented on May 31, 2024 • 7 new comments

• loader: remove datapathSHA256

  #32700 commented on May 30, 2024 • 6 new comments

• Active connection tracking in ebpf

  #32584 commented on Jun 1, 2024 • 5 new comments

• EgressGW: support CiliumEndpointSlices

  #24833 commented on May 31, 2024 • 5 new comments

• feat: Watch and Read cilium network policies from static directory path

  #32599 commented on Jun 1, 2024 • 5 new comments

• Remove deprecated `hubble.ui.securityContext.enabled` from hubble-ui

  #32338 commented on May 31, 2024 • 4 new comments

• Problems with coredns timeouts and pods DNS resolution with bpf.masquerade enabled

  #32489 commented on May 30, 2024 • 4 new comments

• bpf: Replace old school header guards with #pragma once

  #32235 commented on May 27, 2024 • 3 new comments

• clustermesh: fix a few issues in the new mcs api service controller

  #32555 commented on Jun 2, 2024 • 3 new comments

• Port ranges in network policies

  #16622 commented on May 31, 2024 • 3 new comments

• CI: TestNodeChurnXFRMLeaks

  #32715 commented on May 31, 2024 • 3 new comments

• operator: pod store is never initialized

  #32713 commented on May 30, 2024 • 3 new comments

• CFP: Completing Mutual Authentication + Stable Maturity

  #28986 commented on May 30, 2024 • 3 new comments

• Cilium connectivity test failure on pod-to-ingress-service

  #28837 commented on May 28, 2024 • 3 new comments

• policy: skip client side validation of policies that can't be validated

  #31924 commented on May 27, 2024 • 2 new comments

• Convert Pods, CEP, and KVStore IPcache handling over to async API

  #31409 commented on May 31, 2024 • 2 new comments

• fix: dedup cilium endpoint controllers

  #31011 commented on May 29, 2024 • 2 new comments

• [draft] isolate direct routing device functionality

  #32381 commented on May 31, 2024 • 2 new comments

• OwnerReferences removal by Cilium Operator

  #32339 commented on May 30, 2024 • 2 new comments

• CI: Ingress Conformance Test: An Ingress with mixed path rules should send traffic to the matching backend service where Exact is preferred

  #30281 commented on May 31, 2024 • 2 new comments

• Ingress: No healthy upstream for headless service

  #23182 commented on May 30, 2024 • 2 new comments

• ICMP health-check timeouts after upgrading to cilium1.15.2

  #31567 commented on May 29, 2024 • 2 new comments

• Decouple k8s client heartbeat from connection timeout and keep alive

  #32625 commented on May 28, 2024 • 2 new comments

• config initContainer fails to contact the kube-apiserver

  #29094 commented on Jun 2, 2024 • 2 new comments

• Adding support for TrafficDistribution

  #32678 commented on May 31, 2024 • 2 new comments

• Network performance with Wireguard extremely poor

  #28413 commented on May 28, 2024 • 2 new comments

• Add rate limiting on BPF events map

  #29711 commented on May 30, 2024 • 1 new comment

• repository: shard rules by namespace

  #27163 commented on May 31, 2024 • 1 new comment

• pkg/metrics/bpf: new bpf_maps & bpf_progs metrics

  #29984 commented on May 30, 2024 • 1 new comment

• IPsec documentation updated.

  #30822 commented on May 30, 2024 • 1 new comment

• CFP: Bandwidth Manager with fq_codel?

  #29083 commented on Jun 2, 2024 • 1 new comment

• feat: Configuring the FQDN GC interval / Zombie timeout

  #30999 commented on May 30, 2024 • 1 new comment

• Document installation on vSphere

  #21801 commented on Jun 2, 2024 • 1 new comment

• build images: deprecate SBOM attachments and use SBOM attestations

  #31027 commented on May 29, 2024 • 1 new comment

• l2podAnnouncements - Node return traffic to the network during POD termination leading to duplicate IP addresses

  #31079 commented on Jun 2, 2024 • 1 new comment

• feat/make etcd user config standarized w/ mesh config

  #31655 commented on May 30, 2024 • 1 new comment

• Host Namespace Sockets (i.e. such as Wireguard) can cause FQDN Proxy Port Collisions

  #31535 commented on May 27, 2024 • 1 new comment

• Adopting Scalability Improvements in Cilium

  #31457 commented on May 27, 2024 • 1 new comment

• .github: No need to install Docker in complexity-test manually anymore

  #32067 commented on May 27, 2024 • 1 new comment

• Source Port Exhaustion results in attempted nodePort use as sourceport and TCP Failures

  #23604 commented on May 27, 2024 • 1 new comment

• Pr/tp/refactor kpr init

  #32275 commented on May 31, 2024 • 1 new comment

• install/kubernetes: allow extra helm resources

  #32293 commented on Jun 1, 2024 • 1 new comment

• [BUG] All ingress ressources unreachable after deleting single ingress manifest

  #30070 commented on May 27, 2024 • 1 new comment

• CI: Conformance IPsec E2E: no-ipsec-xfrm-errors: xfrm errors were changed - inbound_no_state

  #31090 commented on May 27, 2024 • 1 new comment

• cilium: improve 16bit ifindex probe on old kernels

  #32466 commented on May 31, 2024 • 1 new comment

• bpf: xdp replace inline asm in csum helpers

  #32543 commented on May 28, 2024 • 1 new comment

• Does Ipsec work with HostPort enabled

  #31561 commented on May 27, 2024 • 1 new comment

• Cilium 1.14.8: panic at controller/manager.go:102 seen after node stop

  #31579 commented on May 27, 2024 • 1 new comment

• ipsec: cache xfrm state list

  #32588 commented on May 29, 2024 • 1 new comment

• Gateway-API: when switching the gatewayClassNmae of the gateway, cilium leaves residual resources.

  #31591 commented on May 27, 2024 • 1 new comment

• Formally define and validate the cluster name format

  #32641 commented on May 31, 2024 • 1 new comment

• ingress: Support headless service

  #32644 commented on May 31, 2024 • 1 new comment

• CFP: L2 Pod Announcements: Support external Gateway

  #31600 commented on May 27, 2024 • 1 new comment

• CFP: Source routing for L2 Announced / LB IPAM managed addresses

  #31640 commented on May 27, 2024 • 1 new comment

• CI: Conformance E2E - check-log-errors - Cannot forward proxied DNS lookup: duplicate request id 24376

  #32229 commented on May 31, 2024 • 1 new comment

• BPF SNAT improvements

  #31643 commented on May 30, 2024 • 1 new comment

• k8s ingress network policy does not work with L2 announcement

  #32113 commented on May 28, 2024 • 1 new comment

• CFP: IP metrics

  #32301 commented on May 28, 2024 • 1 new comment

• Cilium Connectivity Test reports Unsupported L2 Protocol drops but none are seen with Hubble

  #30754 commented on May 30, 2024 • 1 new comment

• Ingress Controller: upstream connect error or disconnect/reset before headers. reset reason: connection failure

  #20942 commented on May 30, 2024 • 1 new comment

• Support migration between tunnel mode and direct routing mode

  #9680 commented on May 30, 2024 • 1 new comment

• CFP: Support TLS for Cilium metrics endpoint

  #32266 commented on May 30, 2024 • 1 new comment

• CI: K8sDatapathConfig MonitorAggregation Checks that monitor aggregation restricts notifications

  #30802 commented on May 28, 2024 • 1 new comment

• [FYI] Cilium not working on bottlerocket-v1.20

  #32610 commented on May 30, 2024 • 1 new comment

• CFP: Update Cilium Helm install docs for EKS and the AWS VPC CNI

  #31041 commented on May 30, 2024 • 1 new comment

• kube-proxy-replacement=strict doesn't enable needed features like kube-proxy-replacement=true does

  #32711 commented on May 29, 2024 • 1 new comment

• datapath: Decouple BPF-masq from NodePort BPF

  #13732 commented on May 29, 2024 • 1 new comment

• nodeinit pods failing in 1.15.5

  #32674 commented on May 29, 2024 • 1 new comment

• Cilium LB DSR reply with wrong src ip when syn packet is missed.

  #32091 commented on May 28, 2024 • 1 new comment

• CFP: allow using NodePort type service for Gateway API's Gateway

  #27273 commented on May 29, 2024 • 1 new comment

• CFP: CiliumNetworkPolicy validation

  #23152 commented on May 28, 2024 • 1 new comment

• Add service event processing delay metric

  #27198 commented on May 28, 2024 • 1 new comment

• CI: no-unexpected-packet-drops failure on Vultr with BYOCNI (cilium connectivity test)

  #31720 commented on Jun 2, 2024 • 1 new comment

• Refactor `Daemon` to use mockable ipcache interface

  #22524 commented on Jun 1, 2024 • 1 new comment

• Remove `skip-cnp-status-startup-clean` and CNP status

  #29590 commented on Jun 1, 2024 • 1 new comment

• Requests to GatewayAPI and L2 backed service times out

  #30510 commented on Jun 1, 2024 • 1 new comment

• CFP: Limitation to network policies in clustermesh

  #31712 commented on Jun 1, 2024 • 1 new comment

• Make node-init depend on /bin/sh instead of /bin/bash

  #14489 commented on May 31, 2024 • 1 new comment

• Cilium fqdn/dnsproxy fails with FQDN dns policy when DNS respons is truncated

  #31197 commented on May 27, 2024 • 1 new comment

• cilium_bpf_map_pressure show incorrect map utilization

  #32311 commented on May 27, 2024 • 1 new comment

• Gateway API backend PODs intermittent timeouts in hostNetwork mode

  #32592 commented on May 31, 2024 • 1 new comment

• network problem caused by absent reverse entry in snat_v4_external map

  #29305 commented on May 31, 2024 • 1 new comment

• Add e2e testing in CI for configuring CiliumCIDRGroup CRD

  #25122 commented on May 31, 2024 • 1 new comment

• CFP: Egress-Gateway: Enable masquerade only on Egress Nodes

  #31634 commented on May 28, 2024 • 1 new comment

• CFP: Per Service LB Algorithm. SH algorithm

  #31608 commented on May 27, 2024 • 0 new comments

• Increase usability of Makefile.override

  #32660 commented on May 29, 2024 • 0 new comments

• ci: deduplicate image build matrix definition

  #32022 commented on May 27, 2024 • 0 new comments

• CFP: Avoid killing a cilium-agent when all kube-apiservers are down

  #31702 commented on May 29, 2024 • 0 new comments

• Document macros used in the datapath

  #15379 commented on Jun 2, 2024 • 0 new comments

• Allow IPSec and KubeProxyReplacement=strict (NodePort)

  #12978 commented on Jun 2, 2024 • 0 new comments

• [DRAFT] Table of nodes

  #32144 commented on May 31, 2024 • 0 new comments

• Mutual Auth: Update SPIRE DelegatedIdentity API usage to be one watch per identity

  #31430 commented on May 27, 2024 • 0 new comments

• ingress: Add CNP example for default deny

  #31436 commented on May 31, 2024 • 0 new comments

• Operator manages identities - full implementation

  #30356 commented on May 29, 2024 • 0 new comments

• gateway-api: Bump to version v1.1.0

  #32233 commented on May 27, 2024 • 0 new comments

• cilium: netkit support

  #32429 commented on May 29, 2024 • 0 new comments

• IPSec does not clean up stale xfrm policies

  #26298 commented on May 30, 2024 • 0 new comments

• CFP: I would like to have an option to transfer only the specified weight to remote in global service.

  #24494 commented on May 27, 2024 • 0 new comments

• [Epic] Improve CRD-mode scalability

  #30967 commented on May 31, 2024 • 0 new comments

• CiliumEndpointSlice Graduation to Stable

  #31904 commented on May 27, 2024 • 0 new comments

• CiliumEndpoints missing for Pods

  #27123 commented on May 27, 2024 • 0 new comments