15 Pull requests merged by 10 people

• Report port status down, not error, when retrying interface configuration

  #10656 merged Jul 11, 2025

• Refactor UTs for endpoint nftable/iptables rules

  #10081 merged Jul 10, 2025

• Update CI builds and felix depends [v3.30]

  #10622 merged Jul 10, 2025

• [v3.29] update when images are sent to the images scanner (#10647)

  #10651 merged Jul 10, 2025

• Fix a nil-pointer panic in bpf_prog_test.go

  #10654 merged Jul 10, 2025

• Update ubuntu packaging scripts

  #10616 merged Jul 10, 2025

• CORE-11514: Added CI test to check images availability

  #10637 merged Jul 10, 2025

• Enable pre-merge packaging via a manual promotion

  #10626 merged Jul 10, 2025

• Update go and k8s pins

  #10649 merged Jul 10, 2025

• update when images are sent to the images scanner

  #10647 merged Jul 9, 2025

• QoS: add support for bandwidth controls on eBPF dataplane

  #10645 merged Jul 9, 2025

• defend against malformed notnets rules

  #10563 merged Jul 9, 2025

• [BPF] scale trampoline stride in policy programs

  #10602 merged Jul 8, 2025

• [v3.30] Cherrypick changes to ISS and hashrelease publishing

  #10638 merged Jul 8, 2025

• [v3.29] Cherrypick changes to ISS and hashrelease publishing

  #10639 merged Jul 8, 2025

9 Pull requests opened by 8 people

• Add conntrack metrics specific to ct type from the userspace cleaner

  #10644 opened Jul 8, 2025

• Bump helm.sh/helm/v3 from 3.17.3 to 3.18.4

  #10646 opened Jul 8, 2025

• [v3.30] update when images are sent to the images scanner (#10647)

  #10650 opened Jul 9, 2025

• Add support for IP offsets in VXLAN FV utilities

  #10652 opened Jul 9, 2025

• Update urfave/cli to v3 in release tool [master]

  #10653 opened Jul 9, 2025

• Avoid IPAM handle leak when context expires during assignment.

  #10658 opened Jul 10, 2025

• [master] Semaphore Auto go-build Update

  #10659 opened Jul 10, 2025

• [BPF] fix ICMP replies when host has multiple IPs

  #10660 opened Jul 10, 2025

• [release-v3.30] Auto pick #10660: fix ICMP replies when host has multiple IPs

  #10661 opened Jul 11, 2025

28 Issues closed by 4 people

• CRD definition version mismatch causes deployment issues of Custom Resource instances in Flux

  #6406 closed Jul 11, 2025

• Applying network polices to Calico resources created by the tigera-operator

  #6409 closed Jul 11, 2025

• Calico in eBPF mode intermittently sends out packets with same source and destination IP address (a.k.a. Land Attack)

  #6430 closed Jul 11, 2025

• Self-managed cluster in Azure with VXLANCrossSubnet

  #6568 closed Jul 10, 2025

• Flanneld missing reference to config map kubernetes-services-endpoint in default manifest

  #6597 closed Jul 10, 2025

• Expose the length module and others to calico users

  #6599 closed Jul 10, 2025

• How to disable tx-sctp-segmentation for all Pods with calico CNI

  #6756 closed Jul 10, 2025

• windows: calico-node startup container unable to access kubeadm ConfigMap

  #6829 closed Jul 10, 2025

• Bird Template - "Skipping ourselves" not considering port

  #6863 closed Jul 10, 2025

• Failed configure IPIP tunnel device, retrying... error=message too long

  #6883 closed Jul 10, 2025

• [feature request] Add docker images to public ECR

  #7000 closed Jul 10, 2025

• Configure log levels for calico-node

  #7018 closed Jul 10, 2025

• How to get the assigned ip in the ippool

  #7046 closed Jul 10, 2025

• Unexpected default behavior of workload to host traffic

  #7056 closed Jul 10, 2025

• [feature request] Support mutliple IPv6 addresses per pod: ULA (cluster-internal) + GUA (no-nat external internet)

  #7096 closed Jul 10, 2025

• Tigera Operator helm chart not working with argo cd when specifying a private registry

  #7121 closed Jul 10, 2025

• Calico for Windows - v3.24.5 - CNI plugin fails to reinstall following windows server reboot

  #7136 closed Jul 10, 2025

• Turn on tunl0 device pmtudisc attr avoid some kernel version bug on IPIP mode

  #7146 closed Jul 9, 2025

• Uncertain of required open host ports on fresh install for k8s

  #7178 closed Jul 9, 2025

• Better tigera/operator compatibility with ArgoCD

  #7228 closed Jul 9, 2025

• FDB entries cannot be deleted when a node is deleted, which will cause FDB entry conflicts

  #7281 closed Jul 9, 2025

• Improvement: Ability to set SecurityContext

  #7282 closed Jul 9, 2025

• Windows: Network connectivity flakes during Kubernetes prestop exec calls (curl webserver)

  #7332 closed Jul 9, 2025

• [enhancement] egress gateway for free/OSS

  #7338 closed Jul 9, 2025

• IP overlapping issue - kubernetes pod cidr and the external NAT

  #7345 closed Jul 9, 2025

• IP(XYZ) In use by in use by Node/Workload(XXXX) and in active IPAM pool but has no IPAM allocation.

  #7348 closed Jul 9, 2025

• GlobalNetworkPolicy Using `notNets` and `0.0.0.0/0` Causes `calico-node` Pods to Crash

  #9211 closed Jul 9, 2025

• [Feature Request] An implementation of the gobgp client is expected to be added

  #7371 closed Jul 8, 2025

5 Issues opened by 5 people

• [Feature] Allow disabling of packet tunnel for services such as NodePorts

  #10662 opened Jul 11, 2025

• Firewalld with Calico

  #10655 opened Jul 10, 2025

• Calico Node is deleting pod's network interfaces in v3.30 when `FELIX_ROUTESYNCDISABLED` is `true`

  #10648 opened Jul 9, 2025

• curl: (35) OpenSSL/3.0.9: error:0A000410:SSL routines::sslv3 alert handshake failure

  #10643 opened Jul 8, 2025

• High load on calico-node in eBPF mode with high number of conntrack table entries

  #10642 opened Jul 8, 2025

29 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• CORE-11601: Initializing BPF networking in `mount-bpffs` init container

  #10607 commented on Jul 11, 2025 • 3 new comments

• CORE-11417: Local AS number per BGP peer

  #10600 commented on Jul 9, 2025 • 1 new comment

• [WIP] Introduce QoS Policy

  #10589 commented on Jul 10, 2025 • 0 new comments

• POC Maglev

  #10523 commented on Jul 10, 2025 • 0 new comments

• Node with both external and internal IP may respond to external traffic with ICMP from the internal IP

  #10640 commented on Jul 11, 2025 • 0 new comments

• Calico-Cjdns integration over Ipv6

  #4669 commented on Jul 11, 2025 • 0 new comments

• Allow to separate control and data plane networks

  #4676 commented on Jul 11, 2025 • 0 new comments

• Calico for Windows / vLAN support

  #4678 commented on Jul 11, 2025 • 0 new comments

• [docs] Add documentation for using eBPF with AWS EKS AMI

  #4719 commented on Jul 11, 2025 • 0 new comments

• calicoctl patch: Label disappears after patching GlobalNetworkSet.

  #4724 commented on Jul 11, 2025 • 0 new comments

• if config.ps1 values are bad, then windows containerd cant attach hcsshim to namespace, with cryptic error that is only visible from windows etl logs

  #5189 commented on Jul 11, 2025 • 0 new comments

• A Global policy preventing pods communication across namespaces, but allow in same namespace.

  #4751 commented on Jul 10, 2025 • 0 new comments

• StatefulSet Pod network issues due to veth name collision during terminated pod garbage collection

  #10375 commented on Jul 10, 2025 • 0 new comments

• [windows] Decouple felix from node startup and make them idempotent

  #5229 commented on Jul 10, 2025 • 0 new comments

• no matches for kind "DaemonSet" in version "extensions/v1beta1" for iptables-remover script

  #4804 commented on Jul 10, 2025 • 0 new comments

• Self-managed Kubernetes on Azure docs should use cluster-api-provider-azure

  #4813 commented on Jul 10, 2025 • 0 new comments

• K3s multi-node install may be missing a step

  #4842 commented on Jul 10, 2025 • 0 new comments

• Enforce Calico network policy using Istio (tutorial) is not up-to-date.

  #4920 commented on Jul 10, 2025 • 0 new comments

• Support for non-cluster Wireguard peers

  #5245 commented on Jul 10, 2025 • 0 new comments

• Helm - chart cannot be installed as a dependency

  #4922 commented on Jul 10, 2025 • 0 new comments

• Add support for Path MTU discovery

  #5010 commented on Jul 10, 2025 • 0 new comments

• Enable Linkerd and Calico application layer policies (similar to what is done with Istio)

  #5047 commented on Jul 10, 2025 • 0 new comments

• Issues upgrading from manifest based deployment to Operator

  #5086 commented on Jul 10, 2025 • 0 new comments

• Mixed mode peering for calico with wireguard

  #5115 commented on Jul 10, 2025 • 0 new comments

• Provide steps to disable Calico and remove programmed policy (on any platform)

  #5147 commented on Jul 9, 2025 • 0 new comments

• Feature Request: Support eBPF on Windows nodes

  #5149 commented on Jul 9, 2025 • 0 new comments

• Calico APIserver doesn't let you update Node resource

  #5152 commented on Jul 9, 2025 • 0 new comments

• Use kubernetes Node status' addresses ExternalIP field for autodetecting node-to-node mesh BGP peer ip

  #5154 commented on Jul 9, 2025 • 0 new comments

• Cannot connect to Pod IP when windows hns service restarted

  #5164 commented on Jul 9, 2025 • 0 new comments