Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary of Changes
Minor Changes:
cilium-dbg encrypt flush --stale
flag to remove XFRM states and policies with stale node IDs. (Backport PR v1.15 Backports 2024-03-12 #31342, Upstream PR cilium-dbg: Newencrypt flush --stale
flag #31159, @pchaigno)Bugfixes:
Potentially it could have impacted connectivity in large clusters (>4k nodes) with IPSec or Mutual Auth enabled.
Otherwise, it was merely generating unnecessary error log messages. (Backport PR v1.15 Backports 2024-03-19 #31490, Upstream PR bpf, maps: Don't set nodeid to 0 when nodeid allocation fails. #31380, @marseel)
CI Changes:
Misc Changes:
declare_tailcall_if
with logic in the loader (Backport PR [v1.15] Replaced declare_tailcall_if with logic in the loader #31554, Upstream PR Replaceddeclare_tailcall_if
with logic in the loader #30467, @dylandreimerink)Other Changes: