Insights: cilium/cilium
Overview
Could not load contribution data
Please try again later
70 Pull requests merged by 30 people
-
Helm: possibility to install operator as standalone app
#32019 merged
Apr 18, 2024 -
ci: remove build artifacts in integration tests to prevent space issues
#32050 merged
Apr 18, 2024 -
labels: Add controller-uid into default ignore list
#31964 merged
Apr 18, 2024 -
.github: Don't cache LLVM
#32045 merged
Apr 18, 2024 -
.github: Pretty-print gateway API test results
#32039 merged
Apr 18, 2024 -
v1.15 Backports 2024-04-15
#31967 merged
Apr 18, 2024 -
v1.14 Backports 2024-04-16
#31987 merged
Apr 18, 2024 -
egressgw: Miscellaneous minor fixes to the manager
#31869 merged
Apr 18, 2024 -
[v1.14] golangci: Enable errorlint
#31793 merged
Apr 17, 2024 -
[v1.15] golangci: Enable errorlint
#31783 merged
Apr 17, 2024 -
v1.13 Backports 2024-04-10
#31887 merged
Apr 17, 2024 -
chore(deps): update docker.io/library/golang:1.21.9 docker digest to 81811f8 (v1.15)
#31953 merged
Apr 17, 2024 -
fix k8s versions tested in CI
#31965 merged
Apr 17, 2024 -
[v1.13] Go linter fix backport
#31983 merged
Apr 17, 2024 -
Fix sysctl reconciler unit tests
#31833 merged
Apr 17, 2024 -
Docs: improve Flatcar section
#31986 merged
Apr 17, 2024 -
docs: Fix pep-8 style for conf.py
#32009 merged
Apr 17, 2024 -
Miscellaneous improvements to the clustermesh upgrade/downgrade test
#31958 merged
Apr 17, 2024 -
CI: bump default FQDN datapath timeout from 100 to 250ms
#31866 merged
Apr 17, 2024 -
bpf: minor tail-call cleanups
#31990 merged
Apr 17, 2024 -
workflows: Bump the timeout for Ginkgo tests
#31991 merged
Apr 17, 2024 -
Drop unused service-related test helpers
#32002 merged
Apr 17, 2024 -
Add option to disable ExternalIP mitigation (CVE-2020-8554).
#31513 merged
Apr 17, 2024 -
test: De-flake xds server_e2e_test
#32004 merged
Apr 17, 2024 -
helm: Remove deprecated option containerRuntime.integration
#31942 merged
Apr 16, 2024 -
helm: Cleanup old k8s version check and deprecated atributes
#31940 merged
Apr 16, 2024 -
chore(deps): update all github action dependencies (main)
#31992 merged
Apr 16, 2024 -
chore(deps): update all github action dependencies (v1.14)
#31997 merged
Apr 16, 2024 -
chore(deps): update azure/login action to v2.1.0 (v1.15)
#31994 merged
Apr 16, 2024 -
bgpv2: introducing service reconciler in BGPv2 reconcilers
#31962 merged
Apr 16, 2024 -
Fix ipset reconciler unit tests
#31836 merged
Apr 16, 2024 -
iptables: Add rules runtime reconciliation
#31372 merged
Apr 16, 2024 -
chore(deps): update docker.io/library/golang:1.22.2 docker digest to 450e382 (main)
#31949 merged
Apr 16, 2024 -
fqdn: Fix goroutine leak in transparent-mode
#31959 merged
Apr 16, 2024 -
fix(deps): update all go dependencies main (main)
#31952 merged
Apr 16, 2024 -
build(deps): bump idna from 3.4 to 3.7 in /Documentation
#31916 merged
Apr 16, 2024 -
Improve release organization page
#31970 merged
Apr 16, 2024 -
images: Update LLVM to 17.0.6
#31418 merged
Apr 16, 2024 -
bgpv1: check services for reconciliation if iTP=local
#31963 merged
Apr 16, 2024 -
chore(deps): update all github action dependencies (v1.15)
#31954 merged
Apr 16, 2024 -
chore(deps): update all github action dependencies (main)
#31951 merged
Apr 16, 2024 -
[v1.15] cilium-dbg: remove section with unknown health status.
#31905 merged
Apr 16, 2024 -
cmd, watchers: Populate ipcache in case of high-scale ipcache
#31848 merged
Apr 16, 2024 -
BGPv2: Updates CiliumBGPNodeConfigOverride Type
#31598 merged
Apr 15, 2024 -
Replace `option.Config.{Get,Set,Append}Devices` by table lookups
#30578 merged
Apr 15, 2024 -
wireguard: Deprecate userspace fallback
#31867 merged
Apr 15, 2024 -
gateway-api: Sync up with upstream
#31806 merged
Apr 15, 2024 -
helm: Add automatic lookup option for k8s service info
#31885 merged
Apr 15, 2024 -
docs: Add connectivity perf test introduction as a part of e2e tests.
#31731 merged
Apr 14, 2024 -
xds: Only pass relevant TLS config for originating/terminating TLS
#31903 merged
Apr 13, 2024 -
alibabacloud/eni: avoid racing node mgr in test
#31877 merged
Apr 12, 2024 -
cli: make multicast subscriber list exportable
#31799 merged
Apr 12, 2024 -
gha: configure fully-qualified DNS names as external targets
#31510 merged
Apr 12, 2024 -
clustermesh: document global services limitations with KPR=false
#31798 merged
Apr 12, 2024 -
Docs: mark Tetragon as Stable
#31886 merged
Apr 12, 2024 -
docs: Correct name of "cert-manager" in tab groups
#31929 merged
Apr 12, 2024 -
Helm: add nodeport-addresses value
#31672 merged
Apr 12, 2024 -
cni: Improve logging with common fields
#31805 merged
Apr 12, 2024 -
Configure restrictive security contexts by default for clustermesh-apiserver containers
#31540 merged
Apr 12, 2024 -
ci-e2e-upgrade: Disable ingress-controller and bpf.tproxy=true
#31917 merged
Apr 12, 2024 -
install: Update image digests for v1.15.4
#31915 merged
Apr 11, 2024 -
install: Update image digests for v1.14.10
#31914 merged
Apr 11, 2024 -
install: Update image digests for v1.13.15
#31913 merged
Apr 11, 2024 -
Prepare for release v1.15.4
#31908 merged
Apr 11, 2024 -
Prepare for release v1.14.10
#31910 merged
Apr 11, 2024 -
docs: Make ICMP rules for the Host Firewall easier to read/search
#31900 merged
Apr 11, 2024 -
Prepare for release v1.13.15
#31906 merged
Apr 11, 2024 -
ci-e2e-upgrade: Make it stable
#31895 merged
Apr 11, 2024 -
v1.14 Backports 2024-04-10
#31888 merged
Apr 11, 2024
69 Pull requests opened by 40 people
-
v1.14 backports 2024-04-11
#31907 opened
Apr 11, 2024 -
"Double Write" Identity Allocation Mode for seamless KVStore -> CRD identity migration
#31920 opened
Apr 12, 2024 -
wireguard: Handle stale nodes
#31921 opened
Apr 12, 2024 -
[v1.15] Introduce fromEgressProxyRule
#31922 opened
Apr 12, 2024 -
Introduce fromEgressProxyRule
#31923 opened
Apr 12, 2024 -
policy: drop client side validation of policies
#31924 opened
Apr 12, 2024 -
[v1.14] Introduce fromEgressProxyRule
#31926 opened
Apr 12, 2024 -
[v1.13] Introduce fromEgressProxyRule
#31928 opened
Apr 12, 2024 -
[v1.12] Introduce fromEgressProxyRule
#31930 opened
Apr 12, 2024 -
l2announcer: Use the device table to access devices
#31931 opened
Apr 12, 2024 -
satefulsets: some testing
#31934 opened
Apr 12, 2024 -
WireGuard externally-accessible nodes
#31935 opened
Apr 12, 2024 -
Update CEPS watchdog bpf program loaded logger
#31936 opened
Apr 12, 2024 -
chore(deps): update gcr.io/distroless/static-debian11:nonroot docker digest to f41b84c (main)
#31950 opened
Apr 15, 2024 -
Pr/gray/main/egress proxy ipsec fix2
#31955 opened
Apr 15, 2024 -
envoy: Add support for configuring accesslog
#31956 opened
Apr 15, 2024 -
srv6: Some cleanups for SRv6 maps
#31960 opened
Apr 15, 2024 -
fix k8s versions tested in CI
#31966 opened
Apr 15, 2024 -
fix k8s versions tested in CI
#31968 opened
Apr 15, 2024 -
fix k8s versions tested in CI
#31969 opened
Apr 15, 2024 -
docs: Add Pod eviction warning in upgrade notes for Envoy DS
#31971 opened
Apr 15, 2024 -
datapath/node: avoid fatal on daemon init when node routes fail.
#31972 opened
Apr 15, 2024 -
Support configuring TLS for hubble metrics server
#31973 opened
Apr 15, 2024 -
Pr/gray/1.15/egress proxy ipsec fix2
#31975 opened
Apr 16, 2024 -
Pr/gray/1.14/egress proxy ipsec fix2
#31976 opened
Apr 16, 2024 -
Pr/gray/1.13/egress proxy ipsec fix2
#31977 opened
Apr 16, 2024 -
Gray/egress proxy ipsec attempt
#31980 opened
Apr 16, 2024 -
Deactivated Grafana reporting in monitoring example yaml.
#31989 opened
Apr 16, 2024 -
chore(deps): update all-dependencies (v1.15)
#31993 opened
Apr 16, 2024 -
chore(deps): update docker.io/library/golang:1.21.9 docker digest to 81811f8 (v1.14)
#31995 opened
Apr 16, 2024 -
chore(deps): update docker.io/library/ubuntu:22.04 docker digest to 193c13d (v1.14)
#31996 opened
Apr 16, 2024 -
dnsproxy: Fix bug where DNS request timed out too soon
#31999 opened
Apr 16, 2024 -
operator/bgpv2: Fix CiliumBGPNodeConfig OwnerReference & job health reporting
#32000 opened
Apr 16, 2024 -
docs: Document build framework for docs
#32006 opened
Apr 16, 2024 -
[v1.15] proxy: skip rule removal if address family is not supported
#32007 opened
Apr 16, 2024 -
Agent: add kubeconfigPath to initContainers
#32008 opened
Apr 16, 2024 -
controller: Remove unused function FakeManager()
#32011 opened
Apr 16, 2024 -
daemon: Run conntrack GC after Endpoint Restore
#32012 opened
Apr 17, 2024 -
Report estimated expiry timers for connection-based FQDN entries
#32013 opened
Apr 17, 2024 -
docs: clean up example yaml for L4 Deny Policy
#32015 opened
Apr 17, 2024 -
Add OVERWRITE_LOOPBACK + OVERWRITE_CILIUM env var to install-plugins.sh
#32016 opened
Apr 17, 2024 -
Fix invalid PromQL query in the Cilium Metrics Grafana dashboard
#32017 opened
Apr 17, 2024 -
fix: close verifier.log
#32018 opened
Apr 17, 2024 -
hive: Relocate to cilium/hive
#32020 opened
Apr 17, 2024 -
clustermesh: enable endpointslice sync by default on headless services
#32021 opened
Apr 17, 2024 -
ci: deduplicate image build matrix definition
#32022 opened
Apr 17, 2024 -
Fix helm chart incompatible types for comparison
#32025 opened
Apr 17, 2024 -
Add Spectro Cloud to USERS.md
#32027 opened
Apr 17, 2024 -
policy/k8s: Fix bug where policy synchronization event was lost
#32028 opened
Apr 17, 2024 -
docs: Fix prometheus port regex
#32030 opened
Apr 17, 2024 -
Loader full reconciliation
#32031 opened
Apr 17, 2024 -
[debug] Always include debug symbols in the agent debug image
#32032 opened
Apr 17, 2024 -
hive: Reduce hive trace logs to debug level
#32033 opened
Apr 17, 2024 -
Improve dev-doctor, find protoc
#32035 opened
Apr 17, 2024 -
cilium-dbg: Expose Cilium network routing status
#32036 opened
Apr 17, 2024 -
.github: Add workflow telemetry
#32037 opened
Apr 18, 2024 -
Pr/jwi/main/lvh etcd
#32041 opened
Apr 18, 2024 -
gha: drop double installation of Cilium CLI in conformance-eks
#32042 opened
Apr 18, 2024 -
WIP: enable route MTU
#32043 opened
Apr 18, 2024 -
bpf: nodeport: avoid revalidation in nodeport_rev_dnat_ingress_ipv4()
#32044 opened
Apr 18, 2024 -
Remove hostPort dependency on BPF NodePort
#32046 opened
Apr 18, 2024 -
WIP: v1.15: enable route mtu cni
#32047 opened
Apr 18, 2024 -
FQDN: some small performance optimizations around logging
#32049 opened
Apr 18, 2024 -
v1.13 Backports 2024-04-18
#32053 opened
Apr 18, 2024 -
Adds metric for monitoring the service programming duration
#32055 opened
Apr 18, 2024 -
Add pprof collection to 100 node scale test
#32056 opened
Apr 18, 2024 -
policy: Remove unused `allow-remotehost-ingress` derivedFrom label
#32058 opened
Apr 18, 2024 -
loader: remove ELF substition logic
#32059 opened
Apr 18, 2024 -
Test metrics
#32062 opened
Apr 18, 2024
30 Issues closed by 19 people
-
Cilium cannot connect to AKS Private cluster api server.
#31981 closed
Apr 18, 2024 -
1.15.4 and 1.14.10 releases are missing
#32023 closed
Apr 17, 2024 -
CI: integration tests - TestSysctl
#31789 closed
Apr 17, 2024 -
bpf: sort out issues with stale svc entry in nodeport code
#25373 closed
Apr 17, 2024 -
Regression in DSR for some setups
#28187 closed
Apr 17, 2024 -
CiliumNetworkPolicy blocks traffic forwarded between nodes in v1.14.0
#27360 closed
Apr 17, 2024 -
Hubble metrics' "httpV2:exemplars=true;" does not work.
#30099 closed
Apr 17, 2024 -
Incomplete requests from Pod to Service with backend on same Node with DSR Enabled
#30451 closed
Apr 17, 2024 -
Incorrect DerivedFromRules for a policy key in Egress PolicyMap
#30469 closed
Apr 17, 2024 -
hubble-relay pod restarts, when hubble.tls.auto.method is certmanager
#30941 closed
Apr 16, 2024 -
Connectivity issue: not enough replicas
#31919 closed
Apr 16, 2024 -
Egress rules allow traffic to a FQDN if its IP is the same as a recently accessed allowed FQDN
#31803 closed
Apr 16, 2024 -
Dependency Dashboard
#30160 closed
Apr 16, 2024 -
Add support for service.kubernetes.io/topology-mode annotation
#31948 closed
Apr 15, 2024 -
Pod creation fails due to: chain 'KUBE-MARK-MASQ' does not exist
#30666 closed
Apr 15, 2024 -
CFP: Forwarding ingress labels and annotations to dedicated controllers.
#31927 closed
Apr 15, 2024 -
CI: Create control plane tests for IPsec
#20707 closed
Apr 15, 2024 -
CiliumIngress controller timeout in AWS ENI mode
#29235 closed
Apr 15, 2024 -
Hubble UI doesn't work with Cilium 1.14.x install, "Data stream has failed on the UI backend: EOF"
#29977 closed
Apr 15, 2024 -
Review all usages of `fmt.Sprintf()` or similar `fmt` function inside hot paths
#19571 closed
Apr 14, 2024 -
CI: kubernetes-e2e (ipv4): ReplicaSet should serve a basic image on each replica with a public image failed
#25758 closed
Apr 14, 2024 -
Pod connection failures using L7 policy with terminatingTLS if ca.crt is present in the secret
#31761 closed
Apr 13, 2024 -
CI: pkg/alibabacloud/eni: ENISuite/TestPrepareIPAllocation is flaky
#30935 closed
Apr 12, 2024 -
Gateway spec.infrastructure.annotations field cannot hold more than 8 annotations
#31939 closed
Apr 12, 2024 -
Add support for --nodeport-addresses
#12508 closed
Apr 12, 2024 -
Gateway API: Can't get a GRPCRoute working
#31811 closed
Apr 12, 2024 -
CFP: Move cilium/hubble into cilium/cilium
#31912 closed
Apr 11, 2024 -
[docs] Document enabling ping with host firewall
#21986 closed
Apr 11, 2024 -
CI: Conformance Cluster Mesh - check-log-errors - bind: address already in use
#30901 closed
Apr 11, 2024
37 Issues opened by 32 people
-
clustermesh: missing identity from remote cluster leading to dropped traffic
#32060 opened
Apr 18, 2024 -
CI coverage for migration path from CiliumEndpoint to CiliumEndpointSlice
#32057 opened
Apr 18, 2024 -
CI: Conformance Ginkgo - f10-agent-hubble-bandwidth - Attempt to remove non-existing IP from ipcache layer
#32054 opened
Apr 18, 2024 -
CFP: Add extra logic for cilium ENI mode for picking the right subnet
#32052 opened
Apr 18, 2024 -
CFP: Support drop_reason_desc in flow filter
#32051 opened
Apr 18, 2024 -
gh: ipsec: support arbitrary number of nodes in ipsec-key-rotate action
#32040 opened
Apr 18, 2024 -
CI: Conformance AKS workflow broken due to az tooling issue
#32038 opened
Apr 18, 2024 -
Unexpected values when running connectivity perf
#32034 opened
Apr 17, 2024 -
KPR: support RevDNAT for ICMP error messages
#32029 opened
Apr 17, 2024 -
Kubevirt VM on pod network with masquerade fails with eBPF Host-Routing
#32026 opened
Apr 17, 2024 -
helm installation incompatible types for comparison
#32024 opened
Apr 17, 2024 -
CI: Times out because pulling cilium-envoy images can take several minutes
#32014 opened
Apr 17, 2024 -
NetworkPolicy ingress podSelector doesn't work for cross-node communication when using native routing
#32010 opened
Apr 16, 2024 -
CFP: Enable IPv6 neighbor solicitation passthrough for generic veth chaining.
#32003 opened
Apr 16, 2024 -
HubbleUI will not load on a Prefix
#32001 opened
Apr 16, 2024 -
LRP stops performing NAT for existing sockets after temporary k8s API-server unavailability
#31988 opened
Apr 16, 2024 -
Possible connection disruption on agent restart with WireGuard + kvstore
#31985 opened
Apr 16, 2024 -
Unencrypted traffic among nodes when IPsec is used with L7 egress proxy
#31984 opened
Apr 16, 2024 -
Depreciate CRD `CiliumNodeConfig` on `v2alpha1` API
#31982 opened
Apr 16, 2024 -
Possible connectivity disruption on agent restart with WireGuard + native routing
#31979 opened
Apr 16, 2024 -
cilium-operator creates LoadBalancer for other gateway class
#31978 opened
Apr 16, 2024 -
ENI setup issues in 1.15.3 on EKS using ENI datapath
#31974 opened
Apr 15, 2024 -
Consider making `policy-cidr-match-mode=nodes` the default
#31961 opened
Apr 15, 2024 -
Cluster Mesh K3S / RKE2
#31957 opened
Apr 15, 2024 -
Issue with Cilium Egress Configuration in EKS
#31946 opened
Apr 14, 2024 -
Kubespray, Cilium ClusterMash not working
#31945 opened
Apr 13, 2024 -
Cilium pods fail to start after upgrade from 1.15.3 to 1.15.4
#31944 opened
Apr 13, 2024 -
Cilium does not remove agent-not-ready taint from nodes on uninstall
#31943 opened
Apr 13, 2024 -
L7 Envoy service mesh - Cannot reach the service with multiple ports
#31941 opened
Apr 13, 2024 -
Cilium Gateway unexpectedly translates grpc-web requests to gRPC
#31933 opened
Apr 12, 2024 -
ci-e2e-upgrade: Add minor / patch upgrades
#31932 opened
Apr 12, 2024 -
An unexported field was encountered
#31925 opened
Apr 12, 2024 -
CI: Socket lookup failed in ci-upgrade-e2e
#31918 opened
Apr 12, 2024 -
BGP: IPv6 peering not working (IPv4 works)
#31911 opened
Apr 11, 2024 -
CFP: please use the full monitor width for --help output in docs
#31909 opened
Apr 11, 2024 -
CiliumEndpointSlice Graduation to Stable
#31904 opened
Apr 11, 2024
101 Unresolved conversations
Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.
-
LRP: Fix node-local redirection exceptions
#26144 commented on
Apr 17, 2024 • 32 new comments -
Fix various bugs related to restart of StatefulSet pods that may result in connectivity issues
#31605 commented on
Apr 17, 2024 • 28 new comments -
crd: Make CiliumNodeConfig available on v2 API
#31721 commented on
Apr 17, 2024 • 23 new comments -
ipset: Rework the reconciler to use batch ops
#31638 commented on
Apr 18, 2024 • 22 new comments -
Move cilium/hubble code to cilium/cilium repo
#31893 commented on
Apr 17, 2024 • 18 new comments -
k8s: Add support for Kubernetes 1.30.0
#31687 commented on
Apr 18, 2024 • 16 new comments -
multicast: check support for batch lookup
#31892 commented on
Apr 18, 2024 • 11 new comments -
[v1.13] golangci: Enable errorlint
#31796 commented on
Apr 18, 2024 • 11 new comments -
gateway-api: appProtocol support (GEP-1911)
#31310 commented on
Apr 16, 2024 • 10 new comments -
Ingress Controller: upstream connect error or disconnect/reset before headers. reset reason: connection failure
#20942 commented on
Apr 16, 2024 • 10 new comments -
Pass zone to backends
#31838 commented on
Apr 18, 2024 • 9 new comments -
auto-direct-node-routes with clustermesh makes cilium crash after updating from 1.14 to 1.15
#31843 commented on
Apr 16, 2024 • 8 new comments -
Hubble: add possibility to export flows to container logs
#31422 commented on
Apr 17, 2024 • 7 new comments -
[CI] Cluster Mesh upgrade: `no-interrupted-connections`: `test-conn-disrupt-client` failed due to interrupted traffic during downgrade
#30964 commented on
Apr 16, 2024 • 6 new comments -
doc: Added doc for running ingress/GwAPI in host network mode
#31839 commented on
Apr 15, 2024 • 6 new comments -
Host Namespace Sockets (i.e. such as Wireguard) can cause FQDN Proxy Port Collisions
#31535 commented on
Apr 16, 2024 • 5 new comments -
Gateway API implementation does not correctly distinguish TLSRoutes with same hostname on different ports
#31122 commented on
Apr 16, 2024 • 5 new comments -
[v1.15] images: Update bpftool, checkpatch images
#31896 commented on
Apr 18, 2024 • 5 new comments -
v1.15 Operator deletes and creates EndpointSlices on startup
#31564 commented on
Apr 15, 2024 • 4 new comments -
envoy: Bump envoy minor version to v1.29.x
#31571 commented on
Apr 18, 2024 • 4 new comments -
chore(deps): update stable lvh-images (v1.14) (patch)
#31823 commented on
Apr 18, 2024 • 4 new comments -
CI: K8sDatapathConfig MonitorAggregation Checks that monitor aggregation restricts notifications
#30802 commented on
Apr 18, 2024 • 3 new comments -
loader: attach programs using tcx
#30103 commented on
Apr 17, 2024 • 3 new comments -
docs: Improve CiliumEndpointSlice documentation to prepare graduation to "Stable"
#31800 commented on
Apr 18, 2024 • 3 new comments -
Network performance with Wireguard extremely poor
#28413 commented on
Apr 18, 2024 • 3 new comments -
pkg/metrics/bpf: new bpf_maps & bpf_progs metrics
#29984 commented on
Apr 12, 2024 • 3 new comments -
Cilium Ingress Controller responds with "403 Access denied" in `policyAuditMode=true` after upgrade to cilium v1.14.5
#30073 commented on
Apr 14, 2024 • 3 new comments -
v1.15 Backports 2024-04-10
#31879 commented on
Apr 17, 2024 • 3 new comments -
`hubble-ui` `backend` container file permissions issue on loading client cert for `hubble-relay`
#18816 commented on
Apr 16, 2024 • 2 new comments -
Remove CiliumOperatorName constant
#31597 commented on
Apr 18, 2024 • 2 new comments -
Test endpoint slice synchronization as part of the Conformance Cluster Mesh workflow
#31551 commented on
Apr 18, 2024 • 2 new comments -
Cilium issues on EKS with NLB in ip-mode and preserve-client-ip enabled
#19250 commented on
Apr 17, 2024 • 2 new comments -
CI: K8sDatapathServicesTest Checks E/W loadbalancing (ClusterIP, NodePort from inside cluster, etc) Tests NodePort inside cluster (kube-proxy) with IPSec and externalTrafficPolicy=Local
#25403 commented on
Apr 18, 2024 • 2 new comments -
toFQDNs broken when using CoreDNS' autopath
#20191 commented on
Apr 18, 2024 • 2 new comments -
CI: Cilium E2E Upgrade: `Timed out waiting for datapath updates of FQDN IP information` after upgrade
#29846 commented on
Apr 16, 2024 • 2 new comments -
CI: Conformance E2E: client-egress-l7-named-port/pod-to-pod: command terminated with exit code 28 (timeout)
#27762 commented on
Apr 16, 2024 • 2 new comments -
Gateway API: Duplicate secret in cilium-secrets
#31819 commented on
Apr 16, 2024 • 2 new comments -
CI: Conformance EKS: Installation and Connectivity Test (1.24, ca-west-1): [check-log-errors]: failed to obtain eni link list: interrupted system call
#30990 commented on
Apr 15, 2024 • 2 new comments -
Skip checking precondition for host endpoint label updates
#31735 commented on
Apr 16, 2024 • 2 new comments -
Loader reconciliation preparatory changes
#31773 commented on
Apr 17, 2024 • 2 new comments -
clustermesh: add hostname endpointslice sync
#31814 commented on
Apr 16, 2024 • 2 new comments -
Troubleshooting clustermesh upgrade/downgrade test flakes
#31837 commented on
Apr 12, 2024 • 2 new comments -
fix: deduplicate ConfigMap key if ENI mode and endpointRoutes are enabled
#31891 commented on
Apr 18, 2024 • 2 new comments -
[DO NOT MERGE]: Service BPF map reconciliation using StateDB
#31035 commented on
Apr 15, 2024 • 1 new comment -
docs: macOS install steps for cilium cli used incorrect brace expansion
#31261 commented on
Apr 17, 2024 • 1 new comment -
build images: deprecate SBOM attachments and use SBOM attestations
#31027 commented on
Apr 17, 2024 • 1 new comment -
docs: document logOptions in cilium install
#30514 commented on
Apr 17, 2024 • 1 new comment -
proxy: Re-enable proxy rule installation in tunnel mode
#31280 commented on
Apr 16, 2024 • 1 new comment -
Fqdn proxy metrics
#31302 commented on
Apr 12, 2024 • 1 new comment -
bpf: shuffle some IPsec code around
#31390 commented on
Apr 15, 2024 • 1 new comment -
IPsec key rotation action improved with Cilium CLI encrypt
#31446 commented on
Apr 18, 2024 • 1 new comment -
Ingress/Gateway API: merge Envoy listeners for HTTP(S) and TLS passthrough
#31646 commented on
Apr 15, 2024 • 1 new comment -
feat/make etcd user config standarized w/ mesh config
#31655 commented on
Apr 15, 2024 • 1 new comment -
Update vishvananda/netlink
#31671 commented on
Apr 15, 2024 • 1 new comment -
xfrm: add rules for encrypt overlay
#31757 commented on
Apr 16, 2024 • 1 new comment -
endpoint / ApplyPolicyMapChanges: fix incorrect comment
#31790 commented on
Apr 15, 2024 • 1 new comment -
loader: remove CompileAndLoad
#31792 commented on
Apr 17, 2024 • 1 new comment -
CI: Conformance Ginkgo: E2E Test (1.29, f06-agent-policy-basic): "unable to queue endpoint build"
#31827 commented on
Apr 16, 2024 • 1 new comment -
CI: Conformance E2E - echo-ingress-mutual-auth-spiffe/pod-to-pod/curl-ipv6-3
#26351 commented on
Apr 16, 2024 • 1 new comment -
CFP: Configurable HTTP/gRPC request timeout options for north-south traffic (GatewayAPI/Ingress)
#23798 commented on
Apr 16, 2024 • 1 new comment -
CiliumNetworkPolicy: match endpoint by namespace label does not work
#30149 commented on
Apr 16, 2024 • 1 new comment -
CiliumEgressGatewayPolicy seems not working as expected with IPSec VPN.
#30747 commented on
Apr 16, 2024 • 1 new comment -
make Cilium to optionally prefer external IPs
#31902 commented on
Apr 15, 2024 • 1 new comment -
bug: endpoint regeneration proceeds before policy synchronization has completed
#31865 commented on
Apr 15, 2024 • 1 new comment -
uninstalled cilium, but core-dns pods can't start - unable to connect to Cilium daemon
#27715 commented on
Apr 15, 2024 • 1 new comment -
Per-endpoint-routes masquerades client IP with L7 policy
#28812 commented on
Apr 15, 2024 • 1 new comment -
CI: Ingress Conformance Test: An Ingress with mixed path rules should send traffic to the matching backend service where Exact is preferred
#30281 commented on
Apr 15, 2024 • 1 new comment -
arm64 on azure arm64 nodes
#30760 commented on
Apr 15, 2024 • 1 new comment -
Bug: hubble-relay fails if there is a wildcard DNS entry and a DNS search domain on nodes
#31898 commented on
Apr 14, 2024 • 1 new comment -
Reported cilium memory usage seems high
#28772 commented on
Apr 14, 2024 • 1 new comment -
CFP: `HTTPRoute` `ExtensionRef` support for arbitrary L7 Envoy filters
#30587 commented on
Apr 14, 2024 • 1 new comment -
single ip allocation and use of multiple ports on multiple service not working as expected
#30692 commented on
Apr 14, 2024 • 1 new comment -
CFP: External endpoints
#31768 commented on
Apr 13, 2024 • 1 new comment -
Behavior Change between 1.10 and later versions - packets exiting via the interface they arrived on.
#31794 commented on
Apr 12, 2024 • 1 new comment -
Traffic to Service with no endpoints is dropped
#31786 commented on
Apr 12, 2024 • 1 new comment -
Cilium-agent incorrectly handles rollouts of statefulsets
#30409 commented on
Apr 12, 2024 • 1 new comment -
NodePort Services do not work with new Node addresses
#24481 commented on
Apr 12, 2024 • 1 new comment -
Loadbalancer not cleaning/clearing IP's
#30078 commented on
Apr 16, 2024 • 1 new comment -
ci-e2e: Enable Ingress connectivity tests for more setups
#29620 commented on
Apr 18, 2024 • 1 new comment -
CI: pod-to-ingress-service-allow-ingress-identity/pod-to-ingress-service: failed: error with exec request: exit code 28
#29904 commented on
Apr 16, 2024 • 1 new comment -
ToFQDN: consider shortcutting wildcard selector
#30810 commented on
Apr 17, 2024 • 1 new comment -
Cilium 1.15.2 does not start on Kubernetes 1.29 dual-stack cluster
#31463 commented on
Apr 18, 2024 • 1 new comment -
IP collision between pod and cilium_host interface when in aws-cni chained mode
#30682 commented on
Apr 17, 2024 • 1 new comment -
1.15.x: hubble-ui: envoy refuses to connect to nginx
#29985 commented on
Apr 18, 2024 • 1 new comment -
Socket-lb: Handling active connections to legacy backends when using ciliumlocalredirectpolicies.
#31012 commented on
Apr 17, 2024 • 1 new comment -
Cilium 1.16.0-pre.1 breaks with VLAN interfaces containing dots
#31813 commented on
Apr 17, 2024 • 1 new comment -
Cilium removes agent-not-ready taint too early
#29405 commented on
Apr 17, 2024 • 1 new comment -
CFP: GatewayAPI TCPRoute support
#30089 commented on
Apr 18, 2024 • 1 new comment -
hubble: add trace reason support in hubble flows
#31226 commented on
Apr 17, 2024 • 0 new comments -
datapath: Fix redirect from L3 netdev to tunnel
#30886 commented on
Apr 13, 2024 • 0 new comments -
[agent] Implement Temporary Security Identity Allocation
#30605 commented on
Apr 16, 2024 • 0 new comments -
CFP: Seamless migration from KVStore to CRD identity allocation mode
#30689 commented on
Apr 12, 2024 • 0 new comments -
Operator manages identities - full implementation
#30356 commented on
Apr 14, 2024 • 0 new comments -
datapath: Remove LoadBalancerNodeAddresses & LocalAddresses methods
#30458 commented on
Apr 12, 2024 • 0 new comments -
Dependency Dashboard
#22100 commented on
Apr 18, 2024 • 0 new comments -
WIP: CI (update once cli repo is merged with cilium)
#31388 commented on
Apr 12, 2024 • 0 new comments -
hubble metrics not correctly deleted when pods are removed.
#31889 commented on
Apr 15, 2024 • 0 new comments -
Cilium fails consuming map options written as JSON format (or any format for api-rate-limit in 1.15+) in config-dir when a config file exists
#31894 commented on
Apr 15, 2024 • 0 new comments -
helm: Adding initContainer to Envoy Daemonset
#31706 commented on
Apr 12, 2024 • 0 new comments -
chore(deps): update all lvh-images main (main) (patch)
#31574 commented on
Apr 11, 2024 • 0 new comments -
docs: Document Cilium's documentation build framework
#27098 commented on
Apr 16, 2024 • 0 new comments