1 Release published by 1 person

• v1.16.0-pre.3 1.16.0-pre.3

  published Jun 3, 2024

111 Pull requests merged by 37 people

• precheck: Avoid using unbounded io.ReadAll func

  #32967 merged Jun 7, 2024

• [v1.15] bugtool: Avoid sensitive data in envoy config dump

  #32964 merged Jun 7, 2024

• [v1.14] bugtool: Avoid sensitive data in envoy config dump

  #32965 merged Jun 7, 2024

• egressgw: Stop CEGP parsing in case of non-empty invalid EgressIP

  #32868 merged Jun 7, 2024

• build(deps): bump tornado from 6.3.3 to 6.4.1 in /Documentation

  #32946 merged Jun 7, 2024

• loader: remove datapathSHA256

  #32700 merged Jun 7, 2024

• clustermesh: periodically enforce cilium cluster configuration

  #32867 merged Jun 7, 2024

• [v1.14] docs: ipsec: remove limitation for native-routing with L7 egress policy

  #32956 merged Jun 7, 2024

• [v1.15] docs: ipsec: remove limitation for native-routing with L7 egress policy

  #32955 merged Jun 7, 2024

• Documentation: straight quotes to back quotes

  #32953 merged Jun 7, 2024

• [1.15-backport] ipsec: Fix unencrypted traffic when IPsec is used with L7 egress proxy

  #32932 merged Jun 7, 2024

• helm: Decouple sysctlfix from cgroup.autoMount

  #32866 merged Jun 7, 2024

• chore(deps): update dependency cilium/hubble to v0.13.5 (v1.13)

  #32950 merged Jun 7, 2024

• chore(deps): update dependency cilium/hubble to v0.13.5 (v1.14)

  #32949 merged Jun 7, 2024

• chore(deps): update dependency cilium/hubble to v0.13.5 (v1.15)

  #32948 merged Jun 7, 2024

• [1.14-backport] ipsec: Fix unencrypted traffic when IPsec is used with L7 egress proxy

  #31976 merged Jun 7, 2024

• ci: l4lb: Don't hang on gathering logs forever

  #32947 merged Jun 7, 2024

• bpf: allow policy verdict notifications in bpf_host

  #32934 merged Jun 7, 2024

• LLVM 18 fixes batch #1

  #32918 merged Jun 7, 2024

• Document dev cycle and feature freeze

  #32929 merged Jun 7, 2024

• Remove release scripts

  #32938 merged Jun 7, 2024

• Cleanup leftovers from node statuses in CNP/CCNP

  #32877 merged Jun 6, 2024

• bgp/configmap: remove unnecessary else statement

  #32892 merged Jun 6, 2024

• iptables: Remove unneeded cell.Health param

  #32853 merged Jun 6, 2024

• clustermesh: drop clustermesh/remoteCluster circular reference

  #32900 merged Jun 6, 2024

• daemon: cleanup daemon fields

  #32880 merged Jun 6, 2024

• bpf: add test for encrypted overlay

  #32627 merged Jun 6, 2024

• chore(deps): update docker.io/library/ubuntu:22.04 docker digest to 19478ce (v1.13)

  #32926 merged Jun 6, 2024

• documentation: embed eCHO episodes in Cilium docs

  #32907 merged Jun 6, 2024

• envoy: Bump envoy version to v1.29.5

  #32915 merged Jun 6, 2024

• chore(deps): update google/cloud-sdk docker tag to v479 (v1.13)

  #32927 merged Jun 6, 2024

• [v1.15] fqdn: Forward-compatibility with Cilium 1.16 FQDN identities

  #32872 merged Jun 6, 2024

• .github: fix renovate GitHub workflow config

  #32935 merged Jun 6, 2024

• Switch to self-hosted Renovate in GHA

  #30185 merged Jun 6, 2024

• chore(deps): update docker.io/library/ubuntu:22.04 docker digest to 19478ce (v1.14)

  #32924 merged Jun 6, 2024

• chore(deps): update docker.io/library/ubuntu:22.04 docker digest to 19478ce (v1.15)

  #32922 merged Jun 6, 2024

• bpf: Remove CT_REOPENED, return CT_NEW instead

  #32653 merged Jun 6, 2024

• chore(deps): update all github action dependencies (v1.14)

  #32925 merged Jun 6, 2024

• chore(deps): update all github action dependencies (v1.15)

  #32923 merged Jun 6, 2024

• chore(deps): update go to v1.21.11 (v1.13)

  #32896 merged Jun 6, 2024

• v1.13 Backports - ipsec: cache xfrm state list

  #32884 merged Jun 5, 2024

• [v1.13] envoy: Bump envoy version to v1.28.4

  #32911 merged Jun 5, 2024

• ci: remove container scanning workflow

  #32905 merged Jun 5, 2024

• v1.13 Backports 2024-06-04

  #32887 merged Jun 5, 2024

• Introduce --force-device-detection option

  #32730 merged Jun 5, 2024

• Some minor but helpful ipcache performance improvements:

  #32876 merged Jun 5, 2024

• chore(deps): update go to v1.22.4 (main)

  #32893 merged Jun 5, 2024

• v1.15 Backports 2024-06-04

  #32889 merged Jun 5, 2024

• bpf: s/NODE_MAC/THIS_INTERFACE_MAC

  #32839 merged Jun 5, 2024

• [v1.15] envoy: Bump envoy version to v1.28.4

  #32908 merged Jun 5, 2024

• [v1.14] envoy: Bump envoy version to v1.28.4

  #32910 merged Jun 5, 2024

• Test: fix invalid network policies

  #32901 merged Jun 5, 2024

• docs: ipsec: remove limitation for native-routing with L7 egress policy

  #32906 merged Jun 5, 2024

• ingress: Add CNP example for default deny

  #31436 merged Jun 5, 2024

• v1.14 Backports - background node sync improvements

  #32874 merged Jun 5, 2024

• v1.15 Backports - ipsec: cache xfrm state list

  #32882 merged Jun 5, 2024

• v1.14 Backports - ipsec: cache xfrm state list

  #32883 merged Jun 5, 2024

• v1.13 Backports - background node sync improvements

  #32885 merged Jun 5, 2024

• v1.14 Backports 2024-06-04

  #32888 merged Jun 5, 2024

• chore(deps): update go to v1.21.11 (v1.15)

  #32894 merged Jun 5, 2024

• clustermesh: fix a few issues in the new mcs api service controller

  #32555 merged Jun 5, 2024

• ipsec: Fix unencrypted traffic when IPsec is used with L7 egress proxy

  #32683 merged Jun 5, 2024

• fix(deps): update all go dependencies main (main)

  #32856 merged Jun 5, 2024

• chore(deps): update go to v1.21.11 (v1.14)

  #32895 merged Jun 5, 2024

• cleanup: untangle unnecessarily complex policy initialization

  #32813 merged Jun 5, 2024

• gha: Correct skipped test name in GatewayAPI

  #32881 merged Jun 4, 2024

• install: Update image digests for v1.13.16

  #32547 merged Jun 4, 2024

• xfrm: add rules for encrypt overlay

  #31757 merged Jun 4, 2024

• (v1.15) Bump go-jose

  #32869 merged Jun 4, 2024

• Add GAMMA support to Cilium Operator

  #32744 merged Jun 4, 2024

• envoy: Update to pick up fixes

  #32864 merged Jun 4, 2024

• Add WSO2 to the cilium users

  #32850 merged Jun 4, 2024

• README: Update releases

  #32861 merged Jun 4, 2024

• cgroup manager: introduce hive cell

  #32799 merged Jun 4, 2024

• Fix incompatibility issue between Egress Gateway and L7 Policy

  #32828 merged Jun 4, 2024

• ingress: Support headless service

  #32644 merged Jun 4, 2024

• helm: allow configuring the clustermesh-apiserver storage medium

  #32823 merged Jun 4, 2024

• docs: Fix CRD compatibility table references

  #32859 merged Jun 4, 2024

• LRP: Add explicit dependency to k8s ServiceCache

  #32796 merged Jun 4, 2024

• ClusterMesh: improve validation of remote endpoints and identities

  #32785 merged Jun 4, 2024

• .github/workflows: fix digests file creation

  #32860 merged Jun 4, 2024

• Prepare for release v1.16.0-pre.3

  #32857 merged Jun 3, 2024

• chore(deps): update all lvh-images main to bpf-next-20240529.013128 (main) (patch)

  #32830 merged Jun 3, 2024

• v1.15 Backports 2024-05-30

  #32802 merged Jun 3, 2024

• chore(deps): update gcr.io/etcd-development/etcd docker tag to v3.5.14 (main)

  #32832 merged Jun 3, 2024

• chore(deps): update all github action dependencies (v1.13)

  #32845 merged Jun 3, 2024

• chore(deps): update stable lvh-images (v1.13) (patch)

  #32844 merged Jun 3, 2024

• chore(deps): update hubble cli to v0.13.4 (v1.13)

  #32837 merged Jun 3, 2024

• k8s: remove unused policyRepository from k8swatcher

  #32773 merged Jun 3, 2024

• fix(deps): update all go dependencies main (main)

  #32743 merged Jun 3, 2024

• Add dispatch for fqdn_perf test

  #32762 merged Jun 3, 2024

• Set informational Network Policy validation condition in the operator.

  #32727 merged Jun 3, 2024

• policy: skip client side validation of policies that can't be validated

  #31924 merged Jun 3, 2024

• bugtool: Deduplicate tc qdisc commands

  #32455 merged Jun 3, 2024

• renovate: ignore dependency github.com/google/go-licenses

  #32848 merged Jun 3, 2024

• gha: correctly trigger integration tests via ariane commands

  #32843 merged Jun 3, 2024

• pkg/endpoint: make identity resolver use the current revision

  #32817 merged Jun 3, 2024

• ipsec: cache xfrm state list

  #32588 merged Jun 3, 2024

• chore(deps): update all github action dependencies (v1.14)

  #32842 merged Jun 3, 2024

• chore(deps): update gcr.io/etcd-development/etcd docker tag to v3.5.14 (v1.15)

  #32838 merged Jun 3, 2024

• clustermesh: forbid connecting to cluster with same ID as local

  #32753 merged Jun 3, 2024

• chore(deps): update all github action dependencies (v1.15)

  #32841 merged Jun 3, 2024

• chore(deps): update all github action dependencies (main)

  #32834 merged Jun 3, 2024

• chore(deps): update golangci/golangci-lint docker tag to v1.59.0 (main)

  #32833 merged Jun 3, 2024

• chore(deps): update dependency cilium/cilium-cli to v0.16.9 (main)

  #32831 merged Jun 3, 2024

• chore(deps): update dependency cilium/cilium-cli to v0.16.9 (v1.14)

  #32836 merged Jun 3, 2024

• chore(deps): update dependency cilium/cilium-cli to v0.16.9 (v1.15)

  #32835 merged Jun 3, 2024

• Remove deprecated `hubble.ui.securityContext.enabled` from hubble-ui

  #32338 merged Jun 3, 2024

• NAT source port metrics & table

  #32152 merged Jun 3, 2024

• Add port to Hubble peer's change notifications

  #32729 merged Jun 3, 2024

• lbmap: Fix skip_lb map iteration callback

  #32822 merged Jun 3, 2024

35 Pull requests opened by 23 people

• bpf: nodeport: remove revDNAT for local backends in bpf_lxc

  #32840 opened Jun 3, 2024

• [DRAFT] daemon: Move PolicyAdd/PolicyRemove into policy manager cell

  #32847 opened Jun 3, 2024

• Policy repository: use SelectorCache to determine subject pods

  #32849 opened Jun 3, 2024

• hubble: node labels

  #32851 opened Jun 3, 2024

• ui: v0.13.1 release

  #32852 opened Jun 3, 2024

• resource: Proof-of-concept Resource[T] StateDB implementation

  #32854 opened Jun 3, 2024

• bpf, CI: Enable LRP connectivity tests

  #32862 opened Jun 3, 2024

• dnsproxy: Pick up cilium/dns with ID retry logic

  #32870 opened Jun 4, 2024

• bpf: propagate src sec id from ingress bpf_overlay to egress bpf_host

  #32871 opened Jun 4, 2024

• `externalTrafficPolicy` configuration support for Ingress/GwAPI K8s Service

  #32873 opened Jun 4, 2024

• k8s: modularize k8s watcher

  #32878 opened Jun 4, 2024

• bpf: host: add host_egress_policy hook

  #32879 opened Jun 4, 2024

• l2-discovery: fix health reporting for link updater

  #32890 opened Jun 4, 2024

• clustermesh: enable kvstoremesh by default

  #32912 opened Jun 5, 2024

• endpoint: skip unnecessary syncPolicyMaps on first regeneration

  #32914 opened Jun 5, 2024

• etcd, clustermesh: generalize and untangle the custom dialer logic for automatic DNS name to service ClusterIP translation

  #32916 opened Jun 5, 2024

• pkg/identity: Add basic identity allocator

  #32919 opened Jun 5, 2024

• Remove etcd.managed Helm setting

  #32921 opened Jun 5, 2024

• wip debug

  #32928 opened Jun 5, 2024

• ci: Add IPsec leak detection for ci-ipsec-e2e

  #32930 opened Jun 6, 2024

• removed depreacted calls and added nolint for strings.Title

  #32936 opened Jun 6, 2024

• ipsec-tests: Fix flaky TestUpsertIPSecKeyMissing

  #32937 opened Jun 6, 2024

• bpf: transport source identity in MARK_MAGIC_OVERLAY

  #32944 opened Jun 6, 2024

• maps: nat: remove rtp.log

  #32945 opened Jun 6, 2024

• Miscellaneous improvements to clustermesh-related troubleshooting tools

  #32951 opened Jun 7, 2024

• Bandwidth map: fix missing table in reconciler config

  #32952 opened Jun 7, 2024

• ci: Prohibit concurrent execution of cleanIPSecStatesAndPolicies()

  #32954 opened Jun 7, 2024

• [draft] node garbage collection

  #32957 opened Jun 7, 2024

• pkg/identitybackend: Make sanitizeK8sLabels method public

  #32958 opened Jun 7, 2024

• pkg/identity: Move GetCIDKeyFromK8sLabels to GlobalIdentity

  #32960 opened Jun 7, 2024

• clustermesh: use EventuallyWithT in endpointslicemeshsync

  #32961 opened Jun 7, 2024

• loader: cache parsed CollectionSpec

  #32962 opened Jun 7, 2024

• v1.13 Backports 2024-06-07

  #32963 opened Jun 7, 2024

• [v1.13] bugtool: Avoid sensitive data in envoy config dump

  #32966 opened Jun 7, 2024

• v1.14 Backports 2024-06-07

  #32968 opened Jun 7, 2024

32 Issues closed by 10 people

• CI: TestControlPlane/CNPStatusNodesGC timed out

  #32903 closed Jun 6, 2024

• Remove `skip-cnp-status-startup-clean` and CNP status

  #29590 closed Jun 6, 2024

• Dependency Dashboard

  #32766 closed Jun 6, 2024

• Add renovate bot as a GitHub action

  #25457 closed Jun 6, 2024

• CI: Conformance E2E: client-egress-l7-named-port/pod-to-pod: command terminated with exit code 28 (timeout)

  #27762 closed Jun 6, 2024

• CI: K8sDatapathConfig Iptables [It] Skip conntrack for pod traffic

  #32920 closed Jun 6, 2024

• CFP: Add support for SupportGatewayPort8080 in Gateway API

  #31279 closed Jun 6, 2024

• CFP: Option to append device to autodetected devices list

  #32721 closed Jun 5, 2024

• Unencrypted traffic among nodes when IPsec is used with L7 egress proxy

  #31984 closed Jun 5, 2024

• CFP: xDS Adapter for ClusterIP Routing

  #30235 closed Jun 5, 2024

• CI: Conformance E2E (ci-e2e) - ingress tests

  #30717 closed Jun 5, 2024

• problem with new feature enforce_policy_on_l7lb

  #32755 closed Jun 4, 2024

• CFP: Implement Gateway API GAMMA constructs in Cilium Service Mesh

  #22512 closed Jun 4, 2024

• Envoy standalone DaemonSet does not pick up IPCache changes after cilium-agent restart

  #32651 closed Jun 4, 2024

• Egress gateway partially incompatible with L7 policies

  #19642 closed Jun 4, 2024

• Ingress: No healthy upstream for headless service

  #23182 closed Jun 4, 2024

• `cilium bpf metrics list` fails when preallocate-bpf-maps=true

  #31501 closed Jun 4, 2024

• CFP: bandwidth manager forward/pass metrics for each endpoint

  #31505 closed Jun 4, 2024

• Docs: Parameter used in documentation not found in Helm Chart.

  #31548 closed Jun 4, 2024

• 1.15.5: ebpf causing issues on Talos Linux (RPi4)

  #32812 closed Jun 3, 2024

• `hubble-ui` `backend` container file permissions issue on loading client cert for `hubble-relay`

  #18816 closed Jun 3, 2024

• Hubble server port (4244) should be configurable when used with Relay

  #13034 closed Jun 3, 2024

• CI: Conformance Ginkgo - matching list of errors that must be investigated

  #30336 closed Jun 3, 2024

• DSR IP Option preserved in packet forwarded to backend

  #29900 closed Jun 2, 2024

• Node lost all network connectivity on agent stop (and restart)

  #30609 closed Jun 2, 2024

• Docs: Document process for determining correct MTU

  #31423 closed Jun 2, 2024

• Docs: Add note about `kube-apiserver` port requiring the endpoint port and not the service port

  #31434 closed Jun 2, 2024

• CI: Conformance Kind Envoy Embedded / Installation and Connectivity Test: all-ingress-deny/pod-to-cidr/external-1111-0

  #31492 closed Jun 2, 2024

• L2 Announcement with custom wireguard connection refused when wg is down

  #31508 closed Jun 2, 2024

• 400 Bad Request on Gateway API with EndpointSlice

  #32811 closed Jun 1, 2024

• CI: v1.12: Suite-k8s-1.20.K8sServicesTest Checks E/W loadbalancing (ClusterIP, NodePort from inside cluster, etc) with L4 policy Tests NodePort with L4 Policy

  #30018 closed Jun 1, 2024

• CFP: Stable release with Renovate

  #32825 closed May 31, 2024

22 Issues opened by 17 people

• LocalRedirect service in an inconsistent state.

  #32970 opened Jun 7, 2024

• Improvement on Limiting Identity-Relevant Labels page

  #32969 opened Jun 7, 2024

• BPF policymap incorrectly applied for host firewall

  #32959 opened Jun 7, 2024

• CI: NAT46x64

  #32943 opened Jun 6, 2024

• cilium: big tcp setting not effective on latest kernel

  #32942 opened Jun 6, 2024

• Secret "hubble-relay-client-certs" prevents proper Helm chart upgrades

  #32941 opened Jun 6, 2024

• Excessive memory usage from cilium agents

  #32940 opened Jun 6, 2024

• CI: e2e integration for netkit

  #32939 opened Jun 6, 2024

• CI: Conformance Runtime - TestUpsertIPSecEndpoint and TestUpsertIPSecKeyMissing

  #32933 opened Jun 6, 2024

• CI: Integration tests - Test_meshEndpointSlice_Reconcile

  #32931 opened Jun 6, 2024

• CI: Conformance Ginko: Timeout while waiting for Cilium to become ready

  #32913 opened Jun 5, 2024

• Fatal error in cilium-agent on 1.16.0-pre.3 with bandwidthManager + BBR

  #32909 opened Jun 5, 2024

• CI: Conformance Runtime - TestUpdateExistingIPSecEndpoint

  #32902 opened Jun 5, 2024

• Broken connectivity of pod to remote nodeport when Wireguard is used with L7 ingress policy

  #32899 opened Jun 5, 2024

• Broken connectivity of pod to remote nodeport when IPsec is used with L7 ingress policy

  #32897 opened Jun 5, 2024

• BGP control plane missing PodCIDR advertisements on some nodes.

  #32886 opened Jun 4, 2024

• Cilium Gateway ignores Addresses

  #32865 opened Jun 4, 2024

• SIGSEGV segmentation violation on startup - cmd.coalesceCIDRs

  #32855 opened Jun 3, 2024

• CrashLoopBackoff for operator pods on v1.15.5

  #32846 opened Jun 3, 2024

• Intermittent 403 Errors After Cilium Upgrade

  #32829 opened Jun 2, 2024

• Erroneous documentation instructions, related to Hubble configuration

  #32827 opened Jun 1, 2024

• Cosmetic: BGPv1 Control Plane accepts BGP Paths that have no effect

  #32826 opened Jun 1, 2024

115 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• envoy/xds: Await until endpoint restoration is done

  #32824 commented on Jun 7, 2024 • 34 new comments

• cilium: netkit support

  #32429 commented on Jun 7, 2024 • 34 new comments

• feat: Watch and Read cilium network policies from static directory path

  #32599 commented on Jun 5, 2024 • 17 new comments

• CES scale test: prelim testing for 5k scale test

  #32800 commented on Jun 6, 2024 • 16 new comments

• fqdn: Improve performance by using selectors as labels

  #32769 commented on Jun 6, 2024 • 13 new comments

• gateway-api: Bump to version v1.1.0

  #32233 commented on Jun 7, 2024 • 12 new comments

• Adding support for TrafficDistribution

  #32678 commented on Jun 7, 2024 • 12 new comments

• images: Update LLVM to 18.1.6

  #32816 commented on Jun 7, 2024 • 9 new comments

• docs: Document enable-node-selector-labels flag

  #31188 commented on Jun 6, 2024 • 9 new comments

• Active connection tracking in ebpf

  #32584 commented on Jun 7, 2024 • 8 new comments

• ci: add tests for migration to CiliumEndpointSlice

  #32268 commented on Jun 7, 2024 • 7 new comments

• CFP: Improve `auto-direct-node-routes` to not exit when node is outside of subnet

  #31124 commented on Jun 4, 2024 • 6 new comments

• [1.13-backport] ipsec: Fix unencrypted traffic when IPsec is used with L7 egress proxy

  #31977 commented on Jun 7, 2024 • 5 new comments

• CI: K8sDatapathConfig MonitorAggregation Checks that monitor aggregation restricts notifications

  #30802 commented on Jun 6, 2024 • 5 new comments

• CFP: Remove Deprecated Function Calls

  #32274 commented on Jun 4, 2024 • 4 new comments

• bpf: xdp replace inline asm in csum helpers

  #32543 commented on Jun 6, 2024 • 4 new comments

• ci-e2e: Add the coverage for Ingress + bpf.masquerade

  #32761 commented on Jun 3, 2024 • 4 new comments

• [Proof-of-concept] Table of nodes

  #32144 commented on Jun 5, 2024 • 3 new comments

• policy: Add Port Range Support for Policies 3/3

  #32807 commented on Jun 6, 2024 • 3 new comments

• images: Regenerate api/v1 when updating builder

  #32804 commented on Jun 7, 2024 • 3 new comments

• BPF masquerading doesn't allow access to Ingress-created LoadBalancer internal or external IP

  #32783 commented on Jun 4, 2024 • 3 new comments

• Race condition between Cilium and other "control plane" workloads

  #32770 commented on Jun 5, 2024 • 3 new comments

• [draft] isolate direct routing device functionality

  #32381 commented on Jun 6, 2024 • 3 new comments

• [FYI] Cilium not working on bottlerocket-v1.20

  #32610 commented on Jun 7, 2024 • 3 new comments

• datapath: Add support for skipping direct routes on different L2 networks

  #32733 commented on Jun 7, 2024 • 3 new comments

• Timeout while waiting for initial conntrack scan

  #32680 commented on Jun 6, 2024 • 3 new comments

• Logger used before being bootstrapped

  #30007 commented on Jun 6, 2024 • 2 new comments

• feat: Configuring the FQDN GC interval / Zombie timeout

  #30999 commented on Jun 4, 2024 • 2 new comments

• CFP: Forward SNAT Return Traffic back to source node

  #31762 commented on Jun 6, 2024 • 2 new comments

• The Gateway-API cannot specify the gateway listener by sectionName.

  #31717 commented on Jun 7, 2024 • 2 new comments

• CFP: Scalable node-to-node connectivity health-checking

  #32820 commented on Jun 5, 2024 • 2 new comments

• CFP: IP metrics

  #32301 commented on Jun 6, 2024 • 2 new comments

• Convert Pods, CEP, and KVStore IPcache handling over to async API

  #31409 commented on Jun 4, 2024 • 2 new comments

• CI: Cilium E2E Upgrade - no-errors-in-logs - retrieving device lxc_health: Link not found

  #32689 commented on Jun 6, 2024 • 2 new comments

• bpf: complexity-tests: split kernel capabilities into separate file

  #32161 commented on Jun 7, 2024 • 2 new comments

• CI: Ingress Conformance Test: `timed out waiting for convergence`

  #31857 commented on Jun 7, 2024 • 2 new comments

• .github: No need to install Docker in complexity-test manually anymore

  #32067 commented on Jun 7, 2024 • 2 new comments

• Wrong Cilium L2Announce Holder

  #32148 commented on Jun 7, 2024 • 2 new comments

• nodeinit pods failing in 1.15.5

  #32674 commented on Jun 4, 2024 • 2 new comments

• Requests to GatewayAPI and L2 backed service times out

  #30510 commented on Jun 4, 2024 • 2 new comments

• bpf: Replace old school header guards with #pragma once

  #32235 commented on Jun 7, 2024 • 2 new comments

• Cilium in DSR mode: Can't reach nodeport service outside cluster from remote node in self managed AWS cluster

  #26407 commented on Jun 4, 2024 • 2 new comments

• Document installation on vSphere

  #21801 commented on Jun 4, 2024 • 2 new comments

• CFP: Supporting Multi-Cluster Services API

  #27902 commented on Jun 4, 2024 • 2 new comments

• WIP: Restore NAT entry when it is evicted due to LRU.

  #32809 commented on Jun 5, 2024 • 2 new comments

• daemon: Make cilium status independent from k8s status

  #32724 commented on Jun 5, 2024 • 2 new comments

• CFP: ServiceImport auto creation for MCS-API

  #32712 commented on Jun 3, 2024 • 2 new comments

• Decouple k8s client heartbeat from connection timeout and keep alive

  #32625 commented on Jun 4, 2024 • 2 new comments

• `cilium encrypt status` fails when agents are down

  #31897 commented on Jun 3, 2024 • 2 new comments

• Cilium Gateway unexpectedly translates grpc-web requests to gRPC

  #31933 commented on Jun 7, 2024 • 1 new comment

• [v1.17] Strictly validate the cluster name format

  #32819 commented on Jun 3, 2024 • 1 new comment

• policy/api: add more CRD validations

  #32814 commented on Jun 3, 2024 • 1 new comment

• Docs: Uninstallation procedure

  #11081 commented on Jun 7, 2024 • 1 new comment

• bpf,srv6: North-South Service over SRv6 L3VPN

  #32788 commented on Jun 3, 2024 • 1 new comment

• Formally define and validate the cluster name format

  #32641 commented on Jun 6, 2024 • 1 new comment

• CFP: GatewayAPI TCPRoute support

  #30089 commented on Jun 6, 2024 • 1 new comment

• CODEOWNERS: Update for common release files

  #32327 commented on Jun 3, 2024 • 1 new comment

• Hubble: Adding structured format to configure Hubble Metrics

  #32294 commented on Jun 6, 2024 • 1 new comment

• install/kubernetes: allow extra helm resources

  #32293 commented on Jun 1, 2024 • 1 new comment

• Provides a signal to warn users when agent settings differ from Configmap

  #31101 commented on Jun 5, 2024 • 1 new comment

• identity: don't regenerate endpoints whenever an identity is allocated

  #31616 commented on Jun 7, 2024 • 1 new comment

• Skip checking precondition for host endpoint label updates

  #31735 commented on Jun 7, 2024 • 1 new comment

• CFP: Support TLS for Cilium metrics endpoint

  #32266 commented on Jun 4, 2024 • 1 new comment

• Cilium Ingress Controller responds with "403 Access denied" in `policyAuditMode=true` after upgrade to cilium v1.14.5

  #30073 commented on Jun 4, 2024 • 1 new comment

• ipam, metrics: Add capacity and used ip addresses metrics for multi-pool

  #30258 commented on Jun 4, 2024 • 1 new comment

• Egress gateway feature does not tolerate single node failure

  #18230 commented on Jun 3, 2024 • 1 new comment

• HubbleUI will not load on a Prefix

  #32001 commented on Jun 3, 2024 • 1 new comment

• Refactor `Daemon` to use mockable ipcache interface

  #22524 commented on Jun 3, 2024 • 1 new comment

• Node labels updates rejected indefinitely by host endpoint if node watcher initializes before the host endpoint is created

  #29649 commented on Jun 3, 2024 • 1 new comment

• CI: Ingress Conformance Test: An Ingress with mixed path rules should send traffic to the matching backend service where Exact is preferred

  #30281 commented on Jun 3, 2024 • 1 new comment

• Packets with destination Cilium Internal IP are incorrectly forwarded if not matching an active socket

  #31651 commented on Jun 3, 2024 • 1 new comment

• CFP: Support kube-apiserver load balancing (like kube-vip)

  #29323 commented on Jun 3, 2024 • 1 new comment

• CFP: Hubble Label to exclude namespaces/pods from metrics

  #30788 commented on Jun 3, 2024 • 1 new comment

• Unexpected behaviour when creating services with IDs > 65535

  #32758 commented on Jun 2, 2024 • 1 new comment

• CFP: Bandwidth Manager with fq_codel?

  #29083 commented on Jun 2, 2024 • 1 new comment

• config initContainer fails to contact the kube-apiserver

  #29094 commented on Jun 2, 2024 • 1 new comment

• l2podAnnouncements - Node return traffic to the network during POD termination leading to duplicate IP addresses

  #31079 commented on Jun 2, 2024 • 1 new comment

• CI: no-unexpected-packet-drops failure on Vultr with BYOCNI (cilium connectivity test)

  #31720 commented on Jun 2, 2024 • 1 new comment

• CFP: Limitation to network policies in clustermesh

  #31712 commented on Jun 1, 2024 • 1 new comment

• Make node-init depend on /bin/sh instead of /bin/bash

  #14489 commented on May 31, 2024 • 1 new comment

• Port ranges in network policies

  #16622 commented on May 31, 2024 • 1 new comment

• cilium-health server can take a long time to serve API

  #13493 commented on Jun 7, 2024 • 1 new comment

• CI: Telemetry for step trace is broken

  #32241 commented on Jun 7, 2024 • 1 new comment

• CFP: Enable direct Pod to RDS communication using Cilium and Security Groups

  #31778 commented on Jun 7, 2024 • 1 new comment

• CFP: Update Cilium Helm install docs for EKS and the AWS VPC CNI

  #31041 commented on Jun 6, 2024 • 1 new comment

• hubble metrics not correctly deleted when pods are removed.

  #31889 commented on Jun 6, 2024 • 1 new comment

• CI: Conformance Ginkgo: Client pods not ready after timeout: `timed out waiting for pods with filter -l type=client to be ready: 8m0s timeout expired`

  #32404 commented on Jun 6, 2024 • 1 new comment

• bpf-map-sync-cilium_ipcache controller starts to fail with "cannot allocate memory"

  #31701 commented on Jun 6, 2024 • 1 new comment

• CI: Conformance IPsec E2E: no-policies/pod-to-world/https-to-one.one.one.one-index-0: Resolving timed out after 2000 milliseconds

  #27799 commented on Jun 5, 2024 • 1 new comment

• Regression: Cilium drops traffic to VLAN interfaces configured on top of a bond interface

  #30593 commented on Jun 5, 2024 • 1 new comment

• Can't use Cilium Gateway API together with sidecar based ServiceMesh with Gateway API GAMMA support.

  #31274 commented on Jun 5, 2024 • 1 new comment

• Problems with coredns timeouts and pods DNS resolution with bpf.masquerade enabled

  #32489 commented on Jun 4, 2024 • 1 new comment

• failed to install iptables rules

  #31736 commented on Jun 5, 2024 • 1 new comment

• CiliumEndpoints (CEP) not always being created

  #31555 commented on Jun 5, 2024 • 1 new comment

• [v1.17] Cleanup clustermesh-related deprecated flag and kvstore key

  #32821 commented on Jun 5, 2024 • 0 new comments

• ci: deduplicate image build matrix definition

  #32022 commented on Jun 4, 2024 • 0 new comments

• CFP: Support Gateway API v1.1.0

  #32492 commented on Jun 7, 2024 • 0 new comments

• Experimental load-balancing control-plane with StateDB

  #32185 commented on Jun 3, 2024 • 0 new comments

• Cilium connectivity test failure on pod-to-ingress-service

  #28837 commented on Jun 4, 2024 • 0 new comments

• Update CEPS watchdog bpf program loaded logger

  #31936 commented on Jun 3, 2024 • 0 new comments

• Dependency Dashboard

  #30160 commented on Jun 7, 2024 • 0 new comments

• Document macros used in the datapath

  #15379 commented on Jun 2, 2024 • 0 new comments

• Allow IPSec and KubeProxyReplacement=strict (NodePort)

  #12978 commented on Jun 2, 2024 • 0 new comments

• ci: Split conn-disrupt-test action

  #32763 commented on Jun 5, 2024 • 0 new comments

• "Double Write" Identity Allocation Mode for seamless KVStore -> CRD identity migration

  #31920 commented on Jun 6, 2024 • 0 new comments

• pkg/controller: ensure latest controller params are updated

  #32726 commented on Jun 7, 2024 • 0 new comments

• Add race-detector tests back to the CI pipeline

  #26170 commented on Jun 5, 2024 • 0 new comments

• Upgrade to LLVM 18.1.6

  #32801 commented on Jun 3, 2024 • 0 new comments

• Increase usability of Makefile.override

  #32660 commented on Jun 3, 2024 • 0 new comments

• IPAM: Adds AWS ENI IPv6 Prefix Delegation Support

  #32352 commented on Jun 7, 2024 • 0 new comments

• Allow new connections to terminating pods

  #32815 commented on Jun 3, 2024 • 0 new comments

• kube-proxy-replacement=strict doesn't enable needed features like kube-proxy-replacement=true does

  #32711 commented on Jun 3, 2024 • 0 new comments

• Throw error if IPSec key changed but key ID didn't

  #14873 commented on Jun 3, 2024 • 0 new comments

• cilium: encryption, subnet IPSec mode configuration may segfault on init

  #15883 commented on Jun 3, 2024 • 0 new comments

• Store a running log of the last 1h of metrics data

  #29756 commented on Jun 3, 2024 • 0 new comments