3 Releases published by 1 person

• v1.17.1 1.17.1

  published Feb 18, 2025

• v1.15.14 1.15.14

  published Feb 18, 2025

• v1.16.7 1.16.7

  published Feb 18, 2025

86 Pull requests merged by 39 people

• Azure IPAM: Single instance resync

  #37430 merged Feb 24, 2025

• ariane: Stop running v1.14 GitHub workflows

  #37807 merged Feb 24, 2025

• CODEOWNERS: Assign ownership for cloud teams

  #37781 merged Feb 24, 2025

• envoy: Make xDS server endpoint policy restore wait more robust

  #37658 merged Feb 24, 2025

• feat(helm): Allow for referencing k8sServiceHost config instead of lookup

  #37305 merged Feb 24, 2025

• Remove external workloads related leftovers

  #37737 merged Feb 24, 2025

• helm: Add IPv6 address configuration for envoy metrics

  #37818 merged Feb 24, 2025

• api: Conditionally register GatewayAPI related CRDs

  #37767 merged Feb 24, 2025

• gateway-api: Support LoadBalancerSourceRangesPolicy in CGCC

  #37792 merged Feb 24, 2025

• gateway-api: Reconcile for All Routes changes

  #37798 merged Feb 24, 2025

• Update connectivity tests to correctly detect TLS Interception

  #37796 merged Feb 24, 2025

• cilium-cli/sysdump: relax extra-label-selectors to target all namespaces

  #37715 merged Feb 23, 2025

• chore(deps): update all github action dependencies (main) (patch)

  #37811 merged Feb 23, 2025

• cilium: Pull in vxlan netlink Go fix and uncomment assertion in test

  #37808 merged Feb 22, 2025

• chore(deps): update all-dependencies (main)

  #37768 merged Feb 21, 2025

• cilium: Allow to configure tunnel source port range

  #37777 merged Feb 21, 2025

• images/hubble-relay: remove grpc-health-probe binary

  #37806 merged Feb 21, 2025

• envoy: Remove service/trace/v3 import

  #37771 merged Feb 21, 2025

• ci: add runtime prefix to env var

  #37802 merged Feb 21, 2025

• v1.16 Backports 2025-02-21

  #37801 merged Feb 21, 2025

• v1.15 Backports 2025-02-21

  #37800 merged Feb 21, 2025

• chore(deps): update dependency cilium/cilium-cli to v0.17.0 (v1.17)

  #37793 merged Feb 21, 2025

• v1.17 Backports 2025-02-19

  #37742 merged Feb 21, 2025

• chore(deps): update dependency cilium/cilium-cli to v0.17.0 (main)

  #37786 merged Feb 21, 2025

• modularise namemanager

  #37644 merged Feb 21, 2025

• .github: Use dedicated go cache on CI

  #37783 merged Feb 21, 2025

• cli: Attribute test failures outside of action failures

  #37757 merged Feb 20, 2025

• cli:connectivity: fix egress dev on aws-cni for pod-to-pod-encryption-v2

  #37680 merged Feb 20, 2025

• CODEOWNERS: Assign EKS to ipsec as well

  #37719 merged Feb 20, 2025

• v1.15 Backports 2025-02-19

  #37744 merged Feb 20, 2025

• identity: fix bug where fromNodes could be used to allow custom endpoint

  #36657 merged Feb 20, 2025

• v1.17 Backports 2025-02-14

  #37648 merged Feb 20, 2025

• Policy: Fix auth policies with proxy redirects

  #37685 merged Feb 20, 2025

• bpf: host: defer dmac rewrite in from-host path

  #37324 merged Feb 20, 2025

• operator: promote invalid policy from debug to error level

  #37356 merged Feb 20, 2025

• v1.16 Backports 2025-02-19

  #37743 merged Feb 20, 2025

• helm chart: allow non-privileged deployment by modifying BPF automount

  #37733 merged Feb 20, 2025

• CODEOWNERS: Datapath owns fragmentation docs

  #37770 merged Feb 20, 2025

• proxy: introduce slog logger for proxy package

  #37684 merged Feb 20, 2025

• .github: Run BPF Linters on changes to infra

  #37755 merged Feb 20, 2025

• lint-build-commits: Skip full Hubble build for intermediate commits

  #37750 merged Feb 20, 2025

• datapath: configuration using type-safe Go structs

  #36991 merged Feb 20, 2025

• fix(metrics): fix up helm charts if-conditions for dynamic metrics

  #37543 merged Feb 19, 2025

• release: post release bumps

  #37720 merged Feb 19, 2025

• ci: increase global timeout for Envoy Embedded github action workflow

  #37752 merged Feb 19, 2025

• bgp: report reconcile errors in CiliumBGPNodeConfig conditions.

  #37486 merged Feb 19, 2025

• egressgw: optimize removal of unused egress rules

  #37714 merged Feb 19, 2025

• v1.16: gh/workflows: Remove conformance-externalworkloads

  #37739 merged Feb 19, 2025

• v1.17: gh/workflows: Remove conformance-externalworkloads

  #37738 merged Feb 19, 2025

• v1.15: gh/workflows: Remove conformance-externalworkloads

  #37740 merged Feb 19, 2025

• bpf: nat: cosmetic improvements for snat_v*_needs_masquerade()

  #37547 merged Feb 19, 2025

• Enable dual stack k8s conformance testing

  #37559 merged Feb 19, 2025

• bpf: host: don't apply Bandwidth-Manager twice on EGW traffic

  #37674 merged Feb 19, 2025

• Revert "contrib: Run builder script as non-root by default"

  #37736 merged Feb 19, 2025

• ci-aks: Enable dual-stack in Conformance AKS

  #37704 merged Feb 19, 2025

• envoy: Clean-up imported resources

  #37731 merged Feb 19, 2025

• daemon,k8s: ServiceCache interface in preparation for adapter

  #37696 merged Feb 19, 2025

• contrib: Reuse local build caches for builder.sh

  #37688 merged Feb 19, 2025

• docs: Correct the release table format

  #37728 merged Feb 19, 2025

• envoy: remove duplicated service/endpointslice informers

  #37683 merged Feb 18, 2025

• chore(deps): update all-dependencies (main)

  #37660 merged Feb 18, 2025

• cilium: Remove deprecated lb-only mode for plain docker

  #37490 merged Feb 18, 2025

• Revert "cli: Use error def of github.com/cilium/ebpf"

  #37687 merged Feb 18, 2025

• Cilium CLI IPsec fixes

  #37018 merged Feb 18, 2025

• cilium-cli: re-fix GITHUB_WORKFLOW_REF parsing

  #37707 merged Feb 18, 2025

• Release Hubble UI v0.13.2

  #37631 merged Feb 18, 2025

• MAINTAINERS: Add Marco

  #37717 merged Feb 18, 2025

• install: Update image digests for v1.16.7

  #37709 merged Feb 18, 2025

• install: Update image digests for v1.15.14

  #37710 merged Feb 18, 2025

• fix(helm): multiPoolPreAllocation fix conditional avoid null

  #37585 merged Feb 18, 2025

• hubble: accurately report startup failure reason from cilium status

  #37567 merged Feb 18, 2025

• v1.16 Backports 2025-02-14

  #37647 merged Feb 18, 2025

• cilium-cli: enable websockets for k8s exec

  #37538 merged Feb 18, 2025

• gateway-api: Add support for ParametersRef in GatewayClass

  #37402 merged Feb 18, 2025

• helm: add configuration for node-labels

  #36662 merged Feb 18, 2025

• bugtool: document removal of k8s-mode in upgrade guide

  #37699 merged Feb 18, 2025

• fix(helm): Fix Envoy log format to prevent crash

  #37656 merged Feb 18, 2025

• Prepare for release v1.15.14

  #37695 merged Feb 18, 2025

• fix(helm): duplicate label maps and missing commonlabels

  #37693 merged Feb 18, 2025

• vendor: Bump hive&statedb

  #37697 merged Feb 18, 2025

• Remove External Workload

  #37418 merged Feb 18, 2025

• cilium-dbg: output parentIfIndex in bpf endpoint list

  #37398 merged Feb 18, 2025

• bpf: monitor: hubble: wireguard: add TRACE_{FROM/TO}_CRYPTO

  #34958 merged Feb 18, 2025

• v1.15 Backports 2025-02-14

  #37646 merged Feb 18, 2025

• cilium-cli: Fix GITHUB_WORKFLOW_REF parsing

  #37686 merged Feb 17, 2025

• chore(deps): Bump cilium/proxy to the latest

  #37635 merged Feb 17, 2025

49 Pull requests opened by 32 people

• ci: Run -race image for operator

  #37698 opened Feb 18, 2025

• helm: allow to disable hubble

  #37703 opened Feb 18, 2025

• experimental: ServiceCache/ServiceManager adapters, LocalRedirectPolicy support

  #37706 opened Feb 18, 2025

• [DONT MERGE] test IPSec+L7+IPv6 MTU overhead while rotating key

  #37708 opened Feb 18, 2025

• bpf: support ipv6 egressgateway policies

  #37713 opened Feb 18, 2025

• Standardize hubble and cilium CLIs makefile

  #37716 opened Feb 18, 2025

• cli,ipsec: create key command

  #37722 opened Feb 18, 2025

• IPsec VinE Implementation

  #37723 opened Feb 18, 2025

• bpf: fib: always use bpf_redirect_neigh() when available

  #37725 opened Feb 18, 2025

• Test IPv6

  #37726 opened Feb 18, 2025

• docs: add fragmentation docs

  #37730 opened Feb 19, 2025

• envoy: introduce slog logger for envoy package - part 1

  #37735 opened Feb 19, 2025

• SocketLB: Terminate connections for services with mixed protocols

  #37745 opened Feb 19, 2025

• bpf:nat: Restore ORG NAT entry if it's not found

  #37747 opened Feb 19, 2025

• Extend cilium-cli connectivity perf to allow testing egress gateway performance

  #37748 opened Feb 19, 2025

• fix: support iptables 1.8.10, which returns a wrong error message

  #37749 opened Feb 19, 2025

• Egress Gateway performance testing

  #37753 opened Feb 19, 2025

• ci: run build steps as concurrent jobs in lint-build-commits

  #37754 opened Feb 19, 2025

• contrib: Reverse default for running builder as root

  #37756 opened Feb 19, 2025

• Fix darwin(macOS) contrib/scripts/builder.sh error

  #37760 opened Feb 20, 2025

• bgpv2: Promote BGPv2 CRDs to v2 API version

  #37765 opened Feb 20, 2025

• bpf: nat: support ICMPV6_DEST_UNREACH in egress path

  #37766 opened Feb 20, 2025

• Remove unnecessary nil checks in `pkg/azure/api`

  #37769 opened Feb 20, 2025

• cilium-cli: Ignore k8s client network error warning

  #37773 opened Feb 20, 2025

• namemanager efficiency improvements

  #37774 opened Feb 20, 2025

• cilium-dbg: Fix map not found bugs on IPv6-only clusters

  #37787 opened Feb 20, 2025

• gateway-api: use correct ip for GAMMA traffic

  #37788 opened Feb 20, 2025

• feat: add scrapeTimeout to serviceMonitors in helm

  #37789 opened Feb 20, 2025

• chore(deps): update dependency cilium/cilium-cli to v0.17.0 (v1.16)

  #37794 opened Feb 21, 2025

• chore(deps): update dependency cilium/cilium-cli to v0.17.0 (v1.15)

  #37795 opened Feb 21, 2025

• [v1.17] ci: enable conn-disrupt-test for NS traffic

  #37797 opened Feb 21, 2025

• cilium-cli: Only use --curl-parallel when expecting success

  #37803 opened Feb 21, 2025

• chore(deps): update all-dependencies (main)

  #37810 opened Feb 23, 2025

• netkit: Don't let systemd change the MAC address

  #37812 opened Feb 23, 2025

• fix(deps): update aws-sdk-go-v2 monorepo (main)

  #37813 opened Feb 23, 2025

• fix(deps): update module github.com/azure/azure-sdk-for-go/sdk/azidentity to v1.8.2 (main)

  #37814 opened Feb 23, 2025

• chore(deps): update all github action dependencies (main)

  #37815 opened Feb 23, 2025

• Stop TLS Interception config being included in preflight

  #37820 opened Feb 24, 2025

• gateway-api: Add docs for GatewayClass parameters

  #37821 opened Feb 24, 2025

• cli: connectivity: Log tcpdump cmd on error

  #37822 opened Feb 24, 2025

• cilium-cli/connectivity: only check container restarts on v1.17+

  #37823 opened Feb 24, 2025

• datapath/linux: Refactor device controller tests to use scripttest

  #37826 opened Feb 24, 2025

• Fix cilium-agent unable to start on IPv6-only cluster

  #37827 opened Feb 24, 2025

• Conformance upgrade of k8s version to 1.32 for eks & gke

  #37828 opened Feb 24, 2025

• Add Entrywan to USERS.md

  #37829 opened Feb 24, 2025

• chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security] (main)

  #37832 opened Feb 24, 2025

• chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security] (v1.17)

  #37833 opened Feb 24, 2025

• chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security] (v1.16)

  #37834 opened Feb 24, 2025

• chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security] (v1.15)

  #37835 opened Feb 24, 2025

44 Issues closed by 16 people

• CI: Cilium E2E Upgrade: `index out of range` in `podToPodMissingIPCache`

  #37780 closed Feb 24, 2025

• Not possible to dynamically add k8sServiceEndpoint in Helm chart

  #37276 closed Feb 24, 2025

• Cilium Envoy Prometheus Metrics on IPv6-only Cluster - Helm Chart

  #37816 closed Feb 24, 2025

• connectivity: Extend encryption interface derivation for managed K8s

  #37675 closed Feb 24, 2025

• CFP: Document how to disable Cilium init containers

  #21983 closed Feb 22, 2025

• possible extra encapsulation when accessing nodeport service via external wireguard interface

  #26128 closed Feb 22, 2025

• Store a running log of the last 1h of metrics data

  #29756 closed Feb 22, 2025

• Layer 7 Traffic Dropped when using AWS CNI chaining and Security Groups

  #29922 closed Feb 22, 2025

• `cilium bpf metrics list` fails when preallocate-bpf-maps=true

  #31501 closed Feb 22, 2025

• Cilium Egress Masquerade does not work if pod is local

  #34216 closed Feb 22, 2025

• DNS resolution lag when rule is on CiliumClusterwideNetworkPolicy

  #34319 closed Feb 22, 2025

• CFP: Port Forward autoconfiguration at the external NAT gateway support for L2 LoadBalancer

  #34560 closed Feb 22, 2025

• kvstore doesn't watch cluster-configs

  #37701 closed Feb 21, 2025

• Fatal Error in Cilium Agent due to Unexpected Return PC

  #36741 closed Feb 21, 2025

• CI: AWS-CNI: pod-to-pod-encryption-v2/pod-to-pod-encryption-v2/curl-ipv4 : Expected to capture packets, but none found. This check might be broken.

  #37682 closed Feb 20, 2025

• bpf.autoMount.enabled breaks connectivity if false

  #37732 closed Feb 20, 2025

• CFP: allow using NodePort type service for Gateway API's Gateway

  #27273 closed Feb 20, 2025

• Unify datapath configuration infrastructure

  #30893 closed Feb 20, 2025

• Make the `conformance-k8s-kind` CI workflow DualStack enabled

  #37144 closed Feb 19, 2025

• Make the `conformance-aks` workflow DualStack enabled

  #37142 closed Feb 19, 2025

• stand-alone lb doesn't work work with dsr geneve encapsulation

  #34723 closed Feb 19, 2025

• CI: PANIC package: github.com/cilium/cilium/operator/pkg/bgpv2 • Test_NodeLabels

  #36354 closed Feb 19, 2025

• Revise bpffs auto-mounting mechanism within the Cilium agent

  #36401 closed Feb 19, 2025

• Egress traffic blocked even after setting enableDefaultDeny.egress to false

  #37729 closed Feb 19, 2025

• CFP: Support ParametersReference in GatewayClass

  #21923 closed Feb 18, 2025

• CI: Conformance EKS (ci-eks): IPSec key rotation: no-ipsec-xfrm-errors

  #32290 closed Feb 18, 2025

• CI: Cilium Cluster Mesh upgrade (ci-clustermesh): `(*ConnectivityTest).LogOwners` panic

  #37705 closed Feb 18, 2025

• CI: Conformance IPsec E2E: Setup & Test (8, bpf-next-20240711.013133, none, true, vxlan, true, true, gcm(aes), gcm(aes)): bpftrace output is not empty

  #37519 closed Feb 18, 2025

• Gateway API TLSRoute: potential bug with ciliumEnvoyConfig (routing doesn't work)

  #37609 closed Feb 18, 2025

• Helm: bootstrap-config.yaml parsing error leads to cilium-envoy daemonset crash

  #37653 closed Feb 18, 2025

• Error in template when using `envoy.log.format_json` with Helm Chart

  #37470 closed Feb 18, 2025

• Helm: YAML-to-JSON Conversion Error Due to Improper Escaping in Envoy Log Config

  #37655 closed Feb 18, 2025

• Add explicit IPv6 testing to `CiliumHealth` cilium-cli connectivity test scenario

  #37141 closed Feb 18, 2025

• cilium-dbg: output `parentIfIndex` in `bpf endpoint list`

  #37378 closed Feb 18, 2025

• enrich datapath WireGuard tracing from/to cilium_wg0

  #35280 closed Feb 18, 2025

• Unable to create endpoint: Cilium API client timeout exceeded

  #32399 closed Feb 18, 2025

• Long CNI Delete Times Caused by Conntrack Garbage Collection

  #35411 closed Feb 18, 2025

• Improve UX for viewing policy selectors

  #35857 closed Feb 18, 2025

• hubble performance: Per-IP event filtering in the datapath

  #36019 closed Feb 18, 2025

• hubble performance: Intelligent event tracing on anomalous behavior

  #36020 closed Feb 18, 2025

• Upgrade docs has issue - Causing envoy to be deployed twice

  #36130 closed Feb 18, 2025

• Cilium Cluster Wide Netowrk Policy for Kafka

  #36250 closed Feb 18, 2025

• kernel panic in eBPF program in trie_update_elem

  #36262 closed Feb 18, 2025

• endpoint: precompute policies before restoration

  #36365 closed Feb 18, 2025

31 Issues opened by 24 people

• BGP: wrong IPv6 addresses advertised over IPv4

  #37831 opened Feb 24, 2025

• Cilium agent fails to start when it does not have access to kube-system namespace

  #37830 opened Feb 24, 2025

• CI: Conformance Runtime (privileged) - TestSpireDelegateClient_GetCertificateForIdentity

  #37825 opened Feb 24, 2025

• upgrading cilium to 1.17 changes mtu of other interfaces in pods

  #37824 opened Feb 24, 2025

• cilium connectivity test(s) fail when using EKS with secondary CIDR

  #37819 opened Feb 23, 2025

• After upgrading to v1.17.1 from v1.16, Failed to start with `No IPv6 support on node as ipv6 address is nil`

  #37817 opened Feb 23, 2025

• 2.2.7 release Private network and firewall rules problem

  #37809 opened Feb 22, 2025

• CFP: Enable IPv6 on Ingress Load Balancer and Gateway API load balancer

  #37805 opened Feb 21, 2025

• CI: Cilium IPsec upgrade Setup & Test (8, bpf-next-20240711.013133, none, true, vxlan, true, true, minor) Error: bpftrace output is not empty

  #37804 opened Feb 21, 2025

• cilium-agent cannot map IP to identity if node has no IPv4 address

  #37791 opened Feb 20, 2025

• Cilium-Agent Deadlocks itself when mapping IPs to Identies if the Node IP is invalid

  #37790 opened Feb 20, 2025

• CI: Cilium E2E Upgrade: local-redirect-policy-with-node-dns: command terminated with exit code 22

  #37785 opened Feb 20, 2025

• CI: Cilium E2E Upgrade: node-to-node-encryption: Failed to execute tcpdump ... error reading from error stream: next reader: websocket: close 1006 (abnormal closure): unexpected EOF

  #37784 opened Feb 20, 2025

• Cilium Operator deployment successful despite misconfigured Cloud Provider credentials

  #37779 opened Feb 20, 2025

• GatewayApi cilium gateway: cross namespace secrets for https not supported

  #37778 opened Feb 20, 2025

• CFP: A generic solution to allow EKS control plane routing to webhooks under Cilium as the primary CNI in overlay mode

  #37776 opened Feb 20, 2025

• CI: TestNodeChurnXFRMLeaksEncryptedOverlay `Should NOT be empty, but was []`

  #37764 opened Feb 20, 2025

• CI: TestNodeManagerEmitStatus : panic: test timed out after

  #37763 opened Feb 20, 2025

• CFP: Limit the connectivity test "check-log-errors" to the time of the tests

  #37762 opened Feb 20, 2025

• interaction between Cilium IPAM mode and kube-controller-manager allocate-node-cidrs

  #37759 opened Feb 19, 2025

• watchers/node_taint continuosly kicks

  #37758 opened Feb 19, 2025

• Multi-Pool IPAM sometimes does not release pool pod CIDRs after IPs are no longer in use

  #37746 opened Feb 19, 2025

• Static policies are not taken to effect when bumping to 1.17.x in enforce mode

  #37724 opened Feb 18, 2025

• CI: Conformance EKS: no-ipsec-xfrm-errors/no-ipsec-xfrm-error: inbound_state_sequence

  #37721 opened Feb 18, 2025

• ci-ipsec-e2e: plain-text TCP ack (Conformance E2E IPSec: Assert that no unencrypted packets are leaked)

  #37718 opened Feb 18, 2025

• CI: Cilium IPsec upgrade (ci-ipsec-upgrade): "Network status error received, restarting client connections"

  #37712 opened Feb 18, 2025

• Policy denied happening for no reason

  #37711 opened Feb 18, 2025

• hubble is always enabled

  #37702 opened Feb 18, 2025

• gateway-api: Follow-up for ParameterRef

  #37700 opened Feb 18, 2025

• cilium-cli: check for fragmented traffic during connectivity tests

  #37692 opened Feb 18, 2025

• The vip of keepalived cannot access the nodeport.

  #37691 opened Feb 18, 2025

103 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Per-CPU policy stats

  #37591 commented on Feb 24, 2025 • 17 new comments

• Set runtime image action

  #37595 commented on Feb 24, 2025 • 14 new comments

• clustermesh: Consolidate hive

  #37620 commented on Feb 20, 2025 • 10 new comments

• bpf: lxc: ICMP fragmentation fix

  #37306 commented on Feb 23, 2025 • 7 new comments

• hubble: provide exporter builders to the cell

  #37625 commented on Feb 24, 2025 • 6 new comments

• Bgp control plane: add route aggregation feature

  #37275 commented on Feb 24, 2025 • 5 new comments

• bpf:hubble: update trace/drop notify for L2-less packets

  #37097 commented on Feb 21, 2025 • 4 new comments

• Fix creation and deletion of host port maps that would occasionally leave pods without them

  #37419 commented on Feb 24, 2025 • 3 new comments

• bpf: nat: Adding a new config field to enable SNAT for remote node. #35823

  #37568 commented on Feb 20, 2025 • 2 new comments

• kpr: Support kube-apiserver HA

  #37601 commented on Feb 24, 2025 • 1 new comment

• Updating the header file with DNS rules during policy update

  #36851 commented on Feb 24, 2025 • 0 new comments

• loader, bpf: switch to mcpu=v4 on kernels >= v6.6

  #36873 commented on Feb 20, 2025 • 0 new comments

• Emit azure API rate limits metrics

  #36919 commented on Feb 24, 2025 • 0 new comments

• deps: Bump gateway-api version to the latest

  #36926 commented on Feb 20, 2025 • 0 new comments

• policy: Batch Policy Updates into BPF Maps

  #37029 commented on Feb 20, 2025 • 0 new comments

• bpf: wireguard: move to cil_from_wireguard program

  #37084 commented on Feb 21, 2025 • 0 new comments

• metrics: Make sampling interval configurable

  #37094 commented on Feb 24, 2025 • 0 new comments

• Update link to SIG

  #37121 commented on Feb 21, 2025 • 0 new comments

• ci: evaluate new test-connection-disruption

  #37679 commented on Feb 20, 2025 • 0 new comments

• feat(datapath/hubble): IP Packet Tracing Implementation

  #36825 commented on Feb 24, 2025 • 0 new comments

• [v1.15] conformance-ipsec-upgrade: run leak check after upgrade/downgrade

  #36576 commented on Feb 22, 2025 • 0 new comments

• [v1.16] conformance-ipsec-upgrade: run leak check after upgrade/downgrade

  #36575 commented on Feb 20, 2025 • 0 new comments

• datapath: Add eni parent interface to short-cut the FIB lookup

  #36563 commented on Feb 24, 2025 • 0 new comments

• Test

  #36359 commented on Feb 24, 2025 • 0 new comments

• images: Update LLVM to 19.1.6

  #36268 commented on Feb 22, 2025 • 0 new comments

• feat: Standalone dns proxy Dockerfile

  #36215 commented on Feb 24, 2025 • 0 new comments

• feat: Standalone dns proxy

  #36214 commented on Feb 24, 2025 • 0 new comments

• feat: Standalone dns proxy - Cilium agent grpc server

  #36213 commented on Feb 24, 2025 • 0 new comments

• bpf: misc ICMPv6 ND fixes (srcip, nollsrcopt...)

  #36024 commented on Feb 24, 2025 • 0 new comments

• test: Enable IPv6 datapath_configuration tests with BPF masquerading

  #26500 commented on Feb 20, 2025 • 0 new comments

• Packets with destination ingress IP are incorrectly forwarded if not matching an active socket

  #31651 commented on Feb 20, 2025 • 0 new comments

• ipam/aws: update the assigned IPs from aws to instance map

  #37650 commented on Feb 18, 2025 • 0 new comments

• ci:bpftrace: ignore dst CiliumInternalIPs and clear traced UDP sockets

  #37642 commented on Feb 19, 2025 • 0 new comments

• datapath: Avoid using link-local IPv6 address for direct routing

  #37626 commented on Feb 24, 2025 • 0 new comments

• Set runtime image action

  #37618 commented on Feb 24, 2025 • 0 new comments

• Miscellaneous improvements to the Egress Gateway scale test

  #37611 commented on Feb 24, 2025 • 0 new comments

• GwAPI: ipFamilyPolicy support for GwAPI

  #37574 commented on Feb 18, 2025 • 0 new comments

• ci test

  #37564 commented on Feb 18, 2025 • 0 new comments

• images: update cilium-cli to solve cve-2025-0395 issue

  #37555 commented on Feb 19, 2025 • 0 new comments

• gh: ci-e2e-upgrade: Add encryption leak checks for wireguard

  #37551 commented on Feb 24, 2025 • 0 new comments

• Add explicit IPv6 testing to PodToService cilium-cli connectivity test

  #37544 commented on Feb 19, 2025 • 0 new comments

• chore(deps): update stable lvh-images (v1.16) (patch)

  #37504 commented on Feb 21, 2025 • 0 new comments

• bpf: remove dynamic map names and map macros

  #37469 commented on Feb 24, 2025 • 0 new comments

• chore(deps): update stable lvh-images (v1.15) (patch)

  #37412 commented on Feb 21, 2025 • 0 new comments

• fix(chart): cluster-name quotes in config

  #37405 commented on Feb 20, 2025 • 0 new comments

• fix FixedIdentityMapping validation logic

  #37400 commented on Feb 20, 2025 • 0 new comments

• loader: attach datapath to IPIP tunnel devices

  #37346 commented on Feb 24, 2025 • 0 new comments

• policy: clean up PolicyMap types a bit

  #37330 commented on Feb 18, 2025 • 0 new comments

• 1.18 bpf test

  #37252 commented on Feb 24, 2025 • 0 new comments

• Add cli connectivity test for NodePort traffic to host netns pods

  #37235 commented on Feb 18, 2025 • 0 new comments

• ipam/aws: enhance findSuitableSubnet logic

  #37229 commented on Feb 18, 2025 • 0 new comments

• CES: remove previously deprecated options

  #37212 commented on Feb 23, 2025 • 0 new comments

• L2Announce + Wifi Mesh Network: ARP Resolution Failed

  #37318 commented on Feb 20, 2025 • 0 new comments

• Incorrect Base Requirements for installing Cilium

  #36600 commented on Feb 20, 2025 • 0 new comments

• Ingress from Host Network is dropped due to Network Policy when using Native-Routing

  #37321 commented on Feb 20, 2025 • 0 new comments

• The SNAT/DNAT problem with injecting into another TCP session using BGP Anycast.

  #36403 commented on Feb 20, 2025 • 0 new comments

• Cloudflared QUIC support fails after upgrade to 1.17

  #37529 commented on Feb 20, 2025 • 0 new comments

• CI: Runtime Test (privileged) - Test_PodIPPoolAdvert

  #35607 commented on Feb 20, 2025 • 0 new comments

• CFP: BGP Control Plane automatic Router ID assignment for IPv6 single stack setup

  #30333 commented on Feb 20, 2025 • 0 new comments

• Set 'native-routing-cidr' automatically from 'cluster-pool-ipv4-cidr' if ipam == cluster-pool

  #12186 commented on Feb 19, 2025 • 0 new comments

• Consolidate SPI usage

  #34790 commented on Feb 19, 2025 • 0 new comments

• After upgrade Cilium to 1.16.5, 1.16.6, 1.17.x, some pods lost network connectivity

  #37271 commented on Feb 19, 2025 • 0 new comments

• Geneve DSR is broken when running w/o BPF masquerade

  #32189 commented on Feb 19, 2025 • 0 new comments

• CFP: BFD(Bidirectional Forwarding Detection) support in BGP Control plane

  #22394 commented on Feb 19, 2025 • 0 new comments

• CFP: Enable loadbalancerMode: dedicated for GatewayClass to enable more than one IP address

  #25567 commented on Feb 19, 2025 • 0 new comments

• Hostport interferes return packet of masqueraded traffic to the pod on the same port

  #34041 commented on Feb 19, 2025 • 0 new comments

• Сilium L7 LB loses traffic when rolling update

  #34991 commented on Feb 18, 2025 • 0 new comments

• development environment requires 3rd party software (fatal error: all goroutines are asleep - deadlock!)

  #37599 commented on Feb 18, 2025 • 0 new comments

• Add explicit IPv6 testing to `PodToWorld` and `PodToWorld2` cilium-cli connectivity test scenarios

  #37139 commented on Feb 18, 2025 • 0 new comments

• Cilium endpoint allocation fails when identical IP addresses exist within the cluster.

  #37459 commented on Feb 18, 2025 • 0 new comments

• Long lived unidirectional UDP connections trough a service failing to reach new endpoints

  #37577 commented on Feb 18, 2025 • 0 new comments

• Native Routing, BGP Control Plane v2 and Gateway API: Unable to access IPv6 enabled HTTP route

  #34179 commented on Feb 18, 2025 • 0 new comments

• Gateway API implementation does not correctly distinguish TLSRoutes with same hostname on different ports

  #31122 commented on Feb 18, 2025 • 0 new comments

• Gateway API: TLSRoutes erroneously attaching to HTTPS-listeners

  #32371 commented on Feb 18, 2025 • 0 new comments

• Using Gateway API as cilium-ingress's Loadbalancer is throwing 503

  #35424 commented on Feb 18, 2025 • 0 new comments

• Cilium connectivity test fails if any cilium pod in the cluster is in a non-pending state

  #36404 commented on Feb 18, 2025 • 0 new comments

• Hubble dynamic export doesn't respect compression settings

  #36669 commented on Feb 18, 2025 • 0 new comments

• Dependency Dashboard

  #33550 commented on Feb 24, 2025 • 0 new comments

• Kubevirt VMs not running with Cilium netkit enabled

  #37265 commented on Feb 24, 2025 • 0 new comments

• CI: pkg/identity/cache: level=fatal msg="Unable to connect to kvstore" error="timed out while starting the heartbeat watcher.

  #37689 commented on Feb 24, 2025 • 0 new comments

• CI: Integration Test - TestRestoredPort

  #37091 commented on Feb 24, 2025 • 0 new comments

• Tracking issue for experimental load-balancing control-plane

  #34176 commented on Feb 24, 2025 • 0 new comments

• DNS resolution in kubevirt VM not working

  #37669 commented on Feb 24, 2025 • 0 new comments

• Packets targeting the cilium health IP address possibly looping between cilium_host and cilium_net on agent restart

  #30326 commented on Feb 24, 2025 • 0 new comments

• Missing preflight documentation

  #37465 commented on Feb 24, 2025 • 0 new comments

• encapsulated mpls routes from Pods to Internet not masquerading

  #29891 commented on Feb 24, 2025 • 0 new comments

• CFP: Provide support to advertised routes as a summarized address when doing router advertistment

  #31116 commented on Feb 24, 2025 • 0 new comments

• Agent deadlocks on startup when L7 DNS proxy for nodes is enabled and kube-apiserver is a FQDN

  #35433 commented on Feb 24, 2025 • 0 new comments

• Cilium Ingress stops working after a certain period of time

  #29967 commented on Feb 24, 2025 • 0 new comments

• Secret "hubble-relay-client-certs" prevents proper Helm chart upgrades

  #32941 commented on Feb 23, 2025 • 0 new comments

• Inconsistent ip rules with BPF ip-masq-agent nonMasqueradeCIDRs

  #35501 commented on Feb 23, 2025 • 0 new comments

• Reset connection to NodePort if pod is on the same node

  #34926 commented on Feb 22, 2025 • 0 new comments

• Failing no-unexpected-packet-drops test with INGRESS - TTL exceeded

  #34995 commented on Feb 22, 2025 • 0 new comments

• Link-local address is unreachable from pod's network

  #35153 commented on Feb 22, 2025 • 0 new comments

• No IPv6 connectivity with IPSec + L7 proxy + In/Egress policies (key rotation with different size affects MTU)

  #37051 commented on Feb 21, 2025 • 0 new comments

• CFP: Expose configurable Envoy Access Logs for L7 observability and Gateway API

  #30667 commented on Feb 21, 2025 • 0 new comments

• Intermittent endpoint regeneration failure leads to DNS resolution errors in pods

  #33515 commented on Feb 21, 2025 • 0 new comments

• SSH and Node Connectivity Disruption During Cilium Upgrade to v1.16.1

  #34524 commented on Feb 21, 2025 • 0 new comments

• Cilium-Envoy stops receiving config updates once there is one invalid listener config with Gateway API

  #34982 commented on Feb 21, 2025 • 0 new comments

• L7 network policy doesn't work with GAMMA

  #37335 commented on Feb 21, 2025 • 0 new comments

• [connectivity-tests] - Throws segmentation violation -> "invalid memory address or nil pointer dereference"

  #36018 commented on Feb 20, 2025 • 0 new comments

• CI: `cilium.io/v2alpha1 CiliumNodeConfig` is still used in CI tests

  #37249 commented on Feb 20, 2025 • 0 new comments

• CI: Conformance EKS - no-errors-in-logs - Unable to assign additional IPs to interface, will create new interface

  #36428 commented on Feb 20, 2025 • 0 new comments